@noodleseed/one 0.70.1 → 0.72.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/auth-discovery.d.ts +2 -0
- package/dist/auth-discovery.d.ts.map +1 -1
- package/dist/auth-discovery.js +63 -4
- package/dist/auth-discovery.js.map +1 -1
- package/dist/commands/auth-google-ops.d.ts +3 -0
- package/dist/commands/auth-google-ops.d.ts.map +1 -0
- package/dist/commands/auth-google-ops.js +198 -0
- package/dist/commands/auth-google-ops.js.map +1 -0
- package/dist/commands/auth-ops.d.ts.map +1 -1
- package/dist/commands/auth-ops.js +5 -1
- package/dist/commands/auth-ops.js.map +1 -1
- package/dist/commands/catalog-data-config.d.ts.map +1 -1
- package/dist/commands/catalog-data-config.js +10 -1
- package/dist/commands/catalog-data-config.js.map +1 -1
- package/dist/commands/catalog-data-core.d.ts.map +1 -1
- package/dist/commands/catalog-data-core.js +17 -1
- package/dist/commands/catalog-data-core.js.map +1 -1
- package/dist/commands/catalog-data-resources.d.ts.map +1 -1
- package/dist/commands/catalog-data-resources.js +5 -5
- package/dist/commands/catalog-data-resources.js.map +1 -1
- package/dist/commands/config-values.d.ts +10 -2
- package/dist/commands/config-values.d.ts.map +1 -1
- package/dist/commands/config-values.js +81 -1
- package/dist/commands/config-values.js.map +1 -1
- package/dist/deploy.js +1 -1
- package/dist/deploy.js.map +1 -1
- package/dist/index.d.ts +1 -1
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +1 -1
- package/dist/index.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/curated/command-groups.js +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/curated/command-groups.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/generated/example-files.d.ts.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/generated/example-files.js +8 -1
- package/node_modules/@noodle-borg/agent-kit/dist/generated/example-files.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/generated/surface.d.ts.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/generated/surface.js +1 -0
- package/node_modules/@noodle-borg/agent-kit/dist/generated/surface.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-refs.d.ts.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-refs.js +5 -1
- package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-refs.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/skill-content.d.ts.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/skill-content.js +7 -1
- package/node_modules/@noodle-borg/agent-kit/dist/skill-content.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/skill-feedback-ref.js +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/skill-feedback-ref.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/package.json +1 -1
- package/node_modules/@noodle-borg/auth/dist/jwt-issuer.d.ts +2 -0
- package/node_modules/@noodle-borg/auth/dist/jwt-issuer.d.ts.map +1 -1
- package/node_modules/@noodle-borg/auth/dist/jwt-issuer.js +1 -0
- package/node_modules/@noodle-borg/auth/dist/jwt-issuer.js.map +1 -1
- package/node_modules/@noodle-borg/auth/dist/verify.d.ts +2 -0
- package/node_modules/@noodle-borg/auth/dist/verify.d.ts.map +1 -1
- package/node_modules/@noodle-borg/auth/dist/verify.js +16 -0
- package/node_modules/@noodle-borg/auth/dist/verify.js.map +1 -1
- package/node_modules/@noodle-borg/authoring/dist/connection-types.d.ts +23 -0
- package/node_modules/@noodle-borg/authoring/dist/connection-types.d.ts.map +1 -1
- package/node_modules/@noodle-borg/authoring/dist/connection-types.js +16 -0
- package/node_modules/@noodle-borg/authoring/dist/connection-types.js.map +1 -1
- package/node_modules/@noodle-borg/authoring/dist/connections.d.ts +2 -2
- package/node_modules/@noodle-borg/authoring/dist/connections.d.ts.map +1 -1
- package/node_modules/@noodle-borg/authoring/dist/connections.js +13 -2
- package/node_modules/@noodle-borg/authoring/dist/connections.js.map +1 -1
- package/node_modules/@noodle-borg/authoring/dist/index.d.ts +1 -1
- package/node_modules/@noodle-borg/authoring/dist/index.d.ts.map +1 -1
- package/node_modules/@noodle-borg/authoring/dist/index.js +1 -1
- package/node_modules/@noodle-borg/authoring/dist/index.js.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/artifact/config.d.ts +2 -2
- package/node_modules/@noodle-borg/compiler/dist/artifact/config.d.ts.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/artifact/config.js +22 -1
- package/node_modules/@noodle-borg/compiler/dist/artifact/config.js.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/artifact/types.d.ts +9 -0
- package/node_modules/@noodle-borg/compiler/dist/artifact/types.d.ts.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/compile.d.ts.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/compile.js +1 -1
- package/node_modules/@noodle-borg/compiler/dist/compile.js.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/fulfilment-emit.d.ts.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/fulfilment-emit.js +49 -0
- package/node_modules/@noodle-borg/compiler/dist/fulfilment-emit.js.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/manifest/schema.d.ts +18 -0
- package/node_modules/@noodle-borg/compiler/dist/manifest/schema.d.ts.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/manifest/schema.js +15 -0
- package/node_modules/@noodle-borg/compiler/dist/manifest/schema.js.map +1 -1
- package/node_modules/@noodle-borg/runtime/dist/broker/types.d.ts +3 -1
- package/node_modules/@noodle-borg/runtime/dist/broker/types.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/auth/deploy-gate.d.ts +3 -0
- package/node_modules/@noodle-borg/service/dist/auth/deploy-gate.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/auth/deploy-gate.js +1 -0
- package/node_modules/@noodle-borg/service/dist/auth/deploy-gate.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/config-value-projection.d.ts +58 -0
- package/node_modules/@noodle-borg/service/dist/config-value-projection.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/config-value-projection.js +40 -0
- package/node_modules/@noodle-borg/service/dist/config-value-projection.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/credential-binding-index.d.ts +1 -0
- package/node_modules/@noodle-borg/service/dist/credential-binding-index.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/credential-binding-index.js +10 -2
- package/node_modules/@noodle-borg/service/dist/credential-binding-index.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/credential-broker-options.d.ts +3 -0
- package/node_modules/@noodle-borg/service/dist/credential-broker-options.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/credential-broker-options.js +9 -0
- package/node_modules/@noodle-borg/service/dist/credential-broker-options.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/credential-broker.d.ts +5 -2
- package/node_modules/@noodle-borg/service/dist/credential-broker.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/credential-broker.js +29 -0
- package/node_modules/@noodle-borg/service/dist/credential-broker.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-postgres.d.ts +21 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-postgres.js +195 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-probe.d.ts +10 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-probe.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-probe.js +47 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-probe.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-store.d.ts +46 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-store.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-store.js +88 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-store.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-validation.d.ts +4 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-validation.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-validation.js +13 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-validation.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity.d.ts +38 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity.js +289 -0
- package/node_modules/@noodle-borg/service/dist/google-workload-identity.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/index.d.ts +3 -0
- package/node_modules/@noodle-borg/service/dist/index.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/index.js +3 -0
- package/node_modules/@noodle-borg/service/dist/index.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/app.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/app.js +11 -0
- package/node_modules/@noodle-borg/service/dist/oauth/app.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/authorization-initiation.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/authorization-initiation.js +4 -0
- package/node_modules/@noodle-borg/service/dist/oauth/authorization-initiation.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/consent-claims.d.ts +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/consent-claims.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/consent-claims.js +10 -0
- package/node_modules/@noodle-borg/service/dist/oauth/consent-claims.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/developer-grant-flow.d.ts +3 -1
- package/node_modules/@noodle-borg/service/dist/oauth/developer-grant-flow.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/developer-grant-flow.js +2 -0
- package/node_modules/@noodle-borg/service/dist/oauth/developer-grant-flow.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/fresh-auth.d.ts +6 -0
- package/node_modules/@noodle-borg/service/dist/oauth/fresh-auth.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/fresh-auth.js +14 -0
- package/node_modules/@noodle-borg/service/dist/oauth/fresh-auth.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/google.d.ts +3 -2
- package/node_modules/@noodle-borg/service/dist/oauth/google.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/google.js +8 -4
- package/node_modules/@noodle-borg/service/dist/oauth/google.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/paths.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/paths.js +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/paths.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/provider.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/provider.js +7 -2
- package/node_modules/@noodle-borg/service/dist/oauth/provider.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/store-postgres-schema.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/store-postgres-schema.js +4 -0
- package/node_modules/@noodle-borg/service/dist/oauth/store-postgres-schema.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/store-postgres.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/store-postgres.js +36 -12
- package/node_modules/@noodle-borg/service/dist/oauth/store-postgres.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/store.d.ts +3 -0
- package/node_modules/@noodle-borg/service/dist/oauth/store.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/store.js +19 -7
- package/node_modules/@noodle-borg/service/dist/oauth/store.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/token-issuer.d.ts +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/token-issuer.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/token-issuer.js +13 -5
- package/node_modules/@noodle-borg/service/dist/oauth/token-issuer.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-callback-handler.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-callback-handler.js +5 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-callback-handler.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-consent.d.ts +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-consent.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-consent.js +33 -21
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-consent.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-federation.d.ts +2 -1
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-federation.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-federation.js +2 -2
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-federation.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-human.d.ts +4 -1
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-human.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-human.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-provider-choice.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-provider-choice.js +4 -0
- package/node_modules/@noodle-borg/service/dist/oauth/upstream-provider-choice.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/workos.d.ts +4 -2
- package/node_modules/@noodle-borg/service/dist/oauth/workos.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/workos.js +5 -3
- package/node_modules/@noodle-borg/service/dist/oauth/workos.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/options.d.ts +8 -0
- package/node_modules/@noodle-borg/service/dist/options.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/registry-types.d.ts +3 -0
- package/node_modules/@noodle-borg/service/dist/registry-types.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/registry.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/registry.js +3 -0
- package/node_modules/@noodle-borg/service/dist/registry.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/auth-discovery.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/auth-discovery.js +46 -0
- package/node_modules/@noodle-borg/service/dist/routes/auth-discovery.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/config-contracts.d.ts +181 -0
- package/node_modules/@noodle-borg/service/dist/routes/config-contracts.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/config-contracts.js +50 -0
- package/node_modules/@noodle-borg/service/dist/routes/config-contracts.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/config-values-dispatch.d.ts +20 -0
- package/node_modules/@noodle-borg/service/dist/routes/config-values-dispatch.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/config-values-dispatch.js +37 -0
- package/node_modules/@noodle-borg/service/dist/routes/config-values-dispatch.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/config-values-paths.d.ts +12 -0
- package/node_modules/@noodle-borg/service/dist/routes/config-values-paths.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/config-values-paths.js +88 -0
- package/node_modules/@noodle-borg/service/dist/routes/config-values-paths.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/config-values.d.ts +8 -0
- package/node_modules/@noodle-borg/service/dist/routes/config-values.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/config-values.js +218 -0
- package/node_modules/@noodle-borg/service/dist/routes/config-values.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/control-plane.d.ts +2 -3
- package/node_modules/@noodle-borg/service/dist/routes/control-plane.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/control-plane.js +2 -71
- package/node_modules/@noodle-borg/service/dist/routes/control-plane.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/credential-auth-dispatch.d.ts +25 -0
- package/node_modules/@noodle-borg/service/dist/routes/credential-auth-dispatch.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/credential-auth-dispatch.js +21 -0
- package/node_modules/@noodle-borg/service/dist/routes/credential-auth-dispatch.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity-dispatch.d.ts +14 -0
- package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity-dispatch.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity-dispatch.js +30 -0
- package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity-dispatch.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity.d.ts +19 -0
- package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity.js +105 -0
- package/node_modules/@noodle-borg/service/dist/routes/google-workload-identity.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/paths.d.ts +5 -10
- package/node_modules/@noodle-borg/service/dist/routes/paths.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/paths.js +8 -40
- package/node_modules/@noodle-borg/service/dist/routes/paths.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/serve.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/serve.js +29 -0
- package/node_modules/@noodle-borg/service/dist/serve.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/service.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/service.js +21 -15
- package/node_modules/@noodle-borg/service/dist/service.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/store/config-values.d.ts +57 -0
- package/node_modules/@noodle-borg/service/dist/store/config-values.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/store/config-values.js +98 -0
- package/node_modules/@noodle-borg/service/dist/store/config-values.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/store/postgres-config.d.ts +1 -1
- package/node_modules/@noodle-borg/service/dist/store/postgres-config.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/store/postgres-config.js +22 -3
- package/node_modules/@noodle-borg/service/dist/store/postgres-config.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/store/postgres.d.ts +1 -1
- package/node_modules/@noodle-borg/service/dist/store/postgres.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/store/postgres.js +2 -2
- package/node_modules/@noodle-borg/service/dist/store/postgres.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/store.d.ts +1 -56
- package/node_modules/@noodle-borg/service/dist/store.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/store.js +1 -84
- package/node_modules/@noodle-borg/service/dist/store.js.map +1 -1
- package/package.json +1 -1
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"auth-discovery.d.ts","sourceRoot":"","sources":["../../src/routes/auth-discovery.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAAsC,KAAK,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAElG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,qGAAqG;AACrG,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,cAAc,EACvB,GAAG,EAAE,UAAU,GACd,OAAO,
|
|
1
|
+
{"version":3,"file":"auth-discovery.d.ts","sourceRoot":"","sources":["../../src/routes/auth-discovery.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAAsC,KAAK,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAElG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,qGAAqG;AACrG,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,cAAc,EACvB,GAAG,EAAE,UAAU,GACd,OAAO,CAmCT"}
|
|
@@ -13,9 +13,11 @@ export function dispatchAuthDiscoveryRoute(req, res, url, options, tls) {
|
|
|
13
13
|
const selfHostedOAuthLogin = options.authServerApp !== undefined &&
|
|
14
14
|
options.authServerIssuer !== undefined &&
|
|
15
15
|
options.verifyOwnerToken !== undefined;
|
|
16
|
+
const consoleUrl = httpsConsoleBase(options.invitationConsoleBaseUrl);
|
|
16
17
|
sendJson(res, 200, {
|
|
17
18
|
ok: true,
|
|
18
19
|
service: base,
|
|
20
|
+
...(consoleUrl !== undefined ? { consoleUrl } : {}),
|
|
19
21
|
googleClientId: options.controlPlaneGoogleClientId ?? null,
|
|
20
22
|
...(selfHostedOAuthLogin
|
|
21
23
|
? {
|
|
@@ -33,4 +35,48 @@ export function dispatchAuthDiscoveryRoute(req, res, url, options, tls) {
|
|
|
33
35
|
});
|
|
34
36
|
return true;
|
|
35
37
|
}
|
|
38
|
+
/** Discovery must only advertise a Console destination the CLI can safely hand off to a browser. */
|
|
39
|
+
function httpsConsoleBase(value) {
|
|
40
|
+
if (value === undefined)
|
|
41
|
+
return undefined;
|
|
42
|
+
try {
|
|
43
|
+
return strictHttpsConsoleBase(value);
|
|
44
|
+
}
|
|
45
|
+
catch {
|
|
46
|
+
return undefined;
|
|
47
|
+
}
|
|
48
|
+
}
|
|
49
|
+
function strictHttpsConsoleBase(value) {
|
|
50
|
+
if (value.trim() !== value || !value.startsWith('https://'))
|
|
51
|
+
throw new Error('invalid Console URL');
|
|
52
|
+
const remainder = value.slice('https://'.length);
|
|
53
|
+
const separator = remainder.search(/[/?#]/);
|
|
54
|
+
const authority = separator === -1 ? remainder : remainder.slice(0, separator);
|
|
55
|
+
if (authority.length === 0)
|
|
56
|
+
throw new Error('invalid Console URL');
|
|
57
|
+
const rawRest = separator === -1 ? '' : remainder.slice(separator);
|
|
58
|
+
const rawPath = rawRest.startsWith('/') ? (rawRest.split(/[?#]/, 1)[0] ?? '') : '';
|
|
59
|
+
if (rawPath.includes('//'))
|
|
60
|
+
throw new Error('invalid Console URL');
|
|
61
|
+
for (const segment of rawPath.split('/').slice(1)) {
|
|
62
|
+
if (segment.length === 0)
|
|
63
|
+
continue;
|
|
64
|
+
const decoded = decodeURIComponent(segment);
|
|
65
|
+
if (decoded === '.' || decoded === '..')
|
|
66
|
+
throw new Error('invalid Console URL');
|
|
67
|
+
}
|
|
68
|
+
const url = new URL(value);
|
|
69
|
+
if (url.protocol !== 'https:' ||
|
|
70
|
+
url.username !== '' ||
|
|
71
|
+
url.password !== '' ||
|
|
72
|
+
url.search !== '' ||
|
|
73
|
+
url.hash !== '') {
|
|
74
|
+
throw new Error('invalid Console URL');
|
|
75
|
+
}
|
|
76
|
+
const parsedBase = `${url.origin}${url.pathname}`;
|
|
77
|
+
const rootTrailingSlashOnly = rawPath === '' && parsedBase === `${value}/`;
|
|
78
|
+
if (parsedBase !== value && !rootTrailingSlashOnly)
|
|
79
|
+
throw new Error('invalid Console URL');
|
|
80
|
+
return value;
|
|
81
|
+
}
|
|
36
82
|
//# sourceMappingURL=auth-discovery.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"auth-discovery.js","sourceRoot":"","sources":["../../src/routes/auth-discovery.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAmB,MAAM,6BAA6B,CAAC;AAClG,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAGlF,qGAAqG;AACrG,MAAM,UAAU,0BAA0B,CACxC,GAAoB,EACpB,GAAmB,EACnB,GAAQ,EACR,OAAuB,EACvB,GAAe;IAEf,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,UAAU,IAAI,GAAG,CAAC,QAAQ,KAAK,iBAAiB,CAAC,EAAE,CAAC;QAChG,OAAO,KAAK,CAAC;IACf,CAAC;IACD,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/B,IAAI,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,IAAI,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChE,MAAM,oBAAoB,GAAG,oBAAoB,CAC/C,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAC1D,CAAC;IACF,MAAM,oBAAoB,GACxB,OAAO,CAAC,aAAa,KAAK,SAAS;QACnC,OAAO,CAAC,gBAAgB,KAAK,SAAS;QACtC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC;IACzC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;QACjB,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,IAAI;QACb,cAAc,EAAE,OAAO,CAAC,0BAA0B,IAAI,IAAI;QAC1D,GAAG,CAAC,oBAAoB;YACtB,CAAC,CAAC;gBACE,yBAAyB,EAAE,OAAO,CAAC,gBAAgB;gBACnD,oBAAoB;aACrB;YACH,CAAC,CAAC,EAAE,CAAC;QACP,kBAAkB,EAAE,OAAO,CAAC,8BAA8B,IAAI,iBAAiB;QAC/E,UAAU,EAAE,OAAO,CAAC,sBAAsB,IAAI,YAAY;QAC1D,QAAQ,EAAE,oBAAoB;YAC5B,CAAC,CAAC,mBAAmB;YACrB,CAAC,CAAC,OAAO,CAAC,0BAA0B;gBAClC,CAAC,CAAC,mBAAmB;gBACrB,CAAC,CAAC,UAAU;KACjB,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC"}
|
|
1
|
+
{"version":3,"file":"auth-discovery.js","sourceRoot":"","sources":["../../src/routes/auth-discovery.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAmB,MAAM,6BAA6B,CAAC;AAClG,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAGlF,qGAAqG;AACrG,MAAM,UAAU,0BAA0B,CACxC,GAAoB,EACpB,GAAmB,EACnB,GAAQ,EACR,OAAuB,EACvB,GAAe;IAEf,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,UAAU,IAAI,GAAG,CAAC,QAAQ,KAAK,iBAAiB,CAAC,EAAE,CAAC;QAChG,OAAO,KAAK,CAAC;IACf,CAAC;IACD,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/B,IAAI,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,IAAI,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChE,MAAM,oBAAoB,GAAG,oBAAoB,CAC/C,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAC1D,CAAC;IACF,MAAM,oBAAoB,GACxB,OAAO,CAAC,aAAa,KAAK,SAAS;QACnC,OAAO,CAAC,gBAAgB,KAAK,SAAS;QACtC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC;IACzC,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACtE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;QACjB,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,IAAI;QACb,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,cAAc,EAAE,OAAO,CAAC,0BAA0B,IAAI,IAAI;QAC1D,GAAG,CAAC,oBAAoB;YACtB,CAAC,CAAC;gBACE,yBAAyB,EAAE,OAAO,CAAC,gBAAgB;gBACnD,oBAAoB;aACrB;YACH,CAAC,CAAC,EAAE,CAAC;QACP,kBAAkB,EAAE,OAAO,CAAC,8BAA8B,IAAI,iBAAiB;QAC/E,UAAU,EAAE,OAAO,CAAC,sBAAsB,IAAI,YAAY;QAC1D,QAAQ,EAAE,oBAAoB;YAC5B,CAAC,CAAC,mBAAmB;YACrB,CAAC,CAAC,OAAO,CAAC,0BAA0B;gBAClC,CAAC,CAAC,mBAAmB;gBACrB,CAAC,CAAC,UAAU;KACjB,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,oGAAoG;AACpG,SAAS,gBAAgB,CAAC,KAAyB;IACjD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC;QACH,OAAO,sBAAsB,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/E,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACnE,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACnC,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IACE,GAAG,CAAC,QAAQ,KAAK,QAAQ;QACzB,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,MAAM,KAAK,EAAE;QACjB,GAAG,CAAC,IAAI,KAAK,EAAE,EACf,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;IAClD,MAAM,qBAAqB,GAAG,OAAO,KAAK,EAAE,IAAI,UAAU,KAAK,GAAG,KAAK,GAAG,CAAC;IAC3E,IAAI,UAAU,KAAK,KAAK,IAAI,CAAC,qBAAqB;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC3F,OAAO,KAAK,CAAC;AACf,CAAC"}
|
|
@@ -0,0 +1,181 @@
|
|
|
1
|
+
import { z } from 'zod';
|
|
2
|
+
import type { ConfigSource } from '../config-value-projection.js';
|
|
3
|
+
export declare const ConfigSourceSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
|
|
4
|
+
kind: z.ZodLiteral<"organization">;
|
|
5
|
+
organizationId: z.ZodString;
|
|
6
|
+
}, z.core.$strict>, z.ZodObject<{
|
|
7
|
+
kind: z.ZodLiteral<"app">;
|
|
8
|
+
organizationId: z.ZodString;
|
|
9
|
+
appId: z.ZodString;
|
|
10
|
+
}, z.core.$strict>, z.ZodObject<{
|
|
11
|
+
kind: z.ZodLiteral<"environment">;
|
|
12
|
+
organizationId: z.ZodString;
|
|
13
|
+
appId: z.ZodString;
|
|
14
|
+
environmentId: z.ZodString;
|
|
15
|
+
environmentName: z.ZodString;
|
|
16
|
+
isProduction: z.ZodBoolean;
|
|
17
|
+
}, z.core.$strict>], "kind">;
|
|
18
|
+
export declare const EffectiveSecretConfigRowSchema: z.ZodObject<{
|
|
19
|
+
name: z.ZodString;
|
|
20
|
+
source: z.ZodDiscriminatedUnion<[z.ZodObject<{
|
|
21
|
+
kind: z.ZodLiteral<"organization">;
|
|
22
|
+
organizationId: z.ZodString;
|
|
23
|
+
}, z.core.$strict>, z.ZodObject<{
|
|
24
|
+
kind: z.ZodLiteral<"app">;
|
|
25
|
+
organizationId: z.ZodString;
|
|
26
|
+
appId: z.ZodString;
|
|
27
|
+
}, z.core.$strict>, z.ZodObject<{
|
|
28
|
+
kind: z.ZodLiteral<"environment">;
|
|
29
|
+
organizationId: z.ZodString;
|
|
30
|
+
appId: z.ZodString;
|
|
31
|
+
environmentId: z.ZodString;
|
|
32
|
+
environmentName: z.ZodString;
|
|
33
|
+
isProduction: z.ZodBoolean;
|
|
34
|
+
}, z.core.$strict>], "kind">;
|
|
35
|
+
fallbackSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
|
|
36
|
+
kind: z.ZodLiteral<"organization">;
|
|
37
|
+
organizationId: z.ZodString;
|
|
38
|
+
}, z.core.$strict>, z.ZodObject<{
|
|
39
|
+
kind: z.ZodLiteral<"app">;
|
|
40
|
+
organizationId: z.ZodString;
|
|
41
|
+
appId: z.ZodString;
|
|
42
|
+
}, z.core.$strict>, z.ZodObject<{
|
|
43
|
+
kind: z.ZodLiteral<"environment">;
|
|
44
|
+
organizationId: z.ZodString;
|
|
45
|
+
appId: z.ZodString;
|
|
46
|
+
environmentId: z.ZodString;
|
|
47
|
+
environmentName: z.ZodString;
|
|
48
|
+
isProduction: z.ZodBoolean;
|
|
49
|
+
}, z.core.$strict>], "kind">>;
|
|
50
|
+
}, z.core.$strict>;
|
|
51
|
+
export declare const EffectiveVariableConfigRowSchema: z.ZodObject<{
|
|
52
|
+
name: z.ZodString;
|
|
53
|
+
source: z.ZodDiscriminatedUnion<[z.ZodObject<{
|
|
54
|
+
kind: z.ZodLiteral<"organization">;
|
|
55
|
+
organizationId: z.ZodString;
|
|
56
|
+
}, z.core.$strict>, z.ZodObject<{
|
|
57
|
+
kind: z.ZodLiteral<"app">;
|
|
58
|
+
organizationId: z.ZodString;
|
|
59
|
+
appId: z.ZodString;
|
|
60
|
+
}, z.core.$strict>, z.ZodObject<{
|
|
61
|
+
kind: z.ZodLiteral<"environment">;
|
|
62
|
+
organizationId: z.ZodString;
|
|
63
|
+
appId: z.ZodString;
|
|
64
|
+
environmentId: z.ZodString;
|
|
65
|
+
environmentName: z.ZodString;
|
|
66
|
+
isProduction: z.ZodBoolean;
|
|
67
|
+
}, z.core.$strict>], "kind">;
|
|
68
|
+
fallbackSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
|
|
69
|
+
kind: z.ZodLiteral<"organization">;
|
|
70
|
+
organizationId: z.ZodString;
|
|
71
|
+
}, z.core.$strict>, z.ZodObject<{
|
|
72
|
+
kind: z.ZodLiteral<"app">;
|
|
73
|
+
organizationId: z.ZodString;
|
|
74
|
+
appId: z.ZodString;
|
|
75
|
+
}, z.core.$strict>, z.ZodObject<{
|
|
76
|
+
kind: z.ZodLiteral<"environment">;
|
|
77
|
+
organizationId: z.ZodString;
|
|
78
|
+
appId: z.ZodString;
|
|
79
|
+
environmentId: z.ZodString;
|
|
80
|
+
environmentName: z.ZodString;
|
|
81
|
+
isProduction: z.ZodBoolean;
|
|
82
|
+
}, z.core.$strict>], "kind">>;
|
|
83
|
+
value: z.ZodString;
|
|
84
|
+
}, z.core.$strict>;
|
|
85
|
+
export declare const EffectiveConfigResponseSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
|
|
86
|
+
environment: z.ZodObject<{
|
|
87
|
+
id: z.ZodString;
|
|
88
|
+
name: z.ZodString;
|
|
89
|
+
isProduction: z.ZodBoolean;
|
|
90
|
+
}, z.core.$strict>;
|
|
91
|
+
capabilities: z.ZodObject<{
|
|
92
|
+
canManage: z.ZodBoolean;
|
|
93
|
+
canReveal: z.ZodBoolean;
|
|
94
|
+
}, z.core.$strict>;
|
|
95
|
+
kind: z.ZodLiteral<"secret">;
|
|
96
|
+
entries: z.ZodArray<z.ZodObject<{
|
|
97
|
+
name: z.ZodString;
|
|
98
|
+
source: z.ZodDiscriminatedUnion<[z.ZodObject<{
|
|
99
|
+
kind: z.ZodLiteral<"organization">;
|
|
100
|
+
organizationId: z.ZodString;
|
|
101
|
+
}, z.core.$strict>, z.ZodObject<{
|
|
102
|
+
kind: z.ZodLiteral<"app">;
|
|
103
|
+
organizationId: z.ZodString;
|
|
104
|
+
appId: z.ZodString;
|
|
105
|
+
}, z.core.$strict>, z.ZodObject<{
|
|
106
|
+
kind: z.ZodLiteral<"environment">;
|
|
107
|
+
organizationId: z.ZodString;
|
|
108
|
+
appId: z.ZodString;
|
|
109
|
+
environmentId: z.ZodString;
|
|
110
|
+
environmentName: z.ZodString;
|
|
111
|
+
isProduction: z.ZodBoolean;
|
|
112
|
+
}, z.core.$strict>], "kind">;
|
|
113
|
+
fallbackSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
|
|
114
|
+
kind: z.ZodLiteral<"organization">;
|
|
115
|
+
organizationId: z.ZodString;
|
|
116
|
+
}, z.core.$strict>, z.ZodObject<{
|
|
117
|
+
kind: z.ZodLiteral<"app">;
|
|
118
|
+
organizationId: z.ZodString;
|
|
119
|
+
appId: z.ZodString;
|
|
120
|
+
}, z.core.$strict>, z.ZodObject<{
|
|
121
|
+
kind: z.ZodLiteral<"environment">;
|
|
122
|
+
organizationId: z.ZodString;
|
|
123
|
+
appId: z.ZodString;
|
|
124
|
+
environmentId: z.ZodString;
|
|
125
|
+
environmentName: z.ZodString;
|
|
126
|
+
isProduction: z.ZodBoolean;
|
|
127
|
+
}, z.core.$strict>], "kind">>;
|
|
128
|
+
}, z.core.$strict>>;
|
|
129
|
+
}, z.core.$strict>, z.ZodObject<{
|
|
130
|
+
environment: z.ZodObject<{
|
|
131
|
+
id: z.ZodString;
|
|
132
|
+
name: z.ZodString;
|
|
133
|
+
isProduction: z.ZodBoolean;
|
|
134
|
+
}, z.core.$strict>;
|
|
135
|
+
capabilities: z.ZodObject<{
|
|
136
|
+
canManage: z.ZodBoolean;
|
|
137
|
+
canReveal: z.ZodBoolean;
|
|
138
|
+
}, z.core.$strict>;
|
|
139
|
+
kind: z.ZodLiteral<"variable">;
|
|
140
|
+
entries: z.ZodArray<z.ZodObject<{
|
|
141
|
+
name: z.ZodString;
|
|
142
|
+
source: z.ZodDiscriminatedUnion<[z.ZodObject<{
|
|
143
|
+
kind: z.ZodLiteral<"organization">;
|
|
144
|
+
organizationId: z.ZodString;
|
|
145
|
+
}, z.core.$strict>, z.ZodObject<{
|
|
146
|
+
kind: z.ZodLiteral<"app">;
|
|
147
|
+
organizationId: z.ZodString;
|
|
148
|
+
appId: z.ZodString;
|
|
149
|
+
}, z.core.$strict>, z.ZodObject<{
|
|
150
|
+
kind: z.ZodLiteral<"environment">;
|
|
151
|
+
organizationId: z.ZodString;
|
|
152
|
+
appId: z.ZodString;
|
|
153
|
+
environmentId: z.ZodString;
|
|
154
|
+
environmentName: z.ZodString;
|
|
155
|
+
isProduction: z.ZodBoolean;
|
|
156
|
+
}, z.core.$strict>], "kind">;
|
|
157
|
+
fallbackSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
|
|
158
|
+
kind: z.ZodLiteral<"organization">;
|
|
159
|
+
organizationId: z.ZodString;
|
|
160
|
+
}, z.core.$strict>, z.ZodObject<{
|
|
161
|
+
kind: z.ZodLiteral<"app">;
|
|
162
|
+
organizationId: z.ZodString;
|
|
163
|
+
appId: z.ZodString;
|
|
164
|
+
}, z.core.$strict>, z.ZodObject<{
|
|
165
|
+
kind: z.ZodLiteral<"environment">;
|
|
166
|
+
organizationId: z.ZodString;
|
|
167
|
+
appId: z.ZodString;
|
|
168
|
+
environmentId: z.ZodString;
|
|
169
|
+
environmentName: z.ZodString;
|
|
170
|
+
isProduction: z.ZodBoolean;
|
|
171
|
+
}, z.core.$strict>], "kind">>;
|
|
172
|
+
value: z.ZodString;
|
|
173
|
+
}, z.core.$strict>>;
|
|
174
|
+
}, z.core.$strict>], "kind">;
|
|
175
|
+
export type RevealSecretResponse = {
|
|
176
|
+
readonly ok: true;
|
|
177
|
+
readonly value: string;
|
|
178
|
+
readonly source: ConfigSource;
|
|
179
|
+
};
|
|
180
|
+
export declare const RevealSecretResponseSchema: z.ZodType<RevealSecretResponse>;
|
|
181
|
+
//# sourceMappingURL=config-contracts.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"config-contracts.d.ts","sourceRoot":"","sources":["../../src/routes/config-contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAElE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;4BAa7B,CAAC;AAUH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAA+B,CAAC;AAE3E,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAElC,CAAC;AASZ,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BASxC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;CAC/B,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAM5D,CAAC"}
|
|
@@ -0,0 +1,50 @@
|
|
|
1
|
+
import { z } from 'zod';
|
|
2
|
+
export const ConfigSourceSchema = z.discriminatedUnion('kind', [
|
|
3
|
+
z.object({ kind: z.literal('organization'), organizationId: z.string() }).strict(),
|
|
4
|
+
z.object({ kind: z.literal('app'), organizationId: z.string(), appId: z.string() }).strict(),
|
|
5
|
+
z
|
|
6
|
+
.object({
|
|
7
|
+
kind: z.literal('environment'),
|
|
8
|
+
organizationId: z.string(),
|
|
9
|
+
appId: z.string(),
|
|
10
|
+
environmentId: z.string(),
|
|
11
|
+
environmentName: z.string(),
|
|
12
|
+
isProduction: z.boolean(),
|
|
13
|
+
})
|
|
14
|
+
.strict(),
|
|
15
|
+
]);
|
|
16
|
+
const EffectiveConfigRowBaseSchema = z
|
|
17
|
+
.object({
|
|
18
|
+
name: z.string(),
|
|
19
|
+
source: ConfigSourceSchema,
|
|
20
|
+
fallbackSource: ConfigSourceSchema.optional(),
|
|
21
|
+
})
|
|
22
|
+
.strict();
|
|
23
|
+
export const EffectiveSecretConfigRowSchema = EffectiveConfigRowBaseSchema;
|
|
24
|
+
export const EffectiveVariableConfigRowSchema = EffectiveConfigRowBaseSchema.extend({
|
|
25
|
+
value: z.string(),
|
|
26
|
+
}).strict();
|
|
27
|
+
const EffectiveConfigResponseBaseSchema = z
|
|
28
|
+
.object({
|
|
29
|
+
environment: z.object({ id: z.string(), name: z.string(), isProduction: z.boolean() }).strict(),
|
|
30
|
+
capabilities: z.object({ canManage: z.boolean(), canReveal: z.boolean() }).strict(),
|
|
31
|
+
})
|
|
32
|
+
.strict();
|
|
33
|
+
export const EffectiveConfigResponseSchema = z.discriminatedUnion('kind', [
|
|
34
|
+
EffectiveConfigResponseBaseSchema.extend({
|
|
35
|
+
kind: z.literal('secret'),
|
|
36
|
+
entries: z.array(EffectiveSecretConfigRowSchema),
|
|
37
|
+
}).strict(),
|
|
38
|
+
EffectiveConfigResponseBaseSchema.extend({
|
|
39
|
+
kind: z.literal('variable'),
|
|
40
|
+
entries: z.array(EffectiveVariableConfigRowSchema),
|
|
41
|
+
}).strict(),
|
|
42
|
+
]);
|
|
43
|
+
export const RevealSecretResponseSchema = z
|
|
44
|
+
.object({
|
|
45
|
+
ok: z.literal(true),
|
|
46
|
+
value: z.string(),
|
|
47
|
+
source: ConfigSourceSchema,
|
|
48
|
+
})
|
|
49
|
+
.strict();
|
|
50
|
+
//# sourceMappingURL=config-contracts.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"config-contracts.js","sourceRoot":"","sources":["../../src/routes/config-contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC7D,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAClF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAC5F,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QAC9B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;QAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;QACzB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;QAC3B,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;KAC1B,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAC;AAEH,MAAM,4BAA4B,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,kBAAkB;IAC1B,cAAc,EAAE,kBAAkB,CAAC,QAAQ,EAAE;CAC9C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,8BAA8B,GAAG,4BAA4B,CAAC;AAE3E,MAAM,CAAC,MAAM,gCAAgC,GAAG,4BAA4B,CAAC,MAAM,CAAC;IAClF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,iCAAiC,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAC/F,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;CACpF,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACxE,iCAAiC,CAAC,MAAM,CAAC;QACvC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC;KACjD,CAAC,CAAC,MAAM,EAAE;IACX,iCAAiC,CAAC,MAAM,CAAC;QACvC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC3B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,gCAAgC,CAAC;KACnD,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC;AAQH,MAAM,CAAC,MAAM,0BAA0B,GAAoC,CAAC;KACzE,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,MAAM,EAAE,kBAAkB;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC"}
|
|
@@ -0,0 +1,20 @@
|
|
|
1
|
+
import type { IncomingMessage, ServerResponse } from 'node:http';
|
|
2
|
+
import type { TlsPosture } from '@noodle-borg/transport-http';
|
|
3
|
+
import type { DeployAuthGate } from '../auth/deploy-gate.js';
|
|
4
|
+
import type { ServerRegistry } from '../registry.js';
|
|
5
|
+
import type { AuditSink } from '../store/audit.js';
|
|
6
|
+
import type { ConfigStore, ControlPlaneStore } from '../store.js';
|
|
7
|
+
export interface ConfigValueDispatchDeps {
|
|
8
|
+
readonly gate: DeployAuthGate;
|
|
9
|
+
readonly controlPlane: ControlPlaneStore;
|
|
10
|
+
readonly configStore: ConfigStore;
|
|
11
|
+
readonly registry: ServerRegistry;
|
|
12
|
+
readonly maxBody: number;
|
|
13
|
+
readonly audit: AuditSink;
|
|
14
|
+
readonly applySecurityHeaders: (res: ServerResponse, tls: TlsPosture) => void;
|
|
15
|
+
readonly enforceHttps: (req: IncomingMessage, res: ServerResponse, tls: TlsPosture) => boolean;
|
|
16
|
+
readonly sendJson: (res: ServerResponse, status: number, body: unknown) => void;
|
|
17
|
+
readonly tls: TlsPosture;
|
|
18
|
+
}
|
|
19
|
+
export declare function dispatchConfigValueRequest(req: IncomingMessage, res: ServerResponse, url: URL, deps: ConfigValueDispatchDeps): boolean;
|
|
20
|
+
//# sourceMappingURL=config-values-dispatch.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"config-values-dispatch.d.ts","sourceRoot":"","sources":["../../src/routes/config-values-dispatch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAIlE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,oBAAoB,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,KAAK,IAAI,CAAC;IAC9E,QAAQ,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,KAAK,OAAO,CAAC;IAC/F,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IAChF,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;CAC1B;AAED,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,uBAAuB,GAC5B,OAAO,CAiCT"}
|
|
@@ -0,0 +1,37 @@
|
|
|
1
|
+
import { handleConfigValues } from './config-values.js';
|
|
2
|
+
import { parseConfigPath } from './config-values-paths.js';
|
|
3
|
+
export function dispatchConfigValueRequest(req, res, url, deps) {
|
|
4
|
+
const ref = parseConfigPath(url.pathname, url.searchParams);
|
|
5
|
+
if (ref === undefined)
|
|
6
|
+
return false;
|
|
7
|
+
if (ref.reveal)
|
|
8
|
+
res.setHeader('Cache-Control', 'no-store');
|
|
9
|
+
if (ref.reveal && ref.invalid !== undefined) {
|
|
10
|
+
deps.applySecurityHeaders(res, deps.tls);
|
|
11
|
+
if (deps.enforceHttps(req, res, deps.tls))
|
|
12
|
+
return true;
|
|
13
|
+
deps.sendJson(res, 400, { error: ref.invalid });
|
|
14
|
+
return true;
|
|
15
|
+
}
|
|
16
|
+
if (ref.reveal && req.method !== 'POST') {
|
|
17
|
+
deps.applySecurityHeaders(res, deps.tls);
|
|
18
|
+
if (deps.enforceHttps(req, res, deps.tls))
|
|
19
|
+
return true;
|
|
20
|
+
deps.sendJson(res, 404, { error: 'not found' });
|
|
21
|
+
return true;
|
|
22
|
+
}
|
|
23
|
+
if (!ref.reveal && !isConfigMethod(req.method))
|
|
24
|
+
return false;
|
|
25
|
+
deps.applySecurityHeaders(res, deps.tls);
|
|
26
|
+
if (deps.enforceHttps(req, res, deps.tls))
|
|
27
|
+
return true;
|
|
28
|
+
handleConfigValues(req, res, deps.gate, deps.controlPlane, deps.configStore, deps.registry, deps.maxBody, ref, deps.audit).catch(() => {
|
|
29
|
+
if (!res.headersSent)
|
|
30
|
+
deps.sendJson(res, 500, { error: 'internal error' });
|
|
31
|
+
});
|
|
32
|
+
return true;
|
|
33
|
+
}
|
|
34
|
+
function isConfigMethod(method) {
|
|
35
|
+
return method === 'GET' || method === 'PUT' || method === 'DELETE';
|
|
36
|
+
}
|
|
37
|
+
//# sourceMappingURL=config-values-dispatch.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"config-values-dispatch.js","sourceRoot":"","sources":["../../src/routes/config-values-dispatch.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAe3D,MAAM,UAAU,0BAA0B,CACxC,GAAoB,EACpB,GAAmB,EACnB,GAAQ,EACR,IAA6B;IAE7B,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;IAC5D,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,GAAG,CAAC,MAAM;QAAE,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IAC3D,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC5C,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACvD,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACxC,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACvD,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,kBAAkB,CAChB,GAAG,EACH,GAAG,EACH,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,OAAO,EACZ,GAAG,EACH,IAAI,CAAC,KAAK,CACX,CAAC,KAAK,CAAC,GAAG,EAAE;QACX,IAAI,CAAC,GAAG,CAAC,WAAW;YAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,MAA0B;IAChD,OAAO,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,QAAQ,CAAC;AACrE,CAAC"}
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
import { type ConfigScope, type ManagedConfigKind } from '../store.js';
|
|
2
|
+
export interface ConfigRouteRef {
|
|
3
|
+
readonly kind: ManagedConfigKind;
|
|
4
|
+
readonly scope: ConfigScope;
|
|
5
|
+
readonly name?: string;
|
|
6
|
+
readonly effective?: boolean;
|
|
7
|
+
readonly reveal?: boolean;
|
|
8
|
+
readonly invalid?: string;
|
|
9
|
+
}
|
|
10
|
+
export declare function parseConfigPath(pathname: string, searchParams?: URLSearchParams): ConfigRouteRef | undefined;
|
|
11
|
+
export declare function configRouteRef(kind: ManagedConfigKind, scope: ConfigScope, encodedName: string | undefined, searchParams?: URLSearchParams, reveal?: boolean): ConfigRouteRef | undefined;
|
|
12
|
+
//# sourceMappingURL=config-values-paths.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"config-values-paths.d.ts","sourceRoot":"","sources":["../../src/routes/config-values-paths.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,iBAAiB,EAGvB,MAAM,aAAa,CAAC;AAErB,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,YAAY,CAAC,EAAE,eAAe,GAC7B,cAAc,GAAG,SAAS,CAyD5B;AA+BD,wBAAgB,cAAc,CAC5B,IAAI,EAAE,iBAAiB,EACvB,KAAK,EAAE,WAAW,EAClB,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,YAAY,CAAC,EAAE,eAAe,EAC9B,MAAM,UAAQ,GACb,cAAc,GAAG,SAAS,CAoB5B"}
|
|
@@ -0,0 +1,88 @@
|
|
|
1
|
+
import { validateConfigName, validateConfigScope, } from '../store.js';
|
|
2
|
+
export function parseConfigPath(pathname, searchParams) {
|
|
3
|
+
const kindPattern = '(secrets|variables)';
|
|
4
|
+
const reveal = /^\/v1\/orgs\/([^/]+)\/apps\/([^/]+)\/envs\/([^/]+)\/secrets\/([^/]+)\/reveal$/.exec(pathname);
|
|
5
|
+
if (reveal) {
|
|
6
|
+
return encodedConfigRouteRef('secret', {
|
|
7
|
+
level: 'env',
|
|
8
|
+
org: reveal[1],
|
|
9
|
+
app: reveal[2],
|
|
10
|
+
env: reveal[3],
|
|
11
|
+
}, reveal[4], undefined, true);
|
|
12
|
+
}
|
|
13
|
+
const org = new RegExp(`^/v1/orgs/([^/]+)/${kindPattern}(?:/([^/]+))?$`).exec(pathname);
|
|
14
|
+
if (org) {
|
|
15
|
+
return encodedConfigRouteRef(org[2] === 'secrets' ? 'secret' : 'variable', { level: 'org', org: org[1] }, org[3], searchParams);
|
|
16
|
+
}
|
|
17
|
+
const app = new RegExp(`^/v1/orgs/([^/]+)/apps/([^/]+)/${kindPattern}(?:/([^/]+))?$`).exec(pathname);
|
|
18
|
+
if (app) {
|
|
19
|
+
return encodedConfigRouteRef(app[3] === 'secrets' ? 'secret' : 'variable', {
|
|
20
|
+
level: 'app',
|
|
21
|
+
org: app[1],
|
|
22
|
+
app: app[2],
|
|
23
|
+
}, app[4], searchParams);
|
|
24
|
+
}
|
|
25
|
+
const env = new RegExp(`^/v1/orgs/([^/]+)/apps/([^/]+)/envs/([^/]+)/${kindPattern}(?:/([^/]+))?$`).exec(pathname);
|
|
26
|
+
if (!env)
|
|
27
|
+
return undefined;
|
|
28
|
+
return encodedConfigRouteRef(env[4] === 'secrets' ? 'secret' : 'variable', {
|
|
29
|
+
level: 'env',
|
|
30
|
+
org: env[1],
|
|
31
|
+
app: env[2],
|
|
32
|
+
env: env[3],
|
|
33
|
+
}, env[5], searchParams);
|
|
34
|
+
}
|
|
35
|
+
function encodedConfigRouteRef(kind, encodedScope, encodedName, searchParams, reveal = false) {
|
|
36
|
+
try {
|
|
37
|
+
const scope = encodedScope.level === 'org'
|
|
38
|
+
? { level: 'org', org: decodeURIComponent(encodedScope.org) }
|
|
39
|
+
: encodedScope.level === 'app'
|
|
40
|
+
? {
|
|
41
|
+
level: 'app',
|
|
42
|
+
org: decodeURIComponent(encodedScope.org),
|
|
43
|
+
app: decodeURIComponent(encodedScope.app),
|
|
44
|
+
}
|
|
45
|
+
: {
|
|
46
|
+
level: 'env',
|
|
47
|
+
org: decodeURIComponent(encodedScope.org),
|
|
48
|
+
app: decodeURIComponent(encodedScope.app),
|
|
49
|
+
env: decodeURIComponent(encodedScope.env),
|
|
50
|
+
};
|
|
51
|
+
return configRouteRef(kind, scope, encodedName, searchParams, reveal);
|
|
52
|
+
}
|
|
53
|
+
catch {
|
|
54
|
+
return invalidConfigRouteRef(kind, encodedName, reveal);
|
|
55
|
+
}
|
|
56
|
+
}
|
|
57
|
+
export function configRouteRef(kind, scope, encodedName, searchParams, reveal = false) {
|
|
58
|
+
let safeScope;
|
|
59
|
+
try {
|
|
60
|
+
safeScope = validateConfigScope(scope);
|
|
61
|
+
}
|
|
62
|
+
catch {
|
|
63
|
+
return invalidConfigRouteRef(kind, encodedName, reveal);
|
|
64
|
+
}
|
|
65
|
+
try {
|
|
66
|
+
const name = encodedName !== undefined ? validateConfigName(decodeURIComponent(encodedName)) : undefined;
|
|
67
|
+
return {
|
|
68
|
+
kind,
|
|
69
|
+
scope: safeScope,
|
|
70
|
+
...(name !== undefined ? { name } : {}),
|
|
71
|
+
...(searchParams?.get('view') === 'effective' ? { effective: true } : {}),
|
|
72
|
+
...(reveal ? { reveal: true } : {}),
|
|
73
|
+
};
|
|
74
|
+
}
|
|
75
|
+
catch {
|
|
76
|
+
return invalidConfigRouteRef(kind, encodedName, reveal, safeScope);
|
|
77
|
+
}
|
|
78
|
+
}
|
|
79
|
+
function invalidConfigRouteRef(kind, encodedName, reveal, scope = { level: 'org', org: '__invalid__' }) {
|
|
80
|
+
return {
|
|
81
|
+
kind,
|
|
82
|
+
scope,
|
|
83
|
+
...(encodedName !== undefined ? { name: '__invalid__' } : {}),
|
|
84
|
+
...(reveal ? { reveal: true } : {}),
|
|
85
|
+
invalid: 'invalid config scope or name',
|
|
86
|
+
};
|
|
87
|
+
}
|
|
88
|
+
//# sourceMappingURL=config-values-paths.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"config-values-paths.js","sourceRoot":"","sources":["../../src/routes/config-values-paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAWrB,MAAM,UAAU,eAAe,CAC7B,QAAgB,EAChB,YAA8B;IAE9B,MAAM,WAAW,GAAG,qBAAqB,CAAC;IAC1C,MAAM,MAAM,GACV,+EAA+E,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjG,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,qBAAqB,CAC1B,QAAQ,EACR;YACE,KAAK,EAAE,KAAK;YACZ,GAAG,EAAE,MAAM,CAAC,CAAC,CAAW;YACxB,GAAG,EAAE,MAAM,CAAC,CAAC,CAAW;YACxB,GAAG,EAAE,MAAM,CAAC,CAAC,CAAW;SACzB,EACD,MAAM,CAAC,CAAC,CAAC,EACT,SAAS,EACT,IAAI,CACL,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,qBAAqB,WAAW,gBAAgB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxF,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,qBAAqB,CAC1B,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,EAC5C,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAW,EAAE,EACvC,GAAG,CAAC,CAAC,CAAC,EACN,YAAY,CACb,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,kCAAkC,WAAW,gBAAgB,CAAC,CAAC,IAAI,CACxF,QAAQ,CACT,CAAC;IACF,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,qBAAqB,CAC1B,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,EAC5C;YACE,KAAK,EAAE,KAAK;YACZ,GAAG,EAAE,GAAG,CAAC,CAAC,CAAW;YACrB,GAAG,EAAE,GAAG,CAAC,CAAC,CAAW;SACtB,EACD,GAAG,CAAC,CAAC,CAAC,EACN,YAAY,CACb,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,MAAM,CACpB,+CAA+C,WAAW,gBAAgB,CAC3E,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjB,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAO,qBAAqB,CAC1B,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,EAC5C;QACE,KAAK,EAAE,KAAK;QACZ,GAAG,EAAE,GAAG,CAAC,CAAC,CAAW;QACrB,GAAG,EAAE,GAAG,CAAC,CAAC,CAAW;QACrB,GAAG,EAAE,GAAG,CAAC,CAAC,CAAW;KACtB,EACD,GAAG,CAAC,CAAC,CAAC,EACN,YAAY,CACb,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,IAAuB,EACvB,YAAyB,EACzB,WAA+B,EAC/B,YAA8B,EAC9B,MAAM,GAAG,KAAK;IAEd,IAAI,CAAC;QACH,MAAM,KAAK,GACT,YAAY,CAAC,KAAK,KAAK,KAAK;YAC1B,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,kBAAkB,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE;YAC7D,CAAC,CAAC,YAAY,CAAC,KAAK,KAAK,KAAK;gBAC5B,CAAC,CAAC;oBACE,KAAK,EAAE,KAAK;oBACZ,GAAG,EAAE,kBAAkB,CAAC,YAAY,CAAC,GAAG,CAAC;oBACzC,GAAG,EAAE,kBAAkB,CAAC,YAAY,CAAC,GAAG,CAAC;iBAC1C;gBACH,CAAC,CAAC;oBACE,KAAK,EAAE,KAAK;oBACZ,GAAG,EAAE,kBAAkB,CAAC,YAAY,CAAC,GAAG,CAAC;oBACzC,GAAG,EAAE,kBAAkB,CAAC,YAAY,CAAC,GAAG,CAAC;oBACzC,GAAG,EAAE,kBAAkB,CAAC,YAAY,CAAC,GAAG,CAAC;iBAC1C,CAAC;QACV,OAAO,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,qBAAqB,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,IAAuB,EACvB,KAAkB,EAClB,WAA+B,EAC/B,YAA8B,EAC9B,MAAM,GAAG,KAAK;IAEd,IAAI,SAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,qBAAqB,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GACR,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9F,OAAO;YACL,IAAI;YACJ,KAAK,EAAE,SAAS;YAChB,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,qBAAqB,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC5B,IAAuB,EACvB,WAA+B,EAC/B,MAAe,EACf,QAAqB,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,aAAa,EAAE;IAEzD,OAAO;QACL,IAAI;QACJ,KAAK;QACL,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,8BAA8B;KACxC,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,8 @@
|
|
|
1
|
+
import type { IncomingMessage, ServerResponse } from 'node:http';
|
|
2
|
+
import type { DeployAuthGate } from '../auth/deploy-gate.js';
|
|
3
|
+
import type { ServerRegistry } from '../registry.js';
|
|
4
|
+
import type { AuditSink } from '../store/audit.js';
|
|
5
|
+
import type { ConfigStore, ControlPlaneStore } from '../store.js';
|
|
6
|
+
import type { ConfigRouteRef } from './config-values-paths.js';
|
|
7
|
+
export declare function handleConfigValues(req: IncomingMessage, res: ServerResponse, gate: DeployAuthGate, controlPlane: ControlPlaneStore, configStore: ConfigStore, registry: ServerRegistry, maxBody: number, ref: ConfigRouteRef, audit: AuditSink): Promise<void>;
|
|
8
|
+
//# sourceMappingURL=config-values.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"config-values.d.ts","sourceRoot":"","sources":["../../src/routes/config-values.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,KAAK,EAAwB,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAMnF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAElE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG/D,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,cAAc,EACpB,YAAY,EAAE,iBAAiB,EAC/B,WAAW,EAAE,WAAW,EACxB,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,SAAS,GACf,OAAO,CAAC,IAAI,CAAC,CAuEf"}
|