@noodleseed/one 0.63.0 → 0.64.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/auth-discovery.d.ts +17 -0
- package/dist/auth-discovery.d.ts.map +1 -0
- package/dist/auth-discovery.js +54 -0
- package/dist/auth-discovery.js.map +1 -0
- package/dist/cli.d.ts.map +1 -1
- package/dist/cli.js +3 -0
- package/dist/cli.js.map +1 -1
- package/dist/commands/catalog-data-platform-auth.d.ts +7 -0
- package/dist/commands/catalog-data-platform-auth.d.ts.map +1 -0
- package/dist/commands/catalog-data-platform-auth.js +47 -0
- package/dist/commands/catalog-data-platform-auth.js.map +1 -0
- package/dist/commands/catalog.d.ts.map +1 -1
- package/dist/commands/catalog.js +6 -3
- package/dist/commands/catalog.js.map +1 -1
- package/dist/commands/docs-mcp.d.ts +3 -3
- package/dist/commands/docs-mcp.js +3 -3
- package/dist/commands/platform-auth-finalization-args.d.ts +13 -0
- package/dist/commands/platform-auth-finalization-args.d.ts.map +1 -0
- package/dist/commands/platform-auth-finalization-args.js +29 -0
- package/dist/commands/platform-auth-finalization-args.js.map +1 -0
- package/dist/commands/platform-auth-migration-args.d.ts +71 -0
- package/dist/commands/platform-auth-migration-args.d.ts.map +1 -0
- package/dist/commands/platform-auth-migration-args.js +320 -0
- package/dist/commands/platform-auth-migration-args.js.map +1 -0
- package/dist/commands/platform-auth-migration-ops.d.ts +3 -0
- package/dist/commands/platform-auth-migration-ops.d.ts.map +1 -0
- package/dist/commands/platform-auth-migration-ops.js +369 -0
- package/dist/commands/platform-auth-migration-ops.js.map +1 -0
- package/dist/commands/project-setup.js +1 -1
- package/dist/commands/project-setup.js.map +1 -1
- package/dist/config.d.ts +4 -4
- package/dist/config.d.ts.map +1 -1
- package/dist/control-plane.d.ts +0 -11
- package/dist/control-plane.d.ts.map +1 -1
- package/dist/control-plane.js +1 -8
- package/dist/control-plane.js.map +1 -1
- package/dist/doctor.d.ts.map +1 -1
- package/dist/doctor.js +3 -5
- package/dist/doctor.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/curated/command-groups.d.ts.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/curated/command-groups.js +4 -0
- package/node_modules/@noodle-borg/agent-kit/dist/curated/command-groups.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/generated/surface.d.ts.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/generated/surface.js +1 -0
- package/node_modules/@noodle-borg/agent-kit/dist/generated/surface.js.map +1 -1
- package/node_modules/@noodle-borg/auth/dist/jwt-issuer.d.ts +2 -2
- package/node_modules/@noodle-borg/auth/dist/jwt-issuer.d.ts.map +1 -1
- package/node_modules/@noodle-borg/auth/dist/jwt-issuer.js +1 -1
- package/node_modules/@noodle-borg/auth/dist/verify.d.ts +1 -1
- package/node_modules/@noodle-borg/auth/dist/verify.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/auth/deploy-gate.d.ts +26 -0
- package/node_modules/@noodle-borg/service/dist/auth/deploy-gate.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/auth/deploy-gate.js +105 -1
- package/node_modules/@noodle-borg/service/dist/auth/deploy-gate.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/control-plane-auth-bootstrap.d.ts +25 -0
- package/node_modules/@noodle-borg/service/dist/control-plane-auth-bootstrap.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/control-plane-auth-bootstrap.js +99 -0
- package/node_modules/@noodle-borg/service/dist/control-plane-auth-bootstrap.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/index.d.ts +15 -0
- package/node_modules/@noodle-borg/service/dist/index.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/index.js +15 -0
- package/node_modules/@noodle-borg/service/dist/index.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/main.js +112 -19
- package/node_modules/@noodle-borg/service/dist/main.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/app.d.ts +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/app.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/app.js +9 -1
- package/node_modules/@noodle-borg/service/dist/oauth/app.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/authorization-initiation.d.ts +24 -0
- package/node_modules/@noodle-borg/service/dist/oauth/authorization-initiation.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/authorization-initiation.js +88 -0
- package/node_modules/@noodle-borg/service/dist/oauth/authorization-initiation.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/branding.d.ts +2 -0
- package/node_modules/@noodle-borg/service/dist/oauth/branding.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/branding.js +3 -2
- package/node_modules/@noodle-borg/service/dist/oauth/branding.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/consent-claims.d.ts +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/consent-claims.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/consent-token.d.ts +5 -0
- package/node_modules/@noodle-borg/service/dist/oauth/consent-token.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/consent-token.js +19 -0
- package/node_modules/@noodle-borg/service/dist/oauth/consent-token.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/consent.js +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/developer-grant-page.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/developer-grant-page.js +216 -28
- package/node_modules/@noodle-borg/service/dist/oauth/developer-grant-page.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/first-party-client.d.ts +13 -0
- package/node_modules/@noodle-borg/service/dist/oauth/first-party-client.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/first-party-client.js +62 -0
- package/node_modules/@noodle-borg/service/dist/oauth/first-party-client.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/metadata.d.ts +4 -0
- package/node_modules/@noodle-borg/service/dist/oauth/metadata.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/metadata.js +20 -0
- package/node_modules/@noodle-borg/service/dist/oauth/metadata.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/paths.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/paths.js +2 -0
- package/node_modules/@noodle-borg/service/dist/oauth/paths.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/platform-principal-guard.d.ts +15 -0
- package/node_modules/@noodle-borg/service/dist/oauth/platform-principal-guard.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/platform-principal-guard.js +58 -0
- package/node_modules/@noodle-borg/service/dist/oauth/platform-principal-guard.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/platform-principal-postgres.d.ts +8 -0
- package/node_modules/@noodle-borg/service/dist/oauth/platform-principal-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/platform-principal-postgres.js +49 -0
- package/node_modules/@noodle-borg/service/dist/oauth/platform-principal-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/postgres-time.d.ts +3 -0
- package/node_modules/@noodle-borg/service/dist/oauth/postgres-time.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/postgres-time.js +7 -0
- package/node_modules/@noodle-borg/service/dist/oauth/postgres-time.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/provider.d.ts +20 -25
- package/node_modules/@noodle-borg/service/dist/oauth/provider.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/provider.js +105 -196
- package/node_modules/@noodle-borg/service/dist/oauth/provider.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/service-bootstrap.d.ts +36 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-bootstrap.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-bootstrap.js +157 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-bootstrap.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/store-postgres-schema.d.ts +4 -0
- package/node_modules/@noodle-borg/service/dist/oauth/store-postgres-schema.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/store-postgres-schema.js +110 -0
- package/node_modules/@noodle-borg/service/dist/oauth/store-postgres-schema.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/store-postgres.d.ts +7 -4
- package/node_modules/@noodle-borg/service/dist/oauth/store-postgres.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/store-postgres.js +63 -120
- package/node_modules/@noodle-borg/service/dist/oauth/store-postgres.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/store.d.ts +19 -6
- package/node_modules/@noodle-borg/service/dist/oauth/store.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/store.js +24 -2
- package/node_modules/@noodle-borg/service/dist/oauth/store.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/tokens.d.ts +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/tokens.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/tokens.js +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/tokens.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-callback-availability.d.ts +4 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-callback-availability.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-callback-availability.js +8 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-callback-availability.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-callback-handler.d.ts +34 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-callback-handler.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-callback-handler.js +109 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-callback-handler.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-callback-support.d.ts +22 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-callback-support.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-callback-support.js +30 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-callback-support.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-consent.d.ts +21 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-consent.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-consent.js +56 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-consent.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-federation.d.ts +30 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-federation.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-federation.js +94 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-federation.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-human.d.ts +33 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-human.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-human.js +27 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-human.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-provider-choice.d.ts +13 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-provider-choice.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-provider-choice.js +63 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-provider-choice.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-rollout-store.d.ts +20 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-rollout-store.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-rollout-store.js +40 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-rollout-store.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/workos-events.d.ts +115 -0
- package/node_modules/@noodle-borg/service/dist/oauth/workos-events.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/workos-events.js +310 -0
- package/node_modules/@noodle-borg/service/dist/oauth/workos-events.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/workos.d.ts +65 -0
- package/node_modules/@noodle-borg/service/dist/oauth/workos.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/workos.js +85 -0
- package/node_modules/@noodle-borg/service/dist/oauth/workos.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/options.d.ts +11 -2
- package/node_modules/@noodle-borg/service/dist/options.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/personal-workspace.d.ts +2 -0
- package/node_modules/@noodle-borg/service/dist/personal-workspace.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/personal-workspace.js +8 -2
- package/node_modules/@noodle-borg/service/dist/personal-workspace.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/platform-auth-configuration.d.ts +67 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-configuration.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-configuration.js +54 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-configuration.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-frozen-candidate-postgres.d.ts +25 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-frozen-candidate-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-frozen-candidate-postgres.js +61 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-frozen-candidate-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-legacy-sources-postgres.d.ts +32 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-legacy-sources-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-legacy-sources-postgres.js +231 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-legacy-sources-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-local-postgres.d.ts +29 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-local-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-local-postgres.js +350 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-local-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-local-subjects-postgres.d.ts +50 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-local-subjects-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-local-subjects-postgres.js +239 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-local-subjects-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-paging.d.ts +66 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-paging.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-paging.js +77 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-paging.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-postgres.d.ts +40 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-postgres.js +355 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-progress-postgres.d.ts +41 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-progress-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-progress-postgres.js +230 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-progress-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-source-fence-postgres.d.ts +20 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-source-fence-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-source-fence-postgres.js +126 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-source-fence-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-sources.d.ts +8 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-sources.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-sources.js +86 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-inventory-sources.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-migration-postgres.d.ts +42 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-migration-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-migration-postgres.js +368 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-migration-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-migration-runs-postgres.d.ts +86 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-migration-runs-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-migration-runs-postgres.js +474 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-migration-runs-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-migration-schema.d.ts +17 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-migration-schema.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-migration-schema.js +435 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-migration-schema.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-migration.d.ts +202 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-migration.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-migration.js +313 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-migration.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-batches.d.ts +48 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-batches.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-batches.js +158 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-batches.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-effects.d.ts +43 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-effects.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-effects.js +92 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-effects.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-operation-postgres.d.ts +31 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-operation-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-operation-postgres.js +94 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-operation-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-ports.d.ts +102 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-ports.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-ports.js +2 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-ports.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-postgres.d.ts +17 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-postgres.js +367 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-remote-status.d.ts +10 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-remote-status.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-remote-status.js +37 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-remote-status.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-rollout.d.ts +36 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-rollout.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-rollout.js +156 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-rollout.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-schema.d.ts +4 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-schema.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-schema.js +162 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-schema.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-state-postgres.d.ts +92 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-state-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-state-postgres.js +271 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-state-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-state-support.d.ts +13 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-state-support.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-state-support.js +67 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-state-support.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-support.d.ts +15 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-support.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-support.js +47 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator-support.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator.d.ts +1569 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator.js +274 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-operator.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-remote-verification-postgres-support.d.ts +41 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-remote-verification-postgres-support.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-remote-verification-postgres-support.js +163 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-remote-verification-postgres-support.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-remote-verification-postgres.d.ts +34 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-remote-verification-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-remote-verification-postgres.js +274 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-remote-verification-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-remote-verification-schema.d.ts +3 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-remote-verification-schema.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-remote-verification-schema.js +120 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-remote-verification-schema.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-remote-verification.d.ts +79 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-remote-verification.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-remote-verification.js +88 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-remote-verification.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-rollback-guard.d.ts +6 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-rollback-guard.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-rollback-guard.js +38 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-rollback-guard.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-rollout-postgres.d.ts +61 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-rollout-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-rollout-postgres.js +292 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-rollout-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-rollout-readiness-postgres.d.ts +19 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-rollout-readiness-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-rollout-readiness-postgres.js +121 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-rollout-readiness-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-rollout-support.d.ts +119 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-rollout-support.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-rollout-support.js +194 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-rollout-support.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-runtime.d.ts +36 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-runtime.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-runtime.js +93 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-runtime.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-service-bootstrap.d.ts +32 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-service-bootstrap.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-service-bootstrap.js +68 -0
- package/node_modules/@noodle-borg/service/dist/platform-auth-service-bootstrap.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-maintenance.d.ts +36 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-maintenance.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-maintenance.js +92 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-maintenance.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-postgres.d.ts +23 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-postgres.js +231 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-schema-postgres.d.ts +13 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-schema-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-schema-postgres.js +399 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-schema-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync-enqueue.d.ts +18 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync-enqueue.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync-enqueue.js +25 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync-enqueue.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync-evidence-postgres.d.ts +15 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync-evidence-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync-evidence-postgres.js +74 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync-evidence-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync-postgres.d.ts +19 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync-postgres.js +249 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync-recovery-postgres.d.ts +34 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync-recovery-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync-recovery-postgres.js +275 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync-recovery-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync.d.ts +98 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync.js +179 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity-sync.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity.d.ts +110 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity.js +312 -0
- package/node_modules/@noodle-borg/service/dist/platform-identity.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/auth-discovery.d.ts +6 -0
- package/node_modules/@noodle-borg/service/dist/routes/auth-discovery.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/auth-discovery.js +36 -0
- package/node_modules/@noodle-borg/service/dist/routes/auth-discovery.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/billing-read.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/billing-read.js +3 -9
- package/node_modules/@noodle-borg/service/dist/routes/billing-read.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/billing-stripe.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/billing-stripe.js +3 -3
- package/node_modules/@noodle-borg/service/dist/routes/billing-stripe.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/github-run-claim.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/github-run-claim.js +3 -1
- package/node_modules/@noodle-borg/service/dist/routes/github-run-claim.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/platform-auth-migration-dispatch.d.ts +8 -0
- package/node_modules/@noodle-borg/service/dist/routes/platform-auth-migration-dispatch.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/platform-auth-migration-dispatch.js +40 -0
- package/node_modules/@noodle-borg/service/dist/routes/platform-auth-migration-dispatch.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/platform-auth-migration.d.ts +13 -0
- package/node_modules/@noodle-borg/service/dist/routes/platform-auth-migration.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/platform-auth-migration.js +158 -0
- package/node_modules/@noodle-borg/service/dist/routes/platform-auth-migration.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/serve-options.d.ts +21 -3
- package/node_modules/@noodle-borg/service/dist/serve-options.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/serve.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/serve.js +61 -146
- package/node_modules/@noodle-borg/service/dist/serve.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/service-resource-cleanup.d.ts +1 -0
- package/node_modules/@noodle-borg/service/dist/service-resource-cleanup.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/service-resource-cleanup.js +3 -0
- package/node_modules/@noodle-borg/service/dist/service-resource-cleanup.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/service.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/service.js +17 -29
- package/node_modules/@noodle-borg/service/dist/service.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/store/control-plane.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/store/control-plane.js +60 -19
- package/node_modules/@noodle-borg/service/dist/store/control-plane.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/store/postgres-control-plane.d.ts +1 -2
- package/node_modules/@noodle-borg/service/dist/store/postgres-control-plane.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/store/postgres-control-plane.js +0 -40
- package/node_modules/@noodle-borg/service/dist/store/postgres-control-plane.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/store/postgres-personal-workspace.d.ts +5 -0
- package/node_modules/@noodle-borg/service/dist/store/postgres-personal-workspace.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/store/postgres-personal-workspace.js +176 -0
- package/node_modules/@noodle-borg/service/dist/store/postgres-personal-workspace.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/store/postgres-schema.d.ts +2 -0
- package/node_modules/@noodle-borg/service/dist/store/postgres-schema.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/store/postgres-schema.js +43 -1
- package/node_modules/@noodle-borg/service/dist/store/postgres-schema.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/store/postgres-signup.js +2 -1
- package/node_modules/@noodle-borg/service/dist/store/postgres-signup.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/workos-directory.d.ts +71 -0
- package/node_modules/@noodle-borg/service/dist/workos-directory.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/workos-directory.js +175 -0
- package/node_modules/@noodle-borg/service/dist/workos-directory.js.map +1 -0
- package/node_modules/@noodle-borg/service/package.json +1 -0
- package/node_modules/@workos-inc/node/LICENSE +21 -0
- package/node_modules/@workos-inc/node/README.md +140 -0
- package/node_modules/@workos-inc/node/lib/factory-B8vTFojy.d.cts +9727 -0
- package/node_modules/@workos-inc/node/lib/factory-B8vTFojy.d.mts +9727 -0
- package/node_modules/@workos-inc/node/lib/factory-CoKXdPX2.cjs +8426 -0
- package/node_modules/@workos-inc/node/lib/factory-CoKXdPX2.cjs.map +1 -0
- package/node_modules/@workos-inc/node/lib/factory-MKPb5Egh.mjs +8241 -0
- package/node_modules/@workos-inc/node/lib/factory-MKPb5Egh.mjs.map +1 -0
- package/node_modules/@workos-inc/node/lib/index.cjs +449 -0
- package/node_modules/@workos-inc/node/lib/index.cjs.map +1 -0
- package/node_modules/@workos-inc/node/lib/index.d.cts +478 -0
- package/node_modules/@workos-inc/node/lib/index.d.mts +478 -0
- package/node_modules/@workos-inc/node/lib/index.mjs +394 -0
- package/node_modules/@workos-inc/node/lib/index.mjs.map +1 -0
- package/node_modules/@workos-inc/node/lib/index.worker.cjs +60 -0
- package/node_modules/@workos-inc/node/lib/index.worker.cjs.map +1 -0
- package/node_modules/@workos-inc/node/lib/index.worker.d.cts +16 -0
- package/node_modules/@workos-inc/node/lib/index.worker.d.mts +16 -0
- package/node_modules/@workos-inc/node/lib/index.worker.mjs +35 -0
- package/node_modules/@workos-inc/node/lib/index.worker.mjs.map +1 -0
- package/node_modules/@workos-inc/node/lib/webapi-BgpV54gi.mjs +3224 -0
- package/node_modules/@workos-inc/node/lib/webapi-BgpV54gi.mjs.map +1 -0
- package/node_modules/@workos-inc/node/lib/webapi-BzGFatFp.cjs +3271 -0
- package/node_modules/@workos-inc/node/lib/webapi-BzGFatFp.cjs.map +1 -0
- package/node_modules/@workos-inc/node/package.json +96 -0
- package/package.json +2 -1
|
@@ -0,0 +1,312 @@
|
|
|
1
|
+
import { randomUUID } from 'node:crypto';
|
|
2
|
+
export const PLATFORM_PRINCIPAL_BILLING_ISSUER = 'urn:noodleseed:principal:v1';
|
|
3
|
+
export const GOOGLE_PLATFORM_IDENTITY_ISSUER = 'https://accounts.google.com';
|
|
4
|
+
export class PlatformIdentityError extends Error {
|
|
5
|
+
code;
|
|
6
|
+
constructor(code) {
|
|
7
|
+
super(code.replaceAll('_', ' '));
|
|
8
|
+
this.name = 'PlatformIdentityError';
|
|
9
|
+
this.code = code;
|
|
10
|
+
}
|
|
11
|
+
}
|
|
12
|
+
/** Provider-neutral entry point used by federation and direct human-control-plane gates. */
|
|
13
|
+
export class PlatformPrincipalResolver {
|
|
14
|
+
#store;
|
|
15
|
+
constructor(store) {
|
|
16
|
+
this.#store = store;
|
|
17
|
+
}
|
|
18
|
+
resolve(input) {
|
|
19
|
+
return this.#store.resolve(input);
|
|
20
|
+
}
|
|
21
|
+
resolveLinked(input) {
|
|
22
|
+
return this.#store.resolveLinked(input);
|
|
23
|
+
}
|
|
24
|
+
hasVerifiedEmailEvidence(email) {
|
|
25
|
+
return this.#store.hasVerifiedEmailEvidence(email);
|
|
26
|
+
}
|
|
27
|
+
resolveExisting(principalId) {
|
|
28
|
+
return this.#store.resolveExisting(principalId);
|
|
29
|
+
}
|
|
30
|
+
assertActive(principalId) {
|
|
31
|
+
return this.#store.assertActive(principalId);
|
|
32
|
+
}
|
|
33
|
+
}
|
|
34
|
+
/**
|
|
35
|
+
* Test/local implementation of the identity store. Per-identity de-duplication plus a non-Google email
|
|
36
|
+
* queue make concurrent account creation deterministic while preserving the durable store's collision rules.
|
|
37
|
+
*/
|
|
38
|
+
export class InMemoryPlatformIdentityStore {
|
|
39
|
+
#principals = new Map();
|
|
40
|
+
#links = new Map();
|
|
41
|
+
#emails = new Map();
|
|
42
|
+
#activeEmailEvidence = new Map();
|
|
43
|
+
#outbox = new Map();
|
|
44
|
+
#locks = new Map();
|
|
45
|
+
#emailQueues = new Map();
|
|
46
|
+
#now;
|
|
47
|
+
constructor(options = {}) {
|
|
48
|
+
this.#now = options.now ?? (() => new Date());
|
|
49
|
+
}
|
|
50
|
+
resolve(input) {
|
|
51
|
+
const normalized = normalizeUpstreamIdentity(input);
|
|
52
|
+
const key = identityKey(normalized.provider, normalized.realm, normalized.subject);
|
|
53
|
+
const pending = this.#locks.get(key);
|
|
54
|
+
if (pending !== undefined)
|
|
55
|
+
return pending;
|
|
56
|
+
const email = normalizePlatformIdentityEmail(normalized.email);
|
|
57
|
+
const previous = normalized.provider === 'google' ? undefined : this.#emailQueues.get(email);
|
|
58
|
+
const operation = previous === undefined
|
|
59
|
+
? this.#resolve(normalized)
|
|
60
|
+
: previous.then(() => this.#resolve(normalized));
|
|
61
|
+
this.#locks.set(key, operation);
|
|
62
|
+
const queueTail = operation.then(() => undefined, () => undefined);
|
|
63
|
+
if (normalized.provider !== 'google')
|
|
64
|
+
this.#emailQueues.set(email, queueTail);
|
|
65
|
+
void operation.then(() => {
|
|
66
|
+
if (this.#locks.get(key) === operation)
|
|
67
|
+
this.#locks.delete(key);
|
|
68
|
+
if (this.#emailQueues.get(email) === queueTail)
|
|
69
|
+
this.#emailQueues.delete(email);
|
|
70
|
+
}, () => {
|
|
71
|
+
if (this.#locks.get(key) === operation)
|
|
72
|
+
this.#locks.delete(key);
|
|
73
|
+
if (this.#emailQueues.get(email) === queueTail)
|
|
74
|
+
this.#emailQueues.delete(email);
|
|
75
|
+
});
|
|
76
|
+
return operation;
|
|
77
|
+
}
|
|
78
|
+
async #resolve(input) {
|
|
79
|
+
if (!input.emailVerified)
|
|
80
|
+
throw new PlatformIdentityError('identity_email_unverified');
|
|
81
|
+
const key = identityKey(input.provider, input.realm, input.subject);
|
|
82
|
+
const linked = this.#links.get(key);
|
|
83
|
+
if (linked !== undefined) {
|
|
84
|
+
if (linked.disabledAt !== undefined)
|
|
85
|
+
throw new PlatformIdentityError('identity_link_disabled');
|
|
86
|
+
const principal = this.#requireActivePrincipal(linked.principalId);
|
|
87
|
+
const emailChanged = this.#addVerifiedEmail(principal.id, input);
|
|
88
|
+
if (emailChanged && input.provider === 'google') {
|
|
89
|
+
const transitionId = randomUUID();
|
|
90
|
+
this.#queueGoogleSync(principal, transitionId);
|
|
91
|
+
this.#queueVerifiedEmailChanged(principal, transitionId);
|
|
92
|
+
}
|
|
93
|
+
return { subject: principal.id, billingIdentity: principal.billingIdentity };
|
|
94
|
+
}
|
|
95
|
+
const email = normalizePlatformIdentityEmail(input.email);
|
|
96
|
+
if (input.provider !== 'google' && this.#hasVerifiedEmail(email)) {
|
|
97
|
+
throw new PlatformIdentityError('identity_link_required');
|
|
98
|
+
}
|
|
99
|
+
const principal = this.#createPrincipal(input);
|
|
100
|
+
await this.linkIdentity({ principalId: principal.id, ...input });
|
|
101
|
+
this.#addVerifiedEmail(principal.id, input);
|
|
102
|
+
if (input.provider === 'google')
|
|
103
|
+
this.#queueGoogleSync(principal, randomUUID());
|
|
104
|
+
this.#queueWorkOSExternalIdReconcile(principal, input);
|
|
105
|
+
return { subject: principal.id, billingIdentity: principal.billingIdentity };
|
|
106
|
+
}
|
|
107
|
+
async linkIdentity(input) {
|
|
108
|
+
const principal = this.#requirePrincipal(input.principalId);
|
|
109
|
+
const provider = validateIdentityPart('provider', input.provider);
|
|
110
|
+
const realm = validateIdentityPart('realm', input.realm);
|
|
111
|
+
const subject = validateIdentityPart('subject', input.subject);
|
|
112
|
+
const key = identityKey(provider, realm, subject);
|
|
113
|
+
const existing = this.#links.get(key);
|
|
114
|
+
if (existing !== undefined) {
|
|
115
|
+
if (existing.principalId !== principal.id) {
|
|
116
|
+
throw new PlatformIdentityError('identity_link_remap_forbidden');
|
|
117
|
+
}
|
|
118
|
+
return existing;
|
|
119
|
+
}
|
|
120
|
+
const duplicateProviderRealm = [...this.#links.values()].find((candidate) => candidate.principalId === principal.id &&
|
|
121
|
+
candidate.provider === provider &&
|
|
122
|
+
candidate.realm === realm);
|
|
123
|
+
if (duplicateProviderRealm !== undefined) {
|
|
124
|
+
throw new PlatformIdentityError('identity_link_remap_forbidden');
|
|
125
|
+
}
|
|
126
|
+
const created = {
|
|
127
|
+
principalId: principal.id,
|
|
128
|
+
provider,
|
|
129
|
+
realm,
|
|
130
|
+
subject,
|
|
131
|
+
createdAt: this.#now().toISOString(),
|
|
132
|
+
};
|
|
133
|
+
this.#links.set(key, created);
|
|
134
|
+
return created;
|
|
135
|
+
}
|
|
136
|
+
async suspendPrincipal(principalId) {
|
|
137
|
+
const principal = this.#requirePrincipal(principalId);
|
|
138
|
+
this.#principals.set(principalId, { ...principal, status: 'suspended' });
|
|
139
|
+
}
|
|
140
|
+
async assertActive(principalId) {
|
|
141
|
+
this.#requireActivePrincipal(principalId);
|
|
142
|
+
}
|
|
143
|
+
async resolveExisting(principalId) {
|
|
144
|
+
const principal = this.#principals.get(principalId);
|
|
145
|
+
if (principal === undefined)
|
|
146
|
+
return undefined;
|
|
147
|
+
if (principal.status !== 'active')
|
|
148
|
+
throw new PlatformIdentityError('principal_suspended');
|
|
149
|
+
return { subject: principal.id, billingIdentity: principal.billingIdentity };
|
|
150
|
+
}
|
|
151
|
+
async resolveLinked(input) {
|
|
152
|
+
if (!input.emailVerified)
|
|
153
|
+
throw new PlatformIdentityError('identity_email_unverified');
|
|
154
|
+
const key = identityKey(input.provider, input.realm, input.subject);
|
|
155
|
+
const linked = this.#links.get(key);
|
|
156
|
+
if (linked === undefined)
|
|
157
|
+
return undefined;
|
|
158
|
+
if (linked.disabledAt !== undefined)
|
|
159
|
+
throw new PlatformIdentityError('identity_link_disabled');
|
|
160
|
+
const principal = this.#requireActivePrincipal(linked.principalId);
|
|
161
|
+
return { subject: principal.id, billingIdentity: principal.billingIdentity };
|
|
162
|
+
}
|
|
163
|
+
hasVerifiedEmailEvidence(email) {
|
|
164
|
+
return Promise.resolve(this.#hasVerifiedEmail(normalizePlatformIdentityEmail(email)));
|
|
165
|
+
}
|
|
166
|
+
async disableIdentity(input) {
|
|
167
|
+
const key = identityKey(input.provider, input.realm, input.subject);
|
|
168
|
+
const link = this.#links.get(key);
|
|
169
|
+
if (link === undefined)
|
|
170
|
+
throw new Error('platform identity link is missing');
|
|
171
|
+
if (link.disabledAt === undefined) {
|
|
172
|
+
this.#links.set(key, { ...link, disabledAt: this.#now().toISOString() });
|
|
173
|
+
}
|
|
174
|
+
}
|
|
175
|
+
listPrincipals() {
|
|
176
|
+
return Promise.resolve([...this.#principals.values()]);
|
|
177
|
+
}
|
|
178
|
+
listIdentityLinks(principalId) {
|
|
179
|
+
return Promise.resolve([...this.#links.values()].filter((link) => link.principalId === principalId));
|
|
180
|
+
}
|
|
181
|
+
listVerifiedEmails(principalId) {
|
|
182
|
+
return Promise.resolve([...(this.#activeEmailEvidence.get(principalId) ?? new Map()).keys()].sort());
|
|
183
|
+
}
|
|
184
|
+
listSyncOutbox() {
|
|
185
|
+
return Promise.resolve([...this.#outbox.values()]);
|
|
186
|
+
}
|
|
187
|
+
#createPrincipal(input) {
|
|
188
|
+
const id = input.provider === 'google' ? input.subject : `usr_${randomUUID()}`;
|
|
189
|
+
const existing = this.#principals.get(id);
|
|
190
|
+
if (existing !== undefined)
|
|
191
|
+
return existing;
|
|
192
|
+
const principal = {
|
|
193
|
+
id,
|
|
194
|
+
status: 'active',
|
|
195
|
+
billingIdentity: input.provider === 'google'
|
|
196
|
+
? { identityIssuer: GOOGLE_PLATFORM_IDENTITY_ISSUER, subject: input.subject }
|
|
197
|
+
: { identityIssuer: PLATFORM_PRINCIPAL_BILLING_ISSUER, subject: id },
|
|
198
|
+
createdAt: this.#now().toISOString(),
|
|
199
|
+
};
|
|
200
|
+
this.#principals.set(id, principal);
|
|
201
|
+
return principal;
|
|
202
|
+
}
|
|
203
|
+
#requirePrincipal(id) {
|
|
204
|
+
const principal = this.#principals.get(id);
|
|
205
|
+
if (principal === undefined)
|
|
206
|
+
throw new Error('platform principal is missing');
|
|
207
|
+
return principal;
|
|
208
|
+
}
|
|
209
|
+
#requireActivePrincipal(id) {
|
|
210
|
+
const principal = this.#requirePrincipal(id);
|
|
211
|
+
if (principal.status !== 'active')
|
|
212
|
+
throw new PlatformIdentityError('principal_suspended');
|
|
213
|
+
return principal;
|
|
214
|
+
}
|
|
215
|
+
#hasVerifiedEmail(email) {
|
|
216
|
+
return [...this.#emails.values()].some((emails) => emails.has(email));
|
|
217
|
+
}
|
|
218
|
+
#addVerifiedEmail(principalId, identity) {
|
|
219
|
+
const evidence = this.#emails.get(principalId) ?? new Set();
|
|
220
|
+
const normalized = normalizePlatformIdentityEmail(identity.email);
|
|
221
|
+
evidence.add(normalized);
|
|
222
|
+
this.#emails.set(principalId, evidence);
|
|
223
|
+
const active = this.#activeEmailEvidence.get(principalId) ?? new Map();
|
|
224
|
+
const source = `${identity.provider}\u0000${identity.realm}`;
|
|
225
|
+
const previous = [...active].find(([, sources]) => sources.has(source))?.[0];
|
|
226
|
+
for (const [email, sources] of active) {
|
|
227
|
+
if (email === normalized || !sources.delete(source))
|
|
228
|
+
continue;
|
|
229
|
+
if (sources.size === 0)
|
|
230
|
+
active.delete(email);
|
|
231
|
+
}
|
|
232
|
+
const sources = active.get(normalized) ?? new Set();
|
|
233
|
+
sources.add(source);
|
|
234
|
+
active.set(normalized, sources);
|
|
235
|
+
this.#activeEmailEvidence.set(principalId, active);
|
|
236
|
+
return previous !== normalized;
|
|
237
|
+
}
|
|
238
|
+
#queueGoogleSync(principal, transitionId) {
|
|
239
|
+
if (!hasGoogleLink(this.#links, principal.id))
|
|
240
|
+
return;
|
|
241
|
+
const idempotencyKey = `google_identity_upsert:${principal.id}:${transitionId}`;
|
|
242
|
+
this.#outbox.set(idempotencyKey, {
|
|
243
|
+
idempotencyKey,
|
|
244
|
+
principalId: principal.id,
|
|
245
|
+
eventType: 'google_identity_upsert',
|
|
246
|
+
createdAt: this.#now().toISOString(),
|
|
247
|
+
});
|
|
248
|
+
}
|
|
249
|
+
#queueVerifiedEmailChanged(principal, transitionId) {
|
|
250
|
+
const idempotencyKey = `verified_email_changed:${principal.id}:${transitionId}`;
|
|
251
|
+
this.#outbox.set(idempotencyKey, {
|
|
252
|
+
idempotencyKey,
|
|
253
|
+
principalId: principal.id,
|
|
254
|
+
eventType: 'verified_email_changed',
|
|
255
|
+
createdAt: this.#now().toISOString(),
|
|
256
|
+
});
|
|
257
|
+
}
|
|
258
|
+
#queueWorkOSExternalIdReconcile(principal, identity) {
|
|
259
|
+
if (identity.provider !== 'workos')
|
|
260
|
+
return;
|
|
261
|
+
const idempotencyKey = `workos_external_id_reconcile:${principal.id}`;
|
|
262
|
+
this.#outbox.set(idempotencyKey, {
|
|
263
|
+
idempotencyKey,
|
|
264
|
+
principalId: principal.id,
|
|
265
|
+
eventType: 'workos_external_id_reconcile',
|
|
266
|
+
createdAt: this.#now().toISOString(),
|
|
267
|
+
});
|
|
268
|
+
}
|
|
269
|
+
}
|
|
270
|
+
/** Trim + lowercase only. Provider-specific aliases such as Gmail dots and plus tags are never rewritten. */
|
|
271
|
+
export function normalizePlatformIdentityEmail(value) {
|
|
272
|
+
const normalized = value.trim().toLowerCase();
|
|
273
|
+
if (normalized.length === 0 || normalized.length > 320 || !normalized.includes('@')) {
|
|
274
|
+
throw new Error('verified email must be a non-empty email address');
|
|
275
|
+
}
|
|
276
|
+
return normalized;
|
|
277
|
+
}
|
|
278
|
+
/**
|
|
279
|
+
* Bridges the additive control-plane field to billing during the migration. Old sessions and local gates keep
|
|
280
|
+
* their historical Google key; a resolved identity carries its immutable key instead of reconstructing one
|
|
281
|
+
* at each billing route.
|
|
282
|
+
*/
|
|
283
|
+
export function billingIdentityForControlPlaneIdentity(input) {
|
|
284
|
+
return (input.billingIdentity ?? {
|
|
285
|
+
identityIssuer: GOOGLE_PLATFORM_IDENTITY_ISSUER,
|
|
286
|
+
subject: input.subject,
|
|
287
|
+
});
|
|
288
|
+
}
|
|
289
|
+
function normalizeUpstreamIdentity(input) {
|
|
290
|
+
return {
|
|
291
|
+
provider: validateIdentityPart('provider', input.provider),
|
|
292
|
+
realm: validateIdentityPart('realm', input.realm),
|
|
293
|
+
subject: validateIdentityPart('subject', input.subject),
|
|
294
|
+
email: normalizePlatformIdentityEmail(input.email),
|
|
295
|
+
emailVerified: input.emailVerified,
|
|
296
|
+
};
|
|
297
|
+
}
|
|
298
|
+
function validateIdentityPart(name, value) {
|
|
299
|
+
const normalized = value.trim();
|
|
300
|
+
if (normalized.length === 0 || normalized.length > 512)
|
|
301
|
+
throw new Error(`${name} must be non-empty`);
|
|
302
|
+
return normalized;
|
|
303
|
+
}
|
|
304
|
+
function identityKey(provider, realm, subject) {
|
|
305
|
+
return JSON.stringify([provider, realm, subject]);
|
|
306
|
+
}
|
|
307
|
+
function hasGoogleLink(links, principalId) {
|
|
308
|
+
return [...links.values()].some((link) => link.principalId === principalId &&
|
|
309
|
+
link.provider === 'google' &&
|
|
310
|
+
link.disabledAt === undefined);
|
|
311
|
+
}
|
|
312
|
+
//# sourceMappingURL=platform-identity.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"platform-identity.js","sourceRoot":"","sources":["../src/platform-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,CAAC,MAAM,iCAAiC,GAAG,6BAA6B,CAAC;AAC/E,MAAM,CAAC,MAAM,+BAA+B,GAAG,6BAA6B,CAAC;AAkD7E,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACrC,IAAI,CAMa;IAE1B,YAAY,IAAmC;QAC7C,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAaD,4FAA4F;AAC5F,MAAM,OAAO,yBAAyB;IAC3B,MAAM,CAAwB;IAEvC,YAAY,KAA4B;QACtC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,OAAO,CAAC,KAA4B;QAClC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,aAAa,CAAC,KAA4B;QACxC,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED,wBAAwB,CAAC,KAAa;QACpC,OAAO,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC;IAED,eAAe,CAAC,WAAmB;QACjC,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;IAClD,CAAC;IAED,YAAY,CAAC,WAAmB;QAC9B,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;IAC/C,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,6BAA6B;IAC/B,WAAW,GAAG,IAAI,GAAG,EAA6B,CAAC;IACnD,MAAM,GAAG,IAAI,GAAG,EAAgC,CAAC;IACjD,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IACzC,oBAAoB,GAAG,IAAI,GAAG,EAAoC,CAAC;IACnE,OAAO,GAAG,IAAI,GAAG,EAA2C,CAAC;IAC7D,MAAM,GAAG,IAAI,GAAG,EAA6C,CAAC;IAC9D,YAAY,GAAG,IAAI,GAAG,EAAyB,CAAC;IAChD,IAAI,CAAa;IAE1B,YAAY,UAAyC,EAAE;QACrD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,CAAC,KAA4B;QAClC,MAAM,UAAU,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,WAAW,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;QACnF,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;QAC1C,MAAM,KAAK,GAAG,8BAA8B,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7F,MAAM,SAAS,GACb,QAAQ,KAAK,SAAS;YACpB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC3B,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAC9B,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QACF,IAAI,UAAU,CAAC,QAAQ,KAAK,QAAQ;YAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC9E,KAAK,SAAS,CAAC,IAAI,CACjB,GAAG,EAAE;YACH,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS;gBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,SAAS;gBAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClF,CAAC,EACD,GAAG,EAAE;YACH,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS;gBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,SAAS;gBAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClF,CAAC,CACF,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAA4B;QACzC,IAAI,CAAC,KAAK,CAAC,aAAa;YAAE,MAAM,IAAI,qBAAqB,CAAC,2BAA2B,CAAC,CAAC;QACvF,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;gBACjC,MAAM,IAAI,qBAAqB,CAAC,wBAAwB,CAAC,CAAC;YAC5D,MAAM,SAAS,GAAG,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACnE,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YACjE,IAAI,YAAY,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAChD,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;gBAClC,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;gBAC/C,IAAI,CAAC,0BAA0B,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YAC3D,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,eAAe,EAAE,SAAS,CAAC,eAAe,EAAE,CAAC;QAC/E,CAAC;QAED,MAAM,KAAK,GAAG,8BAA8B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1D,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,qBAAqB,CAAC,wBAAwB,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC5C,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ;YAAE,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC,+BAA+B,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACvD,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,eAAe,EAAE,SAAS,CAAC,eAAe,EAAE,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAKlB;QACC,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,oBAAoB,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,oBAAoB,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,CAAC,EAAE,EAAE,CAAC;gBAC1C,MAAM,IAAI,qBAAqB,CAAC,+BAA+B,CAAC,CAAC;YACnE,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,sBAAsB,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAC3D,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,WAAW,KAAK,SAAS,CAAC,EAAE;YACtC,SAAS,CAAC,QAAQ,KAAK,QAAQ;YAC/B,SAAS,CAAC,KAAK,KAAK,KAAK,CAC5B,CAAC;QACF,IAAI,sBAAsB,KAAK,SAAS,EAAE,CAAC;YACzC,MAAM,IAAI,qBAAqB,CAAC,+BAA+B,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,OAAO,GAAyB;YACpC,WAAW,EAAE,SAAS,CAAC,EAAE;YACzB,QAAQ;YACR,KAAK;YACL,OAAO;YACP,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC9B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,WAAmB;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,GAAG,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,WAAmB;QACpC,IAAI,CAAC,uBAAuB,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,WAAmB;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC9C,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;QAC1F,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,eAAe,EAAE,SAAS,CAAC,eAAe,EAAE,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAA4B;QAC9C,IAAI,CAAC,KAAK,CAAC,aAAa;YAAE,MAAM,IAAI,qBAAqB,CAAC,2BAA2B,CAAC,CAAC;QACvF,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;YAAE,MAAM,IAAI,qBAAqB,CAAC,wBAAwB,CAAC,CAAC;QAC/F,MAAM,SAAS,GAAG,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACnE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,eAAe,EAAE,SAAS,CAAC,eAAe,EAAE,CAAC;IAC/E,CAAC;IAED,wBAAwB,CAAC,KAAa;QACpC,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,8BAA8B,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxF,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,KAIrB;QACC,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC7E,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,cAAc;QACZ,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,iBAAiB,CAAC,WAAmB;QACnC,OAAO,OAAO,CAAC,OAAO,CACpB,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,KAAK,WAAW,CAAC,CAC7E,CAAC;IACJ,CAAC;IAED,kBAAkB,CAAC,WAAmB;QACpC,OAAO,OAAO,CAAC,OAAO,CACpB,CAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAC7E,CAAC;IACJ,CAAC;IAED,cAAc;QACZ,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,gBAAgB,CAAC,KAA4B;QAC3C,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,UAAU,EAAE,EAAE,CAAC;QAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,SAAS,GAAsB;YACnC,EAAE;YACF,MAAM,EAAE,QAAQ;YAChB,eAAe,EACb,KAAK,CAAC,QAAQ,KAAK,QAAQ;gBACzB,CAAC,CAAC,EAAE,cAAc,EAAE,+BAA+B,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;gBAC7E,CAAC,CAAC,EAAE,cAAc,EAAE,iCAAiC,EAAE,OAAO,EAAE,EAAE,EAAE;YACxE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,iBAAiB,CAAC,EAAU;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3C,IAAI,SAAS,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC9E,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,uBAAuB,CAAC,EAAU;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAC7C,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;QAC1F,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,iBAAiB,CAAC,KAAa;QAC7B,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,iBAAiB,CAAC,WAAmB,EAAE,QAA+B;QACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QACpE,MAAM,UAAU,GAAG,8BAA8B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClE,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,GAAG,EAAuB,CAAC;QAC5F,MAAM,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,SAAS,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC7D,MAAM,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7E,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,EAAE,CAAC;YACtC,IAAI,KAAK,KAAK,UAAU,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;gBAAE,SAAS;YAC9D,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;gBAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACnD,OAAO,QAAQ,KAAK,UAAU,CAAC;IACjC,CAAC;IAED,gBAAgB,CAAC,SAA4B,EAAE,YAAoB;QACjE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;YAAE,OAAO;QACtD,MAAM,cAAc,GAAG,0BAA0B,SAAS,CAAC,EAAE,IAAI,YAAY,EAAE,CAAC;QAChF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE;YAC/B,cAAc;YACd,WAAW,EAAE,SAAS,CAAC,EAAE;YACzB,SAAS,EAAE,wBAAwB;YACnC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC,CAAC;IACL,CAAC;IAED,0BAA0B,CAAC,SAA4B,EAAE,YAAoB;QAC3E,MAAM,cAAc,GAAG,0BAA0B,SAAS,CAAC,EAAE,IAAI,YAAY,EAAE,CAAC;QAChF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE;YAC/B,cAAc;YACd,WAAW,EAAE,SAAS,CAAC,EAAE;YACzB,SAAS,EAAE,wBAAwB;YACnC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC,CAAC;IACL,CAAC;IAED,+BAA+B,CAC7B,SAA4B,EAC5B,QAA+B;QAE/B,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO;QAC3C,MAAM,cAAc,GAAG,gCAAgC,SAAS,CAAC,EAAE,EAAE,CAAC;QACtE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE;YAC/B,cAAc;YACd,WAAW,EAAE,SAAS,CAAC,EAAE;YACzB,SAAS,EAAE,8BAA8B;YACzC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC,CAAC;IACL,CAAC;CACF;AAED,6GAA6G;AAC7G,MAAM,UAAU,8BAA8B,CAAC,KAAa;IAC1D,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sCAAsC,CAAC,KAGtD;IACC,OAAO,CACL,KAAK,CAAC,eAAe,IAAI;QACvB,cAAc,EAAE,+BAA+B;QAC/C,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CACF,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,KAA4B;IAC7D,OAAO;QACL,QAAQ,EAAE,oBAAoB,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC;QAC1D,KAAK,EAAE,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;QACjD,OAAO,EAAE,oBAAoB,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC;QACvD,KAAK,EAAE,8BAA8B,CAAC,KAAK,CAAC,KAAK,CAAC;QAClD,aAAa,EAAE,KAAK,CAAC,aAAa;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAY,EAAE,KAAa;IACvD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,GAAG;QACpD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC;IAC/C,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,KAAa,EAAE,OAAe;IACnE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,aAAa,CACpB,KAAgD,EAChD,WAAmB;IAEnB,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAC7B,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,WAAW,KAAK,WAAW;QAChC,IAAI,CAAC,QAAQ,KAAK,QAAQ;QAC1B,IAAI,CAAC,UAAU,KAAK,SAAS,CAChC,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,6 @@
|
|
|
1
|
+
import type { IncomingMessage, ServerResponse } from 'node:http';
|
|
2
|
+
import { type TlsPosture } from '@noodle-borg/transport-http';
|
|
3
|
+
import type { ServiceOptions } from '../options.js';
|
|
4
|
+
/** Provider-neutral discovery and its shipped Google-named compatibility route share exact bytes. */
|
|
5
|
+
export declare function dispatchAuthDiscoveryRoute(req: IncomingMessage, res: ServerResponse, url: URL, options: ServiceOptions, tls: TlsPosture): boolean;
|
|
6
|
+
//# sourceMappingURL=auth-discovery.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"auth-discovery.d.ts","sourceRoot":"","sources":["../../src/routes/auth-discovery.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAAsC,KAAK,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAElG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,qGAAqG;AACrG,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,cAAc,EACvB,GAAG,EAAE,UAAU,GACd,OAAO,CAiCT"}
|
|
@@ -0,0 +1,36 @@
|
|
|
1
|
+
import { applySecurityHeaders, enforceHttps } from '@noodle-borg/transport-http';
|
|
2
|
+
import { baseFromRequest, normalizeServiceBase, sendJson } from '../http-util.js';
|
|
3
|
+
/** Provider-neutral discovery and its shipped Google-named compatibility route share exact bytes. */
|
|
4
|
+
export function dispatchAuthDiscoveryRoute(req, res, url, options, tls) {
|
|
5
|
+
if (req.method !== 'GET' || (url.pathname !== '/v1/auth' && url.pathname !== '/v1/auth/google')) {
|
|
6
|
+
return false;
|
|
7
|
+
}
|
|
8
|
+
applySecurityHeaders(res, tls);
|
|
9
|
+
if (enforceHttps(req, res, tls))
|
|
10
|
+
return true;
|
|
11
|
+
const base = options.publicBaseUrl ?? baseFromRequest(req, tls);
|
|
12
|
+
const controlPlaneResource = normalizeServiceBase(options.publicBaseUrl ?? options.authServerIssuer ?? base);
|
|
13
|
+
const selfHostedOAuthLogin = options.authServerApp !== undefined &&
|
|
14
|
+
options.authServerIssuer !== undefined &&
|
|
15
|
+
options.verifyOwnerToken !== undefined;
|
|
16
|
+
sendJson(res, 200, {
|
|
17
|
+
ok: true,
|
|
18
|
+
service: base,
|
|
19
|
+
googleClientId: options.controlPlaneGoogleClientId ?? null,
|
|
20
|
+
...(selfHostedOAuthLogin
|
|
21
|
+
? {
|
|
22
|
+
authorizationServerIssuer: options.authServerIssuer,
|
|
23
|
+
controlPlaneResource,
|
|
24
|
+
}
|
|
25
|
+
: {}),
|
|
26
|
+
allowedEmailDomain: options.controlPlaneAllowedEmailDomain ?? '@noodleseed.com',
|
|
27
|
+
signupMode: options.controlPlaneSignupMode ?? 'restricted',
|
|
28
|
+
authType: selfHostedOAuthLogin
|
|
29
|
+
? 'noodle-oauth-pkce'
|
|
30
|
+
: options.controlPlaneGoogleClientId
|
|
31
|
+
? 'google-oauth-pkce'
|
|
32
|
+
: 'open-dev',
|
|
33
|
+
});
|
|
34
|
+
return true;
|
|
35
|
+
}
|
|
36
|
+
//# sourceMappingURL=auth-discovery.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"auth-discovery.js","sourceRoot":"","sources":["../../src/routes/auth-discovery.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAmB,MAAM,6BAA6B,CAAC;AAClG,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAGlF,qGAAqG;AACrG,MAAM,UAAU,0BAA0B,CACxC,GAAoB,EACpB,GAAmB,EACnB,GAAQ,EACR,OAAuB,EACvB,GAAe;IAEf,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,UAAU,IAAI,GAAG,CAAC,QAAQ,KAAK,iBAAiB,CAAC,EAAE,CAAC;QAChG,OAAO,KAAK,CAAC;IACf,CAAC;IACD,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/B,IAAI,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,IAAI,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChE,MAAM,oBAAoB,GAAG,oBAAoB,CAC/C,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAC1D,CAAC;IACF,MAAM,oBAAoB,GACxB,OAAO,CAAC,aAAa,KAAK,SAAS;QACnC,OAAO,CAAC,gBAAgB,KAAK,SAAS;QACtC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC;IACzC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;QACjB,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,IAAI;QACb,cAAc,EAAE,OAAO,CAAC,0BAA0B,IAAI,IAAI;QAC1D,GAAG,CAAC,oBAAoB;YACtB,CAAC,CAAC;gBACE,yBAAyB,EAAE,OAAO,CAAC,gBAAgB;gBACnD,oBAAoB;aACrB;YACH,CAAC,CAAC,EAAE,CAAC;QACP,kBAAkB,EAAE,OAAO,CAAC,8BAA8B,IAAI,iBAAiB;QAC/E,UAAU,EAAE,OAAO,CAAC,sBAAsB,IAAI,YAAY;QAC1D,QAAQ,EAAE,oBAAoB;YAC5B,CAAC,CAAC,mBAAmB;YACrB,CAAC,CAAC,OAAO,CAAC,0BAA0B;gBAClC,CAAC,CAAC,mBAAmB;gBACrB,CAAC,CAAC,UAAU;KACjB,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"billing-read.d.ts","sourceRoot":"","sources":["../../src/routes/billing-read.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAEV,2CAA2C,EAE5C,MAAM,iDAAiD,CAAC;
|
|
1
|
+
{"version":3,"file":"billing-read.d.ts","sourceRoot":"","sources":["../../src/routes/billing-read.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAEV,2CAA2C,EAE5C,MAAM,iDAAiD,CAAC;AAazD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAIzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAYrD,UAAU,eAAe;IACvB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;IAC5B,QAAQ,CAAC,2CAA2C,CAAC,EAAE,2CAA2C,CAAC;IACnG,QAAQ,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;CACtD;AAED,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,IAAI,CAAC,CAwCf;AAED,wBAAsB,2BAA2B,CAC/C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,gBAAgB,EAAE,MAAM,EACxB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,IAAI,CAAC,CAuFf;AAED,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,IAAI,CAAC,CAmCf"}
|
|
@@ -1,7 +1,7 @@
|
|
|
1
|
-
import { GOOGLE_CONTROL_PLANE_ISSUER, } from '../billing/model.js';
|
|
2
1
|
import { readActiveHostedAppFootprint } from '../billing/production-footprint.js';
|
|
3
2
|
import { BillingAccountResponseSchema, BillingAccountsListResponseSchema, OrgBillingResponseSchema, } from '../billing/read-contract.js';
|
|
4
3
|
import { sendJson } from '../http-util.js';
|
|
4
|
+
import { billingIdentityForControlPlaneIdentity } from '../platform-identity.js';
|
|
5
5
|
import { authorizeControlPlane, authorizeTenantControl } from './control-plane.js';
|
|
6
6
|
const LEGACY_ENFORCEMENT = { state: 'legacy_unchanged' };
|
|
7
7
|
const ACCOUNT_METERING_NOT_STARTED = {
|
|
@@ -15,10 +15,7 @@ export async function handleBillingAccountList(req, res, deps) {
|
|
|
15
15
|
const identity = await authorizeControlPlane(req, res, deps.gate, { requireIdentity: true });
|
|
16
16
|
if (identity === false)
|
|
17
17
|
return;
|
|
18
|
-
const billingIdentity =
|
|
19
|
-
identityIssuer: GOOGLE_CONTROL_PLANE_ISSUER,
|
|
20
|
-
subject: identity.subject,
|
|
21
|
-
};
|
|
18
|
+
const billingIdentity = billingIdentityForControlPlaneIdentity(identity);
|
|
22
19
|
const [memberships, defaultAccount] = await Promise.all([
|
|
23
20
|
deps.controlPlane.listBillingAccountMemberships(billingIdentity),
|
|
24
21
|
deps.controlPlane.getDefaultBillingAccount(billingIdentity),
|
|
@@ -51,10 +48,7 @@ export async function handleBillingAccountInspect(req, res, billingAccountId, de
|
|
|
51
48
|
const identity = await authorizeControlPlane(req, res, deps.gate, { requireIdentity: true });
|
|
52
49
|
if (identity === false)
|
|
53
50
|
return;
|
|
54
|
-
const billingIdentity =
|
|
55
|
-
identityIssuer: GOOGLE_CONTROL_PLANE_ISSUER,
|
|
56
|
-
subject: identity.subject,
|
|
57
|
-
};
|
|
51
|
+
const billingIdentity = billingIdentityForControlPlaneIdentity(identity);
|
|
58
52
|
const memberships = await deps.controlPlane.listBillingAccountMemberships(billingIdentity);
|
|
59
53
|
const membership = memberships.find((candidate) => candidate.billingAccountId === billingAccountId);
|
|
60
54
|
if (membership === undefined)
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"billing-read.js","sourceRoot":"","sources":["../../src/routes/billing-read.ts"],"names":[],"mappings":"AAOA,OAAO,EAGL,2BAA2B,GAC5B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AAClF,OAAO,EAEL,4BAA4B,EAG5B,iCAAiC,EAEjC,wBAAwB,GACzB,MAAM,6BAA6B,CAAC;AAIrC,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAG3C,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAEnF,MAAM,kBAAkB,GAAG,EAAE,KAAK,EAAE,kBAAkB,EAAW,CAAC;AAClE,MAAM,4BAA4B,GAAG;IACnC,KAAK,EAAE,aAAa;IACpB,YAAY,EAAE,IAAI;IAClB,iBAAiB,EAAE,IAAI;IACvB,OAAO,EAAE,IAAI;CACL,CAAC;AACX,MAAM,wBAAwB,GAAG,EAAE,KAAK,EAAE,aAAa,EAAW,CAAC;AAYnE,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,GAAoB,EACpB,GAAmB,EACnB,IAAqB;IAErB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7F,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO;IAC/B,MAAM,eAAe,GAAG;QACtB,cAAc,EAAE,2BAA2B;QAC3C,OAAO,EAAE,QAAQ,CAAC,OAAO;KAC1B,CAAC;IACF,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACtD,IAAI,CAAC,YAAY,CAAC,6BAA6B,CAAC,eAAe,CAAC;QAChE,IAAI,CAAC,YAAY,CAAC,wBAAwB,CAAC,eAAe,CAAC;KAC5D,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE;QACnC,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACnD,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,UAAU,CAAC,gBAAgB,CAAC;YAChE,IAAI,CAAC,YAAY,CAAC,4BAA4B,CAAC,UAAU,CAAC,gBAAgB,CAAC;YAC3E,IAAI,CAAC,YAAY,CAAC,6BAA6B,CAAC,UAAU,CAAC,gBAAgB,CAAC;SAC7E,CAAC,CAAC;QACH,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QACvF,MAAM,UAAU,GAAG,MAAM,kCAAkC,CACzD,IAAI,EACJ,UAAU,CAAC,gBAAgB,EAC3B,QAAQ,CACT,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAC/C,IAAI,EACJ,UAAU,CAAC,gBAAgB,EAC3B,UAAU,CACX,CAAC;QACF,OAAO,cAAc,CAAC;YACpB,OAAO;YACP,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,SAAS,EAAE,cAAc,EAAE,EAAE,KAAK,OAAO,CAAC,EAAE;YAC5C,QAAQ;YACR,uBAAuB,EAAE,KAAK,CAAC,MAAM;YACrC,WAAW,EAAE,eAAe,CAAC,UAAU,CAAC;YACxC,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC;SACpC,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;IACF,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5F,MAAM,QAAQ,GAAgC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC;IAC/E,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,iCAAiC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,GAAoB,EACpB,GAAmB,EACnB,gBAAwB,EACxB,IAAqB;IAErB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7F,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO;IAC/B,MAAM,eAAe,GAAG;QACtB,cAAc,EAAE,2BAA2B;QAC3C,OAAO,EAAE,QAAQ,CAAC,OAAO;KAC1B,CAAC;IACF,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,6BAA6B,CAAC,eAAe,CAAC,CAAC;IAC3F,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CACjC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,gBAAgB,KAAK,gBAAgB,CAC/D,CAAC;IACF,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAEjE,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC9E,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,gBAAgB,CAAC;QACrD,IAAI,CAAC,YAAY,CAAC,wBAAwB,CAAC,eAAe,CAAC;QAC3D,IAAI,CAAC,YAAY,CAAC,4BAA4B,CAAC,gBAAgB,CAAC;QAChE,IAAI,CAAC,YAAY,CAAC,6BAA6B,CAAC,gBAAgB,CAAC;QACjE,IAAI,CAAC,YAAY,CAAC,8CAA8C,CAAC,gBAAgB,CAAC;KACnF,CAAC,CAAC;IACH,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACxB,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,4BAA4B;YAClC,KAAK,EAAE,qCAAqC;SAC7C,CAAC,CAAC;IACL,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC1F,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,EAAE,YAAY,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAChF,MAAM,UAAU,GAAG,MAAM,kCAAkC,CAAC,IAAI,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IAC9F,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnD,0BAA0B,CAAC,IAAI,EAAE,gBAAgB,EAAE,UAAU,CAAC;QAC9D,gCAAgC,CAC9B,IAAI,CAAC,QAAQ,EACb,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EACjC,KAAK,EACL,UAAU,CACX;KACF,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,QAAQ,GAA2B;QACvC,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACJ,OAAO,EAAE,cAAc,CAAC;gBACtB,OAAO;gBACP,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,SAAS,EAAE,cAAc,EAAE,EAAE,KAAK,OAAO,CAAC,EAAE;gBAC5C,QAAQ;gBACR,uBAAuB,EAAE,KAAK,CAAC,MAAM;gBACrC,WAAW;gBACX,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC;aACpC,CAAC;YACF,WAAW,EACT,QAAQ,KAAK,SAAS;gBACpB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC;oBACE,UAAU,EAAE,QAAQ,CAAC,EAAE;oBACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,WAAW,EAAE;oBAChE,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;oBAC/C,aAAa,EAAE,QAAQ,CAAC,aAAa;oBACrC,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;oBAC/C,YAAY,EAAE,QAAQ,CAAC,YAAY;iBACpC;YACP,mBAAmB,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACxC,GAAG,EAAE,IAAI,CAAC,OAAO;gBACjB,WAAW,EAAE,IAAI,CAAC,OAAO;gBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,sBAAsB,EAAE,gBAAgB,CACtC,gBAAgB,EAChB,IAAI,CAAC,wBAAwB,EAC7B,aAAa,CACd;gBACD,sBAAsB,EAAE,gBAAgB,CACtC,gBAAgB,EAChB,IAAI,CAAC,wBAAwB,EAC7B,aAAa,CACd;aACF,CAAC,CAAC;YACH,WAAW;YACX,QAAQ;YACR,cAAc;YACd,QAAQ,EACN,IAAI,CAAC,oBAAoB,KAAK,SAAS;gBACrC,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE;gBAC1B,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE;YAChD,eAAe,EAAE,aAAa,CAAC,SAAS,CAAC;SAC1C;KACF,CAAC;IACF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,4BAA4B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,GAAoB,EACpB,GAAmB,EACnB,GAAW,EACX,IAAqB;IAErB,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IAC3F,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO;IAC/B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC5D,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC3D,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC5C,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC;QAC1D,IAAI,CAAC,YAAY,CAAC,4BAA4B,CAAC,IAAI,CAAC,gBAAgB,CAAC;KACtE,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,EAAE,YAAY,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAChF,IAAI,OAAO,EAAE,KAAK,KAAK,QAAQ,IAAI,QAAQ,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC5E,OAAO,sBAAsB,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,gCAAgC,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC/E,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnD,8BAA8B,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC;QACrE,wBAAwB,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC;KAChD,CAAC,CAAC;IACH,MAAM,QAAQ,GAAuB;QACnC,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACJ,GAAG;YACH,KAAK,EAAE,QAAQ;YACf,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ,CAAC,QAAQ;gBACvB,OAAO,EAAE,QAAQ,CAAC,WAAW;gBAC7B,aAAa,EAAE,QAAQ,CAAC,aAAa;aACtC;YACD,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,WAAW,EAAE,eAAe,CAAC,UAAU,CAAC;YACxC,QAAQ;YACR,cAAc;SACf;KACF,CAAC;IACF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,wBAAwB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,cAAc,CAAC,KAQvB;IACC,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE;QACpB,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW;QACtC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK;QAC1B,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;QAClC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,IAAI,EACF,KAAK,CAAC,QAAQ,KAAK,SAAS;YAC1B,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE;QAC5E,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,SAAiB,EACjB,YAAoB,EACpB,aAAkC;IAKlC,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;IACnE,IAAI,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,gBAAgB,EAAE,YAAY,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,aAAa,CACpB,SAA4D;IAE5D,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAW,CAAC;IACzE,OAAO;QACL,KAAK,EAAE,UAAU;QACjB,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,0BAA0B,EAAE,SAAS,CAAC,iBAAiB;QACvD,2BAA2B,EAAE,SAAS,CAAC,kBAAkB;QACzD,+BAA+B,EAAE,SAAS,CAAC,kBAAkB;QAC7D,KAAK,EAAE,SAAS,CAAC,2BAA2B;YAC1C,CAAC,CAAC;gBACE,KAAK,EAAE,oBAAoB;gBAC3B,YAAY,EAAE,EAAE;gBAChB,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,IAAI;aAChB;YACH,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE;KAC9B,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,IAAI,CAAC,CAAC,CAAC,CAAE,KAAgB,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1F,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,IAAqB,EACrB,gBAAwB,EACxB,UAA8D;IAE9D,IAAI,yBAAyB,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1C,OAAO;YACL,KAAK,EAAE,WAAW;YAClB,IAAI,EAAE,eAAe;YACrB,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,UAAU,CAAC,KAAK,CAAC,cAAc;YAC7C,oBAAoB,EAAE,UAAU,CAAC,KAAK,CAAC,iBAAiB;YACxD,mBAAmB,EAAE,UAAU,CAAC,KAAK,CAAC,gBAAgB;YACtD,iBAAiB,EAAE,UAAU,CAAC,KAAK,CAAC,sBAAsB;YAC1D,aAAa,EAAE,UAAU,CAAC,KAAK,CAAC,aAAa;YAC7C,WAAW,EAAE,UAAU,CAAC,KAAK,CAAC,WAAW;YACzC,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,SAAS;YACrC,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO;SAClC,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,EAAE,KAAK,KAAK,aAAa;QAAE,OAAO,0BAA0B,EAAE,CAAC;IAC7E,IAAI,IAAI,CAAC,mBAAmB,KAAK,IAAI;QAAE,OAAO,4BAA4B,CAAC;IAC3E,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC;YAC3D,gBAAgB;YAChB,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE;SACvD,CAAC,CAAC;QACH,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,0BAA0B,EAAE,CAAC;IACtC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,IAAqB,EACrB,GAAW,EACX,UAA8D;IAE9D,IAAI,8BAA8B,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/C,OAAO;YACL,KAAK,EAAE,WAAW;YAClB,IAAI,EAAE,eAAe;YACrB,QAAQ,EAAE,UAAU;YACpB,kBAAkB,EAAE,UAAU,CAAC,KAAK,CAAC,cAAc;YACnD,0BAA0B,EAAE,UAAU,CAAC,KAAK,CAAC,iBAAiB;YAC9D,yBAAyB,EAAE,UAAU,CAAC,KAAK,CAAC,gBAAgB;YAC5D,aAAa,EAAE,UAAU,CAAC,KAAK,CAAC,aAAa;YAC7C,WAAW,EAAE,UAAU,CAAC,KAAK,CAAC,WAAW;YACzC,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,SAAS;YACrC,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO;SAClC,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,EAAE,KAAK,KAAK,aAAa;QAAE,OAAO,sBAAsB,EAAE,CAAC;IACzE,IAAI,IAAI,CAAC,mBAAmB,KAAK,IAAI;QAAE,OAAO,wBAAwB,CAAC;IACvE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,2BAA2B,CAAC;YAChE,GAAG;YACH,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE;SACvD,CAAC,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,sBAAsB,EAAE,CAAC;IAClC,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAuB;IAC/C,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QAChC,OAAO;YACL,KAAK,EAAE,WAAW;YAClB,IAAI,EAAE,QAAQ;YACd,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,iBAAiB,EAAE,IAAI;SACxB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,KAAK,EAAE,aAAa;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,aAAa,EAAE,IAAI;QACnB,QAAQ,EAAE,aAAa;QACvB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,iBAAiB,EAAE,IAAI;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAuB;IAC3C,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QAChC,OAAO;YACL,KAAK,EAAE,WAAW;YAClB,IAAI,EAAE,QAAQ;YACd,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC;IACJ,CAAC;IACD,OAAO;QACL,KAAK,EAAE,aAAa;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,aAAa,EAAE,IAAI;QACnB,QAAQ,EAAE,aAAa;QACvB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,QAAoD;IAEpD,IAAI,QAAQ,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QACnC,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;YAC/B,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE;YAC7D,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,gCAAgC,CAC7C,QAAwB,EACxB,aAAgC,EAChC,KAAoB,EACpB,UAA8D;IAE9D,IAAI,yBAAyB,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1C,OAAO;YACL,KAAK,EAAE,WAAW;YAClB,MAAM,EAAE,UAAU,CAAC,cAAc,CAAC,MAAM;YACxC,KAAK,EAAE,UAAU,CAAC,cAAc,CAAC,KAAK;SACvC,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,EAAE,KAAK,KAAK,aAAa,EAAE,CAAC;QACxC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;IACD,OAAO,0BAA0B,CAAC,QAAQ,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC3C,QAAwB,EACxB,GAAW,EACX,KAAa,EACb,UAA8D;IAE9D,IAAI,8BAA8B,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/C,OAAO;YACL,KAAK,EAAE,WAAW;YAClB,MAAM,EAAE,UAAU,CAAC,cAAc,CAAC,MAAM;YACxC,KAAK,EAAE,UAAU,CAAC,cAAc,CAAC,KAAK;SACvC,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,EAAE,KAAK,KAAK,aAAa,EAAE,CAAC;QACxC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;IACD,OAAO,0BAA0B,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,QAAwB,EACxB,aAAgC,EAChC,KAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAC9E,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kCAAkC,CAC/C,IAAqB,EACrB,gBAAwB,EACxB,QAA+C;IAE/C,MAAM,KAAK,GAAG,IAAI,CAAC,2CAA2C,CAAC;IAC/D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,iBAA0B,EAAE,gBAAgB,EAAE,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,kCAAkC,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACnF,IACE,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,iBAAiB;YAC3C,UAAU,CAAC,KAAK,CAAC,gBAAgB,KAAK,gBAAgB;YACtD,CAAC,yBAAyB,CAAC,UAAU,CAAC;gBACpC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,EACzF,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC;QACtE,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC;IACtE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gCAAgC,CAC7C,IAAqB,EACrB,GAAW,EACX,QAAmC;IAEnC,MAAM,KAAK,GAAG,IAAI,CAAC,2CAA2C,CAAC;IAC/D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,cAAuB,EAAE,GAAG,EAAE,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,kCAAkC,CAC/D,KAAK,EACL,eAAe,CAAC,QAAQ,CAAC,CAC1B,CAAC;QACF,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;YAC7E,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC;QACtE,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC;IACtE,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACtB,UAA8D;IAE9D,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;QACpE,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IACD,IAAI,UAAU,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACpC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;IAC1D,CAAC;IACD,IAAI,UAAU,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACxD,CAAC;IACD,IAAI,UAAU,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IACrF,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;AAClC,CAAC;AAYD,SAAS,yBAAyB,CAChC,UAA8D;IAE9D,OAAO,CACL,UAAU,EAAE,KAAK,KAAK,QAAQ;QAC9B,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,iBAAiB;QAC3C,iBAAiB,IAAI,UAAU,CAChC,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CACrC,UAA8D;IAE9D,OAAO,UAAU,EAAE,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC;AACpF,CAAC;AAED,SAAS,eAAe,CACtB,QAA+C;IAE/C,OAAO,QAAQ,KAAK,SAAS;QAC3B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC;YACE,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,eAAe,EAAE,QAAQ,CAAC,eAAe;SAC1C,CAAC;AACR,CAAC;AAED,SAAS,mBAAmB,CAC1B,IAAsC,EACtC,KAAuC;IAEvC,OAAO,CACL,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;QACpC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAC9B,IAAI,CAAC,eAAe,KAAK,KAAK,CAAC,eAAe,CAC/C,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B;IACjC,OAAO;QACL,KAAK,EAAE,aAAa;QACpB,MAAM,EAAE,qBAAqB;QAC7B,aAAa,EAAE,IAAI;QACnB,QAAQ,EAAE,aAAa;QACvB,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,IAAI;QACjB,SAAS,EAAE,IAAI;QACf,iBAAiB,EAAE,IAAI;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB;IAC7B,OAAO;QACL,KAAK,EAAE,aAAa;QACpB,MAAM,EAAE,qBAAqB;QAC7B,aAAa,EAAE,IAAI;QACnB,QAAQ,EAAE,aAAa;QACvB,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,IAAI;QACjB,SAAS,EAAE,IAAI;KAChB,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAmB;IACjD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;QACjB,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,2BAA2B;QACjC,KAAK,EAAE,2BAA2B;KACnC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAmB;IACjD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;QACjB,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,0BAA0B;QAChC,KAAK,EAAE,0CAA0C;KAClD,CAAC,CAAC;AACL,CAAC"}
|
|
1
|
+
{"version":3,"file":"billing-read.js","sourceRoot":"","sources":["../../src/routes/billing-read.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AAClF,OAAO,EAEL,4BAA4B,EAG5B,iCAAiC,EAEjC,wBAAwB,GACzB,MAAM,6BAA6B,CAAC;AAIrC,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,sCAAsC,EAAE,MAAM,yBAAyB,CAAC;AAGjF,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAEnF,MAAM,kBAAkB,GAAG,EAAE,KAAK,EAAE,kBAAkB,EAAW,CAAC;AAClE,MAAM,4BAA4B,GAAG;IACnC,KAAK,EAAE,aAAa;IACpB,YAAY,EAAE,IAAI;IAClB,iBAAiB,EAAE,IAAI;IACvB,OAAO,EAAE,IAAI;CACL,CAAC;AACX,MAAM,wBAAwB,GAAG,EAAE,KAAK,EAAE,aAAa,EAAW,CAAC;AAYnE,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,GAAoB,EACpB,GAAmB,EACnB,IAAqB;IAErB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7F,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO;IAC/B,MAAM,eAAe,GAAG,sCAAsC,CAAC,QAAQ,CAAC,CAAC;IACzE,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACtD,IAAI,CAAC,YAAY,CAAC,6BAA6B,CAAC,eAAe,CAAC;QAChE,IAAI,CAAC,YAAY,CAAC,wBAAwB,CAAC,eAAe,CAAC;KAC5D,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE;QACnC,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACnD,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,UAAU,CAAC,gBAAgB,CAAC;YAChE,IAAI,CAAC,YAAY,CAAC,4BAA4B,CAAC,UAAU,CAAC,gBAAgB,CAAC;YAC3E,IAAI,CAAC,YAAY,CAAC,6BAA6B,CAAC,UAAU,CAAC,gBAAgB,CAAC;SAC7E,CAAC,CAAC;QACH,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QACvF,MAAM,UAAU,GAAG,MAAM,kCAAkC,CACzD,IAAI,EACJ,UAAU,CAAC,gBAAgB,EAC3B,QAAQ,CACT,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAC/C,IAAI,EACJ,UAAU,CAAC,gBAAgB,EAC3B,UAAU,CACX,CAAC;QACF,OAAO,cAAc,CAAC;YACpB,OAAO;YACP,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,SAAS,EAAE,cAAc,EAAE,EAAE,KAAK,OAAO,CAAC,EAAE;YAC5C,QAAQ;YACR,uBAAuB,EAAE,KAAK,CAAC,MAAM;YACrC,WAAW,EAAE,eAAe,CAAC,UAAU,CAAC;YACxC,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC;SACpC,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;IACF,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5F,MAAM,QAAQ,GAAgC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC;IAC/E,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,iCAAiC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,GAAoB,EACpB,GAAmB,EACnB,gBAAwB,EACxB,IAAqB;IAErB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7F,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO;IAC/B,MAAM,eAAe,GAAG,sCAAsC,CAAC,QAAQ,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,6BAA6B,CAAC,eAAe,CAAC,CAAC;IAC3F,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CACjC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,gBAAgB,KAAK,gBAAgB,CAC/D,CAAC;IACF,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAEjE,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC9E,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,gBAAgB,CAAC;QACrD,IAAI,CAAC,YAAY,CAAC,wBAAwB,CAAC,eAAe,CAAC;QAC3D,IAAI,CAAC,YAAY,CAAC,4BAA4B,CAAC,gBAAgB,CAAC;QAChE,IAAI,CAAC,YAAY,CAAC,6BAA6B,CAAC,gBAAgB,CAAC;QACjE,IAAI,CAAC,YAAY,CAAC,8CAA8C,CAAC,gBAAgB,CAAC;KACnF,CAAC,CAAC;IACH,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACxB,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,4BAA4B;YAClC,KAAK,EAAE,qCAAqC;SAC7C,CAAC,CAAC;IACL,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC1F,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,EAAE,YAAY,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAChF,MAAM,UAAU,GAAG,MAAM,kCAAkC,CAAC,IAAI,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IAC9F,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnD,0BAA0B,CAAC,IAAI,EAAE,gBAAgB,EAAE,UAAU,CAAC;QAC9D,gCAAgC,CAC9B,IAAI,CAAC,QAAQ,EACb,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EACjC,KAAK,EACL,UAAU,CACX;KACF,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,QAAQ,GAA2B;QACvC,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACJ,OAAO,EAAE,cAAc,CAAC;gBACtB,OAAO;gBACP,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,SAAS,EAAE,cAAc,EAAE,EAAE,KAAK,OAAO,CAAC,EAAE;gBAC5C,QAAQ;gBACR,uBAAuB,EAAE,KAAK,CAAC,MAAM;gBACrC,WAAW;gBACX,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC;aACpC,CAAC;YACF,WAAW,EACT,QAAQ,KAAK,SAAS;gBACpB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC;oBACE,UAAU,EAAE,QAAQ,CAAC,EAAE;oBACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,WAAW,EAAE;oBAChE,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;oBAC/C,aAAa,EAAE,QAAQ,CAAC,aAAa;oBACrC,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;oBAC/C,YAAY,EAAE,QAAQ,CAAC,YAAY;iBACpC;YACP,mBAAmB,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACxC,GAAG,EAAE,IAAI,CAAC,OAAO;gBACjB,WAAW,EAAE,IAAI,CAAC,OAAO;gBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,sBAAsB,EAAE,gBAAgB,CACtC,gBAAgB,EAChB,IAAI,CAAC,wBAAwB,EAC7B,aAAa,CACd;gBACD,sBAAsB,EAAE,gBAAgB,CACtC,gBAAgB,EAChB,IAAI,CAAC,wBAAwB,EAC7B,aAAa,CACd;aACF,CAAC,CAAC;YACH,WAAW;YACX,QAAQ;YACR,cAAc;YACd,QAAQ,EACN,IAAI,CAAC,oBAAoB,KAAK,SAAS;gBACrC,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE;gBAC1B,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE;YAChD,eAAe,EAAE,aAAa,CAAC,SAAS,CAAC;SAC1C;KACF,CAAC;IACF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,4BAA4B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,GAAoB,EACpB,GAAmB,EACnB,GAAW,EACX,IAAqB;IAErB,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IAC3F,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO;IAC/B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC5D,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC3D,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC5C,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC;QAC1D,IAAI,CAAC,YAAY,CAAC,4BAA4B,CAAC,IAAI,CAAC,gBAAgB,CAAC;KACtE,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,EAAE,YAAY,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAChF,IAAI,OAAO,EAAE,KAAK,KAAK,QAAQ,IAAI,QAAQ,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC5E,OAAO,sBAAsB,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,gCAAgC,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC/E,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnD,8BAA8B,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC;QACrE,wBAAwB,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC;KAChD,CAAC,CAAC;IACH,MAAM,QAAQ,GAAuB;QACnC,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACJ,GAAG;YACH,KAAK,EAAE,QAAQ;YACf,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ,CAAC,QAAQ;gBACvB,OAAO,EAAE,QAAQ,CAAC,WAAW;gBAC7B,aAAa,EAAE,QAAQ,CAAC,aAAa;aACtC;YACD,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,WAAW,EAAE,eAAe,CAAC,UAAU,CAAC;YACxC,QAAQ;YACR,cAAc;SACf;KACF,CAAC;IACF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,wBAAwB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,cAAc,CAAC,KAQvB;IACC,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE;QACpB,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW;QACtC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK;QAC1B,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;QAClC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,IAAI,EACF,KAAK,CAAC,QAAQ,KAAK,SAAS;YAC1B,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE;QAC5E,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,SAAiB,EACjB,YAAoB,EACpB,aAAkC;IAKlC,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;IACnE,IAAI,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,gBAAgB,EAAE,YAAY,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,aAAa,CACpB,SAA4D;IAE5D,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAW,CAAC;IACzE,OAAO;QACL,KAAK,EAAE,UAAU;QACjB,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,0BAA0B,EAAE,SAAS,CAAC,iBAAiB;QACvD,2BAA2B,EAAE,SAAS,CAAC,kBAAkB;QACzD,+BAA+B,EAAE,SAAS,CAAC,kBAAkB;QAC7D,KAAK,EAAE,SAAS,CAAC,2BAA2B;YAC1C,CAAC,CAAC;gBACE,KAAK,EAAE,oBAAoB;gBAC3B,YAAY,EAAE,EAAE;gBAChB,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,IAAI;aAChB;YACH,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE;KAC9B,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,IAAI,CAAC,CAAC,CAAC,CAAE,KAAgB,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1F,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,IAAqB,EACrB,gBAAwB,EACxB,UAA8D;IAE9D,IAAI,yBAAyB,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1C,OAAO;YACL,KAAK,EAAE,WAAW;YAClB,IAAI,EAAE,eAAe;YACrB,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,UAAU,CAAC,KAAK,CAAC,cAAc;YAC7C,oBAAoB,EAAE,UAAU,CAAC,KAAK,CAAC,iBAAiB;YACxD,mBAAmB,EAAE,UAAU,CAAC,KAAK,CAAC,gBAAgB;YACtD,iBAAiB,EAAE,UAAU,CAAC,KAAK,CAAC,sBAAsB;YAC1D,aAAa,EAAE,UAAU,CAAC,KAAK,CAAC,aAAa;YAC7C,WAAW,EAAE,UAAU,CAAC,KAAK,CAAC,WAAW;YACzC,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,SAAS;YACrC,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO;SAClC,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,EAAE,KAAK,KAAK,aAAa;QAAE,OAAO,0BAA0B,EAAE,CAAC;IAC7E,IAAI,IAAI,CAAC,mBAAmB,KAAK,IAAI;QAAE,OAAO,4BAA4B,CAAC;IAC3E,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC;YAC3D,gBAAgB;YAChB,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE;SACvD,CAAC,CAAC;QACH,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,0BAA0B,EAAE,CAAC;IACtC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,IAAqB,EACrB,GAAW,EACX,UAA8D;IAE9D,IAAI,8BAA8B,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/C,OAAO;YACL,KAAK,EAAE,WAAW;YAClB,IAAI,EAAE,eAAe;YACrB,QAAQ,EAAE,UAAU;YACpB,kBAAkB,EAAE,UAAU,CAAC,KAAK,CAAC,cAAc;YACnD,0BAA0B,EAAE,UAAU,CAAC,KAAK,CAAC,iBAAiB;YAC9D,yBAAyB,EAAE,UAAU,CAAC,KAAK,CAAC,gBAAgB;YAC5D,aAAa,EAAE,UAAU,CAAC,KAAK,CAAC,aAAa;YAC7C,WAAW,EAAE,UAAU,CAAC,KAAK,CAAC,WAAW;YACzC,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,SAAS;YACrC,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO;SAClC,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,EAAE,KAAK,KAAK,aAAa;QAAE,OAAO,sBAAsB,EAAE,CAAC;IACzE,IAAI,IAAI,CAAC,mBAAmB,KAAK,IAAI;QAAE,OAAO,wBAAwB,CAAC;IACvE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,2BAA2B,CAAC;YAChE,GAAG;YACH,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE;SACvD,CAAC,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,sBAAsB,EAAE,CAAC;IAClC,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAuB;IAC/C,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QAChC,OAAO;YACL,KAAK,EAAE,WAAW;YAClB,IAAI,EAAE,QAAQ;YACd,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,iBAAiB,EAAE,IAAI;SACxB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,KAAK,EAAE,aAAa;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,aAAa,EAAE,IAAI;QACnB,QAAQ,EAAE,aAAa;QACvB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,iBAAiB,EAAE,IAAI;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAuB;IAC3C,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QAChC,OAAO;YACL,KAAK,EAAE,WAAW;YAClB,IAAI,EAAE,QAAQ;YACd,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC;IACJ,CAAC;IACD,OAAO;QACL,KAAK,EAAE,aAAa;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,aAAa,EAAE,IAAI;QACnB,QAAQ,EAAE,aAAa;QACvB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,QAAoD;IAEpD,IAAI,QAAQ,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QACnC,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;YAC/B,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE;YAC7D,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,gCAAgC,CAC7C,QAAwB,EACxB,aAAgC,EAChC,KAAoB,EACpB,UAA8D;IAE9D,IAAI,yBAAyB,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1C,OAAO;YACL,KAAK,EAAE,WAAW;YAClB,MAAM,EAAE,UAAU,CAAC,cAAc,CAAC,MAAM;YACxC,KAAK,EAAE,UAAU,CAAC,cAAc,CAAC,KAAK;SACvC,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,EAAE,KAAK,KAAK,aAAa,EAAE,CAAC;QACxC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;IACD,OAAO,0BAA0B,CAAC,QAAQ,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,8BAA8B,CAC3C,QAAwB,EACxB,GAAW,EACX,KAAa,EACb,UAA8D;IAE9D,IAAI,8BAA8B,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/C,OAAO;YACL,KAAK,EAAE,WAAW;YAClB,MAAM,EAAE,UAAU,CAAC,cAAc,CAAC,MAAM;YACxC,KAAK,EAAE,UAAU,CAAC,cAAc,CAAC,KAAK;SACvC,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,EAAE,KAAK,KAAK,aAAa,EAAE,CAAC;QACxC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;IACD,OAAO,0BAA0B,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,QAAwB,EACxB,aAAgC,EAChC,KAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAC9E,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kCAAkC,CAC/C,IAAqB,EACrB,gBAAwB,EACxB,QAA+C;IAE/C,MAAM,KAAK,GAAG,IAAI,CAAC,2CAA2C,CAAC;IAC/D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,iBAA0B,EAAE,gBAAgB,EAAE,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,kCAAkC,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACnF,IACE,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,iBAAiB;YAC3C,UAAU,CAAC,KAAK,CAAC,gBAAgB,KAAK,gBAAgB;YACtD,CAAC,yBAAyB,CAAC,UAAU,CAAC;gBACpC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,EACzF,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC;QACtE,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC;IACtE,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gCAAgC,CAC7C,IAAqB,EACrB,GAAW,EACX,QAAmC;IAEnC,MAAM,KAAK,GAAG,IAAI,CAAC,2CAA2C,CAAC;IAC/D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,cAAuB,EAAE,GAAG,EAAE,CAAC;IACrD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,kCAAkC,CAC/D,KAAK,EACL,eAAe,CAAC,QAAQ,CAAC,CAC1B,CAAC;QACF,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;YAC7E,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC;QACtE,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC;IACtE,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACtB,UAA8D;IAE9D,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;QACpE,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IACD,IAAI,UAAU,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACpC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;IAC1D,CAAC;IACD,IAAI,UAAU,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACxD,CAAC;IACD,IAAI,UAAU,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IACrF,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;AAClC,CAAC;AAYD,SAAS,yBAAyB,CAChC,UAA8D;IAE9D,OAAO,CACL,UAAU,EAAE,KAAK,KAAK,QAAQ;QAC9B,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,iBAAiB;QAC3C,iBAAiB,IAAI,UAAU,CAChC,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CACrC,UAA8D;IAE9D,OAAO,UAAU,EAAE,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC;AACpF,CAAC;AAED,SAAS,eAAe,CACtB,QAA+C;IAE/C,OAAO,QAAQ,KAAK,SAAS;QAC3B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC;YACE,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,eAAe,EAAE,QAAQ,CAAC,eAAe;SAC1C,CAAC;AACR,CAAC;AAED,SAAS,mBAAmB,CAC1B,IAAsC,EACtC,KAAuC;IAEvC,OAAO,CACL,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;QACpC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAC9B,IAAI,CAAC,eAAe,KAAK,KAAK,CAAC,eAAe,CAC/C,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B;IACjC,OAAO;QACL,KAAK,EAAE,aAAa;QACpB,MAAM,EAAE,qBAAqB;QAC7B,aAAa,EAAE,IAAI;QACnB,QAAQ,EAAE,aAAa;QACvB,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,IAAI;QACjB,SAAS,EAAE,IAAI;QACf,iBAAiB,EAAE,IAAI;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB;IAC7B,OAAO;QACL,KAAK,EAAE,aAAa;QACpB,MAAM,EAAE,qBAAqB;QAC7B,aAAa,EAAE,IAAI;QACnB,QAAQ,EAAE,aAAa;QACvB,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,IAAI;QACjB,SAAS,EAAE,IAAI;KAChB,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAmB;IACjD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;QACjB,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,2BAA2B;QACjC,KAAK,EAAE,2BAA2B;KACnC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAmB;IACjD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;QACjB,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,0BAA0B;QAChC,KAAK,EAAE,0CAA0C;KAClD,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"billing-stripe.d.ts","sourceRoot":"","sources":["../../src/routes/billing-stripe.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;
|
|
1
|
+
{"version":3,"file":"billing-stripe.d.ts","sourceRoot":"","sources":["../../src/routes/billing-stripe.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE7D,OAAO,EAEL,KAAK,oBAAoB,EAE1B,MAAM,8BAA8B,CAAC;AAGtC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAGnD,wBAAsB,2BAA2B,CAC/C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE;IACL,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;IACvC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,GACA,OAAO,CAAC,IAAI,CAAC,CAwCf;AAED,wBAAsB,yBAAyB,CAC7C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE;IACL,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;IACvC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;CAC3B,GACA,OAAO,CAAC,IAAI,CAAC,CAqBf;AAED,wBAAsB,0BAA0B,CAC9C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE;IAAE,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC1E,OAAO,CAAC,IAAI,CAAC,CAgBf"}
|
|
@@ -1,7 +1,7 @@
|
|
|
1
|
-
import { GOOGLE_CONTROL_PLANE_ISSUER } from '../billing/model.js';
|
|
2
1
|
import { BillingStripeCheckoutRequestSchema } from '../billing/stripe-contract.js';
|
|
3
2
|
import { BillingStripeRequestError, BillingStripeWebhookVerificationError, } from '../billing/stripe-service.js';
|
|
4
3
|
import { readJsonBody, readRawBody, sendJson } from '../http-util.js';
|
|
4
|
+
import { billingIdentityForControlPlaneIdentity } from '../platform-identity.js';
|
|
5
5
|
import { authorizeControlPlane } from './control-plane.js';
|
|
6
6
|
export async function handleBillingStripeCheckout(req, res, input) {
|
|
7
7
|
const identity = await authorizeControlPlane(req, res, input.gate, { requireIdentity: true });
|
|
@@ -22,7 +22,7 @@ export async function handleBillingStripeCheckout(req, res, input) {
|
|
|
22
22
|
try {
|
|
23
23
|
const result = await input.service.createCheckout({
|
|
24
24
|
billingAccountId: input.billingAccountId,
|
|
25
|
-
identity:
|
|
25
|
+
identity: billingIdentityForControlPlaneIdentity(identity),
|
|
26
26
|
...request,
|
|
27
27
|
});
|
|
28
28
|
const status = result.outcome === 'created' || result.outcome === 'replaced' ? 201 : 200;
|
|
@@ -54,7 +54,7 @@ export async function handleBillingStripePortal(req, res, input) {
|
|
|
54
54
|
try {
|
|
55
55
|
const result = await input.service.createPortal({
|
|
56
56
|
billingAccountId: input.billingAccountId,
|
|
57
|
-
identity:
|
|
57
|
+
identity: billingIdentityForControlPlaneIdentity(identity),
|
|
58
58
|
});
|
|
59
59
|
await input.audit.emit({
|
|
60
60
|
eventType: 'billing.portal.created',
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"billing-stripe.js","sourceRoot":"","sources":["../../src/routes/billing-stripe.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,
|
|
1
|
+
{"version":3,"file":"billing-stripe.js","sourceRoot":"","sources":["../../src/routes/billing-stripe.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kCAAkC,EAAE,MAAM,+BAA+B,CAAC;AACnF,OAAO,EACL,yBAAyB,EAEzB,qCAAqC,GACtC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,EAAE,sCAAsC,EAAE,MAAM,yBAAyB,CAAC;AAEjF,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,GAAoB,EACpB,GAAmB,EACnB,KAMC;IAED,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9F,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO;IAC/B,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,kCAAkC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACxB,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,0BAA0B;YAChC,KAAK,EAAE,8DAA8D;SACtE,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;YAChD,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,QAAQ,EAAE,sCAAsC,CAAC,QAAQ,CAAC;YAC1D,GAAG,OAAO;SACX,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QACzF,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;YACrB,SAAS,EAAE,0BAA0B;YACrC,GAAG,EAAE,UAAU;YACf,YAAY,EAAE,QAAQ,CAAC,OAAO;YAC9B,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;YACvE,QAAQ,EAAE,OAAO;YACjB,MAAM;YACN,OAAO,EAAE;gBACP,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;gBACxC,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB;SACF,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,sBAAsB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,GAAoB,EACpB,GAAmB,EACnB,KAKC;IAED,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9F,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;YAC9C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,QAAQ,EAAE,sCAAsC,CAAC,QAAQ,CAAC;SAC3D,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;YACrB,SAAS,EAAE,wBAAwB;YACnC,GAAG,EAAE,UAAU;YACf,YAAY,EAAE,QAAQ,CAAC,OAAO;YAC9B,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;YACvE,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE;SACtD,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,sBAAsB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,GAAoB,EACpB,GAAmB,EACnB,KAA2E;IAE3E,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAClD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;IACxF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC1E,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,qCAAqC,EAAE,CAAC;YAC3D,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;IACpF,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAmB,EAAE,KAAc;IACjE,IAAI,KAAK,YAAY,yBAAyB,EAAE,CAAC;QAC/C,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACnF,OAAO;IACT,CAAC;IACD,MAAM,KAAK,CAAC;AACd,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"github-run-claim.d.ts","sourceRoot":"","sources":["../../src/routes/github-run-claim.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAKhF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAE/E,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE;IACL,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,qBAAqB,CAAC;IAChD,QAAQ,CAAC,SAAS,EAAE,eAAe,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,eAAe,EAAE,eAAe,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC,eAAe,CAAC,CAAC;CACnD,GACA,OAAO,CAAC,IAAI,CAAC,
|
|
1
|
+
{"version":3,"file":"github-run-claim.d.ts","sourceRoot":"","sources":["../../src/routes/github-run-claim.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAKhF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAE/E,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE;IACL,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,qBAAqB,CAAC;IAChD,QAAQ,CAAC,SAAS,EAAE,eAAe,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,eAAe,EAAE,eAAe,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC,eAAe,CAAC,CAAC;CACnD,GACA,OAAO,CAAC,IAAI,CAAC,CA4Ff"}
|
|
@@ -13,7 +13,9 @@ export async function handleGithubRunClaim(req, res, input) {
|
|
|
13
13
|
const identity = await verifier
|
|
14
14
|
.verify(auth[1], input.builder.audience)
|
|
15
15
|
.catch(() => undefined);
|
|
16
|
-
|
|
16
|
+
// Google service-account email is mutable metadata. The audience is verified by the
|
|
17
|
+
// verifier and this route authorizes only the configured immutable Google subject.
|
|
18
|
+
if (identity?.subject !== input.builder.subject) {
|
|
17
19
|
return sendJson(res, 403, { error: 'forbidden' });
|
|
18
20
|
}
|
|
19
21
|
if (input.githubApp?.webhookSecret === undefined || input.githubAppClient === undefined) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"github-run-claim.js","sourceRoot":"","sources":["../../src/routes/github-run-claim.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mCAAmC,EAAE,MAAM,2BAA2B,CAAC;AAChF,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAI3C,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAoB,EACpB,GAAmB,EACnB,KAOC;IAED,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,8CAA8C,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3E,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;IAEhF,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,IAAI,IAAI,mCAAmC,EAAE,CAAC;IACrF,MAAM,QAAQ,GAAG,MAAM,QAAQ;SAC5B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAW,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;SACjD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC1B,IAAI,QAAQ,EAAE,
|
|
1
|
+
{"version":3,"file":"github-run-claim.js","sourceRoot":"","sources":["../../src/routes/github-run-claim.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mCAAmC,EAAE,MAAM,2BAA2B,CAAC;AAChF,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAI3C,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAoB,EACpB,GAAmB,EACnB,KAOC;IAED,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,8CAA8C,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3E,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;IAEhF,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,IAAI,IAAI,mCAAmC,EAAE,CAAC;IACrF,MAAM,QAAQ,GAAG,MAAM,QAAQ;SAC5B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAW,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;SACjD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC1B,oFAAoF;IACpF,mFAAmF;IACnF,IAAI,QAAQ,EAAE,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAChD,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,KAAK,CAAC,SAAS,EAAE,aAAa,KAAK,SAAS,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACxF,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/D,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IACzE,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACpC,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACxB,KAAK,EAAE,sCAAsC;YAC7C,IAAI,EAAE,aAAa;SACpB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACxB,KAAK,EAAE,qCAAqC,GAAG,CAAC,MAAM,GAAG;YACzD,IAAI,EAAE,mBAAmB;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,6BAA6B,CAC1E,GAAG,CAAC,kBAAkB,CACvB,CAAC;IACF,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACxB,KAAK,EAAE,mCAAmC;YAC1C,IAAI,EAAE,0BAA0B;SACjC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,UAAU,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,IAAI,UAAU,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;QAC7E,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACxB,KAAK,EAAE,kDAAkD;YACzD,IAAI,EAAE,gCAAgC;SACvC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAChG,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACxB,KAAK,EAAE,qCAAqC,UAAU,CAAC,IAAI,IAAI,SAAS,GAAG;YAC3E,IAAI,EAAE,mBAAmB;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,iBAAiB,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,6BAA6B,CACjF,UAAU,CAAC,cAAc,CAC1B,CAAC;IACF,MAAM,QAAQ,GAAG,YAAY,CAC3B;QACE,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK;QAC9B,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO;QAC9B,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO;QAC9B,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO;QAC9B,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;KACrB,EACD,wBAAwB,CAAC,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC,CACxD,CAAC;IAEF,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;QACxB,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACJ,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK;YAC9B,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO;YAC9B,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO;YAC9B,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO;YAC9B,GAAG,EAAE,UAAU,CAAC,MAAM;YACtB,QAAQ;YACR,YAAY,EAAE,UAAU,CAAC,QAAQ;YACjC,GAAG,CAAC,UAAU,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS;YACtC,uBAAuB,EAAE,iBAAiB,CAAC,KAAK;YAChD,GAAG,CAAC,iBAAiB,CAAC,SAAS,KAAK,SAAS;gBAC3C,CAAC,CAAC,EAAE,gCAAgC,EAAE,iBAAiB,CAAC,SAAS,EAAE;gBACnE,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -0,0 +1,8 @@
|
|
|
1
|
+
import type { IncomingMessage, ServerResponse } from 'node:http';
|
|
2
|
+
import { type Logger, type TlsPosture } from '@noodle-borg/transport-http';
|
|
3
|
+
import type { PlatformAuthMigrationRouteDeps } from './platform-auth-migration.js';
|
|
4
|
+
export declare function dispatchPlatformAuthMigrationRoutes(req: IncomingMessage, res: ServerResponse, url: URL, deps: PlatformAuthMigrationRouteDeps & {
|
|
5
|
+
readonly tls: TlsPosture;
|
|
6
|
+
readonly logger: Logger;
|
|
7
|
+
}): boolean;
|
|
8
|
+
//# sourceMappingURL=platform-auth-migration-dispatch.d.ts.map
|
package/node_modules/@noodle-borg/service/dist/routes/platform-auth-migration-dispatch.d.ts.map
ADDED
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"platform-auth-migration-dispatch.d.ts","sourceRoot":"","sources":["../../src/routes/platform-auth-migration-dispatch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAGL,KAAK,MAAM,EACX,KAAK,UAAU,EAChB,MAAM,6BAA6B,CAAC;AAErC,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAuBnF,wBAAgB,mCAAmC,CACjD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,8BAA8B,GAAG;IACrC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,GACA,OAAO,CAuBT"}
|