@kya-os/mcp-i-cloudflare 1.14.7 → 1.15.0

package/dist/delegation-http/native-oauth-state.js

@@ -0,0 +1,131 @@
+import { OAuthSecurityService } from "../services/oauth-security.service";
+import { NATIVE_OAUTH_STATE_PREFIX } from "./constants";
+import { sha256Hex } from "./hash";
+import { NATIVE_OAUTH_INTERNAL_PREFIX, NATIVE_OAUTH_MAX_CIPHERTEXT, NATIVE_OAUTH_PROFILE_HEADER, NATIVE_OAUTH_STORAGE_PROFILE, } from "./native-oauth-state-do";
+export const NATIVE_OAUTH_STORAGE_TIMEOUT_MS = 5_000;
+function isObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function parseObject(text) {
+    try {
+        const value = JSON.parse(text);
+        return isObject(value) ? value : null;
+    }
+    catch {
+        return null;
+    }
+}
+async function callStateStore(stub, operation, body) {
+    const controller = new AbortController();
+    let timer;
+    const deadline = new Promise((_, reject) => {
+        timer = setTimeout(() => {
+            controller.abort();
+            reject(new Error("Native OAuth state storage unavailable"));
+        }, NATIVE_OAUTH_STORAGE_TIMEOUT_MS);
+    });
+    try {
+        return await Promise.race([
+            (async () => {
+                const response = await stub.fetch(`https://do.internal${NATIVE_OAUTH_INTERNAL_PREFIX}${operation}`, {
+                    method: "POST",
+                    headers: { "Content-Type": "application/json" },
+                    body,
+                    // Bridge the DOM and workers-types AbortSignal declarations.
+                    signal: controller.signal,
+                });
+                // The deadline includes the response body, not only its headers.
+                const text = await response.text();
+                if (text.length > NATIVE_OAUTH_MAX_CIPHERTEXT + 128)
+                    throw new Error("Native OAuth state response too large");
+                if (response.status < 300 &&
+                    response.headers.get(NATIVE_OAUTH_PROFILE_HEADER) !==
+                        NATIVE_OAUTH_STORAGE_PROFILE)
+                    throw new Error("Native OAuth state storage unsupported");
+                return {
+                    status: response.status,
+                    record: operation === "consume" && response.status === 200
+                        ? parseObject(text)
+                        : undefined,
+                };
+            })(),
+            deadline,
+        ]);
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+function stateStub(env, state) {
+    if (!env.NATIVE_OAUTH_STATE ||
+        !env.OAUTH_ENCRYPTION_SECRET ||
+        !env.CHECKPOINT_PROJECT_ID ||
+        !state.startsWith(NATIVE_OAUTH_STATE_PREFIX) ||
+        !/^[A-Za-z0-9_-]{43}$/.test(state.slice(NATIVE_OAUTH_STATE_PREFIX.length)))
+        throw new Error("Native OAuth secure state unavailable");
+    const stateHash = sha256Hex(state);
+    return {
+        stateHash,
+        stub: env.NATIVE_OAUTH_STATE.get(env.NATIVE_OAUTH_STATE.idFromName(`native-oauth:${stateHash}`)),
+    };
+}
+/** Capability check only. Creation separately verifies its atomic storage write. */
+export async function assertNativeOAuthStateReady(env) {
+    const namespace = env.NATIVE_OAUTH_STATE;
+    if (!namespace)
+        throw new Error("Native OAuth secure state unavailable");
+    const response = await callStateStore(namespace.get(namespace.idFromName("native-oauth:readiness:v1")), "ready", "{}");
+    if (response.status !== 200)
+        throw new Error("Native OAuth state storage unavailable");
+}
+/** Encrypted whole-state envelope, bound to its random key and deployment project.
+ * Uses the existing token cipher; native callers always require an explicit key.
+ */
+export async function storeNativeOAuthState(env, security, state, data, expiresAt) {
+    const { stateHash, stub } = stateStub(env, state);
+    const payload = JSON.stringify({
+        version: 1,
+        stateHash,
+        deploymentProjectId: env.CHECKPOINT_PROJECT_ID,
+        expiresAt,
+        data,
+    });
+    if (new TextEncoder().encode(payload).length > 24_000)
+        throw new Error("Native OAuth state too large");
+    const ciphertext = await security.encryptToken(payload);
+    const response = await callStateStore(stub, "create", JSON.stringify({ version: 1, ciphertext, expiresAt }));
+    if (response.status !== 201)
+        throw new Error("Native OAuth state storage unavailable");
+}
+/** No legacy/KV fallback. The durable consume commits before any decryption. */
+export async function consumeNativeOAuthState(env, state) {
+    const { stateHash, stub } = stateStub(env, state);
+    const response = await callStateStore(stub, "consume", "{}");
+    if (response.status !== 200 || !response.record)
+        return null;
+    const record = response.record;
+    if (record.version !== 1 ||
+        typeof record.expiresAt !== "number" ||
+        !Number.isSafeInteger(record.expiresAt) ||
+        record.expiresAt <= Date.now() ||
+        typeof record.ciphertext !== "string" ||
+        record.ciphertext.length > NATIVE_OAUTH_MAX_CIPHERTEXT)
+        return null;
+    const storage = env.DELEGATION_STORAGE;
+    if (!storage)
+        return null;
+    const security = new OAuthSecurityService(storage, env.OAUTH_ENCRYPTION_SECRET);
+    const envelope = parseObject(await security.decryptToken(record.ciphertext));
+    if (!envelope ||
+        envelope.version !== 1 ||
+        envelope.stateHash !== stateHash ||
+        envelope.deploymentProjectId !== env.CHECKPOINT_PROJECT_ID ||
+        envelope.expiresAt !== record.expiresAt ||
+        record.expiresAt <= Date.now() ||
+        !isObject(envelope.data) ||
+        !isObject(envelope.data.native) ||
+        envelope.data.native.expiresAt !== envelope.expiresAt)
+        return null;
+    return envelope.data;
+}
+//# sourceMappingURL=native-oauth-state.js.map

package/dist/delegation-http/native-oauth-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-oauth-state.js","sourceRoot":"","sources":["../../src/delegation-http/native-oauth-state.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAE1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,EACL,4BAA4B,EAC5B,2BAA2B,EAC3B,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,yBAAyB,CAAC;AAEjC,MAAM,CAAC,MAAM,+BAA+B,GAAG,KAAK,CAAC;AAErD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,IAAuB,EACvB,SAAyC,EACzC,IAAY;IAEZ,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,KAAgD,CAAC;IACrD,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QAChD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;QAC9D,CAAC,EAAE,+BAA+B,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,CAAC,KAAK,IAAI,EAAE;gBACV,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAC/B,sBAAsB,4BAA4B,GAAG,SAAS,EAAE,EAChE;oBACE,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI;oBACJ,6DAA6D;oBAC7D,MAAM,EAAE,UAAU,CAAC,MAAuC;iBAC3D,CACF,CAAC;gBACF,iEAAiE;gBACjE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnC,IAAI,IAAI,CAAC,MAAM,GAAG,2BAA2B,GAAG,GAAG;oBACjD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;gBAC3D,IACE,QAAQ,CAAC,MAAM,GAAG,GAAG;oBACrB,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;wBAC/C,4BAA4B;oBAE9B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;gBAC5D,OAAO;oBACL,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,MAAM,EACJ,SAAS,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;wBAChD,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC;wBACnB,CAAC,CAAC,SAAS;iBAChB,CAAC;YACJ,CAAC,CAAC,EAAE;YACJ,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,GAAkB,EAAE,KAAa;IAClD,IACE,CAAC,GAAG,CAAC,kBAAkB;QACvB,CAAC,GAAG,CAAC,uBAAuB;QAC5B,CAAC,GAAG,CAAC,qBAAqB;QAC1B,CAAC,KAAK,CAAC,UAAU,CAAC,yBAAyB,CAAC;QAC5C,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC;QAE1E,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,OAAO;QACL,SAAS;QACT,IAAI,EAAE,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAC9B,GAAG,CAAC,kBAAkB,CAAC,UAAU,CAAC,gBAAgB,SAAS,EAAE,CAAC,CAC/D;KACF,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,GAAkB;IAClE,MAAM,SAAS,GAAG,GAAG,CAAC,kBAAkB,CAAC;IACzC,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAG,MAAM,cAAc,CACnC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC,EAChE,OAAO,EACP,IAAI,CACL,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QACzB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;AAC9D,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,GAAkB,EAClB,QAA8B,EAC9B,KAAa,EACb,IAA6B,EAC7B,SAAiB;IAEjB,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;QAC7B,OAAO,EAAE,CAAC;QACV,SAAS;QACT,mBAAmB,EAAE,GAAG,CAAC,qBAAqB;QAC9C,SAAS;QACT,IAAI;KACL,CAAC,CAAC;IACH,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,MAAM;QACnD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAM,cAAc,CACnC,IAAI,EACJ,QAAQ,EACR,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CACtD,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QACzB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;AAC9D,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,GAAkB,EAClB,KAAa;IAEb,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IAC7D,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,IACE,MAAM,CAAC,OAAO,KAAK,CAAC;QACpB,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;QACpC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;QACvC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;QAC9B,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;QACrC,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,2BAA2B;QAEtD,OAAO,IAAI,CAAC;IACd,MAAM,OAAO,GAAG,GAAG,CAAC,kBAAkB,CAAC;IACvC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,QAAQ,GAAG,IAAI,oBAAoB,CACvC,OAAO,EACP,GAAG,CAAC,uBAAuB,CAC5B,CAAC;IACF,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7E,IACE,CAAC,QAAQ;QACT,QAAQ,CAAC,OAAO,KAAK,CAAC;QACtB,QAAQ,CAAC,SAAS,KAAK,SAAS;QAChC,QAAQ,CAAC,mBAAmB,KAAK,GAAG,CAAC,qBAAqB;QAC1D,QAAQ,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;QACvC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;QAC9B,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QACxB,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;QAC/B,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;QAErD,OAAO,IAAI,CAAC;IACd,OAAO,QAAQ,CAAC,IAAI,CAAC;AACvB,CAAC"}

package/dist/delegation-http/native-oauth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"native-oauth.d.ts","sourceRoot":"","sources":["../../src/delegation-http/native-oauth.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAY9C,OAAO,EAIL,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACzB,MAAM,eAAe,CAAC;AAEvB,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,mBAAmB,CAAC;IACjC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3E;AAsKD,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,aAAa,EAClB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,iBAAiB,EACvB,GAAG,EAAE,oBAAoB,EACzB,QAAQ,UAAO,GACd,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CA0EzD;AAED,oFAAoF;AACpF,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,aAAa,EAClB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,QAAQ,CAAC,CAmKnB;AAED,wBAAsB,yBAAyB,CAC7C,GAAG,EAAE,aAAa,EAClB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,iBAAiB,EACvB,GAAG,EAAE,oBAAoB,EACzB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAA;CAAE,GAAG,IAAI,CAAC,CA6BrD"}
+{"version":3,"file":"native-oauth.d.ts","sourceRoot":"","sources":["../../src/delegation-http/native-oauth.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAgB9C,OAAO,EAIL,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACzB,MAAM,eAAe,CAAC;AAEvB,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,mBAAmB,CAAC;IACjC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3E;AAsKD,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,aAAa,EAClB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,iBAAiB,EACvB,GAAG,EAAE,oBAAoB,EACzB,QAAQ,UAAO,GACd,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAkFzD;AAED,oFAAoF;AACpF,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,aAAa,EAClB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,QAAQ,CAAC,CAmKnB;AAED,wBAAsB,yBAAyB,CAC7C,GAAG,EAAE,aAAa,EAClB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,iBAAiB,EACvB,GAAG,EAAE,oBAAoB,EACzB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAA;CAAE,GAAG,IAAI,CAAC,CA6BrD"}

package/dist/delegation-http/native-oauth.js

@@ -12,6 +12,7 @@ import { makeEnvSecretResolver } from "../utils/env-secret-resolver";
 import { getAnchorStub } from "./anchor-routing";
 import { INTERNAL_PICKUP_INFO, NATIVE_OAUTH_STATE_PREFIX } from "./constants";
 import { sha256Hex } from "./hash";
+import { assertNativeOAuthStateReady, storeNativeOAuthState, } from "./native-oauth-state";
 import { nativeHolderBinding, nativeError, secureHttpUrl, } from "./native-http";
 const failure = () => nativeError("kyaos/session-mismatch", 403);
 const boundedFetch = (input, init) => fetchNativeNoRedirect(input, {
@@ -20,9 +21,9 @@ const boundedFetch = (input, init) => fetchNativeNoRedirect(input, {
 });
 async function services(env) {
     const { OAuthConfigService, OAuthService } = await import("@kya-os/mcp-i-runtime");
-    if (!env.AGENTSHIELD_API_URL ||
-        !env.AGENTSHIELD_API_KEY ||
-        !env.AGENTSHIELD_PROJECT_ID)
+    if (!env.CHECKPOINT_API_URL ||
+        !env.CHECKPOINT_API_KEY ||
+        !env.CHECKPOINT_PROJECT_ID)
         throw new Error("Native OAuth deployment configuration unavailable");
     const fetchProvider = {
         fetch: boundedFetch,
@@ -37,8 +38,8 @@ async function services(env) {
         },
     };
     const configService = new OAuthConfigService({
-        baseUrl: env.AGENTSHIELD_API_URL,
-        apiKey: env.AGENTSHIELD_API_KEY,
+        baseUrl: env.CHECKPOINT_API_URL,
+        apiKey: env.CHECKPOINT_API_KEY,
         fetchProvider,
         logger: () => { },
     });
@@ -47,9 +48,9 @@ async function services(env) {
         oauthService: new OAuthService({
             configService,
             fetchProvider,
-            agentShieldApiUrl: env.AGENTSHIELD_API_URL,
-            agentShieldApiKey: env.AGENTSHIELD_API_KEY,
-            projectId: env.AGENTSHIELD_PROJECT_ID,
+            checkpointApiUrl: env.CHECKPOINT_API_URL,
+            checkpointApiKey: env.CHECKPOINT_API_KEY,
+            projectId: env.CHECKPOINT_PROJECT_ID,
             secretResolver: makeEnvSecretResolver(env),
             logger: () => { },
         }),
@@ -57,7 +58,7 @@ async function services(env) {
 }
 async function selectedProvider(env) {
     const svc = await services(env);
-    const config = await svc.configService.getOAuthConfig(env.AGENTSHIELD_PROJECT_ID);
+    const config = await svc.configService.getOAuthConfig(env.CHECKPOINT_PROJECT_ID);
     const candidates = Object.entries(config.providers).filter(([, p]) => !!p.authorizationUrl);
     const id = config.configuredProvider ||
         (candidates.length === 1 ? candidates[0][0] : undefined);
@@ -95,7 +96,7 @@ async function providerBinding(id, provider) {
 async function anchorBinding(env, sid, info, cfg) {
     const http = info.nativeHttp;
     const origin = new URL(cfg.authorizationOrigin);
-    if (!env.AGENTSHIELD_PROJECT_ID ||
+    if (!env.CHECKPOINT_PROJECT_ID ||
         !cfg.projectId ||
         !secureHttpUrl(cfg.authorizationOrigin, cfg.allowLoopbackHttp) ||
         origin.origin !== cfg.authorizationOrigin ||
@@ -131,14 +132,17 @@ async function anchorBinding(env, sid, info, cfg) {
 }
 function hostContext(env, cfg) {
     return {
-        projectId: cfg.projectId || env.AGENTSHIELD_PROJECT_ID || "",
+        projectId: cfg.projectId || env.CHECKPOINT_PROJECT_ID || "",
         issuerDid: cfg.issuerDid,
         authorizationOrigin: cfg.authorizationOrigin,
         allowLoopbackHttp: cfg.allowLoopbackHttp === true,
     };
 }
 export async function beginNativeOAuth(env, sid, info, cfg, initiate = true) {
-    if (!env.DELEGATION_STORAGE || !env.OAUTH_ENCRYPTION_SECRET)
+    if (!env.MCP_OBJECT ||
+        !env.NATIVE_OAUTH_STATE ||
+        !env.DELEGATION_STORAGE ||
+        !env.OAUTH_ENCRYPTION_SECRET)
         throw new Error("Native OAuth secure state unavailable");
     const host = hostContext(env, cfg);
     const anchor = await anchorBinding(env, sid, info, host);
@@ -146,6 +150,7 @@ export async function beginNativeOAuth(env, sid, info, cfg, initiate = true) {
     if (!selected)
         return null;
     validateProvider(selected.provider, host.allowLoopbackHttp);
+    await assertNativeOAuthStateReady(env);
     if (!initiate)
         return { provider: selected.id };
     const security = new OAuthSecurityService(env.DELEGATION_STORAGE, env.OAUTH_ENCRYPTION_SECRET);
@@ -164,7 +169,7 @@ export async function beginNativeOAuth(env, sid, info, cfg, initiate = true) {
         providerBinding: await providerBinding(selected.id, selected.provider),
         expiresAt: Math.min(info.expiresAt, Date.now() + 600000),
     };
-    await security.storeOAuthState(state, {
+    await storeNativeOAuthState(env, security, state, {
         native_http_anchor: true,
         native,
         project_id: host.projectId,
@@ -174,9 +179,9 @@ export async function beginNativeOAuth(env, sid, info, cfg, initiate = true) {
         tool: "",
         provider: selected.id,
         direct_pkce: true,
-        encryptedVerifier: await security.encryptToken(codeVerifier),
+        pkceVerifier: codeVerifier,
         redirect_uri: redirectUri,
-    }, Math.max(1, Math.floor((native.expiresAt - Date.now()) / 1000)));
+    }, native.expiresAt);
     const url = new URL(selected.provider.authorizationUrl);
     const reserved = new Set([
         "response_type",
@@ -274,11 +279,11 @@ export async function completeNativeOAuth(env, state, code) {
                     : undefined;
         if (!subject)
             return failure();
-        const identityResponse = await boundedFetch(env.AGENTSHIELD_API_URL + "/api/v1/bouncer/identity/resolve", {
+        const identityResponse = await boundedFetch(env.CHECKPOINT_API_URL + "/api/v1/bouncer/identity/resolve", {
             method: "POST",
             headers: {
                 "Content-Type": "application/json",
-                "X-API-Key": env.AGENTSHIELD_API_KEY,
+                "X-API-Key": env.CHECKPOINT_API_KEY,
             },
             body: JSON.stringify({
                 project_id: native.projectId,

package/dist/delegation-http/native-oauth.js.map

@@ -1 +1 @@
-{"version":3,"file":"native-oauth.js","sourceRoot":"","sources":["../../src/delegation-http/native-oauth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAGvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EACL,yBAAyB,EACzB,WAAW,GACZ,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,aAAa,GAGd,MAAM,eAAe,CAAC;AAsBvB,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;AACjE,MAAM,YAAY,GAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CACjD,qBAAqB,CAAC,KAAK,EAAE;IAC3B,GAAG,IAAI;IACP,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;CACnC,CAAC,CAAC;AAEL,KAAK,UAAU,QAAQ,CAAC,GAAkB;IACxC,MAAM,EAAE,kBAAkB,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CACvD,uBAAuB,CACxB,CAAC;IACF,IACE,CAAC,GAAG,CAAC,mBAAmB;QACxB,CAAC,GAAG,CAAC,mBAAmB;QACxB,CAAC,GAAG,CAAC,sBAAsB;QAE3B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,MAAM,aAAa,GAAG;QACpB,KAAK,EAAE,YAAY;QACnB,UAAU,EAAE,KAAK,IAAI,EAAE;YACrB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QACD,eAAe,EAAE,KAAK,IAAI,EAAE;YAC1B,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QACD,oBAAoB,EAAE,KAAK,IAAI,EAAE;YAC/B,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;KACF,CAAC;IACF,MAAM,aAAa,GAAG,IAAI,kBAAkB,CAAC;QAC3C,OAAO,EAAE,GAAG,CAAC,mBAAmB;QAChC,MAAM,EAAE,GAAG,CAAC,mBAAmB;QAC/B,aAAa;QACb,MAAM,EAAE,GAAG,EAAE,GAAE,CAAC;KACjB,CAAC,CAAC;IACH,OAAO;QACL,aAAa;QACb,YAAY,EAAE,IAAI,YAAY,CAAC;YAC7B,aAAa;YACb,aAAa;YACb,iBAAiB,EAAE,GAAG,CAAC,mBAAmB;YAC1C,iBAAiB,EAAE,GAAG,CAAC,mBAAmB;YAC1C,SAAS,EAAE,GAAG,CAAC,sBAAsB;YACrC,cAAc,EAAE,qBAAqB,CAAC,GAAG,CAAC;YAC1C,MAAM,EAAE,GAAG,EAAE,GAAE,CAAC;SACjB,CAAC;KACH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,GAAkB;IAChD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,cAAc,CACnD,GAAG,CAAC,sBAAuB,CAC5B,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CACxD,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAChC,CAAC;IACF,MAAM,EAAE,GACN,MAAM,CAAC,kBAAkB;QACzB,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,IAAI,CAAC,QAAQ,EAAE,gBAAgB;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE,EAAG,EAAE,QAAQ,EAAE,CAAC;AACvC,CAAC;AACD,SAAS,gBAAgB,CAAC,QAAuB,EAAE,aAAsB;IACvE,IACE,QAAQ,CAAC,YAAY,KAAK,IAAI;QAC9B,QAAQ,CAAC,SAAS;QAClB,CAAC,QAAQ,CAAC,QAAQ;QAClB,CAAC,aAAa,CAAC,QAAQ,CAAC,gBAAgB,EAAE,aAAa,CAAC;QACxD,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;QAChD,CAAC,aAAa,CAAC,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC;QACnD,CAAC,QAAQ,CAAC,uBAAuB;YAC/B,QAAQ,CAAC,uBAAuB,KAAK,oBAAoB,CAAC;QAE5D,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;AACN,CAAC;AACD,KAAK,UAAU,eAAe,CAAC,EAAU,EAAE,QAAuB;IAChE,+EAA+E;IAC/E,OAAO,SAAS,CACd,YAAY,CAAC;QACX,EAAE;QACF,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC;QAClC,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,EAAE;QACzC,uBAAuB,EACrB,QAAQ,CAAC,uBAAuB,IAAI,oBAAoB;QAC1D,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;QACnD,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,EAAE;KAClC,CAAC,CACH,CAAC;AACJ,CAAC;AACD,KAAK,UAAU,aAAa,CAC1B,GAAkB,EAClB,GAAW,EACX,IAAuB,EACvB,GAGC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC;IAC7B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAChD,IACE,CAAC,GAAG,CAAC,sBAAsB;QAC3B,CAAC,GAAG,CAAC,SAAS;QACd,CAAC,aAAa,CAAC,GAAG,CAAC,mBAAmB,EAAE,GAAG,CAAC,iBAAiB,CAAC;QAC9D,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,mBAAmB;QACzC,IAAI,CAAC,MAAM,KAAK,QAAQ;QACxB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;QAC5B,CAAC,IAAI,CAAC,WAAW;QACjB,CAAC,IAAI,CAAC,QAAQ;QACd,IAAI,CAAC,eAAe,KAAK,GAAG,CAAC,SAAS;QACtC,CAAC,IAAI;QACL,IAAI,CAAC,GAAG,KAAK,GAAG;QAChB,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,KAAK,KAAK;QAChC,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,iBAAiB,CAAC;QACvD,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;QAClD,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM;QAC3B,IAAI,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,cAAc,CAAC,MAAM;QAChE,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC;QACxE,CAAC,IAAI,CAAC,oBAAoB,EAAE,QAAQ;QACpC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,IAAI,EAAE,CAAC;QAE1E,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,MAAM,SAAS,CAC7B,YAAY,CAAC;QACX,GAAG;QACH,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,IAAI;QACJ,QAAQ,EAAE,IAAI,CAAC,oBAAoB;QACnC,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CACH,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;AAC5C,CAAC;AACD,SAAS,WAAW,CAAC,GAAkB,EAAE,GAAyB;IAChE,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,sBAAsB,IAAI,EAAE;QAC5D,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;QAC5C,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,KAAK,IAAI;KAClD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAkB,EAClB,GAAW,EACX,IAAuB,EACvB,GAAyB,EACzB,QAAQ,GAAG,IAAI;IAEf,IAAI,CAAC,GAAG,CAAC,kBAAkB,IAAI,CAAC,GAAG,CAAC,uBAAuB;QACzD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC5D,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC;IAChD,MAAM,QAAQ,GAAG,IAAI,oBAAoB,CACvC,GAAG,CAAC,kBAAyB,EAC7B,GAAG,CAAC,uBAAuB,CAC5B,CAAC;IACF,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,GACxD,MAAM,QAAQ,CAAC,qBAAqB,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1D,MAAM,KAAK,GACT,yBAAyB;QACzB,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,CAAC;aACjC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;aACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;aACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACxB,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,GAAG,iBAAiB,CAAC;IACjE,MAAM,MAAM,GAAkB;QAC5B,GAAG,IAAI;QACP,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,QAAQ,CAAC,EAAE;QACrB,eAAe,EAAE,MAAM,eAAe,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;QACtE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;KACzD,CAAC;IACF,MAAM,QAAQ,CAAC,eAAe,CAC5B,KAAK,EACL;QACE,kBAAkB,EAAE,IAAI;QACxB,MAAM;QACN,UAAU,EAAE,IAAI,CAAC,SAAS;QAC1B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,UAAU,EAAE,GAAG;QACf,MAAM,EAAE,IAAI,CAAC,cAAc;QAC3B,IAAI,EAAE,EAAE;QACR,QAAQ,EAAE,QAAQ,CAAC,EAAE;QACrB,WAAW,EAAE,IAAI;QACjB,iBAAiB,EAAE,MAAM,QAAQ,CAAC,YAAY,CAAC,YAAY,CAAC;QAC5D,YAAY,EAAE,WAAW;KAC1B,EACD,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAChE,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;QACvB,eAAe;QACf,WAAW;QACX,cAAc;QACd,OAAO;QACP,OAAO;QACP,gBAAgB;QAChB,uBAAuB;KACxB,CAAC,CAAC;IACH,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CACvC,QAAQ,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,CACrC,EAAE,CAAC;QACF,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAC9D,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,CAAC,OAAO,CAAC;QACb,aAAa,EAAE,MAAM;QACrB,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ;QACrC,YAAY,EAAE,WAAW;QACzB,KAAK,EAAE,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QACpD,KAAK;QACL,cAAc,EAAE,aAAa;QAC7B,qBAAqB,EAAE,MAAM;KAC9B,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC/D,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;AAC7D,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAkB,EAClB,KAA8B,EAC9B,IAAY;IAEZ,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,MAAuB,CAAC;QAC7C,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC;QAC7B,IACE,KAAK,CAAC,kBAAkB,KAAK,IAAI;YACjC,CAAC,MAAM;YACP,OAAO,GAAG,KAAK,QAAQ;YACvB,CAAC,IAAI;YACL,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;YAC9B,KAAK,CAAC,UAAU,KAAK,MAAM,CAAC,SAAS;YACrC,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;YAClC,KAAK,CAAC,IAAI,KAAK,EAAE;YACjB,KAAK,CAAC,WAAW,KAAK,IAAI;YAC1B,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;YACtC,CAAC,KAAK,CAAC,YAAY;YACnB,KAAK,CAAC,YAAY,KAAK,MAAM,CAAC,mBAAmB,GAAG,iBAAiB;YAErE,OAAO,OAAO,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAClD,qBAAqB,GAAG,oBAAoB,EAC5C;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC;SAC9B,CACF,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,OAAO,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAsB,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3D,IACE,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;YACjC,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;YACpC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC;YAEhE,OAAO,OAAO,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,EAAE,KAAK,MAAM,CAAC,QAAQ;YAAE,OAAO,OAAO,EAAE,CAAC;QACnE,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC9D,IACE,CAAC,MAAM,eAAe,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACvD,MAAM,CAAC,eAAe;YAEtB,OAAO,OAAO,EAAE,CAAC;QACnB,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,mBAAmB,CAClE,QAAQ,CAAC,QAAQ,CAClB,CAAC;QACF,IAAI,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,IAAI,CAAC,YAAY;YACzD,OAAO,OAAO,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,MAAM,yBAAyB,CAAC;YAC9B,aAAa,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ;YACzC,IAAI;YACJ,WAAW,EAAE,KAAK,CAAC,YAAsB;YACzC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ;YACpC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,YAAY;YACZ,SAAS,EAAE,YAAY;SACxB,CAAC,CACH,CAAC;QACF,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAY,EAAE;YACtE,OAAO,EAAE;gBACP,aAAa,EAAE,SAAS,GAAG,MAAM,CAAC,YAAY;gBAC9C,MAAM,EAAE,kBAAkB;gBAC1B,GAAG,CAAC,QAAQ,CAAC,EAAE,KAAK,QAAQ;oBAC1B,CAAC,CAAC,EAAE,YAAY,EAAE,2BAA2B,EAAE;oBAC/C,CAAC,CAAC,EAAE,CAAC;aACR;SACF,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,CAAC,EAAE;YAAE,OAAO,OAAO,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,CAA4B,CAAC;QACpE,MAAM,OAAO,GACX,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ;YAC1B,CAAC,CAAC,IAAI,CAAC,GAAG;YACV,CAAC,CAAC,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ;gBAC1D,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjB,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;oBAC9B,CAAC,CAAC,IAAI,CAAC,KAAK;oBACZ,CAAC,CAAC,SAAS,CAAC;QACpB,IAAI,CAAC,OAAO;YAAE,OAAO,OAAO,EAAE,CAAC;QAC/B,MAAM,gBAAgB,GAAG,MAAM,YAAY,CACzC,GAAG,CAAC,mBAAmB,GAAG,kCAAkC,EAC5D;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,WAAW,EAAE,GAAG,CAAC,mBAAoB;aACtC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,UAAU,EAAE,MAAM,CAAC,SAAS;gBAC5B,YAAY,EAAE;oBACZ,QAAQ,EAAE,QAAQ,CAAC,EAAE;oBACrB,GAAG,EAAE,OAAO;oBACZ,KAAK,EAAE,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;oBAC9D,aAAa,EAAE,IAAI,CAAC,cAAc,KAAK,IAAI;oBAC3C,IAAI,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;iBAC5D;aACF,CAAC;SACH,CACF,CAAC;QACF,IAAI,CAAC,gBAAgB,CAAC,EAAE;YAAE,OAAO,OAAO,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,CAAC,MAAM,gBAAgB,CAAC,IAAI,EAAE,CAG9C,CAAC;QACF,IACE,QAAQ,CAAC,OAAO,KAAK,IAAI;YACzB,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,UAAU,CAAC;YAEhD,OAAO,OAAO,EAAE,CAAC;QACnB,4EAA4E;QAC5E,mEAAmE;QACnE,MAAM,eAAe,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CACzD,qBAAqB,GAAG,oBAAoB,EAC5C;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC;SAC9B,CACF,CAAC;QACF,IACE,CAAC,eAAe,CAAC,EAAE;YACnB,CACE,MAAM,aAAa,CACjB,GAAG,EACH,GAAG,EACH,CAAC,MAAM,eAAe,CAAC,IAAI,EAAE,CAAsB,EACnD,MAAM,CACP,CACF,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;YAE5B,OAAO,OAAO,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,qBAAqB,CAAC;YACpE,GAAG;YACH,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ;YAC/B,QAAQ,EAAE,QAAQ,CAAC,EAAE;YACrB,QAAQ,EAAE,MAAM,CAAC,SAAS;YAC1B,IAAI,EAAE,EAAE;YACR,MAAM,EAAE,IAAI,CAAC,cAAc;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,MAAM,SAAS,CACtB,YAAY,CAAC;gBACX,MAAM,EAAE,MAAM,CAAC,OAAO;gBACtB,QAAQ,EAAE,MAAM,CAAC,eAAe;aACjC,CAAC,CACH;SACF,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,UAAW,CAAC,WAAW,CAAC,CAAC;QACvD,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAClD,QAAQ,CAAC,IAAI,GAAG,IAAI,eAAe,CAAC;YAClC,kBAAkB,EAAE,SAAS;SAC9B,CAAC,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;YACxB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;gBAC7B,eAAe,EAAE,UAAU;gBAC3B,iBAAiB,EAAE,aAAa;aACjC;SACF,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,GAAkB,EAClB,GAAW,EACX,IAAuB,EACvB,GAAyB,EACzB,KAAa;IAEb,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK;YAAE,OAAO,IAAI,CAAC;QAChD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3B,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,6BAA6B,CACzE,KAAK,EACL;YACE,GAAG;YACH,QAAQ,EAAE,MAAM,CAAC,SAAS;YAC1B,IAAI,EAAE,EAAE;YACR,MAAM,EAAE,IAAI,CAAC,cAAc;YAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,QAAQ,CAAC,EAAE;YACrB,OAAO,EAAE,MAAM,SAAS,CACtB,YAAY,CAAC;gBACX,MAAM,EAAE,MAAM,CAAC,OAAO;gBACtB,QAAQ,EAAE,MAAM,eAAe,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;aAChE,CAAC,CACH;SACF,CACF,CAAC;QACF,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"native-oauth.js","sourceRoot":"","sources":["../../src/delegation-http/native-oauth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAGvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EACL,yBAAyB,EACzB,WAAW,GACZ,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,aAAa,GAGd,MAAM,eAAe,CAAC;AAsBvB,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;AACjE,MAAM,YAAY,GAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CACjD,qBAAqB,CAAC,KAAK,EAAE;IAC3B,GAAG,IAAI;IACP,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;CACnC,CAAC,CAAC;AAEL,KAAK,UAAU,QAAQ,CAAC,GAAkB;IACxC,MAAM,EAAE,kBAAkB,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CACvD,uBAAuB,CACxB,CAAC;IACF,IACE,CAAC,GAAG,CAAC,kBAAkB;QACvB,CAAC,GAAG,CAAC,kBAAkB;QACvB,CAAC,GAAG,CAAC,qBAAqB;QAE1B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,MAAM,aAAa,GAAG;QACpB,KAAK,EAAE,YAAY;QACnB,UAAU,EAAE,KAAK,IAAI,EAAE;YACrB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QACD,eAAe,EAAE,KAAK,IAAI,EAAE;YAC1B,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QACD,oBAAoB,EAAE,KAAK,IAAI,EAAE;YAC/B,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;KACF,CAAC;IACF,MAAM,aAAa,GAAG,IAAI,kBAAkB,CAAC;QAC3C,OAAO,EAAE,GAAG,CAAC,kBAAkB;QAC/B,MAAM,EAAE,GAAG,CAAC,kBAAkB;QAC9B,aAAa;QACb,MAAM,EAAE,GAAG,EAAE,GAAE,CAAC;KACjB,CAAC,CAAC;IACH,OAAO;QACL,aAAa;QACb,YAAY,EAAE,IAAI,YAAY,CAAC;YAC7B,aAAa;YACb,aAAa;YACb,gBAAgB,EAAE,GAAG,CAAC,kBAAkB;YACxC,gBAAgB,EAAE,GAAG,CAAC,kBAAkB;YACxC,SAAS,EAAE,GAAG,CAAC,qBAAqB;YACpC,cAAc,EAAE,qBAAqB,CAAC,GAAG,CAAC;YAC1C,MAAM,EAAE,GAAG,EAAE,GAAE,CAAC;SACjB,CAAC;KACH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,GAAkB;IAChD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,cAAc,CACnD,GAAG,CAAC,qBAAsB,CAC3B,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CACxD,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAChC,CAAC;IACF,MAAM,EAAE,GACN,MAAM,CAAC,kBAAkB;QACzB,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,IAAI,CAAC,QAAQ,EAAE,gBAAgB;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE,EAAG,EAAE,QAAQ,EAAE,CAAC;AACvC,CAAC;AACD,SAAS,gBAAgB,CAAC,QAAuB,EAAE,aAAsB;IACvE,IACE,QAAQ,CAAC,YAAY,KAAK,IAAI;QAC9B,QAAQ,CAAC,SAAS;QAClB,CAAC,QAAQ,CAAC,QAAQ;QAClB,CAAC,aAAa,CAAC,QAAQ,CAAC,gBAAgB,EAAE,aAAa,CAAC;QACxD,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;QAChD,CAAC,aAAa,CAAC,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC;QACnD,CAAC,QAAQ,CAAC,uBAAuB;YAC/B,QAAQ,CAAC,uBAAuB,KAAK,oBAAoB,CAAC;QAE5D,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;AACN,CAAC;AACD,KAAK,UAAU,eAAe,CAAC,EAAU,EAAE,QAAuB;IAChE,+EAA+E;IAC/E,OAAO,SAAS,CACd,YAAY,CAAC;QACX,EAAE;QACF,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC;QAClC,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,EAAE;QACzC,uBAAuB,EACrB,QAAQ,CAAC,uBAAuB,IAAI,oBAAoB;QAC1D,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;QACnD,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,EAAE;KAClC,CAAC,CACH,CAAC;AACJ,CAAC;AACD,KAAK,UAAU,aAAa,CAC1B,GAAkB,EAClB,GAAW,EACX,IAAuB,EACvB,GAGC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC;IAC7B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAChD,IACE,CAAC,GAAG,CAAC,qBAAqB;QAC1B,CAAC,GAAG,CAAC,SAAS;QACd,CAAC,aAAa,CAAC,GAAG,CAAC,mBAAmB,EAAE,GAAG,CAAC,iBAAiB,CAAC;QAC9D,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,mBAAmB;QACzC,IAAI,CAAC,MAAM,KAAK,QAAQ;QACxB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;QAC5B,CAAC,IAAI,CAAC,WAAW;QACjB,CAAC,IAAI,CAAC,QAAQ;QACd,IAAI,CAAC,eAAe,KAAK,GAAG,CAAC,SAAS;QACtC,CAAC,IAAI;QACL,IAAI,CAAC,GAAG,KAAK,GAAG;QAChB,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,KAAK,KAAK;QAChC,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,iBAAiB,CAAC;QACvD,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;QAClD,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM;QAC3B,IAAI,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,cAAc,CAAC,MAAM;QAChE,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC;QACxE,CAAC,IAAI,CAAC,oBAAoB,EAAE,QAAQ;QACpC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,IAAI,EAAE,CAAC;QAE1E,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,MAAM,SAAS,CAC7B,YAAY,CAAC;QACX,GAAG;QACH,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,IAAI;QACJ,QAAQ,EAAE,IAAI,CAAC,oBAAoB;QACnC,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CACH,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;AAC5C,CAAC;AACD,SAAS,WAAW,CAAC,GAAkB,EAAE,GAAyB;IAChE,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,qBAAqB,IAAI,EAAE;QAC3D,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;QAC5C,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,KAAK,IAAI;KAClD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAkB,EAClB,GAAW,EACX,IAAuB,EACvB,GAAyB,EACzB,QAAQ,GAAG,IAAI;IAEf,IACE,CAAC,GAAG,CAAC,UAAU;QACf,CAAC,GAAG,CAAC,kBAAkB;QACvB,CAAC,GAAG,CAAC,kBAAkB;QACvB,CAAC,GAAG,CAAC,uBAAuB;QAE5B,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC5D,MAAM,2BAA2B,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC;IAChD,MAAM,QAAQ,GAAG,IAAI,oBAAoB,CACvC,GAAG,CAAC,kBAAkB,EACtB,GAAG,CAAC,uBAAuB,CAC5B,CAAC;IACF,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,GACxD,MAAM,QAAQ,CAAC,qBAAqB,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1D,MAAM,KAAK,GACT,yBAAyB;QACzB,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,CAAC;aACjC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;aACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;aACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACxB,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,GAAG,iBAAiB,CAAC;IACjE,MAAM,MAAM,GAAkB;QAC5B,GAAG,IAAI;QACP,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,QAAQ,CAAC,EAAE;QACrB,eAAe,EAAE,MAAM,eAAe,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;QACtE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;KACzD,CAAC;IACF,MAAM,qBAAqB,CACzB,GAAG,EACH,QAAQ,EACR,KAAK,EACL;QACE,kBAAkB,EAAE,IAAI;QACxB,MAAM;QACN,UAAU,EAAE,IAAI,CAAC,SAAS;QAC1B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,UAAU,EAAE,GAAG;QACf,MAAM,EAAE,IAAI,CAAC,cAAc;QAC3B,IAAI,EAAE,EAAE;QACR,QAAQ,EAAE,QAAQ,CAAC,EAAE;QACrB,WAAW,EAAE,IAAI;QACjB,YAAY,EAAE,YAAY;QAC1B,YAAY,EAAE,WAAW;KAC1B,EACD,MAAM,CAAC,SAAS,CACjB,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;QACvB,eAAe;QACf,WAAW;QACX,cAAc;QACd,OAAO;QACP,OAAO;QACP,gBAAgB;QAChB,uBAAuB;KACxB,CAAC,CAAC;IACH,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CACvC,QAAQ,CAAC,QAAQ,CAAC,YAAY,IAAI,EAAE,CACrC,EAAE,CAAC;QACF,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAC9D,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,CAAC,OAAO,CAAC;QACb,aAAa,EAAE,MAAM;QACrB,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ;QACrC,YAAY,EAAE,WAAW;QACzB,KAAK,EAAE,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QACpD,KAAK;QACL,cAAc,EAAE,aAAa;QAC7B,qBAAqB,EAAE,MAAM;KAC9B,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC/D,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;AAC7D,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAkB,EAClB,KAA8B,EAC9B,IAAY;IAEZ,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,MAAuB,CAAC;QAC7C,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC;QAC7B,IACE,KAAK,CAAC,kBAAkB,KAAK,IAAI;YACjC,CAAC,MAAM;YACP,OAAO,GAAG,KAAK,QAAQ;YACvB,CAAC,IAAI;YACL,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;YAC9B,KAAK,CAAC,UAAU,KAAK,MAAM,CAAC,SAAS;YACrC,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;YAClC,KAAK,CAAC,IAAI,KAAK,EAAE;YACjB,KAAK,CAAC,WAAW,KAAK,IAAI;YAC1B,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;YACtC,CAAC,KAAK,CAAC,YAAY;YACnB,KAAK,CAAC,YAAY,KAAK,MAAM,CAAC,mBAAmB,GAAG,iBAAiB;YAErE,OAAO,OAAO,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAClD,qBAAqB,GAAG,oBAAoB,EAC5C;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC;SAC9B,CACF,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,OAAO,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAsB,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3D,IACE,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;YACjC,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;YACpC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC;YAEhE,OAAO,OAAO,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,EAAE,KAAK,MAAM,CAAC,QAAQ;YAAE,OAAO,OAAO,EAAE,CAAC;QACnE,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC9D,IACE,CAAC,MAAM,eAAe,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACvD,MAAM,CAAC,eAAe;YAEtB,OAAO,OAAO,EAAE,CAAC;QACnB,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,mBAAmB,CAClE,QAAQ,CAAC,QAAQ,CAClB,CAAC;QACF,IAAI,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,IAAI,CAAC,YAAY;YACzD,OAAO,OAAO,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,MAAM,yBAAyB,CAAC;YAC9B,aAAa,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ;YACzC,IAAI;YACJ,WAAW,EAAE,KAAK,CAAC,YAAsB;YACzC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ;YACpC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,YAAY;YACZ,SAAS,EAAE,YAAY;SACxB,CAAC,CACH,CAAC;QACF,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAY,EAAE;YACtE,OAAO,EAAE;gBACP,aAAa,EAAE,SAAS,GAAG,MAAM,CAAC,YAAY;gBAC9C,MAAM,EAAE,kBAAkB;gBAC1B,GAAG,CAAC,QAAQ,CAAC,EAAE,KAAK,QAAQ;oBAC1B,CAAC,CAAC,EAAE,YAAY,EAAE,2BAA2B,EAAE;oBAC/C,CAAC,CAAC,EAAE,CAAC;aACR;SACF,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,CAAC,EAAE;YAAE,OAAO,OAAO,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,CAA4B,CAAC;QACpE,MAAM,OAAO,GACX,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ;YAC1B,CAAC,CAAC,IAAI,CAAC,GAAG;YACV,CAAC,CAAC,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ;gBAC1D,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjB,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;oBAC9B,CAAC,CAAC,IAAI,CAAC,KAAK;oBACZ,CAAC,CAAC,SAAS,CAAC;QACpB,IAAI,CAAC,OAAO;YAAE,OAAO,OAAO,EAAE,CAAC;QAC/B,MAAM,gBAAgB,GAAG,MAAM,YAAY,CACzC,GAAG,CAAC,kBAAkB,GAAG,kCAAkC,EAC3D;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,WAAW,EAAE,GAAG,CAAC,kBAAmB;aACrC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,UAAU,EAAE,MAAM,CAAC,SAAS;gBAC5B,YAAY,EAAE;oBACZ,QAAQ,EAAE,QAAQ,CAAC,EAAE;oBACrB,GAAG,EAAE,OAAO;oBACZ,KAAK,EAAE,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;oBAC9D,aAAa,EAAE,IAAI,CAAC,cAAc,KAAK,IAAI;oBAC3C,IAAI,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;iBAC5D;aACF,CAAC;SACH,CACF,CAAC;QACF,IAAI,CAAC,gBAAgB,CAAC,EAAE;YAAE,OAAO,OAAO,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,CAAC,MAAM,gBAAgB,CAAC,IAAI,EAAE,CAG9C,CAAC;QACF,IACE,QAAQ,CAAC,OAAO,KAAK,IAAI;YACzB,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,UAAU,CAAC;YAEhD,OAAO,OAAO,EAAE,CAAC;QACnB,4EAA4E;QAC5E,mEAAmE;QACnE,MAAM,eAAe,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CACzD,qBAAqB,GAAG,oBAAoB,EAC5C;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC;SAC9B,CACF,CAAC;QACF,IACE,CAAC,eAAe,CAAC,EAAE;YACnB,CACE,MAAM,aAAa,CACjB,GAAG,EACH,GAAG,EACH,CAAC,MAAM,eAAe,CAAC,IAAI,EAAE,CAAsB,EACnD,MAAM,CACP,CACF,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;YAE5B,OAAO,OAAO,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,qBAAqB,CAAC;YACpE,GAAG;YACH,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ;YAC/B,QAAQ,EAAE,QAAQ,CAAC,EAAE;YACrB,QAAQ,EAAE,MAAM,CAAC,SAAS;YAC1B,IAAI,EAAE,EAAE;YACR,MAAM,EAAE,IAAI,CAAC,cAAc;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,MAAM,SAAS,CACtB,YAAY,CAAC;gBACX,MAAM,EAAE,MAAM,CAAC,OAAO;gBACtB,QAAQ,EAAE,MAAM,CAAC,eAAe;aACjC,CAAC,CACH;SACF,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,UAAW,CAAC,WAAW,CAAC,CAAC;QACvD,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAClD,QAAQ,CAAC,IAAI,GAAG,IAAI,eAAe,CAAC;YAClC,kBAAkB,EAAE,SAAS;SAC9B,CAAC,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;YACxB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;gBAC7B,eAAe,EAAE,UAAU;gBAC3B,iBAAiB,EAAE,aAAa;aACjC;SACF,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,GAAkB,EAClB,GAAW,EACX,IAAuB,EACvB,GAAyB,EACzB,KAAa;IAEb,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK;YAAE,OAAO,IAAI,CAAC;QAChD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3B,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,MAAM,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,6BAA6B,CACzE,KAAK,EACL;YACE,GAAG;YACH,QAAQ,EAAE,MAAM,CAAC,SAAS;YAC1B,IAAI,EAAE,EAAE;YACR,MAAM,EAAE,IAAI,CAAC,cAAc;YAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,QAAQ,CAAC,EAAE;YACrB,OAAO,EAAE,MAAM,SAAS,CACtB,YAAY,CAAC;gBACX,MAAM,EAAE,MAAM,CAAC,OAAO;gBACtB,QAAQ,EAAE,MAAM,eAAe,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;aAChE,CAAC,CACH;SACF,CACF,CAAC;QACF,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/delegation-http/register.js

@@ -76,7 +76,7 @@ export function registerDelegationHttpRoutes(app, options, deps) {
     });
     // External anchor registration (checkpoint's bouncer-sessions wire contract).
     // Serves only when the layer is ON, the ops kill switch hasn't disabled it,
-    // the registrar bearer (AGENTSHIELD_API_KEY) is configured, AND the app wired
+    // the registrar bearer (CHECKPOINT_API_KEY) is configured, AND the app wired
     // a proof generator; otherwise next() yields the app's 404 — byte-identical
     // to a deployment that predates this surface.
     const proofGenerator = deps?.proofGenerator;

package/dist/delegation-http/register.js.map

@@ -1 +1 @@
-{"version":3,"file":"register.js","sourceRoot":"","sources":["../../src/delegation-http/register.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AAOvD,OAAO,EACL,YAAY,EACZ,aAAa,EACb,yBAAyB,GAC1B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EACL,sBAAsB,EACtB,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EACL,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAQ/B;;;;GAIG;AACH,SAAS,cAAc;AACrB,8DAA8D;AAC9D,CAAM,EACN,OAA6B;IAE7B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS;YAC3B,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,GAA4B,EAAE,OAAO,CAAC,SAAS,CAAC;YACnE,CAAC,CAAE,CAAC,CAAC,GAAqB,CAAC;QAC7B,MAAM,GAAG,GAAG,0BAA0B,CACpC,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAyC,CAC1C,CAAC;QACF,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,gFAAgF;QAChF,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,GAAoB,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACpD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAC1C,GAAS,EACT,OAA6B,EAC7B,IAA8B;IAE9B,iFAAiF;IACjF,8DAA8D;IAC9D,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,CAAM,EAAE,IAAU,EAAE,EAAE;QACjD,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,EAAE,CAAC;QACxB,OAAO,eAAe,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,+FAA+F;IAC/F,iEAAiE;IACjE,8DAA8D;IAC9D,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,CAAM,EAAE,IAAU,EAAE,EAAE;QAClD,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,EAAE,CAAC;QAC7C,OAAO,sBAAsB,CAAC,CAA2B,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,6EAA6E;IAC7E,8EAA8E;IAC9E,wEAAwE;IACxE,8DAA8D;IAC9D,GAAG,CAAC,IAAI,CAAC,GAAG,aAAa,UAAU,EAAE,KAAK,EAAE,CAAM,EAAE,IAAU,EAAE,EAAE;QAChE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,CAA2B,CAAC,CAAC;QACjE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,EAAE,CAAC;QACrC,OAAO,0BAA0B,CAC/B,CAA2B,EAC3B,GAAG,EACH,GAAG,EACH,GAAG,CACJ,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,4EAA4E;IAC5E,8EAA8E;IAC9E,4EAA4E;IAC5E,8CAA8C;IAC9C,MAAM,cAAc,GAAG,IAAI,EAAE,cAAc,CAAC;IAC5C,8DAA8D;IAC9D,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE,KAAK,EAAE,CAAM,EAAE,IAAU,EAAE,EAAE;QAC/D,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,IAAI,CAAC,2BAA2B,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACtE,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QACD,OAAO,wBAAwB,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE;YAC3C,aAAa;YACb,cAAc,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;SACxC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../../src/delegation-http/register.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AAOvD,OAAO,EACL,YAAY,EACZ,aAAa,EACb,yBAAyB,GAC1B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EACL,sBAAsB,EACtB,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EACL,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAQ/B;;;;GAIG;AACH,SAAS,cAAc;AACrB,8DAA8D;AAC9D,CAAM,EACN,OAA6B;IAE7B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS;YAC3B,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,GAA4B,EAAE,OAAO,CAAC,SAAS,CAAC;YACnE,CAAC,CAAE,CAAC,CAAC,GAAqB,CAAC;QAC7B,MAAM,GAAG,GAAG,0BAA0B,CACpC,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAC7B,GAAyC,CAC1C,CAAC;QACF,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,gFAAgF;QAChF,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,GAAoB,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACpD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAC1C,GAAS,EACT,OAA6B,EAC7B,IAA8B;IAE9B,iFAAiF;IACjF,8DAA8D;IAC9D,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,CAAM,EAAE,IAAU,EAAE,EAAE;QACjD,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,EAAE,CAAC;QACxB,OAAO,eAAe,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,+FAA+F;IAC/F,iEAAiE;IACjE,8DAA8D;IAC9D,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,CAAM,EAAE,IAAU,EAAE,EAAE;QAClD,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,EAAE,CAAC;QAC7C,OAAO,sBAAsB,CAAC,CAA2B,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,6EAA6E;IAC7E,8EAA8E;IAC9E,wEAAwE;IACxE,8DAA8D;IAC9D,GAAG,CAAC,IAAI,CAAC,GAAG,aAAa,UAAU,EAAE,KAAK,EAAE,CAAM,EAAE,IAAU,EAAE,EAAE;QAChE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,CAA2B,CAAC,CAAC;QACjE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,EAAE,CAAC;QACrC,OAAO,0BAA0B,CAC/B,CAA2B,EAC3B,GAAG,EACH,GAAG,EACH,GAAG,CACJ,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,4EAA4E;IAC5E,6EAA6E;IAC7E,4EAA4E;IAC5E,8CAA8C;IAC9C,MAAM,cAAc,GAAG,IAAI,EAAE,cAAc,CAAC;IAC5C,8DAA8D;IAC9D,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE,KAAK,EAAE,CAAM,EAAE,IAAU,EAAE,EAAE;QAC/D,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,GAAG,IAAI,CAAC,2BAA2B,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACtE,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QACD,OAAO,wBAAwB,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE;YAC3C,aAAa;YACb,cAAc,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;SACxC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/delegation-http/registrar-auth.d.ts

@@ -2,7 +2,7 @@
  * draft-kya-http-02 delegation layer — anchor-registration registrar auth.
  *
  * The registration surface authenticates external PEPs with the deployment's
- * own per-project dashboard API key (`AGENTSHIELD_API_KEY`) presented as
+ * own per-project dashboard API key (`CHECKPOINT_API_KEY`) presented as
  * `Authorization: Bearer …` — the same credential (and header) the .NET
  * `DelegationAnchorRegistrar` already sends to checkpoint's bouncer sessions
  * route, so no new secret is provisioned and no caller changes shape. The raw

package/dist/delegation-http/registrar-auth.js

@@ -2,7 +2,7 @@
  * draft-kya-http-02 delegation layer — anchor-registration registrar auth.
  *
  * The registration surface authenticates external PEPs with the deployment's
- * own per-project dashboard API key (`AGENTSHIELD_API_KEY`) presented as
+ * own per-project dashboard API key (`CHECKPOINT_API_KEY`) presented as
  * `Authorization: Bearer …` — the same credential (and header) the .NET
  * `DelegationAnchorRegistrar` already sends to checkpoint's bouncer sessions
  * route, so no new secret is provisioned and no caller changes shape. The raw
@@ -27,7 +27,7 @@ function constantTimeEqualHex(a, b) {
  * and length-independent.
  */
 export function registrarAuthorized(env, authorizationHeader) {
-    const expected = env.AGENTSHIELD_API_KEY;
+    const expected = env.CHECKPOINT_API_KEY;
     if (!expected || !authorizationHeader)
         return false;
     const match = /^Bearer\s+(.+)$/i.exec(authorizationHeader.trim());

package/dist/delegation-http/registrar-auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"registrar-auth.js","sourceRoot":"","sources":["../../src/delegation-http/registrar-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAEnC,gEAAgE;AAChE,SAAS,oBAAoB,CAAC,CAAS,EAAE,CAAS;IAChD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAkB,EAClB,mBAAuC;IAEvC,MAAM,QAAQ,GAAG,GAAG,CAAC,mBAAmB,CAAC;IACzC,IAAI,CAAC,QAAQ,IAAI,CAAC,mBAAmB;QAAE,OAAO,KAAK,CAAC;IACpD,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC;IAClE,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,iFAAiF;AACjF,gFAAgF;AAChF,gFAAgF;AAChF,4EAA4E;AAC5E,2EAA2E;AAC3E,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,IAAI,eAAe,GAAG,CAAC,CAAC;AACxB,IAAI,SAAS,GAAG,CAAC,CAAC;AAElB,mFAAmF;AACnF,MAAM,UAAU,uBAAuB,CAAC,GAAW;IACjD,IAAI,GAAG,GAAG,eAAe,IAAI,cAAc,EAAE,CAAC;QAC5C,eAAe,GAAG,GAAG,CAAC;QACtB,SAAS,GAAG,CAAC,CAAC;IAChB,CAAC;IACD,SAAS,IAAI,CAAC,CAAC;IACf,OAAO,SAAS,GAAG,mBAAmB,CAAC;AACzC,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,oCAAoC;IAClD,eAAe,GAAG,CAAC,CAAC;IACpB,SAAS,GAAG,CAAC,CAAC;AAChB,CAAC"}
+{"version":3,"file":"registrar-auth.js","sourceRoot":"","sources":["../../src/delegation-http/registrar-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAEnC,gEAAgE;AAChE,SAAS,oBAAoB,CAAC,CAAS,EAAE,CAAS;IAChD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAkB,EAClB,mBAAuC;IAEvC,MAAM,QAAQ,GAAG,GAAG,CAAC,kBAAkB,CAAC;IACxC,IAAI,CAAC,QAAQ,IAAI,CAAC,mBAAmB;QAAE,OAAO,KAAK,CAAC;IACpD,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC;IAClE,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,iFAAiF;AACjF,gFAAgF;AAChF,gFAAgF;AAChF,4EAA4E;AAC5E,2EAA2E;AAC3E,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,IAAI,eAAe,GAAG,CAAC,CAAC;AACxB,IAAI,SAAS,GAAG,CAAC,CAAC;AAElB,mFAAmF;AACnF,MAAM,UAAU,uBAAuB,CAAC,GAAW;IACjD,IAAI,GAAG,GAAG,eAAe,IAAI,cAAc,EAAE,CAAC;QAC5C,eAAe,GAAG,GAAG,CAAC;QACtB,SAAS,GAAG,CAAC,CAAC;IAChB,CAAC;IACD,SAAS,IAAI,CAAC,CAAC;IACf,OAAO,SAAS,GAAG,mBAAmB,CAAC;AACzC,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,oCAAoC;IAClD,eAAe,GAAG,CAAC,CAAC;IACpB,SAAS,GAAG,CAAC,CAAC;AAChB,CAAC"}

package/dist/delegation-http/remote-issuer.d.ts

@@ -33,5 +33,5 @@ export interface NativeRemoteIssuer {
  * provisioned by Checkpoint alongside the exact API-key role. The request path
  * cannot supply a signer, control-plane URL, authorization origin or trust key.
  */
-export declare function resolveManagedNativeIssuer(env: Record<string, unknown>): NativeHttpHostConfig | null;
+export declare function resolveManagedNativeIssuer(source: Record<string, unknown>): NativeHttpHostConfig | null;
 //# sourceMappingURL=remote-issuer.d.ts.map

package/dist/delegation-http/remote-issuer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remote-issuer.d.ts","sourceRoot":"","sources":["../../src/delegation-http/remote-issuer.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;IACxB,GAAG,EAAE,MAAM,EAAE,CAAC;CACf;AACD,MAAM,WAAW,kBAAkB;IACjC;;sEAEkE;IAClE,gBAAgB,CACd,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClD,iBAAiB,CACf,YAAY,EAAE,OAAO,EACrB,QAAQ,EAAE,mBAAmB,EAC7B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QACT,KAAK,EAAE,aAAa,CAAC;QACrB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC,CAAC;IACH,eAAe,CACb,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC1E;AAiDD;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC3B,oBAAoB,GAAG,IAAI,CAqD7B"}
+{"version":3,"file":"remote-issuer.d.ts","sourceRoot":"","sources":["../../src/delegation-http/remote-issuer.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGxD,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;IACxB,GAAG,EAAE,MAAM,EAAE,CAAC;CACf;AACD,MAAM,WAAW,kBAAkB;IACjC;;sEAEkE;IAClE,gBAAgB,CACd,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClD,iBAAiB,CACf,YAAY,EAAE,OAAO,EACrB,QAAQ,EAAE,mBAAmB,EAC7B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;QACT,KAAK,EAAE,aAAa,CAAC;QACrB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC,CAAC;IACH,eAAe,CACb,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC1E;AAiDD;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,oBAAoB,GAAG,IAAI,CAoD7B"}

package/dist/delegation-http/remote-issuer.js

@@ -2,6 +2,7 @@ import { canonicalize } from "json-canonicalize";
 import { z } from "zod";
 import { fetchNativeNoRedirect } from "./native-fetch";
 import { nativeHolderBinding, } from "./native-http";
+import { withCheckpointNames } from "@kya-os/contracts/config";
 const encoder = new TextEncoder();
 const sourceIpSchema = z.string().max(45).ip();
 const fail = () => {
@@ -40,7 +41,8 @@ function isOrigin(value) {
  * provisioned by Checkpoint alongside the exact API-key role. The request path
  * cannot supply a signer, control-plane URL, authorization origin or trust key.
  */
-export function resolveManagedNativeIssuer(env) {
+export function resolveManagedNativeIssuer(source) {
+    const env = withCheckpointNames(source);
     if (typeof env.MCPI_NATIVE_HTTP_ISSUER_CONFIG !== "string" ||
         typeof env.MCPI_NATIVE_HTTP_ISSUER_API_KEY !== "string")
         return null;
@@ -57,9 +59,7 @@ export function resolveManagedNativeIssuer(env) {
             !isOrigin(binding.authorizationOrigin) ||
             !isOrigin(binding.controlPlaneOrigin) ||
             !env.MCPI_NATIVE_HTTP_ISSUER_API_KEY ||
-            env.MCPI_NATIVE_HTTP_ISSUER_API_KEY !== env.AGENTSHIELD_API_KEY ||
-            (env.CHECKPOINT_API_KEY !== undefined &&
-                env.CHECKPOINT_API_KEY !== env.MCPI_NATIVE_HTTP_ISSUER_API_KEY))
+            env.MCPI_NATIVE_HTTP_ISSUER_API_KEY !== env.CHECKPOINT_API_KEY)
             return null;
         return {
             authorizationOrigin: binding.authorizationOrigin,

package/dist/delegation-http/remote-issuer.js.map

@@ -1 +1 @@
-{"version":3,"file":"remote-issuer.js","sourceRoot":"","sources":["../../src/delegation-http/remote-issuer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EACL,mBAAmB,GAGpB,MAAM,eAAe,CAAC;AA0CvB,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;AAC/C,MAAM,IAAI,GAAG,GAAG,EAAE;IAChB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;AAC1D,CAAC,CAAC;AACF,SAAS,KAAK,CAAC,CAAU,EAAE,CAAU;IACnC,OAAO,YAAY,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AACD,SAAS,KAAK,CAAC,OAAe;IAC5B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC;QAClE,OAAO,IAAI,EAAE,CAAC;IAChB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAChE,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AACD,KAAK,UAAU,MAAM,CAAC,KAAc;IAClC,MAAM,IAAI,GAAG,IAAI,UAAU,CACzB,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAC3E,CAAC;IACF,OAAO,CACL,SAAS;QACT,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CACrE,CAAC;AACJ,CAAC;AACD,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,CACL,GAAG,CAAC,QAAQ,KAAK,QAAQ;YACzB,CAAC,GAAG,CAAC,IAAI;YACT,CAAC,GAAG,CAAC,QAAQ;YACb,CAAC,GAAG,CAAC,QAAQ;YACb,GAAG,CAAC,MAAM,KAAK,KAAK,CACrB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CACxC,GAA4B;IAE5B,IACE,OAAO,GAAG,CAAC,8BAA8B,KAAK,QAAQ;QACtD,OAAO,GAAG,CAAC,+BAA+B,KAAK,QAAQ;QAEvD,OAAO,IAAI,CAAC;IACd,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,GAAG,CAAC,8BAA8B,CACjB,CAAC;QACpB,IACE,CAAC,OAAO;YACR,CAAC,GAAG,CAAC,wBAAwB,KAAK,SAAS;gBACzC,GAAG,CAAC,wBAAwB,KAAK,qBAAqB,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;YACjC,OAAO,CAAC,OAAO,KAAK,CAAC;YACrB,CAAC,iEAAiE,CAAC,IAAI,CACrE,OAAO,CAAC,SAAS,CAClB;YACD,CAAC,2CAA2C,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YACpE,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,MAAM,KAAK,EAAE;YAC5C,CAAC,QAAQ,CAAC,OAAO,CAAC,mBAAmB,CAAC;YACtC,CAAC,QAAQ,CAAC,OAAO,CAAC,kBAAkB,CAAC;YACrC,CAAC,GAAG,CAAC,+BAA+B;YACpC,GAAG,CAAC,+BAA+B,KAAK,GAAG,CAAC,mBAAmB;YAC/D,CAAC,GAAG,CAAC,kBAAkB,KAAK,SAAS;gBACnC,GAAG,CAAC,kBAAkB,KAAK,GAAG,CAAC,+BAA+B,CAAC;YAEjE,OAAO,IAAI,CAAC;QACd,OAAO;YACL,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;YAChD,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,uEAAuE;YACvE,wEAAwE;YACxE,2EAA2E;YAC3E,uEAAuE;YACvE,GAAG,CAAC,GAAG,CAAC,wBAAwB,KAAK,qBAAqB;gBACxD,CAAC,CAAC;oBACE,eAAe,EAAE,CAAC,OAAgB,EAAiB,EAAE;wBACnD,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;wBACnD,OAAO,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;oBAC1D,CAAC;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,YAAY,EAAE,kBAAkB,CAC9B,OAAO,EACP,GAAG,CAAC,+BAA+B,CACpC;SACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,OAAuB,EACvB,MAAc;IAEd,KAAK,UAAU,IAAI,CACjB,IAAsD,EACtD,IAAa;QAEb,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAC1C,OAAO,CAAC,kBAAkB,GAAG,8BAA8B,GAAG,IAAI,EAClE;YACE,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;YACjC,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,SAAS,GAAG,MAAM;aAClC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CACF,CAAC;QACF,IACE,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;YACrC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,kBAAkB,CAAC;YACrE,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;YAEjE,OAAO,IAAI,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;QAC1C,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,CAAC;YACH,SAAS,CAAC;gBACR,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjC,IAAI,IAAI,CAAC,IAAI;oBAAE,MAAM;gBACrB,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;gBAC5B,IAAI,MAAM,GAAG,GAAG,GAAG,IAAI,EAAE,CAAC;oBACxB,0EAA0E;oBAC1E,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;oBACrC,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;QACzB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,IAAI,MAAM,EAAE,OAAO,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI;YAAE,OAAO,IAAI,EAAE,CAAC;QAC5D,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,UAAU,kBAAkB,CAC/B,OAAe,EACf,UAAsD,YAAY;QAElE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,GAAG,IAAI;YAC5D,OAAO,IAAI,EAAE,CAAC;QAChB,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3E,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW,IAAI,CAAC,aAAa,IAAI,KAAK,KAAK,SAAS;YACtE,OAAO,IAAI,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACvE,IACE,MAAM,CAAC,GAAG,KAAK,OAAO;YACtB,CAAC,OAAO,KAAK,aAAa;gBACxB,CAAC,CAAC,MAAM,CAAC,GAAG,KAAK,0BAA0B;gBAC3C,CAAC,CAAC,MAAM,CAAC,GAAG,KAAK,KAAK;oBACpB,CAAC,CAAC,OAAO,KAAK,WAAW,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC;YAC3D,MAAM,CAAC,IAAI;YACX,MAAM,CAAC,GAAG,KAAK,SAAS;YACxB,CAAC;gBACC,OAAO,CAAC,SAAS,GAAG,QAAQ;gBAC5B,OAAO,CAAC,SAAS,GAAG,YAAY;aACjC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC;YAEtB,OAAO,IAAI,EAAE,CAAC;QAChB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC,KAAK,EACL,KAAK,CAAC,OAAO,CAAC,eAAe,CAAiB,EAC9C,SAAS,EACT,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;QACF,IACE,CAAC,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAC1B,SAAS,EACT,GAAG,EACH,KAAK,CAAC,aAAa,CAAiB,EACpC,OAAO,CAAC,MAAM,CAAC,UAAU,GAAG,GAAG,GAAG,WAAW,CAAC,CAC/C,CAAC;YAEF,OAAO,IAAI,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACzE,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,SAAS;YAAE,OAAO,IAAI,EAAE,CAAC;QACrD,OAAO,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;IAClD,CAAC;IAED,OAAO;QACL,KAAK,CAAC,gBAAgB,CAAC,YAAY;YACjC,IACE,CAAC,iEAAiE,CAAC,IAAI,CACrE,YAAY,CACb;gBAED,OAAO,IAAI,EAAE,CAAC;YAChB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE;gBAC3C,aAAa,EAAE,YAAY;aAC5B,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YACnE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAC1C,IAAI,SAAc,CAAC;YACnB,IAAI,CAAC;gBACH,SAAS,GAAG,IAAI,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YACD,IACE,MAAM,CAAC,OAAO,KAAK,wBAAwB;gBAC3C,MAAM,CAAC,aAAa,KAAK,YAAY;gBACrC,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;gBAC9B,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;gBACjC,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;gBAC9B,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,GAAG;gBAC7B,SAAS,CAAC,QAAQ,KAAK,GAAG;gBAC1B,SAAS,CAAC,QAAQ;gBAClB,SAAS,CAAC,QAAQ;gBAClB,SAAS,CAAC,MAAM;gBAChB,SAAS,CAAC,IAAI;gBACd,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC;gBACjC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC;gBACjC,MAAM,CAAC,GAAG,GAAG,GAAG,GAAG,EAAE;gBACrB,MAAM,CAAC,GAAG,IAAI,GAAG;gBACjB,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG;gBACvB,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,GAAG,EAAE;gBAC5B,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC,GAAG;gBAE9B,OAAO,IAAI,EAAE,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;QACvD,CAAC;QACD,KAAK,CAAC,iBAAiB,CAAC,YAAY,EAAE,QAAQ,EAAE,QAAQ;YACtD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;YACvD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;YACjC,IACE,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,GAAG;gBAChC,IAAI,CAAC,UAAU,KAAK,IAAI;gBACxB,CAAC,SAAS;gBACV,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC;gBAChC,SAAS,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW;gBAC9C,CAAC,KAAK,CAAC,SAAS,CAAC,eAAe,EAAE,QAAQ,CAAC,eAAe,CAAC;gBAC3D,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,SAAS,CAAC;gBAC1C,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;gBACzC,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;gBAE1C,OAAO,IAAI,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,SAAS,CAAC,eAAgC,CAAC;YACzD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;YACjE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;YACxB,IACE,CAAC,IAAI;gBACL,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,SAAS;gBAC9B,IAAI,CAAC,GAAG,KAAK,MAAM,CAAC,YAAY;gBAChC,IAAI,CAAC,QAAQ,KAAK,QAAQ;gBAC1B,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,GAAG;gBAC/B,IAAI,CAAC,OAAO,KAAK,qBAAqB;gBACtC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,IAAI,CAAC,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;gBACpC,IAAI,CAAC,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;gBACrC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;gBAC9B,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE;gBACtB,MAAM,CAAC,GAAG,KAAK,QAAQ;gBACvB,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,SAAS;gBAChC,IAAI,CAAC,YAAY;oBACf,CAAC,MAAM,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;gBAClE,IAAI,CAAC,WAAW;oBACd,CAAC,MAAM,MAAM,CAAC;wBACZ,MAAM,EAAE,+BAA+B;wBACvC,MAAM,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE;qBAC9B,CAAC,CAAC;gBAEL,OAAO,IAAI,EAAE,CAAC;YAChB,KAAK,MAAM,IAAI,IAAI;gBACjB,aAAa;gBACb,cAAc;gBACd,IAAI;gBACJ,OAAO;gBACP,WAAW;gBACX,SAAS;aACV;gBACC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAM,IAA2C,CAAC,IAAI,CAAC;oBACrE,OAAO,IAAI,EAAE,CAAC;YAClB,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC;gBAC3C,IACE,MAAM,CAAC,IAAI,CAAC,KAAK,SAAS;oBAC1B,MAAM,CAAC,IAAI,CAAC,KAAM,IAA2C,CAAC,IAAI,CAAC;oBAEnE,OAAO,IAAI,EAAE,CAAC;YAClB,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC;QACpD,CAAC;QACD,KAAK,CAAC,eAAe,CAAC,KAAK;YACzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;YAC7C,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ;gBACzD,OAAO,IAAI,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC7D,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,EAAE,iBAAiB,EAAE,UAAU,CAAC;YAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,EAAE,gBAAgB,CAAC;YAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAC1C,MAAM,CAAC,EAAE,AAAD,EAAG,IAAI,EAAE,AAAD,EAAG,IAAI,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxD,MAAM,SAAS,GACb,UAAU,GAAG,IAAI,GAAG,QAAQ,GAAG,IAAI,GAAG,yBAAyB,CAAC;YAClE,IACE,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;gBACzB,MAAM,CAAC,EAAE,EAAE,iBAAiB,EAAE,EAAE,KAAK,MAAM,CAAC,GAAG;gBAC/C,MAAM,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC,GAAG;gBAC9B,MAAM,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS;gBACvC,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,QAAQ;gBAC7B,UAAU,EAAE,WAAW,EAAE,QAAQ,KAAK,KAAK,CAAC,QAAQ;gBACpD,UAAU,EAAE,OAAO,KAAK,KAAK,CAAC,QAAQ;gBACtC,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,UAAU;gBAC/B,MAAM,CAAC,SAAS,KAAK,WAAW;gBAChC,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE;oBAC7B,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;iBAC7C,CAAC;gBACF,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,eAAe,CAAC;gBAC3C,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,eAAe,CAAC;gBAChD,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,eAAe,CAAC;gBAC5D,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;gBAC7B,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC;gBACjC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC;gBACjC,MAAM,CAAC,GAAG,IAAI,GAAG;gBACjB,MAAM,CAAC,GAAG,GAAG,GAAG,GAAG,EAAE;gBACrB,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,GAAG,IAAI;gBAC9B,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG;gBACxB,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS;oBACvB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,GAAG,GAAG,GAAG,EAAE,CAAC,CAAC;gBAC/D,CAAC,MAAM;gBACP,MAAM,CAAC,IAAI,KAAK,qBAAqB;gBACrC,MAAM,CAAC,aAAa,KAAK,YAAY;gBACrC,MAAM,CAAC,oBAAoB,KAAK,SAAS;gBACzC,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;gBACjD,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,MAAM;gBACxC,MAAM,CAAC,EAAE,KAAK,SAAS,GAAG,GAAG,GAAG,MAAM,CAAC,eAAe;gBACtD,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC;gBAEvC,OAAO,IAAI,EAAE,CAAC;YAChB,OAAO;gBACL,KAAK,EAAE,IAAI,CAAC,UAAU;gBACtB,UAAU,EAAE,MAAM,CAAC,GAAG;gBACtB,aAAa,EAAE,MAAM,CAAC,GAAG;aAC1B,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"remote-issuer.js","sourceRoot":"","sources":["../../src/delegation-http/remote-issuer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EACL,mBAAmB,GAGpB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAyC/D,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;AAC/C,MAAM,IAAI,GAAG,GAAG,EAAE;IAChB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;AAC1D,CAAC,CAAC;AACF,SAAS,KAAK,CAAC,CAAU,EAAE,CAAU;IACnC,OAAO,YAAY,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AACD,SAAS,KAAK,CAAC,OAAe;IAC5B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC;QAClE,OAAO,IAAI,EAAE,CAAC;IAChB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAChE,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AACD,KAAK,UAAU,MAAM,CAAC,KAAc;IAClC,MAAM,IAAI,GAAG,IAAI,UAAU,CACzB,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAC3E,CAAC;IACF,OAAO,CACL,SAAS;QACT,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CACrE,CAAC;AACJ,CAAC;AACD,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,CACL,GAAG,CAAC,QAAQ,KAAK,QAAQ;YACzB,CAAC,GAAG,CAAC,IAAI;YACT,CAAC,GAAG,CAAC,QAAQ;YACb,CAAC,GAAG,CAAC,QAAQ;YACb,GAAG,CAAC,MAAM,KAAK,KAAK,CACrB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAA+B;IAE/B,MAAM,GAAG,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACxC,IACE,OAAO,GAAG,CAAC,8BAA8B,KAAK,QAAQ;QACtD,OAAO,GAAG,CAAC,+BAA+B,KAAK,QAAQ;QAEvD,OAAO,IAAI,CAAC;IACd,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,GAAG,CAAC,8BAA8B,CACjB,CAAC;QACpB,IACE,CAAC,OAAO;YACR,CAAC,GAAG,CAAC,wBAAwB,KAAK,SAAS;gBACzC,GAAG,CAAC,wBAAwB,KAAK,qBAAqB,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;YACjC,OAAO,CAAC,OAAO,KAAK,CAAC;YACrB,CAAC,iEAAiE,CAAC,IAAI,CACrE,OAAO,CAAC,SAAS,CAClB;YACD,CAAC,2CAA2C,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YACpE,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,MAAM,KAAK,EAAE;YAC5C,CAAC,QAAQ,CAAC,OAAO,CAAC,mBAAmB,CAAC;YACtC,CAAC,QAAQ,CAAC,OAAO,CAAC,kBAAkB,CAAC;YACrC,CAAC,GAAG,CAAC,+BAA+B;YACpC,GAAG,CAAC,+BAA+B,KAAK,GAAG,CAAC,kBAAkB;YAE9D,OAAO,IAAI,CAAC;QACd,OAAO;YACL,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;YAChD,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,uEAAuE;YACvE,wEAAwE;YACxE,2EAA2E;YAC3E,uEAAuE;YACvE,GAAG,CAAC,GAAG,CAAC,wBAAwB,KAAK,qBAAqB;gBACxD,CAAC,CAAC;oBACE,eAAe,EAAE,CAAC,OAAgB,EAAiB,EAAE;wBACnD,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;wBACnD,OAAO,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;oBAC1D,CAAC;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,YAAY,EAAE,kBAAkB,CAC9B,OAAO,EACP,GAAG,CAAC,+BAA+B,CACpC;SACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,OAAuB,EACvB,MAAc;IAEd,KAAK,UAAU,IAAI,CACjB,IAAsD,EACtD,IAAa;QAEb,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAC1C,OAAO,CAAC,kBAAkB,GAAG,8BAA8B,GAAG,IAAI,EAClE;YACE,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;YACjC,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,SAAS,GAAG,MAAM;aAClC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CACF,CAAC;QACF,IACE,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;YACrC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC,kBAAkB,CAAC;YACrE,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;YAEjE,OAAO,IAAI,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;QAC1C,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,CAAC;YACH,SAAS,CAAC;gBACR,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjC,IAAI,IAAI,CAAC,IAAI;oBAAE,MAAM;gBACrB,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;gBAC5B,IAAI,MAAM,GAAG,GAAG,GAAG,IAAI,EAAE,CAAC;oBACxB,0EAA0E;oBAC1E,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;oBACrC,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;QACzB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,IAAI,MAAM,EAAE,OAAO,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI;YAAE,OAAO,IAAI,EAAE,CAAC;QAC5D,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,UAAU,kBAAkB,CAC/B,OAAe,EACf,UAAsD,YAAY;QAElE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,GAAG,IAAI;YAC5D,OAAO,IAAI,EAAE,CAAC;QAChB,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3E,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW,IAAI,CAAC,aAAa,IAAI,KAAK,KAAK,SAAS;YACtE,OAAO,IAAI,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACvE,IACE,MAAM,CAAC,GAAG,KAAK,OAAO;YACtB,CAAC,OAAO,KAAK,aAAa;gBACxB,CAAC,CAAC,MAAM,CAAC,GAAG,KAAK,0BAA0B;gBAC3C,CAAC,CAAC,MAAM,CAAC,GAAG,KAAK,KAAK;oBACpB,CAAC,CAAC,OAAO,KAAK,WAAW,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC;YAC3D,MAAM,CAAC,IAAI;YACX,MAAM,CAAC,GAAG,KAAK,SAAS;YACxB,CAAC;gBACC,OAAO,CAAC,SAAS,GAAG,QAAQ;gBAC5B,OAAO,CAAC,SAAS,GAAG,YAAY;aACjC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC;YAEtB,OAAO,IAAI,EAAE,CAAC;QAChB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC,KAAK,EACL,KAAK,CAAC,OAAO,CAAC,eAAe,CAAiB,EAC9C,SAAS,EACT,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;QACF,IACE,CAAC,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAC1B,SAAS,EACT,GAAG,EACH,KAAK,CAAC,aAAa,CAAiB,EACpC,OAAO,CAAC,MAAM,CAAC,UAAU,GAAG,GAAG,GAAG,WAAW,CAAC,CAC/C,CAAC;YAEF,OAAO,IAAI,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACzE,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,SAAS;YAAE,OAAO,IAAI,EAAE,CAAC;QACrD,OAAO,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;IAClD,CAAC;IAED,OAAO;QACL,KAAK,CAAC,gBAAgB,CAAC,YAAY;YACjC,IACE,CAAC,iEAAiE,CAAC,IAAI,CACrE,YAAY,CACb;gBAED,OAAO,IAAI,EAAE,CAAC;YAChB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE;gBAC3C,aAAa,EAAE,YAAY;aAC5B,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YACnE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAC1C,IAAI,SAAc,CAAC;YACnB,IAAI,CAAC;gBACH,SAAS,GAAG,IAAI,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YACD,IACE,MAAM,CAAC,OAAO,KAAK,wBAAwB;gBAC3C,MAAM,CAAC,aAAa,KAAK,YAAY;gBACrC,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;gBAC9B,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;gBACjC,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;gBAC9B,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,GAAG;gBAC7B,SAAS,CAAC,QAAQ,KAAK,GAAG;gBAC1B,SAAS,CAAC,QAAQ;gBAClB,SAAS,CAAC,QAAQ;gBAClB,SAAS,CAAC,MAAM;gBAChB,SAAS,CAAC,IAAI;gBACd,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC;gBACjC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC;gBACjC,MAAM,CAAC,GAAG,GAAG,GAAG,GAAG,EAAE;gBACrB,MAAM,CAAC,GAAG,IAAI,GAAG;gBACjB,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG;gBACvB,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,GAAG,EAAE;gBAC5B,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC,GAAG;gBAE9B,OAAO,IAAI,EAAE,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;QACvD,CAAC;QACD,KAAK,CAAC,iBAAiB,CAAC,YAAY,EAAE,QAAQ,EAAE,QAAQ;YACtD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;YACvD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;YACjC,IACE,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,GAAG;gBAChC,IAAI,CAAC,UAAU,KAAK,IAAI;gBACxB,CAAC,SAAS;gBACV,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC;gBAChC,SAAS,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW;gBAC9C,CAAC,KAAK,CAAC,SAAS,CAAC,eAAe,EAAE,QAAQ,CAAC,eAAe,CAAC;gBAC3D,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,SAAS,CAAC;gBAC1C,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;gBACzC,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;gBAE1C,OAAO,IAAI,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,SAAS,CAAC,eAAgC,CAAC;YACzD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;YACjE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;YACxB,IACE,CAAC,IAAI;gBACL,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,SAAS;gBAC9B,IAAI,CAAC,GAAG,KAAK,MAAM,CAAC,YAAY;gBAChC,IAAI,CAAC,QAAQ,KAAK,QAAQ;gBAC1B,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,GAAG;gBAC/B,IAAI,CAAC,OAAO,KAAK,qBAAqB;gBACtC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,IAAI,CAAC,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;gBACpC,IAAI,CAAC,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;gBACrC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;gBAC9B,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE;gBACtB,MAAM,CAAC,GAAG,KAAK,QAAQ;gBACvB,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,SAAS;gBAChC,IAAI,CAAC,YAAY;oBACf,CAAC,MAAM,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;gBAClE,IAAI,CAAC,WAAW;oBACd,CAAC,MAAM,MAAM,CAAC;wBACZ,MAAM,EAAE,+BAA+B;wBACvC,MAAM,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE;qBAC9B,CAAC,CAAC;gBAEL,OAAO,IAAI,EAAE,CAAC;YAChB,KAAK,MAAM,IAAI,IAAI;gBACjB,aAAa;gBACb,cAAc;gBACd,IAAI;gBACJ,OAAO;gBACP,WAAW;gBACX,SAAS;aACV;gBACC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAM,IAA2C,CAAC,IAAI,CAAC;oBACrE,OAAO,IAAI,EAAE,CAAC;YAClB,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC;gBAC3C,IACE,MAAM,CAAC,IAAI,CAAC,KAAK,SAAS;oBAC1B,MAAM,CAAC,IAAI,CAAC,KAAM,IAA2C,CAAC,IAAI,CAAC;oBAEnE,OAAO,IAAI,EAAE,CAAC;YAClB,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC;QACpD,CAAC;QACD,KAAK,CAAC,eAAe,CAAC,KAAK;YACzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;YAC7C,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ;gBACzD,OAAO,IAAI,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC7D,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,EAAE,iBAAiB,EAAE,UAAU,CAAC;YAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,EAAE,gBAAgB,CAAC;YAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAC1C,MAAM,CAAC,EAAE,AAAD,EAAG,IAAI,EAAE,AAAD,EAAG,IAAI,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxD,MAAM,SAAS,GACb,UAAU,GAAG,IAAI,GAAG,QAAQ,GAAG,IAAI,GAAG,yBAAyB,CAAC;YAClE,IACE,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;gBACzB,MAAM,CAAC,EAAE,EAAE,iBAAiB,EAAE,EAAE,KAAK,MAAM,CAAC,GAAG;gBAC/C,MAAM,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC,GAAG;gBAC9B,MAAM,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS;gBACvC,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,QAAQ;gBAC7B,UAAU,EAAE,WAAW,EAAE,QAAQ,KAAK,KAAK,CAAC,QAAQ;gBACpD,UAAU,EAAE,OAAO,KAAK,KAAK,CAAC,QAAQ;gBACtC,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,UAAU;gBAC/B,MAAM,CAAC,SAAS,KAAK,WAAW;gBAChC,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE;oBAC7B,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;iBAC7C,CAAC;gBACF,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,eAAe,CAAC;gBAC3C,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,eAAe,CAAC;gBAChD,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,eAAe,CAAC;gBAC5D,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;gBAC7B,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC;gBACjC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC;gBACjC,MAAM,CAAC,GAAG,IAAI,GAAG;gBACjB,MAAM,CAAC,GAAG,GAAG,GAAG,GAAG,EAAE;gBACrB,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,GAAG,IAAI;gBAC9B,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG;gBACxB,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS;oBACvB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,GAAG,GAAG,GAAG,EAAE,CAAC,CAAC;gBAC/D,CAAC,MAAM;gBACP,MAAM,CAAC,IAAI,KAAK,qBAAqB;gBACrC,MAAM,CAAC,aAAa,KAAK,YAAY;gBACrC,MAAM,CAAC,oBAAoB,KAAK,SAAS;gBACzC,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;gBACjD,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,MAAM;gBACxC,MAAM,CAAC,EAAE,KAAK,SAAS,GAAG,GAAG,GAAG,MAAM,CAAC,eAAe;gBACtD,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC;gBAEvC,OAAO,IAAI,EAAE,CAAC;YAChB,OAAO;gBACL,KAAK,EAAE,IAAI,CAAC,UAAU;gBACtB,UAAU,EAAE,MAAM,CAAC,GAAG;gBACtB,aAAa,EAAE,MAAM,CAAC,GAAG;aAC1B,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/helpers/env-mapper.d.ts

@@ -72,7 +72,7 @@ export declare function detectEnvPrefix(env: any): string | undefined;
  * // Result: { NONCE_CACHE: kvNamespace1, PROOF_ARCHIVE: kvNamespace2, ... }
  * ```
  */
-export declare function mapPrefixedEnv(env: PrefixedCloudflareEnv, prefix: string): CloudflareEnv;
+export declare function mapPrefixedEnv(source: PrefixedCloudflareEnv, prefix: string): CloudflareEnv;
 /**
  * Normalize Cloudflare environment to standard CloudflareEnv format
  *
@@ -103,5 +103,5 @@ export declare function mapPrefixedEnv(env: PrefixedCloudflareEnv, prefix: strin
  * const normalized3 = normalizeCloudflareEnv(env3); // Uses direct access
  * ```
  */
-export declare function normalizeCloudflareEnv(env: any, prefix?: string): CloudflareEnv;
+export declare function normalizeCloudflareEnv(source: any, prefix?: string): CloudflareEnv;
 //# sourceMappingURL=env-mapper.d.ts.map

package/dist/helpers/env-mapper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env-mapper.d.ts","sourceRoot":"","sources":["../../src/helpers/env-mapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,KAAK,EACV,WAAW,EAGZ,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AAiBtD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,uBAAuB,EAAG,SAAkB,CAAC;AAE1D;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,MAAM,CAAC,EAAE,MAAM,GACd,WAAW,GAAG,SAAS,CAkCzB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,GAAG,SAAS,CAiC5D;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,qBAAqB,EAC1B,MAAM,EAAE,MAAM,GACb,aAAa,CAsIf;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,GAAG,EACR,MAAM,CAAC,EAAE,MAAM,GACd,aAAa,CA6Hf"}
+{"version":3,"file":"env-mapper.d.ts","sourceRoot":"","sources":["../../src/helpers/env-mapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,KAAK,EACV,WAAW,EAGZ,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AAkBtD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,uBAAuB,EAAG,SAAkB,CAAC;AAE1D;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,MAAM,CAAC,EAAE,MAAM,GACd,WAAW,GAAG,SAAS,CAkCzB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,GAAG,SAAS,CAiC5D;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,qBAAqB,EAC7B,MAAM,EAAE,MAAM,GACb,aAAa,CA0If;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,GAAG,EACX,MAAM,CAAC,EAAE,MAAM,GACd,aAAa,CAiIf"}

package/dist/helpers/env-mapper.js

@@ -8,6 +8,7 @@
  *
  * @module @kya-os/mcp-i-cloudflare/helpers/env-mapper
  */
+import { withCheckpointNames } from "@kya-os/contracts/config";
 /**
  * Standard KV binding names that may be prefixed
  */
@@ -140,7 +141,8 @@ export function detectEnvPrefix(env) {
  * // Result: { NONCE_CACHE: kvNamespace1, PROOF_ARCHIVE: kvNamespace2, ... }
  * ```
  */
-export function mapPrefixedEnv(env, prefix) {
+export function mapPrefixedEnv(source, prefix) {
+    const env = withCheckpointNames(source);
     // Handle prefix with or without leading underscore
     // Try both formats: _PREFIX_KEY and PREFIX_KEY
     const prefixUpper = prefix.toUpperCase();
@@ -173,14 +175,14 @@ export function mapPrefixedEnv(env, prefix) {
         MCPI_NATIVE_HTTP_ISSUER_CONFIG: typeof env.MCPI_NATIVE_HTTP_ISSUER_CONFIG === "string" ? env.MCPI_NATIVE_HTTP_ISSUER_CONFIG : undefined,
         MCPI_NATIVE_HTTP_INGRESS: typeof env.MCPI_NATIVE_HTTP_INGRESS === "string" ? env.MCPI_NATIVE_HTTP_INGRESS : undefined,
         MCPI_NATIVE_HTTP_ISSUER_API_KEY: typeof env.MCPI_NATIVE_HTTP_ISSUER_API_KEY === "string" ? env.MCPI_NATIVE_HTTP_ISSUER_API_KEY : undefined,
-        AGENTSHIELD_API_URL: typeof env.AGENTSHIELD_API_URL === "string"
-            ? env.AGENTSHIELD_API_URL
+        CHECKPOINT_API_URL: typeof env.CHECKPOINT_API_URL === "string"
+            ? env.CHECKPOINT_API_URL
             : undefined,
-        AGENTSHIELD_API_KEY: typeof env.AGENTSHIELD_API_KEY === "string"
-            ? env.AGENTSHIELD_API_KEY
+        CHECKPOINT_API_KEY: typeof env.CHECKPOINT_API_KEY === "string"
+            ? env.CHECKPOINT_API_KEY
             : undefined,
-        AGENTSHIELD_PROJECT_ID: typeof env.AGENTSHIELD_PROJECT_ID === "string"
-            ? env.AGENTSHIELD_PROJECT_ID
+        CHECKPOINT_PROJECT_ID: typeof env.CHECKPOINT_PROJECT_ID === "string"
+            ? env.CHECKPOINT_PROJECT_ID
             : undefined,
         OAUTH_ENCRYPTION_SECRET: typeof env.OAUTH_ENCRYPTION_SECRET === "string"
             ? env.OAUTH_ENCRYPTION_SECRET
@@ -227,6 +229,9 @@ export function mapPrefixedEnv(env, prefix) {
         MCP_OBJECT: (env[`${prefixWithUnderscore}_MCP_OBJECT`] ||
             env[`${prefixWithoutUnderscore}_MCP_OBJECT`] ||
             env.MCP_OBJECT),
+        NATIVE_OAUTH_STATE: (env[`${prefixWithUnderscore}_NATIVE_OAUTH_STATE`] ||
+            env[`${prefixWithoutUnderscore}_NATIVE_OAUTH_STATE`] ||
+            env.NATIVE_OAUTH_STATE),
         AUDIT_PRODUCER: (env[`${prefixWithUnderscore}_AUDIT_PRODUCER`] ||
             env[`${prefixWithoutUnderscore}_AUDIT_PRODUCER`] ||
             env.AUDIT_PRODUCER),
@@ -275,7 +280,8 @@ export function mapPrefixedEnv(env, prefix) {
  * const normalized3 = normalizeCloudflareEnv(env3); // Uses direct access
  * ```
  */
-export function normalizeCloudflareEnv(env, prefix) {
+export function normalizeCloudflareEnv(source, prefix) {
+    const env = withCheckpointNames(source);
     // If explicit prefix provided, use it
     if (prefix) {
         return mapPrefixedEnv(env, prefix);
@@ -307,14 +313,14 @@ export function normalizeCloudflareEnv(env, prefix) {
         MCPI_NATIVE_HTTP_ISSUER_CONFIG: typeof env.MCPI_NATIVE_HTTP_ISSUER_CONFIG === "string" ? env.MCPI_NATIVE_HTTP_ISSUER_CONFIG : undefined,
         MCPI_NATIVE_HTTP_INGRESS: typeof env.MCPI_NATIVE_HTTP_INGRESS === "string" ? env.MCPI_NATIVE_HTTP_INGRESS : undefined,
         MCPI_NATIVE_HTTP_ISSUER_API_KEY: typeof env.MCPI_NATIVE_HTTP_ISSUER_API_KEY === "string" ? env.MCPI_NATIVE_HTTP_ISSUER_API_KEY : undefined,
-        AGENTSHIELD_API_URL: typeof env.AGENTSHIELD_API_URL === "string"
-            ? env.AGENTSHIELD_API_URL
+        CHECKPOINT_API_URL: typeof env.CHECKPOINT_API_URL === "string"
+            ? env.CHECKPOINT_API_URL
             : undefined,
-        AGENTSHIELD_API_KEY: typeof env.AGENTSHIELD_API_KEY === "string"
-            ? env.AGENTSHIELD_API_KEY
+        CHECKPOINT_API_KEY: typeof env.CHECKPOINT_API_KEY === "string"
+            ? env.CHECKPOINT_API_KEY
             : undefined,
-        AGENTSHIELD_PROJECT_ID: typeof env.AGENTSHIELD_PROJECT_ID === "string"
-            ? env.AGENTSHIELD_PROJECT_ID
+        CHECKPOINT_PROJECT_ID: typeof env.CHECKPOINT_PROJECT_ID === "string"
+            ? env.CHECKPOINT_PROJECT_ID
             : undefined,
         OAUTH_ENCRYPTION_SECRET: typeof env.OAUTH_ENCRYPTION_SECRET === "string"
             ? env.OAUTH_ENCRYPTION_SECRET
@@ -351,6 +357,7 @@ export function normalizeCloudflareEnv(env, prefix) {
             ? env.CONSENT_REQUIRE_IDENTITY
             : undefined,
         MCP_OBJECT: env.MCP_OBJECT,
+        NATIVE_OAUTH_STATE: env.NATIVE_OAUTH_STATE,
         AUDIT_PRODUCER: env.AUDIT_PRODUCER,
         KYA_OS_AUDIT_CONFIG: stringValue(env.KYA_OS_AUDIT_CONFIG),
         KYA_OS_AUDIT_RECORDER_URL: stringValue(env.KYA_OS_AUDIT_RECORDER_URL),