@lightdash/cli 2.575.4 → 2.576.0

package/dist/agentConnections/agentTokenProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agentTokenProvider.d.ts","sourceRoot":"","sources":["../../src/agentConnections/agentTokenProvider.ts"],"names":[],"mappings":"AAKA,OAAO,EAAgB,KAAK,mBAAmB,EAAE,KAAK,OAAO,EAAE,MAAM,UAAU,CAAC;AAEhF,OAAO,EAAE,oBAAoB,EAAoB,MAAM,SAAS,CAAC;AAwDjE,eAAO,MAAM,gBAAgB,SACnB,mBAAmB,OACpB,MAAM,KACZ,IAsCF,CAAC;AAEF,qBAAa,kBAAkB;IAIvB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAH1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAE9C,YACqB,KAAK,GAAE,oBAAiD,EACzE;YAEU,MAAM;YA+DN,SAAS;IAkBjB,QAAQ,CACV,GAAG,EAAE,OAAO,EACZ,kBAAkB,GAAE,MAAM,GAAG,IAAW,EACxC,kBAAkB,GAAE,MAAM,GAAG,IAAW,GACzC,OAAO,CAAC,mBAAmB,CAAC,CAgK9B;IACK,iBAAiB,CACnB,GAAG,EAAE,OAAO,EACZ,SAAS,EAAE,OAAO,aAAa,EAAE,kBAAkB,EACnD,kBAAkB,EAAE,MAAM,GAAG,IAAI,EACjC,kBAAkB,EAAE,MAAM,GAAG,IAAI,GAClC,OAAO,CAAC,mBAAmB,CAAC,CA0B9B;CACJ"}
+{"version":3,"file":"agentTokenProvider.d.ts","sourceRoot":"","sources":["../../src/agentConnections/agentTokenProvider.ts"],"names":[],"mappings":"AAKA,OAAO,EAAgB,KAAK,mBAAmB,EAAE,KAAK,OAAO,EAAE,MAAM,UAAU,CAAC;AAEhF,OAAO,EAAE,oBAAoB,EAAoB,MAAM,SAAS,CAAC;AAyDjE,eAAO,MAAM,gBAAgB,SACnB,mBAAmB,OACpB,MAAM,KACZ,IAsCF,CAAC;AAEF,qBAAa,kBAAkB;IAIvB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAH1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAqB;IAE9C,YACqB,KAAK,GAAE,oBAAiD,EACzE;YAEU,MAAM;YA+DN,SAAS;IAkBjB,QAAQ,CACV,GAAG,EAAE,OAAO,EACZ,kBAAkB,GAAE,MAAM,GAAG,IAAW,EACxC,kBAAkB,GAAE,MAAM,GAAG,IAAW,GACzC,OAAO,CAAC,mBAAmB,CAAC,CAsL9B;IACK,iBAAiB,CACnB,GAAG,EAAE,OAAO,EACZ,SAAS,EAAE,OAAO,aAAa,EAAE,kBAAkB,EACnD,kBAAkB,EAAE,MAAM,GAAG,IAAI,EACjC,kBAAkB,EAAE,MAAM,GAAG,IAAI,GAClC,OAAO,CAAC,mBAAmB,CAAC,CA0B9B;CACJ"}

package/dist/agentConnections/agentTokenProvider.js

@@ -217,6 +217,12 @@ class AgentTokenProvider {
                     if (!validateResponse(value) ||
                         value.refresh_token === slot.tokens.refreshToken)
                         throw reconnectError();
+                    const refreshLifetime = value.refresh_expires_in;
+                    if (typeof refreshLifetime !== 'number' ||
+                        !Number.isSafeInteger(refreshLifetime) ||
+                        refreshLifetime < 1 ||
+                        refreshLifetime > 2147483647)
+                        throw reconnectError();
                     const scopes = value.scope.split(' ');
                     const savedScopes = slot.tokens.scopes;
                     if (scopes.length !== slot.tokens.scopes.length ||
@@ -241,6 +247,11 @@ class AgentTokenProvider {
                             accessToken: value.access_token,
                             refreshToken: value.refresh_token,
                             accessTokenExpiresAt: new Date(expiresAt).toISOString(),
+                            refreshTokenExpiresAt: new Date(Math.min(slot.tokens.refreshTokenExpiresAt ===
+                                null
+                                ? Infinity
+                                : Date.parse(slot.tokens
+                                    .refreshTokenExpiresAt), startedAt + refreshLifetime * 1000, serverTime + refreshLifetime * 1000, Date.parse(slot.grantExpiresAt))).toISOString(),
                             generation: slot.tokens.generation + 1,
                             lastRefreshAttemptUuid: attemptUuid,
                         },

package/dist/agentConnections/approvedProjectProof.d.ts

@@ -0,0 +1,8 @@
+import type { AgentConnectionSlot } from './schema';
+export type ApprovedProjectProof = {
+    projectUuid: string;
+    slug: string | null;
+};
+export declare const parseApprovedProjectProof: (value: unknown) => ApprovedProjectProof[] | null;
+export declare const matchesApprovedProjectProof: (projects: AgentConnectionSlot['lastReported']['approvedProjects'], proof: ApprovedProjectProof[] | null, requested: string[] | null) => boolean;
+//# sourceMappingURL=approvedProjectProof.d.ts.map

package/dist/agentConnections/approvedProjectProof.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvedProjectProof.d.ts","sourceRoot":"","sources":["../../src/agentConnections/approvedProjectProof.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAEpD,MAAM,MAAM,oBAAoB,GAAG;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAChF,eAAO,MAAM,yBAAyB,UAC3B,OAAO,KACf,oBAAoB,EAAE,GAAG,IAiC3B,CAAC;AACF,eAAO,MAAM,2BAA2B,aAC1B,mBAAmB,CAAC,cAAc,CAAC,CAAC,kBAAkB,CAAC,SAC1D,oBAAoB,EAAE,GAAG,IAAI,aACzB,MAAM,EAAE,GAAG,IAAI,KAC3B,OA4BF,CAAC"}

package/dist/agentConnections/approvedProjectProof.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.matchesApprovedProjectProof = exports.parseApprovedProjectProof = void 0;
+const uuid_1 = require("uuid");
+const parseApprovedProjectProof = (value) => {
+    if (value === undefined)
+        return null;
+    if (!Array.isArray(value) || value.length > 500)
+        throw new Error('Invalid approved projects.');
+    const projects = value.map((item) => {
+        if (typeof item !== 'object' || item === null || Array.isArray(item))
+            throw new Error('Invalid approved projects.');
+        const entry = item;
+        if (typeof entry.project_uuid !== 'string' ||
+            !(0, uuid_1.validate)(entry.project_uuid) ||
+            (entry.slug !== null &&
+                (typeof entry.slug !== 'string' ||
+                    entry.slug.length < 1 ||
+                    entry.slug.length > 255 ||
+                    /[\s/\\\u0000-\u001f\u007f?#]/.test(entry.slug))))
+            throw new Error('Invalid approved projects.');
+        return {
+            projectUuid: entry.project_uuid,
+            slug: entry.slug,
+        };
+    });
+    const slugs = projects.flatMap((project) => project.slug === null ? [] : [project.slug]);
+    if (new Set(projects.map((project) => project.projectUuid)).size !==
+        projects.length ||
+        new Set(slugs).size !== slugs.length)
+        throw new Error('Invalid approved projects.');
+    return projects;
+};
+exports.parseApprovedProjectProof = parseApprovedProjectProof;
+const matchesApprovedProjectProof = (projects, proof, requested) => {
+    if (proof !== null &&
+        (proof.length !== projects.length ||
+            proof.some((entry) => !projects.some((project) => project.projectUuid === entry.projectUuid))))
+        return false;
+    if (requested === null)
+        return true;
+    const matches = projects.map((project) => requested.includes(project.projectUuid)
+        ? project.projectUuid
+        : proof?.find((entry) => entry.projectUuid === project.projectUuid &&
+            entry.slug !== null &&
+            !(0, uuid_1.validate)(entry.slug))?.slug);
+    return (matches.every((match) => typeof match === 'string' && requested.includes(match)) && new Set(matches).size === matches.length);
+};
+exports.matchesApprovedProjectProof = matchesApprovedProjectProof;

package/dist/agentConnections/initialToken.d.ts

@@ -13,11 +13,12 @@ export declare const exchangeInitialConnectionToken: ({ instanceUrl, code, verif
 }) => Promise<{
     grantUuid: string;
     grantRevision: number | null;
+    approvedProjectProof: import("./approvedProjectProof").ApprovedProjectProof[] | null;
     tokens: {
         accessToken: string;
         refreshToken: string;
         accessTokenExpiresAt: string;
-        refreshTokenExpiresAt: string | null;
+        refreshTokenExpiresAt: string;
         scopes: string[];
         generation: number;
         lastRefreshAttemptUuid: null;

package/dist/agentConnections/initialToken.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"initialToken.d.ts","sourceRoot":"","sources":["../../src/agentConnections/initialToken.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,iBAAiB,qGACwE,CAAC;AACvG,qBAAa,oBAAqB,SAAQ,KAAK;IAC3C,YAAY,OAAO,SAAoB,EAEtC;CACJ;AACD,eAAO,MAAM,8BAA8B,yFAQxC;IACC,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,WAAW,CAAC;IACpB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;;;;QAyEW,WAAW;QACX,YAAY;QACZ,oBAAoB;QAGpB,qBAAqB;QAMrB,MAAM;QACN,UAAU;QACV,sBAAsB;;EAGjC,CAAC"}
+{"version":3,"file":"initialToken.d.ts","sourceRoot":"","sources":["../../src/agentConnections/initialToken.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,iBAAiB,qGACwE,CAAC;AACvG,qBAAa,oBAAqB,SAAQ,KAAK;IAC3C,YAAY,OAAO,SAAoB,EAEtC;CACJ;AACD,eAAO,MAAM,8BAA8B,yFAQxC;IACC,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,WAAW,CAAC;IACpB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;;;;;QA2EW,WAAW;QACX,YAAY;QACZ,oBAAoB;QAGpB,qBAAqB;QAGrB,MAAM;QACN,UAAU;QACV,sBAAsB;;EAGjC,CAAC"}

package/dist/agentConnections/initialToken.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.exchangeInitialConnectionToken = exports.ConnectionProofError = exports.unboundConnection = void 0;
 const uuid_1 = require("uuid");
 const apiUrl_1 = require("./apiUrl");
+const approvedProjectProof_1 = require("./approvedProjectProof");
 const statusResponse_1 = require("./statusResponse");
 exports.unboundConnection = 'The server returned a token that is not bound to this agent connection. No credential was saved.';
 class ConnectionProofError extends Error {
@@ -45,7 +46,7 @@ const exchangeInitialConnectionToken = async ({ instanceUrl, code, verifier, red
         throw new ConnectionProofError('The server did not identify an agent connection. No credential was saved.');
     const revision = metadata?.grant_revision ?? null;
     const lifetime = token.expires_in;
-    const refreshLifetime = token.refresh_expires_in ?? null;
+    const refreshLifetime = token.refresh_expires_in;
     if (typeof hint !== 'string' ||
         !(0, uuid_1.validate)(hint) ||
         (grantUuid !== null && (!(0, uuid_1.validate)(grantUuid) || grantUuid !== hint)) ||
@@ -64,11 +65,10 @@ const exchangeInitialConnectionToken = async ({ instanceUrl, code, verifier, red
         !Number.isSafeInteger(lifetime) ||
         lifetime < 1 ||
         lifetime > 2147483647 ||
-        (refreshLifetime !== null &&
-            (typeof refreshLifetime !== 'number' ||
-                !Number.isSafeInteger(refreshLifetime) ||
-                refreshLifetime < 1 ||
-                refreshLifetime > 2147483647)) ||
+        typeof refreshLifetime !== 'number' ||
+        !Number.isSafeInteger(refreshLifetime) ||
+        refreshLifetime < 1 ||
+        refreshLifetime > 2147483647 ||
         typeof token.scope !== 'string' ||
         !/^[\x21\x23-\x5b\x5d-\x7e]+(?: [\x21\x23-\x5b\x5d-\x7e]+)*$/.test(token.scope) ||
         (token.resource !== undefined && token.resource !== instanceUrl) ||
@@ -77,13 +77,12 @@ const exchangeInitialConnectionToken = async ({ instanceUrl, code, verifier, red
     return {
         grantUuid: hint,
         grantRevision: revision,
+        approvedProjectProof: (0, approvedProjectProof_1.parseApprovedProjectProof)(metadata?.approved_projects),
         tokens: {
             accessToken: token.access_token,
             refreshToken: token.refresh_token,
             accessTokenExpiresAt: new Date(startedAt + lifetime * 1000).toISOString(),
-            refreshTokenExpiresAt: refreshLifetime === null
-                ? null
-                : new Date(startedAt + refreshLifetime * 1000).toISOString(),
+            refreshTokenExpiresAt: new Date(startedAt + refreshLifetime * 1000).toISOString(),
             scopes: [...new Set(token.scope.split(' '))],
             generation: 1,
             lastRefreshAttemptUuid: null,

package/dist/agentConnections/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/agentConnections/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAIpD,MAAM,MAAM,OAAO,GAAG;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CAChB,CAAC;AACF,MAAM,MAAM,2BAA2B,GACjC,eAAe,GACf,eAAe,GACf,SAAS,GACT,SAAS,GACT,yBAAyB,GACzB,gBAAgB,GAChB,mBAAmB,GACnB,cAAc,CAAC;AACrB,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG;IACxC,QAAQ,EAAE,eAAe,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE;QACJ,WAAW,EAAE,MAAM,CAAC;QACpB,oBAAoB,EAAE,MAAM,CAAC;QAC7B,YAAY,EAAE,MAAM,CAAC;QACrB,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;QACrC,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;KACzC,CAAC;IACF,YAAY,EAAE;QACV,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,IAAI,GAAG,SAAS,CAAC;QAC/B,gBAAgB,EAAE;YACd,WAAW,EAAE,MAAM,CAAC;YACpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;YACpB,oBAAoB,EAAE,eAAe,EAAE,CAAC;SAC3C,EAAE,CAAC;QACJ,iBAAiB,EAAE;YACf,WAAW,EAAE,MAAM,CAAC;YACpB,YAAY,EAAE;gBACV,UAAU,EAAE,eAAe,CAAC;gBAC5B,OAAO,EAAE,OAAO,CAAC;gBACjB,MAAM,EAAE,2BAA2B,GAAG,IAAI,CAAC;aAC9C,EAAE,CAAC;SACP,EAAE,CAAC;QACJ,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;QACzC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,CAAC;IACF,YAAY,EACN;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAChB;QAAE,IAAI,EAAE,aAAa,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAC/D;QAAE,IAAI,EAAE,oBAAoB,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACpD,WAAW,EACL;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAChB;QAAE,IAAI,EAAE,aAAa,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;CACtD,CAAC;AACF,eAAO,MAAM,iBAAiB,QAAO,KAGhC,CAAC;AACN,eAAO,MAAM,oBAAoB,UAAW,MAAM,KAAG,MAmBpD,CAAC;AAuHF,eAAO,MAAM,aAAa,UAAW,OAAO,KAAG,KAAK,IAAI,mBAGvD,CAAC;AACF,eAAO,MAAM,YAAY,UACd,OAAO,OACT,OAAO,KACb,mBA6HF,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/agentConnections/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAIpD,MAAM,MAAM,OAAO,GAAG;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CAChB,CAAC;AACF,MAAM,MAAM,2BAA2B,GACjC,eAAe,GACf,eAAe,GACf,SAAS,GACT,SAAS,GACT,yBAAyB,GACzB,gBAAgB,GAChB,mBAAmB,GACnB,cAAc,CAAC;AACrB,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG;IACxC,QAAQ,EAAE,eAAe,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE;QACJ,WAAW,EAAE,MAAM,CAAC;QACpB,oBAAoB,EAAE,MAAM,CAAC;QAC7B,YAAY,EAAE,MAAM,CAAC;QACrB,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;QACrC,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;KACzC,CAAC;IACF,YAAY,EAAE;QACV,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,IAAI,GAAG,SAAS,CAAC;QAC/B,gBAAgB,EAAE;YACd,WAAW,EAAE,MAAM,CAAC;YACpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;YACpB,oBAAoB,EAAE,eAAe,EAAE,CAAC;SAC3C,EAAE,CAAC;QACJ,iBAAiB,EAAE;YACf,WAAW,EAAE,MAAM,CAAC;YACpB,YAAY,EAAE;gBACV,UAAU,EAAE,eAAe,CAAC;gBAC5B,OAAO,EAAE,OAAO,CAAC;gBACjB,MAAM,EAAE,2BAA2B,GAAG,IAAI,CAAC;aAC9C,EAAE,CAAC;SACP,EAAE,CAAC;QACJ,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;QACzC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,CAAC;IACF,YAAY,EACN;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAChB;QAAE,IAAI,EAAE,aAAa,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAC/D;QAAE,IAAI,EAAE,oBAAoB,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACpD,WAAW,EACL;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAChB;QAAE,IAAI,EAAE,aAAa,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;CACtD,CAAC;AACF,eAAO,MAAM,iBAAiB,QAAO,KAGhC,CAAC;AACN,eAAO,MAAM,oBAAoB,UAAW,MAAM,KAAG,MAmBpD,CAAC;AAwHF,eAAO,MAAM,aAAa,UAAW,OAAO,KAAG,KAAK,IAAI,mBAGvD,CAAC;AACF,eAAO,MAAM,YAAY,UACd,OAAO,OACT,OAAO,KACb,mBA6HF,CAAC"}

package/dist/agentConnections/schema.js

@@ -30,7 +30,8 @@ const uuid = { type: 'string', format: 'uuid' };
 const date = {
     type: 'string',
     format: 'date-time',
-    pattern: '^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$',
+    // No leap second: Date.parse cannot read ":60".
+    pattern: '^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:[0-5]\\d\\.\\d{3}Z$',
 };
 const nullable = (schema) => ({ anyOf: [schema, { type: 'null' }] });
 const object = (properties) => ({

package/dist/handlers/agentConnectionConnect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agentConnectionConnect.d.ts","sourceRoot":"","sources":["../../src/handlers/agentConnectionConnect.ts"],"names":[],"mappings":"AAQA,OAAO,EAEH,KAAK,wBAAwB,EAChC,MAAM,mCAAmC,CAAC;AA2G3C,eAAO,MAAM,6BAA6B,YAC7B,wBAAwB,iBACnB;IAAE,aAAa,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CAAE,KAGnE,OAAO,CAAC,IAAI,CA8Yd,CAAC"}
+{"version":3,"file":"agentConnectionConnect.d.ts","sourceRoot":"","sources":["../../src/handlers/agentConnectionConnect.ts"],"names":[],"mappings":"AASA,OAAO,EAEH,KAAK,wBAAwB,EAChC,MAAM,mCAAmC,CAAC;AA2G3C,eAAO,MAAM,6BAA6B,YAC7B,wBAAwB,iBACnB;IAAE,aAAa,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CAAE,KAGnE,OAAO,CAAC,IAAI,CA6Xd,CAAC"}

package/dist/handlers/agentConnectionConnect.js

@@ -6,6 +6,7 @@ const common_1 = require("@lightdash/common");
 const crypto_1 = require("crypto");
 const uuid_1 = require("uuid");
 const apiUrl_1 = require("../agentConnections/apiUrl");
+const approvedProjectProof_1 = require("../agentConnections/approvedProjectProof");
 const connectInputs_1 = require("../agentConnections/connectInputs");
 const initialToken_1 = require("../agentConnections/initialToken");
 const lifecycle_1 = require("../agentConnections/lifecycle");
@@ -276,25 +277,8 @@ const agentConnectionConnectHandler = async (options, dependencies = {
             Date.parse(verified.approvedAt) > Date.now() ||
             verified.lastReported.approvedProjects.some((project) => project.approvedCapabilities.some((capability) => !input.capabilities.includes(capability))))
             throw new initialToken_1.ConnectionProofError();
-        if (input.projects !== null) {
-            const requestedProjects = input.projects;
-            const projectMatches = await Promise.all(verified.lastReported.approvedProjects.map(async (project) => {
-                if (requestedProjects.includes(project.projectUuid))
-                    return project.projectUuid;
-                const details = await proofResults(await fetch(`/api/v1/projects/${project.projectUuid}`, {
-                    headers,
-                    signal,
-                    redirect: 'error',
-                }));
-                if (details.projectUuid !== project.projectUuid ||
-                    typeof details.slug !== 'string' ||
-                    !requestedProjects.includes(details.slug))
-                    throw new initialToken_1.ConnectionProofError();
-                return details.slug;
-            }));
-            if (new Set(projectMatches).size !== projectMatches.length)
-                throw new initialToken_1.ConnectionProofError();
-        }
+        if (!(0, approvedProjectProof_1.matchesApprovedProjectProof)(verified.lastReported.approvedProjects, exchanged.approvedProjectProof, input.projects))
+            throw new initialToken_1.ConnectionProofError();
         const subject = personIdentity(await proofResults(await fetch('/api/v1/user', {
             headers,
             signal,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lightdash/cli",
-  "version": "2.575.4",
+  "version": "2.576.0",
   "description": "Lightdash CLI tool",
   "license": "MIT",
   "repository": {
@@ -22,8 +22,8 @@
     "@actions/core": "1.11.1",
     "@aws-sdk/credential-providers": "3.995.0",
     "@casl/ability": "6.8.0",
-    "@lightdash/common": "2.575.4",
-    "@lightdash/warehouses": "2.575.4",
+    "@lightdash/common": "2.576.0",
+    "@lightdash/warehouses": "2.576.0",
     "@sidvind/better-ajv-errors": "7.0.0",
     "@types/columnify": "1.5.1",
     "ajv": "8.18.0",