@kya-os/mcp-i-cloudflare 1.15.0 → 1.16.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (129) hide show
  1. package/README.md +37 -0
  2. package/dist/agent.d.ts.map +1 -1
  3. package/dist/agent.js +81 -51
  4. package/dist/agent.js.map +1 -1
  5. package/dist/app.d.ts.map +1 -1
  6. package/dist/app.js +9 -12
  7. package/dist/app.js.map +1 -1
  8. package/dist/audit/deployment-binding.d.ts +12 -12
  9. package/dist/config.d.ts +28 -1
  10. package/dist/config.d.ts.map +1 -1
  11. package/dist/config.js +16 -1
  12. package/dist/config.js.map +1 -1
  13. package/dist/constants/storage-keys.d.ts +9 -0
  14. package/dist/constants/storage-keys.d.ts.map +1 -1
  15. package/dist/constants/storage-keys.js +9 -0
  16. package/dist/constants/storage-keys.js.map +1 -1
  17. package/dist/constants.d.ts +6 -0
  18. package/dist/constants.d.ts.map +1 -1
  19. package/dist/constants.js +6 -0
  20. package/dist/constants.js.map +1 -1
  21. package/dist/delegation-http/bearer-retry.d.ts +20 -4
  22. package/dist/delegation-http/bearer-retry.d.ts.map +1 -1
  23. package/dist/delegation-http/bearer-retry.js +56 -10
  24. package/dist/delegation-http/bearer-retry.js.map +1 -1
  25. package/dist/delegation-http/consent-anchor-bridge.d.ts.map +1 -1
  26. package/dist/delegation-http/consent-anchor-bridge.js +72 -13
  27. package/dist/delegation-http/consent-anchor-bridge.js.map +1 -1
  28. package/dist/delegation-http/native-oauth-state.d.ts +16 -0
  29. package/dist/delegation-http/native-oauth-state.d.ts.map +1 -1
  30. package/dist/delegation-http/native-oauth-state.js +24 -9
  31. package/dist/delegation-http/native-oauth-state.js.map +1 -1
  32. package/dist/delegation-http/native-oauth.d.ts.map +1 -1
  33. package/dist/delegation-http/native-oauth.js +26 -7
  34. package/dist/delegation-http/native-oauth.js.map +1 -1
  35. package/dist/delegation-http/oauth-recovery.d.ts +3 -0
  36. package/dist/delegation-http/oauth-recovery.d.ts.map +1 -0
  37. package/dist/delegation-http/oauth-recovery.js +39 -0
  38. package/dist/delegation-http/oauth-recovery.js.map +1 -0
  39. package/dist/delegation-http/remote-issuer.d.ts +15 -0
  40. package/dist/delegation-http/remote-issuer.d.ts.map +1 -1
  41. package/dist/delegation-http/remote-issuer.js +27 -8
  42. package/dist/delegation-http/remote-issuer.js.map +1 -1
  43. package/dist/helpers/env-mapper.d.ts.map +1 -1
  44. package/dist/helpers/env-mapper.js +28 -6
  45. package/dist/helpers/env-mapper.js.map +1 -1
  46. package/dist/index.d.ts +6 -3
  47. package/dist/index.d.ts.map +1 -1
  48. package/dist/index.js +9 -1
  49. package/dist/index.js.map +1 -1
  50. package/dist/proof-generator.d.ts +8 -7
  51. package/dist/proof-generator.d.ts.map +1 -1
  52. package/dist/proof-generator.js +32 -34
  53. package/dist/proof-generator.js.map +1 -1
  54. package/dist/runtime/oauth-handler.d.ts.map +1 -1
  55. package/dist/runtime/oauth-handler.js +43 -31
  56. package/dist/runtime/oauth-handler.js.map +1 -1
  57. package/dist/runtime/tool-activity.d.ts +31 -4
  58. package/dist/runtime/tool-activity.d.ts.map +1 -1
  59. package/dist/runtime/tool-activity.js +48 -0
  60. package/dist/runtime/tool-activity.js.map +1 -1
  61. package/dist/runtime.d.ts +31 -0
  62. package/dist/runtime.d.ts.map +1 -1
  63. package/dist/runtime.js +65 -0
  64. package/dist/runtime.js.map +1 -1
  65. package/dist/security/admission-refusal.d.ts +32 -0
  66. package/dist/security/admission-refusal.d.ts.map +1 -0
  67. package/dist/security/admission-refusal.js +97 -0
  68. package/dist/security/admission-refusal.js.map +1 -0
  69. package/dist/security/card-proof-support.d.ts +66 -0
  70. package/dist/security/card-proof-support.d.ts.map +1 -0
  71. package/dist/security/card-proof-support.js +121 -0
  72. package/dist/security/card-proof-support.js.map +1 -0
  73. package/dist/security/mcp-admission.d.ts +28 -2
  74. package/dist/security/mcp-admission.d.ts.map +1 -1
  75. package/dist/security/mcp-admission.js +129 -29
  76. package/dist/security/mcp-admission.js.map +1 -1
  77. package/dist/security/mcp-holder-admission.d.ts +12 -1
  78. package/dist/security/mcp-holder-admission.d.ts.map +1 -1
  79. package/dist/security/mcp-holder-admission.js +46 -8
  80. package/dist/security/mcp-holder-admission.js.map +1 -1
  81. package/dist/security/presented-delegation.d.ts +10 -0
  82. package/dist/security/presented-delegation.d.ts.map +1 -1
  83. package/dist/security/presented-delegation.js +23 -3
  84. package/dist/security/presented-delegation.js.map +1 -1
  85. package/dist/services/admin.service.d.ts.map +1 -1
  86. package/dist/services/admin.service.js +24 -9
  87. package/dist/services/admin.service.js.map +1 -1
  88. package/dist/services/approval-route.d.ts +48 -0
  89. package/dist/services/approval-route.d.ts.map +1 -0
  90. package/dist/services/approval-route.js +87 -0
  91. package/dist/services/approval-route.js.map +1 -0
  92. package/dist/services/consent-config.service.d.ts.map +1 -1
  93. package/dist/services/consent-config.service.js +20 -5
  94. package/dist/services/consent-config.service.js.map +1 -1
  95. package/dist/services/consent.service.d.ts +113 -5
  96. package/dist/services/consent.service.d.ts.map +1 -1
  97. package/dist/services/consent.service.js +746 -904
  98. package/dist/services/consent.service.js.map +1 -1
  99. package/dist/services/credential-auth.handler.d.ts +2 -0
  100. package/dist/services/credential-auth.handler.d.ts.map +1 -1
  101. package/dist/services/credential-auth.handler.js +19 -3
  102. package/dist/services/credential-auth.handler.js.map +1 -1
  103. package/dist/services/delegation-trust.d.ts +97 -0
  104. package/dist/services/delegation-trust.d.ts.map +1 -0
  105. package/dist/services/delegation-trust.js +378 -0
  106. package/dist/services/delegation-trust.js.map +1 -0
  107. package/dist/services/delegation.service.d.ts +56 -14
  108. package/dist/services/delegation.service.d.ts.map +1 -1
  109. package/dist/services/delegation.service.js +160 -68
  110. package/dist/services/delegation.service.js.map +1 -1
  111. package/dist/services/multipart-parser.d.ts +73 -0
  112. package/dist/services/multipart-parser.d.ts.map +1 -0
  113. package/dist/services/multipart-parser.js +116 -0
  114. package/dist/services/multipart-parser.js.map +1 -0
  115. package/dist/services/proof.service.d.ts +38 -0
  116. package/dist/services/proof.service.d.ts.map +1 -1
  117. package/dist/services/proof.service.js +41 -2
  118. package/dist/services/proof.service.js.map +1 -1
  119. package/dist/types.d.ts +17 -0
  120. package/dist/types.d.ts.map +1 -1
  121. package/dist/utils/checkpoint-project-id.d.ts +31 -0
  122. package/dist/utils/checkpoint-project-id.d.ts.map +1 -0
  123. package/dist/utils/checkpoint-project-id.js +35 -0
  124. package/dist/utils/checkpoint-project-id.js.map +1 -0
  125. package/dist/utils/oauth-profile.d.ts +7 -0
  126. package/dist/utils/oauth-profile.d.ts.map +1 -0
  127. package/dist/utils/oauth-profile.js +24 -0
  128. package/dist/utils/oauth-profile.js.map +1 -0
  129. package/package.json +7 -6
@@ -0,0 +1 @@
1
+ {"version":3,"file":"multipart-parser.d.ts","sourceRoot":"","sources":["../../src/services/multipart-parser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,2DAA2D;AAC3D,MAAM,WAAW,cAAc;IAC7B,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,KAAK,EAAE,MAAM,CAAC;CACf;AAeD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,EAAE,CAiBtE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GAChB,MAAM,CAKR;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAChC,OAAO,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAQ/B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAclE"}
@@ -0,0 +1,116 @@
1
+ /**
2
+ * multipart-parser.ts
3
+ *
4
+ * Hand-rolled multipart/form-data field extractor.
5
+ *
6
+ * Cloudflare Workers' `Request.formData()` is the primary path for parsing
7
+ * form submissions, but it can fail or misbehave in two ways that we observe
8
+ * in the wild on the consent-approval endpoint:
9
+ *
10
+ * 1. The Content-Type header is `multipart/form-data` but is missing the
11
+ * `boundary=` parameter, so `formData()` throws.
12
+ * 2. `formData()` "succeeds" but returns the entire raw multipart body as a
13
+ * single malformed `[key, value]` entry (the boundary/Content-Disposition
14
+ * preamble ends up in the key).
15
+ *
16
+ * In both cases we fall back to parsing the raw body text ourselves. This
17
+ * module isolates that boundary-detection logic behind a single, testable
18
+ * interface so it is not duplicated across every fallback branch in
19
+ * ConsentService.
20
+ *
21
+ * This is intentionally a *permissive* parser for trusted same-origin form
22
+ * posts, not a general-purpose RFC 7578 implementation. Its behavior is
23
+ * pinned by multipart-parser.test.ts and must remain byte-for-byte compatible
24
+ * with the original inline logic.
25
+ */
26
+ /**
27
+ * Matches a `Content-Disposition: form-data; name="field"` header followed by
28
+ * a blank line and then the field value, captured up to the next boundary
29
+ * (`\r\n------`) or end of input.
30
+ *
31
+ * NOTE: a fresh RegExp instance is created per call because the `g` flag makes
32
+ * `lastIndex` stateful; sharing one instance across calls would corrupt
33
+ * concurrent parses.
34
+ */
35
+ function createFieldRegex() {
36
+ return /Content-Disposition:\s*form-data;\s*name="([^"]+)"\r?\n\r?\n([\s\S]*?)(?=\r?\n------|$)/g;
37
+ }
38
+ /**
39
+ * Extract all form fields from a raw multipart body string.
40
+ *
41
+ * @param rawBody - The raw multipart/form-data body text.
42
+ * @returns The extracted fields in document order. Empty if nothing matched.
43
+ */
44
+ export function parseMultipartFields(rawBody) {
45
+ const fields = [];
46
+ if (!rawBody) {
47
+ return fields;
48
+ }
49
+ const fieldRegex = createFieldRegex();
50
+ let match;
51
+ while ((match = fieldRegex.exec(rawBody)) !== null) {
52
+ fields.push({
53
+ name: match[1],
54
+ // Remove trailing newlines/whitespace, matching the original `.trim()`.
55
+ value: match[2].trim(),
56
+ });
57
+ }
58
+ return fields;
59
+ }
60
+ /**
61
+ * Reconstruct a parseable multipart body from a malformed single-entry
62
+ * `[key, value]` pair produced by `formData()` when it fails to split the
63
+ * body correctly.
64
+ *
65
+ * When the split lands between the `...name` token and the `"field"...`
66
+ * value, the `=` separator is lost; we re-insert it so the field regex can
67
+ * match. Otherwise the two halves are concatenated as-is.
68
+ *
69
+ * @param keyPart - The malformed entry key.
70
+ * @param valuePart - The malformed entry value.
71
+ * @returns A single string suitable for {@link parseMultipartFields}.
72
+ */
73
+ export function reconstructMalformedMultipart(keyPart, valuePart) {
74
+ if (keyPart.trim().endsWith("name") && valuePart.trim().startsWith('"')) {
75
+ return keyPart + "=" + valuePart;
76
+ }
77
+ return keyPart + valuePart;
78
+ }
79
+ /**
80
+ * Detect whether a `formData()` result is the "single malformed entry" case
81
+ * where the entire multipart body leaked into one `[key, value]` pair.
82
+ *
83
+ * @param entries - The materialized entries from `formData().entries()`.
84
+ */
85
+ export function isMalformedSingleEntry(entries) {
86
+ return (entries.length === 1 &&
87
+ typeof entries[0][0] === "string" &&
88
+ entries[0][0].includes("Content-Disposition") &&
89
+ typeof entries[0][1] === "string" &&
90
+ entries[0][1].includes("Content-Disposition"));
91
+ }
92
+ /**
93
+ * Extract a clean field name from a (possibly malformed) FormData entry key.
94
+ *
95
+ * Returns the original key for normal entries, the parsed `name="..."` value
96
+ * when the key contains a Content-Disposition preamble, or `null` for keys
97
+ * that are pure boundary noise / unparseable and should be skipped: a
98
+ * preamble with no name, a boundary line, or undici's `formdata-undici`
99
+ * boundary.
100
+ *
101
+ * @param key - A raw FormData entry key.
102
+ */
103
+ export function extractFieldNameFromKey(key) {
104
+ if (key.includes("Content-Disposition")) {
105
+ const nameMatch = key.match(/name="([^"]+)"/);
106
+ return nameMatch && nameMatch[1] ? nameMatch[1] : null;
107
+ }
108
+ if (key.includes("------") ||
109
+ key.includes("\r\n") ||
110
+ key.trim() === "" ||
111
+ key.includes("formdata-undici")) {
112
+ return null;
113
+ }
114
+ return key;
115
+ }
116
+ //# sourceMappingURL=multipart-parser.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"multipart-parser.js","sourceRoot":"","sources":["../../src/services/multipart-parser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAUH;;;;;;;;GAQG;AACH,SAAS,gBAAgB;IACvB,OAAO,0FAA0F,CAAC;AACpG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,UAAU,GAAG,gBAAgB,EAAE,CAAC;IACtC,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YACd,wEAAwE;YACxE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;SACvB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,6BAA6B,CAC3C,OAAe,EACf,SAAiB;IAEjB,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxE,OAAO,OAAO,GAAG,GAAG,GAAG,SAAS,CAAC;IACnC,CAAC;IACD,OAAO,OAAO,GAAG,SAAS,CAAC;AAC7B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAiC;IAEjC,OAAO,CACL,OAAO,CAAC,MAAM,KAAK,CAAC;QACpB,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ;QACjC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QAC7C,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ;QAChC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAY,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAW;IACjD,IAAI,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC9C,OAAO,SAAS,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,CAAC;IACD,IACE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACtB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;QACpB,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QACjB,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAC/B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
@@ -12,6 +12,7 @@ import type { CloudflareRuntimeConfig } from "../config";
12
12
  import type { CloudflareRuntime } from "../runtime";
13
13
  import type { DelegationDenial } from "@kya-os/mcp-i-runtime";
14
14
  import { type ToolActivity } from "../runtime/tool-activity";
15
+ import type { AdmissionRefusalCode } from "../security/admission-refusal";
15
16
  export interface ProofSubmissionContext {
16
17
  session: {
17
18
  id: string;
@@ -34,6 +35,13 @@ export interface ProofSubmissionContext {
34
35
  * unprotected tools, even when the session holds a stored grant.
35
36
  */
36
37
  verifiedDelegationId?: string;
38
+ /**
39
+ * DID whose key signed THIS request, as proved by request admission. Sent
40
+ * as `session.agent.did`. Never a caller-asserted DID: the session's
41
+ * `agentDid` can fall back to the server's own DID and `clientDid` is
42
+ * whatever the caller claimed.
43
+ */
44
+ holderDid?: string;
37
45
  }
38
46
  /** A protected call the runtime refused before the handler ran. */
39
47
  export interface DeniedToolCall {
@@ -51,6 +59,24 @@ export interface DeniedToolCall {
51
59
  * grant was not refused by any delegation.
52
60
  */
53
61
  delegationId?: string;
62
+ /** DID proved by request admission for this call; see ProofSubmissionContext. */
63
+ holderDid?: string;
64
+ }
65
+ /**
66
+ * A tools/call that request admission refused before the runtime ran.
67
+ *
68
+ * Deliberately has no agent DID, grant, proof, params or upstream reasons:
69
+ * the caller was not proved, no grant was evaluated, and Checkpoint promises
70
+ * none of the rest ever reaches an activity event.
71
+ */
72
+ export interface AdmissionRefusedToolCall {
73
+ /** The emitting server's own DID. */
74
+ serverDid: string;
75
+ sessionId?: string;
76
+ /** The registered tool the refused call named. */
77
+ toolName: string;
78
+ /** The admission's own classification of why it refused. */
79
+ code: AdmissionRefusalCode;
54
80
  }
55
81
  export declare class ProofService {
56
82
  private config;
@@ -106,6 +132,18 @@ export declare class ProofService {
106
132
  * must not replace the refusal the client is about to receive.
107
133
  */
108
134
  reportDenied(call: DeniedToolCall): Promise<void>;
135
+ /**
136
+ * Record a tools/call that request admission refused.
137
+ *
138
+ * Structured mode only; pass-only (default) sends nothing. The event names
139
+ * the tool and carries `${code}: ${sentence}`, with no `session.agent` and
140
+ * no `delegation.jti`, because the caller was not proved and no grant was
141
+ * evaluated. Built field by field from `call`, so nothing else a caller
142
+ * passes can reach the wire. Flushed at once like `reportDenied`, since a
143
+ * refused call produces no proof. Never throws: telemetry must not replace
144
+ * the refusal the client is about to receive.
145
+ */
146
+ reportAdmissionRefused(call: AdmissionRefusedToolCall): Promise<void>;
109
147
  /**
110
148
  * Notify Reputation Engine of an interaction
111
149
  *
@@ -1 +1 @@
1
- {"version":3,"file":"proof.service.d.ts","sourceRoot":"","sources":["../../src/services/proof.service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAEV,mBAAmB,EACpB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAmB,MAAM,YAAY,CAAC;AAUrE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAEL,KAAK,YAAY,EAClB,MAAM,0BAA0B,CAAC;AAElC,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE;QACP,EAAE,EAAE,MAAM,CAAC;QACX,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IAGF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB,YAAY,CAAC,EAAE,mBAAmB,CAAC;IAEnC,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;OAGG;IACH,QAAQ,CAAC,EAAE,YAAY,CAAC;IAExB;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,mEAAmE;AACnE,MAAM,WAAW,cAAc;IAC7B,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,sEAAsE;IACtE,KAAK,EAAE;QAAE,MAAM,CAAC,EAAE,gBAAgB,CAAA;KAAE,CAAC;IACrC;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAwBD,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,OAAO,CAAC,CAAoB;IACpC,OAAO,CAAC,UAAU,CAAC,CAAkB;IACrC;;;;;OAKG;IACH,OAAO,CAAC,aAAa,CAAC,CAAqB;IAC3C,OAAO,CAAC,mBAAmB,CAAS;IACpC,kFAAkF;IAClF,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAU;IAC7C,oEAAoE;IACpE,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAU;gBAElC,MAAM,EAAE,uBAAuB,EAAE,OAAO,CAAC,EAAE,iBAAiB;IAyIxE;;;;;;;;;OASG;IACG,WAAW,CACf,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,IAAI,CAAC;IA0EhB;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IAe5B;;;;;;;OAOG;IACH,OAAO,CAAC,gBAAgB;IAsBxB;;;;;;;OAOG;IACG,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBvD;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,sBAAsB;IAsD9B;;OAEG;YACW,iBAAiB;IA0T/B;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAY7B"}
1
+ {"version":3,"file":"proof.service.d.ts","sourceRoot":"","sources":["../../src/services/proof.service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAEV,mBAAmB,EACpB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAmB,MAAM,YAAY,CAAC;AAUrE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAGL,KAAK,YAAY,EAClB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAE1E,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE;QACP,EAAE,EAAE,MAAM,CAAC;QACX,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IAGF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB,YAAY,CAAC,EAAE,mBAAmB,CAAC;IAEnC,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;OAGG;IACH,QAAQ,CAAC,EAAE,YAAY,CAAC;IAExB;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAE9B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,mEAAmE;AACnE,MAAM,WAAW,cAAc;IAC7B,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,sEAAsE;IACtE,KAAK,EAAE;QAAE,MAAM,CAAC,EAAE,gBAAgB,CAAA;KAAE,CAAC;IACrC;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,wBAAwB;IACvC,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,IAAI,EAAE,oBAAoB,CAAC;CAC5B;AAwBD,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,OAAO,CAAC,CAAoB;IACpC,OAAO,CAAC,UAAU,CAAC,CAAkB;IACrC;;;;;OAKG;IACH,OAAO,CAAC,aAAa,CAAC,CAAqB;IAC3C,OAAO,CAAC,mBAAmB,CAAS;IACpC,kFAAkF;IAClF,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAU;IAC7C,oEAAoE;IACpE,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAU;gBAElC,MAAM,EAAE,uBAAuB,EAAE,OAAO,CAAC,EAAE,iBAAiB;IAyIxE;;;;;;;;;OASG;IACG,WAAW,CACf,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,IAAI,CAAC;IA0EhB;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IAe5B;;;;;;;OAOG;IACH,OAAO,CAAC,gBAAgB;IA2BxB;;;;;;;OAOG;IACG,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAuBvD;;;;;;;;;;OAUG;IACG,sBAAsB,CAAC,IAAI,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAyB3E;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,sBAAsB;IAsD9B;;OAEG;YACW,iBAAiB;IA0T/B;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAY7B"}
@@ -8,7 +8,7 @@
8
8
  */
9
9
  import { ProofBatchQueue, CheckpointProofDestination, } from "./proof-batch-queue";
10
10
  import { KyaOsEventsEmitter, } from "./kya-os-events.service";
11
- import { activityForDenial, } from "../runtime/tool-activity";
11
+ import { activityForAdmissionRefusal, activityForDenial, } from "../runtime/tool-activity";
12
12
  /**
13
13
  * Know That AI Registry URL
14
14
  * @see packages/contracts/src/reputation/api.ts
@@ -224,7 +224,12 @@ export class ProofService {
224
224
  * was verified, so a fail linked to it would read as a failed delegation.
225
225
  */
226
226
  toolInvokedInput(serverDid, toolName, context) {
227
- const base = { serverDid, sessionId: context.session.id, toolName };
227
+ const base = {
228
+ serverDid,
229
+ sessionId: context.session.id,
230
+ toolName,
231
+ ...(context.holderDid ? { agentDid: context.holderDid } : {}),
232
+ };
228
233
  const activity = context.activity;
229
234
  if (!this.structuredActivity || !activity) {
230
235
  return { ...base, success: context.success };
@@ -257,6 +262,7 @@ export class ProofService {
257
262
  this.eventsEmitter.emitToolInvoked({
258
263
  serverDid: call.serverDid,
259
264
  sessionId: call.sessionId,
265
+ ...(call.holderDid ? { agentDid: call.holderDid } : {}),
260
266
  toolName: call.toolName,
261
267
  success: false,
262
268
  errorExcerpt: activity.excerpt,
@@ -270,6 +276,39 @@ export class ProofService {
270
276
  console.error("[ProofService] Failed to report denied tool call:", error);
271
277
  }
272
278
  }
279
+ /**
280
+ * Record a tools/call that request admission refused.
281
+ *
282
+ * Structured mode only; pass-only (default) sends nothing. The event names
283
+ * the tool and carries `${code}: ${sentence}`, with no `session.agent` and
284
+ * no `delegation.jti`, because the caller was not proved and no grant was
285
+ * evaluated. Built field by field from `call`, so nothing else a caller
286
+ * passes can reach the wire. Flushed at once like `reportDenied`, since a
287
+ * refused call produces no proof. Never throws: telemetry must not replace
288
+ * the refusal the client is about to receive.
289
+ */
290
+ async reportAdmissionRefused(call) {
291
+ if (!this.structuredActivity || !this.eventsEmitter) {
292
+ return;
293
+ }
294
+ try {
295
+ const activity = activityForAdmissionRefusal(call.code);
296
+ if (!activity) {
297
+ return;
298
+ }
299
+ this.eventsEmitter.emitToolInvoked({
300
+ serverDid: call.serverDid,
301
+ sessionId: call.sessionId,
302
+ toolName: call.toolName,
303
+ success: false,
304
+ errorExcerpt: activity.excerpt,
305
+ });
306
+ await this.eventsEmitter.flush();
307
+ }
308
+ catch (error) {
309
+ console.error("[ProofService] Failed to report admission refusal:", error);
310
+ }
311
+ }
273
312
  /**
274
313
  * Notify Reputation Engine of an interaction
275
314
  *
@@ -1 +1 @@
1
- {"version":3,"file":"proof.service.js","sourceRoot":"","sources":["../../src/services/proof.service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AASH,OAAO,EACL,eAAe,EACf,0BAA0B,GAE3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,kBAAkB,GAEnB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,iBAAiB,GAElB,MAAM,0BAA0B,CAAC;AAiDlC;;;GAGG;AACH,MAAM,YAAY,GAAG,qBAA8B,CAAC;AAEpD;;;GAGG;AACH,MAAM,mBAAmB,GAAG,gBAAyB,CAAC;AAYtD,MAAM,OAAO,YAAY;IACf,MAAM,CAA0B;IAChC,OAAO,CAAqB;IAC5B,UAAU,CAAmB;IACrC;;;;;OAKG;IACK,aAAa,CAAsB;IACnC,mBAAmB,GAAG,KAAK,CAAC,CAAC,0CAA0C;IAC/E,kFAAkF;IACjE,kBAAkB,CAAU;IAC7C,oEAAoE;IACnD,mBAAmB,CAAU;IAE9C,YAAY,MAA+B,EAAE,OAA2B;QACtE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,kBAAkB;YACrB,MAAM,CAAC,aAAa,EAAE,gBAAgB,KAAK,YAAY,CAAC;QAC1D,IAAI,CAAC,mBAAmB;YACtB,MAAM,CAAC,aAAa,EAAE,mBAAmB,KAAK,IAAI,CAAC;QAErD,qCAAqC;QACrC,uFAAuF;QACvF,MAAM,cAAc,GAAI,IAAI,CAAC,MAAc,CAAC,QAAQ,CAAC;QACrD,MAAM,SAAS,GAAG,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,CAC9D,CAAC,IAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI,IAAI,CAAC,MAAM,CAC1F,CAAC;QAEF,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE;YAC3C,eAAe,EAAE,cAAc,EAAE,OAAO,IAAI,KAAK;YACjD,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,eAAe,EAAE,CAAC,CAAC,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM;YACnE,gBAAgB,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;YACvE,aAAa,EAAE,CAAC,CAAC,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM;YACtE,MAAM,EACJ,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,SAAS;SACrE,CAAC,CAAC;QAEH,2DAA2D;QAC3D,IAAI,cAAc,EAAE,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1C,OAAO,CAAC,IAAI,CACV,2EAA2E,CAC5E,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;YAC3D,OAAO,CAAC,IAAI,CACV,yEAAyE,CAC1E,CAAC;YACF,OAAO,CAAC,IAAI,CACV,kFAAkF,CACnF,CAAC;QACJ,CAAC;QAED,uCAAuC;QACvC,qEAAqE;QACrE,+EAA+E;QAC/E,IACE,cAAc,EAAE,OAAO;YACvB,cAAc,CAAC,UAAU,EAAE,YAAY,EAAE,MAAM,EAC/C,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,YAAY,GAAuB,EAAE,CAAC;gBAE5C,KAAK,MAAM,UAAU,IAAI,cAAc,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;oBAChE,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,IAAI,UAAU,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;wBAC1E,8DAA8D;wBAC9D,IAAI,UAAU,CAAC,MAAM,EAAE,MAAM,IAAI,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;4BAC3D,YAAY,CAAC,IAAI,CACf,IAAI,0BAA0B,CAC5B,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,MAAM,CAClB,CACF,CAAC;4BACF,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE;gCAC5D,MAAM,EAAE,UAAU,CAAC,MAAM;gCACzB,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM;6BAC/B,CAAC,CAAC;4BAEH,6DAA6D;4BAC7D,gEAAgE;4BAChE,gCAAgC;4BAChC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;gCACxB,IAAI,CAAC,aAAa,GAAG,IAAI,kBAAkB,CACzC,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,MAAM,EACjB;oCACE,YAAY,EAAE,cAAc,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE;oCAC1D,UAAU,EAAE,cAAc,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC;oCACrD,KAAK,EAAE,cAAc,CAAC,UAAU,CAAC,KAAK,IAAI,KAAK;iCAChD,CACF,CAAC;gCACF,OAAO,CAAC,KAAK,CACX,2DAA2D,CAC5D,CAAC;4BACJ,CAAC;wBACH,CAAC;6BAAM,CAAC;4BACN,OAAO,CAAC,IAAI,CACV,0EAA0E,EAC1E;gCACE,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM;gCAC9B,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM;6BAC/B,CACF,CAAC;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5B,oEAAoE;oBACpE,sEAAsE;oBACtE,IAAI,CAAC,UAAU,GAAG,IAAI,eAAe,CAAC;wBACpC,YAAY;wBACZ,YAAY,EAAE,cAAc,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE;wBAC1D,eAAe,EAAE,cAAc,CAAC,UAAU,CAAC,eAAe,IAAI,IAAI;wBAClE,UAAU,EAAE,cAAc,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC;wBACrD,KAAK,EAAE,cAAc,CAAC,UAAU,CAAC,KAAK,IAAI,KAAK;qBAChD,CAAC,CAAC;oBACH,OAAO,CAAC,KAAK,CACX,2FAA2F,EAC3F;wBACE,YAAY,EAAE,cAAc,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE;wBAC1D,eAAe,EACb,cAAc,CAAC,UAAU,CAAC,eAAe,IAAI,IAAI;wBACnD,YAAY,EAAE,YAAY,CAAC,MAAM;qBAClC,CACF,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,CACV,+EAA+E,CAChF,CAAC;oBACF,8CAA8C;oBAC9C,oDAAoD;oBACpD,MAAM,WAAW,GACd,IAAI,CAAC,MAAc,CAAC,WAAW;wBAC/B,IAAI,CAAC,MAAc,CAAC,IAAI,EAAE,WAAW;wBACtC,aAAa,CAAC;oBAChB,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;wBACjC,OAAO,CAAC,IAAI,CACV,gFAAgF,CACjF,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CACX,kDAAkD,EAClD,KAAK,CACN,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,WAAW,CACf,KAAoB,EACpB,OAA+B;QAE/B,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CACV,+DAA+D,CAChE,CAAC;YACF,OAAO;QACT,CAAC;QAED,0EAA0E;QAC1E,2EAA2E;QAC3E,sEAAsE;QACtE,uEAAuE;QACvE,IAAI,IAAI,CAAC,aAAa,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YACpE,IAAI,CAAC,aAAa,CAAC,eAAe,CAChC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CACjE,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAEzD,wEAAwE;QACxE,uEAAuE;QACvE,0EAA0E;QAC1E,IAAI,IAAI,CAAC,mBAAmB,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;YAC7D,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;YAChC,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QAED,+DAA+D;QAC/D,yEAAyE;QACzE,IAAI,CAAC,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACjD,OAAO,CAAC,KAAK,CACX,iFAAiF,CAClF,CAAC;YACF,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;YAChC,uEAAuE;YACvE,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QAED,0DAA0D;QAC1D,wEAAwE;QACxE,qDAAqD;QACrD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,CAAC,KAAK,CAAC,gDAAgD,EAAE;oBAC9D,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG;oBACnB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;oBAC/B,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO;oBAC3B,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,SAAS;iBAChD,CAAC,CAAC;gBAEH,yEAAyE;gBACzE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAE/B,+EAA+E;gBAC/E,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAErD,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CACX,4EAA4E,EAC5E,KAAK,CACN,CAAC;gBACF,oCAAoC;YACtC,CAAC;QACH,CAAC;QAED,6DAA6D;QAC7D,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IACrD,CAAC;IAED;;;;;;OAMG;IACK,oBAAoB,CAC1B,OAA+B;QAE/B,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC9B,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO;YACL,GAAG,OAAO;YACV,OAAO,EAAE;gBACP,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;gBACtB,YAAY,EAAE,OAAO,CAAC,oBAAoB;aAC3C;SACF,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,gBAAgB,CACtB,SAAiB,EACjB,QAAgB,EAChB,OAA+B;QAE/B,MAAM,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC;QACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1C,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QAC/C,CAAC;QACD,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAChC,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrE,CAAC;QACD,OAAO;YACL,GAAG,IAAI;YACP,OAAO,EAAE,IAAI;YACb,GAAG,CAAC,OAAO,CAAC,oBAAoB;gBAC9B,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,oBAAoB,EAAE;gBACjD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,YAAY,CAAC,IAAoB;QACrC,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACpD,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/C,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC;gBACjC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,OAAO,EAAE,KAAK;gBACd,YAAY,EAAE,QAAQ,CAAC,OAAO;gBAC9B,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,YAAY;oBACxC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,YAAY,EAAE;oBACtC,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,mDAAmD,EAAE,KAAK,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED;;;;;;;;;;;OAWG;IACK,sBAAsB,CAC5B,QAAgB,EAChB,OAA+B;QAE/B,2EAA2E;QAC3E,MAAM,mBAAmB,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC;QAC/D,IAAI,eAA4C,CAAC;QAEjD,IAAI,mBAAmB,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,kCAAkC;gBAClC,OAAO;YACT,CAAC;QACH,CAAC;QAED,sDAAsD;QACtD,IAAI,CAAC,eAAe,EAAE,UAAU,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QAED,oEAAoE;QACpE,0EAA0E;QAC1E,0CAA0C;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,kBAAkB,CAAC;QACpD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG;YACd,kBAAkB,EAAE,CAAC;YACrB,uBAAuB,EAAE,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,mBAAmB,EAAE,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACvD,CAAC;QAEF,kBAAkB;QAClB,+DAA+D;QAC/D,KAAK,CACH,GAAG,YAAY,GAAG,mBAAmB,IAAI,kBAAkB,CAAC,QAAQ,CAAC,aAAa,EAClF;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,WAAW,EAAE,MAAM;aACpB;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CACF,CAAC,KAAK,CAAC,GAAG,EAAE;YACX,iEAAiE;YACjE,kDAAkD;QACpD,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,iBAAiB,CAC7B,KAAoB,EACpB,OAA+B;QAE/B,8BAA8B;QAC9B,IAAI,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,6CAA6C;QAC7C,uFAAuF;QACvF,MAAM,cAAc,GAAI,IAAI,CAAC,MAAc,CAAC,QAAQ,CAAC;QACrD,IAAI,CAAC,cAAc,EAAE,OAAO,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC;YACzE,OAAO,CAAC,KAAK,CACX,wEAAwE,CACzE,CAAC;YACF,OAAO;QACT,CAAC;QAED,8BAA8B;QAC9B,MAAM,cAAc,GAAG,cAAc,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAChE,CAAC,IAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI,IAAI,CAAC,MAAM,CAC1F,CAAC;QAEF,IACE,CAAC,cAAc;YACf,CAAC,cAAc,CAAC,MAAM;YACtB,CAAC,cAAc,CAAC,MAAM,EACtB,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,sDAAsD,EAAE;gBACpE,eAAe,EAAE,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM;gBACjE,SAAS,EAAE,CAAC,CAAC,cAAc;gBAC3B,SAAS,EAAE,CAAC,CAAC,cAAc,EAAE,MAAM;gBACnC,SAAS,EAAE,CAAC,CAAC,cAAc,EAAE,MAAM;aACpC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,wDAAwD;QACxD,IAAI,IAAI,CAAC,OAAO,IAAK,IAAI,CAAC,OAAe,CAAC,oBAAoB,EAAE,CAAC;YAC/D,MAAM,oBAAoB,GAAI,IAAI,CAAC,OAAe;iBAC/C,oBAA+E,CAAC;YAEnF,IAAI,CAAC;gBACH,kEAAkE;gBAClE,yEAAyE;gBACzE,MAAM,eAAe,GAAgC,OAAO,CAAC,QAAQ;oBACnE,CAAC,CAAC;wBACE,IAAI,EAAE,OAAO,CAAC,QAAQ;wBACtB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;wBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,OAAO,CAAC,QAAQ,UAAU;qBAC7D;oBACH,CAAC,CAAC,SAAS,CAAC;gBAEd,0DAA0D;gBAC1D,MAAM,OAAO,GAAG;oBACd,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;oBAC9B,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,IAAI,IAAI;oBACnD,MAAM,EAAE,CAAC,KAAK,CAAC;oBACf,OAAO,EAAE;wBACP,qDAAqD;wBACrD,SAAS,EACP,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,YAAY;4BACvC,CAAC,CAAC,eAAe;gCACf,CAAC,CAAC,CAAC,eAAe,CAAC;gCACnB,CAAC,CAAC;oCACE;wCACE,IAAI,EAAE,OAAO,CAAC,QAAS;wCACvB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;wCACxB,MAAM,EAAE,OAAO,CAAC,MAAM;wCACtB,OAAO,EACL,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,OAAO,CAAC,QAAQ,UAAU;qCACtD;iCACF;4BACL,CAAC,CAAC,EAAE;wBACR,sCAAsC;wBACtC,aAAa,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE;wBACjE,YAAY,EAAE,OAAO,CAAC,YAAY;qBACnC;iBACF,CAAC;gBAEF,OAAO,CAAC,KAAK,CACX,8DAA8D,EAC9D;oBACE,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG;oBACnB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;oBAC/B,YAAY,EAAE,OAAO,CAAC,aAAa,IAAI,MAAM;oBAC7C,SAAS,EACP,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;oBACnE,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI;iBAChD,CACF,CAAC;gBAEF,IAAI,QAAQ,CAAC;gBACb,IAAI,CAAC;oBACH,QAAQ,GAAG,MAAM,oBAAoB,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;gBAC9D,CAAC;gBAAC,OAAO,KAAU,EAAE,CAAC;oBACpB,sDAAsD;oBACtD,kDAAkD;oBAClD,MAAM,YAAY,GAAG,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC;oBAC1C,MAAM,YAAY,GAAG,YAAY,CAAC,SAAS;wBACzC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;wBACjD,CAAC,CAAC,SAAS,CAAC;oBACd,MAAM,eAAe,GAAG,YAAY,CAAC,YAAY;wBAC/C,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;wBACpD,CAAC,CAAC,SAAS,CAAC;oBAEd,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE;wBACxD,YAAY,EAAE,KAAK,EAAE,OAAO;wBAC5B,SAAS,EAAE,KAAK,EAAE,IAAI;wBACtB,SAAS,EAAE,YAAY;wBACvB,YAAY,EAAE,eAAe;wBAC7B,UAAU,EAAE,KAAK,EAAE,KAAK;wBACxB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;qBAC1C,CAAC,CAAC;oBACH,MAAM,KAAK,CAAC;gBACd,CAAC;gBAED,kGAAkG;gBAClG,yFAAyF;gBACzF,MAAM,aAAa,GAAG,QASrB,CAAC;gBAEF,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE;oBAC1C,OAAO,EAAE,aAAa,CAAC,OAAO;oBAC9B,QAAQ,EAAE,aAAa,CAAC,QAAQ;oBAChC,QAAQ,EAAE,aAAa,CAAC,QAAQ;oBAChC,QAAQ,EAAE,aAAa,CAAC,QAAQ;oBAChC,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC;iBAC1C,CAAC,CAAC;gBAEH,IAAI,aAAa,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;oBAC/B,OAAO,CAAC,KAAK,CACX,mCAAmC,EACnC,aAAa,CAAC,QAAQ,CACvB,CAAC;gBACJ,CAAC;gBACD,IAAI,aAAa,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;oBAC/B,OAAO,CAAC,KAAK,CACX,mCAAmC,EACnC,aAAa,CAAC,QAAQ,CACvB,CAAC;gBACJ,CAAC;gBACD,IAAI,aAAa,CAAC,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5D,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;gBACtE,CAAC;gBAED,6CAA6C;gBAC7C,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAErD,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CACX,8DAA8D,EAC9D;oBACE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC7D,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;iBACxD,CACF,CAAC;gBACF,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,oEAAoE;QACpE,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC;QACrC,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC;QAErC,OAAO,CAAC,KAAK,CAAC,qDAAqD,EAAE;YACnE,MAAM;YACN,SAAS,EAAE,CAAC,CAAC,MAAM;YACnB,YAAY,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;SAClC,CAAC,CAAC;QAEH,0EAA0E;QAC1E,0EAA0E;QAC1E,MAAM,eAAe,GAAgC,OAAO,CAAC,QAAQ;YACnE,CAAC,CAAC;gBACE,IAAI,EAAE,OAAO,CAAC,QAAQ;gBACtB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;gBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,OAAO,CAAC,QAAQ,UAAU;aAC7D;YACH,CAAC,CAAC,SAAS,CAAC;QAEd,0DAA0D;QAC1D,2EAA2E;QAC3E,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;YAC9B,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,IAAI,IAAI;YACnD,MAAM,EAAE;gBACN;oBACE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,6BAA6B;oBAC7C,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,kCAAkC;iBACrD;aACF;YACD,6CAA6C;YAC7C,OAAO,EAAE;gBACP,qDAAqD;gBACrD,SAAS,EACP,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,YAAY;oBACvC,CAAC,CAAC,eAAe;wBACf,CAAC,CAAC,CAAC,eAAe,CAAC;wBACnB,CAAC,CAAC;4BACE;gCACE,iDAAiD;gCACjD,IAAI,EAAE,OAAO,CAAC,QAAQ;gCACtB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;gCACxB,MAAM,EAAE,OAAO,CAAC,MAAM;gCACtB,OAAO,EACL,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,OAAO,CAAC,QAAQ,UAAU;6BACtD;yBACF;oBACL,CAAC,CAAC,EAAE;gBACR,sCAAsC;gBACtC,aAAa,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE;gBACjE,iEAAiE;gBACjE,YAAY,EAAE,OAAO,CAAC,YAAY;aACnC;SACF,CAAC;QAEF,OAAO,CAAC,KAAK,CAAC,+CAA+C,EAAE;YAC7D,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG;YACnB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;YAC/B,YAAY,EAAE,WAAW,CAAC,aAAa,IAAI,MAAM;YACjD,SAAS,EACP,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;YACnE,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI;YACnD,cAAc,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO;YACzD,YAAY,EAAE,WAAW,CAAC,OAAO,CAAC,YAAY,IAAI,SAAS;YAC3D,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,MAAM;SACpD,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,wBAAwB,EAAE;gBAC9D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,UAAU,MAAM,EAAE;iBAClC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;aAClC,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAE3C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE;oBACjD,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,QAAQ,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,8BAA8B;iBACzE,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1D,CAAC;YAED,IAAI,YAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC1C,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE;oBACxD,YAAY,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;oBAC5C,KAAK,EAAE,UAAU;iBAClB,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC3D,CAAC;YAED,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE;gBACxC,OAAO,EAAE,YAAY,CAAC,OAAO;gBAC7B,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,SAAS,EAAE,YAAY,CAAC,SAAS;gBACjC,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC;aACzC,CAAC,CAAC;YAEH,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;gBAC1B,OAAO,CAAC,KAAK,CACX,mCAAmC,EACnC,YAAY,CAAC,QAAQ,CACtB,CAAC;YACJ,CAAC;YACD,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;gBAC1B,OAAO,CAAC,KAAK,CACX,mCAAmC,EACnC,YAAY,CAAC,QAAQ,CACtB,CAAC;YACJ,CAAC;YACD,IAAI,YAAY,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1D,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;YACrE,CAAC;YAED,6CAA6C;YAC7C,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE;gBAChD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7D,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;aACxD,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;YACxD,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAC9B,iCAAiC;YACjC,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;QACvC,CAAC;QACD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,OAAO,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACnE,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QACnC,CAAC;IACH,CAAC;CACF"}
1
+ {"version":3,"file":"proof.service.js","sourceRoot":"","sources":["../../src/services/proof.service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AASH,OAAO,EACL,eAAe,EACf,0BAA0B,GAE3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,kBAAkB,GAEnB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,2BAA2B,EAC3B,iBAAiB,GAElB,MAAM,0BAA0B,CAAC;AA6ElC;;;GAGG;AACH,MAAM,YAAY,GAAG,qBAA8B,CAAC;AAEpD;;;GAGG;AACH,MAAM,mBAAmB,GAAG,gBAAyB,CAAC;AAYtD,MAAM,OAAO,YAAY;IACf,MAAM,CAA0B;IAChC,OAAO,CAAqB;IAC5B,UAAU,CAAmB;IACrC;;;;;OAKG;IACK,aAAa,CAAsB;IACnC,mBAAmB,GAAG,KAAK,CAAC,CAAC,0CAA0C;IAC/E,kFAAkF;IACjE,kBAAkB,CAAU;IAC7C,oEAAoE;IACnD,mBAAmB,CAAU;IAE9C,YAAY,MAA+B,EAAE,OAA2B;QACtE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,kBAAkB;YACrB,MAAM,CAAC,aAAa,EAAE,gBAAgB,KAAK,YAAY,CAAC;QAC1D,IAAI,CAAC,mBAAmB;YACtB,MAAM,CAAC,aAAa,EAAE,mBAAmB,KAAK,IAAI,CAAC;QAErD,qCAAqC;QACrC,uFAAuF;QACvF,MAAM,cAAc,GAAI,IAAI,CAAC,MAAc,CAAC,QAAQ,CAAC;QACrD,MAAM,SAAS,GAAG,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,CAC9D,CAAC,IAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI,IAAI,CAAC,MAAM,CAC1F,CAAC;QAEF,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE;YAC3C,eAAe,EAAE,cAAc,EAAE,OAAO,IAAI,KAAK;YACjD,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,eAAe,EAAE,CAAC,CAAC,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM;YACnE,gBAAgB,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;YACvE,aAAa,EAAE,CAAC,CAAC,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM;YACtE,MAAM,EACJ,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,SAAS;SACrE,CAAC,CAAC;QAEH,2DAA2D;QAC3D,IAAI,cAAc,EAAE,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1C,OAAO,CAAC,IAAI,CACV,2EAA2E,CAC5E,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;YAC3D,OAAO,CAAC,IAAI,CACV,yEAAyE,CAC1E,CAAC;YACF,OAAO,CAAC,IAAI,CACV,kFAAkF,CACnF,CAAC;QACJ,CAAC;QAED,uCAAuC;QACvC,qEAAqE;QACrE,+EAA+E;QAC/E,IACE,cAAc,EAAE,OAAO;YACvB,cAAc,CAAC,UAAU,EAAE,YAAY,EAAE,MAAM,EAC/C,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,YAAY,GAAuB,EAAE,CAAC;gBAE5C,KAAK,MAAM,UAAU,IAAI,cAAc,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;oBAChE,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,IAAI,UAAU,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;wBAC1E,8DAA8D;wBAC9D,IAAI,UAAU,CAAC,MAAM,EAAE,MAAM,IAAI,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;4BAC3D,YAAY,CAAC,IAAI,CACf,IAAI,0BAA0B,CAC5B,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,MAAM,CAClB,CACF,CAAC;4BACF,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE;gCAC5D,MAAM,EAAE,UAAU,CAAC,MAAM;gCACzB,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM;6BAC/B,CAAC,CAAC;4BAEH,6DAA6D;4BAC7D,gEAAgE;4BAChE,gCAAgC;4BAChC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;gCACxB,IAAI,CAAC,aAAa,GAAG,IAAI,kBAAkB,CACzC,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,MAAM,EACjB;oCACE,YAAY,EAAE,cAAc,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE;oCAC1D,UAAU,EAAE,cAAc,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC;oCACrD,KAAK,EAAE,cAAc,CAAC,UAAU,CAAC,KAAK,IAAI,KAAK;iCAChD,CACF,CAAC;gCACF,OAAO,CAAC,KAAK,CACX,2DAA2D,CAC5D,CAAC;4BACJ,CAAC;wBACH,CAAC;6BAAM,CAAC;4BACN,OAAO,CAAC,IAAI,CACV,0EAA0E,EAC1E;gCACE,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM;gCAC9B,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM;6BAC/B,CACF,CAAC;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5B,oEAAoE;oBACpE,sEAAsE;oBACtE,IAAI,CAAC,UAAU,GAAG,IAAI,eAAe,CAAC;wBACpC,YAAY;wBACZ,YAAY,EAAE,cAAc,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE;wBAC1D,eAAe,EAAE,cAAc,CAAC,UAAU,CAAC,eAAe,IAAI,IAAI;wBAClE,UAAU,EAAE,cAAc,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC;wBACrD,KAAK,EAAE,cAAc,CAAC,UAAU,CAAC,KAAK,IAAI,KAAK;qBAChD,CAAC,CAAC;oBACH,OAAO,CAAC,KAAK,CACX,2FAA2F,EAC3F;wBACE,YAAY,EAAE,cAAc,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE;wBAC1D,eAAe,EACb,cAAc,CAAC,UAAU,CAAC,eAAe,IAAI,IAAI;wBACnD,YAAY,EAAE,YAAY,CAAC,MAAM;qBAClC,CACF,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,CACV,+EAA+E,CAChF,CAAC;oBACF,8CAA8C;oBAC9C,oDAAoD;oBACpD,MAAM,WAAW,GACd,IAAI,CAAC,MAAc,CAAC,WAAW;wBAC/B,IAAI,CAAC,MAAc,CAAC,IAAI,EAAE,WAAW;wBACtC,aAAa,CAAC;oBAChB,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;wBACjC,OAAO,CAAC,IAAI,CACV,gFAAgF,CACjF,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CACX,kDAAkD,EAClD,KAAK,CACN,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,WAAW,CACf,KAAoB,EACpB,OAA+B;QAE/B,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CACV,+DAA+D,CAChE,CAAC;YACF,OAAO;QACT,CAAC;QAED,0EAA0E;QAC1E,2EAA2E;QAC3E,sEAAsE;QACtE,uEAAuE;QACvE,IAAI,IAAI,CAAC,aAAa,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YACpE,IAAI,CAAC,aAAa,CAAC,eAAe,CAChC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CACjE,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAEzD,wEAAwE;QACxE,uEAAuE;QACvE,0EAA0E;QAC1E,IAAI,IAAI,CAAC,mBAAmB,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;YAC7D,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;YAChC,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QAED,+DAA+D;QAC/D,yEAAyE;QACzE,IAAI,CAAC,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACjD,OAAO,CAAC,KAAK,CACX,iFAAiF,CAClF,CAAC;YACF,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;YAChC,uEAAuE;YACvE,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QAED,0DAA0D;QAC1D,wEAAwE;QACxE,qDAAqD;QACrD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,CAAC,KAAK,CAAC,gDAAgD,EAAE;oBAC9D,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG;oBACnB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;oBAC/B,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO;oBAC3B,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,SAAS;iBAChD,CAAC,CAAC;gBAEH,yEAAyE;gBACzE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAE/B,+EAA+E;gBAC/E,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAErD,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CACX,4EAA4E,EAC5E,KAAK,CACN,CAAC;gBACF,oCAAoC;YACtC,CAAC;QACH,CAAC;QAED,6DAA6D;QAC7D,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IACrD,CAAC;IAED;;;;;;OAMG;IACK,oBAAoB,CAC1B,OAA+B;QAE/B,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC9B,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO;YACL,GAAG,OAAO;YACV,OAAO,EAAE;gBACP,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;gBACtB,YAAY,EAAE,OAAO,CAAC,oBAAoB;aAC3C;SACF,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,gBAAgB,CACtB,SAAiB,EACjB,QAAgB,EAChB,OAA+B;QAE/B,MAAM,IAAI,GAAG;YACX,SAAS;YACT,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;YAC7B,QAAQ;YACR,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC;QACF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1C,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QAC/C,CAAC;QACD,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAChC,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrE,CAAC;QACD,OAAO;YACL,GAAG,IAAI;YACP,OAAO,EAAE,IAAI;YACb,GAAG,CAAC,OAAO,CAAC,oBAAoB;gBAC9B,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,oBAAoB,EAAE;gBACjD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,YAAY,CAAC,IAAoB;QACrC,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACpD,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/C,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC;gBACjC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,OAAO,EAAE,KAAK;gBACd,YAAY,EAAE,QAAQ,CAAC,OAAO;gBAC9B,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,YAAY;oBACxC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,YAAY,EAAE;oBACtC,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,mDAAmD,EAAE,KAAK,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,sBAAsB,CAAC,IAA8B;QACzD,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACpD,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC;gBACjC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,OAAO,EAAE,KAAK;gBACd,YAAY,EAAE,QAAQ,CAAC,OAAO;aAC/B,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CACX,oDAAoD,EACpD,KAAK,CACN,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;;;OAWG;IACK,sBAAsB,CAC5B,QAAgB,EAChB,OAA+B;QAE/B,2EAA2E;QAC3E,MAAM,mBAAmB,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC;QAC/D,IAAI,eAA4C,CAAC;QAEjD,IAAI,mBAAmB,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,kCAAkC;gBAClC,OAAO;YACT,CAAC;QACH,CAAC;QAED,sDAAsD;QACtD,IAAI,CAAC,eAAe,EAAE,UAAU,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QAED,oEAAoE;QACpE,0EAA0E;QAC1E,0CAA0C;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,kBAAkB,CAAC;QACpD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG;YACd,kBAAkB,EAAE,CAAC;YACrB,uBAAuB,EAAE,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,mBAAmB,EAAE,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACvD,CAAC;QAEF,kBAAkB;QAClB,+DAA+D;QAC/D,KAAK,CACH,GAAG,YAAY,GAAG,mBAAmB,IAAI,kBAAkB,CAAC,QAAQ,CAAC,aAAa,EAClF;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,WAAW,EAAE,MAAM;aACpB;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CACF,CAAC,KAAK,CAAC,GAAG,EAAE;YACX,iEAAiE;YACjE,kDAAkD;QACpD,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,iBAAiB,CAC7B,KAAoB,EACpB,OAA+B;QAE/B,8BAA8B;QAC9B,IAAI,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,6CAA6C;QAC7C,uFAAuF;QACvF,MAAM,cAAc,GAAI,IAAI,CAAC,MAAc,CAAC,QAAQ,CAAC;QACrD,IAAI,CAAC,cAAc,EAAE,OAAO,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC;YACzE,OAAO,CAAC,KAAK,CACX,wEAAwE,CACzE,CAAC;YACF,OAAO;QACT,CAAC;QAED,8BAA8B;QAC9B,MAAM,cAAc,GAAG,cAAc,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAChE,CAAC,IAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI,IAAI,CAAC,MAAM,CAC1F,CAAC;QAEF,IACE,CAAC,cAAc;YACf,CAAC,cAAc,CAAC,MAAM;YACtB,CAAC,cAAc,CAAC,MAAM,EACtB,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,sDAAsD,EAAE;gBACpE,eAAe,EAAE,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM;gBACjE,SAAS,EAAE,CAAC,CAAC,cAAc;gBAC3B,SAAS,EAAE,CAAC,CAAC,cAAc,EAAE,MAAM;gBACnC,SAAS,EAAE,CAAC,CAAC,cAAc,EAAE,MAAM;aACpC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,wDAAwD;QACxD,IAAI,IAAI,CAAC,OAAO,IAAK,IAAI,CAAC,OAAe,CAAC,oBAAoB,EAAE,CAAC;YAC/D,MAAM,oBAAoB,GAAI,IAAI,CAAC,OAAe;iBAC/C,oBAA+E,CAAC;YAEnF,IAAI,CAAC;gBACH,kEAAkE;gBAClE,yEAAyE;gBACzE,MAAM,eAAe,GAAgC,OAAO,CAAC,QAAQ;oBACnE,CAAC,CAAC;wBACE,IAAI,EAAE,OAAO,CAAC,QAAQ;wBACtB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;wBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,OAAO,CAAC,QAAQ,UAAU;qBAC7D;oBACH,CAAC,CAAC,SAAS,CAAC;gBAEd,0DAA0D;gBAC1D,MAAM,OAAO,GAAG;oBACd,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;oBAC9B,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,IAAI,IAAI;oBACnD,MAAM,EAAE,CAAC,KAAK,CAAC;oBACf,OAAO,EAAE;wBACP,qDAAqD;wBACrD,SAAS,EACP,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,YAAY;4BACvC,CAAC,CAAC,eAAe;gCACf,CAAC,CAAC,CAAC,eAAe,CAAC;gCACnB,CAAC,CAAC;oCACE;wCACE,IAAI,EAAE,OAAO,CAAC,QAAS;wCACvB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;wCACxB,MAAM,EAAE,OAAO,CAAC,MAAM;wCACtB,OAAO,EACL,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,OAAO,CAAC,QAAQ,UAAU;qCACtD;iCACF;4BACL,CAAC,CAAC,EAAE;wBACR,sCAAsC;wBACtC,aAAa,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE;wBACjE,YAAY,EAAE,OAAO,CAAC,YAAY;qBACnC;iBACF,CAAC;gBAEF,OAAO,CAAC,KAAK,CACX,8DAA8D,EAC9D;oBACE,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG;oBACnB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;oBAC/B,YAAY,EAAE,OAAO,CAAC,aAAa,IAAI,MAAM;oBAC7C,SAAS,EACP,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;oBACnE,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI;iBAChD,CACF,CAAC;gBAEF,IAAI,QAAQ,CAAC;gBACb,IAAI,CAAC;oBACH,QAAQ,GAAG,MAAM,oBAAoB,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;gBAC9D,CAAC;gBAAC,OAAO,KAAU,EAAE,CAAC;oBACpB,sDAAsD;oBACtD,kDAAkD;oBAClD,MAAM,YAAY,GAAG,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC;oBAC1C,MAAM,YAAY,GAAG,YAAY,CAAC,SAAS;wBACzC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;wBACjD,CAAC,CAAC,SAAS,CAAC;oBACd,MAAM,eAAe,GAAG,YAAY,CAAC,YAAY;wBAC/C,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;wBACpD,CAAC,CAAC,SAAS,CAAC;oBAEd,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE;wBACxD,YAAY,EAAE,KAAK,EAAE,OAAO;wBAC5B,SAAS,EAAE,KAAK,EAAE,IAAI;wBACtB,SAAS,EAAE,YAAY;wBACvB,YAAY,EAAE,eAAe;wBAC7B,UAAU,EAAE,KAAK,EAAE,KAAK;wBACxB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;qBAC1C,CAAC,CAAC;oBACH,MAAM,KAAK,CAAC;gBACd,CAAC;gBAED,kGAAkG;gBAClG,yFAAyF;gBACzF,MAAM,aAAa,GAAG,QASrB,CAAC;gBAEF,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE;oBAC1C,OAAO,EAAE,aAAa,CAAC,OAAO;oBAC9B,QAAQ,EAAE,aAAa,CAAC,QAAQ;oBAChC,QAAQ,EAAE,aAAa,CAAC,QAAQ;oBAChC,QAAQ,EAAE,aAAa,CAAC,QAAQ;oBAChC,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC;iBAC1C,CAAC,CAAC;gBAEH,IAAI,aAAa,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;oBAC/B,OAAO,CAAC,KAAK,CACX,mCAAmC,EACnC,aAAa,CAAC,QAAQ,CACvB,CAAC;gBACJ,CAAC;gBACD,IAAI,aAAa,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;oBAC/B,OAAO,CAAC,KAAK,CACX,mCAAmC,EACnC,aAAa,CAAC,QAAQ,CACvB,CAAC;gBACJ,CAAC;gBACD,IAAI,aAAa,CAAC,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5D,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;gBACtE,CAAC;gBAED,6CAA6C;gBAC7C,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAErD,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CACX,8DAA8D,EAC9D;oBACE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC7D,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;iBACxD,CACF,CAAC;gBACF,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,oEAAoE;QACpE,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC;QACrC,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC;QAErC,OAAO,CAAC,KAAK,CAAC,qDAAqD,EAAE;YACnE,MAAM;YACN,SAAS,EAAE,CAAC,CAAC,MAAM;YACnB,YAAY,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;SAClC,CAAC,CAAC;QAEH,0EAA0E;QAC1E,0EAA0E;QAC1E,MAAM,eAAe,GAAgC,OAAO,CAAC,QAAQ;YACnE,CAAC,CAAC;gBACE,IAAI,EAAE,OAAO,CAAC,QAAQ;gBACtB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;gBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,OAAO,CAAC,QAAQ,UAAU;aAC7D;YACH,CAAC,CAAC,SAAS,CAAC;QAEd,0DAA0D;QAC1D,2EAA2E;QAC3E,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;YAC9B,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,IAAI,IAAI;YACnD,MAAM,EAAE;gBACN;oBACE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,6BAA6B;oBAC7C,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,kCAAkC;iBACrD;aACF;YACD,6CAA6C;YAC7C,OAAO,EAAE;gBACP,qDAAqD;gBACrD,SAAS,EACP,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,YAAY;oBACvC,CAAC,CAAC,eAAe;wBACf,CAAC,CAAC,CAAC,eAAe,CAAC;wBACnB,CAAC,CAAC;4BACE;gCACE,iDAAiD;gCACjD,IAAI,EAAE,OAAO,CAAC,QAAQ;gCACtB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;gCACxB,MAAM,EAAE,OAAO,CAAC,MAAM;gCACtB,OAAO,EACL,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,OAAO,CAAC,QAAQ,UAAU;6BACtD;yBACF;oBACL,CAAC,CAAC,EAAE;gBACR,sCAAsC;gBACtC,aAAa,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE;gBACjE,iEAAiE;gBACjE,YAAY,EAAE,OAAO,CAAC,YAAY;aACnC;SACF,CAAC;QAEF,OAAO,CAAC,KAAK,CAAC,+CAA+C,EAAE;YAC7D,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG;YACnB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;YAC/B,YAAY,EAAE,WAAW,CAAC,aAAa,IAAI,MAAM;YACjD,SAAS,EACP,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;YACnE,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI;YACnD,cAAc,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO;YACzD,YAAY,EAAE,WAAW,CAAC,OAAO,CAAC,YAAY,IAAI,SAAS;YAC3D,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,MAAM;SACpD,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,wBAAwB,EAAE;gBAC9D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,UAAU,MAAM,EAAE;iBAClC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;aAClC,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAE3C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE;oBACjD,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,QAAQ,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,8BAA8B;iBACzE,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1D,CAAC;YAED,IAAI,YAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC1C,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE;oBACxD,YAAY,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;oBAC5C,KAAK,EAAE,UAAU;iBAClB,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC3D,CAAC;YAED,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE;gBACxC,OAAO,EAAE,YAAY,CAAC,OAAO;gBAC7B,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,SAAS,EAAE,YAAY,CAAC,SAAS;gBACjC,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC;aACzC,CAAC,CAAC;YAEH,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;gBAC1B,OAAO,CAAC,KAAK,CACX,mCAAmC,EACnC,YAAY,CAAC,QAAQ,CACtB,CAAC;YACJ,CAAC;YACD,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;gBAC1B,OAAO,CAAC,KAAK,CACX,mCAAmC,EACnC,YAAY,CAAC,QAAQ,CACtB,CAAC;YACJ,CAAC;YACD,IAAI,YAAY,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1D,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;YACrE,CAAC;YAED,6CAA6C;YAC7C,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE;gBAChD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7D,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;aACxD,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;YACxD,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAC9B,iCAAiC;YACjC,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;QACvC,CAAC;QACD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,OAAO,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACnE,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QACnC,CAAC;IACH,CAAC;CACF"}
package/dist/types.d.ts CHANGED
@@ -55,6 +55,23 @@ export interface CloudflareEnv {
55
55
  MCPI_NATIVE_HTTP_INGRESS?: string;
56
56
  /** Exact deployment role key, mirrored in the existing API aliases. */
57
57
  MCPI_NATIVE_HTTP_ISSUER_API_KEY?: string;
58
+ /**
59
+ * Comma- or whitespace-separated issuer DIDs whose delegation VC-JWTs this
60
+ * worker accepts, in addition to its own identity, the native issuer binding
61
+ * and the Checkpoint platform signer. Read by DelegationService.
62
+ */
63
+ KYA_OS_TRUSTED_DELEGATION_ISSUERS?: string;
64
+ /**
65
+ * Comma- or whitespace-separated `aud` values this worker accepts on
66
+ * delegation VC-JWTs, in addition to its own DID, CHECKPOINT_PROJECT_ID and
67
+ * the native issuer binding's org DID and project. Read by DelegationService.
68
+ */
69
+ KYA_OS_DELEGATION_AUDIENCES?: string;
70
+ /**
71
+ * "1"/"true" accepts legacy (non VC-JWT) delegation tokens unchecked when no
72
+ * CHECKPOINT_API_KEY is configured. Local development only; never cached.
73
+ */
74
+ KYA_OS_INSECURE_DEV_TOKENS?: string;
58
75
  /** Know That AI API URL for client DID lookups */
59
76
  KTA_API_URL?: string;
60
77
  /** Know That AI registration record written by `mcpi register` (JSON string) */
@@ -1 +1 @@
1
- {"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACV,WAAW,EACX,kBAAkB,EAClB,sBAAsB,EACvB,MAAM,2BAA2B,CAAC;AAEnC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,WAAW,aAAa;IAC5B,2EAA2E;IAC3E,WAAW,EAAE,WAAW,CAAC;IACzB,kEAAkE;IAClE,aAAa,CAAC,EAAE,WAAW,CAAC;IAC5B,kFAAkF;IAClF,gBAAgB,CAAC,EAAE,WAAW,CAAC;IAC/B,oGAAoG;IACpG,kBAAkB,CAAC,EAAE,WAAW,CAAC;IACjC,gFAAgF;IAChF,kBAAkB,CAAC,EAAE,WAAW,CAAC;IACjC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,mFAAmF;IACnF,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC,gFAAgF;IAChF,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,uEAAuE;IACvE,+BAA+B,CAAC,EAAE,MAAM,CAAC;IACzC,kDAAkD;IAClD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,8EAA8E;IAC9E,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6DAA6D;IAC7D,mBAAmB,CAAC,EAAE,kBAAkB,CAAC;IACzC,wFAAwF;IACxF,UAAU,CAAC,EAAE,sBAAsB,CAAC;IACpC,4EAA4E;IAC5E,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;IAC5C,qFAAqF;IACrF,cAAc,CAAC,EAAE,sBAAsB,CAAC;IACxC,qFAAqF;IACrF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,gDAAgD;IAChD,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,iFAAiF;IACjF,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,wEAAwE;IACxE,oCAAoC,CAAC,EAAE,MAAM,CAAC;IAC9C,mFAAmF;IACnF,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,yEAAyE;IACzE,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,oFAAoF;IACpF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,yDAAyD;IACzD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,2DAA2D;IAC3D,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,2LAA2L;IAC3L,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,0FAA0F;IAC1F,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,sJAAsJ;IACtJ,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,sKAAsK;IACtK,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gPAAgP;IAChP,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC"}
1
+ {"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACV,WAAW,EACX,kBAAkB,EAClB,sBAAsB,EACvB,MAAM,2BAA2B,CAAC;AAEnC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,WAAW,aAAa;IAC5B,2EAA2E;IAC3E,WAAW,EAAE,WAAW,CAAC;IACzB,kEAAkE;IAClE,aAAa,CAAC,EAAE,WAAW,CAAC;IAC5B,kFAAkF;IAClF,gBAAgB,CAAC,EAAE,WAAW,CAAC;IAC/B,oGAAoG;IACpG,kBAAkB,CAAC,EAAE,WAAW,CAAC;IACjC,gFAAgF;IAChF,kBAAkB,CAAC,EAAE,WAAW,CAAC;IACjC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,mFAAmF;IACnF,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC,gFAAgF;IAChF,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,uEAAuE;IACvE,+BAA+B,CAAC,EAAE,MAAM,CAAC;IACzC;;;;OAIG;IACH,iCAAiC,CAAC,EAAE,MAAM,CAAC;IAC3C;;;;OAIG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC;;;OAGG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,kDAAkD;IAClD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,8EAA8E;IAC9E,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6DAA6D;IAC7D,mBAAmB,CAAC,EAAE,kBAAkB,CAAC;IACzC,wFAAwF;IACxF,UAAU,CAAC,EAAE,sBAAsB,CAAC;IACpC,4EAA4E;IAC5E,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;IAC5C,qFAAqF;IACrF,cAAc,CAAC,EAAE,sBAAsB,CAAC;IACxC,qFAAqF;IACrF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,gDAAgD;IAChD,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,iFAAiF;IACjF,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,wEAAwE;IACxE,oCAAoC,CAAC,EAAE,MAAM,CAAC;IAC9C,mFAAmF;IACnF,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,yEAAyE;IACzE,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,oFAAoF;IACpF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,yDAAyD;IACzD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,2DAA2D;IAC3D,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,2LAA2L;IAC3L,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,0FAA0F;IAC1F,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,sJAAsJ;IACtJ,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,sKAAsK;IACtK,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gPAAgP;IAChP,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC"}
@@ -0,0 +1,31 @@
1
+ /**
2
+ * Checkpoint project id validation.
3
+ *
4
+ * Consent URLs carry `project_id` in the query string, and the consent page
5
+ * puts it into Checkpoint paths (`/api/v1/bouncer/projects/{id}/...`) sent
6
+ * with the server's API key. Validate it before any such request so a crafted
7
+ * id (`../../admin`, `a/b`, `a%2Fb`) never reaches Checkpoint.
8
+ *
9
+ * Checkpoint project ids are UUIDs (36 characters) or friendly ids: bare
10
+ * slugs ("acme-corp"), slugs with a mixed-case suffix ("acme-corp-x7A8b9"),
11
+ * and enterprise ids ("ABC-SLUG-X7A8B9"). Its `friendly_id` column is
12
+ * varchar(50). Every one of these fits `[A-Za-z0-9_-]`, which also rejects
13
+ * `/`, `.`, `%`, `?` and whitespace; underscores are kept because Checkpoint's
14
+ * slugifier preserves them.
15
+ */
16
+ /**
17
+ * Longest project id accepted. Covers Checkpoint's varchar(50) friendly ids
18
+ * and 36-character UUIDs with room to spare.
19
+ */
20
+ export declare const MAX_CHECKPOINT_PROJECT_ID_LENGTH = 64;
21
+ /**
22
+ * Whether a value can be a Checkpoint project id and is safe to put into a
23
+ * Checkpoint request path.
24
+ *
25
+ * @example
26
+ * isValidCheckpointProjectId("webforms-proj-a5bxn7"); // true
27
+ * isValidCheckpointProjectId("123e4567-e89b-12d3-a456-426614174000"); // true
28
+ * isValidCheckpointProjectId("../../admin"); // false
29
+ */
30
+ export declare function isValidCheckpointProjectId(projectId: unknown): projectId is string;
31
+ //# sourceMappingURL=checkpoint-project-id.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"checkpoint-project-id.d.ts","sourceRoot":"","sources":["../../src/utils/checkpoint-project-id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;GAGG;AACH,eAAO,MAAM,gCAAgC,KAAK,CAAC;AAMnD;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,OAAO,GACjB,SAAS,IAAI,MAAM,CAKrB"}
@@ -0,0 +1,35 @@
1
+ /**
2
+ * Checkpoint project id validation.
3
+ *
4
+ * Consent URLs carry `project_id` in the query string, and the consent page
5
+ * puts it into Checkpoint paths (`/api/v1/bouncer/projects/{id}/...`) sent
6
+ * with the server's API key. Validate it before any such request so a crafted
7
+ * id (`../../admin`, `a/b`, `a%2Fb`) never reaches Checkpoint.
8
+ *
9
+ * Checkpoint project ids are UUIDs (36 characters) or friendly ids: bare
10
+ * slugs ("acme-corp"), slugs with a mixed-case suffix ("acme-corp-x7A8b9"),
11
+ * and enterprise ids ("ABC-SLUG-X7A8B9"). Its `friendly_id` column is
12
+ * varchar(50). Every one of these fits `[A-Za-z0-9_-]`, which also rejects
13
+ * `/`, `.`, `%`, `?` and whitespace; underscores are kept because Checkpoint's
14
+ * slugifier preserves them.
15
+ */
16
+ /**
17
+ * Longest project id accepted. Covers Checkpoint's varchar(50) friendly ids
18
+ * and 36-character UUIDs with room to spare.
19
+ */
20
+ export const MAX_CHECKPOINT_PROJECT_ID_LENGTH = 64;
21
+ const CHECKPOINT_PROJECT_ID_PATTERN = new RegExp(`^[A-Za-z0-9_-]{1,${MAX_CHECKPOINT_PROJECT_ID_LENGTH}}$`);
22
+ /**
23
+ * Whether a value can be a Checkpoint project id and is safe to put into a
24
+ * Checkpoint request path.
25
+ *
26
+ * @example
27
+ * isValidCheckpointProjectId("webforms-proj-a5bxn7"); // true
28
+ * isValidCheckpointProjectId("123e4567-e89b-12d3-a456-426614174000"); // true
29
+ * isValidCheckpointProjectId("../../admin"); // false
30
+ */
31
+ export function isValidCheckpointProjectId(projectId) {
32
+ return (typeof projectId === "string" &&
33
+ CHECKPOINT_PROJECT_ID_PATTERN.test(projectId));
34
+ }
35
+ //# sourceMappingURL=checkpoint-project-id.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"checkpoint-project-id.js","sourceRoot":"","sources":["../../src/utils/checkpoint-project-id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,EAAE,CAAC;AAEnD,MAAM,6BAA6B,GAAG,IAAI,MAAM,CAC9C,oBAAoB,gCAAgC,IAAI,CACzD,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,UAAU,0BAA0B,CACxC,SAAkB;IAElB,OAAO,CACL,OAAO,SAAS,KAAK,QAAQ;QAC7B,6BAA6B,CAAC,IAAI,CAAC,SAAS,CAAC,CAC9C,CAAC;AACJ,CAAC"}
@@ -0,0 +1,7 @@
1
+ /** Optional provider profile claims must be strings, never null or objects. */
2
+ export declare function oauthProfileString(value: unknown): string | undefined;
3
+ /** GitHub subjects are numeric IDs; preserve them as exact scalar strings. */
4
+ export declare function normalizeOAuthSubject(value: unknown): string | undefined;
5
+ /** Use provider identifiers; an email alone is not a provider subject. */
6
+ export declare function oauthProfileSubject(profile: unknown): string | undefined;
7
+ //# sourceMappingURL=oauth-profile.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"oauth-profile.d.ts","sourceRoot":"","sources":["../../src/utils/oauth-profile.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAIrE;AAED,8EAA8E;AAC9E,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAKxE;AAED,0EAA0E;AAC1E,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAUxE"}
@@ -0,0 +1,24 @@
1
+ /** Optional provider profile claims must be strings, never null or objects. */
2
+ export function oauthProfileString(value) {
3
+ return typeof value === "string" && value.trim().length > 0
4
+ ? value
5
+ : undefined;
6
+ }
7
+ /** GitHub subjects are numeric IDs; preserve them as exact scalar strings. */
8
+ export function normalizeOAuthSubject(value) {
9
+ if (typeof value === "number") {
10
+ return Number.isSafeInteger(value) && value >= 0 ? String(value) : undefined;
11
+ }
12
+ return oauthProfileString(value);
13
+ }
14
+ /** Use provider identifiers; an email alone is not a provider subject. */
15
+ export function oauthProfileSubject(profile) {
16
+ if (!profile || typeof profile !== "object" || Array.isArray(profile)) {
17
+ return undefined;
18
+ }
19
+ const claims = profile;
20
+ return (oauthProfileString(claims.sub) ??
21
+ normalizeOAuthSubject(claims.id) ??
22
+ oauthProfileString(claims.login));
23
+ }
24
+ //# sourceMappingURL=oauth-profile.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"oauth-profile.js","sourceRoot":"","sources":["../../src/utils/oauth-profile.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACzD,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,CAAC;IACD,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,OAAkC,CAAC;IAClD,OAAO,CACL,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC;QAC9B,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CACjC,CAAC;AACJ,CAAC"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@kya-os/mcp-i-cloudflare",
3
- "version": "1.15.0",
3
+ "version": "1.16.0",
4
4
  "description": "Cloudflare Workers adapter for MCP-I framework",
5
5
  "main": "dist/index.js",
6
6
  "types": "dist/index.d.ts",
@@ -9,6 +9,7 @@
9
9
  ],
10
10
  "scripts": {
11
11
  "build": "tsc",
12
+ "typecheck": "tsc --noEmit",
12
13
  "dev": "wrangler dev",
13
14
  "test": "vitest run",
14
15
  "test:coverage": "vitest run --coverage",
@@ -30,15 +31,15 @@
30
31
  "prepublishOnly": "npm run build && node ../create-mcpi-app/scripts/validate-no-workspace.js"
31
32
  },
32
33
  "dependencies": {
33
- "@kya-os/consent": "^0.1.47",
34
- "@kya-os/contracts": "^1.13.0",
34
+ "@kya-os/consent": "^0.1.50",
35
+ "@kya-os/contracts": "^1.13.1",
35
36
  "@kya-os/mcp": "1.16.0",
36
- "@kya-os/mcp-i-core": "^1.9.2",
37
- "@kya-os/mcp-i-runtime": "^1.3.0",
37
+ "@kya-os/mcp-i-core": "^1.9.4",
38
+ "@kya-os/mcp-i-runtime": "^1.3.1",
38
39
  "@kya-os/provider-registry": "^0.1.7",
39
40
  "@modelcontextprotocol/sdk": "^1.25.2",
40
41
  "agents": "^0.4.1",
41
- "hono": "^4.12.4",
42
+ "hono": "^4.13.10",
42
43
  "jose": "^5.6.3",
43
44
  "json-canonicalize": "2.0.0",
44
45
  "zod": "^3.25.67"