@noodleseed/one 0.70.1 → 0.71.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (132) hide show
  1. package/dist/commands/auth-google-ops.d.ts +3 -0
  2. package/dist/commands/auth-google-ops.d.ts.map +1 -0
  3. package/dist/commands/auth-google-ops.js +198 -0
  4. package/dist/commands/auth-google-ops.js.map +1 -0
  5. package/dist/commands/auth-ops.d.ts.map +1 -1
  6. package/dist/commands/auth-ops.js +5 -1
  7. package/dist/commands/auth-ops.js.map +1 -1
  8. package/dist/commands/catalog-data-core.d.ts.map +1 -1
  9. package/dist/commands/catalog-data-core.js +17 -1
  10. package/dist/commands/catalog-data-core.js.map +1 -1
  11. package/dist/deploy.js +1 -1
  12. package/dist/deploy.js.map +1 -1
  13. package/dist/index.d.ts +1 -1
  14. package/dist/index.d.ts.map +1 -1
  15. package/dist/index.js +1 -1
  16. package/dist/index.js.map +1 -1
  17. package/node_modules/@noodle-borg/agent-kit/dist/curated/command-groups.js +1 -1
  18. package/node_modules/@noodle-borg/agent-kit/dist/curated/command-groups.js.map +1 -1
  19. package/node_modules/@noodle-borg/agent-kit/dist/generated/example-files.d.ts.map +1 -1
  20. package/node_modules/@noodle-borg/agent-kit/dist/generated/example-files.js +7 -0
  21. package/node_modules/@noodle-borg/agent-kit/dist/generated/example-files.js.map +1 -1
  22. package/node_modules/@noodle-borg/agent-kit/dist/generated/surface.d.ts.map +1 -1
  23. package/node_modules/@noodle-borg/agent-kit/dist/generated/surface.js +1 -0
  24. package/node_modules/@noodle-borg/agent-kit/dist/generated/surface.js.map +1 -1
  25. package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-refs.d.ts.map +1 -1
  26. package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-refs.js +5 -1
  27. package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-refs.js.map +1 -1
  28. package/node_modules/@noodle-borg/agent-kit/dist/skill-content.d.ts.map +1 -1
  29. package/node_modules/@noodle-borg/agent-kit/dist/skill-content.js +7 -1
  30. package/node_modules/@noodle-borg/agent-kit/dist/skill-content.js.map +1 -1
  31. package/node_modules/@noodle-borg/authoring/dist/connection-types.d.ts +23 -0
  32. package/node_modules/@noodle-borg/authoring/dist/connection-types.d.ts.map +1 -1
  33. package/node_modules/@noodle-borg/authoring/dist/connection-types.js +16 -0
  34. package/node_modules/@noodle-borg/authoring/dist/connection-types.js.map +1 -1
  35. package/node_modules/@noodle-borg/authoring/dist/connections.d.ts +2 -2
  36. package/node_modules/@noodle-borg/authoring/dist/connections.d.ts.map +1 -1
  37. package/node_modules/@noodle-borg/authoring/dist/connections.js +13 -2
  38. package/node_modules/@noodle-borg/authoring/dist/connections.js.map +1 -1
  39. package/node_modules/@noodle-borg/authoring/dist/index.d.ts +1 -1
  40. package/node_modules/@noodle-borg/authoring/dist/index.d.ts.map +1 -1
  41. package/node_modules/@noodle-borg/authoring/dist/index.js +1 -1
  42. package/node_modules/@noodle-borg/authoring/dist/index.js.map +1 -1
  43. package/node_modules/@noodle-borg/compiler/dist/artifact/config.d.ts +2 -2
  44. package/node_modules/@noodle-borg/compiler/dist/artifact/config.d.ts.map +1 -1
  45. package/node_modules/@noodle-borg/compiler/dist/artifact/config.js +22 -1
  46. package/node_modules/@noodle-borg/compiler/dist/artifact/config.js.map +1 -1
  47. package/node_modules/@noodle-borg/compiler/dist/artifact/types.d.ts +9 -0
  48. package/node_modules/@noodle-borg/compiler/dist/artifact/types.d.ts.map +1 -1
  49. package/node_modules/@noodle-borg/compiler/dist/compile.d.ts.map +1 -1
  50. package/node_modules/@noodle-borg/compiler/dist/compile.js +1 -1
  51. package/node_modules/@noodle-borg/compiler/dist/compile.js.map +1 -1
  52. package/node_modules/@noodle-borg/compiler/dist/fulfilment-emit.d.ts.map +1 -1
  53. package/node_modules/@noodle-borg/compiler/dist/fulfilment-emit.js +49 -0
  54. package/node_modules/@noodle-borg/compiler/dist/fulfilment-emit.js.map +1 -1
  55. package/node_modules/@noodle-borg/compiler/dist/manifest/schema.d.ts +18 -0
  56. package/node_modules/@noodle-borg/compiler/dist/manifest/schema.d.ts.map +1 -1
  57. package/node_modules/@noodle-borg/compiler/dist/manifest/schema.js +15 -0
  58. package/node_modules/@noodle-borg/compiler/dist/manifest/schema.js.map +1 -1
  59. package/node_modules/@noodle-borg/runtime/dist/broker/types.d.ts +3 -1
  60. package/node_modules/@noodle-borg/runtime/dist/broker/types.d.ts.map +1 -1
  61. package/node_modules/@noodle-borg/service/dist/credential-binding-index.d.ts +1 -0
  62. package/node_modules/@noodle-borg/service/dist/credential-binding-index.d.ts.map +1 -1
  63. package/node_modules/@noodle-borg/service/dist/credential-binding-index.js +10 -2
  64. package/node_modules/@noodle-borg/service/dist/credential-binding-index.js.map +1 -1
  65. package/node_modules/@noodle-borg/service/dist/credential-broker-options.d.ts +3 -0
  66. package/node_modules/@noodle-borg/service/dist/credential-broker-options.d.ts.map +1 -1
  67. package/node_modules/@noodle-borg/service/dist/credential-broker-options.js +9 -0
  68. package/node_modules/@noodle-borg/service/dist/credential-broker-options.js.map +1 -1
  69. package/node_modules/@noodle-borg/service/dist/credential-broker.d.ts +5 -2
  70. package/node_modules/@noodle-borg/service/dist/credential-broker.d.ts.map +1 -1
  71. package/node_modules/@noodle-borg/service/dist/credential-broker.js +29 -0
  72. package/node_modules/@noodle-borg/service/dist/credential-broker.js.map +1 -1
  73. package/node_modules/@noodle-borg/service/dist/google-workload-identity-postgres.d.ts +21 -0
  74. package/node_modules/@noodle-borg/service/dist/google-workload-identity-postgres.d.ts.map +1 -0
  75. package/node_modules/@noodle-borg/service/dist/google-workload-identity-postgres.js +195 -0
  76. package/node_modules/@noodle-borg/service/dist/google-workload-identity-postgres.js.map +1 -0
  77. package/node_modules/@noodle-borg/service/dist/google-workload-identity-probe.d.ts +10 -0
  78. package/node_modules/@noodle-borg/service/dist/google-workload-identity-probe.d.ts.map +1 -0
  79. package/node_modules/@noodle-borg/service/dist/google-workload-identity-probe.js +47 -0
  80. package/node_modules/@noodle-borg/service/dist/google-workload-identity-probe.js.map +1 -0
  81. package/node_modules/@noodle-borg/service/dist/google-workload-identity-store.d.ts +46 -0
  82. package/node_modules/@noodle-borg/service/dist/google-workload-identity-store.d.ts.map +1 -0
  83. package/node_modules/@noodle-borg/service/dist/google-workload-identity-store.js +88 -0
  84. package/node_modules/@noodle-borg/service/dist/google-workload-identity-store.js.map +1 -0
  85. package/node_modules/@noodle-borg/service/dist/google-workload-identity-validation.d.ts +4 -0
  86. package/node_modules/@noodle-borg/service/dist/google-workload-identity-validation.d.ts.map +1 -0
  87. package/node_modules/@noodle-borg/service/dist/google-workload-identity-validation.js +13 -0
  88. package/node_modules/@noodle-borg/service/dist/google-workload-identity-validation.js.map +1 -0
  89. package/node_modules/@noodle-borg/service/dist/google-workload-identity.d.ts +38 -0
  90. package/node_modules/@noodle-borg/service/dist/google-workload-identity.d.ts.map +1 -0
  91. package/node_modules/@noodle-borg/service/dist/google-workload-identity.js +289 -0
  92. package/node_modules/@noodle-borg/service/dist/google-workload-identity.js.map +1 -0
  93. package/node_modules/@noodle-borg/service/dist/index.d.ts +3 -0
  94. package/node_modules/@noodle-borg/service/dist/index.d.ts.map +1 -1
  95. package/node_modules/@noodle-borg/service/dist/index.js +3 -0
  96. package/node_modules/@noodle-borg/service/dist/index.js.map +1 -1
  97. package/node_modules/@noodle-borg/service/dist/oauth/app.d.ts.map +1 -1
  98. package/node_modules/@noodle-borg/service/dist/oauth/app.js +11 -0
  99. package/node_modules/@noodle-borg/service/dist/oauth/app.js.map +1 -1
  100. package/node_modules/@noodle-borg/service/dist/oauth/paths.d.ts.map +1 -1
  101. package/node_modules/@noodle-borg/service/dist/oauth/paths.js +1 -0
  102. package/node_modules/@noodle-borg/service/dist/oauth/paths.js.map +1 -1
  103. package/node_modules/@noodle-borg/service/dist/options.d.ts +8 -0
  104. package/node_modules/@noodle-borg/service/dist/options.d.ts.map +1 -1
  105. package/node_modules/@noodle-borg/service/dist/registry-types.d.ts +3 -0
  106. package/node_modules/@noodle-borg/service/dist/registry-types.d.ts.map +1 -1
  107. package/node_modules/@noodle-borg/service/dist/registry.d.ts.map +1 -1
  108. package/node_modules/@noodle-borg/service/dist/registry.js +3 -0
  109. package/node_modules/@noodle-borg/service/dist/registry.js.map +1 -1
  110. package/node_modules/@noodle-borg/service/dist/routes/credential-auth-dispatch.d.ts +25 -0
  111. package/node_modules/@noodle-borg/service/dist/routes/credential-auth-dispatch.d.ts.map +1 -0
  112. package/node_modules/@noodle-borg/service/dist/routes/credential-auth-dispatch.js +21 -0
  113. package/node_modules/@noodle-borg/service/dist/routes/credential-auth-dispatch.js.map +1 -0
  114. package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity-dispatch.d.ts +14 -0
  115. package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity-dispatch.d.ts.map +1 -0
  116. package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity-dispatch.js +30 -0
  117. package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity-dispatch.js.map +1 -0
  118. package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity.d.ts +19 -0
  119. package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity.d.ts.map +1 -0
  120. package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity.js +105 -0
  121. package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity.js.map +1 -0
  122. package/node_modules/@noodle-borg/service/dist/routes/paths.d.ts +3 -1
  123. package/node_modules/@noodle-borg/service/dist/routes/paths.d.ts.map +1 -1
  124. package/node_modules/@noodle-borg/service/dist/routes/paths.js +6 -0
  125. package/node_modules/@noodle-borg/service/dist/routes/paths.js.map +1 -1
  126. package/node_modules/@noodle-borg/service/dist/serve.d.ts.map +1 -1
  127. package/node_modules/@noodle-borg/service/dist/serve.js +29 -0
  128. package/node_modules/@noodle-borg/service/dist/serve.js.map +1 -1
  129. package/node_modules/@noodle-borg/service/dist/service.d.ts.map +1 -1
  130. package/node_modules/@noodle-borg/service/dist/service.js +6 -2
  131. package/node_modules/@noodle-borg/service/dist/service.js.map +1 -1
  132. package/package.json +1 -1
@@ -0,0 +1 @@
1
+ {"version":3,"file":"google-workload-identity-probe.js","sourceRoot":"","sources":["../src/google-workload-identity-probe.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,0BAA0B,GAG3B,MAAM,sBAAsB,CAAC;AAI9B,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAAC,KAI5D;IACC,MAAM,MAAM,GAA+B,EAAE,CAAC;IAC9C,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,aAAa,CAAC;gBACxB,GAAG,UAAU;gBACb,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS;oBAC7B,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC;wBACE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;wBAC9B,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU;qBACvC,CAAC;aACP,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,aAAa,CAAC,UAAU,CAAC;gBAC5B,EAAE,EAAE,IAAI;aACT,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,UAAU,GACd,KAAK,YAAY,0BAA0B;gBACzC,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,IAAI,0BAA0B,CAAC,4BAA4B,CAAC,CAAC;YACnE,MAAM,CAAC,IAAI,CAAC;gBACV,GAAG,aAAa,CAAC,UAAU,CAAC;gBAC5B,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,GAAG,CAAC,UAAU,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC;gBAChE,GAAG,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;aACpE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,UAAkD;IAQvE,OAAO;QACL,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,QAAQ,EAAE,wBAAwB;KACnC,CAAC;AACJ,CAAC"}
@@ -0,0 +1,46 @@
1
+ import type { GoogleWorkloadIdentityRecord, GoogleWorkloadIdentityResolver } from './google-workload-identity.js';
2
+ import { type TenantRef } from './store.js';
3
+ export interface StoredGoogleWorkloadIdentity extends GoogleWorkloadIdentityRecord {
4
+ readonly org: string;
5
+ readonly app: string;
6
+ readonly env: string;
7
+ readonly createdAt: string;
8
+ readonly updatedAt: string;
9
+ readonly createdBySubject: string;
10
+ readonly createdByEmail?: string;
11
+ readonly revokedAt?: string;
12
+ readonly revokedBySubject?: string;
13
+ readonly revokedByEmail?: string;
14
+ }
15
+ export interface PrepareGoogleWorkloadIdentityInput extends TenantRef {
16
+ readonly actorSubject: string;
17
+ readonly actorEmail?: string;
18
+ }
19
+ export interface RevokeGoogleWorkloadIdentityInput extends TenantRef {
20
+ readonly actorSubject: string;
21
+ readonly actorEmail?: string;
22
+ }
23
+ export interface GoogleWorkloadIdentityStore extends GoogleWorkloadIdentityResolver {
24
+ prepare(input: PrepareGoogleWorkloadIdentityInput): Promise<StoredGoogleWorkloadIdentity>;
25
+ get(tenant: TenantRef): Promise<StoredGoogleWorkloadIdentity | undefined>;
26
+ revoke(input: RevokeGoogleWorkloadIdentityInput): Promise<StoredGoogleWorkloadIdentity | undefined>;
27
+ }
28
+ /**
29
+ * Local/test store. Hosted multi-instance services select the PostgreSQL implementation so revocation
30
+ * is visible to every broker before any cached access token is reused.
31
+ */
32
+ export declare class InMemoryGoogleWorkloadIdentityStore implements GoogleWorkloadIdentityStore {
33
+ #private;
34
+ constructor(options?: {
35
+ readonly now?: () => Date;
36
+ readonly randomId?: () => string;
37
+ });
38
+ prepare(input: PrepareGoogleWorkloadIdentityInput): Promise<StoredGoogleWorkloadIdentity>;
39
+ get(tenant: TenantRef): Promise<StoredGoogleWorkloadIdentity | undefined>;
40
+ revoke(input: RevokeGoogleWorkloadIdentityInput): Promise<StoredGoogleWorkloadIdentity | undefined>;
41
+ resolve(input: {
42
+ readonly tenantId: string;
43
+ readonly deploymentId: string;
44
+ }): Promise<GoogleWorkloadIdentityRecord | undefined>;
45
+ }
46
+ //# sourceMappingURL=google-workload-identity-store.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"google-workload-identity-store.d.ts","sourceRoot":"","sources":["../src/google-workload-identity-store.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,4BAA4B,EAC5B,8BAA8B,EAC/B,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,KAAK,SAAS,EAAqB,MAAM,YAAY,CAAC;AAE/D,MAAM,WAAW,4BAA6B,SAAQ,4BAA4B;IAChF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,kCAAmC,SAAQ,SAAS;IACnE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,iCAAkC,SAAQ,SAAS;IAClE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,2BAA4B,SAAQ,8BAA8B;IACjF,OAAO,CAAC,KAAK,EAAE,kCAAkC,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC1F,GAAG,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC,CAAC;IAC1E,MAAM,CACJ,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC,CAAC;CACtD;AAED;;;GAGG;AACH,qBAAa,mCAAoC,YAAW,2BAA2B;;gBAMnF,OAAO,GAAE;QACP,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;QAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,MAAM,CAAC;KAC7B;IAMR,OAAO,CAAC,KAAK,EAAE,kCAAkC,GAAG,OAAO,CAAC,4BAA4B,CAAC;IAwBzF,GAAG,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC;IAKzE,MAAM,CACJ,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC;IAqB9C,OAAO,CAAC,KAAK,EAAE;QACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;KAC/B,GAAG,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC;CAItD"}
@@ -0,0 +1,88 @@
1
+ import { randomBytes } from 'node:crypto';
2
+ import { hasAsciiControlCharacters } from './google-workload-identity-validation.js';
3
+ import { validateTenantRef } from './store.js';
4
+ /**
5
+ * Local/test store. Hosted multi-instance services select the PostgreSQL implementation so revocation
6
+ * is visible to every broker before any cached access token is reused.
7
+ */
8
+ export class InMemoryGoogleWorkloadIdentityStore {
9
+ #records = new Map();
10
+ #now;
11
+ #randomId;
12
+ constructor(options = {}) {
13
+ this.#now = options.now ?? (() => new Date());
14
+ this.#randomId = options.randomId ?? (() => `gwi_${randomBytes(18).toString('base64url')}`);
15
+ }
16
+ prepare(input) {
17
+ const tenant = validateLifecycleInput(input);
18
+ const key = tenantKey(tenant);
19
+ const existing = this.#records.get(key);
20
+ if (existing?.active)
21
+ return Promise.resolve(structuredClone(existing));
22
+ const now = this.#now().toISOString();
23
+ const id = validateOpaqueId(this.#randomId());
24
+ const record = {
25
+ id,
26
+ revision: id,
27
+ tenantId: key,
28
+ environmentId: tenant.env,
29
+ subject: `noodle:google-workload:${id}`,
30
+ active: true,
31
+ ...tenant,
32
+ createdAt: now,
33
+ updatedAt: now,
34
+ createdBySubject: validateActor(input.actorSubject),
35
+ ...(input.actorEmail === undefined ? {} : { createdByEmail: input.actorEmail }),
36
+ };
37
+ this.#records.set(key, record);
38
+ return Promise.resolve(structuredClone(record));
39
+ }
40
+ get(tenant) {
41
+ const record = this.#records.get(tenantKey(validateTenantRef(tenant)));
42
+ return Promise.resolve(record === undefined ? undefined : structuredClone(record));
43
+ }
44
+ revoke(input) {
45
+ const tenant = validateLifecycleInput(input);
46
+ const key = tenantKey(tenant);
47
+ const existing = this.#records.get(key);
48
+ if (existing === undefined || !existing.active) {
49
+ return Promise.resolve(existing === undefined ? undefined : structuredClone(existing));
50
+ }
51
+ const now = this.#now().toISOString();
52
+ const revoked = {
53
+ ...existing,
54
+ revision: `${existing.id}:revoked`,
55
+ active: false,
56
+ updatedAt: now,
57
+ revokedAt: now,
58
+ revokedBySubject: validateActor(input.actorSubject),
59
+ ...(input.actorEmail === undefined ? {} : { revokedByEmail: input.actorEmail }),
60
+ };
61
+ this.#records.set(key, revoked);
62
+ return Promise.resolve(structuredClone(revoked));
63
+ }
64
+ async resolve(input) {
65
+ const record = this.#records.get(input.tenantId);
66
+ return record === undefined ? undefined : structuredClone(record);
67
+ }
68
+ }
69
+ function validateLifecycleInput(input) {
70
+ validateActor(input.actorSubject);
71
+ return validateTenantRef(input);
72
+ }
73
+ function validateActor(value) {
74
+ if (value.length < 1 || value.length > 512 || hasAsciiControlCharacters(value)) {
75
+ throw new Error('invalid workload identity actor');
76
+ }
77
+ return value;
78
+ }
79
+ function validateOpaqueId(value) {
80
+ if (!/^[A-Za-z0-9_-]{4,96}$/.test(value)) {
81
+ throw new Error('invalid workload identity id');
82
+ }
83
+ return value;
84
+ }
85
+ function tenantKey(tenant) {
86
+ return `${tenant.org}/${tenant.app}/${tenant.env}`;
87
+ }
88
+ //# sourceMappingURL=google-workload-identity-store.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"google-workload-identity-store.js","sourceRoot":"","sources":["../src/google-workload-identity-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAK1C,OAAO,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAC;AACrF,OAAO,EAAkB,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAiC/D;;;GAGG;AACH,MAAM,OAAO,mCAAmC;IACrC,QAAQ,GAAG,IAAI,GAAG,EAAwC,CAAC;IAC3D,IAAI,CAAa;IACjB,SAAS,CAAe;IAEjC,YACE,UAGI,EAAE;QAEN,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,OAAO,CAAC,KAAyC;QAC/C,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,QAAQ,EAAE,MAAM;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;QACxE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAiC;YAC3C,EAAE;YACF,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE,GAAG;YACb,aAAa,EAAE,MAAM,CAAC,GAAG;YACzB,OAAO,EAAE,0BAA0B,EAAE,EAAE;YACvC,MAAM,EAAE,IAAI;YACZ,GAAG,MAAM;YACT,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;YACd,gBAAgB,EAAE,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC;YACnD,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;SAChF,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC/B,OAAO,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,GAAG,CAAC,MAAiB;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,CACJ,KAAwC;QAExC,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC/C,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,OAAO,GAAiC;YAC5C,GAAG,QAAQ;YACX,QAAQ,EAAE,GAAG,QAAQ,CAAC,EAAE,UAAU;YAClC,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;YACd,gBAAgB,EAAE,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC;YACnD,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;SAChF,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAChC,OAAO,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAGb;QACC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjD,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACpE,CAAC;CACF;AAED,SAAS,sBAAsB,CAC7B,KAAQ;IAER,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAClC,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,yBAAyB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,MAAiB;IAClC,OAAO,GAAG,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;AACrD,CAAC"}
@@ -0,0 +1,4 @@
1
+ /** Reject ASCII C0/DEL controls without regex literals that hide control ranges from linters. */
2
+ export declare function hasAsciiControlCharacters(value: string): boolean;
3
+ export declare function hasWhitespaceOrAsciiControlCharacters(value: string): boolean;
4
+ //# sourceMappingURL=google-workload-identity-validation.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"google-workload-identity-validation.d.ts","sourceRoot":"","sources":["../src/google-workload-identity-validation.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAMhE;AAED,wBAAgB,qCAAqC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAI5E"}
@@ -0,0 +1,13 @@
1
+ /** Reject ASCII C0/DEL controls without regex literals that hide control ranges from linters. */
2
+ export function hasAsciiControlCharacters(value) {
3
+ for (const character of value) {
4
+ const code = character.charCodeAt(0);
5
+ if (code <= 0x1f || code === 0x7f)
6
+ return true;
7
+ }
8
+ return false;
9
+ }
10
+ export function hasWhitespaceOrAsciiControlCharacters(value) {
11
+ return [...value].some((character) => /\s/u.test(character) || hasAsciiControlCharacters(character));
12
+ }
13
+ //# sourceMappingURL=google-workload-identity-validation.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"google-workload-identity-validation.js","sourceRoot":"","sources":["../src/google-workload-identity-validation.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,MAAM,UAAU,yBAAyB,CAAC,KAAa;IACrD,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,qCAAqC,CAAC,KAAa;IACjE,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CACpB,CAAC,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,yBAAyB,CAAC,SAAS,CAAC,CAC7E,CAAC;AACJ,CAAC"}
@@ -0,0 +1,38 @@
1
+ import type { SigningKeyProvider } from '@noodle-borg/auth';
2
+ import { type CredentialRequest, type DownstreamCredential } from '@noodle-borg/runtime';
3
+ import type { AllowedCredentialBinding } from './credential-binding-index.js';
4
+ export interface GoogleWorkloadIdentityRecord {
5
+ readonly id: string;
6
+ /** Changes on every operator-visible lifecycle mutation and invalidates cached credentials. */
7
+ readonly revision: string;
8
+ readonly tenantId: string;
9
+ readonly environmentId: string;
10
+ /** Stable OIDC subject mapped to `google.subject` by the customer's provider. */
11
+ readonly subject: string;
12
+ readonly active: boolean;
13
+ }
14
+ export interface GoogleWorkloadIdentityResolver {
15
+ resolve(input: {
16
+ readonly tenantId: string;
17
+ readonly deploymentId: string;
18
+ }): Promise<GoogleWorkloadIdentityRecord | undefined>;
19
+ }
20
+ export interface GoogleWorkloadIdentityOptions {
21
+ readonly issuer: string;
22
+ readonly signer: SigningKeyProvider;
23
+ readonly identities: GoogleWorkloadIdentityResolver;
24
+ readonly tenant: string;
25
+ readonly deployment: string;
26
+ /** Test/internal seam. Production always calls Google's fixed service endpoints. */
27
+ readonly fetchImpl?: typeof fetch;
28
+ }
29
+ export type GoogleWorkloadIdentityRuntimeOptions = Pick<GoogleWorkloadIdentityOptions, 'issuer' | 'signer' | 'identities'>;
30
+ /** Exchanges one active Noodle deployment identity for a binding-scoped Google access token. */
31
+ export declare class GoogleWorkloadIdentityBindingBroker {
32
+ #private;
33
+ readonly options: GoogleWorkloadIdentityOptions;
34
+ readonly now: () => number;
35
+ constructor(options: GoogleWorkloadIdentityOptions, now: () => number);
36
+ getCredential(request: CredentialRequest, allowed: AllowedCredentialBinding, variables: Readonly<Record<string, string>>): Promise<DownstreamCredential>;
37
+ }
38
+ //# sourceMappingURL=google-workload-identity.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"google-workload-identity.d.ts","sourceRoot":"","sources":["../src/google-workload-identity.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,OAAO,EACL,KAAK,iBAAiB,EAEtB,KAAK,oBAAoB,EAE1B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAsB9E,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,+FAA+F;IAC/F,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,iFAAiF;IACjF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,8BAA8B;IAC7C,OAAO,CAAC,KAAK,EAAE;QACb,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;KAC/B,GAAG,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,8BAA8B,CAAC;IACpD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,oFAAoF;IACpF,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CACnC;AAED,MAAM,MAAM,oCAAoC,GAAG,IAAI,CACrD,6BAA6B,EAC7B,QAAQ,GAAG,QAAQ,GAAG,YAAY,CACnC,CAAC;AAaF,gGAAgG;AAChG,qBAAa,mCAAmC;;IAK5C,QAAQ,CAAC,OAAO,EAAE,6BAA6B;IAC/C,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM;gBADjB,OAAO,EAAE,6BAA6B,EACtC,GAAG,EAAE,MAAM,MAAM;IAGtB,aAAa,CACjB,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE,wBAAwB,EACjC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAC1C,OAAO,CAAC,oBAAoB,CAAC;CAgHjC"}
@@ -0,0 +1,289 @@
1
+ import { randomUUID } from 'node:crypto';
2
+ import { CredentialUnavailableError, MapServiceBroker, } from '@noodle-borg/runtime';
3
+ import { SignJWT } from 'jose';
4
+ import { hasAsciiControlCharacters, hasWhitespaceOrAsciiControlCharacters, } from './google-workload-identity-validation.js';
5
+ import { resolveManagedVariablesInString } from './managed-config-expressions.js';
6
+ const GOOGLE_STS_URL = 'https://sts.googleapis.com/v1/token';
7
+ const GOOGLE_IAM_CREDENTIALS_ORIGIN = 'https://iamcredentials.googleapis.com';
8
+ const GOOGLE_CLOUD_PLATFORM_SCOPE = 'https://www.googleapis.com/auth/cloud-platform';
9
+ const TOKEN_EXCHANGE_GRANT = 'urn:ietf:params:oauth:grant-type:token-exchange';
10
+ const ACCESS_TOKEN_TYPE = 'urn:ietf:params:oauth:token-type:access_token';
11
+ const JWT_TOKEN_TYPE = 'urn:ietf:params:oauth:token-type:jwt';
12
+ const ASSERTION_LIFETIME_SECONDS = 3_600;
13
+ const CACHE_REFRESH_SAFETY_MS = 5 * 60 * 1_000;
14
+ const EXCHANGE_TIMEOUT_MS = 10_000;
15
+ const MAX_RESPONSE_BYTES = 64 * 1_024;
16
+ const PROVIDER_RE = /^projects\/[1-9][0-9]{5,30}\/locations\/global\/workloadIdentityPools\/[a-z][a-z0-9-]{3,31}\/providers\/[a-z][a-z0-9-]{3,31}$/;
17
+ const SERVICE_ACCOUNT_RE = /^[a-z0-9][a-z0-9._-]{0,62}@[a-z0-9][a-z0-9-]{0,62}\.iam\.gserviceaccount\.com$/;
18
+ /** Exchanges one active Noodle deployment identity for a binding-scoped Google access token. */
19
+ export class GoogleWorkloadIdentityBindingBroker {
20
+ options;
21
+ now;
22
+ #cache = new Map();
23
+ #inflight = new Map();
24
+ constructor(options, now) {
25
+ this.options = options;
26
+ this.now = now;
27
+ }
28
+ async getCredential(request, allowed, variables) {
29
+ if (request.tenantId !== this.options.tenant ||
30
+ request.deploymentId !== this.options.deployment ||
31
+ allowed.source.kind !== 'googleWorkloadIdentity') {
32
+ throw notConfigured();
33
+ }
34
+ const identity = await this.#activeIdentity();
35
+ const source = resolveSource(allowed.source, variables);
36
+ const descriptorKey = JSON.stringify([
37
+ this.options.tenant,
38
+ this.options.deployment,
39
+ MapServiceBroker.bindingKey(allowed.descriptor),
40
+ ]);
41
+ const configKey = JSON.stringify([
42
+ identity.revision,
43
+ source.provider,
44
+ source.access,
45
+ canonicalScopes(allowed.descriptor.requiredScopes),
46
+ ]);
47
+ const cached = this.#cache.get(descriptorKey);
48
+ if (cached !== undefined) {
49
+ if (cached.configKey === configKey && cached.expiresAt > this.now()) {
50
+ return { token: cached.token };
51
+ }
52
+ this.#cache.delete(descriptorKey);
53
+ }
54
+ const inflightKey = JSON.stringify([descriptorKey, configKey]);
55
+ const inflight = this.#inflight.get(inflightKey);
56
+ if (inflight !== undefined)
57
+ return inflight;
58
+ const promise = this.#exchange(allowed, identity, source)
59
+ .then((result) => {
60
+ const expiresAt = result.expiresAt - CACHE_REFRESH_SAFETY_MS;
61
+ if (expiresAt <= this.now())
62
+ throw new Error('Google credential lifetime is too short');
63
+ this.#cache.set(descriptorKey, {
64
+ configKey,
65
+ token: result.token,
66
+ expiresAt,
67
+ });
68
+ return { token: result.token };
69
+ })
70
+ .catch(() => {
71
+ throw exchangeFailed();
72
+ })
73
+ .finally(() => this.#inflight.delete(inflightKey));
74
+ this.#inflight.set(inflightKey, promise);
75
+ return promise;
76
+ }
77
+ async #activeIdentity() {
78
+ let identity;
79
+ try {
80
+ identity = await this.options.identities.resolve({
81
+ tenantId: this.options.tenant,
82
+ deploymentId: this.options.deployment,
83
+ });
84
+ }
85
+ catch {
86
+ throw notConfigured();
87
+ }
88
+ if (identity === undefined ||
89
+ !identity.active ||
90
+ identity.tenantId !== this.options.tenant ||
91
+ !validIdentifier(identity.id, 128) ||
92
+ !validIdentifier(identity.revision, 128) ||
93
+ !validIdentifier(identity.environmentId, 128) ||
94
+ !validSubject(identity.subject)) {
95
+ throw notConfigured();
96
+ }
97
+ return identity;
98
+ }
99
+ async #exchange(allowed, identity, source) {
100
+ const providerAudience = `//iam.googleapis.com/${source.provider}`;
101
+ const assertion = await signGoogleSubjectToken({
102
+ issuer: validateIssuer(this.options.issuer),
103
+ audience: providerAudience,
104
+ signer: this.options.signer,
105
+ identity,
106
+ deploymentId: this.options.deployment,
107
+ connectionId: allowed.descriptor.connectionId,
108
+ nowMs: this.now(),
109
+ });
110
+ const requestedScopes = source.access.kind === 'direct'
111
+ ? canonicalScopes(allowed.descriptor.requiredScopes)
112
+ : [GOOGLE_CLOUD_PLATFORM_SCOPE];
113
+ const sts = await exchangeGoogleSts({
114
+ fetchImpl: this.options.fetchImpl ?? fetch,
115
+ audience: providerAudience,
116
+ assertion,
117
+ scopes: requestedScopes,
118
+ });
119
+ if (source.access.kind === 'direct') {
120
+ return {
121
+ token: sts.accessToken,
122
+ expiresAt: this.now() + sts.expiresIn * 1_000,
123
+ };
124
+ }
125
+ return impersonateServiceAccount({
126
+ fetchImpl: this.options.fetchImpl ?? fetch,
127
+ federatedToken: sts.accessToken,
128
+ serviceAccount: source.access.serviceAccount,
129
+ scopes: canonicalScopes(allowed.descriptor.requiredScopes),
130
+ });
131
+ }
132
+ }
133
+ function resolveSource(source, variables) {
134
+ let provider;
135
+ let serviceAccount;
136
+ try {
137
+ provider = resolveManagedVariablesInString(source.provider, variables);
138
+ serviceAccount =
139
+ source.access.kind === 'serviceAccountImpersonation'
140
+ ? resolveManagedVariablesInString(source.access.serviceAccount, variables)
141
+ : undefined;
142
+ }
143
+ catch {
144
+ throw notConfigured();
145
+ }
146
+ if (!PROVIDER_RE.test(provider))
147
+ throw notConfigured();
148
+ if (serviceAccount !== undefined && !SERVICE_ACCOUNT_RE.test(serviceAccount)) {
149
+ throw notConfigured();
150
+ }
151
+ return {
152
+ provider,
153
+ access: serviceAccount === undefined
154
+ ? { kind: 'direct' }
155
+ : { kind: 'serviceAccountImpersonation', serviceAccount },
156
+ };
157
+ }
158
+ async function signGoogleSubjectToken(input) {
159
+ const key = await input.signer.signingKey();
160
+ if (key.alg !== 'RS256')
161
+ throw new Error('Google workload identity requires RS256');
162
+ const nowSeconds = Math.floor(input.nowMs / 1_000);
163
+ return new SignJWT({
164
+ tenant_id: input.identity.tenantId,
165
+ environment_id: input.identity.environmentId,
166
+ workload_id: input.identity.id,
167
+ deployment_id: input.deploymentId,
168
+ connection_id: input.connectionId,
169
+ })
170
+ .setProtectedHeader({ alg: key.alg, kid: key.kid, typ: 'JWT' })
171
+ .setIssuer(input.issuer)
172
+ .setSubject(input.identity.subject)
173
+ .setAudience(input.audience)
174
+ .setIssuedAt(nowSeconds)
175
+ .setExpirationTime(nowSeconds + ASSERTION_LIFETIME_SECONDS)
176
+ .setJti(randomUUID())
177
+ .sign(key.privateKey);
178
+ }
179
+ async function exchangeGoogleSts(input) {
180
+ const response = await input.fetchImpl(GOOGLE_STS_URL, {
181
+ method: 'POST',
182
+ redirect: 'manual',
183
+ headers: { 'content-type': 'application/json' },
184
+ body: JSON.stringify({
185
+ grantType: TOKEN_EXCHANGE_GRANT,
186
+ audience: input.audience,
187
+ scope: input.scopes.join(' '),
188
+ requestedTokenType: ACCESS_TOKEN_TYPE,
189
+ subjectToken: input.assertion,
190
+ subjectTokenType: JWT_TOKEN_TYPE,
191
+ }),
192
+ signal: AbortSignal.timeout(EXCHANGE_TIMEOUT_MS),
193
+ });
194
+ if (!response.ok)
195
+ throw new Error('Google STS rejected the token exchange');
196
+ const body = await readBoundedJson(response);
197
+ if (!isRecord(body) ||
198
+ typeof body.access_token !== 'string' ||
199
+ body.access_token.length < 1 ||
200
+ body.access_token.length > 16_384 ||
201
+ body.token_type !== 'Bearer' ||
202
+ body.issued_token_type !== ACCESS_TOKEN_TYPE ||
203
+ !Number.isInteger(body.expires_in) ||
204
+ body.expires_in < 1 ||
205
+ body.expires_in > 43_200) {
206
+ throw new Error('Google STS returned an invalid response');
207
+ }
208
+ return { accessToken: body.access_token, expiresIn: body.expires_in };
209
+ }
210
+ async function impersonateServiceAccount(input) {
211
+ const encodedAccount = encodeURIComponent(input.serviceAccount);
212
+ const response = await input.fetchImpl(`${GOOGLE_IAM_CREDENTIALS_ORIGIN}/v1/projects/-/serviceAccounts/${encodedAccount}:generateAccessToken`, {
213
+ method: 'POST',
214
+ redirect: 'manual',
215
+ headers: {
216
+ authorization: `Bearer ${input.federatedToken}`,
217
+ 'content-type': 'application/json',
218
+ },
219
+ body: JSON.stringify({ scope: input.scopes, lifetime: '3600s' }),
220
+ signal: AbortSignal.timeout(EXCHANGE_TIMEOUT_MS),
221
+ });
222
+ if (!response.ok)
223
+ throw new Error('Google IAM Credentials rejected impersonation');
224
+ const body = await readBoundedJson(response);
225
+ if (!isRecord(body) ||
226
+ typeof body.accessToken !== 'string' ||
227
+ body.accessToken.length < 1 ||
228
+ body.accessToken.length > 16_384 ||
229
+ typeof body.expireTime !== 'string') {
230
+ throw new Error('Google IAM Credentials returned an invalid response');
231
+ }
232
+ const expiresAt = Date.parse(body.expireTime);
233
+ if (!Number.isFinite(expiresAt)) {
234
+ throw new Error('Google IAM Credentials returned an invalid expiration');
235
+ }
236
+ return { token: body.accessToken, expiresAt };
237
+ }
238
+ async function readBoundedJson(response) {
239
+ const contentLength = Number(response.headers.get('content-length'));
240
+ if (Number.isFinite(contentLength) && contentLength > MAX_RESPONSE_BYTES) {
241
+ throw new Error('Google credential response is too large');
242
+ }
243
+ const text = await response.text();
244
+ if (Buffer.byteLength(text, 'utf8') > MAX_RESPONSE_BYTES) {
245
+ throw new Error('Google credential response is too large');
246
+ }
247
+ return JSON.parse(text);
248
+ }
249
+ function validateIssuer(value) {
250
+ const url = new URL(value);
251
+ if (url.protocol !== 'https:' ||
252
+ url.username !== '' ||
253
+ url.password !== '' ||
254
+ url.pathname !== '/' ||
255
+ url.search !== '' ||
256
+ url.hash !== '') {
257
+ throw new Error('Google workload issuer must be an HTTPS origin');
258
+ }
259
+ return url.origin;
260
+ }
261
+ function canonicalScopes(values) {
262
+ const scopes = [...new Set(values)].sort();
263
+ if (scopes.length < 1 ||
264
+ scopes.some((scope) => !scope.startsWith('https://www.googleapis.com/auth/') ||
265
+ scope.length > 512 ||
266
+ hasWhitespaceOrAsciiControlCharacters(scope))) {
267
+ throw new Error('invalid Google OAuth scopes');
268
+ }
269
+ return scopes;
270
+ }
271
+ function validIdentifier(value, maxLength) {
272
+ return value.length > 0 && value.length <= maxLength && !hasAsciiControlCharacters(value);
273
+ }
274
+ function validSubject(value) {
275
+ return validIdentifier(value, 127) && Buffer.byteLength(value, 'utf8') <= 127;
276
+ }
277
+ function isRecord(value) {
278
+ return typeof value === 'object' && value !== null && !Array.isArray(value);
279
+ }
280
+ function notConfigured() {
281
+ return new CredentialUnavailableError('credential_not_configured');
282
+ }
283
+ function exchangeFailed() {
284
+ return new CredentialUnavailableError('credential_exchange_failed', {
285
+ fix: 'Verify the Google workload identity provider, IAM grants, and service availability.',
286
+ next: ['noodle auth doctor --live'],
287
+ });
288
+ }
289
+ //# sourceMappingURL=google-workload-identity.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"google-workload-identity.js","sourceRoot":"","sources":["../src/google-workload-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAEL,0BAA0B,EAE1B,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAE/B,OAAO,EACL,yBAAyB,EACzB,qCAAqC,GACtC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAC;AAElF,MAAM,cAAc,GAAG,qCAAqC,CAAC;AAC7D,MAAM,6BAA6B,GAAG,uCAAuC,CAAC;AAC9E,MAAM,2BAA2B,GAAG,gDAAgD,CAAC;AACrF,MAAM,oBAAoB,GAAG,iDAAiD,CAAC;AAC/E,MAAM,iBAAiB,GAAG,+CAA+C,CAAC;AAC1E,MAAM,cAAc,GAAG,sCAAsC,CAAC;AAC9D,MAAM,0BAA0B,GAAG,KAAK,CAAC;AACzC,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;AAC/C,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,MAAM,kBAAkB,GAAG,EAAE,GAAG,KAAK,CAAC;AACtC,MAAM,WAAW,GACf,+HAA+H,CAAC;AAClI,MAAM,kBAAkB,GACtB,gFAAgF,CAAC;AA8CnF,gGAAgG;AAChG,MAAM,OAAO,mCAAmC;IAKnC;IACA;IALF,MAAM,GAAG,IAAI,GAAG,EAAiC,CAAC;IAClD,SAAS,GAAG,IAAI,GAAG,EAAyC,CAAC;IAEtE,YACW,OAAsC,EACtC,GAAiB;QADjB,YAAO,GAAP,OAAO,CAA+B;QACtC,QAAG,GAAH,GAAG,CAAc;IACzB,CAAC;IAEJ,KAAK,CAAC,aAAa,CACjB,OAA0B,EAC1B,OAAiC,EACjC,SAA2C;QAE3C,IACE,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM;YACxC,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC,OAAO,CAAC,UAAU;YAChD,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,wBAAwB,EAChD,CAAC;YACD,MAAM,aAAa,EAAE,CAAC;QACxB,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACxD,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC;YACnC,IAAI,CAAC,OAAO,CAAC,MAAM;YACnB,IAAI,CAAC,OAAO,CAAC,UAAU;YACvB,gBAAgB,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC;SAChD,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;YAC/B,QAAQ,CAAC,QAAQ;YACjB,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,MAAM;YACb,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC;SACnD,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC9C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBACpE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;YACjC,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACjD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC;aACtD,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACf,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,GAAG,uBAAuB,CAAC;YAC7D,IAAI,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YACxF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE;gBAC7B,SAAS;gBACT,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,SAAS;aACV,CAAC,CAAC;YACH,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE;YACV,MAAM,cAAc,EAAE,CAAC;QACzB,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACzC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,IAAI,QAAkD,CAAC;QACvD,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;gBAC/C,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;gBAC7B,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;aACtC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,aAAa,EAAE,CAAC;QACxB,CAAC;QACD,IACE,QAAQ,KAAK,SAAS;YACtB,CAAC,QAAQ,CAAC,MAAM;YAChB,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM;YACzC,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC;YAClC,CAAC,eAAe,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC;YACxC,CAAC,eAAe,CAAC,QAAQ,CAAC,aAAa,EAAE,GAAG,CAAC;YAC7C,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,EAC/B,CAAC;YACD,MAAM,aAAa,EAAE,CAAC;QACxB,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,SAAS,CACb,OAAiC,EACjC,QAAsC,EACtC,MAA4B;QAE5B,MAAM,gBAAgB,GAAG,wBAAwB,MAAM,CAAC,QAAQ,EAAE,CAAC;QACnE,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC;YAC7C,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YAC3C,QAAQ,EAAE,gBAAgB;YAC1B,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,QAAQ;YACR,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;YACrC,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,YAAY;YAC7C,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE;SAClB,CAAC,CAAC;QACH,MAAM,eAAe,GACnB,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC7B,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC;YACpD,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC;YAClC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK;YAC1C,QAAQ,EAAE,gBAAgB;YAC1B,SAAS;YACT,MAAM,EAAE,eAAe;SACxB,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpC,OAAO;gBACL,KAAK,EAAE,GAAG,CAAC,WAAW;gBACtB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,SAAS,GAAG,KAAK;aAC9C,CAAC;QACJ,CAAC;QACD,OAAO,yBAAyB,CAAC;YAC/B,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK;YAC1C,cAAc,EAAE,GAAG,CAAC,WAAW;YAC/B,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc;YAC5C,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC;SAC3D,CAAC,CAAC;IACL,CAAC;CACF;AAYD,SAAS,aAAa,CACpB,MAAsF,EACtF,SAA2C;IAE3C,IAAI,QAAgB,CAAC;IACrB,IAAI,cAAkC,CAAC;IACvC,IAAI,CAAC;QACH,QAAQ,GAAG,+BAA+B,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACvE,cAAc;YACZ,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,6BAA6B;gBAClD,CAAC,CAAC,+BAA+B,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC;gBAC1E,CAAC,CAAC,SAAS,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,aAAa,EAAE,CAAC;IACxB,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,MAAM,aAAa,EAAE,CAAC;IACvD,IAAI,cAAc,KAAK,SAAS,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;QAC7E,MAAM,aAAa,EAAE,CAAC;IACxB,CAAC;IACD,OAAO;QACL,QAAQ;QACR,MAAM,EACJ,cAAc,KAAK,SAAS;YAC1B,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE;YACpB,CAAC,CAAC,EAAE,IAAI,EAAE,6BAA6B,EAAE,cAAc,EAAE;KAC9D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,KAQrC;IACC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IAC5C,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACpF,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC;IACnD,OAAO,IAAI,OAAO,CAAC;QACjB,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ;QAClC,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,aAAa;QAC5C,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;QAC9B,aAAa,EAAE,KAAK,CAAC,YAAY;QACjC,aAAa,EAAE,KAAK,CAAC,YAAY;KAClC,CAAC;SACC,kBAAkB,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;SAC9D,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;SACvB,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;SAClC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC;SAC3B,WAAW,CAAC,UAAU,CAAC;SACvB,iBAAiB,CAAC,UAAU,GAAG,0BAA0B,CAAC;SAC1D,MAAM,CAAC,UAAU,EAAE,CAAC;SACpB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC1B,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,KAKhC;IACC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,cAAc,EAAE;QACrD,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,SAAS,EAAE,oBAAoB;YAC/B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YAC7B,kBAAkB,EAAE,iBAAiB;YACrC,YAAY,EAAE,KAAK,CAAC,SAAS;YAC7B,gBAAgB,EAAE,cAAc;SACjC,CAAC;QACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,mBAAmB,CAAC;KACjD,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC7C,IACE,CAAC,QAAQ,CAAC,IAAI,CAAC;QACf,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ;QACrC,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAC5B,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,MAAM;QACjC,IAAI,CAAC,UAAU,KAAK,QAAQ;QAC5B,IAAI,CAAC,iBAAiB,KAAK,iBAAiB;QAC5C,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC;QACjC,IAAI,CAAC,UAAqB,GAAG,CAAC;QAC9B,IAAI,CAAC,UAAqB,GAAG,MAAM,EACpC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,UAAoB,EAAE,CAAC;AAClF,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,KAKxC;IACC,MAAM,cAAc,GAAG,kBAAkB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CACpC,GAAG,6BAA6B,kCAAkC,cAAc,sBAAsB,EACtG;QACE,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,KAAK,CAAC,cAAc,EAAE;YAC/C,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAChE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,mBAAmB,CAAC;KACjD,CACF,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC7C,IACE,CAAC,QAAQ,CAAC,IAAI,CAAC;QACf,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;QACpC,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;QAC3B,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,MAAM;QAChC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,EACnC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAkB;IAC/C,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACrE,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,kBAAkB,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,kBAAkB,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;AACrC,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IACE,GAAG,CAAC,QAAQ,KAAK,QAAQ;QACzB,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,QAAQ,KAAK,GAAG;QACpB,GAAG,CAAC,MAAM,KAAK,EAAE;QACjB,GAAG,CAAC,IAAI,KAAK,EAAE,EACf,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED,SAAS,eAAe,CAAC,MAAyB;IAChD,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IACE,MAAM,CAAC,MAAM,GAAG,CAAC;QACjB,MAAM,CAAC,IAAI,CACT,CAAC,KAAK,EAAE,EAAE,CACR,CAAC,KAAK,CAAC,UAAU,CAAC,kCAAkC,CAAC;YACrD,KAAK,CAAC,MAAM,GAAG,GAAG;YAClB,qCAAqC,CAAC,KAAK,CAAC,CAC/C,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,SAAiB;IACvD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,eAAe,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG,CAAC;AAChF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,IAAI,0BAA0B,CAAC,2BAA2B,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,IAAI,0BAA0B,CAAC,4BAA4B,EAAE;QAClE,GAAG,EAAE,qFAAqF;QAC1F,IAAI,EAAE,CAAC,2BAA2B,CAAC;KACpC,CAAC,CAAC;AACL,CAAC"}
@@ -29,6 +29,9 @@ export { LocalProcessExecutor, type LocalProcessExecutorDeps, type RepoCheckout,
29
29
  export { InMemoryPendingGithubInstallationStore, type PendingGithubInstallationStore, } from './github/pending-installations.js';
30
30
  export { isAccessMode, type ResolveRunAccessModeInput, type ResolveRunAccessModeResult, resolveRunAccessMode, } from './github/run-access-mode.js';
31
31
  export { RUN_TOKEN_TTL_MS, type RunTokenPayload, type RunTokenVerification, runTokenAuthorizes, signRunToken, verifyRunToken, } from './github/run-token.js';
32
+ export { GoogleWorkloadIdentityBindingBroker, type GoogleWorkloadIdentityOptions, type GoogleWorkloadIdentityRecord, type GoogleWorkloadIdentityResolver, type GoogleWorkloadIdentityRuntimeOptions, } from './google-workload-identity.js';
33
+ export { PostgresGoogleWorkloadIdentityStore } from './google-workload-identity-postgres.js';
34
+ export { type GoogleWorkloadIdentityStore, InMemoryGoogleWorkloadIdentityStore, type PrepareGoogleWorkloadIdentityInput, type RevokeGoogleWorkloadIdentityInput, type StoredGoogleWorkloadIdentity, } from './google-workload-identity-store.js';
32
35
  export { type ActiveDeveloperGrantInput, activeDeveloperGrant, type CreateDeveloperAccessGrant, type DeveloperAccessGrant, type DeveloperGrantFactoryOptions, type DeveloperGrantStore, InMemoryDeveloperGrantStore, type InMemoryDeveloperGrantStoreOptions, } from './oauth/developer-grant.js';
33
36
  export { DeveloperGrantAuthorizer, type DeveloperGrantAuthorizerOptions, type DeveloperGrantChoice, type DeveloperGrantInventory, type DeveloperGrantSelectionInput, } from './oauth/developer-grant-authorizer.js';
34
37
  export { PostgresDeveloperGrantStore } from './oauth/developer-grant-store-postgres.js';
@@ -1 +1 @@
1
- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EACL,4BAA4B,EAC5B,cAAc,EACd,KAAK,qBAAqB,EAC1B,mBAAmB,GACpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,4BAA4B,EAC5B,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,wBAAwB,EACxB,KAAK,0BAA0B,EAC/B,mBAAmB,EACnB,uBAAuB,EACvB,KAAK,gBAAgB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,yBAAyB,EACzB,cAAc,EACd,KAAK,qBAAqB,EAC1B,8BAA8B,EAC9B,2BAA2B,GAC5B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,gBAAgB,EAChB,KAAK,mBAAmB,EACxB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,kBAAkB,EAClB,KAAK,yBAAyB,GAC/B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0CAA0C,EAC1C,KAAK,qBAAqB,EAC1B,KAAK,sCAAsC,EAC3C,KAAK,uBAAuB,EAC5B,iCAAiC,EACjC,KAAK,+BAA+B,EACpC,KAAK,8BAA8B,EACnC,KAAK,oCAAoC,EACzC,KAAK,+BAA+B,EACpC,KAAK,wBAAwB,EAC7B,KAAK,iCAAiC,EACtC,KAAK,0BAA0B,EAC/B,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,mCAAmC,EACxC,KAAK,kCAAkC,EACvC,KAAK,oCAAoC,EACzC,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACnB,4CAA4C,EAC5C,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,YAAY,EACZ,WAAW,EACX,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,iBAAiB,EACjB,KAAK,cAAc,EACnB,sBAAsB,EACtB,KAAK,qBAAqB,EAC1B,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,+BAA+B,EAC/B,uBAAuB,EACvB,KAAK,kCAAkC,EACvC,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,OAAO,EAAE,KAAK,SAAS,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EACL,qBAAqB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,sBAAsB,EACtB,+BAA+B,EAC/B,oBAAoB,EACpB,wBAAwB,EACxB,iBAAiB,EACjB,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,8BAA8B,EACnC,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kBAAkB,EAClB,KAAK,wBAAwB,EAC7B,oBAAoB,EACpB,kBAAkB,EAClB,yBAAyB,GAC1B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,oBAAoB,EACpB,KAAK,2BAA2B,EAChC,KAAK,WAAW,EAChB,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,+CAA+C,EAC/C,uCAAuC,EACvC,KAAK,wCAAwC,EAC7C,KAAK,gCAAgC,EACrC,KAAK,sCAAsC,EAC3C,KAAK,iCAAiC,EACtC,KAAK,iCAAiC,EACtC,6CAA6C,EAC7C,yCAAyC,GAC1C,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,6BAA6B,EAClC,KAAK,4BAA4B,EACjC,KAAK,yBAAyB,EAC9B,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,6BAA6B,EAClC,mCAAmC,GACpC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,oBAAoB,EACzB,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,mBAAmB,EACnB,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,eAAe,GAChB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,iBAAiB,GAClB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACtB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,qCAAqC,EACrC,gCAAgC,EAChC,qBAAqB,EACrB,KAAK,8BAA8B,EACnC,yBAAyB,EACzB,KAAK,gCAAgC,GACtC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,8BAA8B,EAC9B,KAAK,sBAAsB,GAC5B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC7B,wBAAwB,EACxB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,GACtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,oBAAoB,EACpB,KAAK,wBAAwB,EAC7B,KAAK,YAAY,GAClB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,sCAAsC,EACtC,KAAK,8BAA8B,GACpC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,YAAY,EACZ,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,gBAAgB,EAChB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,kBAAkB,EAClB,YAAY,EACZ,cAAc,GACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,yBAAyB,EAC9B,oBAAoB,EACpB,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EACzB,KAAK,4BAA4B,EACjC,KAAK,mBAAmB,EACxB,2BAA2B,EAC3B,KAAK,kCAAkC,GACxC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,wBAAwB,EACxB,KAAK,+BAA+B,EACpC,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,4BAA4B,GAClC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,EACL,iCAAiC,EACjC,KAAK,yBAAyB,GAC/B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,wCAAwC,EACxC,wBAAwB,EACxB,KAAK,8BAA8B,EACnC,KAAK,mBAAmB,EACxB,KAAK,UAAU,EACf,KAAK,0BAA0B,GAChC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gCAAgC,EAChC,gCAAgC,EAChC,oBAAoB,EACpB,KAAK,kBAAkB,EACvB,qBAAqB,EACrB,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,GACzB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACnF,OAAO,EAAE,kCAAkC,EAAE,MAAM,uCAAuC,CAAC;AAC3F,OAAO,EACL,kCAAkC,EAClC,KAAK,qBAAqB,EAC1B,KAAK,gCAAgC,EACrC,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,yBAAyB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAC/B,4BAA4B,EAC5B,0BAA0B,EAC1B,KAAK,0BAA0B,EAC/B,0BAA0B,EAC1B,KAAK,wBAAwB,GAC9B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,kCAAkC,EAAE,MAAM,uCAAuC,CAAC;AAC3F,OAAO,EACL,iCAAiC,EACjC,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAC7B,iCAAiC,EACjC,KAAK,+BAA+B,EACpC,KAAK,4BAA4B,EACjC,0CAA0C,EAC1C,kCAAkC,EAClC,KAAK,2BAA2B,EAChC,yCAAyC,EACzC,iCAAiC,EACjC,KAAK,oBAAoB,EACzB,yBAAyB,EACzB,KAAK,6BAA6B,EAClC,kCAAkC,EAClC,KAAK,4BAA4B,EACjC,kCAAkC,EAClC,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,gCAAgC,EAChC,kCAAkC,EAClC,sCAAsC,EACtC,iCAAiC,EACjC,oCAAoC,EACpC,KAAK,oCAAoC,GAC1C,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,4BAA4B,EAC5B,KAAK,mCAAmC,GACzC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,4CAA4C,EAAE,MAAM,qCAAqC,CAAC;AACnG,OAAO,EAAE,gCAAgC,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,EAAE,+CAA+C,EAAE,MAAM,4CAA4C,CAAC;AAC7G,OAAO,EACL,KAAK,gCAAgC,EACrC,KAAK,+BAA+B,EACpC,KAAK,6BAA6B,EAClC,gCAAgC,GACjC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,sCAAsC,EACtC,+BAA+B,EAC/B,6BAA6B,EAC7B,8BAA8B,EAC9B,iCAAiC,EACjC,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,+BAA+B,EACpC,KAAK,iBAAiB,EACtB,yBAAyB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,GAC3B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,4BAA4B,EAC5B,KAAK,yBAAyB,EAC9B,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,8BAA8B,EAC9B,KAAK,gBAAgB,EACrB,6BAA6B,EAC7B,wBAAwB,EACxB,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,mBAAmB,EACnB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,4BAA4B,EAC5B,KAAK,kBAAkB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,sBAAsB,EACtB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,WAAW,GACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,wBAAwB,EACxB,uBAAuB,EACvB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,8BAA8B,EAC9B,8BAA8B,EAC9B,4BAA4B,EAC5B,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,YAAY,EACjB,uBAAuB,EACvB,KAAK,SAAS,GACf,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,KAAK,cAAc,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/D,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,sBAAsB,EACtB,0BAA0B,EAC1B,KAAK,mBAAmB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,8BAA8B,EAC9B,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EACL,oBAAoB,EACpB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,UAAU,EACf,kBAAkB,EAClB,KAAK,yBAAyB,EAC9B,SAAS,EACT,aAAa,EACb,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAAE,6BAA6B,EAAE,MAAM,yCAAyC,CAAC;AACxF,OAAO,EACL,sBAAsB,EACtB,6BAA6B,EAC7B,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EAAE,sCAAsC,EAAE,MAAM,2CAA2C,CAAC;AACnG,OAAO,EAAE,qBAAqB,EAAE,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACvF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,KAAK,+BAA+B,GACrC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EACL,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,uBAAuB,EACvB,KAAK,8BAA8B,EACnC,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,eAAe,GACrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,4BAA4B,EACjC,mBAAmB,EACnB,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,8BAA8B,EACnC,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,cAAc,EACd,KAAK,UAAU,EACf,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,SAAS,EACd,KAAK,OAAO,EACZ,KAAK,+BAA+B,EACpC,KAAK,gCAAgC,EACrC,KAAK,sBAAsB,EAC3B,KAAK,4BAA4B,EACjC,KAAK,oBAAoB,EACzB,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,YAAY,EACZ,UAAU,EACV,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACd,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,EACd,eAAe,EACf,uBAAuB,EACvB,2BAA2B,EAC3B,YAAY,EACZ,iBAAiB,EACjB,KAAK,kBAAkB,GACxB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,iBAAiB,EACjB,KAAK,wBAAwB,EAC7B,qBAAqB,EACrB,kBAAkB,EAClB,yBAAyB,EACzB,uBAAuB,EACvB,+BAA+B,EAC/B,KAAK,kBAAkB,EACvB,kBAAkB,EAClB,KAAK,yBAAyB,GAC/B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAE,KAAK,qBAAqB,EAAE,MAAM,uBAAuB,CAAC"}
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EACL,4BAA4B,EAC5B,cAAc,EACd,KAAK,qBAAqB,EAC1B,mBAAmB,GACpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,4BAA4B,EAC5B,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,wBAAwB,EACxB,KAAK,0BAA0B,EAC/B,mBAAmB,EACnB,uBAAuB,EACvB,KAAK,gBAAgB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,yBAAyB,EACzB,cAAc,EACd,KAAK,qBAAqB,EAC1B,8BAA8B,EAC9B,2BAA2B,GAC5B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,gBAAgB,EAChB,KAAK,mBAAmB,EACxB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,kBAAkB,EAClB,KAAK,yBAAyB,GAC/B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0CAA0C,EAC1C,KAAK,qBAAqB,EAC1B,KAAK,sCAAsC,EAC3C,KAAK,uBAAuB,EAC5B,iCAAiC,EACjC,KAAK,+BAA+B,EACpC,KAAK,8BAA8B,EACnC,KAAK,oCAAoC,EACzC,KAAK,+BAA+B,EACpC,KAAK,wBAAwB,EAC7B,KAAK,iCAAiC,EACtC,KAAK,0BAA0B,EAC/B,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,mCAAmC,EACxC,KAAK,kCAAkC,EACvC,KAAK,oCAAoC,EACzC,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACnB,4CAA4C,EAC5C,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,YAAY,EACZ,WAAW,EACX,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,iBAAiB,EACjB,KAAK,cAAc,EACnB,sBAAsB,EACtB,KAAK,qBAAqB,EAC1B,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,+BAA+B,EAC/B,uBAAuB,EACvB,KAAK,kCAAkC,EACvC,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,OAAO,EAAE,KAAK,SAAS,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EACL,qBAAqB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,sBAAsB,EACtB,+BAA+B,EAC/B,oBAAoB,EACpB,wBAAwB,EACxB,iBAAiB,EACjB,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,8BAA8B,EACnC,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kBAAkB,EAClB,KAAK,wBAAwB,EAC7B,oBAAoB,EACpB,kBAAkB,EAClB,yBAAyB,GAC1B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,oBAAoB,EACpB,KAAK,2BAA2B,EAChC,KAAK,WAAW,EAChB,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,+CAA+C,EAC/C,uCAAuC,EACvC,KAAK,wCAAwC,EAC7C,KAAK,gCAAgC,EACrC,KAAK,sCAAsC,EAC3C,KAAK,iCAAiC,EACtC,KAAK,iCAAiC,EACtC,6CAA6C,EAC7C,yCAAyC,GAC1C,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,6BAA6B,EAClC,KAAK,4BAA4B,EACjC,KAAK,yBAAyB,EAC9B,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,6BAA6B,EAClC,mCAAmC,GACpC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,oBAAoB,EACzB,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,mBAAmB,EACnB,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,eAAe,GAChB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,iBAAiB,GAClB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,KAAK,sBAAsB,EAC3B,KAAK,iBAAiB,EACtB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,qCAAqC,EACrC,gCAAgC,EAChC,qBAAqB,EACrB,KAAK,8BAA8B,EACnC,yBAAyB,EACzB,KAAK,gCAAgC,GACtC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,8BAA8B,EAC9B,KAAK,sBAAsB,GAC5B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC7B,wBAAwB,EACxB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,GACtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,oBAAoB,EACpB,KAAK,wBAAwB,EAC7B,KAAK,YAAY,GAClB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,sCAAsC,EACtC,KAAK,8BAA8B,GACpC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,YAAY,EACZ,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,gBAAgB,EAChB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,kBAAkB,EAClB,YAAY,EACZ,cAAc,GACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mCAAmC,EACnC,KAAK,6BAA6B,EAClC,KAAK,4BAA4B,EACjC,KAAK,8BAA8B,EACnC,KAAK,oCAAoC,GAC1C,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,mCAAmC,EAAE,MAAM,wCAAwC,CAAC;AAC7F,OAAO,EACL,KAAK,2BAA2B,EAChC,mCAAmC,EACnC,KAAK,kCAAkC,EACvC,KAAK,iCAAiC,EACtC,KAAK,4BAA4B,GAClC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,KAAK,yBAAyB,EAC9B,oBAAoB,EACpB,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EACzB,KAAK,4BAA4B,EACjC,KAAK,mBAAmB,EACxB,2BAA2B,EAC3B,KAAK,kCAAkC,GACxC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,wBAAwB,EACxB,KAAK,+BAA+B,EACpC,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,4BAA4B,GAClC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,EACL,iCAAiC,EACjC,KAAK,yBAAyB,GAC/B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,wCAAwC,EACxC,wBAAwB,EACxB,KAAK,8BAA8B,EACnC,KAAK,mBAAmB,EACxB,KAAK,UAAU,EACf,KAAK,0BAA0B,GAChC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gCAAgC,EAChC,gCAAgC,EAChC,oBAAoB,EACpB,KAAK,kBAAkB,EACvB,qBAAqB,EACrB,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,GACzB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACnF,OAAO,EAAE,kCAAkC,EAAE,MAAM,uCAAuC,CAAC;AAC3F,OAAO,EACL,kCAAkC,EAClC,KAAK,qBAAqB,EAC1B,KAAK,gCAAgC,EACrC,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,yBAAyB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,0BAA0B,EAC/B,4BAA4B,EAC5B,0BAA0B,EAC1B,KAAK,0BAA0B,EAC/B,0BAA0B,EAC1B,KAAK,wBAAwB,GAC9B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,kCAAkC,EAAE,MAAM,uCAAuC,CAAC;AAC3F,OAAO,EACL,iCAAiC,EACjC,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAC7B,iCAAiC,EACjC,KAAK,+BAA+B,EACpC,KAAK,4BAA4B,EACjC,0CAA0C,EAC1C,kCAAkC,EAClC,KAAK,2BAA2B,EAChC,yCAAyC,EACzC,iCAAiC,EACjC,KAAK,oBAAoB,EACzB,yBAAyB,EACzB,KAAK,6BAA6B,EAClC,kCAAkC,EAClC,KAAK,4BAA4B,EACjC,kCAAkC,EAClC,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,gCAAgC,EAChC,kCAAkC,EAClC,sCAAsC,EACtC,iCAAiC,EACjC,oCAAoC,EACpC,KAAK,oCAAoC,GAC1C,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,4BAA4B,EAC5B,KAAK,mCAAmC,GACzC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,4CAA4C,EAAE,MAAM,qCAAqC,CAAC;AACnG,OAAO,EAAE,gCAAgC,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,EAAE,+CAA+C,EAAE,MAAM,4CAA4C,CAAC;AAC7G,OAAO,EACL,KAAK,gCAAgC,EACrC,KAAK,+BAA+B,EACpC,KAAK,6BAA6B,EAClC,gCAAgC,GACjC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,sCAAsC,EACtC,+BAA+B,EAC/B,6BAA6B,EAC7B,8BAA8B,EAC9B,iCAAiC,EACjC,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,+BAA+B,EACpC,KAAK,iBAAiB,EACtB,yBAAyB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,GAC3B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,4BAA4B,EAC5B,KAAK,yBAAyB,EAC9B,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,8BAA8B,EAC9B,KAAK,gBAAgB,EACrB,6BAA6B,EAC7B,wBAAwB,EACxB,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,mBAAmB,EACnB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,4BAA4B,EAC5B,KAAK,kBAAkB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,sBAAsB,EACtB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,WAAW,GACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,wBAAwB,EACxB,uBAAuB,EACvB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,8BAA8B,EAC9B,8BAA8B,EAC9B,4BAA4B,EAC5B,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,YAAY,EACjB,uBAAuB,EACvB,KAAK,SAAS,GACf,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,KAAK,cAAc,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/D,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,sBAAsB,EACtB,0BAA0B,EAC1B,KAAK,mBAAmB,GACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,8BAA8B,EAC9B,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EACL,oBAAoB,EACpB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,UAAU,EACf,kBAAkB,EAClB,KAAK,yBAAyB,EAC9B,SAAS,EACT,aAAa,EACb,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAAE,6BAA6B,EAAE,MAAM,yCAAyC,CAAC;AACxF,OAAO,EACL,sBAAsB,EACtB,6BAA6B,EAC7B,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EAAE,sCAAsC,EAAE,MAAM,2CAA2C,CAAC;AACnG,OAAO,EAAE,qBAAqB,EAAE,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACvF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,KAAK,+BAA+B,GACrC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EACL,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,uBAAuB,EACvB,KAAK,8BAA8B,EACnC,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,eAAe,GACrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,4BAA4B,EACjC,mBAAmB,EACnB,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,8BAA8B,EACnC,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,cAAc,EACd,KAAK,UAAU,EACf,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,EACrB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,SAAS,EACd,KAAK,OAAO,EACZ,KAAK,+BAA+B,EACpC,KAAK,gCAAgC,EACrC,KAAK,sBAAsB,EAC3B,KAAK,4BAA4B,EACjC,KAAK,oBAAoB,EACzB,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,YAAY,EACZ,UAAU,EACV,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACd,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,EACd,eAAe,EACf,uBAAuB,EACvB,2BAA2B,EAC3B,YAAY,EACZ,iBAAiB,EACjB,KAAK,kBAAkB,GACxB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,iBAAiB,EACjB,KAAK,wBAAwB,EAC7B,qBAAqB,EACrB,kBAAkB,EAClB,yBAAyB,EACzB,uBAAuB,EACvB,+BAA+B,EAC/B,KAAK,kBAAkB,EACvB,kBAAkB,EAClB,KAAK,yBAAyB,GAC/B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAE,KAAK,qBAAqB,EAAE,MAAM,uBAAuB,CAAC"}
@@ -29,6 +29,9 @@ export { LocalProcessExecutor, } from './github/local-process-executor.js';
29
29
  export { InMemoryPendingGithubInstallationStore, } from './github/pending-installations.js';
30
30
  export { isAccessMode, resolveRunAccessMode, } from './github/run-access-mode.js';
31
31
  export { RUN_TOKEN_TTL_MS, runTokenAuthorizes, signRunToken, verifyRunToken, } from './github/run-token.js';
32
+ export { GoogleWorkloadIdentityBindingBroker, } from './google-workload-identity.js';
33
+ export { PostgresGoogleWorkloadIdentityStore } from './google-workload-identity-postgres.js';
34
+ export { InMemoryGoogleWorkloadIdentityStore, } from './google-workload-identity-store.js';
32
35
  export { activeDeveloperGrant, InMemoryDeveloperGrantStore, } from './oauth/developer-grant.js';
33
36
  export { DeveloperGrantAuthorizer, } from './oauth/developer-grant-authorizer.js';
34
37
  export { PostgresDeveloperGrantStore } from './oauth/developer-grant-store-postgres.js';
@@ -1 +1 @@
1
- {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EACL,4BAA4B,EAC5B,cAAc,EAEd,mBAAmB,GACpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,4BAA4B,EAG5B,wBAAwB,EAExB,mBAAmB,EACnB,uBAAuB,GAExB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,yBAAyB,EACzB,cAAc,EAEd,8BAA8B,EAC9B,2BAA2B,GAC5B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAKL,gBAAgB,EAEhB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAIL,kBAAkB,GAEnB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0CAA0C,EAI1C,iCAAiC,EAejC,4CAA4C,EAC5C,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,YAAY,EACZ,WAAW,EAGX,iBAAiB,EAEjB,sBAAsB,EAEtB,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,+BAA+B,EAC/B,uBAAuB,EAEvB,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,OAAO,EAAkB,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EACL,qBAAqB,EAGrB,sBAAsB,EACtB,+BAA+B,EAC/B,oBAAoB,EACpB,wBAAwB,EACxB,iBAAiB,EACjB,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEL,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kBAAkB,EAElB,oBAAoB,EACpB,kBAAkB,EAClB,yBAAyB,GAC1B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,oBAAoB,EAGpB,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,+CAA+C,EAC/C,uCAAuC,EAMvC,6CAA6C,EAC7C,yCAAyC,GAC1C,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAML,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAGL,mCAAmC,GACpC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAGL,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,mBAAmB,EAInB,eAAe,GAChB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAOL,iBAAiB,GAClB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAGL,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,qCAAqC,EACrC,gCAAgC,EAChC,qBAAqB,EAErB,yBAAyB,GAE1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,8BAA8B,GAE/B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAIL,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAGL,wBAAwB,EACxB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kBAAkB,GAGnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,oBAAoB,GAGrB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,sCAAsC,GAEvC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,YAAY,EAGZ,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,gBAAgB,EAGhB,kBAAkB,EAClB,YAAY,EACZ,cAAc,GACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEL,oBAAoB,EAKpB,2BAA2B,GAE5B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,wBAAwB,GAKzB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,EACL,iCAAiC,GAElC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,wCAAwC,EACxC,wBAAwB,GAKzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gCAAgC,EAChC,gCAAgC,EAChC,oBAAoB,EAEpB,qBAAqB,GAItB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACnF,OAAO,EAAE,kCAAkC,EAAE,MAAM,uCAAuC,CAAC;AAC3F,OAAO,EACL,kCAAkC,EAKlC,yBAAyB,EAGzB,4BAA4B,EAC5B,0BAA0B,EAE1B,0BAA0B,GAE3B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,kCAAkC,EAAE,MAAM,uCAAuC,CAAC;AAC3F,OAAO,EACL,iCAAiC,EAGjC,iCAAiC,EAGjC,0CAA0C,EAC1C,kCAAkC,EAElC,yCAAyC,EACzC,iCAAiC,EAEjC,yBAAyB,EAEzB,kCAAkC,EAElC,kCAAkC,EAGlC,gCAAgC,EAChC,kCAAkC,EAClC,sCAAsC,EACtC,iCAAiC,EACjC,oCAAoC,GAErC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,4BAA4B,GAE7B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,4CAA4C,EAAE,MAAM,qCAAqC,CAAC;AACnG,OAAO,EAAE,gCAAgC,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,EAAE,+CAA+C,EAAE,MAAM,4CAA4C,CAAC;AAC7G,OAAO,EAIL,gCAAgC,GACjC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,sCAAsC,EACtC,+BAA+B,EAC/B,6BAA6B,EAC7B,8BAA8B,EAC9B,iCAAiC,EACjC,qBAAqB,EAKrB,yBAAyB,GAK1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,4BAA4B,EAE5B,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,8BAA8B,EAE9B,6BAA6B,EAC7B,wBAAwB,EAIxB,mBAAmB,EAQnB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,4BAA4B,GAE7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAKL,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,sBAAsB,GAMvB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,wBAAwB,EACxB,uBAAuB,EACvB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,8BAA8B,EAC9B,8BAA8B,EAC9B,4BAA4B,EAC5B,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEL,uBAAuB,GAExB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAuB,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EAMpB,sBAAsB,EACtB,0BAA0B,GAE3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,aAAa,EACb,qBAAqB,EAOrB,8BAA8B,EAC9B,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EACL,oBAAoB,EAQpB,kBAAkB,EAElB,SAAS,EACT,aAAa,EACb,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAAE,6BAA6B,EAAE,MAAM,yCAAyC,CAAC;AACxF,OAAO,EACL,sBAAsB,EACtB,6BAA6B,EAC7B,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EAAE,sCAAsC,EAAE,MAAM,2CAA2C,CAAC;AACnG,OAAO,EAAE,qBAAqB,EAA6B,MAAM,qBAAqB,CAAC;AACvF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EACL,uBAAuB,EACvB,wBAAwB,GAEzB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EACL,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,uBAAuB,GAQxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAOL,mBAAmB,EAQnB,qBAAqB,EAOrB,cAAc,EAId,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,EAarB,kBAAkB,EAIlB,YAAY,EACZ,UAAU,EAKV,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,EACd,eAAe,EACf,uBAAuB,EACvB,2BAA2B,EAC3B,YAAY,EACZ,iBAAiB,GAElB,MAAM,YAAY,CAAC;AACpB,OAAO,EAKL,iBAAiB,EAEjB,qBAAqB,EACrB,kBAAkB,EAClB,yBAAyB,EACzB,uBAAuB,EACvB,+BAA+B,EAE/B,kBAAkB,GAEnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAA8B,MAAM,uBAAuB,CAAC"}
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EACL,4BAA4B,EAC5B,cAAc,EAEd,mBAAmB,GACpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,4BAA4B,EAG5B,wBAAwB,EAExB,mBAAmB,EACnB,uBAAuB,GAExB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,yBAAyB,EACzB,cAAc,EAEd,8BAA8B,EAC9B,2BAA2B,GAC5B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAKL,gBAAgB,EAEhB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAIL,kBAAkB,GAEnB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0CAA0C,EAI1C,iCAAiC,EAejC,4CAA4C,EAC5C,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,YAAY,EACZ,WAAW,EAGX,iBAAiB,EAEjB,sBAAsB,EAEtB,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,+BAA+B,EAC/B,uBAAuB,EAEvB,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AACzC,cAAc,qBAAqB,CAAC;AACpC,OAAO,EAAkB,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EACL,qBAAqB,EAGrB,sBAAsB,EACtB,+BAA+B,EAC/B,oBAAoB,EACpB,wBAAwB,EACxB,iBAAiB,EACjB,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEL,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kBAAkB,EAElB,oBAAoB,EACpB,kBAAkB,EAClB,yBAAyB,GAC1B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,oBAAoB,EAGpB,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,+CAA+C,EAC/C,uCAAuC,EAMvC,6CAA6C,EAC7C,yCAAyC,GAC1C,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAML,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAGL,mCAAmC,GACpC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAGL,kBAAkB,EAClB,uBAAuB,GACxB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,mBAAmB,EAInB,eAAe,GAChB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAOL,iBAAiB,GAClB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAGL,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,qCAAqC,EACrC,gCAAgC,EAChC,qBAAqB,EAErB,yBAAyB,GAE1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,8BAA8B,GAE/B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAIL,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAGL,wBAAwB,EACxB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kBAAkB,GAGnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,oBAAoB,GAGrB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,sCAAsC,GAEvC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,YAAY,EAGZ,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,gBAAgB,EAGhB,kBAAkB,EAClB,YAAY,EACZ,cAAc,GACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mCAAmC,GAKpC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,mCAAmC,EAAE,MAAM,wCAAwC,CAAC;AAC7F,OAAO,EAEL,mCAAmC,GAIpC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAEL,oBAAoB,EAKpB,2BAA2B,GAE5B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,wBAAwB,GAKzB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,EACL,iCAAiC,GAElC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,wCAAwC,EACxC,wBAAwB,GAKzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,gCAAgC,EAChC,gCAAgC,EAChC,oBAAoB,EAEpB,qBAAqB,GAItB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACnF,OAAO,EAAE,kCAAkC,EAAE,MAAM,uCAAuC,CAAC;AAC3F,OAAO,EACL,kCAAkC,EAKlC,yBAAyB,EAGzB,4BAA4B,EAC5B,0BAA0B,EAE1B,0BAA0B,GAE3B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,kCAAkC,EAAE,MAAM,uCAAuC,CAAC;AAC3F,OAAO,EACL,iCAAiC,EAGjC,iCAAiC,EAGjC,0CAA0C,EAC1C,kCAAkC,EAElC,yCAAyC,EACzC,iCAAiC,EAEjC,yBAAyB,EAEzB,kCAAkC,EAElC,kCAAkC,EAGlC,gCAAgC,EAChC,kCAAkC,EAClC,sCAAsC,EACtC,iCAAiC,EACjC,oCAAoC,GAErC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,4BAA4B,GAE7B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,4CAA4C,EAAE,MAAM,qCAAqC,CAAC;AACnG,OAAO,EAAE,gCAAgC,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,EAAE,+CAA+C,EAAE,MAAM,4CAA4C,CAAC;AAC7G,OAAO,EAIL,gCAAgC,GACjC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,sCAAsC,EACtC,+BAA+B,EAC/B,6BAA6B,EAC7B,8BAA8B,EAC9B,iCAAiC,EACjC,qBAAqB,EAKrB,yBAAyB,GAK1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,4BAA4B,EAE5B,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,8BAA8B,EAE9B,6BAA6B,EAC7B,wBAAwB,EAIxB,mBAAmB,EAQnB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,4BAA4B,GAE7B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAKL,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,sBAAsB,GAMvB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,wBAAwB,EACxB,uBAAuB,EACvB,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,8BAA8B,EAC9B,8BAA8B,EAC9B,4BAA4B,EAC5B,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEL,uBAAuB,GAExB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAuB,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EAMpB,sBAAsB,EACtB,0BAA0B,GAE3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,aAAa,EACb,qBAAqB,EAOrB,8BAA8B,EAC9B,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EACL,oBAAoB,EAQpB,kBAAkB,EAElB,SAAS,EACT,aAAa,EACb,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACrE,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAAE,6BAA6B,EAAE,MAAM,yCAAyC,CAAC;AACxF,OAAO,EACL,sBAAsB,EACtB,6BAA6B,EAC7B,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EAAE,sCAAsC,EAAE,MAAM,2CAA2C,CAAC;AACnG,OAAO,EAAE,qBAAqB,EAA6B,MAAM,qBAAqB,CAAC;AACvF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EACL,uBAAuB,EACvB,wBAAwB,GAEzB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,EACL,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,uBAAuB,GAQxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAOL,mBAAmB,EAQnB,qBAAqB,EAOrB,cAAc,EAId,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,EAarB,kBAAkB,EAIlB,YAAY,EACZ,UAAU,EAKV,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,EACd,eAAe,EACf,uBAAuB,EACvB,2BAA2B,EAC3B,YAAY,EACZ,iBAAiB,GAElB,MAAM,YAAY,CAAC;AACpB,OAAO,EAKL,iBAAiB,EAEjB,qBAAqB,EACrB,kBAAkB,EAClB,yBAAyB,EACzB,uBAAuB,EACvB,+BAA+B,EAE/B,kBAAkB,GAEnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAA8B,MAAM,uBAAuB,CAAC"}