@noodleseed/one 0.70.0 → 0.71.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/commands/auth-google-ops.d.ts +3 -0
- package/dist/commands/auth-google-ops.d.ts.map +1 -0
- package/dist/commands/auth-google-ops.js +198 -0
- package/dist/commands/auth-google-ops.js.map +1 -0
- package/dist/commands/auth-ops.d.ts.map +1 -1
- package/dist/commands/auth-ops.js +5 -1
- package/dist/commands/auth-ops.js.map +1 -1
- package/dist/commands/catalog-data-core.d.ts.map +1 -1
- package/dist/commands/catalog-data-core.js +17 -1
- package/dist/commands/catalog-data-core.js.map +1 -1
- package/dist/deploy.js +1 -1
- package/dist/deploy.js.map +1 -1
- package/dist/index.d.ts +1 -1
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +1 -1
- package/dist/index.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/curated/command-groups.js +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/curated/command-groups.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/generated/example-files.d.ts.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/generated/example-files.js +7 -0
- package/node_modules/@noodle-borg/agent-kit/dist/generated/example-files.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/generated/surface.d.ts.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/generated/surface.js +1 -0
- package/node_modules/@noodle-borg/agent-kit/dist/generated/surface.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-refs.d.ts.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-refs.js +5 -1
- package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-refs.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/skill-content.d.ts.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/skill-content.js +7 -1
- package/node_modules/@noodle-borg/agent-kit/dist/skill-content.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/package.json +1 -1
- package/node_modules/@noodle-borg/authoring/dist/connection-types.d.ts +23 -0
- package/node_modules/@noodle-borg/authoring/dist/connection-types.d.ts.map +1 -1
- package/node_modules/@noodle-borg/authoring/dist/connection-types.js +16 -0
- package/node_modules/@noodle-borg/authoring/dist/connection-types.js.map +1 -1
- package/node_modules/@noodle-borg/authoring/dist/connections.d.ts +2 -2
- package/node_modules/@noodle-borg/authoring/dist/connections.d.ts.map +1 -1
- package/node_modules/@noodle-borg/authoring/dist/connections.js +13 -2
- package/node_modules/@noodle-borg/authoring/dist/connections.js.map +1 -1
- package/node_modules/@noodle-borg/authoring/dist/index.d.ts +1 -1
- package/node_modules/@noodle-borg/authoring/dist/index.d.ts.map +1 -1
- package/node_modules/@noodle-borg/authoring/dist/index.js +1 -1
- package/node_modules/@noodle-borg/authoring/dist/index.js.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/artifact/config.d.ts +2 -2
- package/node_modules/@noodle-borg/compiler/dist/artifact/config.d.ts.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/artifact/config.js +22 -1
- package/node_modules/@noodle-borg/compiler/dist/artifact/config.js.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/artifact/types.d.ts +9 -0
- package/node_modules/@noodle-borg/compiler/dist/artifact/types.d.ts.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/compile.d.ts.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/compile.js +1 -1
- package/node_modules/@noodle-borg/compiler/dist/compile.js.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/fulfilment-emit.d.ts.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/fulfilment-emit.js +49 -0
- package/node_modules/@noodle-borg/compiler/dist/fulfilment-emit.js.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/manifest/schema.d.ts +18 -0
- package/node_modules/@noodle-borg/compiler/dist/manifest/schema.d.ts.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/manifest/schema.js +15 -0
- package/node_modules/@noodle-borg/compiler/dist/manifest/schema.js.map +1 -1
- package/node_modules/@noodle-borg/runtime/dist/broker/types.d.ts +3 -1
- package/node_modules/@noodle-borg/runtime/dist/broker/types.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/credential-binding-index.d.ts +1 -0
- package/node_modules/@noodle-borg/service/dist/credential-binding-index.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/credential-binding-index.js +10 -2
- package/node_modules/@noodle-borg/service/dist/credential-binding-index.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/credential-broker-options.d.ts +3 -0
- package/node_modules/@noodle-borg/service/dist/credential-broker-options.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/credential-broker-options.js +9 -0
- package/node_modules/@noodle-borg/service/dist/credential-broker-options.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/credential-broker.d.ts +5 -2
- package/node_modules/@noodle-borg/service/dist/credential-broker.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/credential-broker.js +29 -0
- package/node_modules/@noodle-borg/service/dist/credential-broker.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-postgres.d.ts +21 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-postgres.js +195 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-probe.d.ts +10 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-probe.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-probe.js +47 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-probe.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-store.d.ts +46 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-store.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-store.js +88 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-store.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-validation.d.ts +4 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-validation.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-validation.js +13 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-validation.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity.d.ts +38 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity.js +289 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/index.d.ts +3 -0
- package/node_modules/@noodle-borg/service/dist/index.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/index.js +3 -0
- package/node_modules/@noodle-borg/service/dist/index.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/app.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/app.js +11 -0
- package/node_modules/@noodle-borg/service/dist/oauth/app.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/paths.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/paths.js +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/paths.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/options.d.ts +8 -0
- package/node_modules/@noodle-borg/service/dist/options.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/registry-types.d.ts +3 -0
- package/node_modules/@noodle-borg/service/dist/registry-types.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/registry.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/registry.js +3 -0
- package/node_modules/@noodle-borg/service/dist/registry.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/credential-auth-dispatch.d.ts +25 -0
- package/node_modules/@noodle-borg/service/dist/routes/credential-auth-dispatch.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/credential-auth-dispatch.js +21 -0
- package/node_modules/@noodle-borg/service/dist/routes/credential-auth-dispatch.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity-dispatch.d.ts +14 -0
- package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity-dispatch.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity-dispatch.js +30 -0
- package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity-dispatch.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity.d.ts +19 -0
- package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity.js +105 -0
- package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/paths.d.ts +3 -1
- package/node_modules/@noodle-borg/service/dist/routes/paths.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/paths.js +6 -0
- package/node_modules/@noodle-borg/service/dist/routes/paths.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/serve.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/serve.js +29 -0
- package/node_modules/@noodle-borg/service/dist/serve.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/service.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/service.js +6 -2
- package/node_modules/@noodle-borg/service/dist/service.js.map +1 -1
- package/package.json +1 -1
|
@@ -0,0 +1,47 @@
|
|
|
1
|
+
import { CredentialUnavailableError, } from '@noodle-borg/runtime';
|
|
2
|
+
/** Run credential-only Google exchanges and emit diagnostics safe for operators and logs. */
|
|
3
|
+
export async function probeGoogleWorkloadIdentityCredentials(input) {
|
|
4
|
+
const probes = [];
|
|
5
|
+
for (const allowed of input.bindings) {
|
|
6
|
+
const descriptor = allowed.descriptor;
|
|
7
|
+
try {
|
|
8
|
+
await input.getCredential({
|
|
9
|
+
...descriptor,
|
|
10
|
+
...(input.options === undefined
|
|
11
|
+
? {}
|
|
12
|
+
: {
|
|
13
|
+
tenantId: input.options.tenant,
|
|
14
|
+
deploymentId: input.options.deployment,
|
|
15
|
+
}),
|
|
16
|
+
});
|
|
17
|
+
probes.push({
|
|
18
|
+
...probeIdentity(descriptor),
|
|
19
|
+
ok: true,
|
|
20
|
+
});
|
|
21
|
+
}
|
|
22
|
+
catch (error) {
|
|
23
|
+
const diagnostic = error instanceof CredentialUnavailableError
|
|
24
|
+
? error
|
|
25
|
+
: new CredentialUnavailableError('credential_exchange_failed');
|
|
26
|
+
probes.push({
|
|
27
|
+
...probeIdentity(descriptor),
|
|
28
|
+
ok: false,
|
|
29
|
+
reason: diagnostic.reason,
|
|
30
|
+
...(diagnostic.fix === undefined ? {} : { fix: diagnostic.fix }),
|
|
31
|
+
...(diagnostic.next === undefined ? {} : { next: diagnostic.next }),
|
|
32
|
+
});
|
|
33
|
+
}
|
|
34
|
+
}
|
|
35
|
+
return probes;
|
|
36
|
+
}
|
|
37
|
+
function probeIdentity(descriptor) {
|
|
38
|
+
return {
|
|
39
|
+
connectorId: descriptor.connectorId,
|
|
40
|
+
operation: descriptor.operation,
|
|
41
|
+
bindingId: descriptor.bindingId,
|
|
42
|
+
connectionId: descriptor.connectionId,
|
|
43
|
+
profile: descriptor.profile,
|
|
44
|
+
authKind: 'googleWorkloadIdentity',
|
|
45
|
+
};
|
|
46
|
+
}
|
|
47
|
+
//# sourceMappingURL=google-workload-identity-probe.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"google-workload-identity-probe.js","sourceRoot":"","sources":["../src/google-workload-identity-probe.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,0BAA0B,GAG3B,MAAM,sBAAsB,CAAC;AAI9B,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAAC,KAI5D;IACC,MAAM,MAAM,GAA+B,EAAE,CAAC;IAC9C,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,aAAa,CAAC;gBACxB,GAAG,UAAU;gBACb,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS;oBAC7B,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC;wBACE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;wBAC9B,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;qBACvC,CAAC;aACP,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,aAAa,CAAC,UAAU,CAAC;gBAC5B,EAAE,EAAE,IAAI;aACT,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,UAAU,GACd,KAAK,YAAY,0BAA0B;gBACzC,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,IAAI,0BAA0B,CAAC,4BAA4B,CAAC,CAAC;YACnE,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,aAAa,CAAC,UAAU,CAAC;gBAC5B,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,GAAG,CAAC,UAAU,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC;gBAChE,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;aACpE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,UAAkD;IAQvE,OAAO;QACL,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,QAAQ,EAAE,wBAAwB;KACnC,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,46 @@
|
|
|
1
|
+
import type { GoogleWorkloadIdentityRecord, GoogleWorkloadIdentityResolver } from './google-workload-identity.js';
|
|
2
|
+
import { type TenantRef } from './store.js';
|
|
3
|
+
export interface StoredGoogleWorkloadIdentity extends GoogleWorkloadIdentityRecord {
|
|
4
|
+
readonly org: string;
|
|
5
|
+
readonly app: string;
|
|
6
|
+
readonly env: string;
|
|
7
|
+
readonly createdAt: string;
|
|
8
|
+
readonly updatedAt: string;
|
|
9
|
+
readonly createdBySubject: string;
|
|
10
|
+
readonly createdByEmail?: string;
|
|
11
|
+
readonly revokedAt?: string;
|
|
12
|
+
readonly revokedBySubject?: string;
|
|
13
|
+
readonly revokedByEmail?: string;
|
|
14
|
+
}
|
|
15
|
+
export interface PrepareGoogleWorkloadIdentityInput extends TenantRef {
|
|
16
|
+
readonly actorSubject: string;
|
|
17
|
+
readonly actorEmail?: string;
|
|
18
|
+
}
|
|
19
|
+
export interface RevokeGoogleWorkloadIdentityInput extends TenantRef {
|
|
20
|
+
readonly actorSubject: string;
|
|
21
|
+
readonly actorEmail?: string;
|
|
22
|
+
}
|
|
23
|
+
export interface GoogleWorkloadIdentityStore extends GoogleWorkloadIdentityResolver {
|
|
24
|
+
prepare(input: PrepareGoogleWorkloadIdentityInput): Promise<StoredGoogleWorkloadIdentity>;
|
|
25
|
+
get(tenant: TenantRef): Promise<StoredGoogleWorkloadIdentity | undefined>;
|
|
26
|
+
revoke(input: RevokeGoogleWorkloadIdentityInput): Promise<StoredGoogleWorkloadIdentity | undefined>;
|
|
27
|
+
}
|
|
28
|
+
/**
|
|
29
|
+
* Local/test store. Hosted multi-instance services select the PostgreSQL implementation so revocation
|
|
30
|
+
* is visible to every broker before any cached access token is reused.
|
|
31
|
+
*/
|
|
32
|
+
export declare class InMemoryGoogleWorkloadIdentityStore implements GoogleWorkloadIdentityStore {
|
|
33
|
+
#private;
|
|
34
|
+
constructor(options?: {
|
|
35
|
+
readonly now?: () => Date;
|
|
36
|
+
readonly randomId?: () => string;
|
|
37
|
+
});
|
|
38
|
+
prepare(input: PrepareGoogleWorkloadIdentityInput): Promise<StoredGoogleWorkloadIdentity>;
|
|
39
|
+
get(tenant: TenantRef): Promise<StoredGoogleWorkloadIdentity | undefined>;
|
|
40
|
+
revoke(input: RevokeGoogleWorkloadIdentityInput): Promise<StoredGoogleWorkloadIdentity | undefined>;
|
|
41
|
+
resolve(input: {
|
|
42
|
+
readonly tenantId: string;
|
|
43
|
+
readonly deploymentId: string;
|
|
44
|
+
}): Promise<GoogleWorkloadIdentityRecord | undefined>;
|
|
45
|
+
}
|
|
46
|
+
//# sourceMappingURL=google-workload-identity-store.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"google-workload-identity-store.d.ts","sourceRoot":"","sources":["../src/google-workload-identity-store.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,4BAA4B,EAC5B,8BAA8B,EAC/B,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,KAAK,SAAS,EAAqB,MAAM,YAAY,CAAC;AAE/D,MAAM,WAAW,4BAA6B,SAAQ,4BAA4B;IAChF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,kCAAmC,SAAQ,SAAS;IACnE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,iCAAkC,SAAQ,SAAS;IAClE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,2BAA4B,SAAQ,8BAA8B;IACjF,OAAO,CAAC,KAAK,EAAE,kCAAkC,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC1F,GAAG,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC,CAAC;IAC1E,MAAM,CACJ,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC,CAAC;CACtD;AAED;;;GAGG;AACH,qBAAa,mCAAoC,YAAW,2BAA2B;;gBAMnF,OAAO,GAAE;QACP,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;QAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,MAAM,CAAC;KAC7B;IAMR,OAAO,CAAC,KAAK,EAAE,kCAAkC,GAAG,OAAO,CAAC,4BAA4B,CAAC;IAwBzF,GAAG,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC;IAKzE,MAAM,CACJ,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC;IAqB9C,OAAO,CAAC,KAAK,EAAE;QACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;KAC/B,GAAG,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC;CAItD"}
|
|
@@ -0,0 +1,88 @@
|
|
|
1
|
+
import { randomBytes } from 'node:crypto';
|
|
2
|
+
import { hasAsciiControlCharacters } from './google-workload-identity-validation.js';
|
|
3
|
+
import { validateTenantRef } from './store.js';
|
|
4
|
+
/**
|
|
5
|
+
* Local/test store. Hosted multi-instance services select the PostgreSQL implementation so revocation
|
|
6
|
+
* is visible to every broker before any cached access token is reused.
|
|
7
|
+
*/
|
|
8
|
+
export class InMemoryGoogleWorkloadIdentityStore {
|
|
9
|
+
#records = new Map();
|
|
10
|
+
#now;
|
|
11
|
+
#randomId;
|
|
12
|
+
constructor(options = {}) {
|
|
13
|
+
this.#now = options.now ?? (() => new Date());
|
|
14
|
+
this.#randomId = options.randomId ?? (() => `gwi_${randomBytes(18).toString('base64url')}`);
|
|
15
|
+
}
|
|
16
|
+
prepare(input) {
|
|
17
|
+
const tenant = validateLifecycleInput(input);
|
|
18
|
+
const key = tenantKey(tenant);
|
|
19
|
+
const existing = this.#records.get(key);
|
|
20
|
+
if (existing?.active)
|
|
21
|
+
return Promise.resolve(structuredClone(existing));
|
|
22
|
+
const now = this.#now().toISOString();
|
|
23
|
+
const id = validateOpaqueId(this.#randomId());
|
|
24
|
+
const record = {
|
|
25
|
+
id,
|
|
26
|
+
revision: id,
|
|
27
|
+
tenantId: key,
|
|
28
|
+
environmentId: tenant.env,
|
|
29
|
+
subject: `noodle:google-workload:${id}`,
|
|
30
|
+
active: true,
|
|
31
|
+
...tenant,
|
|
32
|
+
createdAt: now,
|
|
33
|
+
updatedAt: now,
|
|
34
|
+
createdBySubject: validateActor(input.actorSubject),
|
|
35
|
+
...(input.actorEmail === undefined ? {} : { createdByEmail: input.actorEmail }),
|
|
36
|
+
};
|
|
37
|
+
this.#records.set(key, record);
|
|
38
|
+
return Promise.resolve(structuredClone(record));
|
|
39
|
+
}
|
|
40
|
+
get(tenant) {
|
|
41
|
+
const record = this.#records.get(tenantKey(validateTenantRef(tenant)));
|
|
42
|
+
return Promise.resolve(record === undefined ? undefined : structuredClone(record));
|
|
43
|
+
}
|
|
44
|
+
revoke(input) {
|
|
45
|
+
const tenant = validateLifecycleInput(input);
|
|
46
|
+
const key = tenantKey(tenant);
|
|
47
|
+
const existing = this.#records.get(key);
|
|
48
|
+
if (existing === undefined || !existing.active) {
|
|
49
|
+
return Promise.resolve(existing === undefined ? undefined : structuredClone(existing));
|
|
50
|
+
}
|
|
51
|
+
const now = this.#now().toISOString();
|
|
52
|
+
const revoked = {
|
|
53
|
+
...existing,
|
|
54
|
+
revision: `${existing.id}:revoked`,
|
|
55
|
+
active: false,
|
|
56
|
+
updatedAt: now,
|
|
57
|
+
revokedAt: now,
|
|
58
|
+
revokedBySubject: validateActor(input.actorSubject),
|
|
59
|
+
...(input.actorEmail === undefined ? {} : { revokedByEmail: input.actorEmail }),
|
|
60
|
+
};
|
|
61
|
+
this.#records.set(key, revoked);
|
|
62
|
+
return Promise.resolve(structuredClone(revoked));
|
|
63
|
+
}
|
|
64
|
+
async resolve(input) {
|
|
65
|
+
const record = this.#records.get(input.tenantId);
|
|
66
|
+
return record === undefined ? undefined : structuredClone(record);
|
|
67
|
+
}
|
|
68
|
+
}
|
|
69
|
+
function validateLifecycleInput(input) {
|
|
70
|
+
validateActor(input.actorSubject);
|
|
71
|
+
return validateTenantRef(input);
|
|
72
|
+
}
|
|
73
|
+
function validateActor(value) {
|
|
74
|
+
if (value.length < 1 || value.length > 512 || hasAsciiControlCharacters(value)) {
|
|
75
|
+
throw new Error('invalid workload identity actor');
|
|
76
|
+
}
|
|
77
|
+
return value;
|
|
78
|
+
}
|
|
79
|
+
function validateOpaqueId(value) {
|
|
80
|
+
if (!/^[A-Za-z0-9_-]{4,96}$/.test(value)) {
|
|
81
|
+
throw new Error('invalid workload identity id');
|
|
82
|
+
}
|
|
83
|
+
return value;
|
|
84
|
+
}
|
|
85
|
+
function tenantKey(tenant) {
|
|
86
|
+
return `${tenant.org}/${tenant.app}/${tenant.env}`;
|
|
87
|
+
}
|
|
88
|
+
//# sourceMappingURL=google-workload-identity-store.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"google-workload-identity-store.js","sourceRoot":"","sources":["../src/google-workload-identity-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAK1C,OAAO,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAC;AACrF,OAAO,EAAkB,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAiC/D;;;GAGG;AACH,MAAM,OAAO,mCAAmC;IACrC,QAAQ,GAAG,IAAI,GAAG,EAAwC,CAAC;IAC3D,IAAI,CAAa;IACjB,SAAS,CAAe;IAEjC,YACE,UAGI,EAAE;QAEN,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,OAAO,CAAC,KAAyC;QAC/C,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,QAAQ,EAAE,MAAM;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;QACxE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAiC;YAC3C,EAAE;YACF,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE,GAAG;YACb,aAAa,EAAE,MAAM,CAAC,GAAG;YACzB,OAAO,EAAE,0BAA0B,EAAE,EAAE;YACvC,MAAM,EAAE,IAAI;YACZ,GAAG,MAAM;YACT,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;YACd,gBAAgB,EAAE,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC;YACnD,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;SAChF,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC/B,OAAO,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,GAAG,CAAC,MAAiB;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,CACJ,KAAwC;QAExC,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC/C,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,OAAO,GAAiC;YAC5C,GAAG,QAAQ;YACX,QAAQ,EAAE,GAAG,QAAQ,CAAC,EAAE,UAAU;YAClC,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;YACd,gBAAgB,EAAE,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC;YACnD,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;SAChF,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAChC,OAAO,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAGb;QACC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjD,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACpE,CAAC;CACF;AAED,SAAS,sBAAsB,CAC7B,KAAQ;IAER,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAClC,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,yBAAyB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,MAAiB;IAClC,OAAO,GAAG,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;AACrD,CAAC"}
|
|
@@ -0,0 +1,4 @@
|
|
|
1
|
+
/** Reject ASCII C0/DEL controls without regex literals that hide control ranges from linters. */
|
|
2
|
+
export declare function hasAsciiControlCharacters(value: string): boolean;
|
|
3
|
+
export declare function hasWhitespaceOrAsciiControlCharacters(value: string): boolean;
|
|
4
|
+
//# sourceMappingURL=google-workload-identity-validation.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"google-workload-identity-validation.d.ts","sourceRoot":"","sources":["../src/google-workload-identity-validation.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAMhE;AAED,wBAAgB,qCAAqC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAI5E"}
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
/** Reject ASCII C0/DEL controls without regex literals that hide control ranges from linters. */
|
|
2
|
+
export function hasAsciiControlCharacters(value) {
|
|
3
|
+
for (const character of value) {
|
|
4
|
+
const code = character.charCodeAt(0);
|
|
5
|
+
if (code <= 0x1f || code === 0x7f)
|
|
6
|
+
return true;
|
|
7
|
+
}
|
|
8
|
+
return false;
|
|
9
|
+
}
|
|
10
|
+
export function hasWhitespaceOrAsciiControlCharacters(value) {
|
|
11
|
+
return [...value].some((character) => /\s/u.test(character) || hasAsciiControlCharacters(character));
|
|
12
|
+
}
|
|
13
|
+
//# sourceMappingURL=google-workload-identity-validation.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"google-workload-identity-validation.js","sourceRoot":"","sources":["../src/google-workload-identity-validation.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,MAAM,UAAU,yBAAyB,CAAC,KAAa;IACrD,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,qCAAqC,CAAC,KAAa;IACjE,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CACpB,CAAC,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,yBAAyB,CAAC,SAAS,CAAC,CAC7E,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,38 @@
|
|
|
1
|
+
import type { SigningKeyProvider } from '@noodle-borg/auth';
|
|
2
|
+
import { type CredentialRequest, type DownstreamCredential } from '@noodle-borg/runtime';
|
|
3
|
+
import type { AllowedCredentialBinding } from './credential-binding-index.js';
|
|
4
|
+
export interface GoogleWorkloadIdentityRecord {
|
|
5
|
+
readonly id: string;
|
|
6
|
+
/** Changes on every operator-visible lifecycle mutation and invalidates cached credentials. */
|
|
7
|
+
readonly revision: string;
|
|
8
|
+
readonly tenantId: string;
|
|
9
|
+
readonly environmentId: string;
|
|
10
|
+
/** Stable OIDC subject mapped to `google.subject` by the customer's provider. */
|
|
11
|
+
readonly subject: string;
|
|
12
|
+
readonly active: boolean;
|
|
13
|
+
}
|
|
14
|
+
export interface GoogleWorkloadIdentityResolver {
|
|
15
|
+
resolve(input: {
|
|
16
|
+
readonly tenantId: string;
|
|
17
|
+
readonly deploymentId: string;
|
|
18
|
+
}): Promise<GoogleWorkloadIdentityRecord | undefined>;
|
|
19
|
+
}
|
|
20
|
+
export interface GoogleWorkloadIdentityOptions {
|
|
21
|
+
readonly issuer: string;
|
|
22
|
+
readonly signer: SigningKeyProvider;
|
|
23
|
+
readonly identities: GoogleWorkloadIdentityResolver;
|
|
24
|
+
readonly tenant: string;
|
|
25
|
+
readonly deployment: string;
|
|
26
|
+
/** Test/internal seam. Production always calls Google's fixed service endpoints. */
|
|
27
|
+
readonly fetchImpl?: typeof fetch;
|
|
28
|
+
}
|
|
29
|
+
export type GoogleWorkloadIdentityRuntimeOptions = Pick<GoogleWorkloadIdentityOptions, 'issuer' | 'signer' | 'identities'>;
|
|
30
|
+
/** Exchanges one active Noodle deployment identity for a binding-scoped Google access token. */
|
|
31
|
+
export declare class GoogleWorkloadIdentityBindingBroker {
|
|
32
|
+
#private;
|
|
33
|
+
readonly options: GoogleWorkloadIdentityOptions;
|
|
34
|
+
readonly now: () => number;
|
|
35
|
+
constructor(options: GoogleWorkloadIdentityOptions, now: () => number);
|
|
36
|
+
getCredential(request: CredentialRequest, allowed: AllowedCredentialBinding, variables: Readonly<Record<string, string>>): Promise<DownstreamCredential>;
|
|
37
|
+
}
|
|
38
|
+
//# sourceMappingURL=google-workload-identity.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"google-workload-identity.d.ts","sourceRoot":"","sources":["../src/google-workload-identity.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,OAAO,EACL,KAAK,iBAAiB,EAEtB,KAAK,oBAAoB,EAE1B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAsB9E,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,+FAA+F;IAC/F,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,iFAAiF;IACjF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,8BAA8B;IAC7C,OAAO,CAAC,KAAK,EAAE;QACb,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;KAC/B,GAAG,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,8BAA8B,CAAC;IACpD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,oFAAoF;IACpF,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CACnC;AAED,MAAM,MAAM,oCAAoC,GAAG,IAAI,CACrD,6BAA6B,EAC7B,QAAQ,GAAG,QAAQ,GAAG,YAAY,CACnC,CAAC;AAaF,gGAAgG;AAChG,qBAAa,mCAAmC;;IAK5C,QAAQ,CAAC,OAAO,EAAE,6BAA6B;IAC/C,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM;gBADjB,OAAO,EAAE,6BAA6B,EACtC,GAAG,EAAE,MAAM,MAAM;IAGtB,aAAa,CACjB,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE,wBAAwB,EACjC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAC1C,OAAO,CAAC,oBAAoB,CAAC;CAgHjC"}
|
|
@@ -0,0 +1,289 @@
|
|
|
1
|
+
import { randomUUID } from 'node:crypto';
|
|
2
|
+
import { CredentialUnavailableError, MapServiceBroker, } from '@noodle-borg/runtime';
|
|
3
|
+
import { SignJWT } from 'jose';
|
|
4
|
+
import { hasAsciiControlCharacters, hasWhitespaceOrAsciiControlCharacters, } from './google-workload-identity-validation.js';
|
|
5
|
+
import { resolveManagedVariablesInString } from './managed-config-expressions.js';
|
|
6
|
+
const GOOGLE_STS_URL = 'https://sts.googleapis.com/v1/token';
|
|
7
|
+
const GOOGLE_IAM_CREDENTIALS_ORIGIN = 'https://iamcredentials.googleapis.com';
|
|
8
|
+
const GOOGLE_CLOUD_PLATFORM_SCOPE = 'https://www.googleapis.com/auth/cloud-platform';
|
|
9
|
+
const TOKEN_EXCHANGE_GRANT = 'urn:ietf:params:oauth:grant-type:token-exchange';
|
|
10
|
+
const ACCESS_TOKEN_TYPE = 'urn:ietf:params:oauth:token-type:access_token';
|
|
11
|
+
const JWT_TOKEN_TYPE = 'urn:ietf:params:oauth:token-type:jwt';
|
|
12
|
+
const ASSERTION_LIFETIME_SECONDS = 3_600;
|
|
13
|
+
const CACHE_REFRESH_SAFETY_MS = 5 * 60 * 1_000;
|
|
14
|
+
const EXCHANGE_TIMEOUT_MS = 10_000;
|
|
15
|
+
const MAX_RESPONSE_BYTES = 64 * 1_024;
|
|
16
|
+
const PROVIDER_RE = /^projects\/[1-9][0-9]{5,30}\/locations\/global\/workloadIdentityPools\/[a-z][a-z0-9-]{3,31}\/providers\/[a-z][a-z0-9-]{3,31}$/;
|
|
17
|
+
const SERVICE_ACCOUNT_RE = /^[a-z0-9][a-z0-9._-]{0,62}@[a-z0-9][a-z0-9-]{0,62}\.iam\.gserviceaccount\.com$/;
|
|
18
|
+
/** Exchanges one active Noodle deployment identity for a binding-scoped Google access token. */
|
|
19
|
+
export class GoogleWorkloadIdentityBindingBroker {
|
|
20
|
+
options;
|
|
21
|
+
now;
|
|
22
|
+
#cache = new Map();
|
|
23
|
+
#inflight = new Map();
|
|
24
|
+
constructor(options, now) {
|
|
25
|
+
this.options = options;
|
|
26
|
+
this.now = now;
|
|
27
|
+
}
|
|
28
|
+
async getCredential(request, allowed, variables) {
|
|
29
|
+
if (request.tenantId !== this.options.tenant ||
|
|
30
|
+
request.deploymentId !== this.options.deployment ||
|
|
31
|
+
allowed.source.kind !== 'googleWorkloadIdentity') {
|
|
32
|
+
throw notConfigured();
|
|
33
|
+
}
|
|
34
|
+
const identity = await this.#activeIdentity();
|
|
35
|
+
const source = resolveSource(allowed.source, variables);
|
|
36
|
+
const descriptorKey = JSON.stringify([
|
|
37
|
+
this.options.tenant,
|
|
38
|
+
this.options.deployment,
|
|
39
|
+
MapServiceBroker.bindingKey(allowed.descriptor),
|
|
40
|
+
]);
|
|
41
|
+
const configKey = JSON.stringify([
|
|
42
|
+
identity.revision,
|
|
43
|
+
source.provider,
|
|
44
|
+
source.access,
|
|
45
|
+
canonicalScopes(allowed.descriptor.requiredScopes),
|
|
46
|
+
]);
|
|
47
|
+
const cached = this.#cache.get(descriptorKey);
|
|
48
|
+
if (cached !== undefined) {
|
|
49
|
+
if (cached.configKey === configKey && cached.expiresAt > this.now()) {
|
|
50
|
+
return { token: cached.token };
|
|
51
|
+
}
|
|
52
|
+
this.#cache.delete(descriptorKey);
|
|
53
|
+
}
|
|
54
|
+
const inflightKey = JSON.stringify([descriptorKey, configKey]);
|
|
55
|
+
const inflight = this.#inflight.get(inflightKey);
|
|
56
|
+
if (inflight !== undefined)
|
|
57
|
+
return inflight;
|
|
58
|
+
const promise = this.#exchange(allowed, identity, source)
|
|
59
|
+
.then((result) => {
|
|
60
|
+
const expiresAt = result.expiresAt - CACHE_REFRESH_SAFETY_MS;
|
|
61
|
+
if (expiresAt <= this.now())
|
|
62
|
+
throw new Error('Google credential lifetime is too short');
|
|
63
|
+
this.#cache.set(descriptorKey, {
|
|
64
|
+
configKey,
|
|
65
|
+
token: result.token,
|
|
66
|
+
expiresAt,
|
|
67
|
+
});
|
|
68
|
+
return { token: result.token };
|
|
69
|
+
})
|
|
70
|
+
.catch(() => {
|
|
71
|
+
throw exchangeFailed();
|
|
72
|
+
})
|
|
73
|
+
.finally(() => this.#inflight.delete(inflightKey));
|
|
74
|
+
this.#inflight.set(inflightKey, promise);
|
|
75
|
+
return promise;
|
|
76
|
+
}
|
|
77
|
+
async #activeIdentity() {
|
|
78
|
+
let identity;
|
|
79
|
+
try {
|
|
80
|
+
identity = await this.options.identities.resolve({
|
|
81
|
+
tenantId: this.options.tenant,
|
|
82
|
+
deploymentId: this.options.deployment,
|
|
83
|
+
});
|
|
84
|
+
}
|
|
85
|
+
catch {
|
|
86
|
+
throw notConfigured();
|
|
87
|
+
}
|
|
88
|
+
if (identity === undefined ||
|
|
89
|
+
!identity.active ||
|
|
90
|
+
identity.tenantId !== this.options.tenant ||
|
|
91
|
+
!validIdentifier(identity.id, 128) ||
|
|
92
|
+
!validIdentifier(identity.revision, 128) ||
|
|
93
|
+
!validIdentifier(identity.environmentId, 128) ||
|
|
94
|
+
!validSubject(identity.subject)) {
|
|
95
|
+
throw notConfigured();
|
|
96
|
+
}
|
|
97
|
+
return identity;
|
|
98
|
+
}
|
|
99
|
+
async #exchange(allowed, identity, source) {
|
|
100
|
+
const providerAudience = `//iam.googleapis.com/${source.provider}`;
|
|
101
|
+
const assertion = await signGoogleSubjectToken({
|
|
102
|
+
issuer: validateIssuer(this.options.issuer),
|
|
103
|
+
audience: providerAudience,
|
|
104
|
+
signer: this.options.signer,
|
|
105
|
+
identity,
|
|
106
|
+
deploymentId: this.options.deployment,
|
|
107
|
+
connectionId: allowed.descriptor.connectionId,
|
|
108
|
+
nowMs: this.now(),
|
|
109
|
+
});
|
|
110
|
+
const requestedScopes = source.access.kind === 'direct'
|
|
111
|
+
? canonicalScopes(allowed.descriptor.requiredScopes)
|
|
112
|
+
: [GOOGLE_CLOUD_PLATFORM_SCOPE];
|
|
113
|
+
const sts = await exchangeGoogleSts({
|
|
114
|
+
fetchImpl: this.options.fetchImpl ?? fetch,
|
|
115
|
+
audience: providerAudience,
|
|
116
|
+
assertion,
|
|
117
|
+
scopes: requestedScopes,
|
|
118
|
+
});
|
|
119
|
+
if (source.access.kind === 'direct') {
|
|
120
|
+
return {
|
|
121
|
+
token: sts.accessToken,
|
|
122
|
+
expiresAt: this.now() + sts.expiresIn * 1_000,
|
|
123
|
+
};
|
|
124
|
+
}
|
|
125
|
+
return impersonateServiceAccount({
|
|
126
|
+
fetchImpl: this.options.fetchImpl ?? fetch,
|
|
127
|
+
federatedToken: sts.accessToken,
|
|
128
|
+
serviceAccount: source.access.serviceAccount,
|
|
129
|
+
scopes: canonicalScopes(allowed.descriptor.requiredScopes),
|
|
130
|
+
});
|
|
131
|
+
}
|
|
132
|
+
}
|
|
133
|
+
function resolveSource(source, variables) {
|
|
134
|
+
let provider;
|
|
135
|
+
let serviceAccount;
|
|
136
|
+
try {
|
|
137
|
+
provider = resolveManagedVariablesInString(source.provider, variables);
|
|
138
|
+
serviceAccount =
|
|
139
|
+
source.access.kind === 'serviceAccountImpersonation'
|
|
140
|
+
? resolveManagedVariablesInString(source.access.serviceAccount, variables)
|
|
141
|
+
: undefined;
|
|
142
|
+
}
|
|
143
|
+
catch {
|
|
144
|
+
throw notConfigured();
|
|
145
|
+
}
|
|
146
|
+
if (!PROVIDER_RE.test(provider))
|
|
147
|
+
throw notConfigured();
|
|
148
|
+
if (serviceAccount !== undefined && !SERVICE_ACCOUNT_RE.test(serviceAccount)) {
|
|
149
|
+
throw notConfigured();
|
|
150
|
+
}
|
|
151
|
+
return {
|
|
152
|
+
provider,
|
|
153
|
+
access: serviceAccount === undefined
|
|
154
|
+
? { kind: 'direct' }
|
|
155
|
+
: { kind: 'serviceAccountImpersonation', serviceAccount },
|
|
156
|
+
};
|
|
157
|
+
}
|
|
158
|
+
async function signGoogleSubjectToken(input) {
|
|
159
|
+
const key = await input.signer.signingKey();
|
|
160
|
+
if (key.alg !== 'RS256')
|
|
161
|
+
throw new Error('Google workload identity requires RS256');
|
|
162
|
+
const nowSeconds = Math.floor(input.nowMs / 1_000);
|
|
163
|
+
return new SignJWT({
|
|
164
|
+
tenant_id: input.identity.tenantId,
|
|
165
|
+
environment_id: input.identity.environmentId,
|
|
166
|
+
workload_id: input.identity.id,
|
|
167
|
+
deployment_id: input.deploymentId,
|
|
168
|
+
connection_id: input.connectionId,
|
|
169
|
+
})
|
|
170
|
+
.setProtectedHeader({ alg: key.alg, kid: key.kid, typ: 'JWT' })
|
|
171
|
+
.setIssuer(input.issuer)
|
|
172
|
+
.setSubject(input.identity.subject)
|
|
173
|
+
.setAudience(input.audience)
|
|
174
|
+
.setIssuedAt(nowSeconds)
|
|
175
|
+
.setExpirationTime(nowSeconds + ASSERTION_LIFETIME_SECONDS)
|
|
176
|
+
.setJti(randomUUID())
|
|
177
|
+
.sign(key.privateKey);
|
|
178
|
+
}
|
|
179
|
+
async function exchangeGoogleSts(input) {
|
|
180
|
+
const response = await input.fetchImpl(GOOGLE_STS_URL, {
|
|
181
|
+
method: 'POST',
|
|
182
|
+
redirect: 'manual',
|
|
183
|
+
headers: { 'content-type': 'application/json' },
|
|
184
|
+
body: JSON.stringify({
|
|
185
|
+
grantType: TOKEN_EXCHANGE_GRANT,
|
|
186
|
+
audience: input.audience,
|
|
187
|
+
scope: input.scopes.join(' '),
|
|
188
|
+
requestedTokenType: ACCESS_TOKEN_TYPE,
|
|
189
|
+
subjectToken: input.assertion,
|
|
190
|
+
subjectTokenType: JWT_TOKEN_TYPE,
|
|
191
|
+
}),
|
|
192
|
+
signal: AbortSignal.timeout(EXCHANGE_TIMEOUT_MS),
|
|
193
|
+
});
|
|
194
|
+
if (!response.ok)
|
|
195
|
+
throw new Error('Google STS rejected the token exchange');
|
|
196
|
+
const body = await readBoundedJson(response);
|
|
197
|
+
if (!isRecord(body) ||
|
|
198
|
+
typeof body.access_token !== 'string' ||
|
|
199
|
+
body.access_token.length < 1 ||
|
|
200
|
+
body.access_token.length > 16_384 ||
|
|
201
|
+
body.token_type !== 'Bearer' ||
|
|
202
|
+
body.issued_token_type !== ACCESS_TOKEN_TYPE ||
|
|
203
|
+
!Number.isInteger(body.expires_in) ||
|
|
204
|
+
body.expires_in < 1 ||
|
|
205
|
+
body.expires_in > 43_200) {
|
|
206
|
+
throw new Error('Google STS returned an invalid response');
|
|
207
|
+
}
|
|
208
|
+
return { accessToken: body.access_token, expiresIn: body.expires_in };
|
|
209
|
+
}
|
|
210
|
+
async function impersonateServiceAccount(input) {
|
|
211
|
+
const encodedAccount = encodeURIComponent(input.serviceAccount);
|
|
212
|
+
const response = await input.fetchImpl(`${GOOGLE_IAM_CREDENTIALS_ORIGIN}/v1/projects/-/serviceAccounts/${encodedAccount}:generateAccessToken`, {
|
|
213
|
+
method: 'POST',
|
|
214
|
+
redirect: 'manual',
|
|
215
|
+
headers: {
|
|
216
|
+
authorization: `Bearer ${input.federatedToken}`,
|
|
217
|
+
'content-type': 'application/json',
|
|
218
|
+
},
|
|
219
|
+
body: JSON.stringify({ scope: input.scopes, lifetime: '3600s' }),
|
|
220
|
+
signal: AbortSignal.timeout(EXCHANGE_TIMEOUT_MS),
|
|
221
|
+
});
|
|
222
|
+
if (!response.ok)
|
|
223
|
+
throw new Error('Google IAM Credentials rejected impersonation');
|
|
224
|
+
const body = await readBoundedJson(response);
|
|
225
|
+
if (!isRecord(body) ||
|
|
226
|
+
typeof body.accessToken !== 'string' ||
|
|
227
|
+
body.accessToken.length < 1 ||
|
|
228
|
+
body.accessToken.length > 16_384 ||
|
|
229
|
+
typeof body.expireTime !== 'string') {
|
|
230
|
+
throw new Error('Google IAM Credentials returned an invalid response');
|
|
231
|
+
}
|
|
232
|
+
const expiresAt = Date.parse(body.expireTime);
|
|
233
|
+
if (!Number.isFinite(expiresAt)) {
|
|
234
|
+
throw new Error('Google IAM Credentials returned an invalid expiration');
|
|
235
|
+
}
|
|
236
|
+
return { token: body.accessToken, expiresAt };
|
|
237
|
+
}
|
|
238
|
+
async function readBoundedJson(response) {
|
|
239
|
+
const contentLength = Number(response.headers.get('content-length'));
|
|
240
|
+
if (Number.isFinite(contentLength) && contentLength > MAX_RESPONSE_BYTES) {
|
|
241
|
+
throw new Error('Google credential response is too large');
|
|
242
|
+
}
|
|
243
|
+
const text = await response.text();
|
|
244
|
+
if (Buffer.byteLength(text, 'utf8') > MAX_RESPONSE_BYTES) {
|
|
245
|
+
throw new Error('Google credential response is too large');
|
|
246
|
+
}
|
|
247
|
+
return JSON.parse(text);
|
|
248
|
+
}
|
|
249
|
+
function validateIssuer(value) {
|
|
250
|
+
const url = new URL(value);
|
|
251
|
+
if (url.protocol !== 'https:' ||
|
|
252
|
+
url.username !== '' ||
|
|
253
|
+
url.password !== '' ||
|
|
254
|
+
url.pathname !== '/' ||
|
|
255
|
+
url.search !== '' ||
|
|
256
|
+
url.hash !== '') {
|
|
257
|
+
throw new Error('Google workload issuer must be an HTTPS origin');
|
|
258
|
+
}
|
|
259
|
+
return url.origin;
|
|
260
|
+
}
|
|
261
|
+
function canonicalScopes(values) {
|
|
262
|
+
const scopes = [...new Set(values)].sort();
|
|
263
|
+
if (scopes.length < 1 ||
|
|
264
|
+
scopes.some((scope) => !scope.startsWith('https://www.googleapis.com/auth/') ||
|
|
265
|
+
scope.length > 512 ||
|
|
266
|
+
hasWhitespaceOrAsciiControlCharacters(scope))) {
|
|
267
|
+
throw new Error('invalid Google OAuth scopes');
|
|
268
|
+
}
|
|
269
|
+
return scopes;
|
|
270
|
+
}
|
|
271
|
+
function validIdentifier(value, maxLength) {
|
|
272
|
+
return value.length > 0 && value.length <= maxLength && !hasAsciiControlCharacters(value);
|
|
273
|
+
}
|
|
274
|
+
function validSubject(value) {
|
|
275
|
+
return validIdentifier(value, 127) && Buffer.byteLength(value, 'utf8') <= 127;
|
|
276
|
+
}
|
|
277
|
+
function isRecord(value) {
|
|
278
|
+
return typeof value === 'object' && value !== null && !Array.isArray(value);
|
|
279
|
+
}
|
|
280
|
+
function notConfigured() {
|
|
281
|
+
return new CredentialUnavailableError('credential_not_configured');
|
|
282
|
+
}
|
|
283
|
+
function exchangeFailed() {
|
|
284
|
+
return new CredentialUnavailableError('credential_exchange_failed', {
|
|
285
|
+
fix: 'Verify the Google workload identity provider, IAM grants, and service availability.',
|
|
286
|
+
next: ['noodle auth doctor --live'],
|
|
287
|
+
});
|
|
288
|
+
}
|
|
289
|
+
//# sourceMappingURL=google-workload-identity.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"google-workload-identity.js","sourceRoot":"","sources":["../src/google-workload-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAEL,0BAA0B,EAE1B,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAE/B,OAAO,EACL,yBAAyB,EACzB,qCAAqC,GACtC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAC;AAElF,MAAM,cAAc,GAAG,qCAAqC,CAAC;AAC7D,MAAM,6BAA6B,GAAG,uCAAuC,CAAC;AAC9E,MAAM,2BAA2B,GAAG,gDAAgD,CAAC;AACrF,MAAM,oBAAoB,GAAG,iDAAiD,CAAC;AAC/E,MAAM,iBAAiB,GAAG,+CAA+C,CAAC;AAC1E,MAAM,cAAc,GAAG,sCAAsC,CAAC;AAC9D,MAAM,0BAA0B,GAAG,KAAK,CAAC;AACzC,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;AAC/C,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,MAAM,kBAAkB,GAAG,EAAE,GAAG,KAAK,CAAC;AACtC,MAAM,WAAW,GACf,+HAA+H,CAAC;AAClI,MAAM,kBAAkB,GACtB,gFAAgF,CAAC;AA8CnF,gGAAgG;AAChG,MAAM,OAAO,mCAAmC;IAKnC;IACA;IALF,MAAM,GAAG,IAAI,GAAG,EAAiC,CAAC;IAClD,SAAS,GAAG,IAAI,GAAG,EAAyC,CAAC;IAEtE,YACW,OAAsC,EACtC,GAAiB;QADjB,YAAO,GAAP,OAAO,CAA+B;QACtC,QAAG,GAAH,GAAG,CAAc;IACzB,CAAC;IAEJ,KAAK,CAAC,aAAa,CACjB,OAA0B,EAC1B,OAAiC,EACjC,SAA2C;QAE3C,IACE,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM;YACxC,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC,OAAO,CAAC,UAAU;YAChD,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,wBAAwB,EAChD,CAAC;YACD,MAAM,aAAa,EAAE,CAAC;QACxB,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACxD,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC;YACnC,IAAI,CAAC,OAAO,CAAC,MAAM;YACnB,IAAI,CAAC,OAAO,CAAC,UAAU;YACvB,gBAAgB,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC;SAChD,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;YAC/B,QAAQ,CAAC,QAAQ;YACjB,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,MAAM;YACb,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC;SACnD,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC9C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBACpE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;YACjC,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACjD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC;aACtD,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACf,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,GAAG,uBAAuB,CAAC;YAC7D,IAAI,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YACxF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE;gBAC7B,SAAS;gBACT,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,SAAS;aACV,CAAC,CAAC;YACH,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE;YACV,MAAM,cAAc,EAAE,CAAC;QACzB,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACzC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,IAAI,QAAkD,CAAC;QACvD,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;gBAC/C,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;gBAC7B,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;aACtC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,aAAa,EAAE,CAAC;QACxB,CAAC;QACD,IACE,QAAQ,KAAK,SAAS;YACtB,CAAC,QAAQ,CAAC,MAAM;YAChB,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM;YACzC,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC;YAClC,CAAC,eAAe,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC;YACxC,CAAC,eAAe,CAAC,QAAQ,CAAC,aAAa,EAAE,GAAG,CAAC;YAC7C,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,EAC/B,CAAC;YACD,MAAM,aAAa,EAAE,CAAC;QACxB,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,SAAS,CACb,OAAiC,EACjC,QAAsC,EACtC,MAA4B;QAE5B,MAAM,gBAAgB,GAAG,wBAAwB,MAAM,CAAC,QAAQ,EAAE,CAAC;QACnE,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC;YAC7C,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YAC3C,QAAQ,EAAE,gBAAgB;YAC1B,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,QAAQ;YACR,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;YACrC,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,YAAY;YAC7C,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE;SAClB,CAAC,CAAC;QACH,MAAM,eAAe,GACnB,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC7B,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC;YACpD,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC;YAClC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK;YAC1C,QAAQ,EAAE,gBAAgB;YAC1B,SAAS;YACT,MAAM,EAAE,eAAe;SACxB,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpC,OAAO;gBACL,KAAK,EAAE,GAAG,CAAC,WAAW;gBACtB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,SAAS,GAAG,KAAK;aAC9C,CAAC;QACJ,CAAC;QACD,OAAO,yBAAyB,CAAC;YAC/B,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK;YAC1C,cAAc,EAAE,GAAG,CAAC,WAAW;YAC/B,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc;YAC5C,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC;SAC3D,CAAC,CAAC;IACL,CAAC;CACF;AAYD,SAAS,aAAa,CACpB,MAAsF,EACtF,SAA2C;IAE3C,IAAI,QAAgB,CAAC;IACrB,IAAI,cAAkC,CAAC;IACvC,IAAI,CAAC;QACH,QAAQ,GAAG,+BAA+B,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACvE,cAAc;YACZ,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,6BAA6B;gBAClD,CAAC,CAAC,+BAA+B,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC;gBAC1E,CAAC,CAAC,SAAS,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,aAAa,EAAE,CAAC;IACxB,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,MAAM,aAAa,EAAE,CAAC;IACvD,IAAI,cAAc,KAAK,SAAS,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;QAC7E,MAAM,aAAa,EAAE,CAAC;IACxB,CAAC;IACD,OAAO;QACL,QAAQ;QACR,MAAM,EACJ,cAAc,KAAK,SAAS;YAC1B,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE;YACpB,CAAC,CAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE,cAAc,EAAE;KAC9D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,KAQrC;IACC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IAC5C,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACpF,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC;IACnD,OAAO,IAAI,OAAO,CAAC;QACjB,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ;QAClC,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,aAAa;QAC5C,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;QAC9B,aAAa,EAAE,KAAK,CAAC,YAAY;QACjC,aAAa,EAAE,KAAK,CAAC,YAAY;KAClC,CAAC;SACC,kBAAkB,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;SAC9D,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;SACvB,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;SAClC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC;SAC3B,WAAW,CAAC,UAAU,CAAC;SACvB,iBAAiB,CAAC,UAAU,GAAG,0BAA0B,CAAC;SAC1D,MAAM,CAAC,UAAU,EAAE,CAAC;SACpB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC1B,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,KAKhC;IACC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,cAAc,EAAE;QACrD,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,SAAS,EAAE,oBAAoB;YAC/B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YAC7B,kBAAkB,EAAE,iBAAiB;YACrC,YAAY,EAAE,KAAK,CAAC,SAAS;YAC7B,gBAAgB,EAAE,cAAc;SACjC,CAAC;QACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,mBAAmB,CAAC;KACjD,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC7C,IACE,CAAC,QAAQ,CAAC,IAAI,CAAC;QACf,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ;QACrC,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAC5B,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,MAAM;QACjC,IAAI,CAAC,UAAU,KAAK,QAAQ;QAC5B,IAAI,CAAC,iBAAiB,KAAK,iBAAiB;QAC5C,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC;QACjC,IAAI,CAAC,UAAqB,GAAG,CAAC;QAC9B,IAAI,CAAC,UAAqB,GAAG,MAAM,EACpC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,UAAoB,EAAE,CAAC;AAClF,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,KAKxC;IACC,MAAM,cAAc,GAAG,kBAAkB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CACpC,GAAG,6BAA6B,kCAAkC,cAAc,sBAAsB,EACtG;QACE,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,KAAK,CAAC,cAAc,EAAE;YAC/C,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAChE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,mBAAmB,CAAC;KACjD,CACF,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC7C,IACE,CAAC,QAAQ,CAAC,IAAI,CAAC;QACf,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;QACpC,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;QAC3B,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,MAAM;QAChC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,EACnC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAkB;IAC/C,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACrE,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,kBAAkB,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,kBAAkB,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;AACrC,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IACE,GAAG,CAAC,QAAQ,KAAK,QAAQ;QACzB,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,QAAQ,KAAK,GAAG;QACpB,GAAG,CAAC,MAAM,KAAK,EAAE;QACjB,GAAG,CAAC,IAAI,KAAK,EAAE,EACf,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED,SAAS,eAAe,CAAC,MAAyB;IAChD,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IACE,MAAM,CAAC,MAAM,GAAG,CAAC;QACjB,MAAM,CAAC,IAAI,CACT,CAAC,KAAK,EAAE,EAAE,CACR,CAAC,KAAK,CAAC,UAAU,CAAC,kCAAkC,CAAC;YACrD,KAAK,CAAC,MAAM,GAAG,GAAG;YAClB,qCAAqC,CAAC,KAAK,CAAC,CAC/C,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,SAAiB;IACvD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,eAAe,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG,CAAC;AAChF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,IAAI,0BAA0B,CAAC,2BAA2B,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,IAAI,0BAA0B,CAAC,4BAA4B,EAAE;QAClE,GAAG,EAAE,qFAAqF;QAC1F,IAAI,EAAE,CAAC,2BAA2B,CAAC;KACpC,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -29,6 +29,9 @@ export { LocalProcessExecutor, type LocalProcessExecutorDeps, type RepoCheckout,
|
|
|
29
29
|
export { InMemoryPendingGithubInstallationStore, type PendingGithubInstallationStore, } from './github/pending-installations.js';
|
|
30
30
|
export { isAccessMode, type ResolveRunAccessModeInput, type ResolveRunAccessModeResult, resolveRunAccessMode, } from './github/run-access-mode.js';
|
|
31
31
|
export { RUN_TOKEN_TTL_MS, type RunTokenPayload, type RunTokenVerification, runTokenAuthorizes, signRunToken, verifyRunToken, } from './github/run-token.js';
|
|
32
|
+
export { GoogleWorkloadIdentityBindingBroker, type GoogleWorkloadIdentityOptions, type GoogleWorkloadIdentityRecord, type GoogleWorkloadIdentityResolver, type GoogleWorkloadIdentityRuntimeOptions, } from './google-workload-identity.js';
|
|
33
|
+
export { PostgresGoogleWorkloadIdentityStore } from './google-workload-identity-postgres.js';
|
|
34
|
+
export { type GoogleWorkloadIdentityStore, InMemoryGoogleWorkloadIdentityStore, type PrepareGoogleWorkloadIdentityInput, type RevokeGoogleWorkloadIdentityInput, type StoredGoogleWorkloadIdentity, } from './google-workload-identity-store.js';
|
|
32
35
|
export { type ActiveDeveloperGrantInput, activeDeveloperGrant, type CreateDeveloperAccessGrant, type DeveloperAccessGrant, type DeveloperGrantFactoryOptions, type DeveloperGrantStore, InMemoryDeveloperGrantStore, type InMemoryDeveloperGrantStoreOptions, } from './oauth/developer-grant.js';
|
|
33
36
|
export { DeveloperGrantAuthorizer, type DeveloperGrantAuthorizerOptions, type DeveloperGrantChoice, type DeveloperGrantInventory, type DeveloperGrantSelectionInput, } from './oauth/developer-grant-authorizer.js';
|
|
34
37
|
export { PostgresDeveloperGrantStore } from './oauth/developer-grant-store-postgres.js';
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EACL,4BAA4B,EAC5B,cAAc,EACd,KAAK,qBAAqB,EAC1B,mBAAmB,GACpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,4BAA4B,EAC5B,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,wBAAwB,EACxB,KAAK,0BAA0B,EAC/B,mBAAmB,EACnB,uBAAuB,EACvB,KAAK,gBAAgB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,yBAAyB,EACzB,cAAc,EACd,KAAK,qBAAqB,EAC1B,8BAA8B,EAC9B,2BAA2B,GAC5B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,gBAAgB,EAChB,KAAK,mBAAmB,EACxB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,kBAAkB,EAClB,KAAK,yBAAyB,GAC/B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0CAA0C,EAC1C,KAAK,qBAAqB,EAC1B,KAAK,sCAAsC,EAC3C,KAAK,uBAAuB,EAC5B,iCAAiC,EACjC,KAAK,+BAA+B,EACpC,KAAK,8BAA8B,EACnC,KAAK,oCAAoC,EACzC,KAAK,+BAA+B,EACpC,KAAK,wBAAwB,EAC7B,KAAK,iCAAiC,EACtC,KAAK,0BAA0B,EAC/B,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,mCAAmC,EACxC,KAAK,kCAAkC,EACvC,KAAK,oCAAoC,EACzC,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACnB,4CAA4C,EAC5C,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,YAAY,EACZ,WAAW,EACX,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,iBAAiB,EACjB,KAAK,cAAc,EACnB,sBAAsB,EACtB,KAAK,qBAAqB,EAC1B,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,+BAA+B,EAC/B,uBAAuB,EACvB,KAAK,kCAAkC,EACvC,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,OAAO,EAAE,KAAK,SAAS,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EACL,qBAAqB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,sBAAsB,EACtB,+BAA+B,EAC/B,oBAAoB,EACpB,wBAAwB,EACxB,iBAAiB,EACjB,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,8BAA8B,EACnC,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kBAAkB,EAClB,KAAK,wBAAwB,EAC7B,oBAAoB,EACpB,kBAAkB,EAClB,yBAAyB,GAC1B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,oBAAoB,EACpB,KAAK,2BAA2B,EAChC,KAAK,WAAW,EAChB,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,+CAA+C,EAC/C,uCAAuC,EACvC,KAAK,wCAAwC,EAC7C,KAAK,gCAAgC,EACrC,KAAK,sCAAsC,EAC3C,KAAK,iCAAiC,EACtC,KAAK,iCAAiC,EACtC,6CAA6C,EAC7C,yCAAyC,GAC1C,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,6BAA6B,EAClC,KAAK,4BAA4B,EACjC,KAAK,yBAAyB,EAC9B,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,6BAA6B,EAClC,mCAAmC,GACpC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,oBAAoB,EACzB,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,mBAAmB,EACnB,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,eAAe,GAChB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,iBAAiB,GAClB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACtB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,qCAAqC,EACrC,gCAAgC,EAChC,qBAAqB,EACrB,KAAK,8BAA8B,EACnC,yBAAyB,EACzB,KAAK,gCAAgC,GACtC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,8BAA8B,EAC9B,KAAK,sBAAsB,GAC5B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC7B,wBAAwB,EACxB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,GACtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,oBAAoB,EACpB,KAAK,wBAAwB,EAC7B,KAAK,YAAY,GAClB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,sCAAsC,EACtC,KAAK,8BAA8B,GACpC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,YAAY,EACZ,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,gBAAgB,EAChB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,kBAAkB,EAClB,YAAY,EACZ,cAAc,GACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,yBAAyB,EAC9B,oBAAoB,EACpB,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EACzB,KAAK,4BAA4B,EACjC,KAAK,mBAAmB,EACxB,2BAA2B,EAC3B,KAAK,kCAAkC,GACxC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,wBAAwB,EACxB,KAAK,+BAA+B,EACpC,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,4BAA4B,GAClC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,EACL,iCAAiC,EACjC,KAAK,yBAAyB,GAC/B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,wCAAwC,EACxC,wBAAwB,EACxB,KAAK,8BAA8B,EACnC,KAAK,mBAAmB,EACxB,KAAK,UAAU,EACf,KAAK,0BAA0B,GAChC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gCAAgC,EAChC,gCAAgC,EAChC,oBAAoB,EACpB,KAAK,kBAAkB,EACvB,qBAAqB,EACrB,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,GACzB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACnF,OAAO,EAAE,kCAAkC,EAAE,MAAM,uCAAuC,CAAC;AAC3F,OAAO,EACL,kCAAkC,EAClC,KAAK,qBAAqB,EAC1B,KAAK,gCAAgC,EACrC,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,yBAAyB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAC/B,4BAA4B,EAC5B,0BAA0B,EAC1B,KAAK,0BAA0B,EAC/B,0BAA0B,EAC1B,KAAK,wBAAwB,GAC9B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,kCAAkC,EAAE,MAAM,uCAAuC,CAAC;AAC3F,OAAO,EACL,iCAAiC,EACjC,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAC7B,iCAAiC,EACjC,KAAK,+BAA+B,EACpC,KAAK,4BAA4B,EACjC,0CAA0C,EAC1C,kCAAkC,EAClC,KAAK,2BAA2B,EAChC,yCAAyC,EACzC,iCAAiC,EACjC,KAAK,oBAAoB,EACzB,yBAAyB,EACzB,KAAK,6BAA6B,EAClC,kCAAkC,EAClC,KAAK,4BAA4B,EACjC,kCAAkC,EAClC,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,gCAAgC,EAChC,kCAAkC,EAClC,sCAAsC,EACtC,iCAAiC,EACjC,oCAAoC,EACpC,KAAK,oCAAoC,GAC1C,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,4BAA4B,EAC5B,KAAK,mCAAmC,GACzC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,4CAA4C,EAAE,MAAM,qCAAqC,CAAC;AACnG,OAAO,EAAE,gCAAgC,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,EAAE,+CAA+C,EAAE,MAAM,4CAA4C,CAAC;AAC7G,OAAO,EACL,KAAK,gCAAgC,EACrC,KAAK,+BAA+B,EACpC,KAAK,6BAA6B,EAClC,gCAAgC,GACjC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,sCAAsC,EACtC,+BAA+B,EAC/B,6BAA6B,EAC7B,8BAA8B,EAC9B,iCAAiC,EACjC,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,+BAA+B,EACpC,KAAK,iBAAiB,EACtB,yBAAyB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,GAC3B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,4BAA4B,EAC5B,KAAK,yBAAyB,EAC9B,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,8BAA8B,EAC9B,KAAK,gBAAgB,EACrB,6BAA6B,EAC7B,wBAAwB,EACxB,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,mBAAmB,EACnB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,4BAA4B,EAC5B,KAAK,kBAAkB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,sBAAsB,EACtB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,WAAW,GACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,wBAAwB,EACxB,uBAAuB,EACvB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,8BAA8B,EAC9B,8BAA8B,EAC9B,4BAA4B,EAC5B,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,YAAY,EACjB,uBAAuB,EACvB,KAAK,SAAS,GACf,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,KAAK,cAAc,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/D,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,sBAAsB,EACtB,0BAA0B,EAC1B,KAAK,mBAAmB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,8BAA8B,EAC9B,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EACL,oBAAoB,EACpB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,UAAU,EACf,kBAAkB,EAClB,KAAK,yBAAyB,EAC9B,SAAS,EACT,aAAa,EACb,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAAE,6BAA6B,EAAE,MAAM,yCAAyC,CAAC;AACxF,OAAO,EACL,sBAAsB,EACtB,6BAA6B,EAC7B,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EAAE,sCAAsC,EAAE,MAAM,2CAA2C,CAAC;AACnG,OAAO,EAAE,qBAAqB,EAAE,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACvF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,KAAK,+BAA+B,GACrC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EACL,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,uBAAuB,EACvB,KAAK,8BAA8B,EACnC,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,eAAe,GACrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,4BAA4B,EACjC,mBAAmB,EACnB,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,8BAA8B,EACnC,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,cAAc,EACd,KAAK,UAAU,EACf,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,SAAS,EACd,KAAK,OAAO,EACZ,KAAK,+BAA+B,EACpC,KAAK,gCAAgC,EACrC,KAAK,sBAAsB,EAC3B,KAAK,4BAA4B,EACjC,KAAK,oBAAoB,EACzB,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,YAAY,EACZ,UAAU,EACV,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACd,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,EACd,eAAe,EACf,uBAAuB,EACvB,2BAA2B,EAC3B,YAAY,EACZ,iBAAiB,EACjB,KAAK,kBAAkB,GACxB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,iBAAiB,EACjB,KAAK,wBAAwB,EAC7B,qBAAqB,EACrB,kBAAkB,EAClB,yBAAyB,EACzB,uBAAuB,EACvB,+BAA+B,EAC/B,KAAK,kBAAkB,EACvB,kBAAkB,EAClB,KAAK,yBAAyB,GAC/B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAE,KAAK,qBAAqB,EAAE,MAAM,uBAAuB,CAAC"}
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EACL,4BAA4B,EAC5B,cAAc,EACd,KAAK,qBAAqB,EAC1B,mBAAmB,GACpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,4BAA4B,EAC5B,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,wBAAwB,EACxB,KAAK,0BAA0B,EAC/B,mBAAmB,EACnB,uBAAuB,EACvB,KAAK,gBAAgB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,yBAAyB,EACzB,cAAc,EACd,KAAK,qBAAqB,EAC1B,8BAA8B,EAC9B,2BAA2B,GAC5B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,gBAAgB,EAChB,KAAK,mBAAmB,EACxB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,kBAAkB,EAClB,KAAK,yBAAyB,GAC/B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0CAA0C,EAC1C,KAAK,qBAAqB,EAC1B,KAAK,sCAAsC,EAC3C,KAAK,uBAAuB,EAC5B,iCAAiC,EACjC,KAAK,+BAA+B,EACpC,KAAK,8BAA8B,EACnC,KAAK,oCAAoC,EACzC,KAAK,+BAA+B,EACpC,KAAK,wBAAwB,EAC7B,KAAK,iCAAiC,EACtC,KAAK,0BAA0B,EAC/B,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,mCAAmC,EACxC,KAAK,kCAAkC,EACvC,KAAK,oCAAoC,EACzC,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACnB,4CAA4C,EAC5C,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,YAAY,EACZ,WAAW,EACX,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,iBAAiB,EACjB,KAAK,cAAc,EACnB,sBAAsB,EACtB,KAAK,qBAAqB,EAC1B,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,+BAA+B,EAC/B,uBAAuB,EACvB,KAAK,kCAAkC,EACvC,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,OAAO,EAAE,KAAK,SAAS,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EACL,qBAAqB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,sBAAsB,EACtB,+BAA+B,EAC/B,oBAAoB,EACpB,wBAAwB,EACxB,iBAAiB,EACjB,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,8BAA8B,EACnC,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kBAAkB,EAClB,KAAK,wBAAwB,EAC7B,oBAAoB,EACpB,kBAAkB,EAClB,yBAAyB,GAC1B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,oBAAoB,EACpB,KAAK,2BAA2B,EAChC,KAAK,WAAW,EAChB,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,+CAA+C,EAC/C,uCAAuC,EACvC,KAAK,wCAAwC,EAC7C,KAAK,gCAAgC,EACrC,KAAK,sCAAsC,EAC3C,KAAK,iCAAiC,EACtC,KAAK,iCAAiC,EACtC,6CAA6C,EAC7C,yCAAyC,GAC1C,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,6BAA6B,EAClC,KAAK,4BAA4B,EACjC,KAAK,yBAAyB,EAC9B,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,6BAA6B,EAClC,mCAAmC,GACpC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,oBAAoB,EACzB,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,mBAAmB,EACnB,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,eAAe,GAChB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,iBAAiB,GAClB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACtB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,qCAAqC,EACrC,gCAAgC,EAChC,qBAAqB,EACrB,KAAK,8BAA8B,EACnC,yBAAyB,EACzB,KAAK,gCAAgC,GACtC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,8BAA8B,EAC9B,KAAK,sBAAsB,GAC5B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC7B,wBAAwB,EACxB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,GACtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,oBAAoB,EACpB,KAAK,wBAAwB,EAC7B,KAAK,YAAY,GAClB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,sCAAsC,EACtC,KAAK,8BAA8B,GACpC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,YAAY,EACZ,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,gBAAgB,EAChB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,kBAAkB,EAClB,YAAY,EACZ,cAAc,GACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mCAAmC,EACnC,KAAK,6BAA6B,EAClC,KAAK,4BAA4B,EACjC,KAAK,8BAA8B,EACnC,KAAK,oCAAoC,GAC1C,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,mCAAmC,EAAE,MAAM,wCAAwC,CAAC;AAC7F,OAAO,EACL,KAAK,2BAA2B,EAChC,mCAAmC,EACnC,KAAK,kCAAkC,EACvC,KAAK,iCAAiC,EACtC,KAAK,4BAA4B,GAClC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,KAAK,yBAAyB,EAC9B,oBAAoB,EACpB,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EACzB,KAAK,4BAA4B,EACjC,KAAK,mBAAmB,EACxB,2BAA2B,EAC3B,KAAK,kCAAkC,GACxC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,wBAAwB,EACxB,KAAK,+BAA+B,EACpC,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,4BAA4B,GAClC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,EACL,iCAAiC,EACjC,KAAK,yBAAyB,GAC/B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,wCAAwC,EACxC,wBAAwB,EACxB,KAAK,8BAA8B,EACnC,KAAK,mBAAmB,EACxB,KAAK,UAAU,EACf,KAAK,0BAA0B,GAChC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gCAAgC,EAChC,gCAAgC,EAChC,oBAAoB,EACpB,KAAK,kBAAkB,EACvB,qBAAqB,EACrB,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,GACzB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACnF,OAAO,EAAE,kCAAkC,EAAE,MAAM,uCAAuC,CAAC;AAC3F,OAAO,EACL,kCAAkC,EAClC,KAAK,qBAAqB,EAC1B,KAAK,gCAAgC,EACrC,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,yBAAyB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAC/B,4BAA4B,EAC5B,0BAA0B,EAC1B,KAAK,0BAA0B,EAC/B,0BAA0B,EAC1B,KAAK,wBAAwB,GAC9B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,kCAAkC,EAAE,MAAM,uCAAuC,CAAC;AAC3F,OAAO,EACL,iCAAiC,EACjC,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAC7B,iCAAiC,EACjC,KAAK,+BAA+B,EACpC,KAAK,4BAA4B,EACjC,0CAA0C,EAC1C,kCAAkC,EAClC,KAAK,2BAA2B,EAChC,yCAAyC,EACzC,iCAAiC,EACjC,KAAK,oBAAoB,EACzB,yBAAyB,EACzB,KAAK,6BAA6B,EAClC,kCAAkC,EAClC,KAAK,4BAA4B,EACjC,kCAAkC,EAClC,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,gCAAgC,EAChC,kCAAkC,EAClC,sCAAsC,EACtC,iCAAiC,EACjC,oCAAoC,EACpC,KAAK,oCAAoC,GAC1C,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,4BAA4B,EAC5B,KAAK,mCAAmC,GACzC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,4CAA4C,EAAE,MAAM,qCAAqC,CAAC;AACnG,OAAO,EAAE,gCAAgC,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,EAAE,+CAA+C,EAAE,MAAM,4CAA4C,CAAC;AAC7G,OAAO,EACL,KAAK,gCAAgC,EACrC,KAAK,+BAA+B,EACpC,KAAK,6BAA6B,EAClC,gCAAgC,GACjC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,sCAAsC,EACtC,+BAA+B,EAC/B,6BAA6B,EAC7B,8BAA8B,EAC9B,iCAAiC,EACjC,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,+BAA+B,EACpC,KAAK,iBAAiB,EACtB,yBAAyB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,GAC3B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,4BAA4B,EAC5B,KAAK,yBAAyB,EAC9B,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,8BAA8B,EAC9B,KAAK,gBAAgB,EACrB,6BAA6B,EAC7B,wBAAwB,EACxB,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,mBAAmB,EACnB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,4BAA4B,EAC5B,KAAK,kBAAkB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,sBAAsB,EACtB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,WAAW,GACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,wBAAwB,EACxB,uBAAuB,EACvB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,8BAA8B,EAC9B,8BAA8B,EAC9B,4BAA4B,EAC5B,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,YAAY,EACjB,uBAAuB,EACvB,KAAK,SAAS,GACf,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,KAAK,cAAc,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/D,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,sBAAsB,EACtB,0BAA0B,EAC1B,KAAK,mBAAmB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,8BAA8B,EAC9B,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EACL,oBAAoB,EACpB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,UAAU,EACf,kBAAkB,EAClB,KAAK,yBAAyB,EAC9B,SAAS,EACT,aAAa,EACb,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAAE,6BAA6B,EAAE,MAAM,yCAAyC,CAAC;AACxF,OAAO,EACL,sBAAsB,EACtB,6BAA6B,EAC7B,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EAAE,sCAAsC,EAAE,MAAM,2CAA2C,CAAC;AACnG,OAAO,EAAE,qBAAqB,EAAE,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACvF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,KAAK,+BAA+B,GACrC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EACL,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,uBAAuB,EACvB,KAAK,8BAA8B,EACnC,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,eAAe,GACrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,4BAA4B,EACjC,mBAAmB,EACnB,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,8BAA8B,EACnC,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,cAAc,EACd,KAAK,UAAU,EACf,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,SAAS,EACd,KAAK,OAAO,EACZ,KAAK,+BAA+B,EACpC,KAAK,gCAAgC,EACrC,KAAK,sBAAsB,EAC3B,KAAK,4BAA4B,EACjC,KAAK,oBAAoB,EACzB,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,YAAY,EACZ,UAAU,EACV,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACd,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,EACd,eAAe,EACf,uBAAuB,EACvB,2BAA2B,EAC3B,YAAY,EACZ,iBAAiB,EACjB,KAAK,kBAAkB,GACxB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,iBAAiB,EACjB,KAAK,wBAAwB,EAC7B,qBAAqB,EACrB,kBAAkB,EAClB,yBAAyB,EACzB,uBAAuB,EACvB,+BAA+B,EAC/B,KAAK,kBAAkB,EACvB,kBAAkB,EAClB,KAAK,yBAAyB,GAC/B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAE,KAAK,qBAAqB,EAAE,MAAM,uBAAuB,CAAC"}
|