@noodleseed/one 0.70.0 → 0.71.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/commands/auth-google-ops.d.ts +3 -0
- package/dist/commands/auth-google-ops.d.ts.map +1 -0
- package/dist/commands/auth-google-ops.js +198 -0
- package/dist/commands/auth-google-ops.js.map +1 -0
- package/dist/commands/auth-ops.d.ts.map +1 -1
- package/dist/commands/auth-ops.js +5 -1
- package/dist/commands/auth-ops.js.map +1 -1
- package/dist/commands/catalog-data-core.d.ts.map +1 -1
- package/dist/commands/catalog-data-core.js +17 -1
- package/dist/commands/catalog-data-core.js.map +1 -1
- package/dist/deploy.js +1 -1
- package/dist/deploy.js.map +1 -1
- package/dist/index.d.ts +1 -1
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +1 -1
- package/dist/index.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/curated/command-groups.js +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/curated/command-groups.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/generated/example-files.d.ts.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/generated/example-files.js +7 -0
- package/node_modules/@noodle-borg/agent-kit/dist/generated/example-files.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/generated/surface.d.ts.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/generated/surface.js +1 -0
- package/node_modules/@noodle-borg/agent-kit/dist/generated/surface.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-refs.d.ts.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-refs.js +5 -1
- package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-refs.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/skill-content.d.ts.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/skill-content.js +7 -1
- package/node_modules/@noodle-borg/agent-kit/dist/skill-content.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/package.json +1 -1
- package/node_modules/@noodle-borg/authoring/dist/connection-types.d.ts +23 -0
- package/node_modules/@noodle-borg/authoring/dist/connection-types.d.ts.map +1 -1
- package/node_modules/@noodle-borg/authoring/dist/connection-types.js +16 -0
- package/node_modules/@noodle-borg/authoring/dist/connection-types.js.map +1 -1
- package/node_modules/@noodle-borg/authoring/dist/connections.d.ts +2 -2
- package/node_modules/@noodle-borg/authoring/dist/connections.d.ts.map +1 -1
- package/node_modules/@noodle-borg/authoring/dist/connections.js +13 -2
- package/node_modules/@noodle-borg/authoring/dist/connections.js.map +1 -1
- package/node_modules/@noodle-borg/authoring/dist/index.d.ts +1 -1
- package/node_modules/@noodle-borg/authoring/dist/index.d.ts.map +1 -1
- package/node_modules/@noodle-borg/authoring/dist/index.js +1 -1
- package/node_modules/@noodle-borg/authoring/dist/index.js.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/artifact/config.d.ts +2 -2
- package/node_modules/@noodle-borg/compiler/dist/artifact/config.d.ts.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/artifact/config.js +22 -1
- package/node_modules/@noodle-borg/compiler/dist/artifact/config.js.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/artifact/types.d.ts +9 -0
- package/node_modules/@noodle-borg/compiler/dist/artifact/types.d.ts.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/compile.d.ts.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/compile.js +1 -1
- package/node_modules/@noodle-borg/compiler/dist/compile.js.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/fulfilment-emit.d.ts.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/fulfilment-emit.js +49 -0
- package/node_modules/@noodle-borg/compiler/dist/fulfilment-emit.js.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/manifest/schema.d.ts +18 -0
- package/node_modules/@noodle-borg/compiler/dist/manifest/schema.d.ts.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/manifest/schema.js +15 -0
- package/node_modules/@noodle-borg/compiler/dist/manifest/schema.js.map +1 -1
- package/node_modules/@noodle-borg/runtime/dist/broker/types.d.ts +3 -1
- package/node_modules/@noodle-borg/runtime/dist/broker/types.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/credential-binding-index.d.ts +1 -0
- package/node_modules/@noodle-borg/service/dist/credential-binding-index.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/credential-binding-index.js +10 -2
- package/node_modules/@noodle-borg/service/dist/credential-binding-index.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/credential-broker-options.d.ts +3 -0
- package/node_modules/@noodle-borg/service/dist/credential-broker-options.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/credential-broker-options.js +9 -0
- package/node_modules/@noodle-borg/service/dist/credential-broker-options.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/credential-broker.d.ts +5 -2
- package/node_modules/@noodle-borg/service/dist/credential-broker.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/credential-broker.js +29 -0
- package/node_modules/@noodle-borg/service/dist/credential-broker.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-postgres.d.ts +21 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-postgres.js +195 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-probe.d.ts +10 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-probe.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-probe.js +47 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-probe.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-store.d.ts +46 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-store.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-store.js +88 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-store.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-validation.d.ts +4 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-validation.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-validation.js +13 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-validation.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity.d.ts +38 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity.js +289 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/index.d.ts +3 -0
- package/node_modules/@noodle-borg/service/dist/index.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/index.js +3 -0
- package/node_modules/@noodle-borg/service/dist/index.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/app.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/app.js +11 -0
- package/node_modules/@noodle-borg/service/dist/oauth/app.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/paths.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/paths.js +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/paths.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/options.d.ts +8 -0
- package/node_modules/@noodle-borg/service/dist/options.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/registry-types.d.ts +3 -0
- package/node_modules/@noodle-borg/service/dist/registry-types.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/registry.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/registry.js +3 -0
- package/node_modules/@noodle-borg/service/dist/registry.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/credential-auth-dispatch.d.ts +25 -0
- package/node_modules/@noodle-borg/service/dist/routes/credential-auth-dispatch.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/credential-auth-dispatch.js +21 -0
- package/node_modules/@noodle-borg/service/dist/routes/credential-auth-dispatch.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity-dispatch.d.ts +14 -0
- package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity-dispatch.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity-dispatch.js +30 -0
- package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity-dispatch.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity.d.ts +19 -0
- package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity.js +105 -0
- package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/paths.d.ts +3 -1
- package/node_modules/@noodle-borg/service/dist/routes/paths.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/paths.js +6 -0
- package/node_modules/@noodle-borg/service/dist/routes/paths.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/serve.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/serve.js +29 -0
- package/node_modules/@noodle-borg/service/dist/serve.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/service.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/service.js +6 -2
- package/node_modules/@noodle-borg/service/dist/service.js.map +1 -1
- package/package.json +1 -1
|
@@ -80,7 +80,7 @@ export interface DelegatedCredentialProbe {
|
|
|
80
80
|
readonly bindingId?: string;
|
|
81
81
|
readonly connectionId?: string;
|
|
82
82
|
readonly profile?: string;
|
|
83
|
-
readonly authKind: 'delegatedOAuth' | 'delegatedSessionCookie' | 'delegatedTokenExchange' | 'externalExchange';
|
|
83
|
+
readonly authKind: 'delegatedOAuth' | 'delegatedSessionCookie' | 'delegatedTokenExchange' | 'externalExchange' | 'googleWorkloadIdentity';
|
|
84
84
|
readonly ok: boolean;
|
|
85
85
|
readonly reason?: CredentialUnavailableReason;
|
|
86
86
|
readonly fix?: string;
|
|
@@ -99,5 +99,7 @@ export interface CredentialBroker {
|
|
|
99
99
|
* brokers that can enumerate their compiled delegated bindings; ordinary runtime brokers may omit it.
|
|
100
100
|
*/
|
|
101
101
|
probeDelegatedCredentials?(caller: CallerIdentity): Promise<readonly DelegatedCredentialProbe[]>;
|
|
102
|
+
/** Probe deployment-owned service credential exchanges without invoking a connector operation. */
|
|
103
|
+
probeServiceCredentials?(): Promise<readonly DelegatedCredentialProbe[]>;
|
|
102
104
|
}
|
|
103
105
|
//# sourceMappingURL=types.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/broker/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,+DAA+D;AAC/D,MAAM,MAAM,2BAA2B,GACnC,8BAA8B,GAC9B,yBAAyB,GACzB,wBAAwB,GACxB,2BAA2B,GAC3B,4BAA4B,CAAC;AAEjC,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED;;;GAGG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;IACnD,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC7C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;gBAGhC,MAAM,EAAE,2BAA2B,EACnC,OAAO,GAAE,iCAAsC;CAQlD;AAED;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG,0BAA0B,GAAG,0BAA0B,CAAC;AAE3F,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC;IACzB,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,6FAA6F;IAC7F,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,4DAA4D;IAC5D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,4EAA4E;AAC5E,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,iBAAiB,CAAC;IAC1C,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,qFAAqF;IACrF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC;CAClC;AAED,8FAA8F;AAC9F,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED;;;;GAIG;AACH,wBAAgB,sCAAsC,CACpD,OAAO,EAAE,iBAAiB,GACzB,2BAA2B,GAAG,SAAS,CAkCzC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EACb,gBAAgB,GAChB,wBAAwB,GACxB,wBAAwB,GACxB,kBAAkB,CAAC;
|
|
1
|
+
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/broker/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,+DAA+D;AAC/D,MAAM,MAAM,2BAA2B,GACnC,8BAA8B,GAC9B,yBAAyB,GACzB,wBAAwB,GACxB,2BAA2B,GAC3B,4BAA4B,CAAC;AAEjC,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED;;;GAGG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;IACnD,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC7C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;gBAGhC,MAAM,EAAE,2BAA2B,EACnC,OAAO,GAAE,iCAAsC;CAQlD;AAED;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG,0BAA0B,GAAG,0BAA0B,CAAC;AAE3F,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC;IACzB,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,6FAA6F;IAC7F,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,4DAA4D;IAC5D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,4EAA4E;AAC5E,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,iBAAiB,CAAC;IAC1C,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,qFAAqF;IACrF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC;CAClC;AAED,8FAA8F;AAC9F,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED;;;;GAIG;AACH,wBAAgB,sCAAsC,CACpD,OAAO,EAAE,iBAAiB,GACzB,2BAA2B,GAAG,SAAS,CAkCzC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EACb,gBAAgB,GAChB,wBAAwB,GACxB,wBAAwB,GACxB,kBAAkB,GAClB,wBAAwB,CAAC;IAC7B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,CAAC,EAAE,2BAA2B,CAAC;IAC9C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,aAAa,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACzE;;;OAGG;IACH,yBAAyB,CAAC,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,wBAAwB,EAAE,CAAC,CAAC;IACjG,kGAAkG;IAClG,uBAAuB,CAAC,IAAI,OAAO,CAAC,SAAS,wBAAwB,EAAE,CAAC,CAAC;CAC1E"}
|
|
@@ -7,6 +7,7 @@ export interface AllowedCredentialBinding {
|
|
|
7
7
|
export interface CredentialBindingIndex {
|
|
8
8
|
readonly byKey: ReadonlyMap<string, AllowedCredentialBinding>;
|
|
9
9
|
readonly externalExchange: readonly AllowedCredentialBinding[];
|
|
10
|
+
readonly googleWorkloadIdentity: readonly AllowedCredentialBinding[];
|
|
10
11
|
}
|
|
11
12
|
/** Build the immutable allowlist solely from trusted, compiled operation references. */
|
|
12
13
|
export declare function buildCredentialBindingIndex(artifact: RuntimeArtifact | undefined): CredentialBindingIndex;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"credential-binding-index.d.ts","sourceRoot":"","sources":["../src/credential-binding-index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,wBAAwB,EAI7B,KAAK,eAAe,EACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAE9B,MAAM,sBAAsB,CAAC;AAE9B,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;CAC3C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IAC9D,QAAQ,CAAC,gBAAgB,EAAE,SAAS,wBAAwB,EAAE,CAAC;
|
|
1
|
+
{"version":3,"file":"credential-binding-index.d.ts","sourceRoot":"","sources":["../src/credential-binding-index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,wBAAwB,EAI7B,KAAK,eAAe,EACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAE9B,MAAM,sBAAsB,CAAC;AAE9B,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;CAC3C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IAC9D,QAAQ,CAAC,gBAAgB,EAAE,SAAS,wBAAwB,EAAE,CAAC;IAC/D,QAAQ,CAAC,sBAAsB,EAAE,SAAS,wBAAwB,EAAE,CAAC;CACtE;AAWD,wFAAwF;AACxF,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,eAAe,GAAG,SAAS,GACpC,sBAAsB,CAkDxB;AAED,mGAAmG;AACnG,wBAAgB,iCAAiC,CAC/C,QAAQ,EAAE,SAAS,wBAAwB,EAAE,GAC5C,SAAS,wBAAwB,EAAE,CAWrC"}
|
|
@@ -10,8 +10,9 @@ function resolvedOperationRefs(fulfilment) {
|
|
|
10
10
|
export function buildCredentialBindingIndex(artifact) {
|
|
11
11
|
const byKey = new Map();
|
|
12
12
|
const externalExchange = new Map();
|
|
13
|
+
const googleWorkloadIdentity = new Map();
|
|
13
14
|
if (artifact === undefined)
|
|
14
|
-
return { byKey, externalExchange: [] };
|
|
15
|
+
return { byKey, externalExchange: [], googleWorkloadIdentity: [] };
|
|
15
16
|
const fulfilments = [
|
|
16
17
|
...artifact.tools.map((tool) => tool.fulfilment),
|
|
17
18
|
...(artifact.resources ?? []).map((resource) => resource.fulfilment),
|
|
@@ -46,9 +47,16 @@ export function buildCredentialBindingIndex(artifact) {
|
|
|
46
47
|
if (source.kind === 'externalExchange') {
|
|
47
48
|
externalExchange.set(key, allowed);
|
|
48
49
|
}
|
|
50
|
+
if (source.kind === 'googleWorkloadIdentity') {
|
|
51
|
+
googleWorkloadIdentity.set(key, allowed);
|
|
52
|
+
}
|
|
49
53
|
}
|
|
50
54
|
}
|
|
51
|
-
return {
|
|
55
|
+
return {
|
|
56
|
+
byKey,
|
|
57
|
+
externalExchange: [...externalExchange.values()],
|
|
58
|
+
googleWorkloadIdentity: [...googleWorkloadIdentity.values()],
|
|
59
|
+
};
|
|
52
60
|
}
|
|
53
61
|
/** Render safe, explicit auth-doctor results for exchange providers that are not available yet. */
|
|
54
62
|
export function unavailableExternalExchangeProbes(bindings) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"credential-binding-index.js","sourceRoot":"","sources":["../src/credential-binding-index.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,+BAA+B,GAGhC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAGL,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;
|
|
1
|
+
{"version":3,"file":"credential-binding-index.js","sourceRoot":"","sources":["../src/credential-binding-index.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,+BAA+B,GAGhC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAGL,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAa9B,SAAS,qBAAqB,CAAC,UAA8B;IAC3D,IAAI,UAAU,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACpC,OAAO,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,CAAC;IACD,OAAO,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACvC,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CACnF,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,2BAA2B,CACzC,QAAqC;IAErC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC1D,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAoC,CAAC;IACrE,MAAM,sBAAsB,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC3E,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,EAAE,sBAAsB,EAAE,EAAE,EAAE,CAAC;IAC/F,MAAM,WAAW,GAAyB;QACxC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;QAChD,GAAG,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;QACpE,GAAG,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC;QAC9D,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,KAAK,SAAS;YAChD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;KAClD,CAAC;IACF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,qBAAqB,CAAC,UAAU,CAAC,EAAE,CAAC;YACpD,MAAM,iBAAiB,GAAG,GAAG,CAAC,iBAAiB,CAAC;YAChD,IAAI,iBAAiB,KAAK,SAAS;gBAAE,SAAS;YAC9C,MAAM,OAAO,GAAG,QAAQ,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;YAC1E,IACE,OAAO,KAAK,SAAS;gBACrB,OAAO,CAAC,UAAU,CAAC,EAAE,KAAK,iBAAiB,CAAC,YAAY;gBACxD,OAAO,CAAC,OAAO,KAAK,iBAAiB,CAAC,OAAO;gBAC7C,+BAA+B,CAAC,OAAO,CAAC,UAAU,CAAC;oBACjD,iBAAiB,CAAC,wBAAwB,EAC5C,CAAC;gBACD,SAAS;YACX,CAAC;YACD,MAAM,UAAU,GAAgC;gBAC9C,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;gBACtC,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,GAAG,iBAAiB;aACrB,CAAC;YACF,MAAM,GAAG,GAAG,gBAAgB,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;YACvC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACxB,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBACvC,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACrC,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;gBAC7C,sBAAsB,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO;QACL,KAAK;QACL,gBAAgB,EAAE,CAAC,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC;QAChD,sBAAsB,EAAE,CAAC,GAAG,sBAAsB,CAAC,MAAM,EAAE,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,iCAAiC,CAC/C,QAA6C;IAE7C,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QACvC,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,QAAQ,EAAE,kBAAkB;QAC5B,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,2BAA2B;KACpC,CAAC,CAAC,CAAC;AACN,CAAC"}
|
|
@@ -1,13 +1,16 @@
|
|
|
1
1
|
import type { DelegatedExchangeOptions } from './delegated-token-exchange.js';
|
|
2
2
|
import type { ExternalCredentialExchangeOptions, ExternalCredentialExchangeRuntimeOptions } from './external-credential-exchange.js';
|
|
3
|
+
import type { GoogleWorkloadIdentityOptions, GoogleWorkloadIdentityRuntimeOptions } from './google-workload-identity.js';
|
|
3
4
|
/** Complete deployment-bound broker exchange options without exposing provider lifecycle over HTTP. */
|
|
4
5
|
export declare function deploymentCredentialBrokerOptions(input: {
|
|
5
6
|
readonly delegatedExchange: Pick<DelegatedExchangeOptions, 'issuer' | 'signer'> | undefined;
|
|
6
7
|
readonly externalCredentialExchange: ExternalCredentialExchangeRuntimeOptions | undefined;
|
|
8
|
+
readonly googleWorkloadIdentity: GoogleWorkloadIdentityRuntimeOptions | undefined;
|
|
7
9
|
readonly tenant: string;
|
|
8
10
|
readonly deploymentId: string | undefined;
|
|
9
11
|
}): {
|
|
10
12
|
readonly delegatedExchange?: DelegatedExchangeOptions;
|
|
11
13
|
readonly externalCredentialExchange?: ExternalCredentialExchangeOptions;
|
|
14
|
+
readonly googleWorkloadIdentity?: GoogleWorkloadIdentityOptions;
|
|
12
15
|
};
|
|
13
16
|
//# sourceMappingURL=credential-broker-options.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"credential-broker-options.d.ts","sourceRoot":"","sources":["../src/credential-broker-options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,KAAK,EACV,iCAAiC,EACjC,wCAAwC,EACzC,MAAM,mCAAmC,CAAC;
|
|
1
|
+
{"version":3,"file":"credential-broker-options.d.ts","sourceRoot":"","sources":["../src/credential-broker-options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,KAAK,EACV,iCAAiC,EACjC,wCAAwC,EACzC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EACV,6BAA6B,EAC7B,oCAAoC,EACrC,MAAM,+BAA+B,CAAC;AAEvC,uGAAuG;AACvG,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,QAAQ,CAAC,iBAAiB,EAAE,IAAI,CAAC,wBAAwB,EAAE,QAAQ,GAAG,QAAQ,CAAC,GAAG,SAAS,CAAC;IAC5F,QAAQ,CAAC,0BAA0B,EAAE,wCAAwC,GAAG,SAAS,CAAC;IAC1F,QAAQ,CAAC,sBAAsB,EAAE,oCAAoC,GAAG,SAAS,CAAC;IAClF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C,GAAG;IACF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,0BAA0B,CAAC,EAAE,iCAAiC,CAAC;IACxE,QAAQ,CAAC,sBAAsB,CAAC,EAAE,6BAA6B,CAAC;CACjE,CA+BA"}
|
|
@@ -21,6 +21,15 @@ export function deploymentCredentialBrokerOptions(input) {
|
|
|
21
21
|
deployment: input.deploymentId,
|
|
22
22
|
},
|
|
23
23
|
}),
|
|
24
|
+
...(input.googleWorkloadIdentity === undefined
|
|
25
|
+
? {}
|
|
26
|
+
: {
|
|
27
|
+
googleWorkloadIdentity: {
|
|
28
|
+
...input.googleWorkloadIdentity,
|
|
29
|
+
tenant: input.tenant,
|
|
30
|
+
deployment: input.deploymentId,
|
|
31
|
+
},
|
|
32
|
+
}),
|
|
24
33
|
};
|
|
25
34
|
}
|
|
26
35
|
//# sourceMappingURL=credential-broker-options.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"credential-broker-options.js","sourceRoot":"","sources":["../src/credential-broker-options.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"credential-broker-options.js","sourceRoot":"","sources":["../src/credential-broker-options.ts"],"names":[],"mappings":"AAUA,uGAAuG;AACvG,MAAM,UAAU,iCAAiC,CAAC,KAMjD;IAKC,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAChD,OAAO;QACL,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,iBAAiB,EAAE;oBACjB,GAAG,KAAK,CAAC,iBAAiB;oBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,KAAK,CAAC,YAAY;iBAC/B;aACF,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,0BAA0B,KAAK,SAAS;YAChD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,0BAA0B,EAAE;oBAC1B,GAAG,KAAK,CAAC,0BAA0B;oBACnC,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,KAAK,CAAC,YAAY;iBAC/B;aACF,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,sBAAsB,KAAK,SAAS;YAC5C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,sBAAsB,EAAE;oBACtB,GAAG,KAAK,CAAC,sBAAsB;oBAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,KAAK,CAAC,YAAY;iBAC/B;aACF,CAAC;KACP,CAAC;AACJ,CAAC"}
|
|
@@ -3,9 +3,10 @@ import type { SecretBinding } from '@noodle-borg/connector-defs';
|
|
|
3
3
|
import { type CredentialBroker, type CredentialRequest, type DelegatedCredentialProbe, type DownstreamCredential } from '@noodle-borg/runtime';
|
|
4
4
|
import { type DelegatedExchangeOptions } from './delegated-token-exchange.js';
|
|
5
5
|
import type { ExternalCredentialExchangeOptions } from './external-credential-exchange.js';
|
|
6
|
+
import { type GoogleWorkloadIdentityOptions } from './google-workload-identity.js';
|
|
6
7
|
import type { OAuthStore } from './oauth/store.js';
|
|
7
8
|
import type { ConfigScope, ConfigStore, SecretEnvelope, TenantAuthConfig } from './store.js';
|
|
8
|
-
interface ManagedConfigBrokerOptions {
|
|
9
|
+
export interface ManagedConfigBrokerOptions {
|
|
9
10
|
readonly artifact?: RuntimeArtifact;
|
|
10
11
|
readonly delegatedCredentialStore?: Pick<OAuthStore, 'getDelegatedCredential' | 'putDelegatedCredential'>;
|
|
11
12
|
readonly serverAuth?: TenantAuthConfig;
|
|
@@ -15,6 +16,8 @@ interface ManagedConfigBrokerOptions {
|
|
|
15
16
|
readonly delegatedExchange?: DelegatedExchangeOptions;
|
|
16
17
|
/** Deployment-owned account credential exchange; distinct from ADR 0152 end-user delegation. */
|
|
17
18
|
readonly externalCredentialExchange?: ExternalCredentialExchangeOptions;
|
|
19
|
+
/** Keyless Google WIF exchange using the platform's OIDC issuer and deployment identity. */
|
|
20
|
+
readonly googleWorkloadIdentity?: GoogleWorkloadIdentityOptions;
|
|
18
21
|
readonly fetchImpl?: typeof fetch;
|
|
19
22
|
readonly now?: () => number;
|
|
20
23
|
}
|
|
@@ -23,6 +26,6 @@ export declare class ManagedConfigBroker implements CredentialBroker {
|
|
|
23
26
|
constructor(bindings: readonly SecretBinding[], store: ConfigStore, scope: ConfigScope, options?: ManagedConfigBrokerOptions);
|
|
24
27
|
getCredential(request: CredentialRequest): Promise<DownstreamCredential>;
|
|
25
28
|
probeDelegatedCredentials(caller: NonNullable<CredentialRequest['caller']>): Promise<readonly DelegatedCredentialProbe[]>;
|
|
29
|
+
probeServiceCredentials(): Promise<readonly DelegatedCredentialProbe[]>;
|
|
26
30
|
}
|
|
27
|
-
export {};
|
|
28
31
|
//# sourceMappingURL=credential-broker.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"credential-broker.d.ts","sourceRoot":"","sources":["../src/credential-broker.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAGV,aAAa,EACd,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EAGtB,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EAE1B,MAAM,sBAAsB,CAAC;AAU9B,OAAO,EACL,KAAK,wBAAwB,EAI9B,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,mCAAmC,CAAC;
|
|
1
|
+
{"version":3,"file":"credential-broker.d.ts","sourceRoot":"","sources":["../src/credential-broker.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAGV,aAAa,EACd,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EAGtB,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EAE1B,MAAM,sBAAsB,CAAC;AAU9B,OAAO,EACL,KAAK,wBAAwB,EAI9B,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,mCAAmC,CAAC;AAC3F,OAAO,EAEL,KAAK,6BAA6B,EACnC,MAAM,+BAA+B,CAAC;AAGvC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE7F,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,IAAI,CACtC,UAAU,EACV,wBAAwB,GAAG,wBAAwB,CACpD,CAAC;IACF,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC,UAAU,EAAE,cAAc,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAClF,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAClF,4FAA4F;IAC5F,QAAQ,CAAC,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;IACtD,gGAAgG;IAChG,QAAQ,CAAC,0BAA0B,CAAC,EAAE,iCAAiC,CAAC;IACxE,4FAA4F;IAC5F,QAAQ,CAAC,sBAAsB,CAAC,EAAE,6BAA6B,CAAC;IAChE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAED,qBAAa,mBAAoB,YAAW,gBAAgB;;gBAexD,QAAQ,EAAE,SAAS,aAAa,EAAE,EAClC,KAAK,EAAE,WAAW,EAClB,KAAK,EAAE,WAAW,EAClB,OAAO,GAAE,0BAA+B;IA0BpC,aAAa,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAkExE,yBAAyB,CAC7B,MAAM,EAAE,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,GAC/C,OAAO,CAAC,SAAS,wBAAwB,EAAE,CAAC;IAUzC,uBAAuB,IAAI,OAAO,CAAC,SAAS,wBAAwB,EAAE,CAAC;CAoX9E"}
|
|
@@ -4,6 +4,8 @@ import { buildCredentialBindingIndex, } from './credential-binding-index.js';
|
|
|
4
4
|
import { probeCredentials } from './credential-probes.js';
|
|
5
5
|
import { fetchDelegatedTokenExchange, requireExchangeCaller, signExchangeAssertion, } from './delegated-token-exchange.js';
|
|
6
6
|
import { ExternalCredentialBindingBroker } from './external-credential-binding-broker.js';
|
|
7
|
+
import { GoogleWorkloadIdentityBindingBroker, } from './google-workload-identity.js';
|
|
8
|
+
import { probeGoogleWorkloadIdentityCredentials } from './google-workload-identity-probe.js';
|
|
7
9
|
import { resolveManagedVariablesInString } from './managed-config-expressions.js';
|
|
8
10
|
export class ManagedConfigBroker {
|
|
9
11
|
#bindings = new Map();
|
|
@@ -11,11 +13,13 @@ export class ManagedConfigBroker {
|
|
|
11
13
|
#delegatedCache = new Map();
|
|
12
14
|
#delegatedInflight = new Map();
|
|
13
15
|
#externalExchangeBroker;
|
|
16
|
+
#googleWorkloadIdentityBroker;
|
|
14
17
|
#store;
|
|
15
18
|
#scope;
|
|
16
19
|
#options;
|
|
17
20
|
#allowedBindings;
|
|
18
21
|
#externalExchangeBindings;
|
|
22
|
+
#googleWorkloadIdentityBindings;
|
|
19
23
|
constructor(bindings, store, scope, options = {}) {
|
|
20
24
|
this.#store = store;
|
|
21
25
|
this.#scope = scope;
|
|
@@ -24,9 +28,14 @@ export class ManagedConfigBroker {
|
|
|
24
28
|
options.externalCredentialExchange === undefined
|
|
25
29
|
? undefined
|
|
26
30
|
: new ExternalCredentialBindingBroker(options.externalCredentialExchange, () => this.#now());
|
|
31
|
+
this.#googleWorkloadIdentityBroker =
|
|
32
|
+
options.googleWorkloadIdentity === undefined
|
|
33
|
+
? undefined
|
|
34
|
+
: new GoogleWorkloadIdentityBindingBroker(options.googleWorkloadIdentity, () => this.#now());
|
|
27
35
|
const bindingIndex = buildCredentialBindingIndex(options.artifact);
|
|
28
36
|
this.#allowedBindings = bindingIndex.byKey;
|
|
29
37
|
this.#externalExchangeBindings = bindingIndex.externalExchange;
|
|
38
|
+
this.#googleWorkloadIdentityBindings = bindingIndex.googleWorkloadIdentity;
|
|
30
39
|
for (const binding of bindings) {
|
|
31
40
|
this.#bindings.set(MapServiceBroker.key(binding.connectorId, binding.operation), binding);
|
|
32
41
|
}
|
|
@@ -74,6 +83,19 @@ export class ManagedConfigBroker {
|
|
|
74
83
|
}
|
|
75
84
|
return this.#externalExchangeBroker.getCredential(request, allowed);
|
|
76
85
|
}
|
|
86
|
+
if (allowed.source.kind === 'googleWorkloadIdentity') {
|
|
87
|
+
if (this.#googleWorkloadIdentityBroker === undefined) {
|
|
88
|
+
throw new CredentialUnavailableError('credential_not_configured');
|
|
89
|
+
}
|
|
90
|
+
let variables;
|
|
91
|
+
try {
|
|
92
|
+
variables = await this.#store.resolveConfigValues('variable', this.#scope);
|
|
93
|
+
}
|
|
94
|
+
catch {
|
|
95
|
+
throw new CredentialUnavailableError('credential_not_configured');
|
|
96
|
+
}
|
|
97
|
+
return this.#googleWorkloadIdentityBroker.getCredential(request, allowed, variables);
|
|
98
|
+
}
|
|
77
99
|
if (allowed.source.kind !== 'managedSecret') {
|
|
78
100
|
throw new CredentialUnavailableError('credential_not_configured');
|
|
79
101
|
}
|
|
@@ -92,6 +114,13 @@ export class ManagedConfigBroker {
|
|
|
92
114
|
getCredential: (request) => this.getCredential(request),
|
|
93
115
|
});
|
|
94
116
|
}
|
|
117
|
+
async probeServiceCredentials() {
|
|
118
|
+
return probeGoogleWorkloadIdentityCredentials({
|
|
119
|
+
bindings: this.#googleWorkloadIdentityBindings,
|
|
120
|
+
options: this.#options.googleWorkloadIdentity,
|
|
121
|
+
getCredential: (request) => this.getCredential(request),
|
|
122
|
+
});
|
|
123
|
+
}
|
|
95
124
|
async #clientCredentialsToken(binding, clientSecret) {
|
|
96
125
|
const cacheKey = MapServiceBroker.key(binding.connectorId, binding.operation);
|
|
97
126
|
const cached = this.#oauthCache.get(cacheKey);
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"credential-broker.js","sourceRoot":"","sources":["../src/credential-broker.ts"],"names":[],"mappings":"AAMA,OAAO,EAIL,0BAA0B,EAC1B,sCAAsC,EAGtC,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,4BAA4B,EAC5B,4BAA4B,GAC7B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAEL,2BAA2B,GAC5B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAEL,2BAA2B,EAC3B,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,+BAA+B,EAAE,MAAM,yCAAyC,CAAC;AAE1F,OAAO,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAC;AAqBlF,MAAM,OAAO,mBAAmB;IACrB,SAAS,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC7C,WAAW,GAAG,IAAI,GAAG,EAAgD,CAAC;IACtE,eAAe,GAAG,IAAI,GAAG,EAAwD,CAAC;IAClF,kBAAkB,GAAG,IAAI,GAAG,EAAyC,CAAC;IACtE,uBAAuB,CAA8C;IACrE,MAAM,CAAc;IACpB,MAAM,CAAc;IACpB,QAAQ,CAA6B;IACrC,gBAAgB,CAAgD;IAChE,yBAAyB,CAAsC;IAExE,YACE,QAAkC,EAClC,KAAkB,EAClB,KAAkB,EAClB,UAAsC,EAAE;QAExC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,uBAAuB;YAC1B,OAAO,CAAC,0BAA0B,KAAK,SAAS;gBAC9C,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,+BAA+B,CAAC,OAAO,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAC3E,IAAI,CAAC,IAAI,EAAE,CACZ,CAAC;QACR,MAAM,YAAY,GAAG,2BAA2B,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnE,IAAI,CAAC,gBAAgB,GAAG,YAAY,CAAC,KAAK,CAAC;QAC3C,IAAI,CAAC,yBAAyB,GAAG,YAAY,CAAC,gBAAgB,CAAC;QAC/D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAA0B;QAC5C,MAAM,UAAU,GAAG,sCAAsC,CAAC,OAAO,CAAC,CAAC;QACnE,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAClF,MAAM,SAAS,GACb,OAAO,CAAC,SAAS,KAAK,SAAS;YAC7B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;YAClF,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,OAAO,GAAG,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QAC3F,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAChD,IAAI,OAAO,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC,0BAA0B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,wBAAwB,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC,iCAAiC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,wBAAwB,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC,iCAAiC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7E,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;YACjC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QAC3F,IAAI,OAAO,CAAC,QAAQ,KAAK,mBAAmB,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACxF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAClE,OAAO,EAAE,KAAK,EAAE,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC;QACrB,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,OAA0B,EAC1B,UAAuC;QAEvC,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,gBAAgB,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;QACnF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YAC/C,IAAI,IAAI,CAAC,uBAAuB,KAAK,SAAS,EAAE,CAAC;gBAC/C,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAC5C,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,CAAC,CAAC;QAC5F,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,yBAAyB,CAC7B,MAAgD;QAEhD,OAAO,gBAAgB,CAAC;YACtB,MAAM;YACN,gBAAgB,EAAE,IAAI,CAAC,yBAAyB;YAChD,cAAc,EAAE,IAAI,CAAC,uBAAuB;YAC5C,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE;YACjC,aAAa,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;SACxD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,OAAsB,EAAE,YAAoB;QACxE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC;QACxE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,gCAAgC,CACpD,OAAO,CAAC,iBAA6C,CACtD,CAAC;QACF,MAAM,QAAQ,GACZ,EAAE,CAAC,OAAO,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS;YAChD,CAAC,CAAC,MAAM,4BAA4B,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC;YACjE,CAAC,CAAC,MAAM,4BAA4B,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;QAC3D,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACzC,OAAO,QAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,0BAA0B,CAC9B,OAAsB,EACtB,OAA0B;QAE1B,IAAI,OAAO,CAAC,SAAS,EAAE,QAAQ,KAAK,WAAW,EAAE,CAAC;YAChD,OAAO,IAAI,CAAC,mCAAmC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,CAAC;QAC5B,uBAAuB,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG;YACf,MAAM,CAAC,QAAQ;YACf,QAAQ;YACR,MAAM,CAAC,OAAO;YACd,OAAO,CAAC,WAAW;YACnB,OAAO,CAAC,SAAS;SAClB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;YACnD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC3F,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,0BAA0B,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC;aACzF,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACf,MAAM,UAAU,GAAG;gBACjB,KAAK,EAAE,MAAM,CAAC,OAAO;gBACrB,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI;aACpE,CAAC;YACF,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC/C,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QACrC,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,mCAAmC,CACvC,OAAsB,EACtB,OAA0B;QAE1B,MAAM,SAAS,GAAG,gCAAgC,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,iCAAiC,CAAC,SAAS,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG;YACf,MAAM,CAAC,QAAQ;YACf,iBAAiB,CAAC,QAAQ;YAC1B,MAAM,CAAC,OAAO;YACd,OAAO,CAAC,WAAW;YACnB,OAAO,CAAC,SAAS;YACjB,iBAAiB,CAAC,QAAQ;YAC1B,iBAAiB,CAAC,QAAQ;YAC1B,GAAG,CAAC,iBAAiB,CAAC,MAAM,IAAI,EAAE,CAAC;SACpC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;YACnD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC3F,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,2BAA2B,CAAC,OAAO,EAAE,iBAAiB,EAAE,MAAM,CAAC;aACjF,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACf,MAAM,UAAU,GAAG;gBACjB,KAAK,EAAE,MAAM,CAAC,WAAW;gBACzB,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI;aACpE,CAAC;YACF,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC/C,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QACrC,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,iCAAiC,CACrC,OAAsB,EACtB,OAA0B;QAE1B,uBAAuB,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,UAAU,CAAC;QAC5B,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC;QACjD,IAAI,UAAU,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACzF,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,EAAE,UAAU,IAAI,SAAS,CAAC;QAC9D,MAAM,QAAQ,GAAG;YACf,MAAM,CAAC,QAAQ;YACf,QAAQ;YACR,MAAM,CAAC,OAAO;YACd,OAAO,CAAC,WAAW;YACnB,OAAO,CAAC,SAAS;YACjB,UAAU;SACX,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG;YAAE,OAAO,MAAM,CAAC;QAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,0BAA0B,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC;aACzF,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CACf,qCAAqC,CAAC;YACpC,UAAU;YACV,UAAU;YACV,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,KAAK;YAC3C,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE;SACjB,CAAC,CACH;aACA,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE;YACnB,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;YACjF,CAAC;YACD,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,GAAG,OAAO,CAAC;YAChE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;YACjE,OAAO,UAAU,CAAC;QACpB,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,0BAA0B,CAC9B,QAAuB,EACvB,OAA0B,EAC1B,QAAgB,EAChB,QAAgB;QAEhB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAClF,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QACtC,IACE,eAAe,KAAK,SAAS;YAC7B,IAAI,KAAK,SAAS;YAClB,IAAI,KAAK,SAAS;YAClB,IAAI,CAAC,IAAI,KAAK,QAAQ;YACtB,IAAI,CAAC,QAAQ,KAAK,UAAU;YAC5B,IAAI,CAAC,MAAM,KAAK,SAAS,EACzB,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,sBAAsB,CAAC;YAC1D,QAAQ;YACR,QAAQ;YACR,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC,CAAC;QACH,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC5E,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjF,MAAM,MAAM,GAAG,+BAA+B,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACvE,IAAI,MAA6B,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,yBAAyB,CAAC;gBACvC,MAAM;gBACN,YAAY;gBACZ,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,KAAK;aAC5C,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,0BAA0B,CAAC,4BAA4B,EAAE;gBACjE,GAAG,EAAE,iEAAiE;gBACtE,IAAI,EAAE,CAAC,2BAA2B,CAAC;aACpC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,KAAK,YAAY,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/D,MAAM,eAAe,CAAC,sBAAsB,CAAC;gBAC3C,GAAG,MAAM;gBACT,UAAU,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;gBAC3C,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;aAC/C,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,2BAA2B,CAC/B,OAAsB,EACtB,SAAoC,EACpC,MAAgF;QAEhF,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAClD,IAAI,eAAe,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7E,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,YAAY,KAAK,SAAS;YAC5B,MAAM,IAAI,KAAK,CAAC,2BAA2B,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QAEnE,MAAM,QAAQ,GAAG,WAAW,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,sBAAsB,CAAC;YAC1D,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ;YACR,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC,CAAC;QACH,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC5E,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC;YAC9C,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,YAAY;YACZ,YAAY;YACZ,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,UAAU,EAAE,SAAS,CAAC,UAAU,IAAI,oBAAoB;YACxD,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,KAAK;SAC5C,CAAC,CAAC;QACH,IACE,MAAM,CAAC,YAAY,KAAK,SAAS;YACjC,MAAM,CAAC,YAAY,KAAK,YAAY;YACpC,IAAI,KAAK,SAAS,EAClB,CAAC;YACD,MAAM,eAAe,CAAC,sBAAsB,CAAC;gBAC3C,GAAG,MAAM;gBACT,UAAU,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;gBAC3C,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;aAC/C,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,iCAAiC,CACrC,OAAsB,EACtB,OAA0B;QAE1B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC;QACvC,IAAI,OAAO,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,EAAE;gBAChE,GAAG,EAAE,qEAAqE;gBAC1E,IAAI,EAAE,CAAC,oBAAoB,CAAC;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG;YACf,eAAe;YACf,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,OAAO;YACd,OAAO,CAAC,WAAW;YACnB,OAAO,CAAC,SAAS;YACjB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;SACjC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;YACnD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC3F,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,CAAC,KAAK,IAAmC,EAAE;YACzD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACpC,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,EAAE;oBAChE,GAAG,EAAE,iEAAiE;oBACtE,IAAI,EAAE,CAAC,oBAAoB,CAAC;iBAC7B,CAAC,CAAC;YACL,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7E,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,EAAE;oBAChE,GAAG,EAAE,8DAA8D;oBACnE,IAAI,EAAE,CAAC,oBAAoB,CAAC;iBAC7B,CAAC,CAAC;YACL,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,4BAA4B,CAAC,QAAQ,CAAC,CAAC;YACnE,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC;YACxD,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC;gBAC5C,OAAO;gBACP,MAAM;gBACN,QAAQ;gBACR,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE;aACnB,CAAC,CAAC;YACH,IAAI,MAA+D,CAAC;YACpE,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,2BAA2B,CAAC;oBACzC,OAAO,EAAE,QAAQ;oBACjB,YAAY;oBACZ,SAAS;oBACT,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,KAAK;iBAC5C,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,0BAA0B,CAAC,4BAA4B,EAAE;oBACjE,GAAG,EAAE,+EAA+E;oBACpF,IAAI,EAAE,CAAC,2BAA2B,CAAC;iBACpC,CAAC,CAAC;YACL,CAAC;YACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE;oBACjC,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI;iBACpE,CAAC,CAAC;YACL,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,4BAA4B,CAChC,QAAqD;QAErD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjF,OAAO;YACL,GAAG,QAAQ;YACX,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;YACvE,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;YACvE,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS;gBACjC,CAAC,CAAC,EAAE,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE;gBAC7E,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gCAAgC,CACpC,EAA4B;QAE5B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjF,OAAO;YACL,GAAG,EAAE;YACL,QAAQ,EAAE,+BAA+B,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;YACjE,QAAQ,EAAE,+BAA+B,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;YACjE,GAAG,CAAC,EAAE,CAAC,QAAQ,KAAK,SAAS;gBAC3B,CAAC,CAAC,EAAE,QAAQ,EAAE,+BAA+B,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE;gBACvE,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iCAAiC,CACrC,SAAoC;QAEpC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjF,OAAO;YACL,GAAG,SAAS;YACZ,QAAQ,EAAE,+BAA+B,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC;YACxE,QAAQ,EAAE,+BAA+B,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC;SACzE,CAAC;IACJ,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7C,CAAC;CACF;AAED,SAAS,qBAAqB,CAC5B,OAA0B,EAC1B,QAAgB;IAEhB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IACE,MAAM,KAAK,SAAS;QACpB,MAAM,CAAC,YAAY,KAAK,UAAU;QAClC,MAAM,CAAC,gBAAgB,KAAK,QAAQ;QACpC,MAAM,CAAC,QAAQ,KAAK,SAAS,EAC7B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,MAAkF,CAAC;AAC5F,CAAC;AAED,SAAS,uBAAuB,CAAC,QAA4B;IAC3D,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAQD,SAAS,gCAAgC,CAAC,OAAsB;IAC9D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACpC,IACE,SAAS,EAAE,QAAQ,KAAK,WAAW;QACnC,SAAS,CAAC,QAAQ,KAAK,SAAS;QAChC,SAAS,CAAC,QAAQ,KAAK,SAAS,EAChC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,SAAsC,CAAC;AAChD,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAA0B;IAE1B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IACE,MAAM,KAAK,SAAS;QACpB,MAAM,CAAC,gBAAgB,KAAK,WAAW;QACvC,MAAM,CAAC,QAAQ,KAAK,SAAS,EAC7B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,MAAkF,CAAC;AAC5F,CAAC;AAcD,KAAK,UAAU,yBAAyB,CAAC,KAIxC;IACC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CACpC,mDAAmD,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EACrF;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,MAAM,EAAE,kBAAkB;YAC1B,cAAc,EAAE,mCAAmC;YACnD,YAAY,EAAE,iBAAiB;SAChC;QACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;QACvB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CACF,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5F,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIlC,CAAC;IACF,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,SAAS,GACb,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACjC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QACtC,CAAC,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;YACnC,CAAC,CAAC,IAAI,CAAC,UAAU;YACjB,CAAC,CAAC,IAAI,CAAC;IACb,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,QAAQ;QACtB,YAAY,EAAE,IAAI,CAAC,aAAa;QAChC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;KAC1E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,KAQzC;IACC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,OAAO,GAA2B;QACtC,MAAM,EAAE,kBAAkB;QAC1B,cAAc,EAAE,mCAAmC;QACnD,YAAY,EAAE,iBAAiB;KAChC,CAAC;IACF,IAAI,KAAK,CAAC,UAAU,KAAK,qBAAqB,EAAE,CAAC;QAC/C,OAAO,CAAC,aAAa,GAAG,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC/G,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE;QACrD,MAAM,EAAE,MAAM;QACd,OAAO;QACP,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;QACvB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7F,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIlC,CAAC;IACF,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,YAAY,GAChB,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;QACrE,CAAC,CAAC,IAAI,CAAC,aAAa;QACpB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,SAAS,GACb,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACjC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QACtC,CAAC,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;YACnC,CAAC,CAAC,IAAI,CAAC,UAAU;YACjB,CAAC,CAAC,IAAI,CAAC;IACb,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;KAC1E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,qCAAqC,CAAC,KAMpD;IACC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE;QACvD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,MAAM,EAAE,kBAAkB;YAC1B,cAAc,EAAE,kBAAkB;YAClC,YAAY,EAAE,iBAAiB;SAChC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAC3D,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QACd,MAAM,IAAI,KAAK,CAAC,iDAAiD,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACtF,MAAM,OAAO,GAAG,uBAAuB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAC/F,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACnD,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,MAAM;QACN,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAgB;IAC/C,MAAM,YAAY,GAAG,OAAsD,CAAC;IAC5E,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,EAAE,EAAE,CAAC;IAC7C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IAC7D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzC,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB;IACnC,OAAO,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,YAAY,CAAC,UAA6B,EAAE,GAAW;IAC9D,MAAM,QAAQ,GAAG,UAAU;SACxB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;SACxC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB,EAAE,GAAW;IAClD,MAAM,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAChE,OAAO,GAAG,GAAG,OAAO,GAAG,IAAI,CAAC;AAC9B,CAAC"}
|
|
1
|
+
{"version":3,"file":"credential-broker.js","sourceRoot":"","sources":["../src/credential-broker.ts"],"names":[],"mappings":"AAMA,OAAO,EAIL,0BAA0B,EAC1B,sCAAsC,EAGtC,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,4BAA4B,EAC5B,4BAA4B,GAC7B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAEL,2BAA2B,GAC5B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAEL,2BAA2B,EAC3B,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,+BAA+B,EAAE,MAAM,yCAAyC,CAAC;AAE1F,OAAO,EACL,mCAAmC,GAEpC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,sCAAsC,EAAE,MAAM,qCAAqC,CAAC;AAC7F,OAAO,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAC;AAuBlF,MAAM,OAAO,mBAAmB;IACrB,SAAS,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC7C,WAAW,GAAG,IAAI,GAAG,EAAgD,CAAC;IACtE,eAAe,GAAG,IAAI,GAAG,EAAwD,CAAC;IAClF,kBAAkB,GAAG,IAAI,GAAG,EAAyC,CAAC;IACtE,uBAAuB,CAA8C;IACrE,6BAA6B,CAAkD;IAC/E,MAAM,CAAc;IACpB,MAAM,CAAc;IACpB,QAAQ,CAA6B;IACrC,gBAAgB,CAAgD;IAChE,yBAAyB,CAAsC;IAC/D,+BAA+B,CAAsC;IAE9E,YACE,QAAkC,EAClC,KAAkB,EAClB,KAAkB,EAClB,UAAsC,EAAE;QAExC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,uBAAuB;YAC1B,OAAO,CAAC,0BAA0B,KAAK,SAAS;gBAC9C,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,+BAA+B,CAAC,OAAO,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAC3E,IAAI,CAAC,IAAI,EAAE,CACZ,CAAC;QACR,IAAI,CAAC,6BAA6B;YAChC,OAAO,CAAC,sBAAsB,KAAK,SAAS;gBAC1C,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,mCAAmC,CAAC,OAAO,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAC3E,IAAI,CAAC,IAAI,EAAE,CACZ,CAAC;QACR,MAAM,YAAY,GAAG,2BAA2B,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnE,IAAI,CAAC,gBAAgB,GAAG,YAAY,CAAC,KAAK,CAAC;QAC3C,IAAI,CAAC,yBAAyB,GAAG,YAAY,CAAC,gBAAgB,CAAC;QAC/D,IAAI,CAAC,+BAA+B,GAAG,YAAY,CAAC,sBAAsB,CAAC;QAC3E,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAA0B;QAC5C,MAAM,UAAU,GAAG,sCAAsC,CAAC,OAAO,CAAC,CAAC;QACnE,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAClF,MAAM,SAAS,GACb,OAAO,CAAC,SAAS,KAAK,SAAS;YAC7B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;YAClF,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,OAAO,GAAG,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QAC3F,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAChD,IAAI,OAAO,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC,0BAA0B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,wBAAwB,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC,iCAAiC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,wBAAwB,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC,iCAAiC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7E,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;YACjC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QAC3F,IAAI,OAAO,CAAC,QAAQ,KAAK,mBAAmB,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACxF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAClE,OAAO,EAAE,KAAK,EAAE,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC;QACrB,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,OAA0B,EAC1B,UAAuC;QAEvC,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,gBAAgB,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;QACnF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YAC/C,IAAI,IAAI,CAAC,uBAAuB,KAAK,SAAS,EAAE,CAAC;gBAC/C,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;YACrD,IAAI,IAAI,CAAC,6BAA6B,KAAK,SAAS,EAAE,CAAC;gBACrD,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,CAAC,CAAC;YACpE,CAAC;YACD,IAAI,SAAiC,CAAC;YACtC,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7E,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,IAAI,CAAC,6BAA6B,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAC5C,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,CAAC,CAAC;QAC5F,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,yBAAyB,CAC7B,MAAgD;QAEhD,OAAO,gBAAgB,CAAC;YACtB,MAAM;YACN,gBAAgB,EAAE,IAAI,CAAC,yBAAyB;YAChD,cAAc,EAAE,IAAI,CAAC,uBAAuB;YAC5C,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE;YACjC,aAAa,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;SACxD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,uBAAuB;QAC3B,OAAO,sCAAsC,CAAC;YAC5C,QAAQ,EAAE,IAAI,CAAC,+BAA+B;YAC9C,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,sBAAsB;YAC7C,aAAa,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;SACxD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,OAAsB,EAAE,YAAoB;QACxE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC;QACxE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,gCAAgC,CACpD,OAAO,CAAC,iBAA6C,CACtD,CAAC;QACF,MAAM,QAAQ,GACZ,EAAE,CAAC,OAAO,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS;YAChD,CAAC,CAAC,MAAM,4BAA4B,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC;YACjE,CAAC,CAAC,MAAM,4BAA4B,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;QAC3D,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACzC,OAAO,QAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,0BAA0B,CAC9B,OAAsB,EACtB,OAA0B;QAE1B,IAAI,OAAO,CAAC,SAAS,EAAE,QAAQ,KAAK,WAAW,EAAE,CAAC;YAChD,OAAO,IAAI,CAAC,mCAAmC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,CAAC;QAC5B,uBAAuB,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG;YACf,MAAM,CAAC,QAAQ;YACf,QAAQ;YACR,MAAM,CAAC,OAAO;YACd,OAAO,CAAC,WAAW;YACnB,OAAO,CAAC,SAAS;SAClB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;YACnD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC3F,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,0BAA0B,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC;aACzF,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACf,MAAM,UAAU,GAAG;gBACjB,KAAK,EAAE,MAAM,CAAC,OAAO;gBACrB,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI;aACpE,CAAC;YACF,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC/C,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QACrC,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,mCAAmC,CACvC,OAAsB,EACtB,OAA0B;QAE1B,MAAM,SAAS,GAAG,gCAAgC,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,iCAAiC,CAAC,SAAS,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG;YACf,MAAM,CAAC,QAAQ;YACf,iBAAiB,CAAC,QAAQ;YAC1B,MAAM,CAAC,OAAO;YACd,OAAO,CAAC,WAAW;YACnB,OAAO,CAAC,SAAS;YACjB,iBAAiB,CAAC,QAAQ;YAC1B,iBAAiB,CAAC,QAAQ;YAC1B,GAAG,CAAC,iBAAiB,CAAC,MAAM,IAAI,EAAE,CAAC;SACpC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;YACnD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC3F,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,2BAA2B,CAAC,OAAO,EAAE,iBAAiB,EAAE,MAAM,CAAC;aACjF,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACf,MAAM,UAAU,GAAG;gBACjB,KAAK,EAAE,MAAM,CAAC,WAAW;gBACzB,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI;aACpE,CAAC;YACF,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC/C,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QACrC,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,iCAAiC,CACrC,OAAsB,EACtB,OAA0B;QAE1B,uBAAuB,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,UAAU,CAAC;QAC5B,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC;QACjD,IAAI,UAAU,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACzF,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,EAAE,UAAU,IAAI,SAAS,CAAC;QAC9D,MAAM,QAAQ,GAAG;YACf,MAAM,CAAC,QAAQ;YACf,QAAQ;YACR,MAAM,CAAC,OAAO;YACd,OAAO,CAAC,WAAW;YACnB,OAAO,CAAC,SAAS;YACjB,UAAU;SACX,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG;YAAE,OAAO,MAAM,CAAC;QAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,0BAA0B,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC;aACzF,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CACf,qCAAqC,CAAC;YACpC,UAAU;YACV,UAAU;YACV,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,KAAK;YAC3C,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE;SACjB,CAAC,CACH;aACA,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE;YACnB,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;YACjF,CAAC;YACD,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,GAAG,OAAO,CAAC;YAChE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;YACjE,OAAO,UAAU,CAAC;QACpB,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,0BAA0B,CAC9B,QAAuB,EACvB,OAA0B,EAC1B,QAAgB,EAChB,QAAgB;QAEhB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAClF,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QACtC,IACE,eAAe,KAAK,SAAS;YAC7B,IAAI,KAAK,SAAS;YAClB,IAAI,KAAK,SAAS;YAClB,IAAI,CAAC,IAAI,KAAK,QAAQ;YACtB,IAAI,CAAC,QAAQ,KAAK,UAAU;YAC5B,IAAI,CAAC,MAAM,KAAK,SAAS,EACzB,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,sBAAsB,CAAC;YAC1D,QAAQ;YACR,QAAQ;YACR,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC,CAAC;QACH,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC5E,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjF,MAAM,MAAM,GAAG,+BAA+B,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACvE,IAAI,MAA6B,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,yBAAyB,CAAC;gBACvC,MAAM;gBACN,YAAY;gBACZ,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,KAAK;aAC5C,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,0BAA0B,CAAC,4BAA4B,EAAE;gBACjE,GAAG,EAAE,iEAAiE;gBACtE,IAAI,EAAE,CAAC,2BAA2B,CAAC;aACpC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,KAAK,YAAY,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/D,MAAM,eAAe,CAAC,sBAAsB,CAAC;gBAC3C,GAAG,MAAM;gBACT,UAAU,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;gBAC3C,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;aAC/C,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,2BAA2B,CAC/B,OAAsB,EACtB,SAAoC,EACpC,MAAgF;QAEhF,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAClD,IAAI,eAAe,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7E,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,YAAY,KAAK,SAAS;YAC5B,MAAM,IAAI,KAAK,CAAC,2BAA2B,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QAEnE,MAAM,QAAQ,GAAG,WAAW,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,sBAAsB,CAAC;YAC1D,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ;YACR,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC,CAAC;QACH,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC5E,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC;YAC9C,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,YAAY;YACZ,YAAY;YACZ,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,UAAU,EAAE,SAAS,CAAC,UAAU,IAAI,oBAAoB;YACxD,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,KAAK;SAC5C,CAAC,CAAC;QACH,IACE,MAAM,CAAC,YAAY,KAAK,SAAS;YACjC,MAAM,CAAC,YAAY,KAAK,YAAY;YACpC,IAAI,KAAK,SAAS,EAClB,CAAC;YACD,MAAM,eAAe,CAAC,sBAAsB,CAAC;gBAC3C,GAAG,MAAM;gBACT,UAAU,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;gBAC3C,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;aAC/C,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,iCAAiC,CACrC,OAAsB,EACtB,OAA0B;QAE1B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC;QACvC,IAAI,OAAO,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,EAAE;gBAChE,GAAG,EAAE,qEAAqE;gBAC1E,IAAI,EAAE,CAAC,oBAAoB,CAAC;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG;YACf,eAAe;YACf,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,OAAO;YACd,OAAO,CAAC,WAAW;YACnB,OAAO,CAAC,SAAS;YACjB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;SACjC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;YACnD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC3F,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,CAAC,KAAK,IAAmC,EAAE;YACzD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACpC,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,EAAE;oBAChE,GAAG,EAAE,iEAAiE;oBACtE,IAAI,EAAE,CAAC,oBAAoB,CAAC;iBAC7B,CAAC,CAAC;YACL,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7E,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,EAAE;oBAChE,GAAG,EAAE,8DAA8D;oBACnE,IAAI,EAAE,CAAC,oBAAoB,CAAC;iBAC7B,CAAC,CAAC;YACL,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,4BAA4B,CAAC,QAAQ,CAAC,CAAC;YACnE,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC;YACxD,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC;gBAC5C,OAAO;gBACP,MAAM;gBACN,QAAQ;gBACR,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE;aACnB,CAAC,CAAC;YACH,IAAI,MAA+D,CAAC;YACpE,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,2BAA2B,CAAC;oBACzC,OAAO,EAAE,QAAQ;oBACjB,YAAY;oBACZ,SAAS;oBACT,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,KAAK;iBAC5C,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,0BAA0B,CAAC,4BAA4B,EAAE;oBACjE,GAAG,EAAE,+EAA+E;oBACpF,IAAI,EAAE,CAAC,2BAA2B,CAAC;iBACpC,CAAC,CAAC;YACL,CAAC;YACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE;oBACjC,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI;iBACpE,CAAC,CAAC;YACL,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,4BAA4B,CAChC,QAAqD;QAErD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjF,OAAO;YACL,GAAG,QAAQ;YACX,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;YACvE,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;YACvE,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS;gBACjC,CAAC,CAAC,EAAE,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE;gBAC7E,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gCAAgC,CACpC,EAA4B;QAE5B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjF,OAAO;YACL,GAAG,EAAE;YACL,QAAQ,EAAE,+BAA+B,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;YACjE,QAAQ,EAAE,+BAA+B,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;YACjE,GAAG,CAAC,EAAE,CAAC,QAAQ,KAAK,SAAS;gBAC3B,CAAC,CAAC,EAAE,QAAQ,EAAE,+BAA+B,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE;gBACvE,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iCAAiC,CACrC,SAAoC;QAEpC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjF,OAAO;YACL,GAAG,SAAS;YACZ,QAAQ,EAAE,+BAA+B,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC;YACxE,QAAQ,EAAE,+BAA+B,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC;SACzE,CAAC;IACJ,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7C,CAAC;CACF;AAED,SAAS,qBAAqB,CAC5B,OAA0B,EAC1B,QAAgB;IAEhB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IACE,MAAM,KAAK,SAAS;QACpB,MAAM,CAAC,YAAY,KAAK,UAAU;QAClC,MAAM,CAAC,gBAAgB,KAAK,QAAQ;QACpC,MAAM,CAAC,QAAQ,KAAK,SAAS,EAC7B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,MAAkF,CAAC;AAC5F,CAAC;AAED,SAAS,uBAAuB,CAAC,QAA4B;IAC3D,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAQD,SAAS,gCAAgC,CAAC,OAAsB;IAC9D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACpC,IACE,SAAS,EAAE,QAAQ,KAAK,WAAW;QACnC,SAAS,CAAC,QAAQ,KAAK,SAAS;QAChC,SAAS,CAAC,QAAQ,KAAK,SAAS,EAChC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,SAAsC,CAAC;AAChD,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAA0B;IAE1B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IACE,MAAM,KAAK,SAAS;QACpB,MAAM,CAAC,gBAAgB,KAAK,WAAW;QACvC,MAAM,CAAC,QAAQ,KAAK,SAAS,EAC7B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,MAAkF,CAAC;AAC5F,CAAC;AAcD,KAAK,UAAU,yBAAyB,CAAC,KAIxC;IACC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CACpC,mDAAmD,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EACrF;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,MAAM,EAAE,kBAAkB;YAC1B,cAAc,EAAE,mCAAmC;YACnD,YAAY,EAAE,iBAAiB;SAChC;QACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;QACvB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CACF,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5F,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIlC,CAAC;IACF,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,SAAS,GACb,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACjC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QACtC,CAAC,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;YACnC,CAAC,CAAC,IAAI,CAAC,UAAU;YACjB,CAAC,CAAC,IAAI,CAAC;IACb,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,QAAQ;QACtB,YAAY,EAAE,IAAI,CAAC,aAAa;QAChC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;KAC1E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,KAQzC;IACC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,OAAO,GAA2B;QACtC,MAAM,EAAE,kBAAkB;QAC1B,cAAc,EAAE,mCAAmC;QACnD,YAAY,EAAE,iBAAiB;KAChC,CAAC;IACF,IAAI,KAAK,CAAC,UAAU,KAAK,qBAAqB,EAAE,CAAC;QAC/C,OAAO,CAAC,aAAa,GAAG,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC/G,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE;QACrD,MAAM,EAAE,MAAM;QACd,OAAO;QACP,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;QACvB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7F,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIlC,CAAC;IACF,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,YAAY,GAChB,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;QACrE,CAAC,CAAC,IAAI,CAAC,aAAa;QACpB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,SAAS,GACb,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACjC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QACtC,CAAC,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;YACnC,CAAC,CAAC,IAAI,CAAC,UAAU;YACjB,CAAC,CAAC,IAAI,CAAC;IACb,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;KAC1E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,qCAAqC,CAAC,KAMpD;IACC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE;QACvD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,MAAM,EAAE,kBAAkB;YAC1B,cAAc,EAAE,kBAAkB;YAClC,YAAY,EAAE,iBAAiB;SAChC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAC3D,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QACd,MAAM,IAAI,KAAK,CAAC,iDAAiD,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACtF,MAAM,OAAO,GAAG,uBAAuB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAC/F,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACnD,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,MAAM;QACN,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAgB;IAC/C,MAAM,YAAY,GAAG,OAAsD,CAAC;IAC5E,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,EAAE,EAAE,CAAC;IAC7C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IAC7D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzC,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB;IACnC,OAAO,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,YAAY,CAAC,UAA6B,EAAE,GAAW;IAC9D,MAAM,QAAQ,GAAG,UAAU;SACxB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;SACxC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB,EAAE,GAAW;IAClD,MAAM,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAChE,OAAO,GAAG,GAAG,OAAO,GAAG,IAAI,CAAC;AAC9B,CAAC"}
|
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
import type { Pool } from 'pg';
|
|
2
|
+
import type { GoogleWorkloadIdentityRecord } from './google-workload-identity.js';
|
|
3
|
+
import type { GoogleWorkloadIdentityStore, PrepareGoogleWorkloadIdentityInput, RevokeGoogleWorkloadIdentityInput, StoredGoogleWorkloadIdentity } from './google-workload-identity-store.js';
|
|
4
|
+
import { type TenantRef } from './store.js';
|
|
5
|
+
/** Durable, multi-instance lifecycle for environment-scoped Google workload identities. */
|
|
6
|
+
export declare class PostgresGoogleWorkloadIdentityStore implements GoogleWorkloadIdentityStore {
|
|
7
|
+
#private;
|
|
8
|
+
constructor(pool: Pool, options?: {
|
|
9
|
+
readonly now?: () => Date;
|
|
10
|
+
readonly randomId?: () => string;
|
|
11
|
+
});
|
|
12
|
+
ensureSchema(): Promise<void>;
|
|
13
|
+
prepare(input: PrepareGoogleWorkloadIdentityInput): Promise<StoredGoogleWorkloadIdentity>;
|
|
14
|
+
get(tenantInput: TenantRef): Promise<StoredGoogleWorkloadIdentity | undefined>;
|
|
15
|
+
revoke(input: RevokeGoogleWorkloadIdentityInput): Promise<StoredGoogleWorkloadIdentity | undefined>;
|
|
16
|
+
resolve(input: {
|
|
17
|
+
readonly tenantId: string;
|
|
18
|
+
readonly deploymentId: string;
|
|
19
|
+
}): Promise<GoogleWorkloadIdentityRecord | undefined>;
|
|
20
|
+
}
|
|
21
|
+
//# sourceMappingURL=google-workload-identity-postgres.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"google-workload-identity-postgres.d.ts","sourceRoot":"","sources":["../src/google-workload-identity-postgres.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAc,MAAM,IAAI,CAAC;AAC3C,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAClF,OAAO,KAAK,EACV,2BAA2B,EAC3B,kCAAkC,EAClC,iCAAiC,EACjC,4BAA4B,EAC7B,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EAAE,KAAK,SAAS,EAAqB,MAAM,YAAY,CAAC;AAmB/D,2FAA2F;AAC3F,qBAAa,mCAAoC,YAAW,2BAA2B;;gBAMnF,IAAI,EAAE,IAAI,EACV,OAAO,GAAE;QACP,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;QAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,MAAM,CAAC;KAC7B;IAOF,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAwB7B,OAAO,CAAC,KAAK,EAAE,kCAAkC,GAAG,OAAO,CAAC,4BAA4B,CAAC;IAsDzF,GAAG,CAAC,WAAW,EAAE,SAAS,GAAG,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC;IAU9E,MAAM,CACV,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC;IAmC9C,OAAO,CAAC,KAAK,EAAE;QACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;KAC/B,GAAG,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC;CAatD"}
|
|
@@ -0,0 +1,195 @@
|
|
|
1
|
+
import { randomBytes } from 'node:crypto';
|
|
2
|
+
import { hasAsciiControlCharacters } from './google-workload-identity-validation.js';
|
|
3
|
+
import { validateTenantRef } from './store.js';
|
|
4
|
+
/** Durable, multi-instance lifecycle for environment-scoped Google workload identities. */
|
|
5
|
+
export class PostgresGoogleWorkloadIdentityStore {
|
|
6
|
+
#pool;
|
|
7
|
+
#now;
|
|
8
|
+
#randomId;
|
|
9
|
+
constructor(pool, options = {}) {
|
|
10
|
+
this.#pool = pool;
|
|
11
|
+
this.#now = options.now ?? (() => new Date());
|
|
12
|
+
this.#randomId = options.randomId ?? (() => `gwi_${randomBytes(18).toString('base64url')}`);
|
|
13
|
+
}
|
|
14
|
+
async ensureSchema() {
|
|
15
|
+
await this.#pool.query(`
|
|
16
|
+
CREATE TABLE IF NOT EXISTS google_workload_identities (
|
|
17
|
+
org_slug text NOT NULL,
|
|
18
|
+
app_slug text NOT NULL,
|
|
19
|
+
environment text NOT NULL,
|
|
20
|
+
identity_id text NOT NULL,
|
|
21
|
+
revision text NOT NULL,
|
|
22
|
+
subject text NOT NULL,
|
|
23
|
+
active boolean NOT NULL,
|
|
24
|
+
created_at timestamptz NOT NULL,
|
|
25
|
+
updated_at timestamptz NOT NULL,
|
|
26
|
+
created_by_subject text NOT NULL,
|
|
27
|
+
created_by_email text,
|
|
28
|
+
revoked_at timestamptz,
|
|
29
|
+
revoked_by_subject text,
|
|
30
|
+
revoked_by_email text,
|
|
31
|
+
PRIMARY KEY (org_slug, app_slug, environment),
|
|
32
|
+
UNIQUE (identity_id),
|
|
33
|
+
UNIQUE (subject)
|
|
34
|
+
)
|
|
35
|
+
`);
|
|
36
|
+
}
|
|
37
|
+
async prepare(input) {
|
|
38
|
+
const tenant = validateTenantRef(input);
|
|
39
|
+
const actorSubject = validateActor(input.actorSubject);
|
|
40
|
+
const client = await this.#pool.connect();
|
|
41
|
+
try {
|
|
42
|
+
await client.query('BEGIN');
|
|
43
|
+
await lockTenant(client, tenant);
|
|
44
|
+
const existing = await getRow(client, tenant, true);
|
|
45
|
+
if (existing?.active) {
|
|
46
|
+
await client.query('COMMIT');
|
|
47
|
+
return rowToRecord(existing);
|
|
48
|
+
}
|
|
49
|
+
const id = validateOpaqueId(this.#randomId());
|
|
50
|
+
const now = this.#now();
|
|
51
|
+
const { rows } = await client.query(`INSERT INTO google_workload_identities
|
|
52
|
+
(org_slug, app_slug, environment, identity_id, revision, subject, active,
|
|
53
|
+
created_at, updated_at, created_by_subject, created_by_email,
|
|
54
|
+
revoked_at, revoked_by_subject, revoked_by_email)
|
|
55
|
+
VALUES ($1, $2, $3, $4, $4, $5, true, $6, $6, $7, $8, NULL, NULL, NULL)
|
|
56
|
+
ON CONFLICT (org_slug, app_slug, environment) DO UPDATE SET
|
|
57
|
+
identity_id = EXCLUDED.identity_id,
|
|
58
|
+
revision = EXCLUDED.revision,
|
|
59
|
+
subject = EXCLUDED.subject,
|
|
60
|
+
active = true,
|
|
61
|
+
created_at = EXCLUDED.created_at,
|
|
62
|
+
updated_at = EXCLUDED.updated_at,
|
|
63
|
+
created_by_subject = EXCLUDED.created_by_subject,
|
|
64
|
+
created_by_email = EXCLUDED.created_by_email,
|
|
65
|
+
revoked_at = NULL,
|
|
66
|
+
revoked_by_subject = NULL,
|
|
67
|
+
revoked_by_email = NULL
|
|
68
|
+
RETURNING *`, [
|
|
69
|
+
tenant.org,
|
|
70
|
+
tenant.app,
|
|
71
|
+
tenant.env,
|
|
72
|
+
id,
|
|
73
|
+
`noodle:google-workload:${id}`,
|
|
74
|
+
now,
|
|
75
|
+
actorSubject,
|
|
76
|
+
input.actorEmail ?? null,
|
|
77
|
+
]);
|
|
78
|
+
await client.query('COMMIT');
|
|
79
|
+
return rowToRecord(requireRow(rows[0]));
|
|
80
|
+
}
|
|
81
|
+
catch (error) {
|
|
82
|
+
await client.query('ROLLBACK').catch(() => undefined);
|
|
83
|
+
throw error;
|
|
84
|
+
}
|
|
85
|
+
finally {
|
|
86
|
+
client.release();
|
|
87
|
+
}
|
|
88
|
+
}
|
|
89
|
+
async get(tenantInput) {
|
|
90
|
+
const tenant = validateTenantRef(tenantInput);
|
|
91
|
+
const { rows } = await this.#pool.query(`SELECT * FROM google_workload_identities
|
|
92
|
+
WHERE org_slug = $1 AND app_slug = $2 AND environment = $3`, [tenant.org, tenant.app, tenant.env]);
|
|
93
|
+
return rows[0] === undefined ? undefined : rowToRecord(rows[0]);
|
|
94
|
+
}
|
|
95
|
+
async revoke(input) {
|
|
96
|
+
const tenant = validateTenantRef(input);
|
|
97
|
+
const actorSubject = validateActor(input.actorSubject);
|
|
98
|
+
const client = await this.#pool.connect();
|
|
99
|
+
try {
|
|
100
|
+
await client.query('BEGIN');
|
|
101
|
+
await lockTenant(client, tenant);
|
|
102
|
+
const existing = await getRow(client, tenant, true);
|
|
103
|
+
if (existing === undefined || !existing.active) {
|
|
104
|
+
await client.query('COMMIT');
|
|
105
|
+
return existing === undefined ? undefined : rowToRecord(existing);
|
|
106
|
+
}
|
|
107
|
+
const now = this.#now();
|
|
108
|
+
const { rows } = await client.query(`UPDATE google_workload_identities SET
|
|
109
|
+
revision = identity_id || ':revoked',
|
|
110
|
+
active = false,
|
|
111
|
+
updated_at = $4,
|
|
112
|
+
revoked_at = $4,
|
|
113
|
+
revoked_by_subject = $5,
|
|
114
|
+
revoked_by_email = $6
|
|
115
|
+
WHERE org_slug = $1 AND app_slug = $2 AND environment = $3
|
|
116
|
+
RETURNING *`, [tenant.org, tenant.app, tenant.env, now, actorSubject, input.actorEmail ?? null]);
|
|
117
|
+
await client.query('COMMIT');
|
|
118
|
+
return rowToRecord(requireRow(rows[0]));
|
|
119
|
+
}
|
|
120
|
+
catch (error) {
|
|
121
|
+
await client.query('ROLLBACK').catch(() => undefined);
|
|
122
|
+
throw error;
|
|
123
|
+
}
|
|
124
|
+
finally {
|
|
125
|
+
client.release();
|
|
126
|
+
}
|
|
127
|
+
}
|
|
128
|
+
async resolve(input) {
|
|
129
|
+
const parts = input.tenantId.split('/');
|
|
130
|
+
if (parts.length !== 3)
|
|
131
|
+
return undefined;
|
|
132
|
+
try {
|
|
133
|
+
return await this.get({
|
|
134
|
+
org: parts[0],
|
|
135
|
+
app: parts[1],
|
|
136
|
+
env: parts[2],
|
|
137
|
+
});
|
|
138
|
+
}
|
|
139
|
+
catch {
|
|
140
|
+
return undefined;
|
|
141
|
+
}
|
|
142
|
+
}
|
|
143
|
+
}
|
|
144
|
+
async function lockTenant(client, tenant) {
|
|
145
|
+
await client.query('SELECT pg_advisory_xact_lock(hashtext($1))', [
|
|
146
|
+
`${tenant.org}/${tenant.app}/${tenant.env}/google-workload-identity`,
|
|
147
|
+
]);
|
|
148
|
+
}
|
|
149
|
+
async function getRow(client, tenant, forUpdate) {
|
|
150
|
+
const { rows } = await client.query(`SELECT * FROM google_workload_identities
|
|
151
|
+
WHERE org_slug = $1 AND app_slug = $2 AND environment = $3${forUpdate ? ' FOR UPDATE' : ''}`, [tenant.org, tenant.app, tenant.env]);
|
|
152
|
+
return rows[0];
|
|
153
|
+
}
|
|
154
|
+
function rowToRecord(row) {
|
|
155
|
+
return {
|
|
156
|
+
id: row.identity_id,
|
|
157
|
+
revision: row.revision,
|
|
158
|
+
tenantId: `${row.org_slug}/${row.app_slug}/${row.environment}`,
|
|
159
|
+
environmentId: row.environment,
|
|
160
|
+
subject: row.subject,
|
|
161
|
+
active: row.active,
|
|
162
|
+
org: row.org_slug,
|
|
163
|
+
app: row.app_slug,
|
|
164
|
+
env: row.environment,
|
|
165
|
+
createdAt: new Date(row.created_at).toISOString(),
|
|
166
|
+
updatedAt: new Date(row.updated_at).toISOString(),
|
|
167
|
+
createdBySubject: row.created_by_subject,
|
|
168
|
+
...(row.created_by_email === null ? {} : { createdByEmail: row.created_by_email }),
|
|
169
|
+
...(row.revoked_at === null
|
|
170
|
+
? {}
|
|
171
|
+
: {
|
|
172
|
+
revokedAt: new Date(row.revoked_at).toISOString(),
|
|
173
|
+
...(row.revoked_by_subject === null ? {} : { revokedBySubject: row.revoked_by_subject }),
|
|
174
|
+
...(row.revoked_by_email === null ? {} : { revokedByEmail: row.revoked_by_email }),
|
|
175
|
+
}),
|
|
176
|
+
};
|
|
177
|
+
}
|
|
178
|
+
function requireRow(row) {
|
|
179
|
+
if (row === undefined)
|
|
180
|
+
throw new Error('Google workload identity write returned no row');
|
|
181
|
+
return row;
|
|
182
|
+
}
|
|
183
|
+
function validateActor(value) {
|
|
184
|
+
if (value.length < 1 || value.length > 512 || hasAsciiControlCharacters(value)) {
|
|
185
|
+
throw new Error('invalid workload identity actor');
|
|
186
|
+
}
|
|
187
|
+
return value;
|
|
188
|
+
}
|
|
189
|
+
function validateOpaqueId(value) {
|
|
190
|
+
if (!/^[A-Za-z0-9_-]{4,96}$/.test(value)) {
|
|
191
|
+
throw new Error('invalid workload identity id');
|
|
192
|
+
}
|
|
193
|
+
return value;
|
|
194
|
+
}
|
|
195
|
+
//# sourceMappingURL=google-workload-identity-postgres.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"google-workload-identity-postgres.js","sourceRoot":"","sources":["../src/google-workload-identity-postgres.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAS1C,OAAO,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAC;AACrF,OAAO,EAAkB,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAmB/D,2FAA2F;AAC3F,MAAM,OAAO,mCAAmC;IACrC,KAAK,CAAO;IACZ,IAAI,CAAa;IACjB,SAAS,CAAe;IAEjC,YACE,IAAU,EACV,UAGI,EAAE;QAEN,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;KAoBtB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAyC;QACrD,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,MAAM,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACjC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACpD,IAAI,QAAQ,EAAE,MAAM,EAAE,CAAC;gBACrB,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC7B,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC;YAC/B,CAAC;YACD,MAAM,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YACxB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC;;;;;;;;;;;;;;;;;qBAiBa,EACb;gBACE,MAAM,CAAC,GAAG;gBACV,MAAM,CAAC,GAAG;gBACV,MAAM,CAAC,GAAG;gBACV,EAAE;gBACF,0BAA0B,EAAE,EAAE;gBAC9B,GAAG;gBACH,YAAY;gBACZ,KAAK,CAAC,UAAU,IAAI,IAAI;aACzB,CACF,CAAC;YACF,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,WAAsB;QAC9B,MAAM,MAAM,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;QAC9C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACrC;kEAC4D,EAC5D,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CACrC,CAAC;QACF,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,MAAM,CACV,KAAwC;QAExC,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,MAAM,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACjC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACpD,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAC/C,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC7B,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YACxB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC;;;;;;;;qBAQa,EACb,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,CAClF,CAAC;YACF,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAGb;QACC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACzC,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC;gBACpB,GAAG,EAAE,KAAK,CAAC,CAAC,CAAW;gBACvB,GAAG,EAAE,KAAK,CAAC,CAAC,CAAW;gBACvB,GAAG,EAAE,KAAK,CAAC,CAAC,CAAW;aACxB,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;CACF;AAED,KAAK,UAAU,UAAU,CAAC,MAAkB,EAAE,MAAiB;IAC7D,MAAM,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE;QAC/D,GAAG,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,2BAA2B;KACrE,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,MAAkB,EAClB,MAAiB,EACjB,SAAkB;IAElB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC;iEAC6D,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,EAC7F,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CACrC,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,GAAwB;IAC3C,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,WAAW;QACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,QAAQ,EAAE,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,WAAW,EAAE;QAC9D,aAAa,EAAE,GAAG,CAAC,WAAW;QAC9B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,GAAG,EAAE,GAAG,CAAC,QAAQ;QACjB,GAAG,EAAE,GAAG,CAAC,QAAQ;QACjB,GAAG,EAAE,GAAG,CAAC,WAAW;QACpB,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;QACjD,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;QACjD,gBAAgB,EAAE,GAAG,CAAC,kBAAkB;QACxC,GAAG,CAAC,GAAG,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAClF,GAAG,CAAC,GAAG,CAAC,UAAU,KAAK,IAAI;YACzB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;gBACjD,GAAG,CAAC,GAAG,CAAC,kBAAkB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,kBAAkB,EAAE,CAAC;gBACxF,GAAG,CAAC,GAAG,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,gBAAgB,EAAE,CAAC;aACnF,CAAC;KACP,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,GAAoC;IACtD,IAAI,GAAG,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACzF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,yBAAyB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
import { type CredentialRequest, type DelegatedCredentialProbe, type DownstreamCredential } from '@noodle-borg/runtime';
|
|
2
|
+
import type { AllowedCredentialBinding } from './credential-binding-index.js';
|
|
3
|
+
import type { GoogleWorkloadIdentityOptions } from './google-workload-identity.js';
|
|
4
|
+
/** Run credential-only Google exchanges and emit diagnostics safe for operators and logs. */
|
|
5
|
+
export declare function probeGoogleWorkloadIdentityCredentials(input: {
|
|
6
|
+
readonly bindings: readonly AllowedCredentialBinding[];
|
|
7
|
+
readonly options: GoogleWorkloadIdentityOptions | undefined;
|
|
8
|
+
readonly getCredential: (request: CredentialRequest) => Promise<DownstreamCredential>;
|
|
9
|
+
}): Promise<readonly DelegatedCredentialProbe[]>;
|
|
10
|
+
//# sourceMappingURL=google-workload-identity-probe.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"google-workload-identity-probe.d.ts","sourceRoot":"","sources":["../src/google-workload-identity-probe.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,iBAAiB,EAEtB,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAEnF,6FAA6F;AAC7F,wBAAsB,sCAAsC,CAAC,KAAK,EAAE;IAClE,QAAQ,CAAC,QAAQ,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACvD,QAAQ,CAAC,OAAO,EAAE,6BAA6B,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACvF,GAAG,OAAO,CAAC,SAAS,wBAAwB,EAAE,CAAC,CAiC/C"}
|