@kya-os/mcp-i-cloudflare 1.15.0 → 1.16.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +37 -0
- package/dist/agent.d.ts.map +1 -1
- package/dist/agent.js +81 -51
- package/dist/agent.js.map +1 -1
- package/dist/app.d.ts.map +1 -1
- package/dist/app.js +9 -12
- package/dist/app.js.map +1 -1
- package/dist/audit/deployment-binding.d.ts +12 -12
- package/dist/config.d.ts +28 -1
- package/dist/config.d.ts.map +1 -1
- package/dist/config.js +16 -1
- package/dist/config.js.map +1 -1
- package/dist/constants/storage-keys.d.ts +9 -0
- package/dist/constants/storage-keys.d.ts.map +1 -1
- package/dist/constants/storage-keys.js +9 -0
- package/dist/constants/storage-keys.js.map +1 -1
- package/dist/constants.d.ts +6 -0
- package/dist/constants.d.ts.map +1 -1
- package/dist/constants.js +6 -0
- package/dist/constants.js.map +1 -1
- package/dist/delegation-http/bearer-retry.d.ts +20 -4
- package/dist/delegation-http/bearer-retry.d.ts.map +1 -1
- package/dist/delegation-http/bearer-retry.js +56 -10
- package/dist/delegation-http/bearer-retry.js.map +1 -1
- package/dist/delegation-http/consent-anchor-bridge.d.ts.map +1 -1
- package/dist/delegation-http/consent-anchor-bridge.js +72 -13
- package/dist/delegation-http/consent-anchor-bridge.js.map +1 -1
- package/dist/delegation-http/native-oauth-state.d.ts +16 -0
- package/dist/delegation-http/native-oauth-state.d.ts.map +1 -1
- package/dist/delegation-http/native-oauth-state.js +24 -9
- package/dist/delegation-http/native-oauth-state.js.map +1 -1
- package/dist/delegation-http/native-oauth.d.ts.map +1 -1
- package/dist/delegation-http/native-oauth.js +26 -7
- package/dist/delegation-http/native-oauth.js.map +1 -1
- package/dist/delegation-http/oauth-recovery.d.ts +3 -0
- package/dist/delegation-http/oauth-recovery.d.ts.map +1 -0
- package/dist/delegation-http/oauth-recovery.js +39 -0
- package/dist/delegation-http/oauth-recovery.js.map +1 -0
- package/dist/delegation-http/remote-issuer.d.ts +15 -0
- package/dist/delegation-http/remote-issuer.d.ts.map +1 -1
- package/dist/delegation-http/remote-issuer.js +27 -8
- package/dist/delegation-http/remote-issuer.js.map +1 -1
- package/dist/helpers/env-mapper.d.ts.map +1 -1
- package/dist/helpers/env-mapper.js +28 -6
- package/dist/helpers/env-mapper.js.map +1 -1
- package/dist/index.d.ts +6 -3
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +9 -1
- package/dist/index.js.map +1 -1
- package/dist/proof-generator.d.ts +8 -7
- package/dist/proof-generator.d.ts.map +1 -1
- package/dist/proof-generator.js +32 -34
- package/dist/proof-generator.js.map +1 -1
- package/dist/runtime/oauth-handler.d.ts.map +1 -1
- package/dist/runtime/oauth-handler.js +43 -31
- package/dist/runtime/oauth-handler.js.map +1 -1
- package/dist/runtime/tool-activity.d.ts +31 -4
- package/dist/runtime/tool-activity.d.ts.map +1 -1
- package/dist/runtime/tool-activity.js +48 -0
- package/dist/runtime/tool-activity.js.map +1 -1
- package/dist/runtime.d.ts +31 -0
- package/dist/runtime.d.ts.map +1 -1
- package/dist/runtime.js +65 -0
- package/dist/runtime.js.map +1 -1
- package/dist/security/admission-refusal.d.ts +32 -0
- package/dist/security/admission-refusal.d.ts.map +1 -0
- package/dist/security/admission-refusal.js +97 -0
- package/dist/security/admission-refusal.js.map +1 -0
- package/dist/security/card-proof-support.d.ts +66 -0
- package/dist/security/card-proof-support.d.ts.map +1 -0
- package/dist/security/card-proof-support.js +121 -0
- package/dist/security/card-proof-support.js.map +1 -0
- package/dist/security/mcp-admission.d.ts +28 -2
- package/dist/security/mcp-admission.d.ts.map +1 -1
- package/dist/security/mcp-admission.js +129 -29
- package/dist/security/mcp-admission.js.map +1 -1
- package/dist/security/mcp-holder-admission.d.ts +12 -1
- package/dist/security/mcp-holder-admission.d.ts.map +1 -1
- package/dist/security/mcp-holder-admission.js +46 -8
- package/dist/security/mcp-holder-admission.js.map +1 -1
- package/dist/security/presented-delegation.d.ts +10 -0
- package/dist/security/presented-delegation.d.ts.map +1 -1
- package/dist/security/presented-delegation.js +23 -3
- package/dist/security/presented-delegation.js.map +1 -1
- package/dist/services/admin.service.d.ts.map +1 -1
- package/dist/services/admin.service.js +24 -9
- package/dist/services/admin.service.js.map +1 -1
- package/dist/services/approval-route.d.ts +48 -0
- package/dist/services/approval-route.d.ts.map +1 -0
- package/dist/services/approval-route.js +87 -0
- package/dist/services/approval-route.js.map +1 -0
- package/dist/services/consent-config.service.d.ts.map +1 -1
- package/dist/services/consent-config.service.js +20 -5
- package/dist/services/consent-config.service.js.map +1 -1
- package/dist/services/consent.service.d.ts +113 -5
- package/dist/services/consent.service.d.ts.map +1 -1
- package/dist/services/consent.service.js +746 -904
- package/dist/services/consent.service.js.map +1 -1
- package/dist/services/credential-auth.handler.d.ts +2 -0
- package/dist/services/credential-auth.handler.d.ts.map +1 -1
- package/dist/services/credential-auth.handler.js +19 -3
- package/dist/services/credential-auth.handler.js.map +1 -1
- package/dist/services/delegation-trust.d.ts +97 -0
- package/dist/services/delegation-trust.d.ts.map +1 -0
- package/dist/services/delegation-trust.js +378 -0
- package/dist/services/delegation-trust.js.map +1 -0
- package/dist/services/delegation.service.d.ts +56 -14
- package/dist/services/delegation.service.d.ts.map +1 -1
- package/dist/services/delegation.service.js +160 -68
- package/dist/services/delegation.service.js.map +1 -1
- package/dist/services/multipart-parser.d.ts +73 -0
- package/dist/services/multipart-parser.d.ts.map +1 -0
- package/dist/services/multipart-parser.js +116 -0
- package/dist/services/multipart-parser.js.map +1 -0
- package/dist/services/proof.service.d.ts +38 -0
- package/dist/services/proof.service.d.ts.map +1 -1
- package/dist/services/proof.service.js +41 -2
- package/dist/services/proof.service.js.map +1 -1
- package/dist/types.d.ts +17 -0
- package/dist/types.d.ts.map +1 -1
- package/dist/utils/checkpoint-project-id.d.ts +31 -0
- package/dist/utils/checkpoint-project-id.d.ts.map +1 -0
- package/dist/utils/checkpoint-project-id.js +35 -0
- package/dist/utils/checkpoint-project-id.js.map +1 -0
- package/dist/utils/oauth-profile.d.ts +7 -0
- package/dist/utils/oauth-profile.d.ts.map +1 -0
- package/dist/utils/oauth-profile.js +24 -0
- package/dist/utils/oauth-profile.js.map +1 -0
- package/package.json +7 -6
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"multipart-parser.d.ts","sourceRoot":"","sources":["../../src/services/multipart-parser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,2DAA2D;AAC3D,MAAM,WAAW,cAAc;IAC7B,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,KAAK,EAAE,MAAM,CAAC;CACf;AAeD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,EAAE,CAiBtE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GAChB,MAAM,CAKR;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAChC,OAAO,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAQ/B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAclE"}
|
|
@@ -0,0 +1,116 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* multipart-parser.ts
|
|
3
|
+
*
|
|
4
|
+
* Hand-rolled multipart/form-data field extractor.
|
|
5
|
+
*
|
|
6
|
+
* Cloudflare Workers' `Request.formData()` is the primary path for parsing
|
|
7
|
+
* form submissions, but it can fail or misbehave in two ways that we observe
|
|
8
|
+
* in the wild on the consent-approval endpoint:
|
|
9
|
+
*
|
|
10
|
+
* 1. The Content-Type header is `multipart/form-data` but is missing the
|
|
11
|
+
* `boundary=` parameter, so `formData()` throws.
|
|
12
|
+
* 2. `formData()` "succeeds" but returns the entire raw multipart body as a
|
|
13
|
+
* single malformed `[key, value]` entry (the boundary/Content-Disposition
|
|
14
|
+
* preamble ends up in the key).
|
|
15
|
+
*
|
|
16
|
+
* In both cases we fall back to parsing the raw body text ourselves. This
|
|
17
|
+
* module isolates that boundary-detection logic behind a single, testable
|
|
18
|
+
* interface so it is not duplicated across every fallback branch in
|
|
19
|
+
* ConsentService.
|
|
20
|
+
*
|
|
21
|
+
* This is intentionally a *permissive* parser for trusted same-origin form
|
|
22
|
+
* posts, not a general-purpose RFC 7578 implementation. Its behavior is
|
|
23
|
+
* pinned by multipart-parser.test.ts and must remain byte-for-byte compatible
|
|
24
|
+
* with the original inline logic.
|
|
25
|
+
*/
|
|
26
|
+
/**
|
|
27
|
+
* Matches a `Content-Disposition: form-data; name="field"` header followed by
|
|
28
|
+
* a blank line and then the field value, captured up to the next boundary
|
|
29
|
+
* (`\r\n------`) or end of input.
|
|
30
|
+
*
|
|
31
|
+
* NOTE: a fresh RegExp instance is created per call because the `g` flag makes
|
|
32
|
+
* `lastIndex` stateful; sharing one instance across calls would corrupt
|
|
33
|
+
* concurrent parses.
|
|
34
|
+
*/
|
|
35
|
+
function createFieldRegex() {
|
|
36
|
+
return /Content-Disposition:\s*form-data;\s*name="([^"]+)"\r?\n\r?\n([\s\S]*?)(?=\r?\n------|$)/g;
|
|
37
|
+
}
|
|
38
|
+
/**
|
|
39
|
+
* Extract all form fields from a raw multipart body string.
|
|
40
|
+
*
|
|
41
|
+
* @param rawBody - The raw multipart/form-data body text.
|
|
42
|
+
* @returns The extracted fields in document order. Empty if nothing matched.
|
|
43
|
+
*/
|
|
44
|
+
export function parseMultipartFields(rawBody) {
|
|
45
|
+
const fields = [];
|
|
46
|
+
if (!rawBody) {
|
|
47
|
+
return fields;
|
|
48
|
+
}
|
|
49
|
+
const fieldRegex = createFieldRegex();
|
|
50
|
+
let match;
|
|
51
|
+
while ((match = fieldRegex.exec(rawBody)) !== null) {
|
|
52
|
+
fields.push({
|
|
53
|
+
name: match[1],
|
|
54
|
+
// Remove trailing newlines/whitespace, matching the original `.trim()`.
|
|
55
|
+
value: match[2].trim(),
|
|
56
|
+
});
|
|
57
|
+
}
|
|
58
|
+
return fields;
|
|
59
|
+
}
|
|
60
|
+
/**
|
|
61
|
+
* Reconstruct a parseable multipart body from a malformed single-entry
|
|
62
|
+
* `[key, value]` pair produced by `formData()` when it fails to split the
|
|
63
|
+
* body correctly.
|
|
64
|
+
*
|
|
65
|
+
* When the split lands between the `...name` token and the `"field"...`
|
|
66
|
+
* value, the `=` separator is lost; we re-insert it so the field regex can
|
|
67
|
+
* match. Otherwise the two halves are concatenated as-is.
|
|
68
|
+
*
|
|
69
|
+
* @param keyPart - The malformed entry key.
|
|
70
|
+
* @param valuePart - The malformed entry value.
|
|
71
|
+
* @returns A single string suitable for {@link parseMultipartFields}.
|
|
72
|
+
*/
|
|
73
|
+
export function reconstructMalformedMultipart(keyPart, valuePart) {
|
|
74
|
+
if (keyPart.trim().endsWith("name") && valuePart.trim().startsWith('"')) {
|
|
75
|
+
return keyPart + "=" + valuePart;
|
|
76
|
+
}
|
|
77
|
+
return keyPart + valuePart;
|
|
78
|
+
}
|
|
79
|
+
/**
|
|
80
|
+
* Detect whether a `formData()` result is the "single malformed entry" case
|
|
81
|
+
* where the entire multipart body leaked into one `[key, value]` pair.
|
|
82
|
+
*
|
|
83
|
+
* @param entries - The materialized entries from `formData().entries()`.
|
|
84
|
+
*/
|
|
85
|
+
export function isMalformedSingleEntry(entries) {
|
|
86
|
+
return (entries.length === 1 &&
|
|
87
|
+
typeof entries[0][0] === "string" &&
|
|
88
|
+
entries[0][0].includes("Content-Disposition") &&
|
|
89
|
+
typeof entries[0][1] === "string" &&
|
|
90
|
+
entries[0][1].includes("Content-Disposition"));
|
|
91
|
+
}
|
|
92
|
+
/**
|
|
93
|
+
* Extract a clean field name from a (possibly malformed) FormData entry key.
|
|
94
|
+
*
|
|
95
|
+
* Returns the original key for normal entries, the parsed `name="..."` value
|
|
96
|
+
* when the key contains a Content-Disposition preamble, or `null` for keys
|
|
97
|
+
* that are pure boundary noise / unparseable and should be skipped: a
|
|
98
|
+
* preamble with no name, a boundary line, or undici's `formdata-undici`
|
|
99
|
+
* boundary.
|
|
100
|
+
*
|
|
101
|
+
* @param key - A raw FormData entry key.
|
|
102
|
+
*/
|
|
103
|
+
export function extractFieldNameFromKey(key) {
|
|
104
|
+
if (key.includes("Content-Disposition")) {
|
|
105
|
+
const nameMatch = key.match(/name="([^"]+)"/);
|
|
106
|
+
return nameMatch && nameMatch[1] ? nameMatch[1] : null;
|
|
107
|
+
}
|
|
108
|
+
if (key.includes("------") ||
|
|
109
|
+
key.includes("\r\n") ||
|
|
110
|
+
key.trim() === "" ||
|
|
111
|
+
key.includes("formdata-undici")) {
|
|
112
|
+
return null;
|
|
113
|
+
}
|
|
114
|
+
return key;
|
|
115
|
+
}
|
|
116
|
+
//# sourceMappingURL=multipart-parser.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"multipart-parser.js","sourceRoot":"","sources":["../../src/services/multipart-parser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAUH;;;;;;;;GAQG;AACH,SAAS,gBAAgB;IACvB,OAAO,0FAA0F,CAAC;AACpG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,UAAU,GAAG,gBAAgB,EAAE,CAAC;IACtC,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YACd,wEAAwE;YACxE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;SACvB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,6BAA6B,CAC3C,OAAe,EACf,SAAiB;IAEjB,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxE,OAAO,OAAO,GAAG,GAAG,GAAG,SAAS,CAAC;IACnC,CAAC;IACD,OAAO,OAAO,GAAG,SAAS,CAAC;AAC7B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAiC;IAEjC,OAAO,CACL,OAAO,CAAC,MAAM,KAAK,CAAC;QACpB,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ;QACjC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QAC7C,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ;QAChC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAY,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAW;IACjD,IAAI,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC9C,OAAO,SAAS,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,CAAC;IACD,IACE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACtB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;QACpB,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QACjB,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAC/B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
|
|
@@ -12,6 +12,7 @@ import type { CloudflareRuntimeConfig } from "../config";
|
|
|
12
12
|
import type { CloudflareRuntime } from "../runtime";
|
|
13
13
|
import type { DelegationDenial } from "@kya-os/mcp-i-runtime";
|
|
14
14
|
import { type ToolActivity } from "../runtime/tool-activity";
|
|
15
|
+
import type { AdmissionRefusalCode } from "../security/admission-refusal";
|
|
15
16
|
export interface ProofSubmissionContext {
|
|
16
17
|
session: {
|
|
17
18
|
id: string;
|
|
@@ -34,6 +35,13 @@ export interface ProofSubmissionContext {
|
|
|
34
35
|
* unprotected tools, even when the session holds a stored grant.
|
|
35
36
|
*/
|
|
36
37
|
verifiedDelegationId?: string;
|
|
38
|
+
/**
|
|
39
|
+
* DID whose key signed THIS request, as proved by request admission. Sent
|
|
40
|
+
* as `session.agent.did`. Never a caller-asserted DID: the session's
|
|
41
|
+
* `agentDid` can fall back to the server's own DID and `clientDid` is
|
|
42
|
+
* whatever the caller claimed.
|
|
43
|
+
*/
|
|
44
|
+
holderDid?: string;
|
|
37
45
|
}
|
|
38
46
|
/** A protected call the runtime refused before the handler ran. */
|
|
39
47
|
export interface DeniedToolCall {
|
|
@@ -51,6 +59,24 @@ export interface DeniedToolCall {
|
|
|
51
59
|
* grant was not refused by any delegation.
|
|
52
60
|
*/
|
|
53
61
|
delegationId?: string;
|
|
62
|
+
/** DID proved by request admission for this call; see ProofSubmissionContext. */
|
|
63
|
+
holderDid?: string;
|
|
64
|
+
}
|
|
65
|
+
/**
|
|
66
|
+
* A tools/call that request admission refused before the runtime ran.
|
|
67
|
+
*
|
|
68
|
+
* Deliberately has no agent DID, grant, proof, params or upstream reasons:
|
|
69
|
+
* the caller was not proved, no grant was evaluated, and Checkpoint promises
|
|
70
|
+
* none of the rest ever reaches an activity event.
|
|
71
|
+
*/
|
|
72
|
+
export interface AdmissionRefusedToolCall {
|
|
73
|
+
/** The emitting server's own DID. */
|
|
74
|
+
serverDid: string;
|
|
75
|
+
sessionId?: string;
|
|
76
|
+
/** The registered tool the refused call named. */
|
|
77
|
+
toolName: string;
|
|
78
|
+
/** The admission's own classification of why it refused. */
|
|
79
|
+
code: AdmissionRefusalCode;
|
|
54
80
|
}
|
|
55
81
|
export declare class ProofService {
|
|
56
82
|
private config;
|
|
@@ -106,6 +132,18 @@ export declare class ProofService {
|
|
|
106
132
|
* must not replace the refusal the client is about to receive.
|
|
107
133
|
*/
|
|
108
134
|
reportDenied(call: DeniedToolCall): Promise<void>;
|
|
135
|
+
/**
|
|
136
|
+
* Record a tools/call that request admission refused.
|
|
137
|
+
*
|
|
138
|
+
* Structured mode only; pass-only (default) sends nothing. The event names
|
|
139
|
+
* the tool and carries `${code}: ${sentence}`, with no `session.agent` and
|
|
140
|
+
* no `delegation.jti`, because the caller was not proved and no grant was
|
|
141
|
+
* evaluated. Built field by field from `call`, so nothing else a caller
|
|
142
|
+
* passes can reach the wire. Flushed at once like `reportDenied`, since a
|
|
143
|
+
* refused call produces no proof. Never throws: telemetry must not replace
|
|
144
|
+
* the refusal the client is about to receive.
|
|
145
|
+
*/
|
|
146
|
+
reportAdmissionRefused(call: AdmissionRefusedToolCall): Promise<void>;
|
|
109
147
|
/**
|
|
110
148
|
* Notify Reputation Engine of an interaction
|
|
111
149
|
*
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"proof.service.d.ts","sourceRoot":"","sources":["../../src/services/proof.service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAEV,mBAAmB,EACpB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAmB,MAAM,YAAY,CAAC;AAUrE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,
|
|
1
|
+
{"version":3,"file":"proof.service.d.ts","sourceRoot":"","sources":["../../src/services/proof.service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAEV,mBAAmB,EACpB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAmB,MAAM,YAAY,CAAC;AAUrE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAGL,KAAK,YAAY,EAClB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAE1E,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE;QACP,EAAE,EAAE,MAAM,CAAC;QACX,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IAGF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB,YAAY,CAAC,EAAE,mBAAmB,CAAC;IAEnC,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;OAGG;IACH,QAAQ,CAAC,EAAE,YAAY,CAAC;IAExB;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAE9B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,mEAAmE;AACnE,MAAM,WAAW,cAAc;IAC7B,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,sEAAsE;IACtE,KAAK,EAAE;QAAE,MAAM,CAAC,EAAE,gBAAgB,CAAA;KAAE,CAAC;IACrC;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,wBAAwB;IACvC,qCAAqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,IAAI,EAAE,oBAAoB,CAAC;CAC5B;AAwBD,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,OAAO,CAAC,CAAoB;IACpC,OAAO,CAAC,UAAU,CAAC,CAAkB;IACrC;;;;;OAKG;IACH,OAAO,CAAC,aAAa,CAAC,CAAqB;IAC3C,OAAO,CAAC,mBAAmB,CAAS;IACpC,kFAAkF;IAClF,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAU;IAC7C,oEAAoE;IACpE,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAU;gBAElC,MAAM,EAAE,uBAAuB,EAAE,OAAO,CAAC,EAAE,iBAAiB;IAyIxE;;;;;;;;;OASG;IACG,WAAW,CACf,KAAK,EAAE,aAAa,EACpB,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,IAAI,CAAC;IA0EhB;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IAe5B;;;;;;;OAOG;IACH,OAAO,CAAC,gBAAgB;IA2BxB;;;;;;;OAOG;IACG,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAuBvD;;;;;;;;;;OAUG;IACG,sBAAsB,CAAC,IAAI,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAyB3E;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,sBAAsB;IAsD9B;;OAEG;YACW,iBAAiB;IA0T/B;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAY7B"}
|
|
@@ -8,7 +8,7 @@
|
|
|
8
8
|
*/
|
|
9
9
|
import { ProofBatchQueue, CheckpointProofDestination, } from "./proof-batch-queue";
|
|
10
10
|
import { KyaOsEventsEmitter, } from "./kya-os-events.service";
|
|
11
|
-
import { activityForDenial, } from "../runtime/tool-activity";
|
|
11
|
+
import { activityForAdmissionRefusal, activityForDenial, } from "../runtime/tool-activity";
|
|
12
12
|
/**
|
|
13
13
|
* Know That AI Registry URL
|
|
14
14
|
* @see packages/contracts/src/reputation/api.ts
|
|
@@ -224,7 +224,12 @@ export class ProofService {
|
|
|
224
224
|
* was verified, so a fail linked to it would read as a failed delegation.
|
|
225
225
|
*/
|
|
226
226
|
toolInvokedInput(serverDid, toolName, context) {
|
|
227
|
-
const base = {
|
|
227
|
+
const base = {
|
|
228
|
+
serverDid,
|
|
229
|
+
sessionId: context.session.id,
|
|
230
|
+
toolName,
|
|
231
|
+
...(context.holderDid ? { agentDid: context.holderDid } : {}),
|
|
232
|
+
};
|
|
228
233
|
const activity = context.activity;
|
|
229
234
|
if (!this.structuredActivity || !activity) {
|
|
230
235
|
return { ...base, success: context.success };
|
|
@@ -257,6 +262,7 @@ export class ProofService {
|
|
|
257
262
|
this.eventsEmitter.emitToolInvoked({
|
|
258
263
|
serverDid: call.serverDid,
|
|
259
264
|
sessionId: call.sessionId,
|
|
265
|
+
...(call.holderDid ? { agentDid: call.holderDid } : {}),
|
|
260
266
|
toolName: call.toolName,
|
|
261
267
|
success: false,
|
|
262
268
|
errorExcerpt: activity.excerpt,
|
|
@@ -270,6 +276,39 @@ export class ProofService {
|
|
|
270
276
|
console.error("[ProofService] Failed to report denied tool call:", error);
|
|
271
277
|
}
|
|
272
278
|
}
|
|
279
|
+
/**
|
|
280
|
+
* Record a tools/call that request admission refused.
|
|
281
|
+
*
|
|
282
|
+
* Structured mode only; pass-only (default) sends nothing. The event names
|
|
283
|
+
* the tool and carries `${code}: ${sentence}`, with no `session.agent` and
|
|
284
|
+
* no `delegation.jti`, because the caller was not proved and no grant was
|
|
285
|
+
* evaluated. Built field by field from `call`, so nothing else a caller
|
|
286
|
+
* passes can reach the wire. Flushed at once like `reportDenied`, since a
|
|
287
|
+
* refused call produces no proof. Never throws: telemetry must not replace
|
|
288
|
+
* the refusal the client is about to receive.
|
|
289
|
+
*/
|
|
290
|
+
async reportAdmissionRefused(call) {
|
|
291
|
+
if (!this.structuredActivity || !this.eventsEmitter) {
|
|
292
|
+
return;
|
|
293
|
+
}
|
|
294
|
+
try {
|
|
295
|
+
const activity = activityForAdmissionRefusal(call.code);
|
|
296
|
+
if (!activity) {
|
|
297
|
+
return;
|
|
298
|
+
}
|
|
299
|
+
this.eventsEmitter.emitToolInvoked({
|
|
300
|
+
serverDid: call.serverDid,
|
|
301
|
+
sessionId: call.sessionId,
|
|
302
|
+
toolName: call.toolName,
|
|
303
|
+
success: false,
|
|
304
|
+
errorExcerpt: activity.excerpt,
|
|
305
|
+
});
|
|
306
|
+
await this.eventsEmitter.flush();
|
|
307
|
+
}
|
|
308
|
+
catch (error) {
|
|
309
|
+
console.error("[ProofService] Failed to report admission refusal:", error);
|
|
310
|
+
}
|
|
311
|
+
}
|
|
273
312
|
/**
|
|
274
313
|
* Notify Reputation Engine of an interaction
|
|
275
314
|
*
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"proof.service.js","sourceRoot":"","sources":["../../src/services/proof.service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AASH,OAAO,EACL,eAAe,EACf,0BAA0B,GAE3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,kBAAkB,GAEnB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,iBAAiB,GAElB,MAAM,0BAA0B,CAAC;AAiDlC;;;GAGG;AACH,MAAM,YAAY,GAAG,qBAA8B,CAAC;AAEpD;;;GAGG;AACH,MAAM,mBAAmB,GAAG,gBAAyB,CAAC;AAYtD,MAAM,OAAO,YAAY;IACf,MAAM,CAA0B;IAChC,OAAO,CAAqB;IAC5B,UAAU,CAAmB;IACrC;;;;;OAKG;IACK,aAAa,CAAsB;IACnC,mBAAmB,GAAG,KAAK,CAAC,CAAC,0CAA0C;IAC/E,kFAAkF;IACjE,kBAAkB,CAAU;IAC7C,oEAAoE;IACnD,mBAAmB,CAAU;IAE9C,YAAY,MAA+B,EAAE,OAA2B;QACtE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,kBAAkB;YACrB,MAAM,CAAC,aAAa,EAAE,gBAAgB,KAAK,YAAY,CAAC;QAC1D,IAAI,CAAC,mBAAmB;YACtB,MAAM,CAAC,aAAa,EAAE,mBAAmB,KAAK,IAAI,CAAC;QAErD,qCAAqC;QACrC,uFAAuF;QACvF,MAAM,cAAc,GAAI,IAAI,CAAC,MAAc,CAAC,QAAQ,CAAC;QACrD,MAAM,SAAS,GAAG,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,CAC9D,CAAC,IAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI,IAAI,CAAC,MAAM,CAC1F,CAAC;QAEF,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE;YAC3C,eAAe,EAAE,cAAc,EAAE,OAAO,IAAI,KAAK;YACjD,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,eAAe,EAAE,CAAC,CAAC,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM;YACnE,gBAAgB,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;YACvE,aAAa,EAAE,CAAC,CAAC,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM;YACtE,MAAM,EACJ,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,SAAS;SACrE,CAAC,CAAC;QAEH,2DAA2D;QAC3D,IAAI,cAAc,EAAE,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1C,OAAO,CAAC,IAAI,CACV,2EAA2E,CAC5E,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;YAC3D,OAAO,CAAC,IAAI,CACV,yEAAyE,CAC1E,CAAC;YACF,OAAO,CAAC,IAAI,CACV,kFAAkF,CACnF,CAAC;QACJ,CAAC;QAED,uCAAuC;QACvC,qEAAqE;QACrE,+EAA+E;QAC/E,IACE,cAAc,EAAE,OAAO;YACvB,cAAc,CAAC,UAAU,EAAE,YAAY,EAAE,MAAM,EAC/C,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,YAAY,GAAuB,EAAE,CAAC;gBAE5C,KAAK,MAAM,UAAU,IAAI,cAAc,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;oBAChE,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,IAAI,UAAU,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;wBAC1E,8DAA8D;wBAC9D,IAAI,UAAU,CAAC,MAAM,EAAE,MAAM,IAAI,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;4BAC3D,YAAY,CAAC,IAAI,CACf,IAAI,0BAA0B,CAC5B,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,MAAM,CAClB,CACF,CAAC;4BACF,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE;gCAC5D,MAAM,EAAE,UAAU,CAAC,MAAM;gCACzB,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM;6BAC/B,CAAC,CAAC;4BAEH,6DAA6D;4BAC7D,gEAAgE;4BAChE,gCAAgC;4BAChC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;gCACxB,IAAI,CAAC,aAAa,GAAG,IAAI,kBAAkB,CACzC,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,MAAM,EACjB;oCACE,YAAY,EAAE,cAAc,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE;oCAC1D,UAAU,EAAE,cAAc,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC;oCACrD,KAAK,EAAE,cAAc,CAAC,UAAU,CAAC,KAAK,IAAI,KAAK;iCAChD,CACF,CAAC;gCACF,OAAO,CAAC,KAAK,CACX,2DAA2D,CAC5D,CAAC;4BACJ,CAAC;wBACH,CAAC;6BAAM,CAAC;4BACN,OAAO,CAAC,IAAI,CACV,0EAA0E,EAC1E;gCACE,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM;gCAC9B,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM;6BAC/B,CACF,CAAC;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5B,oEAAoE;oBACpE,sEAAsE;oBACtE,IAAI,CAAC,UAAU,GAAG,IAAI,eAAe,CAAC;wBACpC,YAAY;wBACZ,YAAY,EAAE,cAAc,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE;wBAC1D,eAAe,EAAE,cAAc,CAAC,UAAU,CAAC,eAAe,IAAI,IAAI;wBAClE,UAAU,EAAE,cAAc,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC;wBACrD,KAAK,EAAE,cAAc,CAAC,UAAU,CAAC,KAAK,IAAI,KAAK;qBAChD,CAAC,CAAC;oBACH,OAAO,CAAC,KAAK,CACX,2FAA2F,EAC3F;wBACE,YAAY,EAAE,cAAc,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE;wBAC1D,eAAe,EACb,cAAc,CAAC,UAAU,CAAC,eAAe,IAAI,IAAI;wBACnD,YAAY,EAAE,YAAY,CAAC,MAAM;qBAClC,CACF,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,CACV,+EAA+E,CAChF,CAAC;oBACF,8CAA8C;oBAC9C,oDAAoD;oBACpD,MAAM,WAAW,GACd,IAAI,CAAC,MAAc,CAAC,WAAW;wBAC/B,IAAI,CAAC,MAAc,CAAC,IAAI,EAAE,WAAW;wBACtC,aAAa,CAAC;oBAChB,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;wBACjC,OAAO,CAAC,IAAI,CACV,gFAAgF,CACjF,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CACX,kDAAkD,EAClD,KAAK,CACN,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,WAAW,CACf,KAAoB,EACpB,OAA+B;QAE/B,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CACV,+DAA+D,CAChE,CAAC;YACF,OAAO;QACT,CAAC;QAED,0EAA0E;QAC1E,2EAA2E;QAC3E,sEAAsE;QACtE,uEAAuE;QACvE,IAAI,IAAI,CAAC,aAAa,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YACpE,IAAI,CAAC,aAAa,CAAC,eAAe,CAChC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CACjE,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAEzD,wEAAwE;QACxE,uEAAuE;QACvE,0EAA0E;QAC1E,IAAI,IAAI,CAAC,mBAAmB,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;YAC7D,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;YAChC,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QAED,+DAA+D;QAC/D,yEAAyE;QACzE,IAAI,CAAC,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACjD,OAAO,CAAC,KAAK,CACX,iFAAiF,CAClF,CAAC;YACF,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;YAChC,uEAAuE;YACvE,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QAED,0DAA0D;QAC1D,wEAAwE;QACxE,qDAAqD;QACrD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,CAAC,KAAK,CAAC,gDAAgD,EAAE;oBAC9D,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG;oBACnB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;oBAC/B,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO;oBAC3B,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,SAAS;iBAChD,CAAC,CAAC;gBAEH,yEAAyE;gBACzE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAE/B,+EAA+E;gBAC/E,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAErD,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CACX,4EAA4E,EAC5E,KAAK,CACN,CAAC;gBACF,oCAAoC;YACtC,CAAC;QACH,CAAC;QAED,6DAA6D;QAC7D,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IACrD,CAAC;IAED;;;;;;OAMG;IACK,oBAAoB,CAC1B,OAA+B;QAE/B,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC9B,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO;YACL,GAAG,OAAO;YACV,OAAO,EAAE;gBACP,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;gBACtB,YAAY,EAAE,OAAO,CAAC,oBAAoB;aAC3C;SACF,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,gBAAgB,CACtB,SAAiB,EACjB,QAAgB,EAChB,OAA+B;QAE/B,MAAM,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC;QACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1C,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QAC/C,CAAC;QACD,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAChC,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrE,CAAC;QACD,OAAO;YACL,GAAG,IAAI;YACP,OAAO,EAAE,IAAI;YACb,GAAG,CAAC,OAAO,CAAC,oBAAoB;gBAC9B,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,oBAAoB,EAAE;gBACjD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,YAAY,CAAC,IAAoB;QACrC,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACpD,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/C,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC;gBACjC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,OAAO,EAAE,KAAK;gBACd,YAAY,EAAE,QAAQ,CAAC,OAAO;gBAC9B,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,YAAY;oBACxC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,YAAY,EAAE;oBACtC,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,mDAAmD,EAAE,KAAK,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED;;;;;;;;;;;OAWG;IACK,sBAAsB,CAC5B,QAAgB,EAChB,OAA+B;QAE/B,2EAA2E;QAC3E,MAAM,mBAAmB,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC;QAC/D,IAAI,eAA4C,CAAC;QAEjD,IAAI,mBAAmB,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,kCAAkC;gBAClC,OAAO;YACT,CAAC;QACH,CAAC;QAED,sDAAsD;QACtD,IAAI,CAAC,eAAe,EAAE,UAAU,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QAED,oEAAoE;QACpE,0EAA0E;QAC1E,0CAA0C;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,kBAAkB,CAAC;QACpD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG;YACd,kBAAkB,EAAE,CAAC;YACrB,uBAAuB,EAAE,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,mBAAmB,EAAE,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACvD,CAAC;QAEF,kBAAkB;QAClB,+DAA+D;QAC/D,KAAK,CACH,GAAG,YAAY,GAAG,mBAAmB,IAAI,kBAAkB,CAAC,QAAQ,CAAC,aAAa,EAClF;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,WAAW,EAAE,MAAM;aACpB;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CACF,CAAC,KAAK,CAAC,GAAG,EAAE;YACX,iEAAiE;YACjE,kDAAkD;QACpD,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,iBAAiB,CAC7B,KAAoB,EACpB,OAA+B;QAE/B,8BAA8B;QAC9B,IAAI,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,6CAA6C;QAC7C,uFAAuF;QACvF,MAAM,cAAc,GAAI,IAAI,CAAC,MAAc,CAAC,QAAQ,CAAC;QACrD,IAAI,CAAC,cAAc,EAAE,OAAO,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC;YACzE,OAAO,CAAC,KAAK,CACX,wEAAwE,CACzE,CAAC;YACF,OAAO;QACT,CAAC;QAED,8BAA8B;QAC9B,MAAM,cAAc,GAAG,cAAc,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAChE,CAAC,IAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI,IAAI,CAAC,MAAM,CAC1F,CAAC;QAEF,IACE,CAAC,cAAc;YACf,CAAC,cAAc,CAAC,MAAM;YACtB,CAAC,cAAc,CAAC,MAAM,EACtB,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,sDAAsD,EAAE;gBACpE,eAAe,EAAE,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM;gBACjE,SAAS,EAAE,CAAC,CAAC,cAAc;gBAC3B,SAAS,EAAE,CAAC,CAAC,cAAc,EAAE,MAAM;gBACnC,SAAS,EAAE,CAAC,CAAC,cAAc,EAAE,MAAM;aACpC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,wDAAwD;QACxD,IAAI,IAAI,CAAC,OAAO,IAAK,IAAI,CAAC,OAAe,CAAC,oBAAoB,EAAE,CAAC;YAC/D,MAAM,oBAAoB,GAAI,IAAI,CAAC,OAAe;iBAC/C,oBAA+E,CAAC;YAEnF,IAAI,CAAC;gBACH,kEAAkE;gBAClE,yEAAyE;gBACzE,MAAM,eAAe,GAAgC,OAAO,CAAC,QAAQ;oBACnE,CAAC,CAAC;wBACE,IAAI,EAAE,OAAO,CAAC,QAAQ;wBACtB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;wBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,OAAO,CAAC,QAAQ,UAAU;qBAC7D;oBACH,CAAC,CAAC,SAAS,CAAC;gBAEd,0DAA0D;gBAC1D,MAAM,OAAO,GAAG;oBACd,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;oBAC9B,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,IAAI,IAAI;oBACnD,MAAM,EAAE,CAAC,KAAK,CAAC;oBACf,OAAO,EAAE;wBACP,qDAAqD;wBACrD,SAAS,EACP,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,YAAY;4BACvC,CAAC,CAAC,eAAe;gCACf,CAAC,CAAC,CAAC,eAAe,CAAC;gCACnB,CAAC,CAAC;oCACE;wCACE,IAAI,EAAE,OAAO,CAAC,QAAS;wCACvB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;wCACxB,MAAM,EAAE,OAAO,CAAC,MAAM;wCACtB,OAAO,EACL,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,OAAO,CAAC,QAAQ,UAAU;qCACtD;iCACF;4BACL,CAAC,CAAC,EAAE;wBACR,sCAAsC;wBACtC,aAAa,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE;wBACjE,YAAY,EAAE,OAAO,CAAC,YAAY;qBACnC;iBACF,CAAC;gBAEF,OAAO,CAAC,KAAK,CACX,8DAA8D,EAC9D;oBACE,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG;oBACnB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;oBAC/B,YAAY,EAAE,OAAO,CAAC,aAAa,IAAI,MAAM;oBAC7C,SAAS,EACP,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;oBACnE,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI;iBAChD,CACF,CAAC;gBAEF,IAAI,QAAQ,CAAC;gBACb,IAAI,CAAC;oBACH,QAAQ,GAAG,MAAM,oBAAoB,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;gBAC9D,CAAC;gBAAC,OAAO,KAAU,EAAE,CAAC;oBACpB,sDAAsD;oBACtD,kDAAkD;oBAClD,MAAM,YAAY,GAAG,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC;oBAC1C,MAAM,YAAY,GAAG,YAAY,CAAC,SAAS;wBACzC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;wBACjD,CAAC,CAAC,SAAS,CAAC;oBACd,MAAM,eAAe,GAAG,YAAY,CAAC,YAAY;wBAC/C,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;wBACpD,CAAC,CAAC,SAAS,CAAC;oBAEd,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE;wBACxD,YAAY,EAAE,KAAK,EAAE,OAAO;wBAC5B,SAAS,EAAE,KAAK,EAAE,IAAI;wBACtB,SAAS,EAAE,YAAY;wBACvB,YAAY,EAAE,eAAe;wBAC7B,UAAU,EAAE,KAAK,EAAE,KAAK;wBACxB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;qBAC1C,CAAC,CAAC;oBACH,MAAM,KAAK,CAAC;gBACd,CAAC;gBAED,kGAAkG;gBAClG,yFAAyF;gBACzF,MAAM,aAAa,GAAG,QASrB,CAAC;gBAEF,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE;oBAC1C,OAAO,EAAE,aAAa,CAAC,OAAO;oBAC9B,QAAQ,EAAE,aAAa,CAAC,QAAQ;oBAChC,QAAQ,EAAE,aAAa,CAAC,QAAQ;oBAChC,QAAQ,EAAE,aAAa,CAAC,QAAQ;oBAChC,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC;iBAC1C,CAAC,CAAC;gBAEH,IAAI,aAAa,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;oBAC/B,OAAO,CAAC,KAAK,CACX,mCAAmC,EACnC,aAAa,CAAC,QAAQ,CACvB,CAAC;gBACJ,CAAC;gBACD,IAAI,aAAa,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;oBAC/B,OAAO,CAAC,KAAK,CACX,mCAAmC,EACnC,aAAa,CAAC,QAAQ,CACvB,CAAC;gBACJ,CAAC;gBACD,IAAI,aAAa,CAAC,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5D,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;gBACtE,CAAC;gBAED,6CAA6C;gBAC7C,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAErD,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CACX,8DAA8D,EAC9D;oBACE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC7D,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;iBACxD,CACF,CAAC;gBACF,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,oEAAoE;QACpE,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC;QACrC,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC;QAErC,OAAO,CAAC,KAAK,CAAC,qDAAqD,EAAE;YACnE,MAAM;YACN,SAAS,EAAE,CAAC,CAAC,MAAM;YACnB,YAAY,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;SAClC,CAAC,CAAC;QAEH,0EAA0E;QAC1E,0EAA0E;QAC1E,MAAM,eAAe,GAAgC,OAAO,CAAC,QAAQ;YACnE,CAAC,CAAC;gBACE,IAAI,EAAE,OAAO,CAAC,QAAQ;gBACtB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;gBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,OAAO,CAAC,QAAQ,UAAU;aAC7D;YACH,CAAC,CAAC,SAAS,CAAC;QAEd,0DAA0D;QAC1D,2EAA2E;QAC3E,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;YAC9B,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,IAAI,IAAI;YACnD,MAAM,EAAE;gBACN;oBACE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,6BAA6B;oBAC7C,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,kCAAkC;iBACrD;aACF;YACD,6CAA6C;YAC7C,OAAO,EAAE;gBACP,qDAAqD;gBACrD,SAAS,EACP,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,YAAY;oBACvC,CAAC,CAAC,eAAe;wBACf,CAAC,CAAC,CAAC,eAAe,CAAC;wBACnB,CAAC,CAAC;4BACE;gCACE,iDAAiD;gCACjD,IAAI,EAAE,OAAO,CAAC,QAAQ;gCACtB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;gCACxB,MAAM,EAAE,OAAO,CAAC,MAAM;gCACtB,OAAO,EACL,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,OAAO,CAAC,QAAQ,UAAU;6BACtD;yBACF;oBACL,CAAC,CAAC,EAAE;gBACR,sCAAsC;gBACtC,aAAa,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE;gBACjE,iEAAiE;gBACjE,YAAY,EAAE,OAAO,CAAC,YAAY;aACnC;SACF,CAAC;QAEF,OAAO,CAAC,KAAK,CAAC,+CAA+C,EAAE;YAC7D,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG;YACnB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;YAC/B,YAAY,EAAE,WAAW,CAAC,aAAa,IAAI,MAAM;YACjD,SAAS,EACP,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;YACnE,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI;YACnD,cAAc,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO;YACzD,YAAY,EAAE,WAAW,CAAC,OAAO,CAAC,YAAY,IAAI,SAAS;YAC3D,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,MAAM;SACpD,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,wBAAwB,EAAE;gBAC9D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,UAAU,MAAM,EAAE;iBAClC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;aAClC,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAE3C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE;oBACjD,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,QAAQ,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,8BAA8B;iBACzE,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1D,CAAC;YAED,IAAI,YAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC1C,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE;oBACxD,YAAY,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;oBAC5C,KAAK,EAAE,UAAU;iBAClB,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC3D,CAAC;YAED,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE;gBACxC,OAAO,EAAE,YAAY,CAAC,OAAO;gBAC7B,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,SAAS,EAAE,YAAY,CAAC,SAAS;gBACjC,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC;aACzC,CAAC,CAAC;YAEH,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;gBAC1B,OAAO,CAAC,KAAK,CACX,mCAAmC,EACnC,YAAY,CAAC,QAAQ,CACtB,CAAC;YACJ,CAAC;YACD,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;gBAC1B,OAAO,CAAC,KAAK,CACX,mCAAmC,EACnC,YAAY,CAAC,QAAQ,CACtB,CAAC;YACJ,CAAC;YACD,IAAI,YAAY,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1D,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;YACrE,CAAC;YAED,6CAA6C;YAC7C,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE;gBAChD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7D,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;aACxD,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;YACxD,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAC9B,iCAAiC;YACjC,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;QACvC,CAAC;QACD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,OAAO,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACnE,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QACnC,CAAC;IACH,CAAC;CACF"}
|
|
1
|
+
{"version":3,"file":"proof.service.js","sourceRoot":"","sources":["../../src/services/proof.service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AASH,OAAO,EACL,eAAe,EACf,0BAA0B,GAE3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,kBAAkB,GAEnB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,2BAA2B,EAC3B,iBAAiB,GAElB,MAAM,0BAA0B,CAAC;AA6ElC;;;GAGG;AACH,MAAM,YAAY,GAAG,qBAA8B,CAAC;AAEpD;;;GAGG;AACH,MAAM,mBAAmB,GAAG,gBAAyB,CAAC;AAYtD,MAAM,OAAO,YAAY;IACf,MAAM,CAA0B;IAChC,OAAO,CAAqB;IAC5B,UAAU,CAAmB;IACrC;;;;;OAKG;IACK,aAAa,CAAsB;IACnC,mBAAmB,GAAG,KAAK,CAAC,CAAC,0CAA0C;IAC/E,kFAAkF;IACjE,kBAAkB,CAAU;IAC7C,oEAAoE;IACnD,mBAAmB,CAAU;IAE9C,YAAY,MAA+B,EAAE,OAA2B;QACtE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,kBAAkB;YACrB,MAAM,CAAC,aAAa,EAAE,gBAAgB,KAAK,YAAY,CAAC;QAC1D,IAAI,CAAC,mBAAmB;YACtB,MAAM,CAAC,aAAa,EAAE,mBAAmB,KAAK,IAAI,CAAC;QAErD,qCAAqC;QACrC,uFAAuF;QACvF,MAAM,cAAc,GAAI,IAAI,CAAC,MAAc,CAAC,QAAQ,CAAC;QACrD,MAAM,SAAS,GAAG,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,CAC9D,CAAC,IAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI,IAAI,CAAC,MAAM,CAC1F,CAAC;QAEF,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE;YAC3C,eAAe,EAAE,cAAc,EAAE,OAAO,IAAI,KAAK;YACjD,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,eAAe,EAAE,CAAC,CAAC,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM;YACnE,gBAAgB,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;YACvE,aAAa,EAAE,CAAC,CAAC,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM;YACtE,MAAM,EACJ,cAAc,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,SAAS;SACrE,CAAC,CAAC;QAEH,2DAA2D;QAC3D,IAAI,cAAc,EAAE,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1C,OAAO,CAAC,IAAI,CACV,2EAA2E,CAC5E,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;YAC3D,OAAO,CAAC,IAAI,CACV,yEAAyE,CAC1E,CAAC;YACF,OAAO,CAAC,IAAI,CACV,kFAAkF,CACnF,CAAC;QACJ,CAAC;QAED,uCAAuC;QACvC,qEAAqE;QACrE,+EAA+E;QAC/E,IACE,cAAc,EAAE,OAAO;YACvB,cAAc,CAAC,UAAU,EAAE,YAAY,EAAE,MAAM,EAC/C,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,YAAY,GAAuB,EAAE,CAAC;gBAE5C,KAAK,MAAM,UAAU,IAAI,cAAc,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;oBAChE,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,IAAI,UAAU,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;wBAC1E,8DAA8D;wBAC9D,IAAI,UAAU,CAAC,MAAM,EAAE,MAAM,IAAI,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;4BAC3D,YAAY,CAAC,IAAI,CACf,IAAI,0BAA0B,CAC5B,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,MAAM,CAClB,CACF,CAAC;4BACF,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE;gCAC5D,MAAM,EAAE,UAAU,CAAC,MAAM;gCACzB,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM;6BAC/B,CAAC,CAAC;4BAEH,6DAA6D;4BAC7D,gEAAgE;4BAChE,gCAAgC;4BAChC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;gCACxB,IAAI,CAAC,aAAa,GAAG,IAAI,kBAAkB,CACzC,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,MAAM,EACjB;oCACE,YAAY,EAAE,cAAc,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE;oCAC1D,UAAU,EAAE,cAAc,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC;oCACrD,KAAK,EAAE,cAAc,CAAC,UAAU,CAAC,KAAK,IAAI,KAAK;iCAChD,CACF,CAAC;gCACF,OAAO,CAAC,KAAK,CACX,2DAA2D,CAC5D,CAAC;4BACJ,CAAC;wBACH,CAAC;6BAAM,CAAC;4BACN,OAAO,CAAC,IAAI,CACV,0EAA0E,EAC1E;gCACE,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM;gCAC9B,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM;6BAC/B,CACF,CAAC;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5B,oEAAoE;oBACpE,sEAAsE;oBACtE,IAAI,CAAC,UAAU,GAAG,IAAI,eAAe,CAAC;wBACpC,YAAY;wBACZ,YAAY,EAAE,cAAc,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE;wBAC1D,eAAe,EAAE,cAAc,CAAC,UAAU,CAAC,eAAe,IAAI,IAAI;wBAClE,UAAU,EAAE,cAAc,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC;wBACrD,KAAK,EAAE,cAAc,CAAC,UAAU,CAAC,KAAK,IAAI,KAAK;qBAChD,CAAC,CAAC;oBACH,OAAO,CAAC,KAAK,CACX,2FAA2F,EAC3F;wBACE,YAAY,EAAE,cAAc,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE;wBAC1D,eAAe,EACb,cAAc,CAAC,UAAU,CAAC,eAAe,IAAI,IAAI;wBACnD,YAAY,EAAE,YAAY,CAAC,MAAM;qBAClC,CACF,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,CACV,+EAA+E,CAChF,CAAC;oBACF,8CAA8C;oBAC9C,oDAAoD;oBACpD,MAAM,WAAW,GACd,IAAI,CAAC,MAAc,CAAC,WAAW;wBAC/B,IAAI,CAAC,MAAc,CAAC,IAAI,EAAE,WAAW;wBACtC,aAAa,CAAC;oBAChB,IAAI,WAAW,KAAK,YAAY,EAAE,CAAC;wBACjC,OAAO,CAAC,IAAI,CACV,gFAAgF,CACjF,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CACX,kDAAkD,EAClD,KAAK,CACN,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,WAAW,CACf,KAAoB,EACpB,OAA+B;QAE/B,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CACV,+DAA+D,CAChE,CAAC;YACF,OAAO;QACT,CAAC;QAED,0EAA0E;QAC1E,2EAA2E;QAC3E,sEAAsE;QACtE,uEAAuE;QACvE,IAAI,IAAI,CAAC,aAAa,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YACpE,IAAI,CAAC,aAAa,CAAC,eAAe,CAChC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CACjE,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAEzD,wEAAwE;QACxE,uEAAuE;QACvE,0EAA0E;QAC1E,IAAI,IAAI,CAAC,mBAAmB,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;YAC7D,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;YAChC,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QAED,+DAA+D;QAC/D,yEAAyE;QACzE,IAAI,CAAC,IAAI,CAAC,mBAAmB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACjD,OAAO,CAAC,KAAK,CACX,iFAAiF,CAClF,CAAC;YACF,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;YAChC,uEAAuE;YACvE,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QAED,0DAA0D;QAC1D,wEAAwE;QACxE,qDAAqD;QACrD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,CAAC,KAAK,CAAC,gDAAgD,EAAE;oBAC9D,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG;oBACnB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;oBAC/B,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO;oBAC3B,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,SAAS;iBAChD,CAAC,CAAC;gBAEH,yEAAyE;gBACzE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAE/B,+EAA+E;gBAC/E,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAErD,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CACX,4EAA4E,EAC5E,KAAK,CACN,CAAC;gBACF,oCAAoC;YACtC,CAAC;QACH,CAAC;QAED,6DAA6D;QAC7D,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IACrD,CAAC;IAED;;;;;;OAMG;IACK,oBAAoB,CAC1B,OAA+B;QAE/B,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC9B,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO;YACL,GAAG,OAAO;YACV,OAAO,EAAE;gBACP,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;gBACtB,YAAY,EAAE,OAAO,CAAC,oBAAoB;aAC3C;SACF,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACK,gBAAgB,CACtB,SAAiB,EACjB,QAAgB,EAChB,OAA+B;QAE/B,MAAM,IAAI,GAAG;YACX,SAAS;YACT,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;YAC7B,QAAQ;YACR,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC;QACF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1C,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QAC/C,CAAC;QACD,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAChC,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrE,CAAC;QACD,OAAO;YACL,GAAG,IAAI;YACP,OAAO,EAAE,IAAI;YACb,GAAG,CAAC,OAAO,CAAC,oBAAoB;gBAC9B,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,oBAAoB,EAAE;gBACjD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,YAAY,CAAC,IAAoB;QACrC,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACpD,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/C,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC;gBACjC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,OAAO,EAAE,KAAK;gBACd,YAAY,EAAE,QAAQ,CAAC,OAAO;gBAC9B,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,YAAY;oBACxC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,YAAY,EAAE;oBACtC,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,mDAAmD,EAAE,KAAK,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,sBAAsB,CAAC,IAA8B;QACzD,IAAI,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACpD,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC;gBACjC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,OAAO,EAAE,KAAK;gBACd,YAAY,EAAE,QAAQ,CAAC,OAAO;aAC/B,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CACX,oDAAoD,EACpD,KAAK,CACN,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;;;;;;OAWG;IACK,sBAAsB,CAC5B,QAAgB,EAChB,OAA+B;QAE/B,2EAA2E;QAC3E,MAAM,mBAAmB,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC;QAC/D,IAAI,eAA4C,CAAC;QAEjD,IAAI,mBAAmB,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,kCAAkC;gBAClC,OAAO;YACT,CAAC;QACH,CAAC;QAED,sDAAsD;QACtD,IAAI,CAAC,eAAe,EAAE,UAAU,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QAED,oEAAoE;QACpE,0EAA0E;QAC1E,0CAA0C;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,kBAAkB,CAAC;QACpD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG;YACd,kBAAkB,EAAE,CAAC;YACrB,uBAAuB,EAAE,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,mBAAmB,EAAE,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACvD,CAAC;QAEF,kBAAkB;QAClB,+DAA+D;QAC/D,KAAK,CACH,GAAG,YAAY,GAAG,mBAAmB,IAAI,kBAAkB,CAAC,QAAQ,CAAC,aAAa,EAClF;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,WAAW,EAAE,MAAM;aACpB;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CACF,CAAC,KAAK,CAAC,GAAG,EAAE;YACX,iEAAiE;YACjE,kDAAkD;QACpD,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,iBAAiB,CAC7B,KAAoB,EACpB,OAA+B;QAE/B,8BAA8B;QAC9B,IAAI,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,6CAA6C;QAC7C,uFAAuF;QACvF,MAAM,cAAc,GAAI,IAAI,CAAC,MAAc,CAAC,QAAQ,CAAC;QACrD,IAAI,CAAC,cAAc,EAAE,OAAO,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC;YACzE,OAAO,CAAC,KAAK,CACX,wEAAwE,CACzE,CAAC;YACF,OAAO;QACT,CAAC;QAED,8BAA8B;QAC9B,MAAM,cAAc,GAAG,cAAc,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAChE,CAAC,IAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI,IAAI,CAAC,MAAM,CAC1F,CAAC;QAEF,IACE,CAAC,cAAc;YACf,CAAC,cAAc,CAAC,MAAM;YACtB,CAAC,cAAc,CAAC,MAAM,EACtB,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,sDAAsD,EAAE;gBACpE,eAAe,EAAE,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM;gBACjE,SAAS,EAAE,CAAC,CAAC,cAAc;gBAC3B,SAAS,EAAE,CAAC,CAAC,cAAc,EAAE,MAAM;gBACnC,SAAS,EAAE,CAAC,CAAC,cAAc,EAAE,MAAM;aACpC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,wDAAwD;QACxD,IAAI,IAAI,CAAC,OAAO,IAAK,IAAI,CAAC,OAAe,CAAC,oBAAoB,EAAE,CAAC;YAC/D,MAAM,oBAAoB,GAAI,IAAI,CAAC,OAAe;iBAC/C,oBAA+E,CAAC;YAEnF,IAAI,CAAC;gBACH,kEAAkE;gBAClE,yEAAyE;gBACzE,MAAM,eAAe,GAAgC,OAAO,CAAC,QAAQ;oBACnE,CAAC,CAAC;wBACE,IAAI,EAAE,OAAO,CAAC,QAAQ;wBACtB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;wBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,OAAO,CAAC,QAAQ,UAAU;qBAC7D;oBACH,CAAC,CAAC,SAAS,CAAC;gBAEd,0DAA0D;gBAC1D,MAAM,OAAO,GAAG;oBACd,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;oBAC9B,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,IAAI,IAAI;oBACnD,MAAM,EAAE,CAAC,KAAK,CAAC;oBACf,OAAO,EAAE;wBACP,qDAAqD;wBACrD,SAAS,EACP,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,YAAY;4BACvC,CAAC,CAAC,eAAe;gCACf,CAAC,CAAC,CAAC,eAAe,CAAC;gCACnB,CAAC,CAAC;oCACE;wCACE,IAAI,EAAE,OAAO,CAAC,QAAS;wCACvB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;wCACxB,MAAM,EAAE,OAAO,CAAC,MAAM;wCACtB,OAAO,EACL,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,OAAO,CAAC,QAAQ,UAAU;qCACtD;iCACF;4BACL,CAAC,CAAC,EAAE;wBACR,sCAAsC;wBACtC,aAAa,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE;wBACjE,YAAY,EAAE,OAAO,CAAC,YAAY;qBACnC;iBACF,CAAC;gBAEF,OAAO,CAAC,KAAK,CACX,8DAA8D,EAC9D;oBACE,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG;oBACnB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;oBAC/B,YAAY,EAAE,OAAO,CAAC,aAAa,IAAI,MAAM;oBAC7C,SAAS,EACP,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;oBACnE,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI;iBAChD,CACF,CAAC;gBAEF,IAAI,QAAQ,CAAC;gBACb,IAAI,CAAC;oBACH,QAAQ,GAAG,MAAM,oBAAoB,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;gBAC9D,CAAC;gBAAC,OAAO,KAAU,EAAE,CAAC;oBACpB,sDAAsD;oBACtD,kDAAkD;oBAClD,MAAM,YAAY,GAAG,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC;oBAC1C,MAAM,YAAY,GAAG,YAAY,CAAC,SAAS;wBACzC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;wBACjD,CAAC,CAAC,SAAS,CAAC;oBACd,MAAM,eAAe,GAAG,YAAY,CAAC,YAAY;wBAC/C,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;wBACpD,CAAC,CAAC,SAAS,CAAC;oBAEd,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE;wBACxD,YAAY,EAAE,KAAK,EAAE,OAAO;wBAC5B,SAAS,EAAE,KAAK,EAAE,IAAI;wBACtB,SAAS,EAAE,YAAY;wBACvB,YAAY,EAAE,eAAe;wBAC7B,UAAU,EAAE,KAAK,EAAE,KAAK;wBACxB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;qBAC1C,CAAC,CAAC;oBACH,MAAM,KAAK,CAAC;gBACd,CAAC;gBAED,kGAAkG;gBAClG,yFAAyF;gBACzF,MAAM,aAAa,GAAG,QASrB,CAAC;gBAEF,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE;oBAC1C,OAAO,EAAE,aAAa,CAAC,OAAO;oBAC9B,QAAQ,EAAE,aAAa,CAAC,QAAQ;oBAChC,QAAQ,EAAE,aAAa,CAAC,QAAQ;oBAChC,QAAQ,EAAE,aAAa,CAAC,QAAQ;oBAChC,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC;iBAC1C,CAAC,CAAC;gBAEH,IAAI,aAAa,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;oBAC/B,OAAO,CAAC,KAAK,CACX,mCAAmC,EACnC,aAAa,CAAC,QAAQ,CACvB,CAAC;gBACJ,CAAC;gBACD,IAAI,aAAa,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;oBAC/B,OAAO,CAAC,KAAK,CACX,mCAAmC,EACnC,aAAa,CAAC,QAAQ,CACvB,CAAC;gBACJ,CAAC;gBACD,IAAI,aAAa,CAAC,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5D,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;gBACtE,CAAC;gBAED,6CAA6C;gBAC7C,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAErD,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CACX,8DAA8D,EAC9D;oBACE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC7D,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;iBACxD,CACF,CAAC;gBACF,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,oEAAoE;QACpE,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC;QACrC,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC;QAErC,OAAO,CAAC,KAAK,CAAC,qDAAqD,EAAE;YACnE,MAAM;YACN,SAAS,EAAE,CAAC,CAAC,MAAM;YACnB,YAAY,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;SAClC,CAAC,CAAC;QAEH,0EAA0E;QAC1E,0EAA0E;QAC1E,MAAM,eAAe,GAAgC,OAAO,CAAC,QAAQ;YACnE,CAAC,CAAC;gBACE,IAAI,EAAE,OAAO,CAAC,QAAQ;gBACtB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;gBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,OAAO,CAAC,QAAQ,UAAU;aAC7D;YACH,CAAC,CAAC,SAAS,CAAC;QAEd,0DAA0D;QAC1D,2EAA2E;QAC3E,MAAM,WAAW,GAAG;YAClB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;YAC9B,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,IAAI,IAAI;YACnD,MAAM,EAAE;gBACN;oBACE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,6BAA6B;oBAC7C,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,kCAAkC;iBACrD;aACF;YACD,6CAA6C;YAC7C,OAAO,EAAE;gBACP,qDAAqD;gBACrD,SAAS,EACP,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,YAAY;oBACvC,CAAC,CAAC,eAAe;wBACf,CAAC,CAAC,CAAC,eAAe,CAAC;wBACnB,CAAC,CAAC;4BACE;gCACE,iDAAiD;gCACjD,IAAI,EAAE,OAAO,CAAC,QAAQ;gCACtB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;gCACxB,MAAM,EAAE,OAAO,CAAC,MAAM;gCACtB,OAAO,EACL,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,OAAO,CAAC,QAAQ,UAAU;6BACtD;yBACF;oBACL,CAAC,CAAC,EAAE;gBACR,sCAAsC;gBACtC,aAAa,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE;gBACjE,iEAAiE;gBACjE,YAAY,EAAE,OAAO,CAAC,YAAY;aACnC;SACF,CAAC;QAEF,OAAO,CAAC,KAAK,CAAC,+CAA+C,EAAE;YAC7D,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG;YACnB,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;YAC/B,YAAY,EAAE,WAAW,CAAC,aAAa,IAAI,MAAM;YACjD,SAAS,EACP,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;YACnE,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI;YACnD,cAAc,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO;YACzD,YAAY,EAAE,WAAW,CAAC,OAAO,CAAC,YAAY,IAAI,SAAS;YAC3D,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,MAAM;SACpD,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,wBAAwB,EAAE;gBAC9D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,UAAU,MAAM,EAAE;iBAClC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;aAClC,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAE3C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE;oBACjD,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,QAAQ,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,8BAA8B;iBACzE,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,qBAAqB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1D,CAAC;YAED,IAAI,YAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC1C,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE;oBACxD,YAAY,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;oBAC5C,KAAK,EAAE,UAAU;iBAClB,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC3D,CAAC;YAED,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE;gBACxC,OAAO,EAAE,YAAY,CAAC,OAAO;gBAC7B,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,SAAS,EAAE,YAAY,CAAC,SAAS;gBACjC,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC;aACzC,CAAC,CAAC;YAEH,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;gBAC1B,OAAO,CAAC,KAAK,CACX,mCAAmC,EACnC,YAAY,CAAC,QAAQ,CACtB,CAAC;YACJ,CAAC;YACD,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;gBAC1B,OAAO,CAAC,KAAK,CACX,mCAAmC,EACnC,YAAY,CAAC,QAAQ,CACtB,CAAC;YACJ,CAAC;YACD,IAAI,YAAY,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1D,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;YACrE,CAAC;YAED,6CAA6C;YAC7C,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE;gBAChD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7D,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;aACxD,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;YACxD,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAC9B,iCAAiC;YACjC,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;QACvC,CAAC;QACD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,OAAO,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACnE,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QACnC,CAAC;IACH,CAAC;CACF"}
|
package/dist/types.d.ts
CHANGED
|
@@ -55,6 +55,23 @@ export interface CloudflareEnv {
|
|
|
55
55
|
MCPI_NATIVE_HTTP_INGRESS?: string;
|
|
56
56
|
/** Exact deployment role key, mirrored in the existing API aliases. */
|
|
57
57
|
MCPI_NATIVE_HTTP_ISSUER_API_KEY?: string;
|
|
58
|
+
/**
|
|
59
|
+
* Comma- or whitespace-separated issuer DIDs whose delegation VC-JWTs this
|
|
60
|
+
* worker accepts, in addition to its own identity, the native issuer binding
|
|
61
|
+
* and the Checkpoint platform signer. Read by DelegationService.
|
|
62
|
+
*/
|
|
63
|
+
KYA_OS_TRUSTED_DELEGATION_ISSUERS?: string;
|
|
64
|
+
/**
|
|
65
|
+
* Comma- or whitespace-separated `aud` values this worker accepts on
|
|
66
|
+
* delegation VC-JWTs, in addition to its own DID, CHECKPOINT_PROJECT_ID and
|
|
67
|
+
* the native issuer binding's org DID and project. Read by DelegationService.
|
|
68
|
+
*/
|
|
69
|
+
KYA_OS_DELEGATION_AUDIENCES?: string;
|
|
70
|
+
/**
|
|
71
|
+
* "1"/"true" accepts legacy (non VC-JWT) delegation tokens unchecked when no
|
|
72
|
+
* CHECKPOINT_API_KEY is configured. Local development only; never cached.
|
|
73
|
+
*/
|
|
74
|
+
KYA_OS_INSECURE_DEV_TOKENS?: string;
|
|
58
75
|
/** Know That AI API URL for client DID lookups */
|
|
59
76
|
KTA_API_URL?: string;
|
|
60
77
|
/** Know That AI registration record written by `mcpi register` (JSON string) */
|
package/dist/types.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACV,WAAW,EACX,kBAAkB,EAClB,sBAAsB,EACvB,MAAM,2BAA2B,CAAC;AAEnC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,WAAW,aAAa;IAC5B,2EAA2E;IAC3E,WAAW,EAAE,WAAW,CAAC;IACzB,kEAAkE;IAClE,aAAa,CAAC,EAAE,WAAW,CAAC;IAC5B,kFAAkF;IAClF,gBAAgB,CAAC,EAAE,WAAW,CAAC;IAC/B,oGAAoG;IACpG,kBAAkB,CAAC,EAAE,WAAW,CAAC;IACjC,gFAAgF;IAChF,kBAAkB,CAAC,EAAE,WAAW,CAAC;IACjC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,mFAAmF;IACnF,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC,gFAAgF;IAChF,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,uEAAuE;IACvE,+BAA+B,CAAC,EAAE,MAAM,CAAC;IACzC,kDAAkD;IAClD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,8EAA8E;IAC9E,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6DAA6D;IAC7D,mBAAmB,CAAC,EAAE,kBAAkB,CAAC;IACzC,wFAAwF;IACxF,UAAU,CAAC,EAAE,sBAAsB,CAAC;IACpC,4EAA4E;IAC5E,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;IAC5C,qFAAqF;IACrF,cAAc,CAAC,EAAE,sBAAsB,CAAC;IACxC,qFAAqF;IACrF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,gDAAgD;IAChD,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,iFAAiF;IACjF,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,wEAAwE;IACxE,oCAAoC,CAAC,EAAE,MAAM,CAAC;IAC9C,mFAAmF;IACnF,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,yEAAyE;IACzE,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,oFAAoF;IACpF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,yDAAyD;IACzD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,2DAA2D;IAC3D,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,2LAA2L;IAC3L,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,0FAA0F;IAC1F,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,sJAAsJ;IACtJ,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,sKAAsK;IACtK,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gPAAgP;IAChP,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC"}
|
|
1
|
+
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACV,WAAW,EACX,kBAAkB,EAClB,sBAAsB,EACvB,MAAM,2BAA2B,CAAC;AAEnC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,WAAW,aAAa;IAC5B,2EAA2E;IAC3E,WAAW,EAAE,WAAW,CAAC;IACzB,kEAAkE;IAClE,aAAa,CAAC,EAAE,WAAW,CAAC;IAC5B,kFAAkF;IAClF,gBAAgB,CAAC,EAAE,WAAW,CAAC;IAC/B,oGAAoG;IACpG,kBAAkB,CAAC,EAAE,WAAW,CAAC;IACjC,gFAAgF;IAChF,kBAAkB,CAAC,EAAE,WAAW,CAAC;IACjC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,mFAAmF;IACnF,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC,gFAAgF;IAChF,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,uEAAuE;IACvE,+BAA+B,CAAC,EAAE,MAAM,CAAC;IACzC;;;;OAIG;IACH,iCAAiC,CAAC,EAAE,MAAM,CAAC;IAC3C;;;;OAIG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC;;;OAGG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,kDAAkD;IAClD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,8EAA8E;IAC9E,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6DAA6D;IAC7D,mBAAmB,CAAC,EAAE,kBAAkB,CAAC;IACzC,wFAAwF;IACxF,UAAU,CAAC,EAAE,sBAAsB,CAAC;IACpC,4EAA4E;IAC5E,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;IAC5C,qFAAqF;IACrF,cAAc,CAAC,EAAE,sBAAsB,CAAC;IACxC,qFAAqF;IACrF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,gDAAgD;IAChD,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,iFAAiF;IACjF,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,wEAAwE;IACxE,oCAAoC,CAAC,EAAE,MAAM,CAAC;IAC9C,mFAAmF;IACnF,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,yEAAyE;IACzE,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,oFAAoF;IACpF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,yDAAyD;IACzD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,2DAA2D;IAC3D,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,2LAA2L;IAC3L,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,0FAA0F;IAC1F,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,sJAAsJ;IACtJ,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,sKAAsK;IACtK,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gPAAgP;IAChP,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC"}
|
|
@@ -0,0 +1,31 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Checkpoint project id validation.
|
|
3
|
+
*
|
|
4
|
+
* Consent URLs carry `project_id` in the query string, and the consent page
|
|
5
|
+
* puts it into Checkpoint paths (`/api/v1/bouncer/projects/{id}/...`) sent
|
|
6
|
+
* with the server's API key. Validate it before any such request so a crafted
|
|
7
|
+
* id (`../../admin`, `a/b`, `a%2Fb`) never reaches Checkpoint.
|
|
8
|
+
*
|
|
9
|
+
* Checkpoint project ids are UUIDs (36 characters) or friendly ids: bare
|
|
10
|
+
* slugs ("acme-corp"), slugs with a mixed-case suffix ("acme-corp-x7A8b9"),
|
|
11
|
+
* and enterprise ids ("ABC-SLUG-X7A8B9"). Its `friendly_id` column is
|
|
12
|
+
* varchar(50). Every one of these fits `[A-Za-z0-9_-]`, which also rejects
|
|
13
|
+
* `/`, `.`, `%`, `?` and whitespace; underscores are kept because Checkpoint's
|
|
14
|
+
* slugifier preserves them.
|
|
15
|
+
*/
|
|
16
|
+
/**
|
|
17
|
+
* Longest project id accepted. Covers Checkpoint's varchar(50) friendly ids
|
|
18
|
+
* and 36-character UUIDs with room to spare.
|
|
19
|
+
*/
|
|
20
|
+
export declare const MAX_CHECKPOINT_PROJECT_ID_LENGTH = 64;
|
|
21
|
+
/**
|
|
22
|
+
* Whether a value can be a Checkpoint project id and is safe to put into a
|
|
23
|
+
* Checkpoint request path.
|
|
24
|
+
*
|
|
25
|
+
* @example
|
|
26
|
+
* isValidCheckpointProjectId("webforms-proj-a5bxn7"); // true
|
|
27
|
+
* isValidCheckpointProjectId("123e4567-e89b-12d3-a456-426614174000"); // true
|
|
28
|
+
* isValidCheckpointProjectId("../../admin"); // false
|
|
29
|
+
*/
|
|
30
|
+
export declare function isValidCheckpointProjectId(projectId: unknown): projectId is string;
|
|
31
|
+
//# sourceMappingURL=checkpoint-project-id.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"checkpoint-project-id.d.ts","sourceRoot":"","sources":["../../src/utils/checkpoint-project-id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;GAGG;AACH,eAAO,MAAM,gCAAgC,KAAK,CAAC;AAMnD;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,OAAO,GACjB,SAAS,IAAI,MAAM,CAKrB"}
|
|
@@ -0,0 +1,35 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Checkpoint project id validation.
|
|
3
|
+
*
|
|
4
|
+
* Consent URLs carry `project_id` in the query string, and the consent page
|
|
5
|
+
* puts it into Checkpoint paths (`/api/v1/bouncer/projects/{id}/...`) sent
|
|
6
|
+
* with the server's API key. Validate it before any such request so a crafted
|
|
7
|
+
* id (`../../admin`, `a/b`, `a%2Fb`) never reaches Checkpoint.
|
|
8
|
+
*
|
|
9
|
+
* Checkpoint project ids are UUIDs (36 characters) or friendly ids: bare
|
|
10
|
+
* slugs ("acme-corp"), slugs with a mixed-case suffix ("acme-corp-x7A8b9"),
|
|
11
|
+
* and enterprise ids ("ABC-SLUG-X7A8B9"). Its `friendly_id` column is
|
|
12
|
+
* varchar(50). Every one of these fits `[A-Za-z0-9_-]`, which also rejects
|
|
13
|
+
* `/`, `.`, `%`, `?` and whitespace; underscores are kept because Checkpoint's
|
|
14
|
+
* slugifier preserves them.
|
|
15
|
+
*/
|
|
16
|
+
/**
|
|
17
|
+
* Longest project id accepted. Covers Checkpoint's varchar(50) friendly ids
|
|
18
|
+
* and 36-character UUIDs with room to spare.
|
|
19
|
+
*/
|
|
20
|
+
export const MAX_CHECKPOINT_PROJECT_ID_LENGTH = 64;
|
|
21
|
+
const CHECKPOINT_PROJECT_ID_PATTERN = new RegExp(`^[A-Za-z0-9_-]{1,${MAX_CHECKPOINT_PROJECT_ID_LENGTH}}$`);
|
|
22
|
+
/**
|
|
23
|
+
* Whether a value can be a Checkpoint project id and is safe to put into a
|
|
24
|
+
* Checkpoint request path.
|
|
25
|
+
*
|
|
26
|
+
* @example
|
|
27
|
+
* isValidCheckpointProjectId("webforms-proj-a5bxn7"); // true
|
|
28
|
+
* isValidCheckpointProjectId("123e4567-e89b-12d3-a456-426614174000"); // true
|
|
29
|
+
* isValidCheckpointProjectId("../../admin"); // false
|
|
30
|
+
*/
|
|
31
|
+
export function isValidCheckpointProjectId(projectId) {
|
|
32
|
+
return (typeof projectId === "string" &&
|
|
33
|
+
CHECKPOINT_PROJECT_ID_PATTERN.test(projectId));
|
|
34
|
+
}
|
|
35
|
+
//# sourceMappingURL=checkpoint-project-id.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"checkpoint-project-id.js","sourceRoot":"","sources":["../../src/utils/checkpoint-project-id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,EAAE,CAAC;AAEnD,MAAM,6BAA6B,GAAG,IAAI,MAAM,CAC9C,oBAAoB,gCAAgC,IAAI,CACzD,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,UAAU,0BAA0B,CACxC,SAAkB;IAElB,OAAO,CACL,OAAO,SAAS,KAAK,QAAQ;QAC7B,6BAA6B,CAAC,IAAI,CAAC,SAAS,CAAC,CAC9C,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
/** Optional provider profile claims must be strings, never null or objects. */
|
|
2
|
+
export declare function oauthProfileString(value: unknown): string | undefined;
|
|
3
|
+
/** GitHub subjects are numeric IDs; preserve them as exact scalar strings. */
|
|
4
|
+
export declare function normalizeOAuthSubject(value: unknown): string | undefined;
|
|
5
|
+
/** Use provider identifiers; an email alone is not a provider subject. */
|
|
6
|
+
export declare function oauthProfileSubject(profile: unknown): string | undefined;
|
|
7
|
+
//# sourceMappingURL=oauth-profile.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"oauth-profile.d.ts","sourceRoot":"","sources":["../../src/utils/oauth-profile.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAIrE;AAED,8EAA8E;AAC9E,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAKxE;AAED,0EAA0E;AAC1E,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAUxE"}
|
|
@@ -0,0 +1,24 @@
|
|
|
1
|
+
/** Optional provider profile claims must be strings, never null or objects. */
|
|
2
|
+
export function oauthProfileString(value) {
|
|
3
|
+
return typeof value === "string" && value.trim().length > 0
|
|
4
|
+
? value
|
|
5
|
+
: undefined;
|
|
6
|
+
}
|
|
7
|
+
/** GitHub subjects are numeric IDs; preserve them as exact scalar strings. */
|
|
8
|
+
export function normalizeOAuthSubject(value) {
|
|
9
|
+
if (typeof value === "number") {
|
|
10
|
+
return Number.isSafeInteger(value) && value >= 0 ? String(value) : undefined;
|
|
11
|
+
}
|
|
12
|
+
return oauthProfileString(value);
|
|
13
|
+
}
|
|
14
|
+
/** Use provider identifiers; an email alone is not a provider subject. */
|
|
15
|
+
export function oauthProfileSubject(profile) {
|
|
16
|
+
if (!profile || typeof profile !== "object" || Array.isArray(profile)) {
|
|
17
|
+
return undefined;
|
|
18
|
+
}
|
|
19
|
+
const claims = profile;
|
|
20
|
+
return (oauthProfileString(claims.sub) ??
|
|
21
|
+
normalizeOAuthSubject(claims.id) ??
|
|
22
|
+
oauthProfileString(claims.login));
|
|
23
|
+
}
|
|
24
|
+
//# sourceMappingURL=oauth-profile.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"oauth-profile.js","sourceRoot":"","sources":["../../src/utils/oauth-profile.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACzD,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,CAAC;IACD,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,OAAkC,CAAC;IAClD,OAAO,CACL,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC;QAC9B,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CACjC,CAAC;AACJ,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@kya-os/mcp-i-cloudflare",
|
|
3
|
-
"version": "1.
|
|
3
|
+
"version": "1.16.0",
|
|
4
4
|
"description": "Cloudflare Workers adapter for MCP-I framework",
|
|
5
5
|
"main": "dist/index.js",
|
|
6
6
|
"types": "dist/index.d.ts",
|
|
@@ -9,6 +9,7 @@
|
|
|
9
9
|
],
|
|
10
10
|
"scripts": {
|
|
11
11
|
"build": "tsc",
|
|
12
|
+
"typecheck": "tsc --noEmit",
|
|
12
13
|
"dev": "wrangler dev",
|
|
13
14
|
"test": "vitest run",
|
|
14
15
|
"test:coverage": "vitest run --coverage",
|
|
@@ -30,15 +31,15 @@
|
|
|
30
31
|
"prepublishOnly": "npm run build && node ../create-mcpi-app/scripts/validate-no-workspace.js"
|
|
31
32
|
},
|
|
32
33
|
"dependencies": {
|
|
33
|
-
"@kya-os/consent": "^0.1.
|
|
34
|
-
"@kya-os/contracts": "^1.13.
|
|
34
|
+
"@kya-os/consent": "^0.1.50",
|
|
35
|
+
"@kya-os/contracts": "^1.13.1",
|
|
35
36
|
"@kya-os/mcp": "1.16.0",
|
|
36
|
-
"@kya-os/mcp-i-core": "^1.9.
|
|
37
|
-
"@kya-os/mcp-i-runtime": "^1.3.
|
|
37
|
+
"@kya-os/mcp-i-core": "^1.9.4",
|
|
38
|
+
"@kya-os/mcp-i-runtime": "^1.3.1",
|
|
38
39
|
"@kya-os/provider-registry": "^0.1.7",
|
|
39
40
|
"@modelcontextprotocol/sdk": "^1.25.2",
|
|
40
41
|
"agents": "^0.4.1",
|
|
41
|
-
"hono": "^4.
|
|
42
|
+
"hono": "^4.13.10",
|
|
42
43
|
"jose": "^5.6.3",
|
|
43
44
|
"json-canonicalize": "2.0.0",
|
|
44
45
|
"zod": "^3.25.67"
|