@noodleseed/one 0.101.0 → 0.102.1

package/node_modules/@noodle-borg/agent-kit/dist/plugin-submission.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin-submission.d.ts","sourceRoot":"","sources":["../src/plugin-submission.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,wBAAwB,+CAA+C,CAAC;AACrF,eAAO,MAAM,4BAA4B,mCAAmC,CAAC;AAC7E,eAAO,MAAM,0BAA0B,iCAAiC,CAAC;AACzE,eAAO,MAAM,4BAA4B,mCAAmC,CAAC;AAC7E,eAAO,MAAM,yBAAyB,gCAAgC,CAAC;AAKvE,UAAU,qBAAqB;IAC7B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;CACnC;AAED,UAAU,wBAAwB;IAChC,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;CAC5C;AAED,UAAU,cAAc;IACtB,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,cAAc,EAAE,wBAAwB,CAAC;CACnD;AAED,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,oBAAoB,EAAE,IAAI,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,mBAAmB,EAAE,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;KACtC,CAAC;IACF,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;IACzD,QAAQ,CAAC,UAAU,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACnD,QAAQ,CAAC,mBAAmB,EAAE,SAAS,kBAAkB,EAAE,CAAC;CAC7D;AAmCD,wBAAgB,uBAAuB,IAAI,iBAAiB,CA6G3D;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,mCAAmC,CAAC;IACrD,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC;IAC3B,QAAQ,CAAC,iBAAiB,EAAE,KAAK,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;QACvC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;QACnC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;QACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;KAClC,CAAC;IACF,QAAQ,CAAC,UAAU,EAAE;QACnB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;QACtC,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;KAC1C,CAAC;IACF,QAAQ,CAAC,cAAc,EAAE;QACvB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;QAC3B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;QACrC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;KACjC,CAAC;IACF,QAAQ,CAAC,YAAY,EAAE;QACrB,QAAQ,CAAC,kBAAkB,EAAE,UAAU,CAAC;QACxC,QAAQ,CAAC,mBAAmB,EAAE,6BAA6B,CAAC;QAC5D,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;QAC7C,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;QAC1B,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;KAC5B,CAAC;IACF,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,aAAa,EAAE;QACtB,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;QACtC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC;QAC5B,QAAQ,CAAC,iBAAiB,EAAE,KAAK,CAAC;QAClC,QAAQ,CAAC,kBAAkB,EAAE,KAAK,CAAC;KACpC,CAAC;IACF,QAAQ,CAAC,aAAa,EAAE;QACtB,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;QACpC,QAAQ,CAAC,mBAAmB,EAAE,0CAA0C,CAAC;QACzE,QAAQ,CAAC,wBAAwB,EAAE,gCAAgC,CAAC;KACrE,CAAC;IACF,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9C;AAED,wBAAgB,sBAAsB,IAAI,yBAAyB,CA2DlE;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,qCAAqC,CAAC;IACvD,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC;IAC3B,QAAQ,CAAC,iBAAiB,EAAE,KAAK,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;QACrC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;QACnC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;QACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;KAC9B,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAC;QAChD,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;QAChC,QAAQ,CAAC,KAAK,EAAE,6BAA6B,CAAC;KAC/C,CAAC;IACF,QAAQ,CAAC,YAAY,EAAE;QACrB,QAAQ,CAAC,oBAAoB,EAAE,IAAI,CAAC;QACpC,QAAQ,CAAC,iBAAiB,EAAE,+BAA+B,CAAC;QAC5D,QAAQ,CAAC,mBAAmB,EAAE,6BAA6B,CAAC;KAC7D,CAAC;IACF,QAAQ,CAAC,aAAa,EAAE;QACtB,QAAQ,CAAC,kBAAkB,EAAE,KAAK,CAAC;QACnC,QAAQ,CAAC,qBAAqB,EAAE,KAAK,CAAC;QACtC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;KACvC,CAAC;IACF,QAAQ,CAAC,aAAa,EAAE;QACtB,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAC;QAC5C,QAAQ,CAAC,WAAW,EAAE,4BAA4B,CAAC;QACnD,QAAQ,CAAC,iBAAiB,EAAE,+BAA+B,CAAC;KAC7D,CAAC;IACF,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9C;AAED,wBAAgB,sBAAsB,IAAI,yBAAyB,CA6ClE;AAED,wBAAgB,sBAAsB,IAAI,MAAM,CAsC/C"}
+{"version":3,"file":"plugin-submission.d.ts","sourceRoot":"","sources":["../src/plugin-submission.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,wBAAwB,+CAA+C,CAAC;AACrF,eAAO,MAAM,4BAA4B,mCAAmC,CAAC;AAC7E,eAAO,MAAM,0BAA0B,iCAAiC,CAAC;AACzE,eAAO,MAAM,4BAA4B,mCAAmC,CAAC;AAC7E,eAAO,MAAM,yBAAyB,gCAAgC,CAAC;AAKvE,UAAU,qBAAqB;IAC7B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;CACnC;AAED,UAAU,wBAAwB;IAChC,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;CAC5C;AAED,UAAU,cAAc;IACtB,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,cAAc,EAAE,wBAAwB,CAAC;CACnD;AAED,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,oBAAoB,EAAE,IAAI,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,mBAAmB,EAAE,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;KACtC,CAAC;IACF,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;IACzD,QAAQ,CAAC,UAAU,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACnD,QAAQ,CAAC,mBAAmB,EAAE,SAAS,kBAAkB,EAAE,CAAC;CAC7D;AAmCD,wBAAgB,uBAAuB,IAAI,iBAAiB,CA6G3D;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,mCAAmC,CAAC;IACrD,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC;IAC3B,QAAQ,CAAC,iBAAiB,EAAE,KAAK,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;QACvC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;QACnC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;QACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;KAClC,CAAC;IACF,QAAQ,CAAC,UAAU,EAAE;QACnB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;QACtC,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;KAC1C,CAAC;IACF,QAAQ,CAAC,cAAc,EAAE;QACvB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;QAC3B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;QACrC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;KACjC,CAAC;IACF,QAAQ,CAAC,YAAY,EAAE;QACrB,QAAQ,CAAC,kBAAkB,EAAE,UAAU,CAAC;QACxC,QAAQ,CAAC,mBAAmB,EAAE,6BAA6B,CAAC;QAC5D,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;QAC7C,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;QAC1B,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;KAC5B,CAAC;IACF,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,aAAa,EAAE;QACtB,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;QACtC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC;QAC5B,QAAQ,CAAC,iBAAiB,EAAE,KAAK,CAAC;QAClC,QAAQ,CAAC,kBAAkB,EAAE,KAAK,CAAC;KACpC,CAAC;IACF,QAAQ,CAAC,aAAa,EAAE;QACtB,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;QACpC,QAAQ,CAAC,mBAAmB,EAAE,0CAA0C,CAAC;QACzE,QAAQ,CAAC,wBAAwB,EAAE,gCAAgC,CAAC;KACrE,CAAC;IACF,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9C;AAED,wBAAgB,sBAAsB,IAAI,yBAAyB,CA2DlE;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,qCAAqC,CAAC;IACvD,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC;IAC3B,QAAQ,CAAC,iBAAiB,EAAE,KAAK,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;QACrC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;QACnC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;QACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;KAC9B,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,CAAC;QAChD,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;QAChC,QAAQ,CAAC,KAAK,EAAE,6BAA6B,CAAC;KAC/C,CAAC;IACF,QAAQ,CAAC,YAAY,EAAE;QACrB,QAAQ,CAAC,oBAAoB,EAAE,IAAI,CAAC;QACpC,QAAQ,CAAC,iBAAiB,EAAE,+BAA+B,CAAC;QAC5D,QAAQ,CAAC,mBAAmB,EAAE,6BAA6B,CAAC;KAC7D,CAAC;IACF,QAAQ,CAAC,aAAa,EAAE;QACtB,QAAQ,CAAC,kBAAkB,EAAE,KAAK,CAAC;QACnC,QAAQ,CAAC,qBAAqB,EAAE,KAAK,CAAC;QACtC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;KACvC,CAAC;IACF,QAAQ,CAAC,aAAa,EAAE;QACtB,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAC;QAC5C,QAAQ,CAAC,WAAW,EAAE,4BAA4B,CAAC;QACnD,QAAQ,CAAC,iBAAiB,EAAE,+BAA+B,CAAC;KAC7D,CAAC;IACF,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9C;AAED,wBAAgB,sBAAsB,IAAI,yBAAyB,CA6ClE;AAED,wBAAgB,sBAAsB,IAAI,MAAM,CAuC/C"}

package/node_modules/@noodle-borg/agent-kit/dist/plugin-submission.js

@@ -192,12 +192,13 @@ export function renderSubmissionReadme() {
         '- `chatgpt-app-submission.json` is the OpenAI submission import file. It covers all ten Developer MCP tools, their exact source annotations, five positive tests, and three negative tests.',
         "- `claude-connector-submission.json` is a Noodle-owned worksheet for copying data into Claude.ai's directory portal. Anthropic does not document a JSON upload format for remote connector submissions, so this file deliberately declares `portal_uploadable: false`.",
         '- `cursor-plugin-submission.json` is a Noodle-owned worksheet for reviewing the native Cursor bundle, listing copy, evidence boundary, and marketplace assets. It deliberately declares `portal_uploadable: false`.',
+        '- `official-directory/noodle-seed/` is the shared OpenAI/Claude package. Its skill and pinned launchers are byte-identical to the direct marketplace plugin, while its native Claude and Codex manifests both resolve to the same one-MCP configuration: `noodle-developer`.',
         '',
-        'All three files are generated by pure renderers in `src/plugin-submission.ts` and are checked byte-for-meaning against those renderers. The System Release marketplace archive carries the same files under `submission/`.',
+        'All submission files and the portable directory are generated by pure Agent Kit renderers and checked against those renderers. The System Release marketplace archive carries the complete set under `submission/`.',
         '',
         '## Verified host sources',
         '',
-        'Fields were re-verified on **2026-07-17** against:',
+        'Fields were re-verified on **2026-08-04** against:',
         '',
         '- OpenAI: <https://learn.chatgpt.com/docs/submit-plugins>',
         '- OpenAI Apps requirements: <https://developers.openai.com/apps-sdk/deploy/submission>',
@@ -207,7 +208,7 @@ export function renderSubmissionReadme() {
         '- Cursor plugin specification: <https://github.com/cursor/plugins>',
         '- Cursor marketplace publishing: <https://cursor.com/marketplace/publish>',
         '',
-        "OpenAI's current flow submits an app-plus-skills plugin through the Platform portal using the production MCP URL, tool scan, starter prompts, five positive tests, and three negative tests. Anthropic's current flow connects the production remote MCP server in Claude.ai, synchronizes tools from that server, then collects listing, use-case, authentication, data-handling, test-account, compliance, and MCP App screenshot information.",
+        "OpenAI's current flow submits an app-plus-skills plugin through the Platform portal using the production MCP URL, tool scan, starter prompts, five positive tests, and three negative tests. Its skill metadata declares the one remote MCP dependency in `agents/openai.yaml`; the native Codex manifest makes the same generated root installable for complete-plugin testing without changing that dependency. Anthropic's current flow consumes the same generated plugin root, connects the production remote MCP server, and collects listing, use-case, authentication, data-handling, test-account, compliance, and MCP App screenshot information.",
         '',
         '## Evidence boundary',
         '',

package/node_modules/@noodle-borg/agent-kit/dist/plugin-submission.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugin-submission.js","sourceRoot":"","sources":["../src/plugin-submission.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,wBAAwB,GAAG,4CAA4C,CAAC;AACrF,MAAM,CAAC,MAAM,4BAA4B,GAAG,gCAAgC,CAAC;AAC7E,MAAM,CAAC,MAAM,0BAA0B,GAAG,8BAA8B,CAAC;AACzE,MAAM,CAAC,MAAM,4BAA4B,GAAG,gCAAgC,CAAC;AAC7E,MAAM,CAAC,MAAM,yBAAyB,GAAG,6BAA6B,CAAC;AAEvE,MAAM,gBAAgB,GACpB,+JAA+J,CAAC;AA0ClK,SAAS,YAAY,CAAC,qBAA6B;IACjD,OAAO;QACL,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,aAAa,EAAE,KAAK;YACpB,eAAe,EAAE,KAAK;SACvB;QACD,cAAc,EAAE;YACd,uBAAuB,EAAE,qBAAqB;YAC9C,wBAAwB,EACtB,oGAAoG;YACtG,yBAAyB,EACvB,oFAAoF;SACvF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CACf,WAAmB,EACnB,UAAkB,EAClB,IAAmB,EACnB,cAAsB;IAEtB,OAAO;QACL,WAAW;QACX,WAAW,EAAE,UAAU;QACvB,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,eAAe,EAAE,cAAc;QAC/B,mBAAmB,EAAE,IAAI;KAC1B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,OAAO,EAAE,+EAA+E;QACxF,cAAc,EAAE,CAAC;QACjB,QAAQ,EAAE;YACR,YAAY,EAAE,aAAa;YAC3B,QAAQ,EAAE,4BAA4B;YACtC,WAAW,EACT,GAAG,gBAAgB,GAAG;gBACtB,0LAA0L;YAC5L,QAAQ,EAAE,iBAAiB;SAC5B;QACD,KAAK,EAAE;YACL,WAAW,EAAE,YAAY,CACvB,oGAAoG,CACrG;YACD,SAAS,EAAE,YAAY,CACrB,kFAAkF,CACnF;YACD,WAAW,EAAE,YAAY,CACvB,mFAAmF,CACpF;YACD,kBAAkB,EAAE,YAAY,CAC9B,+EAA+E,CAChF;YACD,QAAQ,EAAE,YAAY,CACpB,8FAA8F,CAC/F;YACD,WAAW,EAAE,YAAY,CACvB,kGAAkG,CACnG;YACD,WAAW,EAAE,YAAY,CACvB,sFAAsF,CACvF;YACD,WAAW,EAAE,YAAY,CACvB,yFAAyF,CAC1F;YACD,YAAY,EAAE,YAAY,CACxB,wGAAwG,CACzG;YACD,mBAAmB,EAAE;gBACnB,WAAW,EAAE;oBACX,YAAY,EAAE,KAAK;oBACnB,aAAa,EAAE,KAAK;oBACpB,eAAe,EAAE,IAAI;iBACtB;gBACD,cAAc,EAAE;oBACd,uBAAuB,EACrB,wGAAwG;oBAC1G,wBAAwB,EACtB,6GAA6G;oBAC/G,yBAAyB,EACvB,gHAAgH;iBACnH;aACF;SACF;QACD,UAAU,EAAE;YACV,QAAQ,CACN,0CAA0C,EAC1C,kGAAkG,EAClG,aAAa,EACb,0GAA0G,CAC3G;YACD,QAAQ,CACN,2CAA2C,EAC3C,mFAAmF,EACnF,oBAAoB,EACpB,2EAA2E,CAC5E;YACD,QAAQ,CACN,oDAAoD,EACpD,kFAAkF,EAClF,cAAc,EACd,mGAAmG,CACpG;YACD,QAAQ,CACN,mCAAmC,EACnC,yFAAyF,EACzF,aAAa,EACb,yGAAyG,CAC1G;YACD,QAAQ,CACN,wDAAwD,EACxD,2DAA2D,EAC3D,qBAAqB,EACrB,mHAAmH,CACpH;SACF;QACD,mBAAmB,EAAE;YACnB,QAAQ,CACN,iDAAiD,EACjD,mCAAmC,EACnC,IAAI,EACJ,yEAAyE,CAC1E;YACD,QAAQ,CACN,yDAAyD,EACzD,kDAAkD,EAClD,IAAI,EACJ,wFAAwF,CACzF;YACD,QAAQ,CACN,6CAA6C,EAC7C,uDAAuD,EACvD,IAAI,EACJ,qGAAqG,CACtG;SACF;KACF,CAAC;AACJ,CAAC;AAkDD,MAAM,UAAU,sBAAsB;IACpC,OAAO;QACL,MAAM,EAAE,mCAAmC;QAC3C,cAAc,EAAE,CAAC;QACjB,iBAAiB,EAAE,KAAK;QACxB,WAAW,EAAE,YAAY;QACzB,OAAO,EAAE;YACP,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,4CAA4C;YACrD,WAAW,EACT,GAAG,gBAAgB,GAAG;gBACtB,6NAA6N;YAC/N,UAAU,EAAE,CAAC,iBAAiB,EAAE,cAAc,CAAC;YAC/C,iBAAiB,EAAE,yBAAyB;YAC5C,kBAAkB,EAAE,4BAA4B;YAChD,SAAS,EAAE,0BAA0B;YACrC,WAAW,EAAE,4BAA4B;YACzC,eAAe,EAAE,aAAa;SAC/B;QACD,UAAU,EAAE;YACV,GAAG,EAAE,wBAAwB;YAC7B,SAAS,EAAE,iBAAiB;YAC5B,QAAQ,EAAE,qBAAqB;SAChC;QACD,cAAc,EAAE;YACd,IAAI,EAAE,WAAW;YACjB,mBAAmB,EAAE,iEAAiE;YACtF,cAAc,EACZ,gGAAgG;SACnG;QACD,YAAY,EAAE;YACZ,kBAAkB,EAAE,UAAU;YAC9B,mBAAmB,EAAE,6BAA6B;YAClD,gBAAgB,EAAE,CAAC,cAAc,EAAE,mBAAmB,EAAE,YAAY,EAAE,WAAW,CAAC;YAClF,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,IAAI;SAClB;QACD,SAAS,EAAE;YACT,uEAAuE;YACvE,6EAA6E;YAC7E,kEAAkE;YAClE,uEAAuE;SACxE;QACD,aAAa,EAAE;YACb,aAAa,EAAE,aAAa;YAC5B,WAAW,EAAE,KAAK;YAClB,iBAAiB,EAAE,KAAK;YACxB,kBAAkB,EAAE,KAAK;SAC1B;QACD,aAAa,EAAE;YACb,IAAI,EAAE,oBAAoB;YAC1B,mBAAmB,EAAE,0CAA0C;YAC/D,wBAAwB,EAAE,gCAAgC;SAC3D;QACD,gBAAgB,EAAE;YAChB,6CAA6C;YAC7C,wDAAwD;SACzD;KACF,CAAC;AACJ,CAAC;AAwCD,MAAM,UAAU,sBAAsB;IACpC,OAAO;QACL,MAAM,EAAE,qCAAqC;QAC7C,cAAc,EAAE,CAAC;QACjB,iBAAiB,EAAE,KAAK;QACxB,WAAW,EAAE,YAAY;QACzB,OAAO,EAAE;YACP,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,4CAA4C;YACrD,WAAW,EACT,GAAG,gBAAgB,GAAG;gBACtB,qJAAqJ;YACvJ,QAAQ,EAAE,iBAAiB;YAC3B,iBAAiB,EAAE,yBAAyB;YAC5C,kBAAkB,EAAE,4BAA4B;YAChD,SAAS,EAAE,0BAA0B;YACrC,WAAW,EAAE,4BAA4B;SAC1C;QACD,MAAM,EAAE;YACN,QAAQ,EAAE,4BAA4B;YACtC,UAAU,EAAE,UAAU;YACtB,KAAK,EAAE,6BAA6B;SACrC;QACD,YAAY,EAAE;YACZ,oBAAoB,EAAE,IAAI;YAC1B,iBAAiB,EAAE,+BAA+B;YAClD,mBAAmB,EAAE,6BAA6B;SACnD;QACD,aAAa,EAAE;YACb,kBAAkB,EAAE,KAAK;YACzB,qBAAqB,EAAE,KAAK;YAC5B,oBAAoB,EAClB,kGAAkG;SACrG;QACD,aAAa,EAAE;YACb,IAAI,EAAE,4BAA4B;YAClC,WAAW,EAAE,4BAA4B;YACzC,iBAAiB,EAAE,+BAA+B;SACnD;QACD,gBAAgB,EAAE;YAChB,iCAAiC;YACjC,mCAAmC;YACnC,wCAAwC;SACzC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,OAAO;QACL,8CAA8C;QAC9C,EAAE;QACF,sHAAsH;QACtH,oGAAoG;QACpG,8LAA8L;QAC9L,2JAA2J;QAC3J,EAAE;QACF,UAAU;QACV,EAAE;QACF,6LAA6L;QAC7L,wQAAwQ;QACxQ,qNAAqN;QACrN,EAAE;QACF,4NAA4N;QAC5N,EAAE;QACF,0BAA0B;QAC1B,EAAE;QACF,oDAAoD;QACpD,EAAE;QACF,2DAA2D;QAC3D,wFAAwF;QACxF,kFAAkF;QAClF,mFAAmF;QACnF,4FAA4F;QAC5F,oEAAoE;QACpE,2EAA2E;QAC3E,EAAE;QACF,kbAAkb;QAClb,EAAE;QACF,sBAAsB;QACtB,EAAE;QACF,+XAA+X;QAC/X,EAAE;QACF,4LAA4L;QAC5L,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}
+{"version":3,"file":"plugin-submission.js","sourceRoot":"","sources":["../src/plugin-submission.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,wBAAwB,GAAG,4CAA4C,CAAC;AACrF,MAAM,CAAC,MAAM,4BAA4B,GAAG,gCAAgC,CAAC;AAC7E,MAAM,CAAC,MAAM,0BAA0B,GAAG,8BAA8B,CAAC;AACzE,MAAM,CAAC,MAAM,4BAA4B,GAAG,gCAAgC,CAAC;AAC7E,MAAM,CAAC,MAAM,yBAAyB,GAAG,6BAA6B,CAAC;AAEvE,MAAM,gBAAgB,GACpB,+JAA+J,CAAC;AA0ClK,SAAS,YAAY,CAAC,qBAA6B;IACjD,OAAO;QACL,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,aAAa,EAAE,KAAK;YACpB,eAAe,EAAE,KAAK;SACvB;QACD,cAAc,EAAE;YACd,uBAAuB,EAAE,qBAAqB;YAC9C,wBAAwB,EACtB,oGAAoG;YACtG,yBAAyB,EACvB,oFAAoF;SACvF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CACf,WAAmB,EACnB,UAAkB,EAClB,IAAmB,EACnB,cAAsB;IAEtB,OAAO;QACL,WAAW;QACX,WAAW,EAAE,UAAU;QACvB,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,eAAe,EAAE,cAAc;QAC/B,mBAAmB,EAAE,IAAI;KAC1B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,OAAO,EAAE,+EAA+E;QACxF,cAAc,EAAE,CAAC;QACjB,QAAQ,EAAE;YACR,YAAY,EAAE,aAAa;YAC3B,QAAQ,EAAE,4BAA4B;YACtC,WAAW,EACT,GAAG,gBAAgB,GAAG;gBACtB,0LAA0L;YAC5L,QAAQ,EAAE,iBAAiB;SAC5B;QACD,KAAK,EAAE;YACL,WAAW,EAAE,YAAY,CACvB,oGAAoG,CACrG;YACD,SAAS,EAAE,YAAY,CACrB,kFAAkF,CACnF;YACD,WAAW,EAAE,YAAY,CACvB,mFAAmF,CACpF;YACD,kBAAkB,EAAE,YAAY,CAC9B,+EAA+E,CAChF;YACD,QAAQ,EAAE,YAAY,CACpB,8FAA8F,CAC/F;YACD,WAAW,EAAE,YAAY,CACvB,kGAAkG,CACnG;YACD,WAAW,EAAE,YAAY,CACvB,sFAAsF,CACvF;YACD,WAAW,EAAE,YAAY,CACvB,yFAAyF,CAC1F;YACD,YAAY,EAAE,YAAY,CACxB,wGAAwG,CACzG;YACD,mBAAmB,EAAE;gBACnB,WAAW,EAAE;oBACX,YAAY,EAAE,KAAK;oBACnB,aAAa,EAAE,KAAK;oBACpB,eAAe,EAAE,IAAI;iBACtB;gBACD,cAAc,EAAE;oBACd,uBAAuB,EACrB,wGAAwG;oBAC1G,wBAAwB,EACtB,6GAA6G;oBAC/G,yBAAyB,EACvB,gHAAgH;iBACnH;aACF;SACF;QACD,UAAU,EAAE;YACV,QAAQ,CACN,0CAA0C,EAC1C,kGAAkG,EAClG,aAAa,EACb,0GAA0G,CAC3G;YACD,QAAQ,CACN,2CAA2C,EAC3C,mFAAmF,EACnF,oBAAoB,EACpB,2EAA2E,CAC5E;YACD,QAAQ,CACN,oDAAoD,EACpD,kFAAkF,EAClF,cAAc,EACd,mGAAmG,CACpG;YACD,QAAQ,CACN,mCAAmC,EACnC,yFAAyF,EACzF,aAAa,EACb,yGAAyG,CAC1G;YACD,QAAQ,CACN,wDAAwD,EACxD,2DAA2D,EAC3D,qBAAqB,EACrB,mHAAmH,CACpH;SACF;QACD,mBAAmB,EAAE;YACnB,QAAQ,CACN,iDAAiD,EACjD,mCAAmC,EACnC,IAAI,EACJ,yEAAyE,CAC1E;YACD,QAAQ,CACN,yDAAyD,EACzD,kDAAkD,EAClD,IAAI,EACJ,wFAAwF,CACzF;YACD,QAAQ,CACN,6CAA6C,EAC7C,uDAAuD,EACvD,IAAI,EACJ,qGAAqG,CACtG;SACF;KACF,CAAC;AACJ,CAAC;AAkDD,MAAM,UAAU,sBAAsB;IACpC,OAAO;QACL,MAAM,EAAE,mCAAmC;QAC3C,cAAc,EAAE,CAAC;QACjB,iBAAiB,EAAE,KAAK;QACxB,WAAW,EAAE,YAAY;QACzB,OAAO,EAAE;YACP,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,4CAA4C;YACrD,WAAW,EACT,GAAG,gBAAgB,GAAG;gBACtB,6NAA6N;YAC/N,UAAU,EAAE,CAAC,iBAAiB,EAAE,cAAc,CAAC;YAC/C,iBAAiB,EAAE,yBAAyB;YAC5C,kBAAkB,EAAE,4BAA4B;YAChD,SAAS,EAAE,0BAA0B;YACrC,WAAW,EAAE,4BAA4B;YACzC,eAAe,EAAE,aAAa;SAC/B;QACD,UAAU,EAAE;YACV,GAAG,EAAE,wBAAwB;YAC7B,SAAS,EAAE,iBAAiB;YAC5B,QAAQ,EAAE,qBAAqB;SAChC;QACD,cAAc,EAAE;YACd,IAAI,EAAE,WAAW;YACjB,mBAAmB,EAAE,iEAAiE;YACtF,cAAc,EACZ,gGAAgG;SACnG;QACD,YAAY,EAAE;YACZ,kBAAkB,EAAE,UAAU;YAC9B,mBAAmB,EAAE,6BAA6B;YAClD,gBAAgB,EAAE,CAAC,cAAc,EAAE,mBAAmB,EAAE,YAAY,EAAE,WAAW,CAAC;YAClF,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,IAAI;SAClB;QACD,SAAS,EAAE;YACT,uEAAuE;YACvE,6EAA6E;YAC7E,kEAAkE;YAClE,uEAAuE;SACxE;QACD,aAAa,EAAE;YACb,aAAa,EAAE,aAAa;YAC5B,WAAW,EAAE,KAAK;YAClB,iBAAiB,EAAE,KAAK;YACxB,kBAAkB,EAAE,KAAK;SAC1B;QACD,aAAa,EAAE;YACb,IAAI,EAAE,oBAAoB;YAC1B,mBAAmB,EAAE,0CAA0C;YAC/D,wBAAwB,EAAE,gCAAgC;SAC3D;QACD,gBAAgB,EAAE;YAChB,6CAA6C;YAC7C,wDAAwD;SACzD;KACF,CAAC;AACJ,CAAC;AAwCD,MAAM,UAAU,sBAAsB;IACpC,OAAO;QACL,MAAM,EAAE,qCAAqC;QAC7C,cAAc,EAAE,CAAC;QACjB,iBAAiB,EAAE,KAAK;QACxB,WAAW,EAAE,YAAY;QACzB,OAAO,EAAE;YACP,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,4CAA4C;YACrD,WAAW,EACT,GAAG,gBAAgB,GAAG;gBACtB,qJAAqJ;YACvJ,QAAQ,EAAE,iBAAiB;YAC3B,iBAAiB,EAAE,yBAAyB;YAC5C,kBAAkB,EAAE,4BAA4B;YAChD,SAAS,EAAE,0BAA0B;YACrC,WAAW,EAAE,4BAA4B;SAC1C;QACD,MAAM,EAAE;YACN,QAAQ,EAAE,4BAA4B;YACtC,UAAU,EAAE,UAAU;YACtB,KAAK,EAAE,6BAA6B;SACrC;QACD,YAAY,EAAE;YACZ,oBAAoB,EAAE,IAAI;YAC1B,iBAAiB,EAAE,+BAA+B;YAClD,mBAAmB,EAAE,6BAA6B;SACnD;QACD,aAAa,EAAE;YACb,kBAAkB,EAAE,KAAK;YACzB,qBAAqB,EAAE,KAAK;YAC5B,oBAAoB,EAClB,kGAAkG;SACrG;QACD,aAAa,EAAE;YACb,IAAI,EAAE,4BAA4B;YAClC,WAAW,EAAE,4BAA4B;YACzC,iBAAiB,EAAE,+BAA+B;SACnD;QACD,gBAAgB,EAAE;YAChB,iCAAiC;YACjC,mCAAmC;YACnC,wCAAwC;SACzC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,OAAO;QACL,8CAA8C;QAC9C,EAAE;QACF,sHAAsH;QACtH,oGAAoG;QACpG,8LAA8L;QAC9L,2JAA2J;QAC3J,EAAE;QACF,UAAU;QACV,EAAE;QACF,6LAA6L;QAC7L,wQAAwQ;QACxQ,qNAAqN;QACrN,8QAA8Q;QAC9Q,EAAE;QACF,qNAAqN;QACrN,EAAE;QACF,0BAA0B;QAC1B,EAAE;QACF,oDAAoD;QACpD,EAAE;QACF,2DAA2D;QAC3D,wFAAwF;QACxF,kFAAkF;QAClF,mFAAmF;QACnF,4FAA4F;QAC5F,oEAAoE;QACpE,2EAA2E;QAC3E,EAAE;QACF,6nBAA6nB;QAC7nB,EAAE;QACF,sBAAsB;QACtB,EAAE;QACF,+XAA+X;QAC/X,EAAE;QACF,4LAA4L;QAC5L,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-auth-ref.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skill-authoring-auth-ref.d.ts","sourceRoot":"","sources":["../src/skill-authoring-auth-ref.ts"],"names":[],"mappings":"AAEA,wBAAgB,mCAAmC,IAAI,SAAS,MAAM,EAAE,CA8LvE"}
+{"version":3,"file":"skill-authoring-auth-ref.d.ts","sourceRoot":"","sources":["../src/skill-authoring-auth-ref.ts"],"names":[],"mappings":"AAEA,wBAAgB,mCAAmC,IAAI,SAAS,MAAM,EAAE,CA2MvE"}

package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-auth-ref.js

@@ -186,6 +186,19 @@ export function renderCustomerAuthAuthoringSections() {
         '}',
         '```',
         '',
+        '### Test delegated exchange locally',
+        '',
+        'Local customer OIDC sign-in and delegated-exchange assertion trust are two distinct boundaries. OIDC proves the caller to the local MCP server; Devtools uses a separate local issuer only for the RFC 8693 assertion sent to your downstream token endpoint. This requires no `server.ts` change or additional flag, environment variable, or config surface.',
+        '',
+        '1. Configure the OIDC authorization server for the exact loopback callback and RFC 8707 resource. Do not add the Devtools assertion key to OIDC issuer metadata or change its signing keys.',
+        '2. Start Devtools, complete customer sign-in, and copy the displayed `{ issuer, jwks }` from **Local delegated exchange**.',
+        '3. Pin both values only in the customer-owned development RFC 8693 token endpoint.',
+        '4. Restrict that trust to development client credentials, audience, API, and data.',
+        '5. Run the delegated tool until its binding reads **Exchange verified**.',
+        '6. Use hosted preview or `noodle auth doctor --live` to prove the production platform issuer.',
+        '',
+        '**Never trust the Devtools issuer in production: anyone holding the local private key could impersonate a customer.**',
+        '',
         'Diagnose statically with `noodle auth doctor`; set a short-lived real customer token only in `NOODLE_CUSTOMER_TOKEN` and add `--live --org <org> --app <app> --env <env>` to perform one exchange per delegated binding without invoking a business tool. Add `--version <version>` to test that exact pinned MCP resource. Common failures include structured `credential_unavailable` reasons such as `caller_identity_not_customer`. Direct/federated OIDC verification assigns the customer identity at the trusted verifier boundary; never ask an IdP to mint a Noodle-specific classification claim.',
         '',
     ];

package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-auth-ref.js.map

@@ -1 +1 @@
-{"version":3,"file":"skill-authoring-auth-ref.js","sourceRoot":"","sources":["../src/skill-authoring-auth-ref.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAE1F,MAAM,UAAU,mCAAmC;IACjD,OAAO;QACL,0CAA0C;QAC1C,EAAE;QACF,6dAA6d;QAC7d,EAAE;QACF,63BAA63B;QAC73B,EAAE;QACF,6uBAA6uB;QAC7uB,EAAE;QACF,wCAAwC;QACxC,EAAE;QACF,0UAA0U;QAC1U,EAAE;QACF,OAAO;QACP,8HAA8H;QAC9H,EAAE;QACF,wDAAwD;QACxD,qDAAqD;QACrD,KAAK;QACL,EAAE;QACF,yEAAyE;QACzE,yBAAyB;QACzB,WAAW;QACX,qCAAqC;QACrC,wDAAwD;QACxD,mDAAmD;QACnD,yDAAyD;QACzD,MAAM;QACN,iBAAiB;QACjB,qBAAqB;QACrB,qBAAqB;QACrB,sBAAsB;QACtB,yBAAyB;QACzB,4BAA4B;QAC5B,qEAAqE;QACrE,QAAQ;QACR,uBAAuB;QACvB,uBAAuB;QACvB,uBAAuB;QACvB,mDAAmD;QACnD,mDAAmD;QACnD,oDAAoD;QACpD,QAAQ;QACR,MAAM;QACN,KAAK;QACL,EAAE;QACF,wBAAwB;QACxB,uBAAuB;QACvB,KAAK;QACL,gCAAgC;QAChC,uBAAuB;QACvB,mBAAmB;QACnB,qDAAqD;QACrD,+BAA+B;QAC/B,4CAA4C;QAC5C,qDAAqD;QACrD,kBAAkB;QAClB,sBAAsB;QACtB,2DAA2D;QAC3D,YAAY;QACZ,UAAU;QACV,SAAS;QACT,MAAM;QACN,KAAK;QACL,4BAA4B;QAC5B,gEAAgE;QAChE,4BAA4B;QAC5B,qEAAqE;QACrE,qCAAqC;QACrC,sDAAsD;QACtD,6CAA6C;QAC7C,UAAU;QACV,SAAS;QACT,8BAA8B;QAC9B,sEAAsE;QACtE,mDAAmD;QACnD,oDAAoD;QACpD,mFAAmF;QACnF,uCAAuC;QACvC,sFAAsF;QACtF,+CAA+C;QAC/C,UAAU;QACV,SAAS;QACT,MAAM;QACN,IAAI;QACJ,KAAK;QACL,EAAE;QACF,8aAA8a;QAC9a,EAAE;QACF,2sBAA2sB;QAC3sB,EAAE;QACF,+aAA+a;QAC/a,EAAE;QACF,ijBAAijB;QACjjB,EAAE;QACF,gqBAAgqB;QAChqB,EAAE;QACF,2BAA2B;QAC3B,EAAE;QACF,4dAA4d;QAC5d,EAAE;QACF,OAAO;QACP,2BAA2B;QAC3B,qCAAqC;QACrC,4CAA4C;QAC5C,yEAAyE;QACzE,KAAK;QACL,EAAE;QACF,yBAAyB;QACzB,oBAAoB;QACpB,wCAAwC;QACxC,gDAAgD;QAChD,MAAM;QACN,uCAAuC;QACvC,IAAI;QACJ,KAAK;QACL,EAAE;QACF,0tBAA0tB;QAC1tB,EAAE;QACF,oEAAoE;QACpE,EAAE;QACF,+NAA+N;QAC/N,EAAE;QACF,8iBAA8iB;QAC9iB,wQAAwQ;QACxQ,sGAAsG;QACtG,EAAE;QACF,sCAAsC;QACtC,EAAE;QACF,OAAO;QACP,SAAS;QACT,mCAAmC;QACnC,8HAA8H;QAC9H,kDAAkD;QAClD,wDAAwD;QACxD,+CAA+C;QAC/C,mGAAmG;QACnG,+EAA+E;QAC/E,GAAG;QACH,KAAK;QACL,EAAE;QACF,2PAA2P;QAC3P,EAAE;QACF,iDAAiD;QACjD,EAAE;QACF,qMAAqM;QACrM,EAAE;QACF,KAAK;QACL,4DAA4D;QAC5D,kDAAkD;QAClD,yDAAyD;QACzD,2DAA2D;QAC3D,6CAA6C;QAC7C,KAAK;QACL,EAAE;QACF,qqBAAqqB;QACrqB,EAAE;QACF,kDAAkD;QAClD,EAAE;QACF,OAAO;QACP,8DAA8D;QAC9D,uDAAuD;QACvD,EAAE;QACF,mGAAmG;QACnG,uFAAuF;QACvF,EAAE;QACF,wEAAwE;QACxE,0EAA0E;QAC1E,yDAAyD;QACzD,mFAAmF;QACnF,2FAA2F;QAC3F,sFAAsF;QACtF,uDAAuD;QACvD,gFAAgF;QAChF,8BAA8B;QAC9B,4GAA4G;QAC5G,OAAO;QACP,0FAA0F;QAC1F,0FAA0F;QAC1F,KAAK;QACL,gGAAgG;QAChG,uGAAuG;QACvG,+FAA+F;QAC/F,GAAG;QACH,KAAK;QACL,EAAE;QACF,6kBAA6kB;QAC7kB,EAAE;KACH,CAAC;AACJ,CAAC"}
+{"version":3,"file":"skill-authoring-auth-ref.js","sourceRoot":"","sources":["../src/skill-authoring-auth-ref.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAE1F,MAAM,UAAU,mCAAmC;IACjD,OAAO;QACL,0CAA0C;QAC1C,EAAE;QACF,6dAA6d;QAC7d,EAAE;QACF,63BAA63B;QAC73B,EAAE;QACF,6uBAA6uB;QAC7uB,EAAE;QACF,wCAAwC;QACxC,EAAE;QACF,0UAA0U;QAC1U,EAAE;QACF,OAAO;QACP,8HAA8H;QAC9H,EAAE;QACF,wDAAwD;QACxD,qDAAqD;QACrD,KAAK;QACL,EAAE;QACF,yEAAyE;QACzE,yBAAyB;QACzB,WAAW;QACX,qCAAqC;QACrC,wDAAwD;QACxD,mDAAmD;QACnD,yDAAyD;QACzD,MAAM;QACN,iBAAiB;QACjB,qBAAqB;QACrB,qBAAqB;QACrB,sBAAsB;QACtB,yBAAyB;QACzB,4BAA4B;QAC5B,qEAAqE;QACrE,QAAQ;QACR,uBAAuB;QACvB,uBAAuB;QACvB,uBAAuB;QACvB,mDAAmD;QACnD,mDAAmD;QACnD,oDAAoD;QACpD,QAAQ;QACR,MAAM;QACN,KAAK;QACL,EAAE;QACF,wBAAwB;QACxB,uBAAuB;QACvB,KAAK;QACL,gCAAgC;QAChC,uBAAuB;QACvB,mBAAmB;QACnB,qDAAqD;QACrD,+BAA+B;QAC/B,4CAA4C;QAC5C,qDAAqD;QACrD,kBAAkB;QAClB,sBAAsB;QACtB,2DAA2D;QAC3D,YAAY;QACZ,UAAU;QACV,SAAS;QACT,MAAM;QACN,KAAK;QACL,4BAA4B;QAC5B,gEAAgE;QAChE,4BAA4B;QAC5B,qEAAqE;QACrE,qCAAqC;QACrC,sDAAsD;QACtD,6CAA6C;QAC7C,UAAU;QACV,SAAS;QACT,8BAA8B;QAC9B,sEAAsE;QACtE,mDAAmD;QACnD,oDAAoD;QACpD,mFAAmF;QACnF,uCAAuC;QACvC,sFAAsF;QACtF,+CAA+C;QAC/C,UAAU;QACV,SAAS;QACT,MAAM;QACN,IAAI;QACJ,KAAK;QACL,EAAE;QACF,8aAA8a;QAC9a,EAAE;QACF,2sBAA2sB;QAC3sB,EAAE;QACF,+aAA+a;QAC/a,EAAE;QACF,ijBAAijB;QACjjB,EAAE;QACF,gqBAAgqB;QAChqB,EAAE;QACF,2BAA2B;QAC3B,EAAE;QACF,4dAA4d;QAC5d,EAAE;QACF,OAAO;QACP,2BAA2B;QAC3B,qCAAqC;QACrC,4CAA4C;QAC5C,yEAAyE;QACzE,KAAK;QACL,EAAE;QACF,yBAAyB;QACzB,oBAAoB;QACpB,wCAAwC;QACxC,gDAAgD;QAChD,MAAM;QACN,uCAAuC;QACvC,IAAI;QACJ,KAAK;QACL,EAAE;QACF,0tBAA0tB;QAC1tB,EAAE;QACF,oEAAoE;QACpE,EAAE;QACF,+NAA+N;QAC/N,EAAE;QACF,8iBAA8iB;QAC9iB,wQAAwQ;QACxQ,sGAAsG;QACtG,EAAE;QACF,sCAAsC;QACtC,EAAE;QACF,OAAO;QACP,SAAS;QACT,mCAAmC;QACnC,8HAA8H;QAC9H,kDAAkD;QAClD,wDAAwD;QACxD,+CAA+C;QAC/C,mGAAmG;QACnG,+EAA+E;QAC/E,GAAG;QACH,KAAK;QACL,EAAE;QACF,2PAA2P;QAC3P,EAAE;QACF,iDAAiD;QACjD,EAAE;QACF,qMAAqM;QACrM,EAAE;QACF,KAAK;QACL,4DAA4D;QAC5D,kDAAkD;QAClD,yDAAyD;QACzD,2DAA2D;QAC3D,6CAA6C;QAC7C,KAAK;QACL,EAAE;QACF,qqBAAqqB;QACrqB,EAAE;QACF,kDAAkD;QAClD,EAAE;QACF,OAAO;QACP,8DAA8D;QAC9D,uDAAuD;QACvD,EAAE;QACF,mGAAmG;QACnG,uFAAuF;QACvF,EAAE;QACF,wEAAwE;QACxE,0EAA0E;QAC1E,yDAAyD;QACzD,mFAAmF;QACnF,2FAA2F;QAC3F,sFAAsF;QACtF,uDAAuD;QACvD,gFAAgF;QAChF,8BAA8B;QAC9B,4GAA4G;QAC5G,OAAO;QACP,0FAA0F;QAC1F,0FAA0F;QAC1F,KAAK;QACL,gGAAgG;QAChG,uGAAuG;QACvG,+FAA+F;QAC/F,GAAG;QACH,KAAK;QACL,EAAE;QACF,qCAAqC;QACrC,EAAE;QACF,gWAAgW;QAChW,EAAE;QACF,6LAA6L;QAC7L,4HAA4H;QAC5H,oFAAoF;QACpF,oFAAoF;QACpF,0EAA0E;QAC1E,+FAA+F;QAC/F,EAAE;QACF,uHAAuH;QACvH,EAAE;QACF,6kBAA6kB;QAC7kB,EAAE;KACH,CAAC;AACJ,CAAC"}

package/node_modules/@noodle-borg/agent-kit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noodle-borg/agent-kit",
-  "version": "0.57.1",
+  "version": "0.58.0",
   "private": true,
   "license": "Apache-2.0",
   "type": "module",

package/node_modules/@noodle-borg/auth/dist/verify.d.ts

@@ -16,6 +16,8 @@ export interface VerifiedIdentity {
     readonly audience?: string;
     /** The end-user email, when the token carries one. */
     readonly email?: string;
+    /** The end-user display name, when the token carries one. */
+    readonly name?: string;
     /** OIDC `locale` preference, when the verified token carries one. */
     readonly locale?: string;
     /** OIDC `zoneinfo` IANA time-zone preference, when the verified token carries one. */

package/node_modules/@noodle-borg/auth/dist/verify.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAc,eAAe,EAAE,MAAM,MAAM,CAAC;AAExD,OAAO,EACL,KAAK,qBAAqB,EAK3B,MAAM,aAAa,CAAC;AAErB;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,6FAA6F;IAC7F,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,+FAA+F;IAC/F,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,sDAAsD;IACtD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,qEAAqE;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,sFAAsF;IACtF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,uDAAuD;IACvD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,2FAA2F;IAC3F,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,oGAAoG;IACpG,QAAQ,CAAC,YAAY,CAAC,EAAE,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;IAC5D,mGAAmG;IACnG,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,uEAAuE;IACvE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,0DAA0D;IAC1D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,iBAAiB;IAChC,kFAAkF;IAClF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,qGAAqG;IACrG,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC;IACvC,qGAAqG;IACrG,QAAQ,CAAC,MAAM,CAAC,EAAE,qBAAqB,CAAC;IACxC,mGAAmG;IACnG,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,iGAAiG;IACjG,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,wFAAwF;IACxF,QAAQ,CAAC,qBAAqB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACnE;AAED,2FAA2F;AAC3F,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,sFAAsF;AACtF,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,kGAAkG;IAClG,QAAQ,CAAC,gBAAgB,CAAC,EAAE,+BAA+B,CAAC;IAC5D,qFAAqF;IACrF,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC7D;AAED;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,CAC1B,KAAK,EAAE,MAAM,EACb,QAAQ,CAAC,EAAE,MAAM,KACd,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;AAE3C;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,aAAa,CA6B1E"}
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAc,eAAe,EAAE,MAAM,MAAM,CAAC;AAExD,OAAO,EACL,KAAK,qBAAqB,EAK3B,MAAM,aAAa,CAAC;AAErB;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,6FAA6F;IAC7F,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,+FAA+F;IAC/F,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,sDAAsD;IACtD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,6DAA6D;IAC7D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,qEAAqE;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,sFAAsF;IACtF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,uDAAuD;IACvD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,2FAA2F;IAC3F,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,oGAAoG;IACpG,QAAQ,CAAC,YAAY,CAAC,EAAE,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;IAC5D,mGAAmG;IACnG,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,uEAAuE;IACvE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,0DAA0D;IAC1D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,iBAAiB;IAChC,kFAAkF;IAClF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,qGAAqG;IACrG,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,eAAe,CAAC;IACvC,qGAAqG;IACrG,QAAQ,CAAC,MAAM,CAAC,EAAE,qBAAqB,CAAC;IACxC,mGAAmG;IACnG,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,iGAAiG;IACjG,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,wFAAwF;IACxF,QAAQ,CAAC,qBAAqB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACnE;AAED,2FAA2F;AAC3F,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,sFAAsF;AACtF,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,kGAAkG;IAClG,QAAQ,CAAC,gBAAgB,CAAC,EAAE,+BAA+B,CAAC;IAC5D,qFAAqF;IACrF,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC7D;AAED;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,CAC1B,KAAK,EAAE,MAAM,EACb,QAAQ,CAAC,EAAE,MAAM,KACd,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;AAE3C;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,aAAa,CA6B1E"}

package/node_modules/@noodle-borg/auth/dist/verify.js

@@ -72,6 +72,7 @@ function toIdentity(payload, claims, trustNoodleRoles, resource) {
                 ? { audience: aud }
                 : {}),
         ...(typeof payload.email === 'string' ? { email: payload.email } : {}),
+        ...(typeof payload.name === 'string' ? { name: payload.name } : {}),
         ...(locale !== undefined ? { locale } : {}),
         ...(timeZone !== undefined ? { timeZone } : {}),
         ...(typeof payload.exp === 'number' ? { expiresAt: payload.exp } : {}),

package/node_modules/@noodle-borg/auth/dist/verify.js.map

@@ -1 +1 @@
-{"version":3,"file":"verify.js","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACrD,OAAO,EAEL,4BAA4B,EAC5B,+BAA+B,EAC/B,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,aAAa,CAAC;AAkFrB;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAyB;IACzD,MAAM,MAAM,GACV,MAAM,CAAC,WAAW,IAAI,kBAAkB,CAAC,IAAI,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC5E,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;QAC/B,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE;gBACjD,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;aAC1D,CAAC,CAAC;YACH,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,iBAAiB,IAAI,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAC;YACrF,MAAM,MAAM,GAAG,UAAU,CACvB,OAAO,EACP,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,gBAAgB,KAAK,KAAK,EACjC,QAAQ,CACT,CAAC;YACF,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YACjC,MAAM,gBAAgB,GAAG,8BAA8B,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACzE,IAAI,gBAAgB,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAC3C,MAAM,eAAe,GAAG,4BAA4B,CAAC,OAAO,EAAE,MAAM,CAAC,qBAAqB,CAAC,CAAC;YAC5F,OAAO;gBACL,MAAM;gBACN,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC;gBAC/D,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;aAC9D,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,QAAgD,EAChD,QAA2B;IAE3B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,MAAM,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACpE,OAAO,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,cAAc,CAAC,MAAyB;IAC/C,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC;AAED,SAAS,UAAU,CACjB,OAAmB,EACnB,MAAyC,EACzC,gBAAyB,EACzB,QAA4B;IAE5B,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IACtE,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrD,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC/D,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,2BAA2B,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChE,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,GAAG;QACpB,MAAM,EACJ,MAAM,EAAE,MAAM,KAAK,SAAS;YAC1B,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC;YAChC,CAAC,CAAC,+BAA+B,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;QACtE,KAAK,EACH,MAAM,EAAE,KAAK,KAAK,SAAS;YACzB,CAAC,CAAC,+BAA+B,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC;YAChE,CAAC,CAAC,gBAAgB;gBAChB,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC;gBAC7B,CAAC,CAAC,EAAE;QACV,GAAG,CAAC,QAAQ,KAAK,SAAS;YACxB,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE;YACxB,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ;gBACvB,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE;gBACnB,CAAC,CAAC,EAAE,CAAC;QACT,GAAG,CAAC,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,UAAU;YAC1C,OAAO,CAAC,eAAe,KAAK,UAAU;YACtC,OAAO,CAAC,eAAe,KAAK,SAAS;YACnC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,eAAe,EAAE;YAC3C,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,OAAO,CAAC,wBAAwB,KAAK,QAAQ;YACtD,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,wBAAwB,EAAE;YACxD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CACrC,OAAmB,EACnB,MAAwB;IAExB,MAAM,eAAe,GAAG,OAAO,CAAC,uBAAuB,KAAK,SAAS,CAAC;IACtE,MAAM,oBAAoB,GAAG,OAAO,CAAC,4BAA4B,KAAK,SAAS,CAAC;IAChF,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,eAAe,IAAI,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;IACxE,IACE,OAAO,KAAK,SAAS;QACrB,YAAY,KAAK,SAAS;QAC1B,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ;QACrC,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,GAAG;QACjC,MAAM,CAAC,aAAa,KAAK,OAAO,CAAC,GAAG;QACpC,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EACzB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAc;IACjD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QACvB,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;QACxB,KAAK,GAAG,CAAC;QACT,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,EACtC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AACpF,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,SAAS,CAAC;IACtE,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,SAAS,CAAC;IACtE,IAAI,CAAC;QACH,OAAO,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE;YACtC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE;SACvB,CAAC,CAAC,eAAe,EAAE,CAAC,QAAQ,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACrD,OAAO,EAEL,4BAA4B,EAC5B,+BAA+B,EAC/B,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,aAAa,CAAC;AAoFrB;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAyB;IACzD,MAAM,MAAM,GACV,MAAM,CAAC,WAAW,IAAI,kBAAkB,CAAC,IAAI,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC5E,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;QAC/B,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE;gBACjD,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;aAC1D,CAAC,CAAC;YACH,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,iBAAiB,IAAI,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAC;YACrF,MAAM,MAAM,GAAG,UAAU,CACvB,OAAO,EACP,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,gBAAgB,KAAK,KAAK,EACjC,QAAQ,CACT,CAAC;YACF,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YACjC,MAAM,gBAAgB,GAAG,8BAA8B,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACzE,IAAI,gBAAgB,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAC3C,MAAM,eAAe,GAAG,4BAA4B,CAAC,OAAO,EAAE,MAAM,CAAC,qBAAqB,CAAC,CAAC;YAC5F,OAAO;gBACL,MAAM;gBACN,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC;gBAC/D,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;aAC9D,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,QAAgD,EAChD,QAA2B;IAE3B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,MAAM,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACpE,OAAO,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,cAAc,CAAC,MAAyB;IAC/C,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC;AAED,SAAS,UAAU,CACjB,OAAmB,EACnB,MAAyC,EACzC,gBAAyB,EACzB,QAA4B;IAE5B,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IACtE,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrD,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC/D,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,2BAA2B,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChE,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,GAAG;QACpB,MAAM,EACJ,MAAM,EAAE,MAAM,KAAK,SAAS;YAC1B,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC;YAChC,CAAC,CAAC,+BAA+B,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;QACtE,KAAK,EACH,MAAM,EAAE,KAAK,KAAK,SAAS;YACzB,CAAC,CAAC,+BAA+B,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC;YAChE,CAAC,CAAC,gBAAgB;gBAChB,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC;gBAC7B,CAAC,CAAC,EAAE;QACV,GAAG,CAAC,QAAQ,KAAK,SAAS;YACxB,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE;YACxB,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ;gBACvB,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE;gBACnB,CAAC,CAAC,EAAE,CAAC;QACT,GAAG,CAAC,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,UAAU;YAC1C,OAAO,CAAC,eAAe,KAAK,UAAU;YACtC,OAAO,CAAC,eAAe,KAAK,SAAS;YACnC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,eAAe,EAAE;YAC3C,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,OAAO,CAAC,wBAAwB,KAAK,QAAQ;YACtD,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,wBAAwB,EAAE;YACxD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CACrC,OAAmB,EACnB,MAAwB;IAExB,MAAM,eAAe,GAAG,OAAO,CAAC,uBAAuB,KAAK,SAAS,CAAC;IACtE,MAAM,oBAAoB,GAAG,OAAO,CAAC,4BAA4B,KAAK,SAAS,CAAC;IAChF,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,eAAe,IAAI,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;IACxE,IACE,OAAO,KAAK,SAAS;QACrB,YAAY,KAAK,SAAS;QAC1B,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ;QACrC,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,GAAG;QACjC,MAAM,CAAC,aAAa,KAAK,OAAO,CAAC,GAAG;QACpC,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EACzB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAc;IACjD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QACvB,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;QACxB,KAAK,GAAG,CAAC;QACT,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,EACtC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AACpF,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,SAAS,CAAC;IACtE,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,SAAS,CAAC;IACtE,IAAI,CAAC;QACH,OAAO,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE;YACtC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE;SACvB,CAAC,CAAC,eAAe,EAAE,CAAC,QAAQ,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/node_modules/@noodle-borg/service/dist/credential-broker-delegated-token-exchange.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credential-broker-delegated-token-exchange.d.ts","sourceRoot":"","sources":["../src/credential-broker-delegated-token-exchange.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EACL,KAAK,iBAAiB,EAEtB,KAAK,oBAAoB,EAC1B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,KAAK,wBAAwB,EAI9B,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE3D,MAAM,WAAW,mCAAmC;IAClD,4FAA4F;IAC5F,QAAQ,CAAC,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAED,qBAAa,4BAA4B;;gBAQrC,KAAK,EAAE,WAAW,EAClB,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,mCAAmC,EAC5C,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,oBAAoB,GAAG;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,EACzE,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;IASzD,aAAa,CACjB,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,oBAAoB,CAAC;CAiGjC"}
+{"version":3,"file":"credential-broker-delegated-token-exchange.d.ts","sourceRoot":"","sources":["../src/credential-broker-delegated-token-exchange.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EACL,KAAK,iBAAiB,EAEtB,KAAK,oBAAoB,EAC1B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,KAAK,wBAAwB,EAK9B,MAAM,+BAA+B,CAAC;AAGvC,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE3D,MAAM,WAAW,mCAAmC;IAClD,4FAA4F;IAC5F,QAAQ,CAAC,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAED,qBAAa,4BAA4B;;gBAQrC,KAAK,EAAE,WAAW,EAClB,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,mCAAmC,EAC5C,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,oBAAoB,GAAG;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,EACzE,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;IASzD,aAAa,CACjB,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,oBAAoB,CAAC;CA4GjC"}

package/node_modules/@noodle-borg/service/dist/credential-broker-delegated-token-exchange.js

@@ -1,6 +1,7 @@
 import { CredentialUnavailableError, } from '@noodle-borg/runtime';
 import { copyCustomerRouteBinding, routeBoundCredentialKey } from './credential-route-key.js';
-import { fetchDelegatedTokenExchange, requireExchangeCaller, signExchangeAssertion, } from './delegated-token-exchange.js';
+import { DelegatedTokenExchangeError, fetchDelegatedTokenExchange, requireExchangeCaller, signExchangeAssertion, } from './delegated-token-exchange.js';
+import { localDevtoolsDelegatedExchangeBindingKey } from './local-devtools-delegated-exchange.js';
 import { resolveManagedVariablesInString } from './managed-config-expressions.js';
 export class DelegatedTokenExchangeBroker {
     #delegatedCache;
@@ -47,13 +48,16 @@ export class DelegatedTokenExchangeBroker {
         const promise = (async () => {
             if (binding.secretRef === undefined) {
                 throw new CredentialUnavailableError('credential_not_configured', {
-                    fix: 'Configure the delegated token exchange client secret reference.',
+                    fix: 'Configure the delegated token exchange client secret reference (`secretRef`).',
                     next: ['noodle auth doctor'],
                 });
             }
             const secrets = await this.#store.resolveConfigValues('secret', this.#scope);
             const clientSecret = secrets[binding.secretRef];
             if (clientSecret === undefined) {
+                if (options.localDevtools === true) {
+                    throw localSecretUnavailable(binding.secretRef, this.#scope);
+                }
                 throw new CredentialUnavailableError('credential_not_configured', {
                     fix: 'Set the managed secret required by delegated token exchange.',
                     next: ['noodle auth doctor'],
@@ -77,12 +81,17 @@ export class DelegatedTokenExchangeBroker {
                     fetchImpl: this.#options.fetchImpl ?? fetch,
                 });
             }
-            catch {
-                throw new CredentialUnavailableError('credential_exchange_failed', {
-                    fix: 'Verify the customer token endpoint, client credentials, audience, and scopes.',
-                    next: ['noodle auth doctor --live'],
+            catch (error) {
+                throw delegatedExchangeUnavailable(error, resolved.tokenUrl, options.localDevtools === true);
+            }
+            try {
+                options.onSuccess?.({
+                    bindingKey: localDevtoolsDelegatedExchangeBindingKey(binding, resolved),
                 });
             }
+            catch {
+                // Local observation is advisory and cannot alter a valid downstream credential.
+            }
             if (result.expiresIn !== undefined) {
                 this.#delegatedCache.set(cacheKey, {
                     token: result.token,
@@ -109,4 +118,88 @@ export class DelegatedTokenExchangeBroker {
         return this.#options.now?.() ?? Date.now();
     }
 }
+function localSecretUnavailable(name, scope) {
+    return new CredentialUnavailableError('credential_not_configured', {
+        fix: `Secret reference "${name}" is unresolved for local scope ${configScopeLabel(scope)}.`,
+        next: [localSecretRecoveryCommand(name, scope)],
+    });
+}
+function configScopeLabel(scope) {
+    if (scope.level === 'org')
+        return `org/${scope.org}`;
+    if (scope.level === 'app')
+        return `org/${scope.org}/app/${scope.app}`;
+    return `org/${scope.org}/app/${scope.app}/env/${scope.env}`;
+}
+function localSecretRecoveryCommand(name, scope) {
+    const command = [
+        'noodle secrets set',
+        name,
+        '--runtime local',
+        `--scope ${scope.level}`,
+        `--org ${scope.org}`,
+    ];
+    if (scope.level !== 'org')
+        command.push(`--app ${scope.app}`);
+    if (scope.level === 'env')
+        command.push(`--env ${scope.env}`);
+    command.push(`--from-env ${name}`);
+    return command.join(' ');
+}
+function delegatedExchangeUnavailable(error, tokenUrl, localDevtools) {
+    if (!(error instanceof DelegatedTokenExchangeError)) {
+        return new CredentialUnavailableError('credential_exchange_failed', {
+            fix: 'Verify the customer token endpoint, client credentials, audience, and scopes.',
+            next: ['noodle auth doctor --live'],
+        });
+    }
+    let fix;
+    if (error.kind === 'network') {
+        fix = networkRemediation(tokenUrl);
+    }
+    else if (error.kind === 'redirect') {
+        fix = 'Configure a direct delegated token endpoint that does not redirect.';
+    }
+    else if (error.status === 401 || error.status === 403 || error.oauthCode === 'invalid_client') {
+        const source = error.oauthCode === 'invalid_client'
+            ? 'Token endpoint returned OAuth error invalid_client.'
+            : `Token endpoint rejected client authentication with HTTP ${error.status}.`;
+        fix = `${source} Check the delegated exchange ${localDevtools ? 'development ' : ''}client ID and client secret.`;
+    }
+    else if (error.oauthCode === 'invalid_target') {
+        fix = `Token endpoint returned OAuth error invalid_target. Check the connector audience and ${localDevtools ? 'development ' : ''}token endpoint policy.`;
+    }
+    else if (error.kind === 'oauth' && error.oauthCode !== undefined) {
+        const authority = localDevtools
+            ? 'the displayed local issuer and JWKS'
+            : 'the configured platform issuer and JWKS';
+        fix = `Token endpoint returned OAuth error ${error.oauthCode}. Check ${authority}, connector audience, and clock synchronization.`;
+    }
+    else if (error.kind === 'response_too_large') {
+        fix =
+            'Token endpoint response exceeded the 32 KiB limit. Return a documented JSON token response no larger than 32 KiB.';
+    }
+    else if (error.kind === 'malformed_response') {
+        fix = 'Configure the token endpoint to return the documented JSON token response.';
+    }
+    else {
+        fix = `Delegated token endpoint returned HTTP ${error.status ?? 'unknown'}. Check the endpoint configuration and documented token response.`;
+    }
+    return new CredentialUnavailableError('credential_exchange_failed', {
+        fix,
+        next: ['noodle auth doctor --live'],
+    });
+}
+function networkRemediation(tokenUrl) {
+    let origin;
+    try {
+        origin = new URL(tokenUrl).origin;
+    }
+    catch {
+        // Invalid resolved URLs remain provider-neutral and never enter diagnostics.
+    }
+    return origin === undefined
+        ? 'Cannot reach the configured delegated token endpoint. Check network reachability, TLS, and DNS.'
+        : `Cannot reach delegated token endpoint origin ${origin}. Check network reachability, TLS, and DNS.`;
+}
 //# sourceMappingURL=credential-broker-delegated-token-exchange.js.map

package/node_modules/@noodle-borg/service/dist/credential-broker-delegated-token-exchange.js.map

@@ -1 +1 @@
-{"version":3,"file":"credential-broker-delegated-token-exchange.js","sourceRoot":"","sources":["../src/credential-broker-delegated-token-exchange.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,0BAA0B,GAE3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAC9F,OAAO,EAEL,2BAA2B,EAC3B,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAC;AAUlF,MAAM,OAAO,4BAA4B;IAC9B,eAAe,CAA4D;IAC3E,kBAAkB,CAA6C;IAC/D,MAAM,CAAc;IACpB,MAAM,CAAc;IACpB,QAAQ,CAAsC;IAEvD,YACE,KAAkB,EAClB,KAAkB,EAClB,OAA4C,EAC5C,cAAyE,EACzE,iBAA6D;QAE7D,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,eAAe,GAAG,cAAc,CAAC;QACtC,IAAI,CAAC,kBAAkB,GAAG,iBAAiB,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,OAAsB,EACtB,OAA0B;QAE1B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC;QACvC,IAAI,OAAO,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,EAAE;gBAChE,GAAG,EAAE,qEAAqE;gBAC1E,IAAI,EAAE,CAAC,oBAAoB,CAAC;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,uBAAuB,CACtC;YACE,eAAe;YACf,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,cAAc;YACrB,MAAM,CAAC,OAAO;YACd,OAAO,CAAC,WAAW;YACnB,OAAO,CAAC,SAAS;YACjB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;SACjC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAChB,OAAO,CAAC,KAAK,CACd,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;YACnD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC3F,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,CAAC,KAAK,IAAmC,EAAE;YACzD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACpC,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,EAAE;oBAChE,GAAG,EAAE,iEAAiE;oBACtE,IAAI,EAAE,CAAC,oBAAoB,CAAC;iBAC7B,CAAC,CAAC;YACL,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7E,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,EAAE;oBAChE,GAAG,EAAE,8DAA8D;oBACnE,IAAI,EAAE,CAAC,oBAAoB,CAAC;iBAC7B,CAAC,CAAC;YACL,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,4BAA4B,CAAC,QAAQ,CAAC,CAAC;YACnE,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC;YACxD,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC;gBAC5C,OAAO;gBACP,MAAM;gBACN,QAAQ;gBACR,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE;gBAClB,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,wBAAwB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;aAC3F,CAAC,CAAC;YACH,IAAI,MAA+D,CAAC;YACpE,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,2BAA2B,CAAC;oBACzC,OAAO,EAAE,QAAQ;oBACjB,YAAY;oBACZ,SAAS;oBACT,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,KAAK;iBAC5C,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,0BAA0B,CAAC,4BAA4B,EAAE;oBACjE,GAAG,EAAE,+EAA+E;oBACpF,IAAI,EAAE,CAAC,2BAA2B,CAAC;iBACpC,CAAC,CAAC;YACL,CAAC;YACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE;oBACjC,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI;iBACpE,CAAC,CAAC;YACL,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,4BAA4B,CAChC,QAAqD;QAErD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjF,OAAO;YACL,GAAG,QAAQ;YACX,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;YACvE,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;YACvE,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS;gBACjC,CAAC,CAAC,EAAE,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE;gBAC7E,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7C,CAAC;CACF"}
+{"version":3,"file":"credential-broker-delegated-token-exchange.js","sourceRoot":"","sources":["../src/credential-broker-delegated-token-exchange.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,0BAA0B,GAE3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAC9F,OAAO,EAEL,2BAA2B,EAC3B,2BAA2B,EAC3B,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,wCAAwC,EAAE,MAAM,wCAAwC,CAAC;AAClG,OAAO,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAC;AAUlF,MAAM,OAAO,4BAA4B;IAC9B,eAAe,CAA4D;IAC3E,kBAAkB,CAA6C;IAC/D,MAAM,CAAc;IACpB,MAAM,CAAc;IACpB,QAAQ,CAAsC;IAEvD,YACE,KAAkB,EAClB,KAAkB,EAClB,OAA4C,EAC5C,cAAyE,EACzE,iBAA6D;QAE7D,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,eAAe,GAAG,cAAc,CAAC;QACtC,IAAI,CAAC,kBAAkB,GAAG,iBAAiB,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,OAAsB,EACtB,OAA0B;QAE1B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC;QACvC,IAAI,OAAO,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,EAAE;gBAChE,GAAG,EAAE,qEAAqE;gBAC1E,IAAI,EAAE,CAAC,oBAAoB,CAAC;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,uBAAuB,CACtC;YACE,eAAe;YACf,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,cAAc;YACrB,MAAM,CAAC,OAAO;YACd,OAAO,CAAC,WAAW;YACnB,OAAO,CAAC,SAAS;YACjB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;SACjC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAChB,OAAO,CAAC,KAAK,CACd,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;YACnD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC3F,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,CAAC,KAAK,IAAmC,EAAE;YACzD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACpC,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,EAAE;oBAChE,GAAG,EAAE,+EAA+E;oBACpF,IAAI,EAAE,CAAC,oBAAoB,CAAC;iBAC7B,CAAC,CAAC;YACL,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7E,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,IAAI,OAAO,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;oBACnC,MAAM,sBAAsB,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC/D,CAAC;gBACD,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,EAAE;oBAChE,GAAG,EAAE,8DAA8D;oBACnE,IAAI,EAAE,CAAC,oBAAoB,CAAC;iBAC7B,CAAC,CAAC;YACL,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,4BAA4B,CAAC,QAAQ,CAAC,CAAC;YACnE,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC;YACxD,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC;gBAC5C,OAAO;gBACP,MAAM;gBACN,QAAQ;gBACR,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE;gBAClB,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,wBAAwB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;aAC3F,CAAC,CAAC;YACH,IAAI,MAA+D,CAAC;YACpE,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,2BAA2B,CAAC;oBACzC,OAAO,EAAE,QAAQ;oBACjB,YAAY;oBACZ,SAAS;oBACT,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,KAAK;iBAC5C,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,4BAA4B,CAChC,KAAK,EACL,QAAQ,CAAC,QAAQ,EACjB,OAAO,CAAC,aAAa,KAAK,IAAI,CAC/B,CAAC;YACJ,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,SAAS,EAAE,CAAC;oBAClB,UAAU,EAAE,wCAAwC,CAAC,OAAO,EAAE,QAAQ,CAAC;iBACxE,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,gFAAgF;YAClF,CAAC;YACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE;oBACjC,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI;iBACpE,CAAC,CAAC;YACL,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,4BAA4B,CAChC,QAAqD;QAErD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjF,OAAO;YACL,GAAG,QAAQ;YACX,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;YACvE,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;YACvE,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS;gBACjC,CAAC,CAAC,EAAE,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE;gBAC7E,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7C,CAAC;CACF;AAED,SAAS,sBAAsB,CAAC,IAAY,EAAE,KAAkB;IAC9D,OAAO,IAAI,0BAA0B,CAAC,2BAA2B,EAAE;QACjE,GAAG,EAAE,qBAAqB,IAAI,mCAAmC,gBAAgB,CAAC,KAAK,CAAC,GAAG;QAC3F,IAAI,EAAE,CAAC,0BAA0B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;KAChD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAkB;IAC1C,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;QAAE,OAAO,OAAO,KAAK,CAAC,GAAG,EAAE,CAAC;IACrD,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;QAAE,OAAO,OAAO,KAAK,CAAC,GAAG,QAAQ,KAAK,CAAC,GAAG,EAAE,CAAC;IACtE,OAAO,OAAO,KAAK,CAAC,GAAG,QAAQ,KAAK,CAAC,GAAG,QAAQ,KAAK,CAAC,GAAG,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAY,EAAE,KAAkB;IAClE,MAAM,OAAO,GAAG;QACd,oBAAoB;QACpB,IAAI;QACJ,iBAAiB;QACjB,WAAW,KAAK,CAAC,KAAK,EAAE;QACxB,SAAS,KAAK,CAAC,GAAG,EAAE;KACrB,CAAC;IACF,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;QAAE,OAAO,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9D,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;QAAE,OAAO,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;IACnC,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,4BAA4B,CACnC,KAAc,EACd,QAAgB,EAChB,aAAsB;IAEtB,IAAI,CAAC,CAAC,KAAK,YAAY,2BAA2B,CAAC,EAAE,CAAC;QACpD,OAAO,IAAI,0BAA0B,CAAC,4BAA4B,EAAE;YAClE,GAAG,EAAE,+EAA+E;YACpF,IAAI,EAAE,CAAC,2BAA2B,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,GAAW,CAAC;IAChB,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,GAAG,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;SAAM,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACrC,GAAG,GAAG,qEAAqE,CAAC;IAC9E,CAAC;SAAM,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;QAChG,MAAM,MAAM,GACV,KAAK,CAAC,SAAS,KAAK,gBAAgB;YAClC,CAAC,CAAC,qDAAqD;YACvD,CAAC,CAAC,2DAA2D,KAAK,CAAC,MAAM,GAAG,CAAC;QACjF,GAAG,GAAG,GAAG,MAAM,iCAAiC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,8BAA8B,CAAC;IACpH,CAAC;SAAM,IAAI,KAAK,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;QAChD,GAAG,GAAG,wFAAwF,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,wBAAwB,CAAC;IAC5J,CAAC;SAAM,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACnE,MAAM,SAAS,GAAG,aAAa;YAC7B,CAAC,CAAC,qCAAqC;YACvC,CAAC,CAAC,yCAAyC,CAAC;QAC9C,GAAG,GAAG,uCAAuC,KAAK,CAAC,SAAS,WAAW,SAAS,kDAAkD,CAAC;IACrI,CAAC;SAAM,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAC/C,GAAG;YACD,mHAAmH,CAAC;IACxH,CAAC;SAAM,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAC/C,GAAG,GAAG,4EAA4E,CAAC;IACrF,CAAC;SAAM,CAAC;QACN,GAAG,GAAG,0CAA0C,KAAK,CAAC,MAAM,IAAI,SAAS,mEAAmE,CAAC;IAC/I,CAAC;IACD,OAAO,IAAI,0BAA0B,CAAC,4BAA4B,EAAE;QAClE,GAAG;QACH,IAAI,EAAE,CAAC,2BAA2B,CAAC;KACpC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,IAAI,MAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,6EAA6E;IAC/E,CAAC;IACD,OAAO,MAAM,KAAK,SAAS;QACzB,CAAC,CAAC,iGAAiG;QACnG,CAAC,CAAC,gDAAgD,MAAM,6CAA6C,CAAC;AAC1G,CAAC"}

package/node_modules/@noodle-borg/service/dist/credential-broker-options.d.ts

@@ -3,7 +3,7 @@ import type { ExternalCredentialExchangeOptions, ExternalCredentialExchangeRunti
 import type { GoogleWorkloadIdentityOptions, GoogleWorkloadIdentityRuntimeOptions } from './google-workload-identity.js';
 /** Complete deployment-bound broker exchange options without exposing provider lifecycle over HTTP. */
 export declare function deploymentCredentialBrokerOptions(input: {
-    readonly delegatedExchange: Pick<DelegatedExchangeOptions, 'issuer' | 'signer'> | undefined;
+    readonly delegatedExchange: Pick<DelegatedExchangeOptions, 'issuer' | 'signer' | 'localDevtools' | 'onSuccess'> | undefined;
     readonly externalCredentialExchange: ExternalCredentialExchangeRuntimeOptions | undefined;
     readonly googleWorkloadIdentity: GoogleWorkloadIdentityRuntimeOptions | undefined;
     readonly tenant: string;

package/node_modules/@noodle-borg/service/dist/credential-broker-options.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credential-broker-options.d.ts","sourceRoot":"","sources":["../src/credential-broker-options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,KAAK,EACV,iCAAiC,EACjC,wCAAwC,EACzC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EACV,6BAA6B,EAC7B,oCAAoC,EACrC,MAAM,+BAA+B,CAAC;AAEvC,uGAAuG;AACvG,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,QAAQ,CAAC,iBAAiB,EAAE,IAAI,CAAC,wBAAwB,EAAE,QAAQ,GAAG,QAAQ,CAAC,GAAG,SAAS,CAAC;IAC5F,QAAQ,CAAC,0BAA0B,EAAE,wCAAwC,GAAG,SAAS,CAAC;IAC1F,QAAQ,CAAC,sBAAsB,EAAE,oCAAoC,GAAG,SAAS,CAAC;IAClF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C,GAAG;IACF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,0BAA0B,CAAC,EAAE,iCAAiC,CAAC;IACxE,QAAQ,CAAC,sBAAsB,CAAC,EAAE,6BAA6B,CAAC;CACjE,CA+BA"}
+{"version":3,"file":"credential-broker-options.d.ts","sourceRoot":"","sources":["../src/credential-broker-options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,KAAK,EACV,iCAAiC,EACjC,wCAAwC,EACzC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EACV,6BAA6B,EAC7B,oCAAoC,EACrC,MAAM,+BAA+B,CAAC;AAEvC,uGAAuG;AACvG,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,QAAQ,CAAC,iBAAiB,EACtB,IAAI,CAAC,wBAAwB,EAAE,QAAQ,GAAG,QAAQ,GAAG,eAAe,GAAG,WAAW,CAAC,GACnF,SAAS,CAAC;IACd,QAAQ,CAAC,0BAA0B,EAAE,wCAAwC,GAAG,SAAS,CAAC;IAC1F,QAAQ,CAAC,sBAAsB,EAAE,oCAAoC,GAAG,SAAS,CAAC;IAClF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C,GAAG;IACF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,0BAA0B,CAAC,EAAE,iCAAiC,CAAC;IACxE,QAAQ,CAAC,sBAAsB,CAAC,EAAE,6BAA6B,CAAC;CACjE,CA+BA"}

package/node_modules/@noodle-borg/service/dist/credential-broker-options.js.map

@@ -1 +1 @@
-{"version":3,"file":"credential-broker-options.js","sourceRoot":"","sources":["../src/credential-broker-options.ts"],"names":[],"mappings":"AAUA,uGAAuG;AACvG,MAAM,UAAU,iCAAiC,CAAC,KAMjD;IAKC,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAChD,OAAO;QACL,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,iBAAiB,EAAE;oBACjB,GAAG,KAAK,CAAC,iBAAiB;oBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,KAAK,CAAC,YAAY;iBAC/B;aACF,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,0BAA0B,KAAK,SAAS;YAChD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,0BAA0B,EAAE;oBAC1B,GAAG,KAAK,CAAC,0BAA0B;oBACnC,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,KAAK,CAAC,YAAY;iBAC/B;aACF,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,sBAAsB,KAAK,SAAS;YAC5C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,sBAAsB,EAAE;oBACtB,GAAG,KAAK,CAAC,sBAAsB;oBAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,KAAK,CAAC,YAAY;iBAC/B;aACF,CAAC;KACP,CAAC;AACJ,CAAC"}
+{"version":3,"file":"credential-broker-options.js","sourceRoot":"","sources":["../src/credential-broker-options.ts"],"names":[],"mappings":"AAUA,uGAAuG;AACvG,MAAM,UAAU,iCAAiC,CAAC,KAQjD;IAKC,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAChD,OAAO;QACL,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,iBAAiB,EAAE;oBACjB,GAAG,KAAK,CAAC,iBAAiB;oBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,KAAK,CAAC,YAAY;iBAC/B;aACF,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,0BAA0B,KAAK,SAAS;YAChD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,0BAA0B,EAAE;oBAC1B,GAAG,KAAK,CAAC,0BAA0B;oBACnC,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,KAAK,CAAC,YAAY;iBAC/B;aACF,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,sBAAsB,KAAK,SAAS;YAC5C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,sBAAsB,EAAE;oBACtB,GAAG,KAAK,CAAC,sBAAsB;oBAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,KAAK,CAAC,YAAY;iBAC/B;aACF,CAAC;KACP,CAAC;AACJ,CAAC"}

package/node_modules/@noodle-borg/service/dist/delegated-token-exchange.d.ts

@@ -1,6 +1,18 @@
 import type { SigningKeyProvider } from '@noodle-borg/auth';
 import type { DelegatedTokenExchangeBinding } from '@noodle-borg/connector-defs';
 import { type CredentialRequest, type CustomerRouteBinding } from '@noodle-borg/runtime';
+import type { LocalDevtoolsDelegatedExchangeSuccess } from './local-devtools-delegated-exchange.js';
+export type DelegatedTokenExchangeFailureKind = 'network' | 'redirect' | 'http' | 'oauth' | 'malformed_response' | 'response_too_large';
+/** Safe, internal-only failure metadata from the untrusted token endpoint boundary. */
+export declare class DelegatedTokenExchangeError extends Error {
+    readonly kind: DelegatedTokenExchangeFailureKind;
+    readonly status?: number;
+    readonly oauthCode?: string;
+    constructor(kind: DelegatedTokenExchangeFailureKind, options?: {
+        readonly status?: number;
+        readonly oauthCode?: string;
+    });
+}
 /**
  * Service wiring for the generic delegated token exchange (ADR 0152). The issuer/signer pair is the
  * platform OAuth signer whose JWKS the customer's token endpoint verifies assertions against; tenant and
@@ -12,6 +24,8 @@ export interface DelegatedExchangeOptions {
     /** `org/app/env` of the deployment the broker serves. */
     readonly tenant: string;
     readonly deployment: string;
+    readonly localDevtools?: true;
+    readonly onSuccess?: (event: LocalDevtoolsDelegatedExchangeSuccess) => void;
 }
 type ExchangeCaller = NonNullable<CredentialRequest['caller']> & {
     readonly audience: string;

package/node_modules/@noodle-borg/service/dist/delegated-token-exchange.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delegated-token-exchange.d.ts","sourceRoot":"","sources":["../src/delegated-token-exchange.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AACjF,OAAO,EACL,KAAK,iBAAiB,EAEtB,KAAK,oBAAoB,EAC1B,MAAM,sBAAsB,CAAC;AAM9B;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,yDAAyD;IACzD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,KAAK,cAAc,GAAG,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,GAAG;IAC/D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC,CAAC;AAEF,uGAAuG;AACvG,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,iBAAiB,GAAG,cAAc,CA2BhF;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,oBAAoB,CAAC;CACvC,GAAG,OAAO,CAAC,MAAM,CAAC,CA+BlB;AAED,uGAAuG;AACvG,wBAAsB,2BAA2B,CAAC,KAAK,EAAE;IACvD,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAC;IAChD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,OAAO,KAAK,CAAC;CAClC,GAAG,OAAO,CAAC;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA2CnE"}
+{"version":3,"file":"delegated-token-exchange.d.ts","sourceRoot":"","sources":["../src/delegated-token-exchange.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AACjF,OAAO,EACL,KAAK,iBAAiB,EAEtB,KAAK,oBAAoB,EAC1B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,wCAAwC,CAAC;AAOpG,MAAM,MAAM,iCAAiC,GACzC,SAAS,GACT,UAAU,GACV,MAAM,GACN,OAAO,GACP,oBAAoB,GACpB,oBAAoB,CAAC;AAEzB,uFAAuF;AACvF,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,QAAQ,CAAC,IAAI,EAAE,iCAAiC,CAAC;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;gBAG1B,IAAI,EAAE,iCAAiC,EACvC,OAAO,GAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO;CAiB1E;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,yDAAyD;IACzD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,qCAAqC,KAAK,IAAI,CAAC;CAC7E;AAED,KAAK,cAAc,GAAG,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,GAAG;IAC/D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC,CAAC;AAEF,uGAAuG;AACvG,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,iBAAiB,GAAG,cAAc,CA2BhF;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,oBAAoB,CAAC;CACvC,GAAG,OAAO,CAAC,MAAM,CAAC,CA+BlB;AAED,uGAAuG;AACvG,wBAAsB,2BAA2B,CAAC,KAAK,EAAE;IACvD,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAC;IAChD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,OAAO,KAAK,CAAC;CAClC,GAAG,OAAO,CAAC;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAyEnE"}

package/node_modules/@noodle-borg/service/dist/delegated-token-exchange.js

@@ -2,6 +2,28 @@ import { CredentialUnavailableError, } from '@noodle-borg/runtime';
 import { SignJWT } from 'jose';
 /** Assertion lifetime in seconds — long enough for one exchange round-trip, short enough to bound replay. */
 const ASSERTION_TTL_SECONDS = 120;
+const MAX_TOKEN_RESPONSE_BYTES = 32 * 1024;
+const OAUTH_ERROR_CODE_PATTERN = /^[A-Za-z][A-Za-z0-9._-]{0,63}$/;
+/** Safe, internal-only failure metadata from the untrusted token endpoint boundary. */
+export class DelegatedTokenExchangeError extends Error {
+    kind;
+    status;
+    oauthCode;
+    constructor(kind, options = {}) {
+        super(`delegated token exchange failed: ${kind}`);
+        this.name = 'DelegatedTokenExchangeError';
+        this.kind = kind;
+        if (options.status !== undefined &&
+            Number.isInteger(options.status) &&
+            options.status >= 100 &&
+            options.status <= 599) {
+            this.status = options.status;
+        }
+        if (options.oauthCode !== undefined && OAUTH_ERROR_CODE_PATTERN.test(options.oauthCode)) {
+            this.oauthCode = options.oauthCode;
+        }
+    }
+}
 /** The exchange represents a verified end user; anything less fails closed before any HTTP is sent. */
 export function requireExchangeCaller(request) {
     const caller = request.caller;
@@ -90,23 +112,55 @@ export async function fetchDelegatedTokenExchange(input) {
     else {
         headers.authorization = `Basic ${Buffer.from(`${binding.clientId}:${input.clientSecret}`).toString('base64')}`;
     }
-    const response = await input.fetchImpl(binding.tokenUrl, {
-        method: 'POST',
-        redirect: 'manual',
-        headers,
-        body: body.toString(),
-    });
+    let response;
+    try {
+        response = await input.fetchImpl(binding.tokenUrl, {
+            method: 'POST',
+            redirect: 'manual',
+            headers,
+            body: body.toString(),
+        });
+    }
+    catch {
+        throw new DelegatedTokenExchangeError('network');
+    }
     if (response.status >= 300 && response.status < 400) {
-        throw new Error('delegated token exchange rejected a redirect');
+        await cancelResponseBody(response);
+        throw new DelegatedTokenExchangeError('redirect', { status: response.status });
     }
-    if (!response.ok) {
-        throw new Error(`delegated token exchange failed (status ${response.status})`);
+    let bytes;
+    try {
+        bytes = await readBoundedTokenResponse(response);
+    }
+    catch (error) {
+        if (error instanceof DelegatedTokenExchangeError)
+            throw error;
+        throw new DelegatedTokenExchangeError('network');
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(new TextDecoder().decode(bytes));
+    }
+    catch {
+        if (!response.ok) {
+            throw new DelegatedTokenExchangeError('http', { status: response.status });
+        }
+        throw new DelegatedTokenExchangeError('malformed_response', { status: response.status });
     }
-    const parsed = await response.json().catch(() => undefined);
     const record = typeof parsed === 'object' && parsed !== null ? parsed : {};
+    const oauthCode = record.error;
+    if (typeof oauthCode === 'string' && OAUTH_ERROR_CODE_PATTERN.test(oauthCode)) {
+        throw new DelegatedTokenExchangeError('oauth', {
+            status: response.status,
+            oauthCode,
+        });
+    }
+    if (!response.ok) {
+        throw new DelegatedTokenExchangeError('http', { status: response.status });
+    }
     const token = record.access_token;
     if (typeof token !== 'string' || token === '') {
-        throw new Error('delegated token exchange failed: response has no access_token');
+        throw new DelegatedTokenExchangeError('malformed_response', { status: response.status });
     }
     const expiresIn = Number(record.expires_in);
     return {
@@ -114,4 +168,44 @@ export async function fetchDelegatedTokenExchange(input) {
         ...(Number.isFinite(expiresIn) && expiresIn > 0 ? { expiresIn } : {}),
     };
 }
+async function readBoundedTokenResponse(response) {
+    const declaredLength = response.headers.get('content-length');
+    if (declaredLength !== null &&
+        /^\d+$/.test(declaredLength.trim()) &&
+        Number(declaredLength) > MAX_TOKEN_RESPONSE_BYTES) {
+        await cancelResponseBody(response);
+        throw new DelegatedTokenExchangeError('response_too_large', { status: response.status });
+    }
+    if (response.body === null)
+        return new Uint8Array();
+    const reader = response.body.getReader();
+    const chunks = [];
+    let total = 0;
+    while (true) {
+        const { done, value } = await reader.read();
+        if (done)
+            break;
+        if (total + value.byteLength > MAX_TOKEN_RESPONSE_BYTES) {
+            await reader.cancel().catch(() => undefined);
+            throw new DelegatedTokenExchangeError('response_too_large', { status: response.status });
+        }
+        chunks.push(value);
+        total += value.byteLength;
+    }
+    const bytes = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return bytes;
+}
+async function cancelResponseBody(response) {
+    try {
+        await response.body?.cancel();
+    }
+    catch {
+        // Cancellation is best-effort and must not replace the curated exchange failure.
+    }
+}
 //# sourceMappingURL=delegated-token-exchange.js.map

package/node_modules/@noodle-borg/service/dist/delegated-token-exchange.js.map

@@ -1 +1 @@
-{"version":3,"file":"delegated-token-exchange.js","sourceRoot":"","sources":["../src/delegated-token-exchange.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,0BAA0B,GAE3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAE/B,6GAA6G;AAC7G,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAoBlC,uGAAuG;AACvG,MAAM,UAAU,qBAAqB,CAAC,OAA0B;IAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QAC/D,MAAM,IAAI,0BAA0B,CAAC,8BAA8B,EAAE;YACnE,GAAG,EAAE,6DAA6D;YAClE,IAAI,EAAE,CAAC,2BAA2B,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;QAC1B,MAAM,IAAI,0BAA0B,CAAC,wBAAwB,EAAE;YAC7D,GAAG,EAAE,0EAA0E;YAC/E,IAAI,EAAE,CAAC,2BAA2B,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,0BAA0B,CAAC,yBAAyB,EAAE;YAC9D,GAAG,EAAE,sEAAsE;YAC3E,IAAI,EAAE,CAAC,2BAA2B,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,0BAA0B,CAAC,uBAAuB,EAAE;YAC5D,GAAG,EAAE,6EAA6E;YAClF,IAAI,EAAE,CAAC,2BAA2B,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,GAAG,MAAM,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAoB,CAAC;AACjF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAM3C;IACC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,OAAO,IAAI,OAAO,CAAC;QACjB,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;QAC5B,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;QACpC,iBAAiB,EAAE;YACjB,OAAO,EAAE,CAAC;YACV,MAAM,EAAE,MAAM,CAAC,cAAc;SAC9B;QACD,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS;YAC3B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,KAAK,EAAE;oBACL,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG;oBACpB,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW;iBACrC;aACF,CAAC;KACP,CAAC;SACC,kBAAkB,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;SAC9D,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;SAC/B,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC;SAC1B,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC;SAC3B,WAAW,CAAC,QAAQ,CAAC;SACrB,iBAAiB,CAAC,QAAQ,GAAG,qBAAqB,CAAC;SACnD,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;SAC3B,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC1B,CAAC;AAED,uGAAuG;AACvG,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAKjD;IACC,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,iDAAiD,CAAC,CAAC;IAC1E,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,sCAAsC,CAAC,CAAC;IACvE,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3E,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,mCAAmC;KACpD,CAAC;IACF,IAAI,OAAO,CAAC,UAAU,KAAK,oBAAoB,EAAE,CAAC;QAChD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAChD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,aAAa,GAAG,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IACjH,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE;QACvD,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE,QAAQ;QAClB,OAAO;QACP,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;KACtB,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,2CAA2C,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,MAAM,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACrE,MAAM,MAAM,GACV,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3F,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC5C,OAAO;QACL,KAAK;QACL,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtE,CAAC;AACJ,CAAC"}
+{"version":3,"file":"delegated-token-exchange.js","sourceRoot":"","sources":["../src/delegated-token-exchange.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,0BAA0B,GAE3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAG/B,6GAA6G;AAC7G,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3C,MAAM,wBAAwB,GAAG,gCAAgC,CAAC;AAUlE,uFAAuF;AACvF,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAC3C,IAAI,CAAoC;IACxC,MAAM,CAAU;IAChB,SAAS,CAAU;IAE5B,YACE,IAAuC,EACvC,UAAqE,EAAE;QAEvE,KAAK,CAAC,oCAAoC,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;QAC1C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IACE,OAAO,CAAC,MAAM,KAAK,SAAS;YAC5B,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC;YAChC,OAAO,CAAC,MAAM,IAAI,GAAG;YACrB,OAAO,CAAC,MAAM,IAAI,GAAG,EACrB,CAAC;YACD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC/B,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACxF,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACrC,CAAC;IACH,CAAC;CACF;AAsBD,uGAAuG;AACvG,MAAM,UAAU,qBAAqB,CAAC,OAA0B;IAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QAC/D,MAAM,IAAI,0BAA0B,CAAC,8BAA8B,EAAE;YACnE,GAAG,EAAE,6DAA6D;YAClE,IAAI,EAAE,CAAC,2BAA2B,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;QAC1B,MAAM,IAAI,0BAA0B,CAAC,wBAAwB,EAAE;YAC7D,GAAG,EAAE,0EAA0E;YAC/E,IAAI,EAAE,CAAC,2BAA2B,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,0BAA0B,CAAC,yBAAyB,EAAE;YAC9D,GAAG,EAAE,sEAAsE;YAC3E,IAAI,EAAE,CAAC,2BAA2B,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,0BAA0B,CAAC,uBAAuB,EAAE;YAC5D,GAAG,EAAE,6EAA6E;YAClF,IAAI,EAAE,CAAC,2BAA2B,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,GAAG,MAAM,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAoB,CAAC;AACjF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAM3C;IACC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,OAAO,IAAI,OAAO,CAAC;QACjB,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;QAC5B,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;QACpC,iBAAiB,EAAE;YACjB,OAAO,EAAE,CAAC;YACV,MAAM,EAAE,MAAM,CAAC,cAAc;SAC9B;QACD,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS;YAC3B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,KAAK,EAAE;oBACL,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG;oBACpB,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW;iBACrC;aACF,CAAC;KACP,CAAC;SACC,kBAAkB,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;SAC9D,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;SAC/B,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC;SAC1B,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC;SAC3B,WAAW,CAAC,QAAQ,CAAC;SACrB,iBAAiB,CAAC,QAAQ,GAAG,qBAAqB,CAAC;SACnD,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;SAC3B,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC1B,CAAC;AAED,uGAAuG;AACvG,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAKjD;IACC,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,iDAAiD,CAAC,CAAC;IAC1E,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,sCAAsC,CAAC,CAAC;IACvE,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3E,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,mCAAmC;KACpD,CAAC;IACF,IAAI,OAAO,CAAC,UAAU,KAAK,oBAAoB,EAAE,CAAC;QAChD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAChD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,aAAa,GAAG,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IACjH,CAAC;IACD,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE;YACjD,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,QAAQ;YAClB,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;SACtB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,2BAA2B,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACpD,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,IAAI,2BAA2B,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,KAAiB,CAAC;IACtB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,2BAA2B;YAAE,MAAM,KAAK,CAAC;QAC9D,MAAM,IAAI,2BAA2B,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAY,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,2BAA2B,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,IAAI,2BAA2B,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,MAAM,GACV,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3F,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC;IAC/B,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,wBAAwB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,2BAA2B,CAAC,OAAO,EAAE;YAC7C,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,2BAA2B,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,2BAA2B,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC5C,OAAO;QACL,KAAK;QACL,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,QAAkB;IACxD,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC9D,IACE,cAAc,KAAK,IAAI;QACvB,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,CAAC,cAAc,CAAC,GAAG,wBAAwB,EACjD,CAAC;QACD,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,IAAI,2BAA2B,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,UAAU,EAAE,CAAC;IAEpD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI;YAAE,MAAM;QAChB,IAAI,KAAK,GAAG,KAAK,CAAC,UAAU,GAAG,wBAAwB,EAAE,CAAC;YACxD,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC7C,MAAM,IAAI,2BAA2B,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;IAC5B,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,QAAkB;IAClD,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,iFAAiF;IACnF,CAAC;AACH,CAAC"}

package/node_modules/@noodle-borg/service/dist/index.d.ts

@@ -33,6 +33,7 @@ export { GoogleWorkloadIdentityBindingBroker, type GoogleWorkloadIdentityOptions
 export { PostgresGoogleWorkloadIdentityStore } from './google-workload-identity-postgres.js';
 export { type GoogleWorkloadIdentityStore, InMemoryGoogleWorkloadIdentityStore, type PrepareGoogleWorkloadIdentityInput, type RevokeGoogleWorkloadIdentityInput, type StoredGoogleWorkloadIdentity, } from './google-workload-identity-store.js';
 export type { LocalDevtoolsDelegatedCredential, LocalDevtoolsDelegatedCredentialSink, LocalDevtoolsDelegatedProvider, } from './local-devtools-delegated-credentials.js';
+export { type LocalDevtoolsDelegatedExchangeAuthority, type LocalDevtoolsDelegatedExchangeBindingProjection, type LocalDevtoolsDelegatedExchangeRuntime, type LocalDevtoolsDelegatedExchangeSuccess, projectLocalDevtoolsDelegatedExchangeBindings, } from './local-devtools-delegated-exchange.js';
 export { resolveTenantBridgeAuthVariables } from './managed-config-expressions.js';
 export { ensureMcpConfirmationNonceSchema, type McpConfirmationNoncePool, PostgresMcpConfirmationNonceLedger, } from './mcp-confirmation-nonce-postgres.js';
 export { createHostedMcpRequestStateManager, resolveMcpProtocolMode, } from './mcp-protocol-runtime.js';