@noodleseed/one 0.70.1 → 0.72.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (261) hide show
  1. package/dist/auth-discovery.d.ts +2 -0
  2. package/dist/auth-discovery.d.ts.map +1 -1
  3. package/dist/auth-discovery.js +63 -4
  4. package/dist/auth-discovery.js.map +1 -1
  5. package/dist/commands/auth-google-ops.d.ts +3 -0
  6. package/dist/commands/auth-google-ops.d.ts.map +1 -0
  7. package/dist/commands/auth-google-ops.js +198 -0
  8. package/dist/commands/auth-google-ops.js.map +1 -0
  9. package/dist/commands/auth-ops.d.ts.map +1 -1
  10. package/dist/commands/auth-ops.js +5 -1
  11. package/dist/commands/auth-ops.js.map +1 -1
  12. package/dist/commands/catalog-data-config.d.ts.map +1 -1
  13. package/dist/commands/catalog-data-config.js +10 -1
  14. package/dist/commands/catalog-data-config.js.map +1 -1
  15. package/dist/commands/catalog-data-core.d.ts.map +1 -1
  16. package/dist/commands/catalog-data-core.js +17 -1
  17. package/dist/commands/catalog-data-core.js.map +1 -1
  18. package/dist/commands/catalog-data-resources.d.ts.map +1 -1
  19. package/dist/commands/catalog-data-resources.js +5 -5
  20. package/dist/commands/catalog-data-resources.js.map +1 -1
  21. package/dist/commands/config-values.d.ts +10 -2
  22. package/dist/commands/config-values.d.ts.map +1 -1
  23. package/dist/commands/config-values.js +81 -1
  24. package/dist/commands/config-values.js.map +1 -1
  25. package/dist/deploy.js +1 -1
  26. package/dist/deploy.js.map +1 -1
  27. package/dist/index.d.ts +1 -1
  28. package/dist/index.d.ts.map +1 -1
  29. package/dist/index.js +1 -1
  30. package/dist/index.js.map +1 -1
  31. package/node_modules/@noodle-borg/agent-kit/dist/curated/command-groups.js +1 -1
  32. package/node_modules/@noodle-borg/agent-kit/dist/curated/command-groups.js.map +1 -1
  33. package/node_modules/@noodle-borg/agent-kit/dist/generated/example-files.d.ts.map +1 -1
  34. package/node_modules/@noodle-borg/agent-kit/dist/generated/example-files.js +8 -1
  35. package/node_modules/@noodle-borg/agent-kit/dist/generated/example-files.js.map +1 -1
  36. package/node_modules/@noodle-borg/agent-kit/dist/generated/surface.d.ts.map +1 -1
  37. package/node_modules/@noodle-borg/agent-kit/dist/generated/surface.js +1 -0
  38. package/node_modules/@noodle-borg/agent-kit/dist/generated/surface.js.map +1 -1
  39. package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-refs.d.ts.map +1 -1
  40. package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-refs.js +5 -1
  41. package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-refs.js.map +1 -1
  42. package/node_modules/@noodle-borg/agent-kit/dist/skill-content.d.ts.map +1 -1
  43. package/node_modules/@noodle-borg/agent-kit/dist/skill-content.js +7 -1
  44. package/node_modules/@noodle-borg/agent-kit/dist/skill-content.js.map +1 -1
  45. package/node_modules/@noodle-borg/agent-kit/dist/skill-feedback-ref.js +1 -1
  46. package/node_modules/@noodle-borg/agent-kit/dist/skill-feedback-ref.js.map +1 -1
  47. package/node_modules/@noodle-borg/agent-kit/package.json +1 -1
  48. package/node_modules/@noodle-borg/auth/dist/jwt-issuer.d.ts +2 -0
  49. package/node_modules/@noodle-borg/auth/dist/jwt-issuer.d.ts.map +1 -1
  50. package/node_modules/@noodle-borg/auth/dist/jwt-issuer.js +1 -0
  51. package/node_modules/@noodle-borg/auth/dist/jwt-issuer.js.map +1 -1
  52. package/node_modules/@noodle-borg/auth/dist/verify.d.ts +2 -0
  53. package/node_modules/@noodle-borg/auth/dist/verify.d.ts.map +1 -1
  54. package/node_modules/@noodle-borg/auth/dist/verify.js +16 -0
  55. package/node_modules/@noodle-borg/auth/dist/verify.js.map +1 -1
  56. package/node_modules/@noodle-borg/authoring/dist/connection-types.d.ts +23 -0
  57. package/node_modules/@noodle-borg/authoring/dist/connection-types.d.ts.map +1 -1
  58. package/node_modules/@noodle-borg/authoring/dist/connection-types.js +16 -0
  59. package/node_modules/@noodle-borg/authoring/dist/connection-types.js.map +1 -1
  60. package/node_modules/@noodle-borg/authoring/dist/connections.d.ts +2 -2
  61. package/node_modules/@noodle-borg/authoring/dist/connections.d.ts.map +1 -1
  62. package/node_modules/@noodle-borg/authoring/dist/connections.js +13 -2
  63. package/node_modules/@noodle-borg/authoring/dist/connections.js.map +1 -1
  64. package/node_modules/@noodle-borg/authoring/dist/index.d.ts +1 -1
  65. package/node_modules/@noodle-borg/authoring/dist/index.d.ts.map +1 -1
  66. package/node_modules/@noodle-borg/authoring/dist/index.js +1 -1
  67. package/node_modules/@noodle-borg/authoring/dist/index.js.map +1 -1
  68. package/node_modules/@noodle-borg/compiler/dist/artifact/config.d.ts +2 -2
  69. package/node_modules/@noodle-borg/compiler/dist/artifact/config.d.ts.map +1 -1
  70. package/node_modules/@noodle-borg/compiler/dist/artifact/config.js +22 -1
  71. package/node_modules/@noodle-borg/compiler/dist/artifact/config.js.map +1 -1
  72. package/node_modules/@noodle-borg/compiler/dist/artifact/types.d.ts +9 -0
  73. package/node_modules/@noodle-borg/compiler/dist/artifact/types.d.ts.map +1 -1
  74. package/node_modules/@noodle-borg/compiler/dist/compile.d.ts.map +1 -1
  75. package/node_modules/@noodle-borg/compiler/dist/compile.js +1 -1
  76. package/node_modules/@noodle-borg/compiler/dist/compile.js.map +1 -1
  77. package/node_modules/@noodle-borg/compiler/dist/fulfilment-emit.d.ts.map +1 -1
  78. package/node_modules/@noodle-borg/compiler/dist/fulfilment-emit.js +49 -0
  79. package/node_modules/@noodle-borg/compiler/dist/fulfilment-emit.js.map +1 -1
  80. package/node_modules/@noodle-borg/compiler/dist/manifest/schema.d.ts +18 -0
  81. package/node_modules/@noodle-borg/compiler/dist/manifest/schema.d.ts.map +1 -1
  82. package/node_modules/@noodle-borg/compiler/dist/manifest/schema.js +15 -0
  83. package/node_modules/@noodle-borg/compiler/dist/manifest/schema.js.map +1 -1
  84. package/node_modules/@noodle-borg/runtime/dist/broker/types.d.ts +3 -1
  85. package/node_modules/@noodle-borg/runtime/dist/broker/types.d.ts.map +1 -1
  86. package/node_modules/@noodle-borg/service/dist/auth/deploy-gate.d.ts +3 -0
  87. package/node_modules/@noodle-borg/service/dist/auth/deploy-gate.d.ts.map +1 -1
  88. package/node_modules/@noodle-borg/service/dist/auth/deploy-gate.js +1 -0
  89. package/node_modules/@noodle-borg/service/dist/auth/deploy-gate.js.map +1 -1
  90. package/node_modules/@noodle-borg/service/dist/config-value-projection.d.ts +58 -0
  91. package/node_modules/@noodle-borg/service/dist/config-value-projection.d.ts.map +1 -0
  92. package/node_modules/@noodle-borg/service/dist/config-value-projection.js +40 -0
  93. package/node_modules/@noodle-borg/service/dist/config-value-projection.js.map +1 -0
  94. package/node_modules/@noodle-borg/service/dist/credential-binding-index.d.ts +1 -0
  95. package/node_modules/@noodle-borg/service/dist/credential-binding-index.d.ts.map +1 -1
  96. package/node_modules/@noodle-borg/service/dist/credential-binding-index.js +10 -2
  97. package/node_modules/@noodle-borg/service/dist/credential-binding-index.js.map +1 -1
  98. package/node_modules/@noodle-borg/service/dist/credential-broker-options.d.ts +3 -0
  99. package/node_modules/@noodle-borg/service/dist/credential-broker-options.d.ts.map +1 -1
  100. package/node_modules/@noodle-borg/service/dist/credential-broker-options.js +9 -0
  101. package/node_modules/@noodle-borg/service/dist/credential-broker-options.js.map +1 -1
  102. package/node_modules/@noodle-borg/service/dist/credential-broker.d.ts +5 -2
  103. package/node_modules/@noodle-borg/service/dist/credential-broker.d.ts.map +1 -1
  104. package/node_modules/@noodle-borg/service/dist/credential-broker.js +29 -0
  105. package/node_modules/@noodle-borg/service/dist/credential-broker.js.map +1 -1
  106. package/node_modules/@noodle-borg/service/dist/google-workload-identity-postgres.d.ts +21 -0
  107. package/node_modules/@noodle-borg/service/dist/google-workload-identity-postgres.d.ts.map +1 -0
  108. package/node_modules/@noodle-borg/service/dist/google-workload-identity-postgres.js +195 -0
  109. package/node_modules/@noodle-borg/service/dist/google-workload-identity-postgres.js.map +1 -0
  110. package/node_modules/@noodle-borg/service/dist/google-workload-identity-probe.d.ts +10 -0
  111. package/node_modules/@noodle-borg/service/dist/google-workload-identity-probe.d.ts.map +1 -0
  112. package/node_modules/@noodle-borg/service/dist/google-workload-identity-probe.js +47 -0
  113. package/node_modules/@noodle-borg/service/dist/google-workload-identity-probe.js.map +1 -0
  114. package/node_modules/@noodle-borg/service/dist/google-workload-identity-store.d.ts +46 -0
  115. package/node_modules/@noodle-borg/service/dist/google-workload-identity-store.d.ts.map +1 -0
  116. package/node_modules/@noodle-borg/service/dist/google-workload-identity-store.js +88 -0
  117. package/node_modules/@noodle-borg/service/dist/google-workload-identity-store.js.map +1 -0
  118. package/node_modules/@noodle-borg/service/dist/google-workload-identity-validation.d.ts +4 -0
  119. package/node_modules/@noodle-borg/service/dist/google-workload-identity-validation.d.ts.map +1 -0
  120. package/node_modules/@noodle-borg/service/dist/google-workload-identity-validation.js +13 -0
  121. package/node_modules/@noodle-borg/service/dist/google-workload-identity-validation.js.map +1 -0
  122. package/node_modules/@noodle-borg/service/dist/google-workload-identity.d.ts +38 -0
  123. package/node_modules/@noodle-borg/service/dist/google-workload-identity.d.ts.map +1 -0
  124. package/node_modules/@noodle-borg/service/dist/google-workload-identity.js +289 -0
  125. package/node_modules/@noodle-borg/service/dist/google-workload-identity.js.map +1 -0
  126. package/node_modules/@noodle-borg/service/dist/index.d.ts +3 -0
  127. package/node_modules/@noodle-borg/service/dist/index.d.ts.map +1 -1
  128. package/node_modules/@noodle-borg/service/dist/index.js +3 -0
  129. package/node_modules/@noodle-borg/service/dist/index.js.map +1 -1
  130. package/node_modules/@noodle-borg/service/dist/oauth/app.d.ts.map +1 -1
  131. package/node_modules/@noodle-borg/service/dist/oauth/app.js +11 -0
  132. package/node_modules/@noodle-borg/service/dist/oauth/app.js.map +1 -1
  133. package/node_modules/@noodle-borg/service/dist/oauth/authorization-initiation.d.ts.map +1 -1
  134. package/node_modules/@noodle-borg/service/dist/oauth/authorization-initiation.js +4 -0
  135. package/node_modules/@noodle-borg/service/dist/oauth/authorization-initiation.js.map +1 -1
  136. package/node_modules/@noodle-borg/service/dist/oauth/consent-claims.d.ts +1 -0
  137. package/node_modules/@noodle-borg/service/dist/oauth/consent-claims.d.ts.map +1 -1
  138. package/node_modules/@noodle-borg/service/dist/oauth/consent-claims.js +10 -0
  139. package/node_modules/@noodle-borg/service/dist/oauth/consent-claims.js.map +1 -1
  140. package/node_modules/@noodle-borg/service/dist/oauth/developer-grant-flow.d.ts +3 -1
  141. package/node_modules/@noodle-borg/service/dist/oauth/developer-grant-flow.d.ts.map +1 -1
  142. package/node_modules/@noodle-borg/service/dist/oauth/developer-grant-flow.js +2 -0
  143. package/node_modules/@noodle-borg/service/dist/oauth/developer-grant-flow.js.map +1 -1
  144. package/node_modules/@noodle-borg/service/dist/oauth/fresh-auth.d.ts +6 -0
  145. package/node_modules/@noodle-borg/service/dist/oauth/fresh-auth.d.ts.map +1 -0
  146. package/node_modules/@noodle-borg/service/dist/oauth/fresh-auth.js +14 -0
  147. package/node_modules/@noodle-borg/service/dist/oauth/fresh-auth.js.map +1 -0
  148. package/node_modules/@noodle-borg/service/dist/oauth/google.d.ts +3 -2
  149. package/node_modules/@noodle-borg/service/dist/oauth/google.d.ts.map +1 -1
  150. package/node_modules/@noodle-borg/service/dist/oauth/google.js +8 -4
  151. package/node_modules/@noodle-borg/service/dist/oauth/google.js.map +1 -1
  152. package/node_modules/@noodle-borg/service/dist/oauth/paths.d.ts.map +1 -1
  153. package/node_modules/@noodle-borg/service/dist/oauth/paths.js +1 -0
  154. package/node_modules/@noodle-borg/service/dist/oauth/paths.js.map +1 -1
  155. package/node_modules/@noodle-borg/service/dist/oauth/provider.d.ts.map +1 -1
  156. package/node_modules/@noodle-borg/service/dist/oauth/provider.js +7 -2
  157. package/node_modules/@noodle-borg/service/dist/oauth/provider.js.map +1 -1
  158. package/node_modules/@noodle-borg/service/dist/oauth/store-postgres-schema.d.ts.map +1 -1
  159. package/node_modules/@noodle-borg/service/dist/oauth/store-postgres-schema.js +4 -0
  160. package/node_modules/@noodle-borg/service/dist/oauth/store-postgres-schema.js.map +1 -1
  161. package/node_modules/@noodle-borg/service/dist/oauth/store-postgres.d.ts.map +1 -1
  162. package/node_modules/@noodle-borg/service/dist/oauth/store-postgres.js +36 -12
  163. package/node_modules/@noodle-borg/service/dist/oauth/store-postgres.js.map +1 -1
  164. package/node_modules/@noodle-borg/service/dist/oauth/store.d.ts +3 -0
  165. package/node_modules/@noodle-borg/service/dist/oauth/store.d.ts.map +1 -1
  166. package/node_modules/@noodle-borg/service/dist/oauth/store.js +19 -7
  167. package/node_modules/@noodle-borg/service/dist/oauth/store.js.map +1 -1
  168. package/node_modules/@noodle-borg/service/dist/oauth/token-issuer.d.ts +1 -0
  169. package/node_modules/@noodle-borg/service/dist/oauth/token-issuer.d.ts.map +1 -1
  170. package/node_modules/@noodle-borg/service/dist/oauth/token-issuer.js +13 -5
  171. package/node_modules/@noodle-borg/service/dist/oauth/token-issuer.js.map +1 -1
  172. package/node_modules/@noodle-borg/service/dist/oauth/upstream-callback-handler.d.ts.map +1 -1
  173. package/node_modules/@noodle-borg/service/dist/oauth/upstream-callback-handler.js +5 -0
  174. package/node_modules/@noodle-borg/service/dist/oauth/upstream-callback-handler.js.map +1 -1
  175. package/node_modules/@noodle-borg/service/dist/oauth/upstream-consent.d.ts +1 -0
  176. package/node_modules/@noodle-borg/service/dist/oauth/upstream-consent.d.ts.map +1 -1
  177. package/node_modules/@noodle-borg/service/dist/oauth/upstream-consent.js +33 -21
  178. package/node_modules/@noodle-borg/service/dist/oauth/upstream-consent.js.map +1 -1
  179. package/node_modules/@noodle-borg/service/dist/oauth/upstream-federation.d.ts +2 -1
  180. package/node_modules/@noodle-borg/service/dist/oauth/upstream-federation.d.ts.map +1 -1
  181. package/node_modules/@noodle-borg/service/dist/oauth/upstream-federation.js +2 -2
  182. package/node_modules/@noodle-borg/service/dist/oauth/upstream-federation.js.map +1 -1
  183. package/node_modules/@noodle-borg/service/dist/oauth/upstream-human.d.ts +4 -1
  184. package/node_modules/@noodle-borg/service/dist/oauth/upstream-human.d.ts.map +1 -1
  185. package/node_modules/@noodle-borg/service/dist/oauth/upstream-human.js.map +1 -1
  186. package/node_modules/@noodle-borg/service/dist/oauth/upstream-provider-choice.d.ts.map +1 -1
  187. package/node_modules/@noodle-borg/service/dist/oauth/upstream-provider-choice.js +4 -0
  188. package/node_modules/@noodle-borg/service/dist/oauth/upstream-provider-choice.js.map +1 -1
  189. package/node_modules/@noodle-borg/service/dist/oauth/workos.d.ts +4 -2
  190. package/node_modules/@noodle-borg/service/dist/oauth/workos.d.ts.map +1 -1
  191. package/node_modules/@noodle-borg/service/dist/oauth/workos.js +5 -3
  192. package/node_modules/@noodle-borg/service/dist/oauth/workos.js.map +1 -1
  193. package/node_modules/@noodle-borg/service/dist/options.d.ts +8 -0
  194. package/node_modules/@noodle-borg/service/dist/options.d.ts.map +1 -1
  195. package/node_modules/@noodle-borg/service/dist/registry-types.d.ts +3 -0
  196. package/node_modules/@noodle-borg/service/dist/registry-types.d.ts.map +1 -1
  197. package/node_modules/@noodle-borg/service/dist/registry.d.ts.map +1 -1
  198. package/node_modules/@noodle-borg/service/dist/registry.js +3 -0
  199. package/node_modules/@noodle-borg/service/dist/registry.js.map +1 -1
  200. package/node_modules/@noodle-borg/service/dist/routes/auth-discovery.d.ts.map +1 -1
  201. package/node_modules/@noodle-borg/service/dist/routes/auth-discovery.js +46 -0
  202. package/node_modules/@noodle-borg/service/dist/routes/auth-discovery.js.map +1 -1
  203. package/node_modules/@noodle-borg/service/dist/routes/config-contracts.d.ts +181 -0
  204. package/node_modules/@noodle-borg/service/dist/routes/config-contracts.d.ts.map +1 -0
  205. package/node_modules/@noodle-borg/service/dist/routes/config-contracts.js +50 -0
  206. package/node_modules/@noodle-borg/service/dist/routes/config-contracts.js.map +1 -0
  207. package/node_modules/@noodle-borg/service/dist/routes/config-values-dispatch.d.ts +20 -0
  208. package/node_modules/@noodle-borg/service/dist/routes/config-values-dispatch.d.ts.map +1 -0
  209. package/node_modules/@noodle-borg/service/dist/routes/config-values-dispatch.js +37 -0
  210. package/node_modules/@noodle-borg/service/dist/routes/config-values-dispatch.js.map +1 -0
  211. package/node_modules/@noodle-borg/service/dist/routes/config-values-paths.d.ts +12 -0
  212. package/node_modules/@noodle-borg/service/dist/routes/config-values-paths.d.ts.map +1 -0
  213. package/node_modules/@noodle-borg/service/dist/routes/config-values-paths.js +88 -0
  214. package/node_modules/@noodle-borg/service/dist/routes/config-values-paths.js.map +1 -0
  215. package/node_modules/@noodle-borg/service/dist/routes/config-values.d.ts +8 -0
  216. package/node_modules/@noodle-borg/service/dist/routes/config-values.d.ts.map +1 -0
  217. package/node_modules/@noodle-borg/service/dist/routes/config-values.js +218 -0
  218. package/node_modules/@noodle-borg/service/dist/routes/config-values.js.map +1 -0
  219. package/node_modules/@noodle-borg/service/dist/routes/control-plane.d.ts +2 -3
  220. package/node_modules/@noodle-borg/service/dist/routes/control-plane.d.ts.map +1 -1
  221. package/node_modules/@noodle-borg/service/dist/routes/control-plane.js +2 -71
  222. package/node_modules/@noodle-borg/service/dist/routes/control-plane.js.map +1 -1
  223. package/node_modules/@noodle-borg/service/dist/routes/credential-auth-dispatch.d.ts +25 -0
  224. package/node_modules/@noodle-borg/service/dist/routes/credential-auth-dispatch.d.ts.map +1 -0
  225. package/node_modules/@noodle-borg/service/dist/routes/credential-auth-dispatch.js +21 -0
  226. package/node_modules/@noodle-borg/service/dist/routes/credential-auth-dispatch.js.map +1 -0
  227. package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity-dispatch.d.ts +14 -0
  228. package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity-dispatch.d.ts.map +1 -0
  229. package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity-dispatch.js +30 -0
  230. package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity-dispatch.js.map +1 -0
  231. package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity.d.ts +19 -0
  232. package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity.d.ts.map +1 -0
  233. package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity.js +105 -0
  234. package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity.js.map +1 -0
  235. package/node_modules/@noodle-borg/service/dist/routes/paths.d.ts +5 -10
  236. package/node_modules/@noodle-borg/service/dist/routes/paths.d.ts.map +1 -1
  237. package/node_modules/@noodle-borg/service/dist/routes/paths.js +8 -40
  238. package/node_modules/@noodle-borg/service/dist/routes/paths.js.map +1 -1
  239. package/node_modules/@noodle-borg/service/dist/serve.d.ts.map +1 -1
  240. package/node_modules/@noodle-borg/service/dist/serve.js +29 -0
  241. package/node_modules/@noodle-borg/service/dist/serve.js.map +1 -1
  242. package/node_modules/@noodle-borg/service/dist/service.d.ts.map +1 -1
  243. package/node_modules/@noodle-borg/service/dist/service.js +21 -15
  244. package/node_modules/@noodle-borg/service/dist/service.js.map +1 -1
  245. package/node_modules/@noodle-borg/service/dist/store/config-values.d.ts +57 -0
  246. package/node_modules/@noodle-borg/service/dist/store/config-values.d.ts.map +1 -0
  247. package/node_modules/@noodle-borg/service/dist/store/config-values.js +98 -0
  248. package/node_modules/@noodle-borg/service/dist/store/config-values.js.map +1 -0
  249. package/node_modules/@noodle-borg/service/dist/store/postgres-config.d.ts +1 -1
  250. package/node_modules/@noodle-borg/service/dist/store/postgres-config.d.ts.map +1 -1
  251. package/node_modules/@noodle-borg/service/dist/store/postgres-config.js +22 -3
  252. package/node_modules/@noodle-borg/service/dist/store/postgres-config.js.map +1 -1
  253. package/node_modules/@noodle-borg/service/dist/store/postgres.d.ts +1 -1
  254. package/node_modules/@noodle-borg/service/dist/store/postgres.d.ts.map +1 -1
  255. package/node_modules/@noodle-borg/service/dist/store/postgres.js +2 -2
  256. package/node_modules/@noodle-borg/service/dist/store/postgres.js.map +1 -1
  257. package/node_modules/@noodle-borg/service/dist/store.d.ts +1 -56
  258. package/node_modules/@noodle-borg/service/dist/store.d.ts.map +1 -1
  259. package/node_modules/@noodle-borg/service/dist/store.js +1 -84
  260. package/node_modules/@noodle-borg/service/dist/store.js.map +1 -1
  261. package/package.json +1 -1
@@ -1 +1 @@
1
- {"version":3,"file":"auth-discovery.d.ts","sourceRoot":"","sources":["../../src/routes/auth-discovery.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAAsC,KAAK,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAElG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,qGAAqG;AACrG,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,cAAc,EACvB,GAAG,EAAE,UAAU,GACd,OAAO,CAiCT"}
1
+ {"version":3,"file":"auth-discovery.d.ts","sourceRoot":"","sources":["../../src/routes/auth-discovery.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAAsC,KAAK,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAElG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,qGAAqG;AACrG,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,cAAc,EACvB,GAAG,EAAE,UAAU,GACd,OAAO,CAmCT"}
@@ -13,9 +13,11 @@ export function dispatchAuthDiscoveryRoute(req, res, url, options, tls) {
13
13
  const selfHostedOAuthLogin = options.authServerApp !== undefined &&
14
14
  options.authServerIssuer !== undefined &&
15
15
  options.verifyOwnerToken !== undefined;
16
+ const consoleUrl = httpsConsoleBase(options.invitationConsoleBaseUrl);
16
17
  sendJson(res, 200, {
17
18
  ok: true,
18
19
  service: base,
20
+ ...(consoleUrl !== undefined ? { consoleUrl } : {}),
19
21
  googleClientId: options.controlPlaneGoogleClientId ?? null,
20
22
  ...(selfHostedOAuthLogin
21
23
  ? {
@@ -33,4 +35,48 @@ export function dispatchAuthDiscoveryRoute(req, res, url, options, tls) {
33
35
  });
34
36
  return true;
35
37
  }
38
+ /** Discovery must only advertise a Console destination the CLI can safely hand off to a browser. */
39
+ function httpsConsoleBase(value) {
40
+ if (value === undefined)
41
+ return undefined;
42
+ try {
43
+ return strictHttpsConsoleBase(value);
44
+ }
45
+ catch {
46
+ return undefined;
47
+ }
48
+ }
49
+ function strictHttpsConsoleBase(value) {
50
+ if (value.trim() !== value || !value.startsWith('https://'))
51
+ throw new Error('invalid Console URL');
52
+ const remainder = value.slice('https://'.length);
53
+ const separator = remainder.search(/[/?#]/);
54
+ const authority = separator === -1 ? remainder : remainder.slice(0, separator);
55
+ if (authority.length === 0)
56
+ throw new Error('invalid Console URL');
57
+ const rawRest = separator === -1 ? '' : remainder.slice(separator);
58
+ const rawPath = rawRest.startsWith('/') ? (rawRest.split(/[?#]/, 1)[0] ?? '') : '';
59
+ if (rawPath.includes('//'))
60
+ throw new Error('invalid Console URL');
61
+ for (const segment of rawPath.split('/').slice(1)) {
62
+ if (segment.length === 0)
63
+ continue;
64
+ const decoded = decodeURIComponent(segment);
65
+ if (decoded === '.' || decoded === '..')
66
+ throw new Error('invalid Console URL');
67
+ }
68
+ const url = new URL(value);
69
+ if (url.protocol !== 'https:' ||
70
+ url.username !== '' ||
71
+ url.password !== '' ||
72
+ url.search !== '' ||
73
+ url.hash !== '') {
74
+ throw new Error('invalid Console URL');
75
+ }
76
+ const parsedBase = `${url.origin}${url.pathname}`;
77
+ const rootTrailingSlashOnly = rawPath === '' && parsedBase === `${value}/`;
78
+ if (parsedBase !== value && !rootTrailingSlashOnly)
79
+ throw new Error('invalid Console URL');
80
+ return value;
81
+ }
36
82
  //# sourceMappingURL=auth-discovery.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"auth-discovery.js","sourceRoot":"","sources":["../../src/routes/auth-discovery.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAmB,MAAM,6BAA6B,CAAC;AAClG,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAGlF,qGAAqG;AACrG,MAAM,UAAU,0BAA0B,CACxC,GAAoB,EACpB,GAAmB,EACnB,GAAQ,EACR,OAAuB,EACvB,GAAe;IAEf,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,UAAU,IAAI,GAAG,CAAC,QAAQ,KAAK,iBAAiB,CAAC,EAAE,CAAC;QAChG,OAAO,KAAK,CAAC;IACf,CAAC;IACD,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/B,IAAI,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,IAAI,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChE,MAAM,oBAAoB,GAAG,oBAAoB,CAC/C,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAC1D,CAAC;IACF,MAAM,oBAAoB,GACxB,OAAO,CAAC,aAAa,KAAK,SAAS;QACnC,OAAO,CAAC,gBAAgB,KAAK,SAAS;QACtC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC;IACzC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;QACjB,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,IAAI;QACb,cAAc,EAAE,OAAO,CAAC,0BAA0B,IAAI,IAAI;QAC1D,GAAG,CAAC,oBAAoB;YACtB,CAAC,CAAC;gBACE,yBAAyB,EAAE,OAAO,CAAC,gBAAgB;gBACnD,oBAAoB;aACrB;YACH,CAAC,CAAC,EAAE,CAAC;QACP,kBAAkB,EAAE,OAAO,CAAC,8BAA8B,IAAI,iBAAiB;QAC/E,UAAU,EAAE,OAAO,CAAC,sBAAsB,IAAI,YAAY;QAC1D,QAAQ,EAAE,oBAAoB;YAC5B,CAAC,CAAC,mBAAmB;YACrB,CAAC,CAAC,OAAO,CAAC,0BAA0B;gBAClC,CAAC,CAAC,mBAAmB;gBACrB,CAAC,CAAC,UAAU;KACjB,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC"}
1
+ {"version":3,"file":"auth-discovery.js","sourceRoot":"","sources":["../../src/routes/auth-discovery.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAmB,MAAM,6BAA6B,CAAC;AAClG,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAGlF,qGAAqG;AACrG,MAAM,UAAU,0BAA0B,CACxC,GAAoB,EACpB,GAAmB,EACnB,GAAQ,EACR,OAAuB,EACvB,GAAe;IAEf,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,UAAU,IAAI,GAAG,CAAC,QAAQ,KAAK,iBAAiB,CAAC,EAAE,CAAC;QAChG,OAAO,KAAK,CAAC;IACf,CAAC;IACD,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/B,IAAI,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,IAAI,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChE,MAAM,oBAAoB,GAAG,oBAAoB,CAC/C,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAC1D,CAAC;IACF,MAAM,oBAAoB,GACxB,OAAO,CAAC,aAAa,KAAK,SAAS;QACnC,OAAO,CAAC,gBAAgB,KAAK,SAAS;QACtC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC;IACzC,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACtE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;QACjB,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,IAAI;QACb,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,cAAc,EAAE,OAAO,CAAC,0BAA0B,IAAI,IAAI;QAC1D,GAAG,CAAC,oBAAoB;YACtB,CAAC,CAAC;gBACE,yBAAyB,EAAE,OAAO,CAAC,gBAAgB;gBACnD,oBAAoB;aACrB;YACH,CAAC,CAAC,EAAE,CAAC;QACP,kBAAkB,EAAE,OAAO,CAAC,8BAA8B,IAAI,iBAAiB;QAC/E,UAAU,EAAE,OAAO,CAAC,sBAAsB,IAAI,YAAY;QAC1D,QAAQ,EAAE,oBAAoB;YAC5B,CAAC,CAAC,mBAAmB;YACrB,CAAC,CAAC,OAAO,CAAC,0BAA0B;gBAClC,CAAC,CAAC,mBAAmB;gBACrB,CAAC,CAAC,UAAU;KACjB,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,oGAAoG;AACpG,SAAS,gBAAgB,CAAC,KAAyB;IACjD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC;QACH,OAAO,sBAAsB,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/E,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACnE,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACnC,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IACE,GAAG,CAAC,QAAQ,KAAK,QAAQ;QACzB,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,MAAM,KAAK,EAAE;QACjB,GAAG,CAAC,IAAI,KAAK,EAAE,EACf,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;IAClD,MAAM,qBAAqB,GAAG,OAAO,KAAK,EAAE,IAAI,UAAU,KAAK,GAAG,KAAK,GAAG,CAAC;IAC3E,IAAI,UAAU,KAAK,KAAK,IAAI,CAAC,qBAAqB;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC3F,OAAO,KAAK,CAAC;AACf,CAAC"}
@@ -0,0 +1,181 @@
1
+ import { z } from 'zod';
2
+ import type { ConfigSource } from '../config-value-projection.js';
3
+ export declare const ConfigSourceSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
4
+ kind: z.ZodLiteral<"organization">;
5
+ organizationId: z.ZodString;
6
+ }, z.core.$strict>, z.ZodObject<{
7
+ kind: z.ZodLiteral<"app">;
8
+ organizationId: z.ZodString;
9
+ appId: z.ZodString;
10
+ }, z.core.$strict>, z.ZodObject<{
11
+ kind: z.ZodLiteral<"environment">;
12
+ organizationId: z.ZodString;
13
+ appId: z.ZodString;
14
+ environmentId: z.ZodString;
15
+ environmentName: z.ZodString;
16
+ isProduction: z.ZodBoolean;
17
+ }, z.core.$strict>], "kind">;
18
+ export declare const EffectiveSecretConfigRowSchema: z.ZodObject<{
19
+ name: z.ZodString;
20
+ source: z.ZodDiscriminatedUnion<[z.ZodObject<{
21
+ kind: z.ZodLiteral<"organization">;
22
+ organizationId: z.ZodString;
23
+ }, z.core.$strict>, z.ZodObject<{
24
+ kind: z.ZodLiteral<"app">;
25
+ organizationId: z.ZodString;
26
+ appId: z.ZodString;
27
+ }, z.core.$strict>, z.ZodObject<{
28
+ kind: z.ZodLiteral<"environment">;
29
+ organizationId: z.ZodString;
30
+ appId: z.ZodString;
31
+ environmentId: z.ZodString;
32
+ environmentName: z.ZodString;
33
+ isProduction: z.ZodBoolean;
34
+ }, z.core.$strict>], "kind">;
35
+ fallbackSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
36
+ kind: z.ZodLiteral<"organization">;
37
+ organizationId: z.ZodString;
38
+ }, z.core.$strict>, z.ZodObject<{
39
+ kind: z.ZodLiteral<"app">;
40
+ organizationId: z.ZodString;
41
+ appId: z.ZodString;
42
+ }, z.core.$strict>, z.ZodObject<{
43
+ kind: z.ZodLiteral<"environment">;
44
+ organizationId: z.ZodString;
45
+ appId: z.ZodString;
46
+ environmentId: z.ZodString;
47
+ environmentName: z.ZodString;
48
+ isProduction: z.ZodBoolean;
49
+ }, z.core.$strict>], "kind">>;
50
+ }, z.core.$strict>;
51
+ export declare const EffectiveVariableConfigRowSchema: z.ZodObject<{
52
+ name: z.ZodString;
53
+ source: z.ZodDiscriminatedUnion<[z.ZodObject<{
54
+ kind: z.ZodLiteral<"organization">;
55
+ organizationId: z.ZodString;
56
+ }, z.core.$strict>, z.ZodObject<{
57
+ kind: z.ZodLiteral<"app">;
58
+ organizationId: z.ZodString;
59
+ appId: z.ZodString;
60
+ }, z.core.$strict>, z.ZodObject<{
61
+ kind: z.ZodLiteral<"environment">;
62
+ organizationId: z.ZodString;
63
+ appId: z.ZodString;
64
+ environmentId: z.ZodString;
65
+ environmentName: z.ZodString;
66
+ isProduction: z.ZodBoolean;
67
+ }, z.core.$strict>], "kind">;
68
+ fallbackSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
69
+ kind: z.ZodLiteral<"organization">;
70
+ organizationId: z.ZodString;
71
+ }, z.core.$strict>, z.ZodObject<{
72
+ kind: z.ZodLiteral<"app">;
73
+ organizationId: z.ZodString;
74
+ appId: z.ZodString;
75
+ }, z.core.$strict>, z.ZodObject<{
76
+ kind: z.ZodLiteral<"environment">;
77
+ organizationId: z.ZodString;
78
+ appId: z.ZodString;
79
+ environmentId: z.ZodString;
80
+ environmentName: z.ZodString;
81
+ isProduction: z.ZodBoolean;
82
+ }, z.core.$strict>], "kind">>;
83
+ value: z.ZodString;
84
+ }, z.core.$strict>;
85
+ export declare const EffectiveConfigResponseSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
86
+ environment: z.ZodObject<{
87
+ id: z.ZodString;
88
+ name: z.ZodString;
89
+ isProduction: z.ZodBoolean;
90
+ }, z.core.$strict>;
91
+ capabilities: z.ZodObject<{
92
+ canManage: z.ZodBoolean;
93
+ canReveal: z.ZodBoolean;
94
+ }, z.core.$strict>;
95
+ kind: z.ZodLiteral<"secret">;
96
+ entries: z.ZodArray<z.ZodObject<{
97
+ name: z.ZodString;
98
+ source: z.ZodDiscriminatedUnion<[z.ZodObject<{
99
+ kind: z.ZodLiteral<"organization">;
100
+ organizationId: z.ZodString;
101
+ }, z.core.$strict>, z.ZodObject<{
102
+ kind: z.ZodLiteral<"app">;
103
+ organizationId: z.ZodString;
104
+ appId: z.ZodString;
105
+ }, z.core.$strict>, z.ZodObject<{
106
+ kind: z.ZodLiteral<"environment">;
107
+ organizationId: z.ZodString;
108
+ appId: z.ZodString;
109
+ environmentId: z.ZodString;
110
+ environmentName: z.ZodString;
111
+ isProduction: z.ZodBoolean;
112
+ }, z.core.$strict>], "kind">;
113
+ fallbackSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
114
+ kind: z.ZodLiteral<"organization">;
115
+ organizationId: z.ZodString;
116
+ }, z.core.$strict>, z.ZodObject<{
117
+ kind: z.ZodLiteral<"app">;
118
+ organizationId: z.ZodString;
119
+ appId: z.ZodString;
120
+ }, z.core.$strict>, z.ZodObject<{
121
+ kind: z.ZodLiteral<"environment">;
122
+ organizationId: z.ZodString;
123
+ appId: z.ZodString;
124
+ environmentId: z.ZodString;
125
+ environmentName: z.ZodString;
126
+ isProduction: z.ZodBoolean;
127
+ }, z.core.$strict>], "kind">>;
128
+ }, z.core.$strict>>;
129
+ }, z.core.$strict>, z.ZodObject<{
130
+ environment: z.ZodObject<{
131
+ id: z.ZodString;
132
+ name: z.ZodString;
133
+ isProduction: z.ZodBoolean;
134
+ }, z.core.$strict>;
135
+ capabilities: z.ZodObject<{
136
+ canManage: z.ZodBoolean;
137
+ canReveal: z.ZodBoolean;
138
+ }, z.core.$strict>;
139
+ kind: z.ZodLiteral<"variable">;
140
+ entries: z.ZodArray<z.ZodObject<{
141
+ name: z.ZodString;
142
+ source: z.ZodDiscriminatedUnion<[z.ZodObject<{
143
+ kind: z.ZodLiteral<"organization">;
144
+ organizationId: z.ZodString;
145
+ }, z.core.$strict>, z.ZodObject<{
146
+ kind: z.ZodLiteral<"app">;
147
+ organizationId: z.ZodString;
148
+ appId: z.ZodString;
149
+ }, z.core.$strict>, z.ZodObject<{
150
+ kind: z.ZodLiteral<"environment">;
151
+ organizationId: z.ZodString;
152
+ appId: z.ZodString;
153
+ environmentId: z.ZodString;
154
+ environmentName: z.ZodString;
155
+ isProduction: z.ZodBoolean;
156
+ }, z.core.$strict>], "kind">;
157
+ fallbackSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
158
+ kind: z.ZodLiteral<"organization">;
159
+ organizationId: z.ZodString;
160
+ }, z.core.$strict>, z.ZodObject<{
161
+ kind: z.ZodLiteral<"app">;
162
+ organizationId: z.ZodString;
163
+ appId: z.ZodString;
164
+ }, z.core.$strict>, z.ZodObject<{
165
+ kind: z.ZodLiteral<"environment">;
166
+ organizationId: z.ZodString;
167
+ appId: z.ZodString;
168
+ environmentId: z.ZodString;
169
+ environmentName: z.ZodString;
170
+ isProduction: z.ZodBoolean;
171
+ }, z.core.$strict>], "kind">>;
172
+ value: z.ZodString;
173
+ }, z.core.$strict>>;
174
+ }, z.core.$strict>], "kind">;
175
+ export type RevealSecretResponse = {
176
+ readonly ok: true;
177
+ readonly value: string;
178
+ readonly source: ConfigSource;
179
+ };
180
+ export declare const RevealSecretResponseSchema: z.ZodType<RevealSecretResponse>;
181
+ //# sourceMappingURL=config-contracts.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"config-contracts.d.ts","sourceRoot":"","sources":["../../src/routes/config-contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAElE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;4BAa7B,CAAC;AAUH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAA+B,CAAC;AAE3E,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAElC,CAAC;AASZ,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BASxC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;CAC/B,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAM5D,CAAC"}
@@ -0,0 +1,50 @@
1
+ import { z } from 'zod';
2
+ export const ConfigSourceSchema = z.discriminatedUnion('kind', [
3
+ z.object({ kind: z.literal('organization'), organizationId: z.string() }).strict(),
4
+ z.object({ kind: z.literal('app'), organizationId: z.string(), appId: z.string() }).strict(),
5
+ z
6
+ .object({
7
+ kind: z.literal('environment'),
8
+ organizationId: z.string(),
9
+ appId: z.string(),
10
+ environmentId: z.string(),
11
+ environmentName: z.string(),
12
+ isProduction: z.boolean(),
13
+ })
14
+ .strict(),
15
+ ]);
16
+ const EffectiveConfigRowBaseSchema = z
17
+ .object({
18
+ name: z.string(),
19
+ source: ConfigSourceSchema,
20
+ fallbackSource: ConfigSourceSchema.optional(),
21
+ })
22
+ .strict();
23
+ export const EffectiveSecretConfigRowSchema = EffectiveConfigRowBaseSchema;
24
+ export const EffectiveVariableConfigRowSchema = EffectiveConfigRowBaseSchema.extend({
25
+ value: z.string(),
26
+ }).strict();
27
+ const EffectiveConfigResponseBaseSchema = z
28
+ .object({
29
+ environment: z.object({ id: z.string(), name: z.string(), isProduction: z.boolean() }).strict(),
30
+ capabilities: z.object({ canManage: z.boolean(), canReveal: z.boolean() }).strict(),
31
+ })
32
+ .strict();
33
+ export const EffectiveConfigResponseSchema = z.discriminatedUnion('kind', [
34
+ EffectiveConfigResponseBaseSchema.extend({
35
+ kind: z.literal('secret'),
36
+ entries: z.array(EffectiveSecretConfigRowSchema),
37
+ }).strict(),
38
+ EffectiveConfigResponseBaseSchema.extend({
39
+ kind: z.literal('variable'),
40
+ entries: z.array(EffectiveVariableConfigRowSchema),
41
+ }).strict(),
42
+ ]);
43
+ export const RevealSecretResponseSchema = z
44
+ .object({
45
+ ok: z.literal(true),
46
+ value: z.string(),
47
+ source: ConfigSourceSchema,
48
+ })
49
+ .strict();
50
+ //# sourceMappingURL=config-contracts.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"config-contracts.js","sourceRoot":"","sources":["../../src/routes/config-contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC7D,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAClF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAC5F,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QAC9B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;QAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;QACzB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;QAC3B,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;KAC1B,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAC;AAEH,MAAM,4BAA4B,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,kBAAkB;IAC1B,cAAc,EAAE,kBAAkB,CAAC,QAAQ,EAAE;CAC9C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,8BAA8B,GAAG,4BAA4B,CAAC;AAE3E,MAAM,CAAC,MAAM,gCAAgC,GAAG,4BAA4B,CAAC,MAAM,CAAC;IAClF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,iCAAiC,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAC/F,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;CACpF,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACxE,iCAAiC,CAAC,MAAM,CAAC;QACvC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC;KACjD,CAAC,CAAC,MAAM,EAAE;IACX,iCAAiC,CAAC,MAAM,CAAC;QACvC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC3B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,gCAAgC,CAAC;KACnD,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC;AAQH,MAAM,CAAC,MAAM,0BAA0B,GAAoC,CAAC;KACzE,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,MAAM,EAAE,kBAAkB;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC"}
@@ -0,0 +1,20 @@
1
+ import type { IncomingMessage, ServerResponse } from 'node:http';
2
+ import type { TlsPosture } from '@noodle-borg/transport-http';
3
+ import type { DeployAuthGate } from '../auth/deploy-gate.js';
4
+ import type { ServerRegistry } from '../registry.js';
5
+ import type { AuditSink } from '../store/audit.js';
6
+ import type { ConfigStore, ControlPlaneStore } from '../store.js';
7
+ export interface ConfigValueDispatchDeps {
8
+ readonly gate: DeployAuthGate;
9
+ readonly controlPlane: ControlPlaneStore;
10
+ readonly configStore: ConfigStore;
11
+ readonly registry: ServerRegistry;
12
+ readonly maxBody: number;
13
+ readonly audit: AuditSink;
14
+ readonly applySecurityHeaders: (res: ServerResponse, tls: TlsPosture) => void;
15
+ readonly enforceHttps: (req: IncomingMessage, res: ServerResponse, tls: TlsPosture) => boolean;
16
+ readonly sendJson: (res: ServerResponse, status: number, body: unknown) => void;
17
+ readonly tls: TlsPosture;
18
+ }
19
+ export declare function dispatchConfigValueRequest(req: IncomingMessage, res: ServerResponse, url: URL, deps: ConfigValueDispatchDeps): boolean;
20
+ //# sourceMappingURL=config-values-dispatch.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"config-values-dispatch.d.ts","sourceRoot":"","sources":["../../src/routes/config-values-dispatch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAIlE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,oBAAoB,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,KAAK,IAAI,CAAC;IAC9E,QAAQ,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,KAAK,OAAO,CAAC;IAC/F,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IAChF,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;CAC1B;AAED,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,uBAAuB,GAC5B,OAAO,CAiCT"}
@@ -0,0 +1,37 @@
1
+ import { handleConfigValues } from './config-values.js';
2
+ import { parseConfigPath } from './config-values-paths.js';
3
+ export function dispatchConfigValueRequest(req, res, url, deps) {
4
+ const ref = parseConfigPath(url.pathname, url.searchParams);
5
+ if (ref === undefined)
6
+ return false;
7
+ if (ref.reveal)
8
+ res.setHeader('Cache-Control', 'no-store');
9
+ if (ref.reveal && ref.invalid !== undefined) {
10
+ deps.applySecurityHeaders(res, deps.tls);
11
+ if (deps.enforceHttps(req, res, deps.tls))
12
+ return true;
13
+ deps.sendJson(res, 400, { error: ref.invalid });
14
+ return true;
15
+ }
16
+ if (ref.reveal && req.method !== 'POST') {
17
+ deps.applySecurityHeaders(res, deps.tls);
18
+ if (deps.enforceHttps(req, res, deps.tls))
19
+ return true;
20
+ deps.sendJson(res, 404, { error: 'not found' });
21
+ return true;
22
+ }
23
+ if (!ref.reveal && !isConfigMethod(req.method))
24
+ return false;
25
+ deps.applySecurityHeaders(res, deps.tls);
26
+ if (deps.enforceHttps(req, res, deps.tls))
27
+ return true;
28
+ handleConfigValues(req, res, deps.gate, deps.controlPlane, deps.configStore, deps.registry, deps.maxBody, ref, deps.audit).catch(() => {
29
+ if (!res.headersSent)
30
+ deps.sendJson(res, 500, { error: 'internal error' });
31
+ });
32
+ return true;
33
+ }
34
+ function isConfigMethod(method) {
35
+ return method === 'GET' || method === 'PUT' || method === 'DELETE';
36
+ }
37
+ //# sourceMappingURL=config-values-dispatch.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"config-values-dispatch.js","sourceRoot":"","sources":["../../src/routes/config-values-dispatch.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAe3D,MAAM,UAAU,0BAA0B,CACxC,GAAoB,EACpB,GAAmB,EACnB,GAAQ,EACR,IAA6B;IAE7B,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;IAC5D,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,GAAG,CAAC,MAAM;QAAE,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IAC3D,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC5C,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACvD,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACxC,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACvD,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,kBAAkB,CAChB,GAAG,EACH,GAAG,EACH,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,OAAO,EACZ,GAAG,EACH,IAAI,CAAC,KAAK,CACX,CAAC,KAAK,CAAC,GAAG,EAAE;QACX,IAAI,CAAC,GAAG,CAAC,WAAW;YAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,MAA0B;IAChD,OAAO,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,QAAQ,CAAC;AACrE,CAAC"}
@@ -0,0 +1,12 @@
1
+ import { type ConfigScope, type ManagedConfigKind } from '../store.js';
2
+ export interface ConfigRouteRef {
3
+ readonly kind: ManagedConfigKind;
4
+ readonly scope: ConfigScope;
5
+ readonly name?: string;
6
+ readonly effective?: boolean;
7
+ readonly reveal?: boolean;
8
+ readonly invalid?: string;
9
+ }
10
+ export declare function parseConfigPath(pathname: string, searchParams?: URLSearchParams): ConfigRouteRef | undefined;
11
+ export declare function configRouteRef(kind: ManagedConfigKind, scope: ConfigScope, encodedName: string | undefined, searchParams?: URLSearchParams, reveal?: boolean): ConfigRouteRef | undefined;
12
+ //# sourceMappingURL=config-values-paths.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"config-values-paths.d.ts","sourceRoot":"","sources":["../../src/routes/config-values-paths.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,iBAAiB,EAGvB,MAAM,aAAa,CAAC;AAErB,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,YAAY,CAAC,EAAE,eAAe,GAC7B,cAAc,GAAG,SAAS,CAyD5B;AA+BD,wBAAgB,cAAc,CAC5B,IAAI,EAAE,iBAAiB,EACvB,KAAK,EAAE,WAAW,EAClB,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,YAAY,CAAC,EAAE,eAAe,EAC9B,MAAM,UAAQ,GACb,cAAc,GAAG,SAAS,CAoB5B"}
@@ -0,0 +1,88 @@
1
+ import { validateConfigName, validateConfigScope, } from '../store.js';
2
+ export function parseConfigPath(pathname, searchParams) {
3
+ const kindPattern = '(secrets|variables)';
4
+ const reveal = /^\/v1\/orgs\/([^/]+)\/apps\/([^/]+)\/envs\/([^/]+)\/secrets\/([^/]+)\/reveal$/.exec(pathname);
5
+ if (reveal) {
6
+ return encodedConfigRouteRef('secret', {
7
+ level: 'env',
8
+ org: reveal[1],
9
+ app: reveal[2],
10
+ env: reveal[3],
11
+ }, reveal[4], undefined, true);
12
+ }
13
+ const org = new RegExp(`^/v1/orgs/([^/]+)/${kindPattern}(?:/([^/]+))?$`).exec(pathname);
14
+ if (org) {
15
+ return encodedConfigRouteRef(org[2] === 'secrets' ? 'secret' : 'variable', { level: 'org', org: org[1] }, org[3], searchParams);
16
+ }
17
+ const app = new RegExp(`^/v1/orgs/([^/]+)/apps/([^/]+)/${kindPattern}(?:/([^/]+))?$`).exec(pathname);
18
+ if (app) {
19
+ return encodedConfigRouteRef(app[3] === 'secrets' ? 'secret' : 'variable', {
20
+ level: 'app',
21
+ org: app[1],
22
+ app: app[2],
23
+ }, app[4], searchParams);
24
+ }
25
+ const env = new RegExp(`^/v1/orgs/([^/]+)/apps/([^/]+)/envs/([^/]+)/${kindPattern}(?:/([^/]+))?$`).exec(pathname);
26
+ if (!env)
27
+ return undefined;
28
+ return encodedConfigRouteRef(env[4] === 'secrets' ? 'secret' : 'variable', {
29
+ level: 'env',
30
+ org: env[1],
31
+ app: env[2],
32
+ env: env[3],
33
+ }, env[5], searchParams);
34
+ }
35
+ function encodedConfigRouteRef(kind, encodedScope, encodedName, searchParams, reveal = false) {
36
+ try {
37
+ const scope = encodedScope.level === 'org'
38
+ ? { level: 'org', org: decodeURIComponent(encodedScope.org) }
39
+ : encodedScope.level === 'app'
40
+ ? {
41
+ level: 'app',
42
+ org: decodeURIComponent(encodedScope.org),
43
+ app: decodeURIComponent(encodedScope.app),
44
+ }
45
+ : {
46
+ level: 'env',
47
+ org: decodeURIComponent(encodedScope.org),
48
+ app: decodeURIComponent(encodedScope.app),
49
+ env: decodeURIComponent(encodedScope.env),
50
+ };
51
+ return configRouteRef(kind, scope, encodedName, searchParams, reveal);
52
+ }
53
+ catch {
54
+ return invalidConfigRouteRef(kind, encodedName, reveal);
55
+ }
56
+ }
57
+ export function configRouteRef(kind, scope, encodedName, searchParams, reveal = false) {
58
+ let safeScope;
59
+ try {
60
+ safeScope = validateConfigScope(scope);
61
+ }
62
+ catch {
63
+ return invalidConfigRouteRef(kind, encodedName, reveal);
64
+ }
65
+ try {
66
+ const name = encodedName !== undefined ? validateConfigName(decodeURIComponent(encodedName)) : undefined;
67
+ return {
68
+ kind,
69
+ scope: safeScope,
70
+ ...(name !== undefined ? { name } : {}),
71
+ ...(searchParams?.get('view') === 'effective' ? { effective: true } : {}),
72
+ ...(reveal ? { reveal: true } : {}),
73
+ };
74
+ }
75
+ catch {
76
+ return invalidConfigRouteRef(kind, encodedName, reveal, safeScope);
77
+ }
78
+ }
79
+ function invalidConfigRouteRef(kind, encodedName, reveal, scope = { level: 'org', org: '__invalid__' }) {
80
+ return {
81
+ kind,
82
+ scope,
83
+ ...(encodedName !== undefined ? { name: '__invalid__' } : {}),
84
+ ...(reveal ? { reveal: true } : {}),
85
+ invalid: 'invalid config scope or name',
86
+ };
87
+ }
88
+ //# sourceMappingURL=config-values-paths.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"config-values-paths.js","sourceRoot":"","sources":["../../src/routes/config-values-paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAWrB,MAAM,UAAU,eAAe,CAC7B,QAAgB,EAChB,YAA8B;IAE9B,MAAM,WAAW,GAAG,qBAAqB,CAAC;IAC1C,MAAM,MAAM,GACV,+EAA+E,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjG,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,qBAAqB,CAC1B,QAAQ,EACR;YACE,KAAK,EAAE,KAAK;YACZ,GAAG,EAAE,MAAM,CAAC,CAAC,CAAW;YACxB,GAAG,EAAE,MAAM,CAAC,CAAC,CAAW;YACxB,GAAG,EAAE,MAAM,CAAC,CAAC,CAAW;SACzB,EACD,MAAM,CAAC,CAAC,CAAC,EACT,SAAS,EACT,IAAI,CACL,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,qBAAqB,WAAW,gBAAgB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxF,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,qBAAqB,CAC1B,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,EAC5C,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAW,EAAE,EACvC,GAAG,CAAC,CAAC,CAAC,EACN,YAAY,CACb,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,kCAAkC,WAAW,gBAAgB,CAAC,CAAC,IAAI,CACxF,QAAQ,CACT,CAAC;IACF,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,qBAAqB,CAC1B,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,EAC5C;YACE,KAAK,EAAE,KAAK;YACZ,GAAG,EAAE,GAAG,CAAC,CAAC,CAAW;YACrB,GAAG,EAAE,GAAG,CAAC,CAAC,CAAW;SACtB,EACD,GAAG,CAAC,CAAC,CAAC,EACN,YAAY,CACb,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,MAAM,CACpB,+CAA+C,WAAW,gBAAgB,CAC3E,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjB,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAO,qBAAqB,CAC1B,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,EAC5C;QACE,KAAK,EAAE,KAAK;QACZ,GAAG,EAAE,GAAG,CAAC,CAAC,CAAW;QACrB,GAAG,EAAE,GAAG,CAAC,CAAC,CAAW;QACrB,GAAG,EAAE,GAAG,CAAC,CAAC,CAAW;KACtB,EACD,GAAG,CAAC,CAAC,CAAC,EACN,YAAY,CACb,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,IAAuB,EACvB,YAAyB,EACzB,WAA+B,EAC/B,YAA8B,EAC9B,MAAM,GAAG,KAAK;IAEd,IAAI,CAAC;QACH,MAAM,KAAK,GACT,YAAY,CAAC,KAAK,KAAK,KAAK;YAC1B,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,kBAAkB,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE;YAC7D,CAAC,CAAC,YAAY,CAAC,KAAK,KAAK,KAAK;gBAC5B,CAAC,CAAC;oBACE,KAAK,EAAE,KAAK;oBACZ,GAAG,EAAE,kBAAkB,CAAC,YAAY,CAAC,GAAG,CAAC;oBACzC,GAAG,EAAE,kBAAkB,CAAC,YAAY,CAAC,GAAG,CAAC;iBAC1C;gBACH,CAAC,CAAC;oBACE,KAAK,EAAE,KAAK;oBACZ,GAAG,EAAE,kBAAkB,CAAC,YAAY,CAAC,GAAG,CAAC;oBACzC,GAAG,EAAE,kBAAkB,CAAC,YAAY,CAAC,GAAG,CAAC;oBACzC,GAAG,EAAE,kBAAkB,CAAC,YAAY,CAAC,GAAG,CAAC;iBAC1C,CAAC;QACV,OAAO,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,qBAAqB,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,IAAuB,EACvB,KAAkB,EAClB,WAA+B,EAC/B,YAA8B,EAC9B,MAAM,GAAG,KAAK;IAEd,IAAI,SAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,qBAAqB,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GACR,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9F,OAAO;YACL,IAAI;YACJ,KAAK,EAAE,SAAS;YAChB,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,qBAAqB,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC5B,IAAuB,EACvB,WAA+B,EAC/B,MAAe,EACf,QAAqB,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,aAAa,EAAE;IAEzD,OAAO;QACL,IAAI;QACJ,KAAK;QACL,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,8BAA8B;KACxC,CAAC;AACJ,CAAC"}
@@ -0,0 +1,8 @@
1
+ import type { IncomingMessage, ServerResponse } from 'node:http';
2
+ import type { DeployAuthGate } from '../auth/deploy-gate.js';
3
+ import type { ServerRegistry } from '../registry.js';
4
+ import type { AuditSink } from '../store/audit.js';
5
+ import type { ConfigStore, ControlPlaneStore } from '../store.js';
6
+ import type { ConfigRouteRef } from './config-values-paths.js';
7
+ export declare function handleConfigValues(req: IncomingMessage, res: ServerResponse, gate: DeployAuthGate, controlPlane: ControlPlaneStore, configStore: ConfigStore, registry: ServerRegistry, maxBody: number, ref: ConfigRouteRef, audit: AuditSink): Promise<void>;
8
+ //# sourceMappingURL=config-values.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"config-values.d.ts","sourceRoot":"","sources":["../../src/routes/config-values.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,KAAK,EAAwB,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAMnF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAElE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG/D,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,cAAc,EACpB,YAAY,EAAE,iBAAiB,EAC/B,WAAW,EAAE,WAAW,EACxB,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,SAAS,GACf,OAAO,CAAC,IAAI,CAAC,CAuEf"}