npm - @noodleseed/one - Versions diffs - 0.102.0 → 0.102.2 - Mend

@noodleseed/one 0.102.0 → 0.102.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (136) hide show

package/node_modules/@noodle-borg/service/dist/credential-broker-delegated-token-exchange.js CHANGED Viewed

@@ -1,6 +1,7 @@
 import { CredentialUnavailableError, } from '@noodle-borg/runtime';
 import { copyCustomerRouteBinding, routeBoundCredentialKey } from './credential-route-key.js';
-import { fetchDelegatedTokenExchange, requireExchangeCaller, signExchangeAssertion, } from './delegated-token-exchange.js';
+import { DelegatedTokenExchangeError, fetchDelegatedTokenExchange, requireExchangeCaller, signExchangeAssertion, } from './delegated-token-exchange.js';
+import { localDevtoolsDelegatedExchangeBindingKey } from './local-devtools-delegated-exchange.js';
 import { resolveManagedVariablesInString } from './managed-config-expressions.js';
 export class DelegatedTokenExchangeBroker {
     #delegatedCache;
@@ -47,13 +48,16 @@ export class DelegatedTokenExchangeBroker {
         const promise = (async () => {
             if (binding.secretRef === undefined) {
                 throw new CredentialUnavailableError('credential_not_configured', {
-                    fix: 'Configure the delegated token exchange client secret reference.',
+                    fix: 'Configure the delegated token exchange client secret reference (`secretRef`).',
                     next: ['noodle auth doctor'],
                 });
             }
             const secrets = await this.#store.resolveConfigValues('secret', this.#scope);
             const clientSecret = secrets[binding.secretRef];
             if (clientSecret === undefined) {
+                if (options.localDevtools === true) {
+                    throw localSecretUnavailable(binding.secretRef, this.#scope);
+                }
                 throw new CredentialUnavailableError('credential_not_configured', {
                     fix: 'Set the managed secret required by delegated token exchange.',
                     next: ['noodle auth doctor'],
@@ -77,12 +81,17 @@ export class DelegatedTokenExchangeBroker {
                     fetchImpl: this.#options.fetchImpl ?? fetch,
                 });
             }
-            catch {
-                throw new CredentialUnavailableError('credential_exchange_failed', {
-                    fix: 'Verify the customer token endpoint, client credentials, audience, and scopes.',
-                    next: ['noodle auth doctor --live'],
+            catch (error) {
+                throw delegatedExchangeUnavailable(error, resolved.tokenUrl, options.localDevtools === true);
+            }
+            try {
+                options.onSuccess?.({
+                    bindingKey: localDevtoolsDelegatedExchangeBindingKey(binding, resolved),
                 });
             }
+            catch {
+                // Local observation is advisory and cannot alter a valid downstream credential.
+            }
             if (result.expiresIn !== undefined) {
                 this.#delegatedCache.set(cacheKey, {
                     token: result.token,
@@ -109,4 +118,88 @@ export class DelegatedTokenExchangeBroker {
         return this.#options.now?.() ?? Date.now();
     }
 }
+function localSecretUnavailable(name, scope) {
+    return new CredentialUnavailableError('credential_not_configured', {
+        fix: `Secret reference "${name}" is unresolved for local scope ${configScopeLabel(scope)}.`,
+        next: [localSecretRecoveryCommand(name, scope)],
+    });
+}
+function configScopeLabel(scope) {
+    if (scope.level === 'org')
+        return `org/${scope.org}`;
+    if (scope.level === 'app')
+        return `org/${scope.org}/app/${scope.app}`;
+    return `org/${scope.org}/app/${scope.app}/env/${scope.env}`;
+}
+function localSecretRecoveryCommand(name, scope) {
+    const command = [
+        'noodle secrets set',
+        name,
+        '--runtime local',
+        `--scope ${scope.level}`,
+        `--org ${scope.org}`,
+    ];
+    if (scope.level !== 'org')
+        command.push(`--app ${scope.app}`);
+    if (scope.level === 'env')
+        command.push(`--env ${scope.env}`);
+    command.push(`--from-env ${name}`);
+    return command.join(' ');
+}
+function delegatedExchangeUnavailable(error, tokenUrl, localDevtools) {
+    if (!(error instanceof DelegatedTokenExchangeError)) {
+        return new CredentialUnavailableError('credential_exchange_failed', {
+            fix: 'Verify the customer token endpoint, client credentials, audience, and scopes.',
+            next: ['noodle auth doctor --live'],
+        });
+    }
+    let fix;
+    if (error.kind === 'network') {
+        fix = networkRemediation(tokenUrl);
+    }
+    else if (error.kind === 'redirect') {
+        fix = 'Configure a direct delegated token endpoint that does not redirect.';
+    }
+    else if (error.status === 401 || error.status === 403 || error.oauthCode === 'invalid_client') {
+        const source = error.oauthCode === 'invalid_client'
+            ? 'Token endpoint returned OAuth error invalid_client.'
+            : `Token endpoint rejected client authentication with HTTP ${error.status}.`;
+        fix = `${source} Check the delegated exchange ${localDevtools ? 'development ' : ''}client ID and client secret.`;
+    }
+    else if (error.oauthCode === 'invalid_target') {
+        fix = `Token endpoint returned OAuth error invalid_target. Check the connector audience and ${localDevtools ? 'development ' : ''}token endpoint policy.`;
+    }
+    else if (error.kind === 'oauth' && error.oauthCode !== undefined) {
+        const authority = localDevtools
+            ? 'the displayed local issuer and JWKS'
+            : 'the configured platform issuer and JWKS';
+        fix = `Token endpoint returned OAuth error ${error.oauthCode}. Check ${authority}, connector audience, and clock synchronization.`;
+    }
+    else if (error.kind === 'response_too_large') {
+        fix =
+            'Token endpoint response exceeded the 32 KiB limit. Return a documented JSON token response no larger than 32 KiB.';
+    }
+    else if (error.kind === 'malformed_response') {
+        fix = 'Configure the token endpoint to return the documented JSON token response.';
+    }
+    else {
+        fix = `Delegated token endpoint returned HTTP ${error.status ?? 'unknown'}. Check the endpoint configuration and documented token response.`;
+    }
+    return new CredentialUnavailableError('credential_exchange_failed', {
+        fix,
+        next: ['noodle auth doctor --live'],
+    });
+}
+function networkRemediation(tokenUrl) {
+    let origin;
+    try {
+        origin = new URL(tokenUrl).origin;
+    }
+    catch {
+        // Invalid resolved URLs remain provider-neutral and never enter diagnostics.
+    }
+    return origin === undefined
+        ? 'Cannot reach the configured delegated token endpoint. Check network reachability, TLS, and DNS.'
+        : `Cannot reach delegated token endpoint origin ${origin}. Check network reachability, TLS, and DNS.`;
+}
 //# sourceMappingURL=credential-broker-delegated-token-exchange.js.map

package/node_modules/@noodle-borg/service/dist/credential-broker-delegated-token-exchange.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"credential-broker-delegated-token-exchange.js","sourceRoot":"","sources":["../src/credential-broker-delegated-token-exchange.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,0BAA0B,GAE3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAC9F,OAAO,EAEL,2BAA2B,EAC3B,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAC;AAUlF,MAAM,OAAO,4BAA4B;IAC9B,eAAe,CAA4D;IAC3E,kBAAkB,CAA6C;IAC/D,MAAM,CAAc;IACpB,MAAM,CAAc;IACpB,QAAQ,CAAsC;IAEvD,YACE,KAAkB,EAClB,KAAkB,EAClB,OAA4C,EAC5C,cAAyE,EACzE,iBAA6D;QAE7D,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,eAAe,GAAG,cAAc,CAAC;QACtC,IAAI,CAAC,kBAAkB,GAAG,iBAAiB,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,OAAsB,EACtB,OAA0B;QAE1B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC;QACvC,IAAI,OAAO,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,EAAE;gBAChE,GAAG,EAAE,qEAAqE;gBAC1E,IAAI,EAAE,CAAC,oBAAoB,CAAC;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,uBAAuB,CACtC;YACE,eAAe;YACf,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,cAAc;YACrB,MAAM,CAAC,OAAO;YACd,OAAO,CAAC,WAAW;YACnB,OAAO,CAAC,SAAS;YACjB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;SACjC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAChB,OAAO,CAAC,KAAK,CACd,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;YACnD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC3F,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,CAAC,KAAK,IAAmC,EAAE;YACzD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACpC,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,EAAE;oBAChE,GAAG,EAAE~~,iEAAiE~~;~~oBACtE~~,IAAI,EAAE,CAAC,oBAAoB,CAAC;iBAC7B,CAAC,CAAC;YACL,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7E,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,EAAE;oBAChE,GAAG,EAAE,8DAA8D;oBACnE,IAAI,EAAE,CAAC,oBAAoB,CAAC;iBAC7B,CAAC,CAAC;YACL,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,4BAA4B,CAAC,QAAQ,CAAC,CAAC;YACnE,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC;YACxD,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC;gBAC5C,OAAO;gBACP,MAAM;gBACN,QAAQ;gBACR,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE;gBAClB,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,wBAAwB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;aAC3F,CAAC,CAAC;YACH,IAAI,MAA+D,CAAC;YACpE,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,2BAA2B,CAAC;oBACzC,OAAO,EAAE,QAAQ;oBACjB,YAAY;oBACZ,SAAS;oBACT,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,KAAK;iBAC5C,CAAC,CAAC;YACL,CAAC;YAAC,~~MAAM~~,CAAC;~~gBACP~~,MAAM,IAAI,~~0BAA0B~~,CAAC,~~4BAA4B~~,~~EAAE~~;~~oBACjE~~,~~GAAG~~,EAAE~~,+EAA+E~~;~~oBACpF~~,~~IAAI~~,EAAE,CAAC,~~2BAA2B~~,CAAC;~~iBACpC~~,CAAC,CAAC;YACL,CAAC;YACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE;oBACjC,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI;iBACpE,CAAC,CAAC;YACL,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,4BAA4B,CAChC,QAAqD;QAErD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjF,OAAO;YACL,GAAG,QAAQ;YACX,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;YACvE,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;YACvE,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS;gBACjC,CAAC,CAAC,EAAE,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE;gBAC7E,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7C,CAAC;CACF"}
1	+ {"version":3,"file":"credential-broker-delegated-token-exchange.js","sourceRoot":"","sources":["../src/credential-broker-delegated-token-exchange.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,0BAA0B,GAE3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAC9F,OAAO,EAEL,2BAA2B,EAC3B,2BAA2B,EAC3B,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,wCAAwC,EAAE,MAAM,wCAAwC,CAAC;AAClG,OAAO,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAC;AAUlF,MAAM,OAAO,4BAA4B;IAC9B,eAAe,CAA4D;IAC3E,kBAAkB,CAA6C;IAC/D,MAAM,CAAc;IACpB,MAAM,CAAc;IACpB,QAAQ,CAAsC;IAEvD,YACE,KAAkB,EAClB,KAAkB,EAClB,OAA4C,EAC5C,cAAyE,EACzE,iBAA6D;QAE7D,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,eAAe,GAAG,cAAc,CAAC;QACtC,IAAI,CAAC,kBAAkB,GAAG,iBAAiB,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,OAAsB,EACtB,OAA0B;QAE1B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC;QACvC,IAAI,OAAO,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,EAAE;gBAChE,GAAG,EAAE,qEAAqE;gBAC1E,IAAI,EAAE,CAAC,oBAAoB,CAAC;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,uBAAuB,CACtC;YACE,eAAe;YACf,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,cAAc;YACrB,MAAM,CAAC,OAAO;YACd,OAAO,CAAC,WAAW;YACnB,OAAO,CAAC,SAAS;YACjB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;SACjC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAChB,OAAO,CAAC,KAAK,CACd,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;YACnD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC3F,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,CAAC,KAAK,IAAmC,EAAE;YACzD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACpC,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,EAAE;oBAChE,GAAG,EAAE,+EAA+E;oBACpF,IAAI,EAAE,CAAC,oBAAoB,CAAC;iBAC7B,CAAC,CAAC;YACL,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7E,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,IAAI,OAAO,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;oBACnC,MAAM,sBAAsB,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC/D,CAAC;gBACD,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,EAAE;oBAChE,GAAG,EAAE,8DAA8D;oBACnE,IAAI,EAAE,CAAC,oBAAoB,CAAC;iBAC7B,CAAC,CAAC;YACL,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,4BAA4B,CAAC,QAAQ,CAAC,CAAC;YACnE,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC;YACxD,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC;gBAC5C,OAAO;gBACP,MAAM;gBACN,QAAQ;gBACR,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE;gBAClB,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,wBAAwB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;aAC3F,CAAC,CAAC;YACH,IAAI,MAA+D,CAAC;YACpE,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,2BAA2B,CAAC;oBACzC,OAAO,EAAE,QAAQ;oBACjB,YAAY;oBACZ,SAAS;oBACT,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,KAAK;iBAC5C,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,4BAA4B,CAChC,KAAK,EACL,QAAQ,CAAC,QAAQ,EACjB,OAAO,CAAC,aAAa,KAAK,IAAI,CAC/B,CAAC;YACJ,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,CAAC,SAAS,EAAE,CAAC;oBAClB,UAAU,EAAE,wCAAwC,CAAC,OAAO,EAAE,QAAQ,CAAC;iBACxE,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,gFAAgF;YAClF,CAAC;YACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE;oBACjC,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI;iBACpE,CAAC,CAAC;YACL,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,4BAA4B,CAChC,QAAqD;QAErD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjF,OAAO;YACL,GAAG,QAAQ;YACX,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;YACvE,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;YACvE,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS;gBACjC,CAAC,CAAC,EAAE,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE;gBAC7E,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7C,CAAC;CACF;AAED,SAAS,sBAAsB,CAAC,IAAY,EAAE,KAAkB;IAC9D,OAAO,IAAI,0BAA0B,CAAC,2BAA2B,EAAE;QACjE,GAAG,EAAE,qBAAqB,IAAI,mCAAmC,gBAAgB,CAAC,KAAK,CAAC,GAAG;QAC3F,IAAI,EAAE,CAAC,0BAA0B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;KAChD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAkB;IAC1C,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;QAAE,OAAO,OAAO,KAAK,CAAC,GAAG,EAAE,CAAC;IACrD,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;QAAE,OAAO,OAAO,KAAK,CAAC,GAAG,QAAQ,KAAK,CAAC,GAAG,EAAE,CAAC;IACtE,OAAO,OAAO,KAAK,CAAC,GAAG,QAAQ,KAAK,CAAC,GAAG,QAAQ,KAAK,CAAC,GAAG,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAY,EAAE,KAAkB;IAClE,MAAM,OAAO,GAAG;QACd,oBAAoB;QACpB,IAAI;QACJ,iBAAiB;QACjB,WAAW,KAAK,CAAC,KAAK,EAAE;QACxB,SAAS,KAAK,CAAC,GAAG,EAAE;KACrB,CAAC;IACF,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;QAAE,OAAO,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9D,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;QAAE,OAAO,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;IACnC,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,4BAA4B,CACnC,KAAc,EACd,QAAgB,EAChB,aAAsB;IAEtB,IAAI,CAAC,CAAC,KAAK,YAAY,2BAA2B,CAAC,EAAE,CAAC;QACpD,OAAO,IAAI,0BAA0B,CAAC,4BAA4B,EAAE;YAClE,GAAG,EAAE,+EAA+E;YACpF,IAAI,EAAE,CAAC,2BAA2B,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,GAAW,CAAC;IAChB,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,GAAG,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;SAAM,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACrC,GAAG,GAAG,qEAAqE,CAAC;IAC9E,CAAC;SAAM,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;QAChG,MAAM,MAAM,GACV,KAAK,CAAC,SAAS,KAAK,gBAAgB;YAClC,CAAC,CAAC,qDAAqD;YACvD,CAAC,CAAC,2DAA2D,KAAK,CAAC,MAAM,GAAG,CAAC;QACjF,GAAG,GAAG,GAAG,MAAM,iCAAiC,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,8BAA8B,CAAC;IACpH,CAAC;SAAM,IAAI,KAAK,CAAC,SAAS,KAAK,gBAAgB,EAAE,CAAC;QAChD,GAAG,GAAG,wFAAwF,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,wBAAwB,CAAC;IAC5J,CAAC;SAAM,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACnE,MAAM,SAAS,GAAG,aAAa;YAC7B,CAAC,CAAC,qCAAqC;YACvC,CAAC,CAAC,yCAAyC,CAAC;QAC9C,GAAG,GAAG,uCAAuC,KAAK,CAAC,SAAS,WAAW,SAAS,kDAAkD,CAAC;IACrI,CAAC;SAAM,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAC/C,GAAG;YACD,mHAAmH,CAAC;IACxH,CAAC;SAAM,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAC/C,GAAG,GAAG,4EAA4E,CAAC;IACrF,CAAC;SAAM,CAAC;QACN,GAAG,GAAG,0CAA0C,KAAK,CAAC,MAAM,IAAI,SAAS,mEAAmE,CAAC;IAC/I,CAAC;IACD,OAAO,IAAI,0BAA0B,CAAC,4BAA4B,EAAE;QAClE,GAAG;QACH,IAAI,EAAE,CAAC,2BAA2B,CAAC;KACpC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,IAAI,MAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,6EAA6E;IAC/E,CAAC;IACD,OAAO,MAAM,KAAK,SAAS;QACzB,CAAC,CAAC,iGAAiG;QACnG,CAAC,CAAC,gDAAgD,MAAM,6CAA6C,CAAC;AAC1G,CAAC"}

package/node_modules/@noodle-borg/service/dist/credential-broker-options.d.ts CHANGED Viewed

@@ -3,7 +3,7 @@ import type { ExternalCredentialExchangeOptions, ExternalCredentialExchangeRunti
 import type { GoogleWorkloadIdentityOptions, GoogleWorkloadIdentityRuntimeOptions } from './google-workload-identity.js';
 /** Complete deployment-bound broker exchange options without exposing provider lifecycle over HTTP. */
 export declare function deploymentCredentialBrokerOptions(input: {
-    readonly delegatedExchange: Pick<DelegatedExchangeOptions, 'issuer' | 'signer'> | undefined;
+    readonly delegatedExchange: Pick<DelegatedExchangeOptions, 'issuer' | 'signer' | 'localDevtools' | 'onSuccess'> | undefined;
     readonly externalCredentialExchange: ExternalCredentialExchangeRuntimeOptions | undefined;
     readonly googleWorkloadIdentity: GoogleWorkloadIdentityRuntimeOptions | undefined;
     readonly tenant: string;

package/node_modules/@noodle-borg/service/dist/credential-broker-options.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"credential-broker-options.d.ts","sourceRoot":"","sources":["../src/credential-broker-options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,KAAK,EACV,iCAAiC,EACjC,wCAAwC,EACzC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EACV,6BAA6B,EAC7B,oCAAoC,EACrC,MAAM,+BAA+B,CAAC;AAEvC,uGAAuG;AACvG,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,QAAQ,CAAC,iBAAiB,~~EAAE~~,IAAI,CAAC,wBAAwB,EAAE,QAAQ,GAAG,QAAQ,~~CAAC~~,GAAG,SAAS,CAAC;~~IAC5F~~,QAAQ,CAAC,0BAA0B,EAAE,wCAAwC,GAAG,SAAS,CAAC;IAC1F,QAAQ,CAAC,sBAAsB,EAAE,oCAAoC,GAAG,SAAS,CAAC;IAClF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C,GAAG;IACF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,0BAA0B,CAAC,EAAE,iCAAiC,CAAC;IACxE,QAAQ,CAAC,sBAAsB,CAAC,EAAE,6BAA6B,CAAC;CACjE,CA+BA"}
1	+ {"version":3,"file":"credential-broker-options.d.ts","sourceRoot":"","sources":["../src/credential-broker-options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,KAAK,EACV,iCAAiC,EACjC,wCAAwC,EACzC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EACV,6BAA6B,EAC7B,oCAAoC,EACrC,MAAM,+BAA+B,CAAC;AAEvC,uGAAuG;AACvG,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,QAAQ,CAAC,iBAAiB,EACtB,IAAI,CAAC,wBAAwB,EAAE,QAAQ,GAAG,QAAQ,GAAG,eAAe,GAAG,WAAW,CAAC,GACnF,SAAS,CAAC;IACd,QAAQ,CAAC,0BAA0B,EAAE,wCAAwC,GAAG,SAAS,CAAC;IAC1F,QAAQ,CAAC,sBAAsB,EAAE,oCAAoC,GAAG,SAAS,CAAC;IAClF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C,GAAG;IACF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,0BAA0B,CAAC,EAAE,iCAAiC,CAAC;IACxE,QAAQ,CAAC,sBAAsB,CAAC,EAAE,6BAA6B,CAAC;CACjE,CA+BA"}

package/node_modules/@noodle-borg/service/dist/credential-broker-options.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"credential-broker-options.js","sourceRoot":"","sources":["../src/credential-broker-options.ts"],"names":[],"mappings":"AAUA,uGAAuG;AACvG,MAAM,UAAU,iCAAiC,CAAC,~~KAMjD~~;IAKC,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAChD,OAAO;QACL,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,iBAAiB,EAAE;oBACjB,GAAG,KAAK,CAAC,iBAAiB;oBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,KAAK,CAAC,YAAY;iBAC/B;aACF,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,0BAA0B,KAAK,SAAS;YAChD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,0BAA0B,EAAE;oBAC1B,GAAG,KAAK,CAAC,0BAA0B;oBACnC,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,KAAK,CAAC,YAAY;iBAC/B;aACF,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,sBAAsB,KAAK,SAAS;YAC5C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,sBAAsB,EAAE;oBACtB,GAAG,KAAK,CAAC,sBAAsB;oBAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,KAAK,CAAC,YAAY;iBAC/B;aACF,CAAC;KACP,CAAC;AACJ,CAAC"}
1	+ {"version":3,"file":"credential-broker-options.js","sourceRoot":"","sources":["../src/credential-broker-options.ts"],"names":[],"mappings":"AAUA,uGAAuG;AACvG,MAAM,UAAU,iCAAiC,CAAC,KAQjD;IAKC,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAChD,OAAO;QACL,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,iBAAiB,EAAE;oBACjB,GAAG,KAAK,CAAC,iBAAiB;oBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,KAAK,CAAC,YAAY;iBAC/B;aACF,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,0BAA0B,KAAK,SAAS;YAChD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,0BAA0B,EAAE;oBAC1B,GAAG,KAAK,CAAC,0BAA0B;oBACnC,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,KAAK,CAAC,YAAY;iBAC/B;aACF,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,sBAAsB,KAAK,SAAS;YAC5C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,sBAAsB,EAAE;oBACtB,GAAG,KAAK,CAAC,sBAAsB;oBAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,KAAK,CAAC,YAAY;iBAC/B;aACF,CAAC;KACP,CAAC;AACJ,CAAC"}

package/node_modules/@noodle-borg/service/dist/customer-verifier-boundaries.d.ts CHANGED Viewed

@@ -1,6 +1,8 @@
 import type { OwnerTokenVerifier } from '@noodle-borg/transport-http';
 import type { TenantAuthConfig, TenantBridgeAuthConfig } from './store.js';
-export declare function createHostedCustomerVerifierFactory(rawFactory: (auth: TenantAuthConfig) => OwnerTokenVerifier, platformVerifier: OwnerTokenVerifier | undefined): (auth: TenantAuthConfig) => OwnerTokenVerifier;
+export declare function createHostedCustomerVerifierFactory(rawFactory: (auth: TenantAuthConfig) => OwnerTokenVerifier, platformVerifier: OwnerTokenVerifier | undefined, options?: {
+    readonly resolveBridgeAuth?: (auth: TenantBridgeAuthConfig, resource: string) => Promise<TenantBridgeAuthConfig | undefined>;
+}): (auth: TenantAuthConfig) => OwnerTokenVerifier;
 /**
  * Local Devtools accepts Firebase and Microsoft ID tokens directly because no hosted Noodle issuer exists
  * in the author loop. The configured provider still verifies signature, issuer, and audience; this wrapper

package/node_modules/@noodle-borg/service/dist/customer-verifier-boundaries.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"customer-verifier-boundaries.d.ts","sourceRoot":"","sources":["../src/customer-verifier-boundaries.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;~~AACtE~~,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAE3E,wBAAgB,mCAAmC,CACjD,UAAU,EAAE,CAAC,IAAI,EAAE,gBAAgB,KAAK,kBAAkB,EAC1D,gBAAgB,EAAE,kBAAkB,GAAG,SAAS,~~GAC/C~~,CAAC,IAAI,EAAE,gBAAgB,KAAK,kBAAkB,~~CAehD~~;AAED;;;;GAIG;AACH,wBAAgB,0CAA0C,CACxD,UAAU,EAAE,CAAC,IAAI,EAAE,gBAAgB,KAAK,kBAAkB,EAC1D,OAAO,GAAE;IACP,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,CAAC,UAAU,GAAG,WAAW,CAAC,EAAE,CAAC;IAClE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAC3B,IAAI,EAAE,sBAAsB,EAC5B,QAAQ,EAAE,MAAM,KACb,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACjC,GACL,CAAC,IAAI,EAAE,gBAAgB,KAAK,kBAAkB,CA8BhD"}
1	+ {"version":3,"file":"customer-verifier-boundaries.d.ts","sourceRoot":"","sources":["../src/customer-verifier-boundaries.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAE3E,wBAAgB,mCAAmC,CACjD,UAAU,EAAE,CAAC,IAAI,EAAE,gBAAgB,KAAK,kBAAkB,EAC1D,gBAAgB,EAAE,kBAAkB,GAAG,SAAS,EAChD,OAAO,GAAE;IACP,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAC3B,IAAI,EAAE,sBAAsB,EAC5B,QAAQ,EAAE,MAAM,KACb,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;CAC7C,GACL,CAAC,IAAI,EAAE,gBAAgB,KAAK,kBAAkB,CAmChD;AAED;;;;GAIG;AACH,wBAAgB,0CAA0C,CACxD,UAAU,EAAE,CAAC,IAAI,EAAE,gBAAgB,KAAK,kBAAkB,EAC1D,OAAO,GAAE;IACP,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,CAAC,UAAU,GAAG,WAAW,CAAC,EAAE,CAAC;IAClE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAC3B,IAAI,EAAE,sBAAsB,EAC5B,QAAQ,EAAE,MAAM,KACb,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACjC,GACL,CAAC,IAAI,EAAE,gBAAgB,KAAK,kBAAkB,CA8BhD"}

package/node_modules/@noodle-borg/service/dist/customer-verifier-boundaries.js CHANGED Viewed

@@ -1,4 +1,5 @@
-export function createHostedCustomerVerifierFactory(rawFactory, platformVerifier) {
+import { bridgeCustomerIssuer } from './oauth/customer-bridge.js';
+export function createHostedCustomerVerifierFactory(rawFactory, platformVerifier, options = {}) {
     return (auth) => {
         if (auth.kind !== 'bridge')
             return rawFactory(auth);
@@ -10,7 +11,27 @@ export function createHostedCustomerVerifierFactory(rawFactory, platformVerifier
                 verification.caller.identityProvider !== auth.provider) {
                 return null;
             }
-            return { caller: verification.caller };
+            if (verification.customerIssuer === undefined) {
+                return { caller: verification.caller };
+            }
+            if (resource === undefined ||
+                resource.length === 0 ||
+                options.resolveBridgeAuth === undefined) {
+                return null;
+            }
+            let resolved;
+            try {
+                resolved = await options.resolveBridgeAuth(auth, resource);
+            }
+            catch {
+                return null;
+            }
+            if (resolved === undefined || resolved.provider !== auth.provider)
+                return null;
+            const expectedIssuer = bridgeCustomerIssuer(resolved);
+            if (expectedIssuer === undefined || expectedIssuer !== verification.customerIssuer)
+                return null;
+            return { caller: verification.caller, customerIssuer: expectedIssuer };
         };
     };
 }

package/node_modules/@noodle-borg/service/dist/customer-verifier-boundaries.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"customer-verifier-boundaries.js","sourceRoot":"","sources":["../src/customer-verifier-boundaries.ts"],"names":[],"mappings":"~~AAGA~~,MAAM,UAAU,mCAAmC,CACjD,UAA0D,EAC1D,gBAAgD;~~IAEhD~~,OAAO,CAAC,IAAI,EAAE,EAAE;QACd,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,gBAAgB,KAAK,SAAS;YAAE,OAAO,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC;QAC5D,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;YAC/B,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC7D,IACE,YAAY,EAAE,MAAM,CAAC,YAAY,KAAK,UAAU;gBAChD,YAAY,CAAC,MAAM,CAAC,gBAAgB,KAAK,IAAI,CAAC,QAAQ,EACtD,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC;~~QACzC~~,CAAC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0CAA0C,CACxD,UAA0D,EAC1D,UAMI,EAAE;IAEN,OAAO,CAAC,IAAI,EAAE,EAAE;QACd,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,QAAQ,KAAK,UAAU,IAAI,IAAI,CAAC,QAAQ,KAAK,WAAW;YAAE,OAAO,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC;QAC3F,IACE,OAAO,CAAC,gBAAgB,KAAK,SAAS;YACtC,CAAC,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EACjD,CAAC;YACD,OAAO,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC;QAC1B,CAAC;QACD,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;QACpD,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;gBAC/B,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC;gBACjE,IAAI,QAAgC,CAAC;gBACrC,IAAI,CAAC;oBACH,QAAQ,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBACrD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;oBAAE,OAAO,IAAI,CAAC;gBACrD,OAAO,uBAAuB,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YAClF,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QACtC,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;YAC/B,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACjE,OAAO,uBAAuB,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QACtE,CAAC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,QAA4B,EAC5B,IAA4B,EAC5B,KAAa,EACb,QAAgB;IAEhB,MAAM,gBAAgB,GACpB,IAAI,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAChF,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IAC7D,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACvC,OAAO;QACL,MAAM,EAAE;YACN,GAAG,YAAY,CAAC,MAAM;YACtB,QAAQ,EAAE,QAAQ;YAClB,YAAY,EAAE,UAAmB;YACjC,gBAAgB,EAAE,IAAI,CAAC,QAAQ;SAChC;KACF,CAAC;AACJ,CAAC"}
1	+ {"version":3,"file":"customer-verifier-boundaries.js","sourceRoot":"","sources":["../src/customer-verifier-boundaries.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAGlE,MAAM,UAAU,mCAAmC,CACjD,UAA0D,EAC1D,gBAAgD,EAChD,UAKI,EAAE;IAEN,OAAO,CAAC,IAAI,EAAE,EAAE;QACd,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,gBAAgB,KAAK,SAAS;YAAE,OAAO,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC;QAC5D,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;YAC/B,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC7D,IACE,YAAY,EAAE,MAAM,CAAC,YAAY,KAAK,UAAU;gBAChD,YAAY,CAAC,MAAM,CAAC,gBAAgB,KAAK,IAAI,CAAC,QAAQ,EACtD,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,YAAY,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;gBAC9C,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC;YACzC,CAAC;YACD,IACE,QAAQ,KAAK,SAAS;gBACtB,QAAQ,CAAC,MAAM,KAAK,CAAC;gBACrB,OAAO,CAAC,iBAAiB,KAAK,SAAS,EACvC,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,QAA4C,CAAC;YACjD,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC7D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC/E,MAAM,cAAc,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;YACtD,IAAI,cAAc,KAAK,SAAS,IAAI,cAAc,KAAK,YAAY,CAAC,cAAc;gBAChF,OAAO,IAAI,CAAC;YACd,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC;QACzE,CAAC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0CAA0C,CACxD,UAA0D,EAC1D,UAMI,EAAE;IAEN,OAAO,CAAC,IAAI,EAAE,EAAE;QACd,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,QAAQ,KAAK,UAAU,IAAI,IAAI,CAAC,QAAQ,KAAK,WAAW;YAAE,OAAO,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC;QAC3F,IACE,OAAO,CAAC,gBAAgB,KAAK,SAAS;YACtC,CAAC,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EACjD,CAAC;YACD,OAAO,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC;QAC1B,CAAC;QACD,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;QACpD,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;gBAC/B,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC;gBACjE,IAAI,QAAgC,CAAC;gBACrC,IAAI,CAAC;oBACH,QAAQ,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBACrD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;oBAAE,OAAO,IAAI,CAAC;gBACrD,OAAO,uBAAuB,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YAClF,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QACtC,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;YAC/B,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACjE,OAAO,uBAAuB,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QACtE,CAAC,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,QAA4B,EAC5B,IAA4B,EAC5B,KAAa,EACb,QAAgB;IAEhB,MAAM,gBAAgB,GACpB,IAAI,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAChF,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IAC7D,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACvC,OAAO;QACL,MAAM,EAAE;YACN,GAAG,YAAY,CAAC,MAAM;YACtB,QAAQ,EAAE,QAAQ;YAClB,YAAY,EAAE,UAAmB;YACjC,gBAAgB,EAAE,IAAI,CAAC,QAAQ;SAChC;KACF,CAAC;AACJ,CAAC"}

package/node_modules/@noodle-borg/service/dist/customer-verifier.js CHANGED Viewed

@@ -175,6 +175,7 @@ async function discoverCustomerVerifier(auth, options) {
         issuer: auth.issuer,
         keyResolver,
         trustNoodleRoles: false,
+        trustNoodlePrivateClaims: false,
         ...(claims === undefined ? {} : { claims }),
         ...(customerRoutingClaims === undefined ? {} : { customerRoutingClaims }),
     });

package/node_modules/@noodle-borg/service/dist/customer-verifier.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"customer-verifier.js","sourceRoot":"","sources":["../src/customer-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,iBAAiB,EACjB,sBAAsB,EACtB,+BAA+B,GAChC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAEL,YAAY,EACZ,eAAe,EACf,UAAU,GACX,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,iBAAiB,EACjB,SAAS,EACT,UAAU,EAGV,SAAS,GACV,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,iCAAiC,EAAE,MAAM,iCAAiC,CAAC;AACpF,OAAO,EAAE,8BAA8B,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AAGnG,OAAO,EACL,mCAAmC,EACnC,0CAA0C,GAC3C,MAAM,mCAAmC,CAAC;AAqB3C,MAAM,UAAU,6BAA6B,CAC3C,UAA0C,EAAE;IAE5C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkC,CAAC;IACxD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC;IACjD,OAAO,CAAC,IAAI,EAAE,EAAE;QACd,MAAM,UAAU,GAAG,KAAK,EACtB,IAA0B,EAC1B,KAAa,EACb,QAA4B,EAC5B,EAAE;YACF,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACjE,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;gBACzB,IAAI,CAAC,MAAM;gBACX,IAAI,CAAC,QAAQ;gBACb,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;gBACxB,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE;gBACzB,mBAAmB,CAAC,IAAI,CAAC;aAC1B,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,sBAAsB,CAAC,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CACnE,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,CACxC,CAAC;YACF,IAAI,CAAC;gBACH,OAAO,MAAM,CAAC,MAAM,QAAQ,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAClC,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;gBAC/B,IAAI,MAA0B,CAAC;gBAC/B,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;oBACjC,MAAM,GAAG,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACtF,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,MAAM,KAAK,SAAS;oBAAE,OAAO,IAAI,CAAC;gBACtC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAClC,CAAC,SAAS,EAAE,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,MAAM,CAC5D,CAAC;gBACF,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YACnF,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBAClC,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC;oBAAE,OAAO,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC;gBAChE,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;oBACrB,MAAM,GAAG,GAAG;wBACV,WAAW;wBACX,IAAI,CAAC,QAAQ;wBACb,IAAI,CAAC,QAAQ;wBACb,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;qBAChC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACjB,MAAM,QAAQ,GAAG,sBAAsB,CAAC,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CACnE,8BAA8B,CAAC;wBAC7B,IAAI;wBACJ,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,KAAK;qBACtC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,EAAE,SAAiB,EAAE,EAAE;wBAC9C,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;wBACzC,OAAO,QAAQ,KAAK,IAAI;4BACtB,CAAC,CAAC,IAAI;4BACN,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;oBAC3D,CAAC,CAAC,CACH,CAAC;oBACF,IAAI,CAAC;wBACH,OAAO,MAAM,CAAC,MAAM,QAAQ,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACtD,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO,IAAI,CAAC;oBACd,CAAC;gBACH,CAAC,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,KAAK,UAAU;gBAAE,OAAO,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC;YAC1D,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;gBACrB,MAAM,GAAG,GAAG;oBACV,UAAU;oBACV,IAAI,CAAC,SAAS,IAAI,EAAE;oBACpB,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;oBACtB,IAAI,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE;iBACxB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACjB,MAAM,QAAQ,GAAG,sBAAsB,CAAC,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CACnE,6BAA6B,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAClE,CAAC;gBACF,IAAI,CAAC;oBACH,OAAO,MAAM,CAAC,MAAM,QAAQ,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;gBAC7D,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACtE,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAA0C,EAC1C,GAAW,EACX,UAAkB,EAClB,MAAyC;IAEzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;IAE3E,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC;IAC1B,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,GAAG,GAAG,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1D,KAAK,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE;QACvB,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,QAAQ,KAAK,QAAQ;YAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,SAA6B,EAC7B,OAAuC,EACvC,MAA2B;IAE3B,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC;IAC/E,MAAM,MAAM,GAAG,kCAAkC,SAAS,EAAE,CAAC;IAC7D,MAAM,WAAW,GACf,OAAO,CAAC,YAAY,KAAK,SAAS;QAChC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,YAAY,CAAC;QACzC,CAAC,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS;YACrC,CAAC,CAAC,iBAAiB,CAAC,MAAM,SAAS,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YACtE,CAAC,CAAC,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC5C,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,WAAW,EAAE;gBACtD,MAAM;gBACN,QAAQ,EAAE,SAAS;aACpB,CAAC,CAAC;YACH,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC7E,MAAM,WAAW,GAAG,iCAAiC,CAAC;gBACpD,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC,CAAC;YACH,OAAO;gBACL,MAAM,EAAE;oBACN,OAAO,EAAE,OAAO,CAAC,GAAG;oBACpB,MAAM,EACJ,MAAM,EAAE,MAAM,KAAK,SAAS;wBAC1B,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC;wBACtB,CAAC,CAAC,+BAA+B,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;oBACtE,KAAK,EACH,MAAM,EAAE,KAAK,KAAK,SAAS;wBACzB,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,+BAA+B,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC;oBACpE,QAAQ,EAAE,SAAS;oBACnB,GAAG,CAAC,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtE,GAAG,CAAC,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnE,GAAG,CAAC,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtE,GAAG,WAAW;iBACf;aACF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,OAAuC;IAEvC,MAAM,KAAK,GAAG,MAAM,eAAe,CACjC,0FAA0F,EAC1F,OAAO,CACR,CAAC;IACF,OAAO,KAAK,EAAE,eAAe,EAAE,EAAE;QAC/B,IAAI,OAAO,eAAe,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC/E,OAAO,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,IAA0B,EAC1B,OAAuC;IAEvC,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9D,IAAI,QAAQ,CAAC,MAAM,KAAK,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACjC,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACxF,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,qBAAqB,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,iBAAiB,CAAC;QACjC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,WAAW;QACX,gBAAgB,EAAE,KAAK;QACvB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,GAAG,CAAC,qBAAqB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC;KAC1E,CAAC,CAAC;IACH,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;QAC/B,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACjE,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1D,IAAI,YAAY,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACvC,+FAA+F;QAC/F,iGAAiG;QACjG,MAAM,EACJ,YAAY,EAAE,aAAa,EAC3B,gBAAgB,EAAE,iBAAiB,EACnC,GAAG,QAAQ,EACZ,GAAG,YAAY,CAAC,MAAM,CAAC;QACxB,OAAO;YACL,MAAM,EAAE,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE;YACrE,cAAc,EAAE,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC;YAC5C,GAAG,CAAC,YAAY,CAAC,eAAe,KAAK,SAAS;gBAC5C,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,eAAe,EAAE,YAAY,CAAC,eAAe,EAAE,CAAC;SACvD,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,IAA0B;IACrD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAkB,CAAC;QACxC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,CAAC;QACzC,MAAM,OAAO,GAAqC,EAAE,CAAC;QACrD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAChD,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YAChC,IACE,CAAC,aAAa,CAAC,QAAQ,CAAC;gBACxB,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ;gBAClC,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAC3B,CAAC;gBACD,SAAS;YACX,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC;AAED,SAAS,uBAAuB,CAC9B,IAA0B;IAE1B,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAA2B,CAAC;IAC7D,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,OAAO;QAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IACtD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAAsC;IAEtC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO;QACL,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QAC9D,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;KAClE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,MAAc,EACd,OAAuC;IAEvC,OAAO,CAAC,MAAM,sBAAsB,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC/F,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW,EAAE,OAAuC;IAC5E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACjG,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,gBAAgB,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,gBAAgB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAQ;IAClC,OAAO,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAQ,EAAE,OAAuC;IAC3E,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO,CACL,OAAO,CAAC,sBAAsB,KAAK,IAAI;QACvC,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;QACvD,CAAC,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,KAAK,CAAC,CAC7E,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAOD,SAAS,WAAW,CAAC,KAA8B;IACjD,IACE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAChC,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,EACpE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO;QACL,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC;QACrC,GAAG,CAAC,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3E,CAAC;AACJ,CAAC;AAID,SAAS,OAAO,CAAC,KAA8B;IAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACzE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAuB,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,WAAW,CAAC,OAAgC;IACnD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC;IAC3D,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvF,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;IACjG,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,GAAW,EACX,OAAuC;IAEvC,OAAO,WAAW,CAAC,MAAM,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,OAAuC;IAC3E,OAAO,OAAO,CAAC,MAAM,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,GAAW,EACX,OAAuC;IAEvC,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC;IACjF,IAAI,CAAC;QACH,MAAM,IAAI,GAAG;YACX,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACd,CAAC;QAC5B,MAAM,GAAG,GACP,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC;YACrE,CAAC,CAAC,MAAM,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE;gBAC/B,gBAAgB,EAAE,OAAO,CAAC,SAAS,IAAI,KAAK;gBAC5C,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;aACpE,CAAC;YACJ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACvD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9F,OAAO,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC"}
1	+ {"version":3,"file":"customer-verifier.js","sourceRoot":"","sources":["../src/customer-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,iBAAiB,EACjB,sBAAsB,EACtB,+BAA+B,GAChC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAEL,YAAY,EACZ,eAAe,EACf,UAAU,GACX,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,iBAAiB,EACjB,SAAS,EACT,UAAU,EAGV,SAAS,GACV,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,iCAAiC,EAAE,MAAM,iCAAiC,CAAC;AACpF,OAAO,EAAE,8BAA8B,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AAGnG,OAAO,EACL,mCAAmC,EACnC,0CAA0C,GAC3C,MAAM,mCAAmC,CAAC;AAqB3C,MAAM,UAAU,6BAA6B,CAC3C,UAA0C,EAAE;IAE5C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkC,CAAC;IACxD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC;IACjD,OAAO,CAAC,IAAI,EAAE,EAAE;QACd,MAAM,UAAU,GAAG,KAAK,EACtB,IAA0B,EAC1B,KAAa,EACb,QAA4B,EAC5B,EAAE;YACF,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACjE,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;gBACzB,IAAI,CAAC,MAAM;gBACX,IAAI,CAAC,QAAQ;gBACb,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;gBACxB,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE;gBACzB,mBAAmB,CAAC,IAAI,CAAC;aAC1B,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,sBAAsB,CAAC,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CACnE,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,CACxC,CAAC;YACF,IAAI,CAAC;gBACH,OAAO,MAAM,CAAC,MAAM,QAAQ,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAClC,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;gBAC/B,IAAI,MAA0B,CAAC;gBAC/B,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;oBACjC,MAAM,GAAG,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACtF,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,MAAM,KAAK,SAAS;oBAAE,OAAO,IAAI,CAAC;gBACtC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAClC,CAAC,SAAS,EAAE,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,MAAM,CAC5D,CAAC;gBACF,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YACnF,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBAClC,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC;oBAAE,OAAO,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC;gBAChE,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;oBACrB,MAAM,GAAG,GAAG;wBACV,WAAW;wBACX,IAAI,CAAC,QAAQ;wBACb,IAAI,CAAC,QAAQ;wBACb,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;qBAChC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACjB,MAAM,QAAQ,GAAG,sBAAsB,CAAC,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CACnE,8BAA8B,CAAC;wBAC7B,IAAI;wBACJ,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,KAAK;qBACtC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,EAAE,SAAiB,EAAE,EAAE;wBAC9C,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;wBACzC,OAAO,QAAQ,KAAK,IAAI;4BACtB,CAAC,CAAC,IAAI;4BACN,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;oBAC3D,CAAC,CAAC,CACH,CAAC;oBACF,IAAI,CAAC;wBACH,OAAO,MAAM,CAAC,MAAM,QAAQ,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACtD,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO,IAAI,CAAC;oBACd,CAAC;gBACH,CAAC,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,KAAK,UAAU;gBAAE,OAAO,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC;YAC1D,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;gBACrB,MAAM,GAAG,GAAG;oBACV,UAAU;oBACV,IAAI,CAAC,SAAS,IAAI,EAAE;oBACpB,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;oBACtB,IAAI,CAAC,IAAI,EAAE,MAAM,IAAI,EAAE;iBACxB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACjB,MAAM,QAAQ,GAAG,sBAAsB,CAAC,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CACnE,6BAA6B,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAClE,CAAC;gBACF,IAAI,CAAC;oBACH,OAAO,MAAM,CAAC,MAAM,QAAQ,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;gBAC7D,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACtE,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAA0C,EAC1C,GAAW,EACX,UAAkB,EAClB,MAAyC;IAEzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;IAE3E,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC;IAC1B,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,GAAG,GAAG,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1D,KAAK,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE;QACvB,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,QAAQ,KAAK,QAAQ;YAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,SAA6B,EAC7B,OAAuC,EACvC,MAA2B;IAE3B,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC;IAC/E,MAAM,MAAM,GAAG,kCAAkC,SAAS,EAAE,CAAC;IAC7D,MAAM,WAAW,GACf,OAAO,CAAC,YAAY,KAAK,SAAS;QAChC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,YAAY,CAAC;QACzC,CAAC,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS;YACrC,CAAC,CAAC,iBAAiB,CAAC,MAAM,SAAS,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YACtE,CAAC,CAAC,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC5C,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,WAAW,EAAE;gBACtD,MAAM;gBACN,QAAQ,EAAE,SAAS;aACpB,CAAC,CAAC;YACH,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC7E,MAAM,WAAW,GAAG,iCAAiC,CAAC;gBACpD,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC,CAAC;YACH,OAAO;gBACL,MAAM,EAAE;oBACN,OAAO,EAAE,OAAO,CAAC,GAAG;oBACpB,MAAM,EACJ,MAAM,EAAE,MAAM,KAAK,SAAS;wBAC1B,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC;wBACtB,CAAC,CAAC,+BAA+B,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;oBACtE,KAAK,EACH,MAAM,EAAE,KAAK,KAAK,SAAS;wBACzB,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,+BAA+B,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC;oBACpE,QAAQ,EAAE,SAAS;oBACnB,GAAG,CAAC,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtE,GAAG,CAAC,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnE,GAAG,CAAC,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtE,GAAG,WAAW;iBACf;aACF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,OAAuC;IAEvC,MAAM,KAAK,GAAG,MAAM,eAAe,CACjC,0FAA0F,EAC1F,OAAO,CACR,CAAC;IACF,OAAO,KAAK,EAAE,eAAe,EAAE,EAAE;QAC/B,IAAI,OAAO,eAAe,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC/E,OAAO,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,IAA0B,EAC1B,OAAuC;IAEvC,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9D,IAAI,QAAQ,CAAC,MAAM,KAAK,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACjC,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACxF,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,qBAAqB,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,iBAAiB,CAAC;QACjC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,WAAW;QACX,gBAAgB,EAAE,KAAK;QACvB,wBAAwB,EAAE,KAAK;QAC/B,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,GAAG,CAAC,qBAAqB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC;KAC1E,CAAC,CAAC;IACH,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;QAC/B,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACjE,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1D,IAAI,YAAY,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACvC,+FAA+F;QAC/F,iGAAiG;QACjG,MAAM,EACJ,YAAY,EAAE,aAAa,EAC3B,gBAAgB,EAAE,iBAAiB,EACnC,GAAG,QAAQ,EACZ,GAAG,YAAY,CAAC,MAAM,CAAC;QACxB,OAAO;YACL,MAAM,EAAE,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE;YACrE,cAAc,EAAE,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC;YAC5C,GAAG,CAAC,YAAY,CAAC,eAAe,KAAK,SAAS;gBAC5C,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,eAAe,EAAE,YAAY,CAAC,eAAe,EAAE,CAAC;SACvD,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,IAA0B;IACrD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAkB,CAAC;QACxC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACpC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,CAAC;QACzC,MAAM,OAAO,GAAqC,EAAE,CAAC;QACrD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAChD,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YAChC,IACE,CAAC,aAAa,CAAC,QAAQ,CAAC;gBACxB,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ;gBAClC,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAC3B,CAAC;gBACD,SAAS;YACX,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC;AAED,SAAS,uBAAuB,CAC9B,IAA0B;IAE1B,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAA2B,CAAC;IAC7D,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,OAAO;QAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IACtD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAAsC;IAEtC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO;QACL,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QAC9D,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;KAClE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,MAAc,EACd,OAAuC;IAEvC,OAAO,CAAC,MAAM,sBAAsB,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC/F,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW,EAAE,OAAuC;IAC5E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACjG,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,gBAAgB,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,gBAAgB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAQ;IAClC,OAAO,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAQ,EAAE,OAAuC;IAC3E,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO,CACL,OAAO,CAAC,sBAAsB,KAAK,IAAI;QACvC,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;QACvD,CAAC,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,KAAK,CAAC,CAC7E,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAOD,SAAS,WAAW,CAAC,KAA8B;IACjD,IACE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAChC,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,EACpE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO;QACL,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC;QACrC,GAAG,CAAC,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3E,CAAC;AACJ,CAAC;AAID,SAAS,OAAO,CAAC,KAA8B;IAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACzE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAuB,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,WAAW,CAAC,OAAgC;IACnD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC;IAC3D,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvF,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;IACjG,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,GAAW,EACX,OAAuC;IAEvC,OAAO,WAAW,CAAC,MAAM,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,OAAuC;IAC3E,OAAO,OAAO,CAAC,MAAM,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,GAAW,EACX,OAAuC;IAEvC,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC;IACjF,IAAI,CAAC;QACH,MAAM,IAAI,GAAG;YACX,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACd,CAAC;QAC5B,MAAM,GAAG,GACP,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC;YACrE,CAAC,CAAC,MAAM,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE;gBAC/B,gBAAgB,EAAE,OAAO,CAAC,SAAS,IAAI,KAAK;gBAC5C,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;aACpE,CAAC;YACJ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACvD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9F,OAAO,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC"}

package/node_modules/@noodle-borg/service/dist/delegated-token-exchange.d.ts CHANGED Viewed

@@ -1,6 +1,18 @@
 import type { SigningKeyProvider } from '@noodle-borg/auth';
 import type { DelegatedTokenExchangeBinding } from '@noodle-borg/connector-defs';
 import { type CredentialRequest, type CustomerRouteBinding } from '@noodle-borg/runtime';
+import type { LocalDevtoolsDelegatedExchangeSuccess } from './local-devtools-delegated-exchange.js';
+export type DelegatedTokenExchangeFailureKind = 'network' | 'redirect' | 'http' | 'oauth' | 'malformed_response' | 'response_too_large';
+/** Safe, internal-only failure metadata from the untrusted token endpoint boundary. */
+export declare class DelegatedTokenExchangeError extends Error {
+    readonly kind: DelegatedTokenExchangeFailureKind;
+    readonly status?: number;
+    readonly oauthCode?: string;
+    constructor(kind: DelegatedTokenExchangeFailureKind, options?: {
+        readonly status?: number;
+        readonly oauthCode?: string;
+    });
+}
 /**
  * Service wiring for the generic delegated token exchange (ADR 0152). The issuer/signer pair is the
  * platform OAuth signer whose JWKS the customer's token endpoint verifies assertions against; tenant and
@@ -12,6 +24,8 @@ export interface DelegatedExchangeOptions {
     /** `org/app/env` of the deployment the broker serves. */
     readonly tenant: string;
     readonly deployment: string;
+    readonly localDevtools?: true;
+    readonly onSuccess?: (event: LocalDevtoolsDelegatedExchangeSuccess) => void;
 }
 type ExchangeCaller = NonNullable<CredentialRequest['caller']> & {
     readonly audience: string;

package/node_modules/@noodle-borg/service/dist/delegated-token-exchange.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"delegated-token-exchange.d.ts","sourceRoot":"","sources":["../src/delegated-token-exchange.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AACjF,OAAO,EACL,KAAK,iBAAiB,EAEtB,KAAK,oBAAoB,EAC1B,MAAM,sBAAsB,CAAC;~~AAM9B~~;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,yDAAyD;IACzD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;~~CAC7B~~;AAED,KAAK,cAAc,GAAG,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,GAAG;IAC/D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC,CAAC;AAEF,uGAAuG;AACvG,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,iBAAiB,GAAG,cAAc,CA2BhF;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,oBAAoB,CAAC;CACvC,GAAG,OAAO,CAAC,MAAM,CAAC,CA+BlB;AAED,uGAAuG;AACvG,wBAAsB,2BAA2B,CAAC,KAAK,EAAE;IACvD,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAC;IAChD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,OAAO,KAAK,CAAC;CAClC,GAAG,OAAO,CAAC;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,~~CA2CnE~~"}
1	+ {"version":3,"file":"delegated-token-exchange.d.ts","sourceRoot":"","sources":["../src/delegated-token-exchange.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AACjF,OAAO,EACL,KAAK,iBAAiB,EAEtB,KAAK,oBAAoB,EAC1B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,wCAAwC,CAAC;AAOpG,MAAM,MAAM,iCAAiC,GACzC,SAAS,GACT,UAAU,GACV,MAAM,GACN,OAAO,GACP,oBAAoB,GACpB,oBAAoB,CAAC;AAEzB,uFAAuF;AACvF,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,QAAQ,CAAC,IAAI,EAAE,iCAAiC,CAAC;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;gBAG1B,IAAI,EAAE,iCAAiC,EACvC,OAAO,GAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO;CAiB1E;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,yDAAyD;IACzD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,qCAAqC,KAAK,IAAI,CAAC;CAC7E;AAED,KAAK,cAAc,GAAG,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,GAAG;IAC/D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC,CAAC;AAEF,uGAAuG;AACvG,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,iBAAiB,GAAG,cAAc,CA2BhF;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,oBAAoB,CAAC;CACvC,GAAG,OAAO,CAAC,MAAM,CAAC,CA+BlB;AAED,uGAAuG;AACvG,wBAAsB,2BAA2B,CAAC,KAAK,EAAE;IACvD,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAC;IAChD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,OAAO,KAAK,CAAC;CAClC,GAAG,OAAO,CAAC;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAyEnE"}

package/node_modules/@noodle-borg/service/dist/delegated-token-exchange.js CHANGED Viewed

@@ -2,6 +2,28 @@ import { CredentialUnavailableError, } from '@noodle-borg/runtime';
 import { SignJWT } from 'jose';
 /** Assertion lifetime in seconds — long enough for one exchange round-trip, short enough to bound replay. */
 const ASSERTION_TTL_SECONDS = 120;
+const MAX_TOKEN_RESPONSE_BYTES = 32 * 1024;
+const OAUTH_ERROR_CODE_PATTERN = /^[A-Za-z][A-Za-z0-9._-]{0,63}$/;
+/** Safe, internal-only failure metadata from the untrusted token endpoint boundary. */
+export class DelegatedTokenExchangeError extends Error {
+    kind;
+    status;
+    oauthCode;
+    constructor(kind, options = {}) {
+        super(`delegated token exchange failed: ${kind}`);
+        this.name = 'DelegatedTokenExchangeError';
+        this.kind = kind;
+        if (options.status !== undefined &&
+            Number.isInteger(options.status) &&
+            options.status >= 100 &&
+            options.status <= 599) {
+            this.status = options.status;
+        }
+        if (options.oauthCode !== undefined && OAUTH_ERROR_CODE_PATTERN.test(options.oauthCode)) {
+            this.oauthCode = options.oauthCode;
+        }
+    }
+}
 /** The exchange represents a verified end user; anything less fails closed before any HTTP is sent. */
 export function requireExchangeCaller(request) {
     const caller = request.caller;
@@ -25,7 +47,7 @@ export function requireExchangeCaller(request) {
     }
     if (request.customerIssuer === undefined || request.customerIssuer.length === 0) {
         throw new CredentialUnavailableError('caller_issuer_missing', {
-            fix: 'Authenticate through a configured direct or federated customer OIDC issuer.',
+            fix: 'Reconnect through the configured customer authentication flow so Noodle can bind the verified issuer.',
             next: ['noodle auth doctor --live'],
         });
     }
@@ -90,23 +112,55 @@ export async function fetchDelegatedTokenExchange(input) {
     else {
         headers.authorization = `Basic ${Buffer.from(`${binding.clientId}:${input.clientSecret}`).toString('base64')}`;
     }
-    const response = await input.fetchImpl(binding.tokenUrl, {
-        method: 'POST',
-        redirect: 'manual',
-        headers,
-        body: body.toString(),
-    });
+    let response;
+    try {
+        response = await input.fetchImpl(binding.tokenUrl, {
+            method: 'POST',
+            redirect: 'manual',
+            headers,
+            body: body.toString(),
+        });
+    }
+    catch {
+        throw new DelegatedTokenExchangeError('network');
+    }
     if (response.status >= 300 && response.status < 400) {
-        throw new Error('delegated token exchange rejected a redirect');
+        await cancelResponseBody(response);
+        throw new DelegatedTokenExchangeError('redirect', { status: response.status });
     }
-    if (!response.ok) {
-        throw new Error(`delegated token exchange failed (status ${response.status})`);
+    let bytes;
+    try {
+        bytes = await readBoundedTokenResponse(response);
+    }
+    catch (error) {
+        if (error instanceof DelegatedTokenExchangeError)
+            throw error;
+        throw new DelegatedTokenExchangeError('network');
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(new TextDecoder().decode(bytes));
+    }
+    catch {
+        if (!response.ok) {
+            throw new DelegatedTokenExchangeError('http', { status: response.status });
+        }
+        throw new DelegatedTokenExchangeError('malformed_response', { status: response.status });
     }
-    const parsed = await response.json().catch(() => undefined);
     const record = typeof parsed === 'object' && parsed !== null ? parsed : {};
+    const oauthCode = record.error;
+    if (typeof oauthCode === 'string' && OAUTH_ERROR_CODE_PATTERN.test(oauthCode)) {
+        throw new DelegatedTokenExchangeError('oauth', {
+            status: response.status,
+            oauthCode,
+        });
+    }
+    if (!response.ok) {
+        throw new DelegatedTokenExchangeError('http', { status: response.status });
+    }
     const token = record.access_token;
     if (typeof token !== 'string' || token === '') {
-        throw new Error('delegated token exchange failed: response has no access_token');
+        throw new DelegatedTokenExchangeError('malformed_response', { status: response.status });
     }
     const expiresIn = Number(record.expires_in);
     return {
@@ -114,4 +168,44 @@ export async function fetchDelegatedTokenExchange(input) {
         ...(Number.isFinite(expiresIn) && expiresIn > 0 ? { expiresIn } : {}),
     };
 }
+async function readBoundedTokenResponse(response) {
+    const declaredLength = response.headers.get('content-length');
+    if (declaredLength !== null &&
+        /^\d+$/.test(declaredLength.trim()) &&
+        Number(declaredLength) > MAX_TOKEN_RESPONSE_BYTES) {
+        await cancelResponseBody(response);
+        throw new DelegatedTokenExchangeError('response_too_large', { status: response.status });
+    }
+    if (response.body === null)
+        return new Uint8Array();
+    const reader = response.body.getReader();
+    const chunks = [];
+    let total = 0;
+    while (true) {
+        const { done, value } = await reader.read();
+        if (done)
+            break;
+        if (total + value.byteLength > MAX_TOKEN_RESPONSE_BYTES) {
+            await reader.cancel().catch(() => undefined);
+            throw new DelegatedTokenExchangeError('response_too_large', { status: response.status });
+        }
+        chunks.push(value);
+        total += value.byteLength;
+    }
+    const bytes = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return bytes;
+}
+async function cancelResponseBody(response) {
+    try {
+        await response.body?.cancel();
+    }
+    catch {
+        // Cancellation is best-effort and must not replace the curated exchange failure.
+    }
+}
 //# sourceMappingURL=delegated-token-exchange.js.map

package/node_modules/@noodle-borg/service/dist/delegated-token-exchange.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"delegated-token-exchange.js","sourceRoot":"","sources":["../src/delegated-token-exchange.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,0BAA0B,GAE3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;~~AAE~~/B,6GAA6G;AAC7G,MAAM,qBAAqB,GAAG,GAAG,CAAC;~~AAoBlC~~,uGAAuG;AACvG,MAAM,UAAU,qBAAqB,CAAC,OAA0B;IAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QAC/D,MAAM,IAAI,0BAA0B,CAAC,8BAA8B,EAAE;YACnE,GAAG,EAAE,6DAA6D;YAClE,IAAI,EAAE,CAAC,2BAA2B,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;QAC1B,MAAM,IAAI,0BAA0B,CAAC,wBAAwB,EAAE;YAC7D,GAAG,EAAE,0EAA0E;YAC/E,IAAI,EAAE,CAAC,2BAA2B,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,0BAA0B,CAAC,yBAAyB,EAAE;YAC9D,GAAG,EAAE,sEAAsE;YAC3E,IAAI,EAAE,CAAC,2BAA2B,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,0BAA0B,CAAC,uBAAuB,EAAE;YAC5D,GAAG,EAAE,~~6EAA6E~~;~~YAClF~~,IAAI,EAAE,CAAC,2BAA2B,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,GAAG,MAAM,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAoB,CAAC;AACjF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAM3C;IACC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,OAAO,IAAI,OAAO,CAAC;QACjB,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;QAC5B,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;QACpC,iBAAiB,EAAE;YACjB,OAAO,EAAE,CAAC;YACV,MAAM,EAAE,MAAM,CAAC,cAAc;SAC9B;QACD,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS;YAC3B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,KAAK,EAAE;oBACL,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG;oBACpB,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW;iBACrC;aACF,CAAC;KACP,CAAC;SACC,kBAAkB,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;SAC9D,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;SAC/B,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC;SAC1B,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC;SAC3B,WAAW,CAAC,QAAQ,CAAC;SACrB,iBAAiB,CAAC,QAAQ,GAAG,qBAAqB,CAAC;SACnD,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;SAC3B,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC1B,CAAC;AAED,uGAAuG;AACvG,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAKjD;IACC,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,iDAAiD,CAAC,CAAC;IAC1E,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,sCAAsC,CAAC,CAAC;IACvE,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3E,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,mCAAmC;KACpD,CAAC;IACF,IAAI,OAAO,CAAC,UAAU,KAAK,oBAAoB,EAAE,CAAC;QAChD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAChD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,aAAa,GAAG,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IACjH,CAAC;IACD,~~MAAM~~,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE;~~QACvD~~,MAAM,EAAE,MAAM;~~QACd~~,QAAQ,EAAE,QAAQ;~~QAClB~~,OAAO;~~QACP~~,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;~~KACtB~~,CAAC,CAAC;~~IACH~~,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACpD,MAAM,IAAI,~~KAAK~~,CAAC,~~8CAA8C~~,CAAC,CAAC;~~IAClE~~,CAAC;~~IACD~~,IAAI,CAAC,QAAQ,CAAC,~~EAAE~~,EAAE,CAAC;~~QACjB~~,MAAM,IAAI,~~KAAK~~,CAAC,~~2CAA2C~~,~~QAAQ~~,CAAC,MAAM,GAAG,CAAC,CAAC;~~IACjF~~,CAAC;~~IACD~~,MAAM,MAAM,~~GAAY~~,MAAM,QAAQ,CAAC,~~IAAI~~,EAAE,CAAC,~~KAAK~~,CAAC,~~GAAG~~,EAAE,CAAC,~~SAAS~~,CAAC,CAAC;~~IACrE~~,MAAM,MAAM,GACV,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3F,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,~~KAAK~~,CAAC~~,+DAA+D~~,CAAC,CAAC;~~IACnF~~,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC5C,OAAO;QACL,KAAK;QACL,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtE,CAAC;AACJ,CAAC"}
1	+ {"version":3,"file":"delegated-token-exchange.js","sourceRoot":"","sources":["../src/delegated-token-exchange.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,0BAA0B,GAE3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAG/B,6GAA6G;AAC7G,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3C,MAAM,wBAAwB,GAAG,gCAAgC,CAAC;AAUlE,uFAAuF;AACvF,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAC3C,IAAI,CAAoC;IACxC,MAAM,CAAU;IAChB,SAAS,CAAU;IAE5B,YACE,IAAuC,EACvC,UAAqE,EAAE;QAEvE,KAAK,CAAC,oCAAoC,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;QAC1C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IACE,OAAO,CAAC,MAAM,KAAK,SAAS;YAC5B,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC;YAChC,OAAO,CAAC,MAAM,IAAI,GAAG;YACrB,OAAO,CAAC,MAAM,IAAI,GAAG,EACrB,CAAC;YACD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC/B,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACxF,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACrC,CAAC;IACH,CAAC;CACF;AAsBD,uGAAuG;AACvG,MAAM,UAAU,qBAAqB,CAAC,OAA0B;IAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QAC/D,MAAM,IAAI,0BAA0B,CAAC,8BAA8B,EAAE;YACnE,GAAG,EAAE,6DAA6D;YAClE,IAAI,EAAE,CAAC,2BAA2B,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;QAC1B,MAAM,IAAI,0BAA0B,CAAC,wBAAwB,EAAE;YAC7D,GAAG,EAAE,0EAA0E;YAC/E,IAAI,EAAE,CAAC,2BAA2B,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,0BAA0B,CAAC,yBAAyB,EAAE;YAC9D,GAAG,EAAE,sEAAsE;YAC3E,IAAI,EAAE,CAAC,2BAA2B,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,0BAA0B,CAAC,uBAAuB,EAAE;YAC5D,GAAG,EAAE,uGAAuG;YAC5G,IAAI,EAAE,CAAC,2BAA2B,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,GAAG,MAAM,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAoB,CAAC;AACjF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAM3C;IACC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,OAAO,IAAI,OAAO,CAAC;QACjB,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;QAC5B,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;QACpC,iBAAiB,EAAE;YACjB,OAAO,EAAE,CAAC;YACV,MAAM,EAAE,MAAM,CAAC,cAAc;SAC9B;QACD,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS;YAC3B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,KAAK,EAAE;oBACL,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG;oBACpB,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW;iBACrC;aACF,CAAC;KACP,CAAC;SACC,kBAAkB,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;SAC9D,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;SAC/B,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC;SAC1B,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC;SAC3B,WAAW,CAAC,QAAQ,CAAC;SACrB,iBAAiB,CAAC,QAAQ,GAAG,qBAAqB,CAAC;SACnD,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;SAC3B,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC1B,CAAC;AAED,uGAAuG;AACvG,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAKjD;IACC,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,iDAAiD,CAAC,CAAC;IAC1E,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,sCAAsC,CAAC,CAAC;IACvE,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3E,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,mCAAmC;KACpD,CAAC;IACF,IAAI,OAAO,CAAC,UAAU,KAAK,oBAAoB,EAAE,CAAC;QAChD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAChD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,aAAa,GAAG,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IACjH,CAAC;IACD,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE;YACjD,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,QAAQ;YAClB,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;SACtB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,2BAA2B,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACpD,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,IAAI,2BAA2B,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,KAAiB,CAAC;IACtB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,2BAA2B;YAAE,MAAM,KAAK,CAAC;QAC9D,MAAM,IAAI,2BAA2B,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAY,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,2BAA2B,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,IAAI,2BAA2B,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,MAAM,GACV,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3F,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC;IAC/B,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,wBAAwB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,2BAA2B,CAAC,OAAO,EAAE;YAC7C,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,2BAA2B,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,2BAA2B,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC5C,OAAO;QACL,KAAK;QACL,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,QAAkB;IACxD,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC9D,IACE,cAAc,KAAK,IAAI;QACvB,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,CAAC,cAAc,CAAC,GAAG,wBAAwB,EACjD,CAAC;QACD,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,IAAI,2BAA2B,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,UAAU,EAAE,CAAC;IAEpD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI;YAAE,MAAM;QAChB,IAAI,KAAK,GAAG,KAAK,CAAC,UAAU,GAAG,wBAAwB,EAAE,CAAC;YACxD,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC7C,MAAM,IAAI,2BAA2B,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;IAC5B,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,QAAkB;IAClD,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,iFAAiF;IACnF,CAAC;AACH,CAAC"}

package/node_modules/@noodle-borg/service/dist/index.d.ts CHANGED Viewed

@@ -33,6 +33,7 @@ export { GoogleWorkloadIdentityBindingBroker, type GoogleWorkloadIdentityOptions
 export { PostgresGoogleWorkloadIdentityStore } from './google-workload-identity-postgres.js';
 export { type GoogleWorkloadIdentityStore, InMemoryGoogleWorkloadIdentityStore, type PrepareGoogleWorkloadIdentityInput, type RevokeGoogleWorkloadIdentityInput, type StoredGoogleWorkloadIdentity, } from './google-workload-identity-store.js';
 export type { LocalDevtoolsDelegatedCredential, LocalDevtoolsDelegatedCredentialSink, LocalDevtoolsDelegatedProvider, } from './local-devtools-delegated-credentials.js';
+export { type LocalDevtoolsDelegatedExchangeAuthority, type LocalDevtoolsDelegatedExchangeBindingProjection, type LocalDevtoolsDelegatedExchangeRuntime, type LocalDevtoolsDelegatedExchangeSuccess, projectLocalDevtoolsDelegatedExchangeBindings, } from './local-devtools-delegated-exchange.js';
 export { resolveTenantBridgeAuthVariables } from './managed-config-expressions.js';
 export { ensureMcpConfirmationNonceSchema, type McpConfirmationNoncePool, PostgresMcpConfirmationNonceLedger, } from './mcp-confirmation-nonce-postgres.js';
 export { createHostedMcpRequestStateManager, resolveMcpProtocolMode, } from './mcp-protocol-runtime.js';