@noodleseed/one 0.71.0 → 0.72.0

package/node_modules/@noodle-borg/service/dist/oauth/workos.d.ts

@@ -1,4 +1,4 @@
-import type { UpstreamHumanOAuthAuthenticator } from './upstream-human.js';
+import type { UpstreamAuthorizationOptions, UpstreamHumanOAuthAuthenticator } from './upstream-human.js';
 export interface WorkOSUser {
     readonly id: string;
     readonly email: string;
@@ -12,6 +12,8 @@ export interface WorkOSUserManagementClient {
         readonly clientId: string;
         readonly redirectUri: string;
         readonly state: string;
+        readonly maxAge?: number;
+        readonly prompt?: string;
     }): string;
     authenticateWithCode(input: {
         readonly code: string;
@@ -52,7 +54,7 @@ export declare class WorkOSHumanAuthenticator implements UpstreamHumanOAuthAuthe
     readonly provider: "workos";
     readonly realm: string;
     constructor(config: WorkOSHumanAuthenticatorConfig, userManagement?: WorkOSUserManagementClient);
-    authorizationUrl(state: string): string;
+    authorizationUrl(state: string, options?: UpstreamAuthorizationOptions): URL;
     exchange(code: string): Promise<{
         readonly provider: 'workos';
         readonly realm: string;

package/node_modules/@noodle-borg/service/dist/oauth/workos.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workos.d.ts","sourceRoot":"","sources":["../../src/oauth/workos.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,qBAAqB,CAAC;AAE3E,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,8GAA8G;AAC9G,MAAM,WAAW,0BAA0B;IACzC,mBAAmB,CAAC,KAAK,EAAE;QACzB,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;QAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;KACxB,GAAG,MAAM,CAAC;IACX,oBAAoB,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QACzF,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;QAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;QACvC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;KACjC,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,yFAAyF;IACzF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,6GAA6G;IAC7G,QAAQ,CAAC,4BAA4B,CAAC,EAAE,SAAS,kCAAkC,EAAE,CAAC;CACvF;AAED,MAAM,MAAM,kCAAkC,GAC1C,aAAa,GACb,WAAW,GACX,aAAa,GACb,UAAU,GACV,KAAK,CAAC;AAEV,6EAA6E;AAC7E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,4BAA4B,CAAC,EAAE,SAAS,kCAAkC,EAAE,CAAC;CACvF;AAED;;;GAGG;AACH,wBAAgB,wCAAwC,CACtD,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,mBAAmB,GAAG,SAAS,GACtC,wBAAwB,GAAG,SAAS,CActC;AAED,yGAAyG;AACzG,qBAAa,wBAAyB,YAAW,+BAA+B;;IAC9E,QAAQ,CAAC,QAAQ,EAAG,QAAQ,CAAU;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;gBAQrB,MAAM,EAAE,8BAA8B,EACtC,cAAc,GAAE,0BAGC;IAYnB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IASjC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QACpC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;QAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;CAyBH"}
+{"version":3,"file":"workos.d.ts","sourceRoot":"","sources":["../../src/oauth/workos.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,4BAA4B,EAC5B,+BAA+B,EAChC,MAAM,qBAAqB,CAAC;AAE7B,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,8GAA8G;AAC9G,MAAM,WAAW,0BAA0B;IACzC,mBAAmB,CAAC,KAAK,EAAE;QACzB,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;QAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;KAC1B,GAAG,MAAM,CAAC;IACX,oBAAoB,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QACzF,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;QAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;QACvC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;KACjC,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,yFAAyF;IACzF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,6GAA6G;IAC7G,QAAQ,CAAC,4BAA4B,CAAC,EAAE,SAAS,kCAAkC,EAAE,CAAC;CACvF;AAED,MAAM,MAAM,kCAAkC,GAC1C,aAAa,GACb,WAAW,GACX,aAAa,GACb,UAAU,GACV,KAAK,CAAC;AAEV,6EAA6E;AAC7E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,4BAA4B,CAAC,EAAE,SAAS,kCAAkC,EAAE,CAAC;CACvF;AAED;;;GAGG;AACH,wBAAgB,wCAAwC,CACtD,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,mBAAmB,GAAG,SAAS,GACtC,wBAAwB,GAAG,SAAS,CActC;AAED,yGAAyG;AACzG,qBAAa,wBAAyB,YAAW,+BAA+B;;IAC9E,QAAQ,CAAC,QAAQ,EAAG,QAAQ,CAAU;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;gBAQrB,MAAM,EAAE,8BAA8B,EACtC,cAAc,GAAE,0BAGC;IAYnB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,4BAA4B,GAAG,GAAG;IAatE,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QACpC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;QAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;QAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;CAyBH"}

package/node_modules/@noodle-borg/service/dist/oauth/workos.js

@@ -39,13 +39,15 @@ export class WorkOSHumanAuthenticator {
         this.#userManagement = userManagement;
         this.#allowedAuthenticationMethods = new Set(config.allowedAuthenticationMethods ?? ['GoogleOAuth', 'MagicAuth']);
     }
-    authorizationUrl(state) {
-        return this.#userManagement.getAuthorizationUrl({
+    authorizationUrl(state, options) {
+        const forceAuthentication = options?.forceAuthentication === true;
+        return new URL(this.#userManagement.getAuthorizationUrl({
             provider: 'authkit',
             clientId: this.#clientId,
             redirectUri: this.#redirectUri,
             state,
-        });
+            ...(forceAuthentication ? { prompt: 'login', maxAge: 0 } : {}),
+        }));
     }
     async exchange(code) {
         const { user, authenticationMethod, impersonator } = await this.#userManagement.authenticateWithCode({

package/node_modules/@noodle-borg/service/dist/oauth/workos.js.map

@@ -1 +1 @@
-{"version":3,"file":"workos.js","sourceRoot":"","sources":["../../src/oauth/workos.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAoD1C;;;GAGG;AACH,MAAM,UAAU,wCAAwC,CACtD,MAAc,EACd,MAAuC;IAEvC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1D,OAAO,IAAI,wBAAwB,CAAC;QAClC,QAAQ;QACR,MAAM;QACN,KAAK;QACL,WAAW,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,wBAAwB;QAClE,GAAG,CAAC,MAAM,CAAC,4BAA4B,KAAK,SAAS;YACnD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,4BAA4B,EAAE,MAAM,CAAC,4BAA4B,EAAE,CAAC;KAC3E,CAAC,CAAC;AACL,CAAC;AAED,yGAAyG;AACzG,MAAM,OAAO,wBAAwB;IAC1B,QAAQ,GAAG,QAAiB,CAAC;IAC7B,KAAK,CAAS;IACd,SAAS,CAAS;IAClB,YAAY,CAAS;IACrB,MAAM,CAAS;IACf,eAAe,CAA6B;IAC5C,6BAA6B,CAAsB;IAE5D,YACE,MAAsC,EACtC,iBAA6C,IAAI,MAAM,CAAC;QACtD,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC,CAAC,cAAc;QAEjB,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,MAAM,GAAG,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;QACzB,IAAI,CAAC,eAAe,GAAG,cAAc,CAAC;QACtC,IAAI,CAAC,6BAA6B,GAAG,IAAI,GAAG,CAC1C,MAAM,CAAC,4BAA4B,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CACpE,CAAC;IACJ,CAAC;IAED,gBAAgB,CAAC,KAAa;QAC5B,OAAO,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC;YAC9C,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY;QAQzB,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,YAAY,EAAE,GAChD,MAAM,IAAI,CAAC,eAAe,CAAC,oBAAoB,CAAC;YAC9C,IAAI;YACJ,QAAQ,EAAE,IAAI,CAAC,SAAS;SACzB,CAAC,CAAC;QACL,IACE,oBAAoB,KAAK,SAAS;YAClC,CAAC,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,oBAAoB,CAAC;YAC7D,YAAY,KAAK,SAAS;YAC1B,IAAI,CAAC,aAAa,KAAK,IAAI,EAC3B,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,OAAO,GAAG,2BAA2B,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,2BAA2B,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/D,OAAO;YACL,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,IAAI,CAAC,MAAM;YAClB,OAAO;YACP,KAAK;YACL,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC;IACJ,CAAC;CACF;AAED,SAAS,oBAAoB,CAAC,IAAY,EAAE,KAAyB;IACnE,MAAM,UAAU,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IACjC,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,6EAA6E,IAAI,GAAG,CACrF,CAAC;IACJ,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,2BAA2B,CAAC,IAAY,EAAE,KAAa;IAC9D,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,aAAa,CAAC,CAAC;IAC1E,OAAO,UAAU,CAAC;AACpB,CAAC"}
+{"version":3,"file":"workos.js","sourceRoot":"","sources":["../../src/oauth/workos.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAyD1C;;;GAGG;AACH,MAAM,UAAU,wCAAwC,CACtD,MAAc,EACd,MAAuC;IAEvC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1D,OAAO,IAAI,wBAAwB,CAAC;QAClC,QAAQ;QACR,MAAM;QACN,KAAK;QACL,WAAW,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,wBAAwB;QAClE,GAAG,CAAC,MAAM,CAAC,4BAA4B,KAAK,SAAS;YACnD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,4BAA4B,EAAE,MAAM,CAAC,4BAA4B,EAAE,CAAC;KAC3E,CAAC,CAAC;AACL,CAAC;AAED,yGAAyG;AACzG,MAAM,OAAO,wBAAwB;IAC1B,QAAQ,GAAG,QAAiB,CAAC;IAC7B,KAAK,CAAS;IACd,SAAS,CAAS;IAClB,YAAY,CAAS;IACrB,MAAM,CAAS;IACf,eAAe,CAA6B;IAC5C,6BAA6B,CAAsB;IAE5D,YACE,MAAsC,EACtC,iBAA6C,IAAI,MAAM,CAAC;QACtD,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC,CAAC,cAAc;QAEjB,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,MAAM,GAAG,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;QACzB,IAAI,CAAC,eAAe,GAAG,cAAc,CAAC;QACtC,IAAI,CAAC,6BAA6B,GAAG,IAAI,GAAG,CAC1C,MAAM,CAAC,4BAA4B,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CACpE,CAAC;IACJ,CAAC;IAED,gBAAgB,CAAC,KAAa,EAAE,OAAsC;QACpE,MAAM,mBAAmB,GAAG,OAAO,EAAE,mBAAmB,KAAK,IAAI,CAAC;QAClE,OAAO,IAAI,GAAG,CACZ,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC;YACvC,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,KAAK;YACL,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,CAAC,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY;QAQzB,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,YAAY,EAAE,GAChD,MAAM,IAAI,CAAC,eAAe,CAAC,oBAAoB,CAAC;YAC9C,IAAI;YACJ,QAAQ,EAAE,IAAI,CAAC,SAAS;SACzB,CAAC,CAAC;QACL,IACE,oBAAoB,KAAK,SAAS;YAClC,CAAC,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,oBAAoB,CAAC;YAC7D,YAAY,KAAK,SAAS;YAC1B,IAAI,CAAC,aAAa,KAAK,IAAI,EAC3B,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,OAAO,GAAG,2BAA2B,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,2BAA2B,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/D,OAAO;YACL,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,IAAI,CAAC,MAAM;YAClB,OAAO;YACP,KAAK;YACL,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC;IACJ,CAAC;CACF;AAED,SAAS,oBAAoB,CAAC,IAAY,EAAE,KAAyB;IACnE,MAAM,UAAU,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IACjC,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,6EAA6E,IAAI,GAAG,CACrF,CAAC;IACJ,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,2BAA2B,CAAC,IAAY,EAAE,KAAa;IAC9D,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,aAAa,CAAC,CAAC;IAC1E,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/node_modules/@noodle-borg/service/dist/routes/auth-discovery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-discovery.d.ts","sourceRoot":"","sources":["../../src/routes/auth-discovery.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAAsC,KAAK,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAElG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,qGAAqG;AACrG,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,cAAc,EACvB,GAAG,EAAE,UAAU,GACd,OAAO,CAiCT"}
+{"version":3,"file":"auth-discovery.d.ts","sourceRoot":"","sources":["../../src/routes/auth-discovery.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAAsC,KAAK,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAElG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,qGAAqG;AACrG,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,cAAc,EACvB,GAAG,EAAE,UAAU,GACd,OAAO,CAmCT"}

package/node_modules/@noodle-borg/service/dist/routes/auth-discovery.js

@@ -13,9 +13,11 @@ export function dispatchAuthDiscoveryRoute(req, res, url, options, tls) {
     const selfHostedOAuthLogin = options.authServerApp !== undefined &&
         options.authServerIssuer !== undefined &&
         options.verifyOwnerToken !== undefined;
+    const consoleUrl = httpsConsoleBase(options.invitationConsoleBaseUrl);
     sendJson(res, 200, {
         ok: true,
         service: base,
+        ...(consoleUrl !== undefined ? { consoleUrl } : {}),
         googleClientId: options.controlPlaneGoogleClientId ?? null,
         ...(selfHostedOAuthLogin
             ? {
@@ -33,4 +35,48 @@ export function dispatchAuthDiscoveryRoute(req, res, url, options, tls) {
     });
     return true;
 }
+/** Discovery must only advertise a Console destination the CLI can safely hand off to a browser. */
+function httpsConsoleBase(value) {
+    if (value === undefined)
+        return undefined;
+    try {
+        return strictHttpsConsoleBase(value);
+    }
+    catch {
+        return undefined;
+    }
+}
+function strictHttpsConsoleBase(value) {
+    if (value.trim() !== value || !value.startsWith('https://'))
+        throw new Error('invalid Console URL');
+    const remainder = value.slice('https://'.length);
+    const separator = remainder.search(/[/?#]/);
+    const authority = separator === -1 ? remainder : remainder.slice(0, separator);
+    if (authority.length === 0)
+        throw new Error('invalid Console URL');
+    const rawRest = separator === -1 ? '' : remainder.slice(separator);
+    const rawPath = rawRest.startsWith('/') ? (rawRest.split(/[?#]/, 1)[0] ?? '') : '';
+    if (rawPath.includes('//'))
+        throw new Error('invalid Console URL');
+    for (const segment of rawPath.split('/').slice(1)) {
+        if (segment.length === 0)
+            continue;
+        const decoded = decodeURIComponent(segment);
+        if (decoded === '.' || decoded === '..')
+            throw new Error('invalid Console URL');
+    }
+    const url = new URL(value);
+    if (url.protocol !== 'https:' ||
+        url.username !== '' ||
+        url.password !== '' ||
+        url.search !== '' ||
+        url.hash !== '') {
+        throw new Error('invalid Console URL');
+    }
+    const parsedBase = `${url.origin}${url.pathname}`;
+    const rootTrailingSlashOnly = rawPath === '' && parsedBase === `${value}/`;
+    if (parsedBase !== value && !rootTrailingSlashOnly)
+        throw new Error('invalid Console URL');
+    return value;
+}
 //# sourceMappingURL=auth-discovery.js.map

package/node_modules/@noodle-borg/service/dist/routes/auth-discovery.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-discovery.js","sourceRoot":"","sources":["../../src/routes/auth-discovery.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAmB,MAAM,6BAA6B,CAAC;AAClG,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAGlF,qGAAqG;AACrG,MAAM,UAAU,0BAA0B,CACxC,GAAoB,EACpB,GAAmB,EACnB,GAAQ,EACR,OAAuB,EACvB,GAAe;IAEf,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,UAAU,IAAI,GAAG,CAAC,QAAQ,KAAK,iBAAiB,CAAC,EAAE,CAAC;QAChG,OAAO,KAAK,CAAC;IACf,CAAC;IACD,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/B,IAAI,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,IAAI,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChE,MAAM,oBAAoB,GAAG,oBAAoB,CAC/C,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAC1D,CAAC;IACF,MAAM,oBAAoB,GACxB,OAAO,CAAC,aAAa,KAAK,SAAS;QACnC,OAAO,CAAC,gBAAgB,KAAK,SAAS;QACtC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC;IACzC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;QACjB,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,IAAI;QACb,cAAc,EAAE,OAAO,CAAC,0BAA0B,IAAI,IAAI;QAC1D,GAAG,CAAC,oBAAoB;YACtB,CAAC,CAAC;gBACE,yBAAyB,EAAE,OAAO,CAAC,gBAAgB;gBACnD,oBAAoB;aACrB;YACH,CAAC,CAAC,EAAE,CAAC;QACP,kBAAkB,EAAE,OAAO,CAAC,8BAA8B,IAAI,iBAAiB;QAC/E,UAAU,EAAE,OAAO,CAAC,sBAAsB,IAAI,YAAY;QAC1D,QAAQ,EAAE,oBAAoB;YAC5B,CAAC,CAAC,mBAAmB;YACrB,CAAC,CAAC,OAAO,CAAC,0BAA0B;gBAClC,CAAC,CAAC,mBAAmB;gBACrB,CAAC,CAAC,UAAU;KACjB,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"auth-discovery.js","sourceRoot":"","sources":["../../src/routes/auth-discovery.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAmB,MAAM,6BAA6B,CAAC;AAClG,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAGlF,qGAAqG;AACrG,MAAM,UAAU,0BAA0B,CACxC,GAAoB,EACpB,GAAmB,EACnB,GAAQ,EACR,OAAuB,EACvB,GAAe;IAEf,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,UAAU,IAAI,GAAG,CAAC,QAAQ,KAAK,iBAAiB,CAAC,EAAE,CAAC;QAChG,OAAO,KAAK,CAAC;IACf,CAAC;IACD,oBAAoB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/B,IAAI,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,IAAI,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChE,MAAM,oBAAoB,GAAG,oBAAoB,CAC/C,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,gBAAgB,IAAI,IAAI,CAC1D,CAAC;IACF,MAAM,oBAAoB,GACxB,OAAO,CAAC,aAAa,KAAK,SAAS;QACnC,OAAO,CAAC,gBAAgB,KAAK,SAAS;QACtC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC;IACzC,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACtE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;QACjB,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,IAAI;QACb,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,cAAc,EAAE,OAAO,CAAC,0BAA0B,IAAI,IAAI;QAC1D,GAAG,CAAC,oBAAoB;YACtB,CAAC,CAAC;gBACE,yBAAyB,EAAE,OAAO,CAAC,gBAAgB;gBACnD,oBAAoB;aACrB;YACH,CAAC,CAAC,EAAE,CAAC;QACP,kBAAkB,EAAE,OAAO,CAAC,8BAA8B,IAAI,iBAAiB;QAC/E,UAAU,EAAE,OAAO,CAAC,sBAAsB,IAAI,YAAY;QAC1D,QAAQ,EAAE,oBAAoB;YAC5B,CAAC,CAAC,mBAAmB;YACrB,CAAC,CAAC,OAAO,CAAC,0BAA0B;gBAClC,CAAC,CAAC,mBAAmB;gBACrB,CAAC,CAAC,UAAU;KACjB,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,oGAAoG;AACpG,SAAS,gBAAgB,CAAC,KAAyB;IACjD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC;QACH,OAAO,sBAAsB,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/E,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACnE,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACnC,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IACE,GAAG,CAAC,QAAQ,KAAK,QAAQ;QACzB,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,MAAM,KAAK,EAAE;QACjB,GAAG,CAAC,IAAI,KAAK,EAAE,EACf,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;IAClD,MAAM,qBAAqB,GAAG,OAAO,KAAK,EAAE,IAAI,UAAU,KAAK,GAAG,KAAK,GAAG,CAAC;IAC3E,IAAI,UAAU,KAAK,KAAK,IAAI,CAAC,qBAAqB;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC3F,OAAO,KAAK,CAAC;AACf,CAAC"}

package/node_modules/@noodle-borg/service/dist/routes/config-contracts.d.ts

@@ -0,0 +1,181 @@
+import { z } from 'zod';
+import type { ConfigSource } from '../config-value-projection.js';
+export declare const ConfigSourceSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"organization">;
+    organizationId: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"app">;
+    organizationId: z.ZodString;
+    appId: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"environment">;
+    organizationId: z.ZodString;
+    appId: z.ZodString;
+    environmentId: z.ZodString;
+    environmentName: z.ZodString;
+    isProduction: z.ZodBoolean;
+}, z.core.$strict>], "kind">;
+export declare const EffectiveSecretConfigRowSchema: z.ZodObject<{
+    name: z.ZodString;
+    source: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"organization">;
+        organizationId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"app">;
+        organizationId: z.ZodString;
+        appId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"environment">;
+        organizationId: z.ZodString;
+        appId: z.ZodString;
+        environmentId: z.ZodString;
+        environmentName: z.ZodString;
+        isProduction: z.ZodBoolean;
+    }, z.core.$strict>], "kind">;
+    fallbackSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"organization">;
+        organizationId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"app">;
+        organizationId: z.ZodString;
+        appId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"environment">;
+        organizationId: z.ZodString;
+        appId: z.ZodString;
+        environmentId: z.ZodString;
+        environmentName: z.ZodString;
+        isProduction: z.ZodBoolean;
+    }, z.core.$strict>], "kind">>;
+}, z.core.$strict>;
+export declare const EffectiveVariableConfigRowSchema: z.ZodObject<{
+    name: z.ZodString;
+    source: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"organization">;
+        organizationId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"app">;
+        organizationId: z.ZodString;
+        appId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"environment">;
+        organizationId: z.ZodString;
+        appId: z.ZodString;
+        environmentId: z.ZodString;
+        environmentName: z.ZodString;
+        isProduction: z.ZodBoolean;
+    }, z.core.$strict>], "kind">;
+    fallbackSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"organization">;
+        organizationId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"app">;
+        organizationId: z.ZodString;
+        appId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"environment">;
+        organizationId: z.ZodString;
+        appId: z.ZodString;
+        environmentId: z.ZodString;
+        environmentName: z.ZodString;
+        isProduction: z.ZodBoolean;
+    }, z.core.$strict>], "kind">>;
+    value: z.ZodString;
+}, z.core.$strict>;
+export declare const EffectiveConfigResponseSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    environment: z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        isProduction: z.ZodBoolean;
+    }, z.core.$strict>;
+    capabilities: z.ZodObject<{
+        canManage: z.ZodBoolean;
+        canReveal: z.ZodBoolean;
+    }, z.core.$strict>;
+    kind: z.ZodLiteral<"secret">;
+    entries: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        source: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"organization">;
+            organizationId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"app">;
+            organizationId: z.ZodString;
+            appId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"environment">;
+            organizationId: z.ZodString;
+            appId: z.ZodString;
+            environmentId: z.ZodString;
+            environmentName: z.ZodString;
+            isProduction: z.ZodBoolean;
+        }, z.core.$strict>], "kind">;
+        fallbackSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"organization">;
+            organizationId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"app">;
+            organizationId: z.ZodString;
+            appId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"environment">;
+            organizationId: z.ZodString;
+            appId: z.ZodString;
+            environmentId: z.ZodString;
+            environmentName: z.ZodString;
+            isProduction: z.ZodBoolean;
+        }, z.core.$strict>], "kind">>;
+    }, z.core.$strict>>;
+}, z.core.$strict>, z.ZodObject<{
+    environment: z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        isProduction: z.ZodBoolean;
+    }, z.core.$strict>;
+    capabilities: z.ZodObject<{
+        canManage: z.ZodBoolean;
+        canReveal: z.ZodBoolean;
+    }, z.core.$strict>;
+    kind: z.ZodLiteral<"variable">;
+    entries: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        source: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"organization">;
+            organizationId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"app">;
+            organizationId: z.ZodString;
+            appId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"environment">;
+            organizationId: z.ZodString;
+            appId: z.ZodString;
+            environmentId: z.ZodString;
+            environmentName: z.ZodString;
+            isProduction: z.ZodBoolean;
+        }, z.core.$strict>], "kind">;
+        fallbackSource: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"organization">;
+            organizationId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"app">;
+            organizationId: z.ZodString;
+            appId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"environment">;
+            organizationId: z.ZodString;
+            appId: z.ZodString;
+            environmentId: z.ZodString;
+            environmentName: z.ZodString;
+            isProduction: z.ZodBoolean;
+        }, z.core.$strict>], "kind">>;
+        value: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>], "kind">;
+export type RevealSecretResponse = {
+    readonly ok: true;
+    readonly value: string;
+    readonly source: ConfigSource;
+};
+export declare const RevealSecretResponseSchema: z.ZodType<RevealSecretResponse>;
+//# sourceMappingURL=config-contracts.d.ts.map

package/node_modules/@noodle-borg/service/dist/routes/config-contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-contracts.d.ts","sourceRoot":"","sources":["../../src/routes/config-contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAElE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;4BAa7B,CAAC;AAUH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAA+B,CAAC;AAE3E,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAElC,CAAC;AASZ,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BASxC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;CAC/B,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAM5D,CAAC"}

package/node_modules/@noodle-borg/service/dist/routes/config-contracts.js

@@ -0,0 +1,50 @@
+import { z } from 'zod';
+export const ConfigSourceSchema = z.discriminatedUnion('kind', [
+    z.object({ kind: z.literal('organization'), organizationId: z.string() }).strict(),
+    z.object({ kind: z.literal('app'), organizationId: z.string(), appId: z.string() }).strict(),
+    z
+        .object({
+        kind: z.literal('environment'),
+        organizationId: z.string(),
+        appId: z.string(),
+        environmentId: z.string(),
+        environmentName: z.string(),
+        isProduction: z.boolean(),
+    })
+        .strict(),
+]);
+const EffectiveConfigRowBaseSchema = z
+    .object({
+    name: z.string(),
+    source: ConfigSourceSchema,
+    fallbackSource: ConfigSourceSchema.optional(),
+})
+    .strict();
+export const EffectiveSecretConfigRowSchema = EffectiveConfigRowBaseSchema;
+export const EffectiveVariableConfigRowSchema = EffectiveConfigRowBaseSchema.extend({
+    value: z.string(),
+}).strict();
+const EffectiveConfigResponseBaseSchema = z
+    .object({
+    environment: z.object({ id: z.string(), name: z.string(), isProduction: z.boolean() }).strict(),
+    capabilities: z.object({ canManage: z.boolean(), canReveal: z.boolean() }).strict(),
+})
+    .strict();
+export const EffectiveConfigResponseSchema = z.discriminatedUnion('kind', [
+    EffectiveConfigResponseBaseSchema.extend({
+        kind: z.literal('secret'),
+        entries: z.array(EffectiveSecretConfigRowSchema),
+    }).strict(),
+    EffectiveConfigResponseBaseSchema.extend({
+        kind: z.literal('variable'),
+        entries: z.array(EffectiveVariableConfigRowSchema),
+    }).strict(),
+]);
+export const RevealSecretResponseSchema = z
+    .object({
+    ok: z.literal(true),
+    value: z.string(),
+    source: ConfigSourceSchema,
+})
+    .strict();
+//# sourceMappingURL=config-contracts.js.map

package/node_modules/@noodle-borg/service/dist/routes/config-contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-contracts.js","sourceRoot":"","sources":["../../src/routes/config-contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC7D,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAClF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAC5F,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QAC9B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;QAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;QACzB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;QAC3B,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;KAC1B,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAC;AAEH,MAAM,4BAA4B,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,kBAAkB;IAC1B,cAAc,EAAE,kBAAkB,CAAC,QAAQ,EAAE;CAC9C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,8BAA8B,GAAG,4BAA4B,CAAC;AAE3E,MAAM,CAAC,MAAM,gCAAgC,GAAG,4BAA4B,CAAC,MAAM,CAAC;IAClF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,iCAAiC,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAC/F,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;CACpF,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACxE,iCAAiC,CAAC,MAAM,CAAC;QACvC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC;KACjD,CAAC,CAAC,MAAM,EAAE;IACX,iCAAiC,CAAC,MAAM,CAAC;QACvC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC3B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,gCAAgC,CAAC;KACnD,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC;AAQH,MAAM,CAAC,MAAM,0BAA0B,GAAoC,CAAC;KACzE,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,MAAM,EAAE,kBAAkB;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC"}

package/node_modules/@noodle-borg/service/dist/routes/config-values-dispatch.d.ts

@@ -0,0 +1,20 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { TlsPosture } from '@noodle-borg/transport-http';
+import type { DeployAuthGate } from '../auth/deploy-gate.js';
+import type { ServerRegistry } from '../registry.js';
+import type { AuditSink } from '../store/audit.js';
+import type { ConfigStore, ControlPlaneStore } from '../store.js';
+export interface ConfigValueDispatchDeps {
+    readonly gate: DeployAuthGate;
+    readonly controlPlane: ControlPlaneStore;
+    readonly configStore: ConfigStore;
+    readonly registry: ServerRegistry;
+    readonly maxBody: number;
+    readonly audit: AuditSink;
+    readonly applySecurityHeaders: (res: ServerResponse, tls: TlsPosture) => void;
+    readonly enforceHttps: (req: IncomingMessage, res: ServerResponse, tls: TlsPosture) => boolean;
+    readonly sendJson: (res: ServerResponse, status: number, body: unknown) => void;
+    readonly tls: TlsPosture;
+}
+export declare function dispatchConfigValueRequest(req: IncomingMessage, res: ServerResponse, url: URL, deps: ConfigValueDispatchDeps): boolean;
+//# sourceMappingURL=config-values-dispatch.d.ts.map

package/node_modules/@noodle-borg/service/dist/routes/config-values-dispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-values-dispatch.d.ts","sourceRoot":"","sources":["../../src/routes/config-values-dispatch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAIlE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,oBAAoB,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,KAAK,IAAI,CAAC;IAC9E,QAAQ,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,KAAK,OAAO,CAAC;IAC/F,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IAChF,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;CAC1B;AAED,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,uBAAuB,GAC5B,OAAO,CAiCT"}

package/node_modules/@noodle-borg/service/dist/routes/config-values-dispatch.js

@@ -0,0 +1,37 @@
+import { handleConfigValues } from './config-values.js';
+import { parseConfigPath } from './config-values-paths.js';
+export function dispatchConfigValueRequest(req, res, url, deps) {
+    const ref = parseConfigPath(url.pathname, url.searchParams);
+    if (ref === undefined)
+        return false;
+    if (ref.reveal)
+        res.setHeader('Cache-Control', 'no-store');
+    if (ref.reveal && ref.invalid !== undefined) {
+        deps.applySecurityHeaders(res, deps.tls);
+        if (deps.enforceHttps(req, res, deps.tls))
+            return true;
+        deps.sendJson(res, 400, { error: ref.invalid });
+        return true;
+    }
+    if (ref.reveal && req.method !== 'POST') {
+        deps.applySecurityHeaders(res, deps.tls);
+        if (deps.enforceHttps(req, res, deps.tls))
+            return true;
+        deps.sendJson(res, 404, { error: 'not found' });
+        return true;
+    }
+    if (!ref.reveal && !isConfigMethod(req.method))
+        return false;
+    deps.applySecurityHeaders(res, deps.tls);
+    if (deps.enforceHttps(req, res, deps.tls))
+        return true;
+    handleConfigValues(req, res, deps.gate, deps.controlPlane, deps.configStore, deps.registry, deps.maxBody, ref, deps.audit).catch(() => {
+        if (!res.headersSent)
+            deps.sendJson(res, 500, { error: 'internal error' });
+    });
+    return true;
+}
+function isConfigMethod(method) {
+    return method === 'GET' || method === 'PUT' || method === 'DELETE';
+}
+//# sourceMappingURL=config-values-dispatch.js.map

package/node_modules/@noodle-borg/service/dist/routes/config-values-dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-values-dispatch.js","sourceRoot":"","sources":["../../src/routes/config-values-dispatch.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAe3D,MAAM,UAAU,0BAA0B,CACxC,GAAoB,EACpB,GAAmB,EACnB,GAAQ,EACR,IAA6B;IAE7B,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;IAC5D,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,GAAG,CAAC,MAAM;QAAE,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IAC3D,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC5C,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACvD,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACxC,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACvD,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,kBAAkB,CAChB,GAAG,EACH,GAAG,EACH,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,OAAO,EACZ,GAAG,EACH,IAAI,CAAC,KAAK,CACX,CAAC,KAAK,CAAC,GAAG,EAAE;QACX,IAAI,CAAC,GAAG,CAAC,WAAW;YAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,MAA0B;IAChD,OAAO,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,QAAQ,CAAC;AACrE,CAAC"}

package/node_modules/@noodle-borg/service/dist/routes/config-values-paths.d.ts

@@ -0,0 +1,12 @@
+import { type ConfigScope, type ManagedConfigKind } from '../store.js';
+export interface ConfigRouteRef {
+    readonly kind: ManagedConfigKind;
+    readonly scope: ConfigScope;
+    readonly name?: string;
+    readonly effective?: boolean;
+    readonly reveal?: boolean;
+    readonly invalid?: string;
+}
+export declare function parseConfigPath(pathname: string, searchParams?: URLSearchParams): ConfigRouteRef | undefined;
+export declare function configRouteRef(kind: ManagedConfigKind, scope: ConfigScope, encodedName: string | undefined, searchParams?: URLSearchParams, reveal?: boolean): ConfigRouteRef | undefined;
+//# sourceMappingURL=config-values-paths.d.ts.map

package/node_modules/@noodle-borg/service/dist/routes/config-values-paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-values-paths.d.ts","sourceRoot":"","sources":["../../src/routes/config-values-paths.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,iBAAiB,EAGvB,MAAM,aAAa,CAAC;AAErB,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,YAAY,CAAC,EAAE,eAAe,GAC7B,cAAc,GAAG,SAAS,CAyD5B;AA+BD,wBAAgB,cAAc,CAC5B,IAAI,EAAE,iBAAiB,EACvB,KAAK,EAAE,WAAW,EAClB,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,YAAY,CAAC,EAAE,eAAe,EAC9B,MAAM,UAAQ,GACb,cAAc,GAAG,SAAS,CAoB5B"}

package/node_modules/@noodle-borg/service/dist/routes/config-values-paths.js

@@ -0,0 +1,88 @@
+import { validateConfigName, validateConfigScope, } from '../store.js';
+export function parseConfigPath(pathname, searchParams) {
+    const kindPattern = '(secrets|variables)';
+    const reveal = /^\/v1\/orgs\/([^/]+)\/apps\/([^/]+)\/envs\/([^/]+)\/secrets\/([^/]+)\/reveal$/.exec(pathname);
+    if (reveal) {
+        return encodedConfigRouteRef('secret', {
+            level: 'env',
+            org: reveal[1],
+            app: reveal[2],
+            env: reveal[3],
+        }, reveal[4], undefined, true);
+    }
+    const org = new RegExp(`^/v1/orgs/([^/]+)/${kindPattern}(?:/([^/]+))?$`).exec(pathname);
+    if (org) {
+        return encodedConfigRouteRef(org[2] === 'secrets' ? 'secret' : 'variable', { level: 'org', org: org[1] }, org[3], searchParams);
+    }
+    const app = new RegExp(`^/v1/orgs/([^/]+)/apps/([^/]+)/${kindPattern}(?:/([^/]+))?$`).exec(pathname);
+    if (app) {
+        return encodedConfigRouteRef(app[3] === 'secrets' ? 'secret' : 'variable', {
+            level: 'app',
+            org: app[1],
+            app: app[2],
+        }, app[4], searchParams);
+    }
+    const env = new RegExp(`^/v1/orgs/([^/]+)/apps/([^/]+)/envs/([^/]+)/${kindPattern}(?:/([^/]+))?$`).exec(pathname);
+    if (!env)
+        return undefined;
+    return encodedConfigRouteRef(env[4] === 'secrets' ? 'secret' : 'variable', {
+        level: 'env',
+        org: env[1],
+        app: env[2],
+        env: env[3],
+    }, env[5], searchParams);
+}
+function encodedConfigRouteRef(kind, encodedScope, encodedName, searchParams, reveal = false) {
+    try {
+        const scope = encodedScope.level === 'org'
+            ? { level: 'org', org: decodeURIComponent(encodedScope.org) }
+            : encodedScope.level === 'app'
+                ? {
+                    level: 'app',
+                    org: decodeURIComponent(encodedScope.org),
+                    app: decodeURIComponent(encodedScope.app),
+                }
+                : {
+                    level: 'env',
+                    org: decodeURIComponent(encodedScope.org),
+                    app: decodeURIComponent(encodedScope.app),
+                    env: decodeURIComponent(encodedScope.env),
+                };
+        return configRouteRef(kind, scope, encodedName, searchParams, reveal);
+    }
+    catch {
+        return invalidConfigRouteRef(kind, encodedName, reveal);
+    }
+}
+export function configRouteRef(kind, scope, encodedName, searchParams, reveal = false) {
+    let safeScope;
+    try {
+        safeScope = validateConfigScope(scope);
+    }
+    catch {
+        return invalidConfigRouteRef(kind, encodedName, reveal);
+    }
+    try {
+        const name = encodedName !== undefined ? validateConfigName(decodeURIComponent(encodedName)) : undefined;
+        return {
+            kind,
+            scope: safeScope,
+            ...(name !== undefined ? { name } : {}),
+            ...(searchParams?.get('view') === 'effective' ? { effective: true } : {}),
+            ...(reveal ? { reveal: true } : {}),
+        };
+    }
+    catch {
+        return invalidConfigRouteRef(kind, encodedName, reveal, safeScope);
+    }
+}
+function invalidConfigRouteRef(kind, encodedName, reveal, scope = { level: 'org', org: '__invalid__' }) {
+    return {
+        kind,
+        scope,
+        ...(encodedName !== undefined ? { name: '__invalid__' } : {}),
+        ...(reveal ? { reveal: true } : {}),
+        invalid: 'invalid config scope or name',
+    };
+}
+//# sourceMappingURL=config-values-paths.js.map

package/node_modules/@noodle-borg/service/dist/routes/config-values-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-values-paths.js","sourceRoot":"","sources":["../../src/routes/config-values-paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAWrB,MAAM,UAAU,eAAe,CAC7B,QAAgB,EAChB,YAA8B;IAE9B,MAAM,WAAW,GAAG,qBAAqB,CAAC;IAC1C,MAAM,MAAM,GACV,+EAA+E,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjG,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,qBAAqB,CAC1B,QAAQ,EACR;YACE,KAAK,EAAE,KAAK;YACZ,GAAG,EAAE,MAAM,CAAC,CAAC,CAAW;YACxB,GAAG,EAAE,MAAM,CAAC,CAAC,CAAW;YACxB,GAAG,EAAE,MAAM,CAAC,CAAC,CAAW;SACzB,EACD,MAAM,CAAC,CAAC,CAAC,EACT,SAAS,EACT,IAAI,CACL,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,qBAAqB,WAAW,gBAAgB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxF,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,qBAAqB,CAC1B,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,EAC5C,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAW,EAAE,EACvC,GAAG,CAAC,CAAC,CAAC,EACN,YAAY,CACb,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,kCAAkC,WAAW,gBAAgB,CAAC,CAAC,IAAI,CACxF,QAAQ,CACT,CAAC;IACF,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,qBAAqB,CAC1B,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,EAC5C;YACE,KAAK,EAAE,KAAK;YACZ,GAAG,EAAE,GAAG,CAAC,CAAC,CAAW;YACrB,GAAG,EAAE,GAAG,CAAC,CAAC,CAAW;SACtB,EACD,GAAG,CAAC,CAAC,CAAC,EACN,YAAY,CACb,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,MAAM,CACpB,+CAA+C,WAAW,gBAAgB,CAC3E,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjB,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAO,qBAAqB,CAC1B,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,EAC5C;QACE,KAAK,EAAE,KAAK;QACZ,GAAG,EAAE,GAAG,CAAC,CAAC,CAAW;QACrB,GAAG,EAAE,GAAG,CAAC,CAAC,CAAW;QACrB,GAAG,EAAE,GAAG,CAAC,CAAC,CAAW;KACtB,EACD,GAAG,CAAC,CAAC,CAAC,EACN,YAAY,CACb,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,IAAuB,EACvB,YAAyB,EACzB,WAA+B,EAC/B,YAA8B,EAC9B,MAAM,GAAG,KAAK;IAEd,IAAI,CAAC;QACH,MAAM,KAAK,GACT,YAAY,CAAC,KAAK,KAAK,KAAK;YAC1B,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,kBAAkB,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE;YAC7D,CAAC,CAAC,YAAY,CAAC,KAAK,KAAK,KAAK;gBAC5B,CAAC,CAAC;oBACE,KAAK,EAAE,KAAK;oBACZ,GAAG,EAAE,kBAAkB,CAAC,YAAY,CAAC,GAAG,CAAC;oBACzC,GAAG,EAAE,kBAAkB,CAAC,YAAY,CAAC,GAAG,CAAC;iBAC1C;gBACH,CAAC,CAAC;oBACE,KAAK,EAAE,KAAK;oBACZ,GAAG,EAAE,kBAAkB,CAAC,YAAY,CAAC,GAAG,CAAC;oBACzC,GAAG,EAAE,kBAAkB,CAAC,YAAY,CAAC,GAAG,CAAC;oBACzC,GAAG,EAAE,kBAAkB,CAAC,YAAY,CAAC,GAAG,CAAC;iBAC1C,CAAC;QACV,OAAO,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,qBAAqB,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,IAAuB,EACvB,KAAkB,EAClB,WAA+B,EAC/B,YAA8B,EAC9B,MAAM,GAAG,KAAK;IAEd,IAAI,SAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,qBAAqB,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GACR,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9F,OAAO;YACL,IAAI;YACJ,KAAK,EAAE,SAAS;YAChB,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,qBAAqB,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC5B,IAAuB,EACvB,WAA+B,EAC/B,MAAe,EACf,QAAqB,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,aAAa,EAAE;IAEzD,OAAO;QACL,IAAI;QACJ,KAAK;QACL,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,8BAA8B;KACxC,CAAC;AACJ,CAAC"}

package/node_modules/@noodle-borg/service/dist/routes/config-values.d.ts

@@ -0,0 +1,8 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { DeployAuthGate } from '../auth/deploy-gate.js';
+import type { ServerRegistry } from '../registry.js';
+import type { AuditSink } from '../store/audit.js';
+import type { ConfigStore, ControlPlaneStore } from '../store.js';
+import type { ConfigRouteRef } from './config-values-paths.js';
+export declare function handleConfigValues(req: IncomingMessage, res: ServerResponse, gate: DeployAuthGate, controlPlane: ControlPlaneStore, configStore: ConfigStore, registry: ServerRegistry, maxBody: number, ref: ConfigRouteRef, audit: AuditSink): Promise<void>;
+//# sourceMappingURL=config-values.d.ts.map

package/node_modules/@noodle-borg/service/dist/routes/config-values.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-values.d.ts","sourceRoot":"","sources":["../../src/routes/config-values.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,KAAK,EAAwB,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAMnF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAElE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG/D,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,cAAc,EACpB,YAAY,EAAE,iBAAiB,EAC/B,WAAW,EAAE,WAAW,EACxB,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,SAAS,GACf,OAAO,CAAC,IAAI,CAAC,CAuEf"}