@noodleseed/one 0.70.1 → 0.71.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (132) hide show
  1. package/dist/commands/auth-google-ops.d.ts +3 -0
  2. package/dist/commands/auth-google-ops.d.ts.map +1 -0
  3. package/dist/commands/auth-google-ops.js +198 -0
  4. package/dist/commands/auth-google-ops.js.map +1 -0
  5. package/dist/commands/auth-ops.d.ts.map +1 -1
  6. package/dist/commands/auth-ops.js +5 -1
  7. package/dist/commands/auth-ops.js.map +1 -1
  8. package/dist/commands/catalog-data-core.d.ts.map +1 -1
  9. package/dist/commands/catalog-data-core.js +17 -1
  10. package/dist/commands/catalog-data-core.js.map +1 -1
  11. package/dist/deploy.js +1 -1
  12. package/dist/deploy.js.map +1 -1
  13. package/dist/index.d.ts +1 -1
  14. package/dist/index.d.ts.map +1 -1
  15. package/dist/index.js +1 -1
  16. package/dist/index.js.map +1 -1
  17. package/node_modules/@noodle-borg/agent-kit/dist/curated/command-groups.js +1 -1
  18. package/node_modules/@noodle-borg/agent-kit/dist/curated/command-groups.js.map +1 -1
  19. package/node_modules/@noodle-borg/agent-kit/dist/generated/example-files.d.ts.map +1 -1
  20. package/node_modules/@noodle-borg/agent-kit/dist/generated/example-files.js +7 -0
  21. package/node_modules/@noodle-borg/agent-kit/dist/generated/example-files.js.map +1 -1
  22. package/node_modules/@noodle-borg/agent-kit/dist/generated/surface.d.ts.map +1 -1
  23. package/node_modules/@noodle-borg/agent-kit/dist/generated/surface.js +1 -0
  24. package/node_modules/@noodle-borg/agent-kit/dist/generated/surface.js.map +1 -1
  25. package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-refs.d.ts.map +1 -1
  26. package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-refs.js +5 -1
  27. package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-refs.js.map +1 -1
  28. package/node_modules/@noodle-borg/agent-kit/dist/skill-content.d.ts.map +1 -1
  29. package/node_modules/@noodle-borg/agent-kit/dist/skill-content.js +7 -1
  30. package/node_modules/@noodle-borg/agent-kit/dist/skill-content.js.map +1 -1
  31. package/node_modules/@noodle-borg/authoring/dist/connection-types.d.ts +23 -0
  32. package/node_modules/@noodle-borg/authoring/dist/connection-types.d.ts.map +1 -1
  33. package/node_modules/@noodle-borg/authoring/dist/connection-types.js +16 -0
  34. package/node_modules/@noodle-borg/authoring/dist/connection-types.js.map +1 -1
  35. package/node_modules/@noodle-borg/authoring/dist/connections.d.ts +2 -2
  36. package/node_modules/@noodle-borg/authoring/dist/connections.d.ts.map +1 -1
  37. package/node_modules/@noodle-borg/authoring/dist/connections.js +13 -2
  38. package/node_modules/@noodle-borg/authoring/dist/connections.js.map +1 -1
  39. package/node_modules/@noodle-borg/authoring/dist/index.d.ts +1 -1
  40. package/node_modules/@noodle-borg/authoring/dist/index.d.ts.map +1 -1
  41. package/node_modules/@noodle-borg/authoring/dist/index.js +1 -1
  42. package/node_modules/@noodle-borg/authoring/dist/index.js.map +1 -1
  43. package/node_modules/@noodle-borg/compiler/dist/artifact/config.d.ts +2 -2
  44. package/node_modules/@noodle-borg/compiler/dist/artifact/config.d.ts.map +1 -1
  45. package/node_modules/@noodle-borg/compiler/dist/artifact/config.js +22 -1
  46. package/node_modules/@noodle-borg/compiler/dist/artifact/config.js.map +1 -1
  47. package/node_modules/@noodle-borg/compiler/dist/artifact/types.d.ts +9 -0
  48. package/node_modules/@noodle-borg/compiler/dist/artifact/types.d.ts.map +1 -1
  49. package/node_modules/@noodle-borg/compiler/dist/compile.d.ts.map +1 -1
  50. package/node_modules/@noodle-borg/compiler/dist/compile.js +1 -1
  51. package/node_modules/@noodle-borg/compiler/dist/compile.js.map +1 -1
  52. package/node_modules/@noodle-borg/compiler/dist/fulfilment-emit.d.ts.map +1 -1
  53. package/node_modules/@noodle-borg/compiler/dist/fulfilment-emit.js +49 -0
  54. package/node_modules/@noodle-borg/compiler/dist/fulfilment-emit.js.map +1 -1
  55. package/node_modules/@noodle-borg/compiler/dist/manifest/schema.d.ts +18 -0
  56. package/node_modules/@noodle-borg/compiler/dist/manifest/schema.d.ts.map +1 -1
  57. package/node_modules/@noodle-borg/compiler/dist/manifest/schema.js +15 -0
  58. package/node_modules/@noodle-borg/compiler/dist/manifest/schema.js.map +1 -1
  59. package/node_modules/@noodle-borg/runtime/dist/broker/types.d.ts +3 -1
  60. package/node_modules/@noodle-borg/runtime/dist/broker/types.d.ts.map +1 -1
  61. package/node_modules/@noodle-borg/service/dist/credential-binding-index.d.ts +1 -0
  62. package/node_modules/@noodle-borg/service/dist/credential-binding-index.d.ts.map +1 -1
  63. package/node_modules/@noodle-borg/service/dist/credential-binding-index.js +10 -2
  64. package/node_modules/@noodle-borg/service/dist/credential-binding-index.js.map +1 -1
  65. package/node_modules/@noodle-borg/service/dist/credential-broker-options.d.ts +3 -0
  66. package/node_modules/@noodle-borg/service/dist/credential-broker-options.d.ts.map +1 -1
  67. package/node_modules/@noodle-borg/service/dist/credential-broker-options.js +9 -0
  68. package/node_modules/@noodle-borg/service/dist/credential-broker-options.js.map +1 -1
  69. package/node_modules/@noodle-borg/service/dist/credential-broker.d.ts +5 -2
  70. package/node_modules/@noodle-borg/service/dist/credential-broker.d.ts.map +1 -1
  71. package/node_modules/@noodle-borg/service/dist/credential-broker.js +29 -0
  72. package/node_modules/@noodle-borg/service/dist/credential-broker.js.map +1 -1
  73. package/node_modules/@noodle-borg/service/dist/google-workload-identity-postgres.d.ts +21 -0
  74. package/node_modules/@noodle-borg/service/dist/google-workload-identity-postgres.d.ts.map +1 -0
  75. package/node_modules/@noodle-borg/service/dist/google-workload-identity-postgres.js +195 -0
  76. package/node_modules/@noodle-borg/service/dist/google-workload-identity-postgres.js.map +1 -0
  77. package/node_modules/@noodle-borg/service/dist/google-workload-identity-probe.d.ts +10 -0
  78. package/node_modules/@noodle-borg/service/dist/google-workload-identity-probe.d.ts.map +1 -0
  79. package/node_modules/@noodle-borg/service/dist/google-workload-identity-probe.js +47 -0
  80. package/node_modules/@noodle-borg/service/dist/google-workload-identity-probe.js.map +1 -0
  81. package/node_modules/@noodle-borg/service/dist/google-workload-identity-store.d.ts +46 -0
  82. package/node_modules/@noodle-borg/service/dist/google-workload-identity-store.d.ts.map +1 -0
  83. package/node_modules/@noodle-borg/service/dist/google-workload-identity-store.js +88 -0
  84. package/node_modules/@noodle-borg/service/dist/google-workload-identity-store.js.map +1 -0
  85. package/node_modules/@noodle-borg/service/dist/google-workload-identity-validation.d.ts +4 -0
  86. package/node_modules/@noodle-borg/service/dist/google-workload-identity-validation.d.ts.map +1 -0
  87. package/node_modules/@noodle-borg/service/dist/google-workload-identity-validation.js +13 -0
  88. package/node_modules/@noodle-borg/service/dist/google-workload-identity-validation.js.map +1 -0
  89. package/node_modules/@noodle-borg/service/dist/google-workload-identity.d.ts +38 -0
  90. package/node_modules/@noodle-borg/service/dist/google-workload-identity.d.ts.map +1 -0
  91. package/node_modules/@noodle-borg/service/dist/google-workload-identity.js +289 -0
  92. package/node_modules/@noodle-borg/service/dist/google-workload-identity.js.map +1 -0
  93. package/node_modules/@noodle-borg/service/dist/index.d.ts +3 -0
  94. package/node_modules/@noodle-borg/service/dist/index.d.ts.map +1 -1
  95. package/node_modules/@noodle-borg/service/dist/index.js +3 -0
  96. package/node_modules/@noodle-borg/service/dist/index.js.map +1 -1
  97. package/node_modules/@noodle-borg/service/dist/oauth/app.d.ts.map +1 -1
  98. package/node_modules/@noodle-borg/service/dist/oauth/app.js +11 -0
  99. package/node_modules/@noodle-borg/service/dist/oauth/app.js.map +1 -1
  100. package/node_modules/@noodle-borg/service/dist/oauth/paths.d.ts.map +1 -1
  101. package/node_modules/@noodle-borg/service/dist/oauth/paths.js +1 -0
  102. package/node_modules/@noodle-borg/service/dist/oauth/paths.js.map +1 -1
  103. package/node_modules/@noodle-borg/service/dist/options.d.ts +8 -0
  104. package/node_modules/@noodle-borg/service/dist/options.d.ts.map +1 -1
  105. package/node_modules/@noodle-borg/service/dist/registry-types.d.ts +3 -0
  106. package/node_modules/@noodle-borg/service/dist/registry-types.d.ts.map +1 -1
  107. package/node_modules/@noodle-borg/service/dist/registry.d.ts.map +1 -1
  108. package/node_modules/@noodle-borg/service/dist/registry.js +3 -0
  109. package/node_modules/@noodle-borg/service/dist/registry.js.map +1 -1
  110. package/node_modules/@noodle-borg/service/dist/routes/credential-auth-dispatch.d.ts +25 -0
  111. package/node_modules/@noodle-borg/service/dist/routes/credential-auth-dispatch.d.ts.map +1 -0
  112. package/node_modules/@noodle-borg/service/dist/routes/credential-auth-dispatch.js +21 -0
  113. package/node_modules/@noodle-borg/service/dist/routes/credential-auth-dispatch.js.map +1 -0
  114. package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity-dispatch.d.ts +14 -0
  115. package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity-dispatch.d.ts.map +1 -0
  116. package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity-dispatch.js +30 -0
  117. package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity-dispatch.js.map +1 -0
  118. package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity.d.ts +19 -0
  119. package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity.d.ts.map +1 -0
  120. package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity.js +105 -0
  121. package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity.js.map +1 -0
  122. package/node_modules/@noodle-borg/service/dist/routes/paths.d.ts +3 -1
  123. package/node_modules/@noodle-borg/service/dist/routes/paths.d.ts.map +1 -1
  124. package/node_modules/@noodle-borg/service/dist/routes/paths.js +6 -0
  125. package/node_modules/@noodle-borg/service/dist/routes/paths.js.map +1 -1
  126. package/node_modules/@noodle-borg/service/dist/serve.d.ts.map +1 -1
  127. package/node_modules/@noodle-borg/service/dist/serve.js +29 -0
  128. package/node_modules/@noodle-borg/service/dist/serve.js.map +1 -1
  129. package/node_modules/@noodle-borg/service/dist/service.d.ts.map +1 -1
  130. package/node_modules/@noodle-borg/service/dist/service.js +6 -2
  131. package/node_modules/@noodle-borg/service/dist/service.js.map +1 -1
  132. package/package.json +1 -1
@@ -7,6 +7,7 @@ export interface AllowedCredentialBinding {
7
7
  export interface CredentialBindingIndex {
8
8
  readonly byKey: ReadonlyMap<string, AllowedCredentialBinding>;
9
9
  readonly externalExchange: readonly AllowedCredentialBinding[];
10
+ readonly googleWorkloadIdentity: readonly AllowedCredentialBinding[];
10
11
  }
11
12
  /** Build the immutable allowlist solely from trusted, compiled operation references. */
12
13
  export declare function buildCredentialBindingIndex(artifact: RuntimeArtifact | undefined): CredentialBindingIndex;
@@ -1 +1 @@
1
- {"version":3,"file":"credential-binding-index.d.ts","sourceRoot":"","sources":["../src/credential-binding-index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,wBAAwB,EAI7B,KAAK,eAAe,EACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAE9B,MAAM,sBAAsB,CAAC;AAE9B,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;CAC3C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IAC9D,QAAQ,CAAC,gBAAgB,EAAE,SAAS,wBAAwB,EAAE,CAAC;CAChE;AAWD,wFAAwF;AACxF,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,eAAe,GAAG,SAAS,GACpC,sBAAsB,CA0CxB;AAED,mGAAmG;AACnG,wBAAgB,iCAAiC,CAC/C,QAAQ,EAAE,SAAS,wBAAwB,EAAE,GAC5C,SAAS,wBAAwB,EAAE,CAWrC"}
1
+ {"version":3,"file":"credential-binding-index.d.ts","sourceRoot":"","sources":["../src/credential-binding-index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,wBAAwB,EAI7B,KAAK,eAAe,EACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAE9B,MAAM,sBAAsB,CAAC;AAE9B,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;CAC3C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IAC9D,QAAQ,CAAC,gBAAgB,EAAE,SAAS,wBAAwB,EAAE,CAAC;IAC/D,QAAQ,CAAC,sBAAsB,EAAE,SAAS,wBAAwB,EAAE,CAAC;CACtE;AAWD,wFAAwF;AACxF,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,eAAe,GAAG,SAAS,GACpC,sBAAsB,CAkDxB;AAED,mGAAmG;AACnG,wBAAgB,iCAAiC,CAC/C,QAAQ,EAAE,SAAS,wBAAwB,EAAE,GAC5C,SAAS,wBAAwB,EAAE,CAWrC"}
@@ -10,8 +10,9 @@ function resolvedOperationRefs(fulfilment) {
10
10
  export function buildCredentialBindingIndex(artifact) {
11
11
  const byKey = new Map();
12
12
  const externalExchange = new Map();
13
+ const googleWorkloadIdentity = new Map();
13
14
  if (artifact === undefined)
14
- return { byKey, externalExchange: [] };
15
+ return { byKey, externalExchange: [], googleWorkloadIdentity: [] };
15
16
  const fulfilments = [
16
17
  ...artifact.tools.map((tool) => tool.fulfilment),
17
18
  ...(artifact.resources ?? []).map((resource) => resource.fulfilment),
@@ -46,9 +47,16 @@ export function buildCredentialBindingIndex(artifact) {
46
47
  if (source.kind === 'externalExchange') {
47
48
  externalExchange.set(key, allowed);
48
49
  }
50
+ if (source.kind === 'googleWorkloadIdentity') {
51
+ googleWorkloadIdentity.set(key, allowed);
52
+ }
49
53
  }
50
54
  }
51
- return { byKey, externalExchange: [...externalExchange.values()] };
55
+ return {
56
+ byKey,
57
+ externalExchange: [...externalExchange.values()],
58
+ googleWorkloadIdentity: [...googleWorkloadIdentity.values()],
59
+ };
52
60
  }
53
61
  /** Render safe, explicit auth-doctor results for exchange providers that are not available yet. */
54
62
  export function unavailableExternalExchangeProbes(bindings) {
@@ -1 +1 @@
1
- {"version":3,"file":"credential-binding-index.js","sourceRoot":"","sources":["../src/credential-binding-index.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,+BAA+B,GAGhC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAGL,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAY9B,SAAS,qBAAqB,CAAC,UAA8B;IAC3D,IAAI,UAAU,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACpC,OAAO,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,CAAC;IACD,OAAO,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACvC,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CACnF,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,2BAA2B,CACzC,QAAqC;IAErC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC1D,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAoC,CAAC;IACrE,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC;IACnE,MAAM,WAAW,GAAyB;QACxC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;QAChD,GAAG,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;QACpE,GAAG,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC;QAC9D,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,KAAK,SAAS;YAChD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;KAClD,CAAC;IACF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,qBAAqB,CAAC,UAAU,CAAC,EAAE,CAAC;YACpD,MAAM,iBAAiB,GAAG,GAAG,CAAC,iBAAiB,CAAC;YAChD,IAAI,iBAAiB,KAAK,SAAS;gBAAE,SAAS;YAC9C,MAAM,OAAO,GAAG,QAAQ,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;YAC1E,IACE,OAAO,KAAK,SAAS;gBACrB,OAAO,CAAC,UAAU,CAAC,EAAE,KAAK,iBAAiB,CAAC,YAAY;gBACxD,OAAO,CAAC,OAAO,KAAK,iBAAiB,CAAC,OAAO;gBAC7C,+BAA+B,CAAC,OAAO,CAAC,UAAU,CAAC;oBACjD,iBAAiB,CAAC,wBAAwB,EAC5C,CAAC;gBACD,SAAS;YACX,CAAC;YACD,MAAM,UAAU,GAAgC;gBAC9C,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;gBACtC,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,GAAG,iBAAiB;aACrB,CAAC;YACF,MAAM,GAAG,GAAG,gBAAgB,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;YACvC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACxB,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBACvC,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,iCAAiC,CAC/C,QAA6C;IAE7C,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QACvC,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,QAAQ,EAAE,kBAAkB;QAC5B,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,2BAA2B;KACpC,CAAC,CAAC,CAAC;AACN,CAAC"}
1
+ {"version":3,"file":"credential-binding-index.js","sourceRoot":"","sources":["../src/credential-binding-index.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,+BAA+B,GAGhC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAGL,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAa9B,SAAS,qBAAqB,CAAC,UAA8B;IAC3D,IAAI,UAAU,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACpC,OAAO,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,CAAC;IACD,OAAO,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACvC,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CACnF,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,2BAA2B,CACzC,QAAqC;IAErC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC1D,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAoC,CAAC;IACrE,MAAM,sBAAsB,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC3E,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,EAAE,sBAAsB,EAAE,EAAE,EAAE,CAAC;IAC/F,MAAM,WAAW,GAAyB;QACxC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;QAChD,GAAG,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;QACpE,GAAG,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC;QAC9D,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,KAAK,SAAS;YAChD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;KAClD,CAAC;IACF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,qBAAqB,CAAC,UAAU,CAAC,EAAE,CAAC;YACpD,MAAM,iBAAiB,GAAG,GAAG,CAAC,iBAAiB,CAAC;YAChD,IAAI,iBAAiB,KAAK,SAAS;gBAAE,SAAS;YAC9C,MAAM,OAAO,GAAG,QAAQ,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;YAC1E,IACE,OAAO,KAAK,SAAS;gBACrB,OAAO,CAAC,UAAU,CAAC,EAAE,KAAK,iBAAiB,CAAC,YAAY;gBACxD,OAAO,CAAC,OAAO,KAAK,iBAAiB,CAAC,OAAO;gBAC7C,+BAA+B,CAAC,OAAO,CAAC,UAAU,CAAC;oBACjD,iBAAiB,CAAC,wBAAwB,EAC5C,CAAC;gBACD,SAAS;YACX,CAAC;YACD,MAAM,UAAU,GAAgC;gBAC9C,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;gBACtC,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,GAAG,iBAAiB;aACrB,CAAC;YACF,MAAM,GAAG,GAAG,gBAAgB,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;YACvC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACxB,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBACvC,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACrC,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;gBAC7C,sBAAsB,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO;QACL,KAAK;QACL,gBAAgB,EAAE,CAAC,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC;QAChD,sBAAsB,EAAE,CAAC,GAAG,sBAAsB,CAAC,MAAM,EAAE,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,iCAAiC,CAC/C,QAA6C;IAE7C,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QACvC,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,QAAQ,EAAE,kBAAkB;QAC5B,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,2BAA2B;KACpC,CAAC,CAAC,CAAC;AACN,CAAC"}
@@ -1,13 +1,16 @@
1
1
  import type { DelegatedExchangeOptions } from './delegated-token-exchange.js';
2
2
  import type { ExternalCredentialExchangeOptions, ExternalCredentialExchangeRuntimeOptions } from './external-credential-exchange.js';
3
+ import type { GoogleWorkloadIdentityOptions, GoogleWorkloadIdentityRuntimeOptions } from './google-workload-identity.js';
3
4
  /** Complete deployment-bound broker exchange options without exposing provider lifecycle over HTTP. */
4
5
  export declare function deploymentCredentialBrokerOptions(input: {
5
6
  readonly delegatedExchange: Pick<DelegatedExchangeOptions, 'issuer' | 'signer'> | undefined;
6
7
  readonly externalCredentialExchange: ExternalCredentialExchangeRuntimeOptions | undefined;
8
+ readonly googleWorkloadIdentity: GoogleWorkloadIdentityRuntimeOptions | undefined;
7
9
  readonly tenant: string;
8
10
  readonly deploymentId: string | undefined;
9
11
  }): {
10
12
  readonly delegatedExchange?: DelegatedExchangeOptions;
11
13
  readonly externalCredentialExchange?: ExternalCredentialExchangeOptions;
14
+ readonly googleWorkloadIdentity?: GoogleWorkloadIdentityOptions;
12
15
  };
13
16
  //# sourceMappingURL=credential-broker-options.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"credential-broker-options.d.ts","sourceRoot":"","sources":["../src/credential-broker-options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,KAAK,EACV,iCAAiC,EACjC,wCAAwC,EACzC,MAAM,mCAAmC,CAAC;AAE3C,uGAAuG;AACvG,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,QAAQ,CAAC,iBAAiB,EAAE,IAAI,CAAC,wBAAwB,EAAE,QAAQ,GAAG,QAAQ,CAAC,GAAG,SAAS,CAAC;IAC5F,QAAQ,CAAC,0BAA0B,EAAE,wCAAwC,GAAG,SAAS,CAAC;IAC1F,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C,GAAG;IACF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,0BAA0B,CAAC,EAAE,iCAAiC,CAAC;CACzE,CAsBA"}
1
+ {"version":3,"file":"credential-broker-options.d.ts","sourceRoot":"","sources":["../src/credential-broker-options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,KAAK,EACV,iCAAiC,EACjC,wCAAwC,EACzC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EACV,6BAA6B,EAC7B,oCAAoC,EACrC,MAAM,+BAA+B,CAAC;AAEvC,uGAAuG;AACvG,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,QAAQ,CAAC,iBAAiB,EAAE,IAAI,CAAC,wBAAwB,EAAE,QAAQ,GAAG,QAAQ,CAAC,GAAG,SAAS,CAAC;IAC5F,QAAQ,CAAC,0BAA0B,EAAE,wCAAwC,GAAG,SAAS,CAAC;IAC1F,QAAQ,CAAC,sBAAsB,EAAE,oCAAoC,GAAG,SAAS,CAAC;IAClF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C,GAAG;IACF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,0BAA0B,CAAC,EAAE,iCAAiC,CAAC;IACxE,QAAQ,CAAC,sBAAsB,CAAC,EAAE,6BAA6B,CAAC;CACjE,CA+BA"}
@@ -21,6 +21,15 @@ export function deploymentCredentialBrokerOptions(input) {
21
21
  deployment: input.deploymentId,
22
22
  },
23
23
  }),
24
+ ...(input.googleWorkloadIdentity === undefined
25
+ ? {}
26
+ : {
27
+ googleWorkloadIdentity: {
28
+ ...input.googleWorkloadIdentity,
29
+ tenant: input.tenant,
30
+ deployment: input.deploymentId,
31
+ },
32
+ }),
24
33
  };
25
34
  }
26
35
  //# sourceMappingURL=credential-broker-options.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"credential-broker-options.js","sourceRoot":"","sources":["../src/credential-broker-options.ts"],"names":[],"mappings":"AAMA,uGAAuG;AACvG,MAAM,UAAU,iCAAiC,CAAC,KAKjD;IAIC,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAChD,OAAO;QACL,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,iBAAiB,EAAE;oBACjB,GAAG,KAAK,CAAC,iBAAiB;oBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,KAAK,CAAC,YAAY;iBAC/B;aACF,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,0BAA0B,KAAK,SAAS;YAChD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,0BAA0B,EAAE;oBAC1B,GAAG,KAAK,CAAC,0BAA0B;oBACnC,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,KAAK,CAAC,YAAY;iBAC/B;aACF,CAAC;KACP,CAAC;AACJ,CAAC"}
1
+ {"version":3,"file":"credential-broker-options.js","sourceRoot":"","sources":["../src/credential-broker-options.ts"],"names":[],"mappings":"AAUA,uGAAuG;AACvG,MAAM,UAAU,iCAAiC,CAAC,KAMjD;IAKC,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAChD,OAAO;QACL,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,iBAAiB,EAAE;oBACjB,GAAG,KAAK,CAAC,iBAAiB;oBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,KAAK,CAAC,YAAY;iBAC/B;aACF,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,0BAA0B,KAAK,SAAS;YAChD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,0BAA0B,EAAE;oBAC1B,GAAG,KAAK,CAAC,0BAA0B;oBACnC,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,KAAK,CAAC,YAAY;iBAC/B;aACF,CAAC;QACN,GAAG,CAAC,KAAK,CAAC,sBAAsB,KAAK,SAAS;YAC5C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,sBAAsB,EAAE;oBACtB,GAAG,KAAK,CAAC,sBAAsB;oBAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,UAAU,EAAE,KAAK,CAAC,YAAY;iBAC/B;aACF,CAAC;KACP,CAAC;AACJ,CAAC"}
@@ -3,9 +3,10 @@ import type { SecretBinding } from '@noodle-borg/connector-defs';
3
3
  import { type CredentialBroker, type CredentialRequest, type DelegatedCredentialProbe, type DownstreamCredential } from '@noodle-borg/runtime';
4
4
  import { type DelegatedExchangeOptions } from './delegated-token-exchange.js';
5
5
  import type { ExternalCredentialExchangeOptions } from './external-credential-exchange.js';
6
+ import { type GoogleWorkloadIdentityOptions } from './google-workload-identity.js';
6
7
  import type { OAuthStore } from './oauth/store.js';
7
8
  import type { ConfigScope, ConfigStore, SecretEnvelope, TenantAuthConfig } from './store.js';
8
- interface ManagedConfigBrokerOptions {
9
+ export interface ManagedConfigBrokerOptions {
9
10
  readonly artifact?: RuntimeArtifact;
10
11
  readonly delegatedCredentialStore?: Pick<OAuthStore, 'getDelegatedCredential' | 'putDelegatedCredential'>;
11
12
  readonly serverAuth?: TenantAuthConfig;
@@ -15,6 +16,8 @@ interface ManagedConfigBrokerOptions {
15
16
  readonly delegatedExchange?: DelegatedExchangeOptions;
16
17
  /** Deployment-owned account credential exchange; distinct from ADR 0152 end-user delegation. */
17
18
  readonly externalCredentialExchange?: ExternalCredentialExchangeOptions;
19
+ /** Keyless Google WIF exchange using the platform's OIDC issuer and deployment identity. */
20
+ readonly googleWorkloadIdentity?: GoogleWorkloadIdentityOptions;
18
21
  readonly fetchImpl?: typeof fetch;
19
22
  readonly now?: () => number;
20
23
  }
@@ -23,6 +26,6 @@ export declare class ManagedConfigBroker implements CredentialBroker {
23
26
  constructor(bindings: readonly SecretBinding[], store: ConfigStore, scope: ConfigScope, options?: ManagedConfigBrokerOptions);
24
27
  getCredential(request: CredentialRequest): Promise<DownstreamCredential>;
25
28
  probeDelegatedCredentials(caller: NonNullable<CredentialRequest['caller']>): Promise<readonly DelegatedCredentialProbe[]>;
29
+ probeServiceCredentials(): Promise<readonly DelegatedCredentialProbe[]>;
26
30
  }
27
- export {};
28
31
  //# sourceMappingURL=credential-broker.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"credential-broker.d.ts","sourceRoot":"","sources":["../src/credential-broker.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAGV,aAAa,EACd,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EAGtB,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EAE1B,MAAM,sBAAsB,CAAC;AAU9B,OAAO,EACL,KAAK,wBAAwB,EAI9B,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,mCAAmC,CAAC;AAE3F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE7F,UAAU,0BAA0B;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,IAAI,CACtC,UAAU,EACV,wBAAwB,GAAG,wBAAwB,CACpD,CAAC;IACF,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC,UAAU,EAAE,cAAc,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAClF,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAClF,4FAA4F;IAC5F,QAAQ,CAAC,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;IACtD,gGAAgG;IAChG,QAAQ,CAAC,0BAA0B,CAAC,EAAE,iCAAiC,CAAC;IACxE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAED,qBAAa,mBAAoB,YAAW,gBAAgB;;gBAaxD,QAAQ,EAAE,SAAS,aAAa,EAAE,EAClC,KAAK,EAAE,WAAW,EAClB,KAAK,EAAE,WAAW,EAClB,OAAO,GAAE,0BAA+B;IAmBpC,aAAa,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAsDxE,yBAAyB,CAC7B,MAAM,EAAE,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,GAC/C,OAAO,CAAC,SAAS,wBAAwB,EAAE,CAAC;CAsXhD"}
1
+ {"version":3,"file":"credential-broker.d.ts","sourceRoot":"","sources":["../src/credential-broker.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAGV,aAAa,EACd,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EAGtB,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EAE1B,MAAM,sBAAsB,CAAC;AAU9B,OAAO,EACL,KAAK,wBAAwB,EAI9B,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,mCAAmC,CAAC;AAC3F,OAAO,EAEL,KAAK,6BAA6B,EACnC,MAAM,+BAA+B,CAAC;AAGvC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE7F,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,IAAI,CACtC,UAAU,EACV,wBAAwB,GAAG,wBAAwB,CACpD,CAAC;IACF,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC,UAAU,EAAE,cAAc,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAClF,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAClF,4FAA4F;IAC5F,QAAQ,CAAC,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;IACtD,gGAAgG;IAChG,QAAQ,CAAC,0BAA0B,CAAC,EAAE,iCAAiC,CAAC;IACxE,4FAA4F;IAC5F,QAAQ,CAAC,sBAAsB,CAAC,EAAE,6BAA6B,CAAC;IAChE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAED,qBAAa,mBAAoB,YAAW,gBAAgB;;gBAexD,QAAQ,EAAE,SAAS,aAAa,EAAE,EAClC,KAAK,EAAE,WAAW,EAClB,KAAK,EAAE,WAAW,EAClB,OAAO,GAAE,0BAA+B;IA0BpC,aAAa,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAkExE,yBAAyB,CAC7B,MAAM,EAAE,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,GAC/C,OAAO,CAAC,SAAS,wBAAwB,EAAE,CAAC;IAUzC,uBAAuB,IAAI,OAAO,CAAC,SAAS,wBAAwB,EAAE,CAAC;CAoX9E"}
@@ -4,6 +4,8 @@ import { buildCredentialBindingIndex, } from './credential-binding-index.js';
4
4
  import { probeCredentials } from './credential-probes.js';
5
5
  import { fetchDelegatedTokenExchange, requireExchangeCaller, signExchangeAssertion, } from './delegated-token-exchange.js';
6
6
  import { ExternalCredentialBindingBroker } from './external-credential-binding-broker.js';
7
+ import { GoogleWorkloadIdentityBindingBroker, } from './google-workload-identity.js';
8
+ import { probeGoogleWorkloadIdentityCredentials } from './google-workload-identity-probe.js';
7
9
  import { resolveManagedVariablesInString } from './managed-config-expressions.js';
8
10
  export class ManagedConfigBroker {
9
11
  #bindings = new Map();
@@ -11,11 +13,13 @@ export class ManagedConfigBroker {
11
13
  #delegatedCache = new Map();
12
14
  #delegatedInflight = new Map();
13
15
  #externalExchangeBroker;
16
+ #googleWorkloadIdentityBroker;
14
17
  #store;
15
18
  #scope;
16
19
  #options;
17
20
  #allowedBindings;
18
21
  #externalExchangeBindings;
22
+ #googleWorkloadIdentityBindings;
19
23
  constructor(bindings, store, scope, options = {}) {
20
24
  this.#store = store;
21
25
  this.#scope = scope;
@@ -24,9 +28,14 @@ export class ManagedConfigBroker {
24
28
  options.externalCredentialExchange === undefined
25
29
  ? undefined
26
30
  : new ExternalCredentialBindingBroker(options.externalCredentialExchange, () => this.#now());
31
+ this.#googleWorkloadIdentityBroker =
32
+ options.googleWorkloadIdentity === undefined
33
+ ? undefined
34
+ : new GoogleWorkloadIdentityBindingBroker(options.googleWorkloadIdentity, () => this.#now());
27
35
  const bindingIndex = buildCredentialBindingIndex(options.artifact);
28
36
  this.#allowedBindings = bindingIndex.byKey;
29
37
  this.#externalExchangeBindings = bindingIndex.externalExchange;
38
+ this.#googleWorkloadIdentityBindings = bindingIndex.googleWorkloadIdentity;
30
39
  for (const binding of bindings) {
31
40
  this.#bindings.set(MapServiceBroker.key(binding.connectorId, binding.operation), binding);
32
41
  }
@@ -74,6 +83,19 @@ export class ManagedConfigBroker {
74
83
  }
75
84
  return this.#externalExchangeBroker.getCredential(request, allowed);
76
85
  }
86
+ if (allowed.source.kind === 'googleWorkloadIdentity') {
87
+ if (this.#googleWorkloadIdentityBroker === undefined) {
88
+ throw new CredentialUnavailableError('credential_not_configured');
89
+ }
90
+ let variables;
91
+ try {
92
+ variables = await this.#store.resolveConfigValues('variable', this.#scope);
93
+ }
94
+ catch {
95
+ throw new CredentialUnavailableError('credential_not_configured');
96
+ }
97
+ return this.#googleWorkloadIdentityBroker.getCredential(request, allowed, variables);
98
+ }
77
99
  if (allowed.source.kind !== 'managedSecret') {
78
100
  throw new CredentialUnavailableError('credential_not_configured');
79
101
  }
@@ -92,6 +114,13 @@ export class ManagedConfigBroker {
92
114
  getCredential: (request) => this.getCredential(request),
93
115
  });
94
116
  }
117
+ async probeServiceCredentials() {
118
+ return probeGoogleWorkloadIdentityCredentials({
119
+ bindings: this.#googleWorkloadIdentityBindings,
120
+ options: this.#options.googleWorkloadIdentity,
121
+ getCredential: (request) => this.getCredential(request),
122
+ });
123
+ }
95
124
  async #clientCredentialsToken(binding, clientSecret) {
96
125
  const cacheKey = MapServiceBroker.key(binding.connectorId, binding.operation);
97
126
  const cached = this.#oauthCache.get(cacheKey);
@@ -1 +1 @@
1
- {"version":3,"file":"credential-broker.js","sourceRoot":"","sources":["../src/credential-broker.ts"],"names":[],"mappings":"AAMA,OAAO,EAIL,0BAA0B,EAC1B,sCAAsC,EAGtC,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,4BAA4B,EAC5B,4BAA4B,GAC7B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAEL,2BAA2B,GAC5B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAEL,2BAA2B,EAC3B,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,+BAA+B,EAAE,MAAM,yCAAyC,CAAC;AAE1F,OAAO,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAC;AAqBlF,MAAM,OAAO,mBAAmB;IACrB,SAAS,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC7C,WAAW,GAAG,IAAI,GAAG,EAAgD,CAAC;IACtE,eAAe,GAAG,IAAI,GAAG,EAAwD,CAAC;IAClF,kBAAkB,GAAG,IAAI,GAAG,EAAyC,CAAC;IACtE,uBAAuB,CAA8C;IACrE,MAAM,CAAc;IACpB,MAAM,CAAc;IACpB,QAAQ,CAA6B;IACrC,gBAAgB,CAAgD;IAChE,yBAAyB,CAAsC;IAExE,YACE,QAAkC,EAClC,KAAkB,EAClB,KAAkB,EAClB,UAAsC,EAAE;QAExC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,uBAAuB;YAC1B,OAAO,CAAC,0BAA0B,KAAK,SAAS;gBAC9C,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,+BAA+B,CAAC,OAAO,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAC3E,IAAI,CAAC,IAAI,EAAE,CACZ,CAAC;QACR,MAAM,YAAY,GAAG,2BAA2B,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnE,IAAI,CAAC,gBAAgB,GAAG,YAAY,CAAC,KAAK,CAAC;QAC3C,IAAI,CAAC,yBAAyB,GAAG,YAAY,CAAC,gBAAgB,CAAC;QAC/D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAA0B;QAC5C,MAAM,UAAU,GAAG,sCAAsC,CAAC,OAAO,CAAC,CAAC;QACnE,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAClF,MAAM,SAAS,GACb,OAAO,CAAC,SAAS,KAAK,SAAS;YAC7B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;YAClF,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,OAAO,GAAG,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QAC3F,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAChD,IAAI,OAAO,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC,0BAA0B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,wBAAwB,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC,iCAAiC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,wBAAwB,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC,iCAAiC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7E,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;YACjC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QAC3F,IAAI,OAAO,CAAC,QAAQ,KAAK,mBAAmB,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACxF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAClE,OAAO,EAAE,KAAK,EAAE,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC;QACrB,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,OAA0B,EAC1B,UAAuC;QAEvC,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,gBAAgB,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;QACnF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YAC/C,IAAI,IAAI,CAAC,uBAAuB,KAAK,SAAS,EAAE,CAAC;gBAC/C,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAC5C,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,CAAC,CAAC;QAC5F,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,yBAAyB,CAC7B,MAAgD;QAEhD,OAAO,gBAAgB,CAAC;YACtB,MAAM;YACN,gBAAgB,EAAE,IAAI,CAAC,yBAAyB;YAChD,cAAc,EAAE,IAAI,CAAC,uBAAuB;YAC5C,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE;YACjC,aAAa,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;SACxD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,OAAsB,EAAE,YAAoB;QACxE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC;QACxE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,gCAAgC,CACpD,OAAO,CAAC,iBAA6C,CACtD,CAAC;QACF,MAAM,QAAQ,GACZ,EAAE,CAAC,OAAO,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS;YAChD,CAAC,CAAC,MAAM,4BAA4B,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC;YACjE,CAAC,CAAC,MAAM,4BAA4B,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;QAC3D,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACzC,OAAO,QAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,0BAA0B,CAC9B,OAAsB,EACtB,OAA0B;QAE1B,IAAI,OAAO,CAAC,SAAS,EAAE,QAAQ,KAAK,WAAW,EAAE,CAAC;YAChD,OAAO,IAAI,CAAC,mCAAmC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,CAAC;QAC5B,uBAAuB,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG;YACf,MAAM,CAAC,QAAQ;YACf,QAAQ;YACR,MAAM,CAAC,OAAO;YACd,OAAO,CAAC,WAAW;YACnB,OAAO,CAAC,SAAS;SAClB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;YACnD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC3F,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,0BAA0B,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC;aACzF,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACf,MAAM,UAAU,GAAG;gBACjB,KAAK,EAAE,MAAM,CAAC,OAAO;gBACrB,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI;aACpE,CAAC;YACF,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC/C,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QACrC,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,mCAAmC,CACvC,OAAsB,EACtB,OAA0B;QAE1B,MAAM,SAAS,GAAG,gCAAgC,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,iCAAiC,CAAC,SAAS,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG;YACf,MAAM,CAAC,QAAQ;YACf,iBAAiB,CAAC,QAAQ;YAC1B,MAAM,CAAC,OAAO;YACd,OAAO,CAAC,WAAW;YACnB,OAAO,CAAC,SAAS;YACjB,iBAAiB,CAAC,QAAQ;YAC1B,iBAAiB,CAAC,QAAQ;YAC1B,GAAG,CAAC,iBAAiB,CAAC,MAAM,IAAI,EAAE,CAAC;SACpC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;YACnD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC3F,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,2BAA2B,CAAC,OAAO,EAAE,iBAAiB,EAAE,MAAM,CAAC;aACjF,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACf,MAAM,UAAU,GAAG;gBACjB,KAAK,EAAE,MAAM,CAAC,WAAW;gBACzB,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI;aACpE,CAAC;YACF,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC/C,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QACrC,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,iCAAiC,CACrC,OAAsB,EACtB,OAA0B;QAE1B,uBAAuB,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,UAAU,CAAC;QAC5B,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC;QACjD,IAAI,UAAU,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACzF,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,EAAE,UAAU,IAAI,SAAS,CAAC;QAC9D,MAAM,QAAQ,GAAG;YACf,MAAM,CAAC,QAAQ;YACf,QAAQ;YACR,MAAM,CAAC,OAAO;YACd,OAAO,CAAC,WAAW;YACnB,OAAO,CAAC,SAAS;YACjB,UAAU;SACX,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG;YAAE,OAAO,MAAM,CAAC;QAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,0BAA0B,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC;aACzF,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CACf,qCAAqC,CAAC;YACpC,UAAU;YACV,UAAU;YACV,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,KAAK;YAC3C,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE;SACjB,CAAC,CACH;aACA,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE;YACnB,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;YACjF,CAAC;YACD,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,GAAG,OAAO,CAAC;YAChE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;YACjE,OAAO,UAAU,CAAC;QACpB,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,0BAA0B,CAC9B,QAAuB,EACvB,OAA0B,EAC1B,QAAgB,EAChB,QAAgB;QAEhB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAClF,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QACtC,IACE,eAAe,KAAK,SAAS;YAC7B,IAAI,KAAK,SAAS;YAClB,IAAI,KAAK,SAAS;YAClB,IAAI,CAAC,IAAI,KAAK,QAAQ;YACtB,IAAI,CAAC,QAAQ,KAAK,UAAU;YAC5B,IAAI,CAAC,MAAM,KAAK,SAAS,EACzB,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,sBAAsB,CAAC;YAC1D,QAAQ;YACR,QAAQ;YACR,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC,CAAC;QACH,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC5E,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjF,MAAM,MAAM,GAAG,+BAA+B,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACvE,IAAI,MAA6B,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,yBAAyB,CAAC;gBACvC,MAAM;gBACN,YAAY;gBACZ,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,KAAK;aAC5C,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,0BAA0B,CAAC,4BAA4B,EAAE;gBACjE,GAAG,EAAE,iEAAiE;gBACtE,IAAI,EAAE,CAAC,2BAA2B,CAAC;aACpC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,KAAK,YAAY,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/D,MAAM,eAAe,CAAC,sBAAsB,CAAC;gBAC3C,GAAG,MAAM;gBACT,UAAU,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;gBAC3C,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;aAC/C,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,2BAA2B,CAC/B,OAAsB,EACtB,SAAoC,EACpC,MAAgF;QAEhF,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAClD,IAAI,eAAe,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7E,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,YAAY,KAAK,SAAS;YAC5B,MAAM,IAAI,KAAK,CAAC,2BAA2B,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QAEnE,MAAM,QAAQ,GAAG,WAAW,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,sBAAsB,CAAC;YAC1D,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ;YACR,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC,CAAC;QACH,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC5E,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC;YAC9C,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,YAAY;YACZ,YAAY;YACZ,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,UAAU,EAAE,SAAS,CAAC,UAAU,IAAI,oBAAoB;YACxD,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,KAAK;SAC5C,CAAC,CAAC;QACH,IACE,MAAM,CAAC,YAAY,KAAK,SAAS;YACjC,MAAM,CAAC,YAAY,KAAK,YAAY;YACpC,IAAI,KAAK,SAAS,EAClB,CAAC;YACD,MAAM,eAAe,CAAC,sBAAsB,CAAC;gBAC3C,GAAG,MAAM;gBACT,UAAU,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;gBAC3C,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;aAC/C,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,iCAAiC,CACrC,OAAsB,EACtB,OAA0B;QAE1B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC;QACvC,IAAI,OAAO,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,EAAE;gBAChE,GAAG,EAAE,qEAAqE;gBAC1E,IAAI,EAAE,CAAC,oBAAoB,CAAC;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG;YACf,eAAe;YACf,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,OAAO;YACd,OAAO,CAAC,WAAW;YACnB,OAAO,CAAC,SAAS;YACjB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;SACjC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;YACnD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC3F,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,CAAC,KAAK,IAAmC,EAAE;YACzD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACpC,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,EAAE;oBAChE,GAAG,EAAE,iEAAiE;oBACtE,IAAI,EAAE,CAAC,oBAAoB,CAAC;iBAC7B,CAAC,CAAC;YACL,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7E,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,EAAE;oBAChE,GAAG,EAAE,8DAA8D;oBACnE,IAAI,EAAE,CAAC,oBAAoB,CAAC;iBAC7B,CAAC,CAAC;YACL,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,4BAA4B,CAAC,QAAQ,CAAC,CAAC;YACnE,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC;YACxD,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC;gBAC5C,OAAO;gBACP,MAAM;gBACN,QAAQ;gBACR,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE;aACnB,CAAC,CAAC;YACH,IAAI,MAA+D,CAAC;YACpE,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,2BAA2B,CAAC;oBACzC,OAAO,EAAE,QAAQ;oBACjB,YAAY;oBACZ,SAAS;oBACT,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,KAAK;iBAC5C,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,0BAA0B,CAAC,4BAA4B,EAAE;oBACjE,GAAG,EAAE,+EAA+E;oBACpF,IAAI,EAAE,CAAC,2BAA2B,CAAC;iBACpC,CAAC,CAAC;YACL,CAAC;YACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE;oBACjC,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI;iBACpE,CAAC,CAAC;YACL,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,4BAA4B,CAChC,QAAqD;QAErD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjF,OAAO;YACL,GAAG,QAAQ;YACX,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;YACvE,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;YACvE,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS;gBACjC,CAAC,CAAC,EAAE,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE;gBAC7E,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gCAAgC,CACpC,EAA4B;QAE5B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjF,OAAO;YACL,GAAG,EAAE;YACL,QAAQ,EAAE,+BAA+B,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;YACjE,QAAQ,EAAE,+BAA+B,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;YACjE,GAAG,CAAC,EAAE,CAAC,QAAQ,KAAK,SAAS;gBAC3B,CAAC,CAAC,EAAE,QAAQ,EAAE,+BAA+B,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE;gBACvE,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iCAAiC,CACrC,SAAoC;QAEpC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjF,OAAO;YACL,GAAG,SAAS;YACZ,QAAQ,EAAE,+BAA+B,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC;YACxE,QAAQ,EAAE,+BAA+B,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC;SACzE,CAAC;IACJ,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7C,CAAC;CACF;AAED,SAAS,qBAAqB,CAC5B,OAA0B,EAC1B,QAAgB;IAEhB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IACE,MAAM,KAAK,SAAS;QACpB,MAAM,CAAC,YAAY,KAAK,UAAU;QAClC,MAAM,CAAC,gBAAgB,KAAK,QAAQ;QACpC,MAAM,CAAC,QAAQ,KAAK,SAAS,EAC7B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,MAAkF,CAAC;AAC5F,CAAC;AAED,SAAS,uBAAuB,CAAC,QAA4B;IAC3D,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAQD,SAAS,gCAAgC,CAAC,OAAsB;IAC9D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACpC,IACE,SAAS,EAAE,QAAQ,KAAK,WAAW;QACnC,SAAS,CAAC,QAAQ,KAAK,SAAS;QAChC,SAAS,CAAC,QAAQ,KAAK,SAAS,EAChC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,SAAsC,CAAC;AAChD,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAA0B;IAE1B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IACE,MAAM,KAAK,SAAS;QACpB,MAAM,CAAC,gBAAgB,KAAK,WAAW;QACvC,MAAM,CAAC,QAAQ,KAAK,SAAS,EAC7B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,MAAkF,CAAC;AAC5F,CAAC;AAcD,KAAK,UAAU,yBAAyB,CAAC,KAIxC;IACC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CACpC,mDAAmD,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EACrF;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,MAAM,EAAE,kBAAkB;YAC1B,cAAc,EAAE,mCAAmC;YACnD,YAAY,EAAE,iBAAiB;SAChC;QACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;QACvB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CACF,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5F,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIlC,CAAC;IACF,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,SAAS,GACb,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACjC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QACtC,CAAC,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;YACnC,CAAC,CAAC,IAAI,CAAC,UAAU;YACjB,CAAC,CAAC,IAAI,CAAC;IACb,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,QAAQ;QACtB,YAAY,EAAE,IAAI,CAAC,aAAa;QAChC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;KAC1E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,KAQzC;IACC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,OAAO,GAA2B;QACtC,MAAM,EAAE,kBAAkB;QAC1B,cAAc,EAAE,mCAAmC;QACnD,YAAY,EAAE,iBAAiB;KAChC,CAAC;IACF,IAAI,KAAK,CAAC,UAAU,KAAK,qBAAqB,EAAE,CAAC;QAC/C,OAAO,CAAC,aAAa,GAAG,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC/G,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE;QACrD,MAAM,EAAE,MAAM;QACd,OAAO;QACP,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;QACvB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7F,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIlC,CAAC;IACF,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,YAAY,GAChB,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;QACrE,CAAC,CAAC,IAAI,CAAC,aAAa;QACpB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,SAAS,GACb,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACjC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QACtC,CAAC,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;YACnC,CAAC,CAAC,IAAI,CAAC,UAAU;YACjB,CAAC,CAAC,IAAI,CAAC;IACb,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;KAC1E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,qCAAqC,CAAC,KAMpD;IACC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE;QACvD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,MAAM,EAAE,kBAAkB;YAC1B,cAAc,EAAE,kBAAkB;YAClC,YAAY,EAAE,iBAAiB;SAChC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAC3D,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QACd,MAAM,IAAI,KAAK,CAAC,iDAAiD,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACtF,MAAM,OAAO,GAAG,uBAAuB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAC/F,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACnD,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,MAAM;QACN,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAgB;IAC/C,MAAM,YAAY,GAAG,OAAsD,CAAC;IAC5E,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,EAAE,EAAE,CAAC;IAC7C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IAC7D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzC,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB;IACnC,OAAO,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,YAAY,CAAC,UAA6B,EAAE,GAAW;IAC9D,MAAM,QAAQ,GAAG,UAAU;SACxB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;SACxC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB,EAAE,GAAW;IAClD,MAAM,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAChE,OAAO,GAAG,GAAG,OAAO,GAAG,IAAI,CAAC;AAC9B,CAAC"}
1
+ {"version":3,"file":"credential-broker.js","sourceRoot":"","sources":["../src/credential-broker.ts"],"names":[],"mappings":"AAMA,OAAO,EAIL,0BAA0B,EAC1B,sCAAsC,EAGtC,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,4BAA4B,EAC5B,4BAA4B,GAC7B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAEL,2BAA2B,GAC5B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAEL,2BAA2B,EAC3B,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,+BAA+B,EAAE,MAAM,yCAAyC,CAAC;AAE1F,OAAO,EACL,mCAAmC,GAEpC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,sCAAsC,EAAE,MAAM,qCAAqC,CAAC;AAC7F,OAAO,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAC;AAuBlF,MAAM,OAAO,mBAAmB;IACrB,SAAS,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC7C,WAAW,GAAG,IAAI,GAAG,EAAgD,CAAC;IACtE,eAAe,GAAG,IAAI,GAAG,EAAwD,CAAC;IAClF,kBAAkB,GAAG,IAAI,GAAG,EAAyC,CAAC;IACtE,uBAAuB,CAA8C;IACrE,6BAA6B,CAAkD;IAC/E,MAAM,CAAc;IACpB,MAAM,CAAc;IACpB,QAAQ,CAA6B;IACrC,gBAAgB,CAAgD;IAChE,yBAAyB,CAAsC;IAC/D,+BAA+B,CAAsC;IAE9E,YACE,QAAkC,EAClC,KAAkB,EAClB,KAAkB,EAClB,UAAsC,EAAE;QAExC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,uBAAuB;YAC1B,OAAO,CAAC,0BAA0B,KAAK,SAAS;gBAC9C,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,+BAA+B,CAAC,OAAO,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAC3E,IAAI,CAAC,IAAI,EAAE,CACZ,CAAC;QACR,IAAI,CAAC,6BAA6B;YAChC,OAAO,CAAC,sBAAsB,KAAK,SAAS;gBAC1C,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,mCAAmC,CAAC,OAAO,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAC3E,IAAI,CAAC,IAAI,EAAE,CACZ,CAAC;QACR,MAAM,YAAY,GAAG,2BAA2B,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnE,IAAI,CAAC,gBAAgB,GAAG,YAAY,CAAC,KAAK,CAAC;QAC3C,IAAI,CAAC,yBAAyB,GAAG,YAAY,CAAC,gBAAgB,CAAC;QAC/D,IAAI,CAAC,+BAA+B,GAAG,YAAY,CAAC,sBAAsB,CAAC;QAC3E,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAA0B;QAC5C,MAAM,UAAU,GAAG,sCAAsC,CAAC,OAAO,CAAC,CAAC;QACnE,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAClF,MAAM,SAAS,GACb,OAAO,CAAC,SAAS,KAAK,SAAS;YAC7B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;YAClF,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,OAAO,GAAG,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QAC3F,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAChD,IAAI,OAAO,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC,0BAA0B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,wBAAwB,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC,iCAAiC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,wBAAwB,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC,iCAAiC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7E,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;YACjC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QAC3F,IAAI,OAAO,CAAC,QAAQ,KAAK,mBAAmB,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACxF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAClE,OAAO,EAAE,KAAK,EAAE,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC;QACrB,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,OAA0B,EAC1B,UAAuC;QAEvC,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,gBAAgB,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;QACnF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YAC/C,IAAI,IAAI,CAAC,uBAAuB,KAAK,SAAS,EAAE,CAAC;gBAC/C,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;YACrD,IAAI,IAAI,CAAC,6BAA6B,KAAK,SAAS,EAAE,CAAC;gBACrD,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,CAAC,CAAC;YACpE,CAAC;YACD,IAAI,SAAiC,CAAC;YACtC,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7E,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,IAAI,CAAC,6BAA6B,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAC5C,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,CAAC,CAAC;QAC5F,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,yBAAyB,CAC7B,MAAgD;QAEhD,OAAO,gBAAgB,CAAC;YACtB,MAAM;YACN,gBAAgB,EAAE,IAAI,CAAC,yBAAyB;YAChD,cAAc,EAAE,IAAI,CAAC,uBAAuB;YAC5C,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE;YACjC,aAAa,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;SACxD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,uBAAuB;QAC3B,OAAO,sCAAsC,CAAC;YAC5C,QAAQ,EAAE,IAAI,CAAC,+BAA+B;YAC9C,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,sBAAsB;YAC7C,aAAa,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;SACxD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,OAAsB,EAAE,YAAoB;QACxE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC;QACxE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,gCAAgC,CACpD,OAAO,CAAC,iBAA6C,CACtD,CAAC;QACF,MAAM,QAAQ,GACZ,EAAE,CAAC,OAAO,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS;YAChD,CAAC,CAAC,MAAM,4BAA4B,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC;YACjE,CAAC,CAAC,MAAM,4BAA4B,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;QAC3D,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACzC,OAAO,QAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,0BAA0B,CAC9B,OAAsB,EACtB,OAA0B;QAE1B,IAAI,OAAO,CAAC,SAAS,EAAE,QAAQ,KAAK,WAAW,EAAE,CAAC;YAChD,OAAO,IAAI,CAAC,mCAAmC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,CAAC;QAC5B,uBAAuB,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG;YACf,MAAM,CAAC,QAAQ;YACf,QAAQ;YACR,MAAM,CAAC,OAAO;YACd,OAAO,CAAC,WAAW;YACnB,OAAO,CAAC,SAAS;SAClB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;YACnD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC3F,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,0BAA0B,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC;aACzF,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACf,MAAM,UAAU,GAAG;gBACjB,KAAK,EAAE,MAAM,CAAC,OAAO;gBACrB,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI;aACpE,CAAC;YACF,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC/C,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QACrC,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,mCAAmC,CACvC,OAAsB,EACtB,OAA0B;QAE1B,MAAM,SAAS,GAAG,gCAAgC,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,iCAAiC,CAAC,SAAS,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG;YACf,MAAM,CAAC,QAAQ;YACf,iBAAiB,CAAC,QAAQ;YAC1B,MAAM,CAAC,OAAO;YACd,OAAO,CAAC,WAAW;YACnB,OAAO,CAAC,SAAS;YACjB,iBAAiB,CAAC,QAAQ;YAC1B,iBAAiB,CAAC,QAAQ;YAC1B,GAAG,CAAC,iBAAiB,CAAC,MAAM,IAAI,EAAE,CAAC;SACpC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;YACnD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC3F,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,2BAA2B,CAAC,OAAO,EAAE,iBAAiB,EAAE,MAAM,CAAC;aACjF,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACf,MAAM,UAAU,GAAG;gBACjB,KAAK,EAAE,MAAM,CAAC,WAAW;gBACzB,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI;aACpE,CAAC;YACF,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC/C,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QACrC,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,iCAAiC,CACrC,OAAsB,EACtB,OAA0B;QAE1B,uBAAuB,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,UAAU,CAAC;QAC5B,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC;QACjD,IAAI,UAAU,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACzF,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,EAAE,UAAU,IAAI,SAAS,CAAC;QAC9D,MAAM,QAAQ,GAAG;YACf,MAAM,CAAC,QAAQ;YACf,QAAQ;YACR,MAAM,CAAC,OAAO;YACd,OAAO,CAAC,WAAW;YACnB,OAAO,CAAC,SAAS;YACjB,UAAU;SACX,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG;YAAE,OAAO,MAAM,CAAC;QAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,0BAA0B,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC;aACzF,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CACf,qCAAqC,CAAC;YACpC,UAAU;YACV,UAAU;YACV,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,KAAK;YAC3C,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE;SACjB,CAAC,CACH;aACA,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE;YACnB,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;YACjF,CAAC;YACD,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,GAAG,OAAO,CAAC;YAChE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;YACjE,OAAO,UAAU,CAAC;QACpB,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,0BAA0B,CAC9B,QAAuB,EACvB,OAA0B,EAC1B,QAAgB,EAChB,QAAgB;QAEhB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAClF,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;QACtC,IACE,eAAe,KAAK,SAAS;YAC7B,IAAI,KAAK,SAAS;YAClB,IAAI,KAAK,SAAS;YAClB,IAAI,CAAC,IAAI,KAAK,QAAQ;YACtB,IAAI,CAAC,QAAQ,KAAK,UAAU;YAC5B,IAAI,CAAC,MAAM,KAAK,SAAS,EACzB,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,sBAAsB,CAAC;YAC1D,QAAQ;YACR,QAAQ;YACR,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC,CAAC;QACH,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC5E,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjF,MAAM,MAAM,GAAG,+BAA+B,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACvE,IAAI,MAA6B,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,yBAAyB,CAAC;gBACvC,MAAM;gBACN,YAAY;gBACZ,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,KAAK;aAC5C,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,0BAA0B,CAAC,4BAA4B,EAAE;gBACjE,GAAG,EAAE,iEAAiE;gBACtE,IAAI,EAAE,CAAC,2BAA2B,CAAC;aACpC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,KAAK,YAAY,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/D,MAAM,eAAe,CAAC,sBAAsB,CAAC;gBAC3C,GAAG,MAAM;gBACT,UAAU,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;gBAC3C,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;aAC/C,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,2BAA2B,CAC/B,OAAsB,EACtB,SAAoC,EACpC,MAAgF;QAEhF,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAClD,IAAI,eAAe,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7E,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,YAAY,KAAK,SAAS;YAC5B,MAAM,IAAI,KAAK,CAAC,2BAA2B,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QAEnE,MAAM,QAAQ,GAAG,WAAW,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,sBAAsB,CAAC;YAC1D,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ;YACR,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC,CAAC;QACH,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC5E,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC;YAC9C,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,YAAY;YACZ,YAAY;YACZ,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,UAAU,EAAE,SAAS,CAAC,UAAU,IAAI,oBAAoB;YACxD,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,KAAK;SAC5C,CAAC,CAAC;QACH,IACE,MAAM,CAAC,YAAY,KAAK,SAAS;YACjC,MAAM,CAAC,YAAY,KAAK,YAAY;YACpC,IAAI,KAAK,SAAS,EAClB,CAAC;YACD,MAAM,eAAe,CAAC,sBAAsB,CAAC;gBAC3C,GAAG,MAAM;gBACT,UAAU,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;gBAC3C,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;aAC/C,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,iCAAiC,CACrC,OAAsB,EACtB,OAA0B;QAE1B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC;QACvC,IAAI,OAAO,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,EAAE;gBAChE,GAAG,EAAE,qEAAqE;gBAC1E,IAAI,EAAE,CAAC,oBAAoB,CAAC;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG;YACf,eAAe;YACf,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,OAAO;YACd,OAAO,CAAC,WAAW;YACnB,OAAO,CAAC,SAAS;YACjB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;SACjC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;YACnD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC3F,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,CAAC,KAAK,IAAmC,EAAE;YACzD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACpC,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,EAAE;oBAChE,GAAG,EAAE,iEAAiE;oBACtE,IAAI,EAAE,CAAC,oBAAoB,CAAC;iBAC7B,CAAC,CAAC;YACL,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7E,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,EAAE;oBAChE,GAAG,EAAE,8DAA8D;oBACnE,IAAI,EAAE,CAAC,oBAAoB,CAAC;iBAC7B,CAAC,CAAC;YACL,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,4BAA4B,CAAC,QAAQ,CAAC,CAAC;YACnE,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC;YACxD,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC;gBAC5C,OAAO;gBACP,MAAM;gBACN,QAAQ;gBACR,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE;aACnB,CAAC,CAAC;YACH,IAAI,MAA+D,CAAC;YACpE,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,2BAA2B,CAAC;oBACzC,OAAO,EAAE,QAAQ;oBACjB,YAAY;oBACZ,SAAS;oBACT,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,KAAK;iBAC5C,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,0BAA0B,CAAC,4BAA4B,EAAE;oBACjE,GAAG,EAAE,+EAA+E;oBACpF,IAAI,EAAE,CAAC,2BAA2B,CAAC;iBACpC,CAAC,CAAC;YACL,CAAC;YACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE;oBACjC,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI;iBACpE,CAAC,CAAC;YACL,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,4BAA4B,CAChC,QAAqD;QAErD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjF,OAAO;YACL,GAAG,QAAQ;YACX,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;YACvE,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;YACvE,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS;gBACjC,CAAC,CAAC,EAAE,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE;gBAC7E,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gCAAgC,CACpC,EAA4B;QAE5B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjF,OAAO;YACL,GAAG,EAAE;YACL,QAAQ,EAAE,+BAA+B,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;YACjE,QAAQ,EAAE,+BAA+B,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;YACjE,GAAG,CAAC,EAAE,CAAC,QAAQ,KAAK,SAAS;gBAC3B,CAAC,CAAC,EAAE,QAAQ,EAAE,+BAA+B,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE;gBACvE,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iCAAiC,CACrC,SAAoC;QAEpC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjF,OAAO;YACL,GAAG,SAAS;YACZ,QAAQ,EAAE,+BAA+B,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC;YACxE,QAAQ,EAAE,+BAA+B,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC;SACzE,CAAC;IACJ,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7C,CAAC;CACF;AAED,SAAS,qBAAqB,CAC5B,OAA0B,EAC1B,QAAgB;IAEhB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IACE,MAAM,KAAK,SAAS;QACpB,MAAM,CAAC,YAAY,KAAK,UAAU;QAClC,MAAM,CAAC,gBAAgB,KAAK,QAAQ;QACpC,MAAM,CAAC,QAAQ,KAAK,SAAS,EAC7B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,MAAkF,CAAC;AAC5F,CAAC;AAED,SAAS,uBAAuB,CAAC,QAA4B;IAC3D,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAQD,SAAS,gCAAgC,CAAC,OAAsB;IAC9D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACpC,IACE,SAAS,EAAE,QAAQ,KAAK,WAAW;QACnC,SAAS,CAAC,QAAQ,KAAK,SAAS;QAChC,SAAS,CAAC,QAAQ,KAAK,SAAS,EAChC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,SAAsC,CAAC;AAChD,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAA0B;IAE1B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IACE,MAAM,KAAK,SAAS;QACpB,MAAM,CAAC,gBAAgB,KAAK,WAAW;QACvC,MAAM,CAAC,QAAQ,KAAK,SAAS,EAC7B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,MAAkF,CAAC;AAC5F,CAAC;AAcD,KAAK,UAAU,yBAAyB,CAAC,KAIxC;IACC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CACpC,mDAAmD,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EACrF;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,MAAM,EAAE,kBAAkB;YAC1B,cAAc,EAAE,mCAAmC;YACnD,YAAY,EAAE,iBAAiB;SAChC;QACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;QACvB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CACF,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5F,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIlC,CAAC;IACF,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,SAAS,GACb,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACjC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QACtC,CAAC,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;YACnC,CAAC,CAAC,IAAI,CAAC,UAAU;YACjB,CAAC,CAAC,IAAI,CAAC;IACb,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,QAAQ;QACtB,YAAY,EAAE,IAAI,CAAC,aAAa;QAChC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;KAC1E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,KAQzC;IACC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,OAAO,GAA2B;QACtC,MAAM,EAAE,kBAAkB;QAC1B,cAAc,EAAE,mCAAmC;QACnD,YAAY,EAAE,iBAAiB;KAChC,CAAC;IACF,IAAI,KAAK,CAAC,UAAU,KAAK,qBAAqB,EAAE,CAAC;QAC/C,OAAO,CAAC,aAAa,GAAG,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC/G,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE;QACrD,MAAM,EAAE,MAAM;QACd,OAAO;QACP,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;QACvB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7F,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIlC,CAAC;IACF,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,YAAY,GAChB,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;QACrE,CAAC,CAAC,IAAI,CAAC,aAAa;QACpB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,SAAS,GACb,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACjC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QACtC,CAAC,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;YACnC,CAAC,CAAC,IAAI,CAAC,UAAU;YACjB,CAAC,CAAC,IAAI,CAAC;IACb,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;KAC1E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,qCAAqC,CAAC,KAMpD;IACC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE;QACvD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,MAAM,EAAE,kBAAkB;YAC1B,cAAc,EAAE,kBAAkB;YAClC,YAAY,EAAE,iBAAiB;SAChC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAC3D,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QACd,MAAM,IAAI,KAAK,CAAC,iDAAiD,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACtF,MAAM,OAAO,GAAG,uBAAuB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAC/F,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACnD,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,MAAM;QACN,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAgB;IAC/C,MAAM,YAAY,GAAG,OAAsD,CAAC;IAC5E,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,EAAE,EAAE,CAAC;IAC7C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IAC7D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzC,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB;IACnC,OAAO,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,YAAY,CAAC,UAA6B,EAAE,GAAW;IAC9D,MAAM,QAAQ,GAAG,UAAU;SACxB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;SACxC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB,EAAE,GAAW;IAClD,MAAM,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAChE,OAAO,GAAG,GAAG,OAAO,GAAG,IAAI,CAAC;AAC9B,CAAC"}
@@ -0,0 +1,21 @@
1
+ import type { Pool } from 'pg';
2
+ import type { GoogleWorkloadIdentityRecord } from './google-workload-identity.js';
3
+ import type { GoogleWorkloadIdentityStore, PrepareGoogleWorkloadIdentityInput, RevokeGoogleWorkloadIdentityInput, StoredGoogleWorkloadIdentity } from './google-workload-identity-store.js';
4
+ import { type TenantRef } from './store.js';
5
+ /** Durable, multi-instance lifecycle for environment-scoped Google workload identities. */
6
+ export declare class PostgresGoogleWorkloadIdentityStore implements GoogleWorkloadIdentityStore {
7
+ #private;
8
+ constructor(pool: Pool, options?: {
9
+ readonly now?: () => Date;
10
+ readonly randomId?: () => string;
11
+ });
12
+ ensureSchema(): Promise<void>;
13
+ prepare(input: PrepareGoogleWorkloadIdentityInput): Promise<StoredGoogleWorkloadIdentity>;
14
+ get(tenantInput: TenantRef): Promise<StoredGoogleWorkloadIdentity | undefined>;
15
+ revoke(input: RevokeGoogleWorkloadIdentityInput): Promise<StoredGoogleWorkloadIdentity | undefined>;
16
+ resolve(input: {
17
+ readonly tenantId: string;
18
+ readonly deploymentId: string;
19
+ }): Promise<GoogleWorkloadIdentityRecord | undefined>;
20
+ }
21
+ //# sourceMappingURL=google-workload-identity-postgres.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"google-workload-identity-postgres.d.ts","sourceRoot":"","sources":["../src/google-workload-identity-postgres.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAc,MAAM,IAAI,CAAC;AAC3C,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAClF,OAAO,KAAK,EACV,2BAA2B,EAC3B,kCAAkC,EAClC,iCAAiC,EACjC,4BAA4B,EAC7B,MAAM,qCAAqC,CAAC;AAE7C,OAAO,EAAE,KAAK,SAAS,EAAqB,MAAM,YAAY,CAAC;AAmB/D,2FAA2F;AAC3F,qBAAa,mCAAoC,YAAW,2BAA2B;;gBAMnF,IAAI,EAAE,IAAI,EACV,OAAO,GAAE;QACP,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;QAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,MAAM,CAAC;KAC7B;IAOF,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAwB7B,OAAO,CAAC,KAAK,EAAE,kCAAkC,GAAG,OAAO,CAAC,4BAA4B,CAAC;IAsDzF,GAAG,CAAC,WAAW,EAAE,SAAS,GAAG,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC;IAU9E,MAAM,CACV,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC;IAmC9C,OAAO,CAAC,KAAK,EAAE;QACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;KAC/B,GAAG,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC;CAatD"}
@@ -0,0 +1,195 @@
1
+ import { randomBytes } from 'node:crypto';
2
+ import { hasAsciiControlCharacters } from './google-workload-identity-validation.js';
3
+ import { validateTenantRef } from './store.js';
4
+ /** Durable, multi-instance lifecycle for environment-scoped Google workload identities. */
5
+ export class PostgresGoogleWorkloadIdentityStore {
6
+ #pool;
7
+ #now;
8
+ #randomId;
9
+ constructor(pool, options = {}) {
10
+ this.#pool = pool;
11
+ this.#now = options.now ?? (() => new Date());
12
+ this.#randomId = options.randomId ?? (() => `gwi_${randomBytes(18).toString('base64url')}`);
13
+ }
14
+ async ensureSchema() {
15
+ await this.#pool.query(`
16
+ CREATE TABLE IF NOT EXISTS google_workload_identities (
17
+ org_slug text NOT NULL,
18
+ app_slug text NOT NULL,
19
+ environment text NOT NULL,
20
+ identity_id text NOT NULL,
21
+ revision text NOT NULL,
22
+ subject text NOT NULL,
23
+ active boolean NOT NULL,
24
+ created_at timestamptz NOT NULL,
25
+ updated_at timestamptz NOT NULL,
26
+ created_by_subject text NOT NULL,
27
+ created_by_email text,
28
+ revoked_at timestamptz,
29
+ revoked_by_subject text,
30
+ revoked_by_email text,
31
+ PRIMARY KEY (org_slug, app_slug, environment),
32
+ UNIQUE (identity_id),
33
+ UNIQUE (subject)
34
+ )
35
+ `);
36
+ }
37
+ async prepare(input) {
38
+ const tenant = validateTenantRef(input);
39
+ const actorSubject = validateActor(input.actorSubject);
40
+ const client = await this.#pool.connect();
41
+ try {
42
+ await client.query('BEGIN');
43
+ await lockTenant(client, tenant);
44
+ const existing = await getRow(client, tenant, true);
45
+ if (existing?.active) {
46
+ await client.query('COMMIT');
47
+ return rowToRecord(existing);
48
+ }
49
+ const id = validateOpaqueId(this.#randomId());
50
+ const now = this.#now();
51
+ const { rows } = await client.query(`INSERT INTO google_workload_identities
52
+ (org_slug, app_slug, environment, identity_id, revision, subject, active,
53
+ created_at, updated_at, created_by_subject, created_by_email,
54
+ revoked_at, revoked_by_subject, revoked_by_email)
55
+ VALUES ($1, $2, $3, $4, $4, $5, true, $6, $6, $7, $8, NULL, NULL, NULL)
56
+ ON CONFLICT (org_slug, app_slug, environment) DO UPDATE SET
57
+ identity_id = EXCLUDED.identity_id,
58
+ revision = EXCLUDED.revision,
59
+ subject = EXCLUDED.subject,
60
+ active = true,
61
+ created_at = EXCLUDED.created_at,
62
+ updated_at = EXCLUDED.updated_at,
63
+ created_by_subject = EXCLUDED.created_by_subject,
64
+ created_by_email = EXCLUDED.created_by_email,
65
+ revoked_at = NULL,
66
+ revoked_by_subject = NULL,
67
+ revoked_by_email = NULL
68
+ RETURNING *`, [
69
+ tenant.org,
70
+ tenant.app,
71
+ tenant.env,
72
+ id,
73
+ `noodle:google-workload:${id}`,
74
+ now,
75
+ actorSubject,
76
+ input.actorEmail ?? null,
77
+ ]);
78
+ await client.query('COMMIT');
79
+ return rowToRecord(requireRow(rows[0]));
80
+ }
81
+ catch (error) {
82
+ await client.query('ROLLBACK').catch(() => undefined);
83
+ throw error;
84
+ }
85
+ finally {
86
+ client.release();
87
+ }
88
+ }
89
+ async get(tenantInput) {
90
+ const tenant = validateTenantRef(tenantInput);
91
+ const { rows } = await this.#pool.query(`SELECT * FROM google_workload_identities
92
+ WHERE org_slug = $1 AND app_slug = $2 AND environment = $3`, [tenant.org, tenant.app, tenant.env]);
93
+ return rows[0] === undefined ? undefined : rowToRecord(rows[0]);
94
+ }
95
+ async revoke(input) {
96
+ const tenant = validateTenantRef(input);
97
+ const actorSubject = validateActor(input.actorSubject);
98
+ const client = await this.#pool.connect();
99
+ try {
100
+ await client.query('BEGIN');
101
+ await lockTenant(client, tenant);
102
+ const existing = await getRow(client, tenant, true);
103
+ if (existing === undefined || !existing.active) {
104
+ await client.query('COMMIT');
105
+ return existing === undefined ? undefined : rowToRecord(existing);
106
+ }
107
+ const now = this.#now();
108
+ const { rows } = await client.query(`UPDATE google_workload_identities SET
109
+ revision = identity_id || ':revoked',
110
+ active = false,
111
+ updated_at = $4,
112
+ revoked_at = $4,
113
+ revoked_by_subject = $5,
114
+ revoked_by_email = $6
115
+ WHERE org_slug = $1 AND app_slug = $2 AND environment = $3
116
+ RETURNING *`, [tenant.org, tenant.app, tenant.env, now, actorSubject, input.actorEmail ?? null]);
117
+ await client.query('COMMIT');
118
+ return rowToRecord(requireRow(rows[0]));
119
+ }
120
+ catch (error) {
121
+ await client.query('ROLLBACK').catch(() => undefined);
122
+ throw error;
123
+ }
124
+ finally {
125
+ client.release();
126
+ }
127
+ }
128
+ async resolve(input) {
129
+ const parts = input.tenantId.split('/');
130
+ if (parts.length !== 3)
131
+ return undefined;
132
+ try {
133
+ return await this.get({
134
+ org: parts[0],
135
+ app: parts[1],
136
+ env: parts[2],
137
+ });
138
+ }
139
+ catch {
140
+ return undefined;
141
+ }
142
+ }
143
+ }
144
+ async function lockTenant(client, tenant) {
145
+ await client.query('SELECT pg_advisory_xact_lock(hashtext($1))', [
146
+ `${tenant.org}/${tenant.app}/${tenant.env}/google-workload-identity`,
147
+ ]);
148
+ }
149
+ async function getRow(client, tenant, forUpdate) {
150
+ const { rows } = await client.query(`SELECT * FROM google_workload_identities
151
+ WHERE org_slug = $1 AND app_slug = $2 AND environment = $3${forUpdate ? ' FOR UPDATE' : ''}`, [tenant.org, tenant.app, tenant.env]);
152
+ return rows[0];
153
+ }
154
+ function rowToRecord(row) {
155
+ return {
156
+ id: row.identity_id,
157
+ revision: row.revision,
158
+ tenantId: `${row.org_slug}/${row.app_slug}/${row.environment}`,
159
+ environmentId: row.environment,
160
+ subject: row.subject,
161
+ active: row.active,
162
+ org: row.org_slug,
163
+ app: row.app_slug,
164
+ env: row.environment,
165
+ createdAt: new Date(row.created_at).toISOString(),
166
+ updatedAt: new Date(row.updated_at).toISOString(),
167
+ createdBySubject: row.created_by_subject,
168
+ ...(row.created_by_email === null ? {} : { createdByEmail: row.created_by_email }),
169
+ ...(row.revoked_at === null
170
+ ? {}
171
+ : {
172
+ revokedAt: new Date(row.revoked_at).toISOString(),
173
+ ...(row.revoked_by_subject === null ? {} : { revokedBySubject: row.revoked_by_subject }),
174
+ ...(row.revoked_by_email === null ? {} : { revokedByEmail: row.revoked_by_email }),
175
+ }),
176
+ };
177
+ }
178
+ function requireRow(row) {
179
+ if (row === undefined)
180
+ throw new Error('Google workload identity write returned no row');
181
+ return row;
182
+ }
183
+ function validateActor(value) {
184
+ if (value.length < 1 || value.length > 512 || hasAsciiControlCharacters(value)) {
185
+ throw new Error('invalid workload identity actor');
186
+ }
187
+ return value;
188
+ }
189
+ function validateOpaqueId(value) {
190
+ if (!/^[A-Za-z0-9_-]{4,96}$/.test(value)) {
191
+ throw new Error('invalid workload identity id');
192
+ }
193
+ return value;
194
+ }
195
+ //# sourceMappingURL=google-workload-identity-postgres.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"google-workload-identity-postgres.js","sourceRoot":"","sources":["../src/google-workload-identity-postgres.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAS1C,OAAO,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAC;AACrF,OAAO,EAAkB,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAmB/D,2FAA2F;AAC3F,MAAM,OAAO,mCAAmC;IACrC,KAAK,CAAO;IACZ,IAAI,CAAa;IACjB,SAAS,CAAe;IAEjC,YACE,IAAU,EACV,UAGI,EAAE;QAEN,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;KAoBtB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAyC;QACrD,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,MAAM,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACjC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACpD,IAAI,QAAQ,EAAE,MAAM,EAAE,CAAC;gBACrB,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC7B,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC;YAC/B,CAAC;YACD,MAAM,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YACxB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC;;;;;;;;;;;;;;;;;qBAiBa,EACb;gBACE,MAAM,CAAC,GAAG;gBACV,MAAM,CAAC,GAAG;gBACV,MAAM,CAAC,GAAG;gBACV,EAAE;gBACF,0BAA0B,EAAE,EAAE;gBAC9B,GAAG;gBACH,YAAY;gBACZ,KAAK,CAAC,UAAU,IAAI,IAAI;aACzB,CACF,CAAC;YACF,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,WAAsB;QAC9B,MAAM,MAAM,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;QAC9C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACrC;kEAC4D,EAC5D,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CACrC,CAAC;QACF,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,MAAM,CACV,KAAwC;QAExC,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5B,MAAM,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACjC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACpD,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAC/C,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC7B,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YACpE,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YACxB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC;;;;;;;;qBAQa,EACb,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,CAClF,CAAC;YACF,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAGb;QACC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACzC,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC;gBACpB,GAAG,EAAE,KAAK,CAAC,CAAC,CAAW;gBACvB,GAAG,EAAE,KAAK,CAAC,CAAC,CAAW;gBACvB,GAAG,EAAE,KAAK,CAAC,CAAC,CAAW;aACxB,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;CACF;AAED,KAAK,UAAU,UAAU,CAAC,MAAkB,EAAE,MAAiB;IAC7D,MAAM,MAAM,CAAC,KAAK,CAAC,4CAA4C,EAAE;QAC/D,GAAG,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,2BAA2B;KACrE,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,MAAkB,EAClB,MAAiB,EACjB,SAAkB;IAElB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CACjC;iEAC6D,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,EAC7F,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CACrC,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,GAAwB;IAC3C,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,WAAW;QACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,QAAQ,EAAE,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,WAAW,EAAE;QAC9D,aAAa,EAAE,GAAG,CAAC,WAAW;QAC9B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,GAAG,EAAE,GAAG,CAAC,QAAQ;QACjB,GAAG,EAAE,GAAG,CAAC,QAAQ;QACjB,GAAG,EAAE,GAAG,CAAC,WAAW;QACpB,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;QACjD,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;QACjD,gBAAgB,EAAE,GAAG,CAAC,kBAAkB;QACxC,GAAG,CAAC,GAAG,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAClF,GAAG,CAAC,GAAG,CAAC,UAAU,KAAK,IAAI;YACzB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;gBACjD,GAAG,CAAC,GAAG,CAAC,kBAAkB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,kBAAkB,EAAE,CAAC;gBACxF,GAAG,CAAC,GAAG,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,gBAAgB,EAAE,CAAC;aACnF,CAAC;KACP,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,GAAoC;IACtD,IAAI,GAAG,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACzF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,yBAAyB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
@@ -0,0 +1,10 @@
1
+ import { type CredentialRequest, type DelegatedCredentialProbe, type DownstreamCredential } from '@noodle-borg/runtime';
2
+ import type { AllowedCredentialBinding } from './credential-binding-index.js';
3
+ import type { GoogleWorkloadIdentityOptions } from './google-workload-identity.js';
4
+ /** Run credential-only Google exchanges and emit diagnostics safe for operators and logs. */
5
+ export declare function probeGoogleWorkloadIdentityCredentials(input: {
6
+ readonly bindings: readonly AllowedCredentialBinding[];
7
+ readonly options: GoogleWorkloadIdentityOptions | undefined;
8
+ readonly getCredential: (request: CredentialRequest) => Promise<DownstreamCredential>;
9
+ }): Promise<readonly DelegatedCredentialProbe[]>;
10
+ //# sourceMappingURL=google-workload-identity-probe.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"google-workload-identity-probe.d.ts","sourceRoot":"","sources":["../src/google-workload-identity-probe.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,iBAAiB,EAEtB,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAEnF,6FAA6F;AAC7F,wBAAsB,sCAAsC,CAAC,KAAK,EAAE;IAClE,QAAQ,CAAC,QAAQ,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACvD,QAAQ,CAAC,OAAO,EAAE,6BAA6B,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACvF,GAAG,OAAO,CAAC,SAAS,wBAAwB,EAAE,CAAC,CAiC/C"}
@@ -0,0 +1,47 @@
1
+ import { CredentialUnavailableError, } from '@noodle-borg/runtime';
2
+ /** Run credential-only Google exchanges and emit diagnostics safe for operators and logs. */
3
+ export async function probeGoogleWorkloadIdentityCredentials(input) {
4
+ const probes = [];
5
+ for (const allowed of input.bindings) {
6
+ const descriptor = allowed.descriptor;
7
+ try {
8
+ await input.getCredential({
9
+ ...descriptor,
10
+ ...(input.options === undefined
11
+ ? {}
12
+ : {
13
+ tenantId: input.options.tenant,
14
+ deploymentId: input.options.deployment,
15
+ }),
16
+ });
17
+ probes.push({
18
+ ...probeIdentity(descriptor),
19
+ ok: true,
20
+ });
21
+ }
22
+ catch (error) {
23
+ const diagnostic = error instanceof CredentialUnavailableError
24
+ ? error
25
+ : new CredentialUnavailableError('credential_exchange_failed');
26
+ probes.push({
27
+ ...probeIdentity(descriptor),
28
+ ok: false,
29
+ reason: diagnostic.reason,
30
+ ...(diagnostic.fix === undefined ? {} : { fix: diagnostic.fix }),
31
+ ...(diagnostic.next === undefined ? {} : { next: diagnostic.next }),
32
+ });
33
+ }
34
+ }
35
+ return probes;
36
+ }
37
+ function probeIdentity(descriptor) {
38
+ return {
39
+ connectorId: descriptor.connectorId,
40
+ operation: descriptor.operation,
41
+ bindingId: descriptor.bindingId,
42
+ connectionId: descriptor.connectionId,
43
+ profile: descriptor.profile,
44
+ authKind: 'googleWorkloadIdentity',
45
+ };
46
+ }
47
+ //# sourceMappingURL=google-workload-identity-probe.js.map