@noodleseed/one 0.93.0 → 0.94.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/bin.js +0 -0
- package/dist/deploy.js +1 -1
- package/dist/deploy.js.map +1 -1
- package/dist/index.d.ts +1 -1
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +1 -1
- package/dist/index.js.map +1 -1
- package/dist/platform-support.js +2 -2
- package/dist/platform-support.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/curated/error-fixes.d.ts.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/curated/error-fixes.js +8 -0
- package/node_modules/@noodle-borg/agent-kit/dist/curated/error-fixes.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/generated/example-files.js +3 -3
- package/node_modules/@noodle-borg/agent-kit/dist/generated/example-files.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/generated/surface.d.ts.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/generated/surface.js +9 -0
- package/node_modules/@noodle-borg/agent-kit/dist/generated/surface.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/plugin-bundle.d.ts.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/plugin-bundle.js +8 -0
- package/node_modules/@noodle-borg/agent-kit/dist/plugin-bundle.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/plugin-launcher.d.ts.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/plugin-launcher.js +24 -1
- package/node_modules/@noodle-borg/agent-kit/dist/plugin-launcher.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/plugin-manifests.js +30 -22
- package/node_modules/@noodle-borg/agent-kit/dist/plugin-manifests.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/plugin-marketplace-docs.d.ts.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/plugin-marketplace-docs.js +15 -0
- package/node_modules/@noodle-borg/agent-kit/dist/plugin-marketplace-docs.js.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/plugin-platform-support.d.ts +13 -0
- package/node_modules/@noodle-borg/agent-kit/dist/plugin-platform-support.d.ts.map +1 -0
- package/node_modules/@noodle-borg/agent-kit/dist/plugin-platform-support.js +13 -0
- package/node_modules/@noodle-borg/agent-kit/dist/plugin-platform-support.js.map +1 -0
- package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-auth-ref.d.ts +2 -0
- package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-auth-ref.d.ts.map +1 -0
- package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-auth-ref.js +171 -0
- package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-auth-ref.js.map +1 -0
- package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-refs.d.ts.map +1 -1
- package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-refs.js +3 -97
- package/node_modules/@noodle-borg/agent-kit/dist/skill-authoring-refs.js.map +1 -1
- package/node_modules/@noodle-borg/auth/dist/claims.d.ts +2 -0
- package/node_modules/@noodle-borg/auth/dist/claims.d.ts.map +1 -1
- package/node_modules/@noodle-borg/auth/dist/claims.js +15 -0
- package/node_modules/@noodle-borg/auth/dist/claims.js.map +1 -1
- package/node_modules/@noodle-borg/auth/dist/index.d.ts +2 -2
- package/node_modules/@noodle-borg/auth/dist/index.d.ts.map +1 -1
- package/node_modules/@noodle-borg/auth/dist/index.js +1 -1
- package/node_modules/@noodle-borg/auth/dist/index.js.map +1 -1
- package/node_modules/@noodle-borg/auth/dist/verify.d.ts +10 -1
- package/node_modules/@noodle-borg/auth/dist/verify.d.ts.map +1 -1
- package/node_modules/@noodle-borg/auth/dist/verify.js +9 -2
- package/node_modules/@noodle-borg/auth/dist/verify.js.map +1 -1
- package/node_modules/@noodle-borg/authoring/dist/connectors.d.ts +2 -2
- package/node_modules/@noodle-borg/authoring/dist/connectors.d.ts.map +1 -1
- package/node_modules/@noodle-borg/authoring/dist/connectors.js +4 -1
- package/node_modules/@noodle-borg/authoring/dist/connectors.js.map +1 -1
- package/node_modules/@noodle-borg/authoring/dist/customer-auth.d.ts +13 -0
- package/node_modules/@noodle-borg/authoring/dist/customer-auth.d.ts.map +1 -1
- package/node_modules/@noodle-borg/authoring/dist/customer-auth.js +31 -2
- package/node_modules/@noodle-borg/authoring/dist/customer-auth.js.map +1 -1
- package/node_modules/@noodle-borg/authoring/dist/customer-endpoint.d.ts +10 -0
- package/node_modules/@noodle-borg/authoring/dist/customer-endpoint.d.ts.map +1 -0
- package/node_modules/@noodle-borg/authoring/dist/customer-endpoint.js +18 -0
- package/node_modules/@noodle-borg/authoring/dist/customer-endpoint.js.map +1 -0
- package/node_modules/@noodle-borg/authoring/dist/index.d.ts +2 -1
- package/node_modules/@noodle-borg/authoring/dist/index.d.ts.map +1 -1
- package/node_modules/@noodle-borg/authoring/dist/index.js +1 -0
- package/node_modules/@noodle-borg/authoring/dist/index.js.map +1 -1
- package/node_modules/@noodle-borg/authoring/dist/server.d.ts +1 -1
- package/node_modules/@noodle-borg/authoring/dist/server.d.ts.map +1 -1
- package/node_modules/@noodle-borg/authoring/dist/server.js +1 -13
- package/node_modules/@noodle-borg/authoring/dist/server.js.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/artifact/assemble.d.ts +27 -0
- package/node_modules/@noodle-borg/compiler/dist/artifact/assemble.d.ts.map +1 -0
- package/node_modules/@noodle-borg/compiler/dist/artifact/assemble.js +73 -0
- package/node_modules/@noodle-borg/compiler/dist/artifact/assemble.js.map +1 -0
- package/node_modules/@noodle-borg/compiler/dist/artifact/catalog-emission.d.ts +50 -0
- package/node_modules/@noodle-borg/compiler/dist/artifact/catalog-emission.d.ts.map +1 -0
- package/node_modules/@noodle-borg/compiler/dist/artifact/catalog-emission.js +119 -0
- package/node_modules/@noodle-borg/compiler/dist/artifact/catalog-emission.js.map +1 -0
- package/node_modules/@noodle-borg/compiler/dist/artifact/types.d.ts +22 -1
- package/node_modules/@noodle-borg/compiler/dist/artifact/types.d.ts.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/artifact/types.js +5 -1
- package/node_modules/@noodle-borg/compiler/dist/artifact/types.js.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/catalog/in-memory.js +1 -1
- package/node_modules/@noodle-borg/compiler/dist/catalog/in-memory.js.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/catalog/types.d.ts +8 -0
- package/node_modules/@noodle-borg/compiler/dist/catalog/types.d.ts.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/catalog/types.js +0 -9
- package/node_modules/@noodle-borg/compiler/dist/catalog/types.js.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/compile.d.ts +1 -11
- package/node_modules/@noodle-borg/compiler/dist/compile.d.ts.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/compile.js +29 -163
- package/node_modules/@noodle-borg/compiler/dist/compile.js.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/context-compile.d.ts +2 -1
- package/node_modules/@noodle-borg/compiler/dist/context-compile.d.ts.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/context-compile.js +3 -1
- package/node_modules/@noodle-borg/compiler/dist/context-compile.js.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/customer-endpoint.d.ts +34 -0
- package/node_modules/@noodle-borg/compiler/dist/customer-endpoint.d.ts.map +1 -0
- package/node_modules/@noodle-borg/compiler/dist/customer-endpoint.js +240 -0
- package/node_modules/@noodle-borg/compiler/dist/customer-endpoint.js.map +1 -0
- package/node_modules/@noodle-borg/compiler/dist/customer-routing.d.ts +24 -0
- package/node_modules/@noodle-borg/compiler/dist/customer-routing.d.ts.map +1 -0
- package/node_modules/@noodle-borg/compiler/dist/customer-routing.js +136 -0
- package/node_modules/@noodle-borg/compiler/dist/customer-routing.js.map +1 -0
- package/node_modules/@noodle-borg/compiler/dist/errors.d.ts +1 -1
- package/node_modules/@noodle-borg/compiler/dist/errors.d.ts.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/fulfilment-emit.d.ts +7 -3
- package/node_modules/@noodle-borg/compiler/dist/fulfilment-emit.d.ts.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/fulfilment-emit.js +7 -1
- package/node_modules/@noodle-borg/compiler/dist/fulfilment-emit.js.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/index.d.ts +3 -2
- package/node_modules/@noodle-borg/compiler/dist/index.d.ts.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/index.js +1 -0
- package/node_modules/@noodle-borg/compiler/dist/index.js.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/manifest/auth-schema.d.ts +110 -0
- package/node_modules/@noodle-borg/compiler/dist/manifest/auth-schema.d.ts.map +1 -0
- package/node_modules/@noodle-borg/compiler/dist/manifest/auth-schema.js +191 -0
- package/node_modules/@noodle-borg/compiler/dist/manifest/auth-schema.js.map +1 -0
- package/node_modules/@noodle-borg/compiler/dist/manifest/schema.d.ts +12 -0
- package/node_modules/@noodle-borg/compiler/dist/manifest/schema.d.ts.map +1 -1
- package/node_modules/@noodle-borg/compiler/dist/manifest/schema.js +1 -73
- package/node_modules/@noodle-borg/compiler/dist/manifest/schema.js.map +1 -1
- package/node_modules/@noodle-borg/compiler/package.json +1 -0
- package/node_modules/@noodle-borg/compute/dist/code-connector.d.ts +1 -0
- package/node_modules/@noodle-borg/compute/dist/code-connector.d.ts.map +1 -1
- package/node_modules/@noodle-borg/compute/dist/code-connector.js.map +1 -1
- package/node_modules/@noodle-borg/connector-defs/dist/call-graph.d.ts.map +1 -1
- package/node_modules/@noodle-borg/connector-defs/dist/call-graph.js +6 -6
- package/node_modules/@noodle-borg/connector-defs/dist/call-graph.js.map +1 -1
- package/node_modules/@noodle-borg/connector-defs/dist/compile-auth.d.ts +2 -0
- package/node_modules/@noodle-borg/connector-defs/dist/compile-auth.d.ts.map +1 -1
- package/node_modules/@noodle-borg/connector-defs/dist/compile-auth.js +12 -9
- package/node_modules/@noodle-borg/connector-defs/dist/compile-auth.js.map +1 -1
- package/node_modules/@noodle-borg/connector-defs/dist/compile-http.d.ts +14 -0
- package/node_modules/@noodle-borg/connector-defs/dist/compile-http.d.ts.map +1 -0
- package/node_modules/@noodle-borg/connector-defs/dist/compile-http.js +347 -0
- package/node_modules/@noodle-borg/connector-defs/dist/compile-http.js.map +1 -0
- package/node_modules/@noodle-borg/connector-defs/dist/compile.d.ts +4 -2
- package/node_modules/@noodle-borg/connector-defs/dist/compile.d.ts.map +1 -1
- package/node_modules/@noodle-borg/connector-defs/dist/compile.js +17 -333
- package/node_modules/@noodle-borg/connector-defs/dist/compile.js.map +1 -1
- package/node_modules/@noodle-borg/connector-defs/dist/customer-routing.d.ts +11 -0
- package/node_modules/@noodle-borg/connector-defs/dist/customer-routing.d.ts.map +1 -0
- package/node_modules/@noodle-borg/connector-defs/dist/customer-routing.js +124 -0
- package/node_modules/@noodle-borg/connector-defs/dist/customer-routing.js.map +1 -0
- package/node_modules/@noodle-borg/connector-defs/dist/http-headers.d.ts +4 -0
- package/node_modules/@noodle-borg/connector-defs/dist/http-headers.d.ts.map +1 -0
- package/node_modules/@noodle-borg/connector-defs/dist/http-headers.js +52 -0
- package/node_modules/@noodle-borg/connector-defs/dist/http-headers.js.map +1 -0
- package/node_modules/@noodle-borg/connector-defs/dist/identity-key.d.ts +5 -0
- package/node_modules/@noodle-borg/connector-defs/dist/identity-key.d.ts.map +1 -0
- package/node_modules/@noodle-borg/connector-defs/dist/identity-key.js +9 -0
- package/node_modules/@noodle-borg/connector-defs/dist/identity-key.js.map +1 -0
- package/node_modules/@noodle-borg/connector-defs/dist/schema.d.ts +33 -3
- package/node_modules/@noodle-borg/connector-defs/dist/schema.d.ts.map +1 -1
- package/node_modules/@noodle-borg/connector-defs/dist/schema.js +22 -3
- package/node_modules/@noodle-borg/connector-defs/dist/schema.js.map +1 -1
- package/node_modules/@noodle-borg/connector-http/dist/customer-route.d.ts +17 -0
- package/node_modules/@noodle-borg/connector-http/dist/customer-route.d.ts.map +1 -0
- package/node_modules/@noodle-borg/connector-http/dist/customer-route.js +77 -0
- package/node_modules/@noodle-borg/connector-http/dist/customer-route.js.map +1 -0
- package/node_modules/@noodle-borg/connector-http/dist/http-connector.d.ts +2 -2
- package/node_modules/@noodle-borg/connector-http/dist/http-connector.d.ts.map +1 -1
- package/node_modules/@noodle-borg/connector-http/dist/http-connector.js +64 -67
- package/node_modules/@noodle-borg/connector-http/dist/http-connector.js.map +1 -1
- package/node_modules/@noodle-borg/connector-http/dist/http-response.d.ts.map +1 -1
- package/node_modules/@noodle-borg/connector-http/dist/http-response.js +23 -21
- package/node_modules/@noodle-borg/connector-http/dist/http-response.js.map +1 -1
- package/node_modules/@noodle-borg/connector-http/dist/ssrf.d.ts.map +1 -1
- package/node_modules/@noodle-borg/connector-http/dist/ssrf.js +17 -2
- package/node_modules/@noodle-borg/connector-http/dist/ssrf.js.map +1 -1
- package/node_modules/@noodle-borg/connector-http/dist/url-resolution.d.ts +4 -0
- package/node_modules/@noodle-borg/connector-http/dist/url-resolution.d.ts.map +1 -0
- package/node_modules/@noodle-borg/connector-http/dist/url-resolution.js +31 -0
- package/node_modules/@noodle-borg/connector-http/dist/url-resolution.js.map +1 -0
- package/node_modules/@noodle-borg/module/dist/contract.d.ts +14 -2
- package/node_modules/@noodle-borg/module/dist/contract.d.ts.map +1 -1
- package/node_modules/@noodle-borg/module/dist/contract.js.map +1 -1
- package/node_modules/@noodle-borg/protocol/dist/mapping.d.ts.map +1 -1
- package/node_modules/@noodle-borg/protocol/dist/mapping.js +17 -0
- package/node_modules/@noodle-borg/protocol/dist/mapping.js.map +1 -1
- package/node_modules/@noodle-borg/protocol/dist/sdk-server.d.ts +4 -0
- package/node_modules/@noodle-borg/protocol/dist/sdk-server.d.ts.map +1 -1
- package/node_modules/@noodle-borg/protocol/dist/sdk-server.js +7 -1
- package/node_modules/@noodle-borg/protocol/dist/sdk-server.js.map +1 -1
- package/node_modules/@noodle-borg/runtime/dist/broker/types.d.ts +24 -3
- package/node_modules/@noodle-borg/runtime/dist/broker/types.d.ts.map +1 -1
- package/node_modules/@noodle-borg/runtime/dist/broker/types.js +21 -0
- package/node_modules/@noodle-borg/runtime/dist/broker/types.js.map +1 -1
- package/node_modules/@noodle-borg/runtime/dist/confirmation.d.ts.map +1 -1
- package/node_modules/@noodle-borg/runtime/dist/confirmation.js +10 -0
- package/node_modules/@noodle-borg/runtime/dist/confirmation.js.map +1 -1
- package/node_modules/@noodle-borg/runtime/dist/connector/failure-details.d.ts +8 -0
- package/node_modules/@noodle-borg/runtime/dist/connector/failure-details.d.ts.map +1 -0
- package/node_modules/@noodle-borg/runtime/dist/connector/failure-details.js +53 -0
- package/node_modules/@noodle-borg/runtime/dist/connector/failure-details.js.map +1 -0
- package/node_modules/@noodle-borg/runtime/dist/connector/types.d.ts +7 -0
- package/node_modules/@noodle-borg/runtime/dist/connector/types.d.ts.map +1 -1
- package/node_modules/@noodle-borg/runtime/dist/connector/types.js +15 -0
- package/node_modules/@noodle-borg/runtime/dist/connector/types.js.map +1 -1
- package/node_modules/@noodle-borg/runtime/dist/customer-routing.d.ts +45 -0
- package/node_modules/@noodle-borg/runtime/dist/customer-routing.d.ts.map +1 -0
- package/node_modules/@noodle-borg/runtime/dist/customer-routing.js +135 -0
- package/node_modules/@noodle-borg/runtime/dist/customer-routing.js.map +1 -0
- package/node_modules/@noodle-borg/runtime/dist/execute.d.ts +10 -49
- package/node_modules/@noodle-borg/runtime/dist/execute.d.ts.map +1 -1
- package/node_modules/@noodle-borg/runtime/dist/execute.js +14 -363
- package/node_modules/@noodle-borg/runtime/dist/execute.js.map +1 -1
- package/node_modules/@noodle-borg/runtime/dist/index.d.ts +4 -2
- package/node_modules/@noodle-borg/runtime/dist/index.d.ts.map +1 -1
- package/node_modules/@noodle-borg/runtime/dist/index.js +4 -2
- package/node_modules/@noodle-borg/runtime/dist/index.js.map +1 -1
- package/node_modules/@noodle-borg/runtime/dist/interactive.d.ts.map +1 -1
- package/node_modules/@noodle-borg/runtime/dist/interactive.js +7 -0
- package/node_modules/@noodle-borg/runtime/dist/interactive.js.map +1 -1
- package/node_modules/@noodle-borg/runtime/dist/operation-credential.d.ts +16 -0
- package/node_modules/@noodle-borg/runtime/dist/operation-credential.d.ts.map +1 -0
- package/node_modules/@noodle-borg/runtime/dist/operation-credential.js +58 -0
- package/node_modules/@noodle-borg/runtime/dist/operation-credential.js.map +1 -0
- package/node_modules/@noodle-borg/runtime/dist/operation-execution.d.ts +48 -0
- package/node_modules/@noodle-borg/runtime/dist/operation-execution.d.ts.map +1 -0
- package/node_modules/@noodle-borg/runtime/dist/operation-execution.js +328 -0
- package/node_modules/@noodle-borg/runtime/dist/operation-execution.js.map +1 -0
- package/node_modules/@noodle-borg/runtime/dist/prepared-action-match.d.ts +3 -0
- package/node_modules/@noodle-borg/runtime/dist/prepared-action-match.d.ts.map +1 -0
- package/node_modules/@noodle-borg/runtime/dist/prepared-action-match.js +48 -0
- package/node_modules/@noodle-borg/runtime/dist/prepared-action-match.js.map +1 -0
- package/node_modules/@noodle-borg/runtime/dist/result.d.ts +1 -1
- package/node_modules/@noodle-borg/runtime/dist/result.d.ts.map +1 -1
- package/node_modules/@noodle-borg/runtime/dist/result.js.map +1 -1
- package/node_modules/@noodle-borg/runtime/dist/routed-output-guard.d.ts +15 -0
- package/node_modules/@noodle-borg/runtime/dist/routed-output-guard.d.ts.map +1 -0
- package/node_modules/@noodle-borg/runtime/dist/routed-output-guard.js +163 -0
- package/node_modules/@noodle-borg/runtime/dist/routed-output-guard.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/assistant-customer-issuer.d.ts +8 -0
- package/node_modules/@noodle-borg/service/dist/assistant-customer-issuer.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/assistant-customer-issuer.js +13 -0
- package/node_modules/@noodle-borg/service/dist/assistant-customer-issuer.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/assistant-interactive.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/assistant-interactive.js +2 -1
- package/node_modules/@noodle-borg/service/dist/assistant-interactive.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/control-plane-auth-bootstrap.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/control-plane-auth-bootstrap.js +1 -1
- package/node_modules/@noodle-borg/service/dist/control-plane-auth-bootstrap.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/credential-binding-index.d.ts +2 -0
- package/node_modules/@noodle-borg/service/dist/credential-binding-index.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/credential-binding-index.js +5 -1
- package/node_modules/@noodle-borg/service/dist/credential-binding-index.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/credential-broker-delegated-refresh.d.ts +47 -0
- package/node_modules/@noodle-borg/service/dist/credential-broker-delegated-refresh.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/credential-broker-delegated-refresh.js +165 -0
- package/node_modules/@noodle-borg/service/dist/credential-broker-delegated-refresh.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/credential-broker-delegated-token-exchange.d.ts +18 -0
- package/node_modules/@noodle-borg/service/dist/credential-broker-delegated-token-exchange.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/credential-broker-delegated-token-exchange.js +112 -0
- package/node_modules/@noodle-borg/service/dist/credential-broker-delegated-token-exchange.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/credential-broker.d.ts +6 -24
- package/node_modules/@noodle-borg/service/dist/credential-broker.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/credential-broker.js +23 -271
- package/node_modules/@noodle-borg/service/dist/credential-broker.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/credential-probe-route.d.ts +20 -0
- package/node_modules/@noodle-borg/service/dist/credential-probe-route.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/credential-probe-route.js +28 -0
- package/node_modules/@noodle-borg/service/dist/credential-probe-route.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/credential-probes.d.ts +3 -1
- package/node_modules/@noodle-borg/service/dist/credential-probes.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/credential-probes.js +54 -13
- package/node_modules/@noodle-borg/service/dist/credential-probes.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/credential-route-guard.d.ts +9 -0
- package/node_modules/@noodle-borg/service/dist/credential-route-guard.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/credential-route-guard.js +34 -0
- package/node_modules/@noodle-borg/service/dist/credential-route-guard.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/credential-route-key.d.ts +12 -0
- package/node_modules/@noodle-borg/service/dist/credential-route-key.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/credential-route-key.js +17 -0
- package/node_modules/@noodle-borg/service/dist/credential-route-key.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/customer-verifier.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/customer-verifier.js +72 -21
- package/node_modules/@noodle-borg/service/dist/customer-verifier.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/delegated-token-exchange.d.ts +3 -1
- package/node_modules/@noodle-borg/service/dist/delegated-token-exchange.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/delegated-token-exchange.js +24 -2
- package/node_modules/@noodle-borg/service/dist/delegated-token-exchange.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/developer-mcp/mount.js +6 -5
- package/node_modules/@noodle-borg/service/dist/developer-mcp/mount.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/external-credential-binding-broker.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/external-credential-binding-broker.js +4 -3
- package/node_modules/@noodle-borg/service/dist/external-credential-binding-broker.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-probe.d.ts +2 -1
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-probe.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-probe.js +23 -7
- package/node_modules/@noodle-borg/service/dist/google-workload-identity-probe.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/google-workload-identity.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/google-workload-identity.js +6 -5
- package/node_modules/@noodle-borg/service/dist/google-workload-identity.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/managed-config-broker-options.d.ts +18 -0
- package/node_modules/@noodle-borg/service/dist/managed-config-broker-options.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/managed-config-broker-options.js +2 -0
- package/node_modules/@noodle-borg/service/dist/managed-config-broker-options.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/platform-principal-guard.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/platform-principal-guard.js +6 -5
- package/node_modules/@noodle-borg/service/dist/oauth/platform-principal-guard.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/provider.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/provider.js +10 -8
- package/node_modules/@noodle-borg/service/dist/oauth/provider.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/service-bootstrap.js +5 -5
- package/node_modules/@noodle-borg/service/dist/oauth/service-bootstrap.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/assistant-agent.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/assistant-agent.js +3 -2
- package/node_modules/@noodle-borg/service/dist/routes/assistant-agent.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/assistant-interaction-resolution.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/assistant-interaction-resolution.js +2 -1
- package/node_modules/@noodle-borg/service/dist/routes/assistant-interaction-resolution.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/assistant-interactions.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/assistant-interactions.js +3 -2
- package/node_modules/@noodle-borg/service/dist/routes/assistant-interactions.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/assistant.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/assistant.js +8 -7
- package/node_modules/@noodle-borg/service/dist/routes/assistant.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/auth-doctor-live.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/auth-doctor-live.js +6 -3
- package/node_modules/@noodle-borg/service/dist/routes/auth-doctor-live.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/store.d.ts +3 -1
- package/node_modules/@noodle-borg/service/dist/store.d.ts.map +1 -1
- package/node_modules/@noodle-borg/transport-http/dist/handler.js +18 -2
- package/node_modules/@noodle-borg/transport-http/dist/handler.js.map +1 -1
- package/node_modules/@noodle-borg/transport-http/dist/identity-authorization.d.ts +2 -0
- package/node_modules/@noodle-borg/transport-http/dist/identity-authorization.d.ts.map +1 -1
- package/node_modules/@noodle-borg/transport-http/dist/identity-authorization.js +27 -9
- package/node_modules/@noodle-borg/transport-http/dist/identity-authorization.js.map +1 -1
- package/node_modules/tldts/LICENSE +13 -0
- package/node_modules/tldts/README.md +368 -0
- package/node_modules/tldts/bin/cli.js +21 -0
- package/node_modules/tldts/dist/cjs/index.js +1170 -0
- package/node_modules/tldts/dist/cjs/index.js.map +1 -0
- package/node_modules/tldts/dist/cjs/src/data/trie.js +12 -0
- package/node_modules/tldts/dist/cjs/src/data/trie.js.map +1 -0
- package/node_modules/tldts/dist/cjs/src/suffix-trie.js +170 -0
- package/node_modules/tldts/dist/cjs/src/suffix-trie.js.map +1 -0
- package/node_modules/tldts/dist/cjs/tsconfig.tsbuildinfo +1 -0
- package/node_modules/tldts/dist/es6/index.js +41 -0
- package/node_modules/tldts/dist/es6/index.js.map +1 -0
- package/node_modules/tldts/dist/es6/src/data/trie.js +9 -0
- package/node_modules/tldts/dist/es6/src/data/trie.js.map +1 -0
- package/node_modules/tldts/dist/es6/src/suffix-trie.js +167 -0
- package/node_modules/tldts/dist/es6/src/suffix-trie.js.map +1 -0
- package/node_modules/tldts/dist/es6/tsconfig.bundle.tsbuildinfo +1 -0
- package/node_modules/tldts/dist/index.cjs.min.js +2 -0
- package/node_modules/tldts/dist/index.cjs.min.js.map +1 -0
- package/node_modules/tldts/dist/index.esm.min.js +2 -0
- package/node_modules/tldts/dist/index.esm.min.js.map +1 -0
- package/node_modules/tldts/dist/index.umd.min.js +2 -0
- package/node_modules/tldts/dist/index.umd.min.js.map +1 -0
- package/node_modules/tldts/dist/types/index.d.ts +8 -0
- package/node_modules/tldts/dist/types/src/data/trie.d.ts +7 -0
- package/node_modules/tldts/dist/types/src/suffix-trie.d.ts +5 -0
- package/node_modules/tldts/index.ts +74 -0
- package/node_modules/tldts/package.json +89 -0
- package/node_modules/tldts/src/data/trie.ts +8 -0
- package/node_modules/tldts/src/suffix-trie.ts +207 -0
- package/node_modules/tldts-core/LICENSE +13 -0
- package/node_modules/tldts-core/README.md +3 -0
- package/node_modules/tldts-core/dist/cjs/index.js +955 -0
- package/node_modules/tldts-core/dist/cjs/index.js.map +1 -0
- package/node_modules/tldts-core/dist/cjs/src/domain-without-suffix.js +15 -0
- package/node_modules/tldts-core/dist/cjs/src/domain-without-suffix.js.map +1 -0
- package/node_modules/tldts-core/dist/cjs/src/domain.js +83 -0
- package/node_modules/tldts-core/dist/cjs/src/domain.js.map +1 -0
- package/node_modules/tldts-core/dist/cjs/src/extract-hostname.js +439 -0
- package/node_modules/tldts-core/dist/cjs/src/extract-hostname.js.map +1 -0
- package/node_modules/tldts-core/dist/cjs/src/factory.js +128 -0
- package/node_modules/tldts-core/dist/cjs/src/factory.js.map +1 -0
- package/node_modules/tldts-core/dist/cjs/src/is-ip.js +72 -0
- package/node_modules/tldts-core/dist/cjs/src/is-ip.js.map +1 -0
- package/node_modules/tldts-core/dist/cjs/src/is-special-use.js +65 -0
- package/node_modules/tldts-core/dist/cjs/src/is-special-use.js.map +1 -0
- package/node_modules/tldts-core/dist/cjs/src/is-valid.js +80 -0
- package/node_modules/tldts-core/dist/cjs/src/is-valid.js.map +1 -0
- package/node_modules/tldts-core/dist/cjs/src/lookup/fast-path.js +69 -0
- package/node_modules/tldts-core/dist/cjs/src/lookup/fast-path.js.map +1 -0
- package/node_modules/tldts-core/dist/cjs/src/lookup/interface.js +3 -0
- package/node_modules/tldts-core/dist/cjs/src/lookup/interface.js.map +1 -0
- package/node_modules/tldts-core/dist/cjs/src/options.js +23 -0
- package/node_modules/tldts-core/dist/cjs/src/options.js.map +1 -0
- package/node_modules/tldts-core/dist/cjs/src/subdomain.js +14 -0
- package/node_modules/tldts-core/dist/cjs/src/subdomain.js.map +1 -0
- package/node_modules/tldts-core/dist/cjs/tsconfig.tsbuildinfo +1 -0
- package/node_modules/tldts-core/dist/es6/index.js +4 -0
- package/node_modules/tldts-core/dist/es6/index.js.map +1 -0
- package/node_modules/tldts-core/dist/es6/src/domain-without-suffix.js +12 -0
- package/node_modules/tldts-core/dist/es6/src/domain-without-suffix.js.map +1 -0
- package/node_modules/tldts-core/dist/es6/src/domain.js +80 -0
- package/node_modules/tldts-core/dist/es6/src/domain.js.map +1 -0
- package/node_modules/tldts-core/dist/es6/src/extract-hostname.js +435 -0
- package/node_modules/tldts-core/dist/es6/src/extract-hostname.js.map +1 -0
- package/node_modules/tldts-core/dist/es6/src/factory.js +123 -0
- package/node_modules/tldts-core/dist/es6/src/factory.js.map +1 -0
- package/node_modules/tldts-core/dist/es6/src/is-ip.js +69 -0
- package/node_modules/tldts-core/dist/es6/src/is-ip.js.map +1 -0
- package/node_modules/tldts-core/dist/es6/src/is-special-use.js +62 -0
- package/node_modules/tldts-core/dist/es6/src/is-special-use.js.map +1 -0
- package/node_modules/tldts-core/dist/es6/src/is-valid.js +77 -0
- package/node_modules/tldts-core/dist/es6/src/is-valid.js.map +1 -0
- package/node_modules/tldts-core/dist/es6/src/lookup/fast-path.js +66 -0
- package/node_modules/tldts-core/dist/es6/src/lookup/fast-path.js.map +1 -0
- package/node_modules/tldts-core/dist/es6/src/lookup/interface.js +2 -0
- package/node_modules/tldts-core/dist/es6/src/lookup/interface.js.map +1 -0
- package/node_modules/tldts-core/dist/es6/src/options.js +20 -0
- package/node_modules/tldts-core/dist/es6/src/options.js.map +1 -0
- package/node_modules/tldts-core/dist/es6/src/subdomain.js +11 -0
- package/node_modules/tldts-core/dist/es6/src/subdomain.js.map +1 -0
- package/node_modules/tldts-core/dist/es6/tsconfig.bundle.tsbuildinfo +1 -0
- package/node_modules/tldts-core/dist/types/index.d.ts +4 -0
- package/node_modules/tldts-core/dist/types/src/domain-without-suffix.d.ts +6 -0
- package/node_modules/tldts-core/dist/types/src/domain.d.ts +5 -0
- package/node_modules/tldts-core/dist/types/src/extract-hostname.d.ts +17 -0
- package/node_modules/tldts-core/dist/types/src/factory.d.ts +29 -0
- package/node_modules/tldts-core/dist/types/src/is-ip.d.ts +6 -0
- package/node_modules/tldts-core/dist/types/src/is-special-use.d.ts +5 -0
- package/node_modules/tldts-core/dist/types/src/is-valid.d.ts +15 -0
- package/node_modules/tldts-core/dist/types/src/lookup/fast-path.d.ts +2 -0
- package/node_modules/tldts-core/dist/types/src/lookup/interface.d.ts +9 -0
- package/node_modules/tldts-core/dist/types/src/options.d.ts +11 -0
- package/node_modules/tldts-core/dist/types/src/subdomain.d.ts +4 -0
- package/node_modules/tldts-core/index.ts +10 -0
- package/node_modules/tldts-core/package.json +68 -0
- package/node_modules/tldts-core/src/domain-without-suffix.ts +14 -0
- package/node_modules/tldts-core/src/domain.ts +100 -0
- package/node_modules/tldts-core/src/extract-hostname.ts +480 -0
- package/node_modules/tldts-core/src/factory.ts +199 -0
- package/node_modules/tldts-core/src/is-ip.ts +87 -0
- package/node_modules/tldts-core/src/is-special-use.ts +65 -0
- package/node_modules/tldts-core/src/is-valid.ts +89 -0
- package/node_modules/tldts-core/src/lookup/fast-path.ts +80 -0
- package/node_modules/tldts-core/src/lookup/interface.ts +10 -0
- package/node_modules/tldts-core/src/options.ts +45 -0
- package/node_modules/tldts-core/src/subdomain.ts +11 -0
- package/package.json +3 -1
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"routed-output-guard.js","sourceRoot":"","sources":["../src/routed-output-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAE3C,MAAM,6BAA6B,GAAG,EAAE,CAAC;AACzC,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAC7C,MAAM,+BAA+B,GAAG,MAAM,CAAC;AAC/C,MAAM,yBAAyB,GAAG,CAAC,CAAC;AACpC,MAAM,cAAc,GAAG,MAAM,CAAC,8BAA8B,CAAC,CAAC;AAM9D;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAAE,OAAe;IAC/D,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,IAAI,OAAO,EAAU,CAAC;QACrC,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,CAAC,EAAE,eAAe,EAAE,MAAM,EAAE,KAAK,CAAC;SAC/D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACpB,KAAc,EACd,KAAa,EACb,eAAkC,EAClC,MAAuB,EACvB,KAAwB;IAExB,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;IACjB,IAAI,KAAK,CAAC,KAAK,GAAG,6BAA6B,IAAI,KAAK,GAAG,6BAA6B,EAAE,CAAC;QACzF,OAAO,WAAW,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,gBAAgB,CAAC,KAAK,EAAE,eAAe,CAAC;YAAE,OAAO,WAAW,EAAE,CAAC;QACnE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,WAAW,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,WAAW,EAAE,CAAC;IACpD,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,WAAW,EAAE,CAAC;IAE5C,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClB,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACzB,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,KAAK,CAAC;YAC1D,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CACjB,KAAgB,EAChB,KAAa,EACb,eAAkC,EAClC,MAAuB,EACvB,KAAwB;IAExB,IAAI,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,SAAS;QAAE,OAAO,WAAW,EAAE,CAAC;IAC5E,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,gBAAgB,GAAG,OAAO,CAAC,wBAAwB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC3E,MAAM,MAAM,GACV,gBAAgB,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,OAAO,CAAC;QACxE,CAAC,CAAC,gBAAgB,CAAC,KAAK;QACxB,CAAC,CAAC,SAAS,CAAC;IAChB,IACE,gBAAgB,KAAK,SAAS;QAC9B,gBAAgB,CAAC,UAAU;QAC3B,OAAO,MAAM,KAAK,QAAQ;QAC1B,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;QAC7B,MAAM,GAAG,CAAC;QACV,MAAM,GAAG,6BAA6B,EACtC,CAAC;QACD,OAAO,WAAW,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,GAAG,CAAC;QAAE,OAAO,WAAW,EAAE,CAAC;IAErD,MAAM,MAAM,GAAG,IAAI,KAAK,CAAU,MAAM,CAAC,CAAC;IAC1C,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,WAAW,EAAE,CAAC;QAClD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,IAAI,SAAS;gBAAE,OAAO,WAAW,EAAE,CAAC;YACpC,SAAS,GAAG,IAAI,CAAC;YACjB,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,IAAI,IAAI,gBAAgB,CAAC,GAAG,EAAE,eAAe,CAAC;YAAE,OAAO,WAAW,EAAE,CAAC;QACnF,MAAM,UAAU,GAAG,OAAO,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAChE,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC;YAC9F,OAAO,WAAW,EAAE,CAAC;QACvB,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,GAAG,aAAa,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,eAAe,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,CAAC,SAAS;QAAE,OAAO,WAAW,EAAE,CAAC;IACrC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,WAAW,CAClB,KAAa,EACb,KAAa,EACb,eAAkC,EAClC,MAAuB,EACvB,KAAwB;IAExB,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,WAAW,EAAE,CAAC;IAE/E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAA4B,CAAC;IAC9D,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,QAAQ,IAAI,gBAAgB,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,CAAC;YAC1F,OAAO,WAAW,EAAE,CAAC;QACvB,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAChE,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC;YAC9F,OAAO,WAAW,EAAE,CAAC;QACvB,CAAC;QACD,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE;YACjC,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,IAAI;YAChB,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,aAAa,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,eAAe,EAAE,MAAM,EAAE,KAAK,CAAC;SAClF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW,EAAE,MAAc;IACtD,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACpF,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe;IAC3C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACzD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,WAAW,EAAE,CAAC;IAChD,MAAM,eAAe,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAChE,OAAO,MAAM,CAAC,MAAM,CAClB,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,eAAe,KAAK,QAAQ;QACxD,CAAC,CAAC,CAAC,QAAQ,EAAE,eAAe,CAAC;QAC7B,CAAC,CAAC,CAAC,QAAQ,CAAC,CACf,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAE,eAAkC;IACzE,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,yBAAyB,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;QACvC,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/E,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3C,IAAI,SAAS,CAAC,MAAM,GAAG,+BAA+B,IAAI,KAAK,KAAK,yBAAyB,EAAE,CAAC;YAC9F,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,SAAS,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW;IAClB,MAAM,cAAc,CAAC;AACvB,CAAC"}
|
|
@@ -0,0 +1,8 @@
|
|
|
1
|
+
import type { ExecuteDeps } from '@noodle-borg/runtime';
|
|
2
|
+
/** Private delegated-credential identity namespace derived at the authenticated client boundary. */
|
|
3
|
+
export declare function assistantCustomerIssuer(clientId: string): string;
|
|
4
|
+
/** Add the private assistant identity namespace without placing it in CallerIdentity or session state. */
|
|
5
|
+
export declare function withAssistantCustomerIssuer<T extends ExecuteDeps>(deps: T, clientId: string): T & {
|
|
6
|
+
readonly customerIssuer: string;
|
|
7
|
+
};
|
|
8
|
+
//# sourceMappingURL=assistant-customer-issuer.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"assistant-customer-issuer.d.ts","sourceRoot":"","sources":["../src/assistant-customer-issuer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAIxD,oGAAoG;AACpG,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED,0GAA0G;AAC1G,wBAAgB,2BAA2B,CAAC,CAAC,SAAS,WAAW,EAC/D,IAAI,EAAE,CAAC,EACP,QAAQ,EAAE,MAAM,GACf,CAAC,GAAG;IAAE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAAE,CAKzC"}
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
const ASSISTANT_CUSTOMER_ISSUER_PREFIX = 'urn:noodleseed:assistant-client:';
|
|
2
|
+
/** Private delegated-credential identity namespace derived at the authenticated client boundary. */
|
|
3
|
+
export function assistantCustomerIssuer(clientId) {
|
|
4
|
+
return `${ASSISTANT_CUSTOMER_ISSUER_PREFIX}${clientId}`;
|
|
5
|
+
}
|
|
6
|
+
/** Add the private assistant identity namespace without placing it in CallerIdentity or session state. */
|
|
7
|
+
export function withAssistantCustomerIssuer(deps, clientId) {
|
|
8
|
+
return {
|
|
9
|
+
...deps,
|
|
10
|
+
customerIssuer: assistantCustomerIssuer(clientId),
|
|
11
|
+
};
|
|
12
|
+
}
|
|
13
|
+
//# sourceMappingURL=assistant-customer-issuer.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"assistant-customer-issuer.js","sourceRoot":"","sources":["../src/assistant-customer-issuer.ts"],"names":[],"mappings":"AAEA,MAAM,gCAAgC,GAAG,kCAAkC,CAAC;AAE5E,oGAAoG;AACpG,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACtD,OAAO,GAAG,gCAAgC,GAAG,QAAQ,EAAE,CAAC;AAC1D,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,2BAA2B,CACzC,IAAO,EACP,QAAgB;IAEhB,OAAO;QACL,GAAG,IAAI;QACP,cAAc,EAAE,uBAAuB,CAAC,QAAQ,CAAC;KAClD,CAAC;AACJ,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"assistant-interactive.d.ts","sourceRoot":"","sources":["../src/assistant-interactive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAA4B,MAAM,uBAAuB,CAAC;AAEvF,OAAO,KAAK,EACV,cAAc,EACd,6BAA6B,EAC7B,WAAW,EACX,0BAA0B,EAC1B,iBAAiB,EACjB,wBAAwB,EACxB,gBAAgB,EAChB,2BAA2B,EAC5B,MAAM,sBAAsB,CAAC;
|
|
1
|
+
{"version":3,"file":"assistant-interactive.d.ts","sourceRoot":"","sources":["../src/assistant-interactive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAA4B,MAAM,uBAAuB,CAAC;AAEvF,OAAO,KAAK,EACV,cAAc,EACd,6BAA6B,EAC7B,WAAW,EACX,0BAA0B,EAC1B,iBAAiB,EACjB,wBAAwB,EACxB,gBAAgB,EAChB,2BAA2B,EAC5B,MAAM,sBAAsB,CAAC;AAS9B,OAAO,EAEL,KAAK,0BAA0B,EAC/B,KAAK,kCAAkC,EACvC,KAAK,6CAA6C,EAClD,KAAK,sCAAsC,EAC3C,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACpB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAElD,eAAO,MAAM,4BAA4B,QAAiB,CAAC;AAE3D,KAAK,aAAa,GACd,OAAO,CAAC,0BAA0B,EAAE;IAAE,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE,CAAC,GAC1E,OAAO,CAAC,6BAA6B,EAAE;IAAE,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE,CAAC,CAAC;AAElF,MAAM,MAAM,qBAAqB,GAC7B;IACE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,eAAe,GAAG,iBAAiB,GAAG,OAAO,CAAC;IAC9D,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAClD,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC;AAE/D,6FAA6F;AAC7F,wBAAsB,qBAAqB,CAAC,KAAK,EAAE;IACjD,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;IAChD,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,IAAI,CAAC;IACzB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;CACrC,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAyHjC;AAED,4FAA4F;AAC5F,wBAAsB,sCAAsC,CAAC,KAAK,EAAE;IAClE,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,wBAAwB,CAAC;IAChD,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;CACpB,GAAG,OAAO,CAAC,6CAA6C,CAAC,CAkBzD;AAED,wBAAgB,+BAA+B,CAAC,KAAK,EAAE;IACrD,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,wBAAwB,CAAC;IAChD,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;CACpB,GAAG,OAAO,CAAC,kCAAkC,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;CAAE,CAAC,CAUjF;AAED,wBAAgB,iCAAiC,CAC/C,WAAW,EAAE,6CAA6C,GACzD,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAQnC;AAaD,+FAA+F;AAC/F,wBAAsB,+BAA+B,CAAC,KAAK,EAAE;IAC3D,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;CACpB,GAAG,OAAO,CAAC,sCAAsC,CAAC,CAkBlD;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;CACpB,GAAG,OAAO,CAAC,kCAAkC,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,CAU1E;AAED,oEAAoE;AACpE,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,0BAA0B,CAAC;IACjD,QAAQ,CAAC,SAAS,EACd,gCAAgC,GAChC,gCAAgC,GAChC,iCAAiC,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;IAClD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBhB;AAED,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,0BAA0B,GACtC,MAAM,GAAG,SAAS,CAEpB;AAED,6FAA6F;AAC7F,wBAAgB,yBAAyB,CACvC,WAAW,EAAE,OAAO,CAAC,0BAA0B,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,GAC3E,gBAAgB,GAAG,2BAA2B,CAEhD;AAED,wBAAgB,iCAAiC,CAC/C,WAAW,EAAE,OAAO,CAAC,0BAA0B,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;CAAE,CAAC,GAClF,wBAAwB,GAAG,SAAS,CAGtC"}
|
|
@@ -1,6 +1,7 @@
|
|
|
1
1
|
import { requiresToolConfirmation } from '@noodle-borg/compiler';
|
|
2
2
|
import { evaluateToolAuthorization } from '@noodle-borg/protocol';
|
|
3
3
|
import { executeToolInteractive, prepareToolForConfirmation } from '@noodle-borg/runtime';
|
|
4
|
+
import { withAssistantCustomerIssuer } from './assistant-customer-issuer.js';
|
|
4
5
|
import { assistantConfirmationProposal, assistantConfirmationReview, assistantPreparedArgumentReview, assistantSafeOutput, } from './assistant-presentation.js';
|
|
5
6
|
import { AssistantInteractionCapacityError, } from './assistant-store.js';
|
|
6
7
|
export const ASSISTANT_INTERACTION_TTL_MS = 10 * 60 * 1000;
|
|
@@ -14,7 +15,7 @@ export async function dispatchAssistantTool(input) {
|
|
|
14
15
|
};
|
|
15
16
|
}
|
|
16
17
|
const executeDeps = {
|
|
17
|
-
...input.executeDeps,
|
|
18
|
+
...withAssistantCustomerIssuer(input.executeDeps, input.session.clientId),
|
|
18
19
|
caller: input.caller,
|
|
19
20
|
context: input.context,
|
|
20
21
|
};
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"assistant-interactive.js","sourceRoot":"","sources":["../src/assistant-interactive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAWlE,OAAO,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAC1F,OAAO,EACL,6BAA6B,EAC7B,2BAA2B,EAC3B,+BAA+B,EAC/B,mBAAmB,GACpB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,iCAAiC,GAOlC,MAAM,sBAAsB,CAAC;AAG9B,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAc3D,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAY3C;IACC,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAC7E,OAAO;YACL,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,KAAK,EAAE;SACnD,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG;QAClB,GAAG,KAAK,CAAC,WAAW;
|
|
1
|
+
{"version":3,"file":"assistant-interactive.js","sourceRoot":"","sources":["../src/assistant-interactive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAWlE,OAAO,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAC1F,OAAO,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,EACL,6BAA6B,EAC7B,2BAA2B,EAC3B,+BAA+B,EAC/B,mBAAmB,GACpB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,iCAAiC,GAOlC,MAAM,sBAAsB,CAAC;AAG9B,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAc3D,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAY3C;IACC,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAC7E,OAAO;YACL,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,KAAK,EAAE;SACnD,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG;QAClB,GAAG,2BAA2B,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzE,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC;IACF,IAAI,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACrD,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAC/C,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,IAAI,CAAC,IAAI,EACf,KAAK,CAAC,SAAS,EACf,WAAW,CACZ,CAAC;QACF,IAAI,CAAC;YACH,IAAI,QAAQ,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;gBACzC,MAAM,WAAW,GAAG,MAAM,+BAA+B,CAAC;oBACxD,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,QAAQ,EAAE,QAAQ;oBAClB,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE;iBACjB,CAAC,CAAC;gBACH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC;YAC1F,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,uBAAuB,EAAE,CAAC;gBAChD,MAAM,MAAM,GAAG,+BAA+B,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACxF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;oBACf,OAAO;wBACL,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,OAAO;wBACd,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE;qBAC9C,CAAC;gBACJ,CAAC;gBACD,MAAM,WAAW,GAAG,MAAM,sCAAsC,CAAC;oBAC/D,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI;oBACrB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,MAAM,EAAE,2BAA2B,CAAC;wBAClC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACxD,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW;wBACnC,MAAM;qBACP,CAAC;oBACF,YAAY,EAAE,QAAQ,CAAC,YAAY;oBACnC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE;iBACjB,CAAC,CAAC;gBACH,OAAO;oBACL,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,eAAe;oBACtB,IAAI,EAAE,iCAAiC,CAAC,WAAW,CAAC;iBACrD,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE;oBACJ,IAAI,EACF,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,QAAQ,CAAC,MAAM,EAAE;oBACvF,SAAS,EAAE,KAAK;iBACjB;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,iCAAiC,EAAE,CAAC;gBACvD,OAAO;oBACL,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,OAAO;oBACd,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE;iBAC7C,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,EAAE,EAAE,CAAC;IACxB,MAAM,MAAM,GAAG,MAAM,sBAAsB,CACzC,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,IAAI,CAAC,IAAI,EACf,KAAK,CAAC,SAAS,EACf,WAAW,CACZ,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,+BAA+B,CAAC;gBACxD,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,QAAQ,EAAE,MAAM;gBAChB,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE;aACjB,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,iCAAiC,EAAE,CAAC;gBACvD,OAAO;oBACL,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,OAAO;oBACd,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE;iBAC7C,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,MAAM,EACJ,MAAM,CAAC,MAAM,KAAK,WAAW;YAC3B,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC;YAC7D,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ;gBAC1B,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;gBAC9B,CAAC,CAAC,EAAE,KAAK,EAAE,eAAe,MAAM,CAAC,MAAM,EAAE,EAAE;KAClD,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAAC,KAU5D;IACC,MAAM,IAAI,GAAG,+BAA+B,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC;QACtD,GAAG,IAAI;QACP,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE;QAC3B,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,YAAY;QACxC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE;KACnC,CAAC,CAAC;IACH,MAAM,yBAAyB,CAAC;QAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW;QACX,SAAS,EAAE,gCAAgC;QAC3C,QAAQ,EAAE,OAAO;QACjB,UAAU,EAAE,GAAG;QACf,MAAM,EAAE,SAAS;KAClB,CAAC,CAAC;IACH,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,KAO/C;IACC,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,4BAA4B,CAAC,CAAC,WAAW,EAAE;KACtF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,WAA0D;IAE1D,OAAO;QACL,EAAE,EAAE,WAAW,CAAC,EAAE;QAClB,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,GAAG,6BAA6B,CAAC,WAAW,CAAC,MAAM,CAAC;QACpD,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,oBAAoB,EAAE,IAAI;KAC3B,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,WAAmD;IAEnD,OAAO;QACL,EAAE,EAAE,WAAW,CAAC,EAAE;QAClB,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,eAAe,EAAE,WAAW,CAAC,eAAe;QAC5C,SAAS,EAAE,WAAW,CAAC,SAAS;KACjC,CAAC;AACJ,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,KAOrD;IACC,MAAM,IAAI,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC;QACtD,GAAG,IAAI;QACP,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE;QAC3B,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,YAAY;QACxC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE;KACnC,CAAC,CAAC;IACH,MAAM,yBAAyB,CAAC;QAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW;QACX,SAAS,EAAE,gCAAgC;QAC3C,QAAQ,EAAE,OAAO;QACjB,UAAU,EAAE,GAAG;QACf,MAAM,EAAE,iBAAiB;KAC1B,CAAC,CAAC;IACH,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAIxC;IACC,OAAO;QACL,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,QAAQ;QAC1C,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO;QACvC,eAAe,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,eAAe;QACvD,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,YAAY;QACzC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,4BAA4B,CAAC,CAAC,WAAW,EAAE;KACtF,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAa/C;IACC,MAAM,IAAI,GAAG,wBAAwB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACzD,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;QACrB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG;QAC7B,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG;QAC7B,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG;QAC7B,YAAY,EAAE,KAAK,CAAC,WAAW,CAAC,YAAY;QAC5C,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO;QAC1C,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,UAAU;QACxB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,OAAO,EAAE;YACP,aAAa,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE;YACnC,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,IAAI;YAC5B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzB,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,WAAuC;IAEvC,OAAO,WAAW,CAAC,IAAI,CAAC;AAC1B,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,yBAAyB,CACvC,WAA4E;IAE5E,OAAO,WAAW,CAAC,YAA8D,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,WAAmF;IAEnF,MAAM,YAAY,GAAG,WAAW,CAAC,YAAoD,CAAC;IACtF,OAAO,YAAY,EAAE,IAAI,KAAK,uBAAuB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;AACnF,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"control-plane-auth-bootstrap.d.ts","sourceRoot":"","sources":["../src/control-plane-auth-bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAEL,KAAK,cAAc,EAIpB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,KAAK,qBAAqB,EAA6B,MAAM,wBAAwB,CAAC;AAC/F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD,gGAAgG;AAChG,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,kBAAkB,CAAC;IAC/C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IAC9C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;CACxD,GAAG,cAAc,GAAG,SAAS,
|
|
1
|
+
{"version":3,"file":"control-plane-auth-bootstrap.d.ts","sourceRoot":"","sources":["../src/control-plane-auth-bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAEL,KAAK,cAAc,EAIpB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,KAAK,qBAAqB,EAA6B,MAAM,wBAAwB,CAAC;AAC/F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD,gGAAgG;AAChG,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,kBAAkB,CAAC;IAC/C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IAC9C,QAAQ,CAAC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;CACxD,GAAG,cAAc,GAAG,SAAS,CAwF7B;AAED,8GAA8G;AAC9G,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAC3C,GAAG,IAAI,CAQP;AAED,wGAAwG;AACxG,wBAAgB,yCAAyC,CAAC,KAAK,EAAE;IAC/D,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;CACpC,GAAG,IAAI,CAIP"}
|
|
@@ -19,7 +19,7 @@ export function createDefaultControlPlaneGate(input) {
|
|
|
19
19
|
if (input.verifyOwnerToken !== undefined && input.authServerIssuer !== undefined) {
|
|
20
20
|
const allowedEmailDomain = options.controlPlaneAllowedEmailDomain ?? options.oauth?.allowedEmailDomain;
|
|
21
21
|
gates.push(new NoodleOAuthControlPlaneGate({
|
|
22
|
-
verifier: input.verifyOwnerToken,
|
|
22
|
+
verifier: async (token, audience) => (await input.verifyOwnerToken?.(token, audience))?.caller ?? null,
|
|
23
23
|
audience: [
|
|
24
24
|
normalizeOAuthResource(options.publicBaseUrl ?? input.authServerIssuer),
|
|
25
25
|
`${input.authServerIssuer}/developer/mcp`,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"control-plane-auth-bootstrap.js","sourceRoot":"","sources":["../src/control-plane-auth-bootstrap.ts"],"names":[],"mappings":"AACA,OAAO,EACL,yBAAyB,EAEzB,sBAAsB,EACtB,8BAA8B,EAC9B,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAA8B,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAI/F,gGAAgG;AAChG,MAAM,UAAU,6BAA6B,CAAC,KAM7C;IACC,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,iCAAiC,CAAC;QAChC,QAAQ,EAAE,OAAO,CAAC,sBAAsB,IAAI,EAAE;QAC9C,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;QACrF,GAAG,CAAC,OAAO,CAAC,4BAA4B,KAAK,SAAS;YACpD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,sBAAsB,EAAE,OAAO,CAAC,4BAA4B,EAAE,CAAC;KACtE,CAAC,CAAC;IACH,yCAAyC,CAAC;QACxC,MAAM,EAAE,OAAO,CAAC,kBAAkB,IAAI,EAAE;QACxC,gBAAgB,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,KAAK,SAAS;KACtD,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACjF,MAAM,kBAAkB,GACtB,OAAO,CAAC,8BAA8B,IAAI,OAAO,CAAC,KAAK,EAAE,kBAAkB,CAAC;QAC9E,KAAK,CAAC,IAAI,CACR,IAAI,2BAA2B,CAAC;YAC9B,QAAQ,EAAE,KAAK,CAAC,gBAAgB;
|
|
1
|
+
{"version":3,"file":"control-plane-auth-bootstrap.js","sourceRoot":"","sources":["../src/control-plane-auth-bootstrap.ts"],"names":[],"mappings":"AACA,OAAO,EACL,yBAAyB,EAEzB,sBAAsB,EACtB,8BAA8B,EAC9B,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAA8B,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAI/F,gGAAgG;AAChG,MAAM,UAAU,6BAA6B,CAAC,KAM7C;IACC,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,iCAAiC,CAAC;QAChC,QAAQ,EAAE,OAAO,CAAC,sBAAsB,IAAI,EAAE;QAC9C,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;QACrF,GAAG,CAAC,OAAO,CAAC,4BAA4B,KAAK,SAAS;YACpD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,sBAAsB,EAAE,OAAO,CAAC,4BAA4B,EAAE,CAAC;KACtE,CAAC,CAAC;IACH,yCAAyC,CAAC;QACxC,MAAM,EAAE,OAAO,CAAC,kBAAkB,IAAI,EAAE;QACxC,gBAAgB,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,KAAK,SAAS;KACtD,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACjF,MAAM,kBAAkB,GACtB,OAAO,CAAC,8BAA8B,IAAI,OAAO,CAAC,KAAK,EAAE,kBAAkB,CAAC;QAC9E,KAAK,CAAC,IAAI,CACR,IAAI,2BAA2B,CAAC;YAC9B,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAClC,CAAC,MAAM,KAAK,CAAC,gBAAgB,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,IAAI,IAAI;YACnE,QAAQ,EAAE;gBACR,sBAAsB,CAAC,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC,gBAAgB,CAAC;gBACvE,GAAG,KAAK,CAAC,gBAAgB,gBAAgB;gBACzC,GAAG,KAAK,CAAC,gBAAgB,gBAAgB;aAC1C;YACD,MAAM,EAAE,OAAO,CAAC,kBAAkB,IAAI,EAAE;YACxC,UAAU,EAAE,OAAO,CAAC,sBAAsB,IAAI,YAAY;YAC1D,gBAAgB,EAAE,KAAK,CAAC,iBAAiB;YACzC,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,IAAI,EAAE;YACtD,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,IAAI,EAAE;YACxD,GAAG,CAAC,KAAK,CAAC,qBAAqB,KAAK,SAAS;gBAC3C,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE,yBAAyB,EAAE,IAAI,yBAAyB,CAAC,KAAK,CAAC,qBAAqB,CAAC;iBACtF,CAAC;YACN,GAAG,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpE,CAAC,CACH,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,cAAc,GAClB,OAAO,CAAC,yBAAyB,IAAI,OAAO,CAAC,yBAAyB,CAAC,MAAM,GAAG,CAAC;YAC/E,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,OAAO,CAAC,yBAAyB,CAAC;YAChE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;QAC7B,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YACtD,KAAK,CAAC,IAAI,CACR,IAAI,8BAA8B,CAAC;gBACjC,+FAA+F;gBAC/F,uFAAuF;gBACvF,QAAQ,EAAE,OAAO,CAAC,cAAc;gBAChC,QAAQ,EAAE,OAAO,CAAC,sBAAsB,IAAI,EAAE;gBAC9C,MAAM,EAAE,OAAO,CAAC,kBAAkB,IAAI,EAAE;gBACxC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxE,CAAC,CACH,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,4BAA4B,KAAK,KAAK,EAAE,CAAC;YACnD,KAAK,CAAC,IAAI,CACR,IAAI,sBAAsB,CAAC;gBACzB,+FAA+F;gBAC/F,0FAA0F;gBAC1F,QAAQ,EAAE,cAAc;gBACxB,MAAM,EAAE,OAAO,CAAC,kBAAkB,IAAI,EAAE;gBACxC,UAAU,EAAE,OAAO,CAAC,sBAAsB,IAAI,YAAY;gBAC1D,gBAAgB,EAAE,KAAK,CAAC,iBAAiB;gBACzC,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,IAAI,EAAE;gBACtD,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,IAAI,EAAE;gBACxD,GAAG,CAAC,OAAO,CAAC,8BAA8B,KAAK,SAAS;oBACtD,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,8BAA8B,EAAE;oBAChE,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvE,GAAG,CAAC,KAAK,CAAC,qBAAqB,KAAK,SAAS;oBAC3C,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC;wBACE,yBAAyB,EAAE,IAAI,yBAAyB,CACtD,KAAK,CAAC,qBAAqB,CAC5B;qBACF,CAAC;aACP,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;QACvB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAClB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YACV,CAAC,CAAC,IAAI,yBAAyB,CAAC,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED,8GAA8G;AAC9G,MAAM,UAAU,iCAAiC,CAAC,KAIjD;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;IACxC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,KAAK,CAAC,sBAAsB,KAAK,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,yCAAyC,CAAC,KAGzD;IACC,IAAI,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC"}
|
|
@@ -3,6 +3,8 @@ import { type CredentialBindingDescriptor } from '@noodle-borg/runtime';
|
|
|
3
3
|
export interface AllowedCredentialBinding {
|
|
4
4
|
readonly descriptor: CredentialBindingDescriptor;
|
|
5
5
|
readonly source: ArtifactConnectionSource;
|
|
6
|
+
/** Private deploy-plane route key copied from the exact compiled operation reference. */
|
|
7
|
+
readonly customerEndpoint?: string;
|
|
6
8
|
}
|
|
7
9
|
export interface CredentialBindingIndex {
|
|
8
10
|
readonly byKey: ReadonlyMap<string, AllowedCredentialBinding>;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"credential-binding-index.d.ts","sourceRoot":"","sources":["../src/credential-binding-index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,wBAAwB,EAI7B,KAAK,eAAe,EACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,KAAK,2BAA2B,EAAoB,MAAM,sBAAsB,CAAC;AAE1F,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;
|
|
1
|
+
{"version":3,"file":"credential-binding-index.d.ts","sourceRoot":"","sources":["../src/credential-binding-index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,wBAAwB,EAI7B,KAAK,eAAe,EACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,KAAK,2BAA2B,EAAoB,MAAM,sBAAsB,CAAC;AAE1F,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,EAAE,2BAA2B,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,yFAAyF;IACzF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;IAC9D,QAAQ,CAAC,gBAAgB,EAAE,SAAS,wBAAwB,EAAE,CAAC;IAC/D,QAAQ,CAAC,sBAAsB,EAAE,SAAS,wBAAwB,EAAE,CAAC;CACtE;AAWD,wFAAwF;AACxF,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,eAAe,GAAG,SAAS,GACpC,sBAAsB,CAsDxB"}
|
|
@@ -42,7 +42,11 @@ export function buildCredentialBindingIndex(artifact) {
|
|
|
42
42
|
};
|
|
43
43
|
const key = MapServiceBroker.bindingKey(descriptor);
|
|
44
44
|
const source = structuredClone(binding.connection.source);
|
|
45
|
-
const allowed = {
|
|
45
|
+
const allowed = {
|
|
46
|
+
descriptor,
|
|
47
|
+
source,
|
|
48
|
+
...(ref.customerEndpoint === undefined ? {} : { customerEndpoint: ref.customerEndpoint }),
|
|
49
|
+
};
|
|
46
50
|
byKey.set(key, allowed);
|
|
47
51
|
if (source.kind === 'externalExchange') {
|
|
48
52
|
externalExchange.set(key, allowed);
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"credential-binding-index.js","sourceRoot":"","sources":["../src/credential-binding-index.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,+BAA+B,GAGhC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAoC,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;
|
|
1
|
+
{"version":3,"file":"credential-binding-index.js","sourceRoot":"","sources":["../src/credential-binding-index.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,+BAA+B,GAGhC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAoC,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAe1F,SAAS,qBAAqB,CAAC,UAA8B;IAC3D,IAAI,UAAU,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACpC,OAAO,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,CAAC;IACD,OAAO,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACvC,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CACnF,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,2BAA2B,CACzC,QAAqC;IAErC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC1D,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAoC,CAAC;IACrE,MAAM,sBAAsB,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC3E,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,EAAE,sBAAsB,EAAE,EAAE,EAAE,CAAC;IAC/F,MAAM,WAAW,GAAyB;QACxC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;QAChD,GAAG,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;QACpE,GAAG,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC;QAC9D,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,KAAK,SAAS;YAChD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;KAClD,CAAC;IACF,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,qBAAqB,CAAC,UAAU,CAAC,EAAE,CAAC;YACpD,MAAM,iBAAiB,GAAG,GAAG,CAAC,iBAAiB,CAAC;YAChD,IAAI,iBAAiB,KAAK,SAAS;gBAAE,SAAS;YAC9C,MAAM,OAAO,GAAG,QAAQ,CAAC,iBAAiB,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;YAC1E,IACE,OAAO,KAAK,SAAS;gBACrB,OAAO,CAAC,UAAU,CAAC,EAAE,KAAK,iBAAiB,CAAC,YAAY;gBACxD,OAAO,CAAC,OAAO,KAAK,iBAAiB,CAAC,OAAO;gBAC7C,+BAA+B,CAAC,OAAO,CAAC,UAAU,CAAC;oBACjD,iBAAiB,CAAC,wBAAwB,EAC5C,CAAC;gBACD,SAAS;YACX,CAAC;YACD,MAAM,UAAU,GAAgC;gBAC9C,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;gBACtC,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,GAAG,iBAAiB;aACrB,CAAC;YACF,MAAM,GAAG,GAAG,gBAAgB,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAG;gBACd,UAAU;gBACV,MAAM;gBACN,GAAG,CAAC,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,EAAE,CAAC;aAC1F,CAAC;YACF,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACxB,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBACvC,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACrC,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;gBAC7C,sBAAsB,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO;QACL,KAAK;QACL,gBAAgB,EAAE,CAAC,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC;QAChD,sBAAsB,EAAE,CAAC,GAAG,sBAAsB,CAAC,MAAM,EAAE,CAAC;KAC7D,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,47 @@
|
|
|
1
|
+
import type { DelegatedOAuthBinding, SecretBinding } from '@noodle-borg/connector-defs';
|
|
2
|
+
import type { CredentialRequest, DownstreamCredential } from '@noodle-borg/runtime';
|
|
3
|
+
export declare function requireFirebaseCaller(request: CredentialRequest, provider: string): NonNullable<CredentialRequest['caller']> & {
|
|
4
|
+
readonly audience: string;
|
|
5
|
+
};
|
|
6
|
+
export declare function requireFirebaseProvider(provider: string | undefined): void;
|
|
7
|
+
export type MicrosoftDelegatedBinding = DelegatedOAuthBinding & {
|
|
8
|
+
readonly provider: 'microsoft';
|
|
9
|
+
readonly tokenUrl: string;
|
|
10
|
+
readonly clientId: string;
|
|
11
|
+
};
|
|
12
|
+
export declare function requireMicrosoftDelegatedBinding(binding: SecretBinding): MicrosoftDelegatedBinding;
|
|
13
|
+
export declare function requireMicrosoftCaller(request: CredentialRequest): NonNullable<CredentialRequest['caller']> & {
|
|
14
|
+
readonly audience: string;
|
|
15
|
+
};
|
|
16
|
+
export interface FirebaseRefreshResult {
|
|
17
|
+
readonly idToken: string;
|
|
18
|
+
readonly refreshToken: string;
|
|
19
|
+
readonly expiresIn: number;
|
|
20
|
+
}
|
|
21
|
+
export interface MicrosoftRefreshResult {
|
|
22
|
+
readonly accessToken: string;
|
|
23
|
+
readonly refreshToken?: string;
|
|
24
|
+
readonly expiresIn: number;
|
|
25
|
+
}
|
|
26
|
+
export declare function fetchFirebaseRefreshToken(input: {
|
|
27
|
+
readonly apiKey: string;
|
|
28
|
+
readonly refreshToken: string;
|
|
29
|
+
readonly fetchImpl: typeof fetch;
|
|
30
|
+
}): Promise<FirebaseRefreshResult>;
|
|
31
|
+
export declare function fetchMicrosoftRefreshToken(input: {
|
|
32
|
+
readonly tokenUrl: string;
|
|
33
|
+
readonly clientId: string;
|
|
34
|
+
readonly clientSecret: string;
|
|
35
|
+
readonly refreshToken: string;
|
|
36
|
+
readonly scopes: readonly string[] | undefined;
|
|
37
|
+
readonly authMethod: 'client_secret_basic' | 'client_secret_post';
|
|
38
|
+
readonly fetchImpl: typeof fetch;
|
|
39
|
+
}): Promise<MicrosoftRefreshResult>;
|
|
40
|
+
export declare function exchangeFirebaseTokenForSessionCookie(input: {
|
|
41
|
+
readonly sessionUrl: string;
|
|
42
|
+
readonly tokenField: string;
|
|
43
|
+
readonly idToken: string;
|
|
44
|
+
readonly fetchImpl: typeof fetch;
|
|
45
|
+
readonly now: number;
|
|
46
|
+
}): Promise<DownstreamCredential>;
|
|
47
|
+
//# sourceMappingURL=credential-broker-delegated-refresh.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"credential-broker-delegated-refresh.d.ts","sourceRoot":"","sources":["../src/credential-broker-delegated-refresh.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACxF,OAAO,KAAK,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAEpF,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,EAAE,MAAM,GACf,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAW1E;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAI1E;AAED,MAAM,MAAM,yBAAyB,GAAG,qBAAqB,GAAG;IAC9D,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,aAAa,GACrB,yBAAyB,CAU3B;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,iBAAiB,GACzB,WAAW,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAU1E;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,wBAAsB,yBAAyB,CAAC,KAAK,EAAE;IACrD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,OAAO,KAAK,CAAC;CAClC,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAwCjC;AAED,wBAAsB,0BAA0B,CAAC,KAAK,EAAE;IACtD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,UAAU,EAAE,qBAAqB,GAAG,oBAAoB,CAAC;IAClE,QAAQ,CAAC,SAAS,EAAE,OAAO,KAAK,CAAC;CAClC,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAkDlC;AAED,wBAAsB,qCAAqC,CAAC,KAAK,EAAE;IACjE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,OAAO,KAAK,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAsBhC"}
|
|
@@ -0,0 +1,165 @@
|
|
|
1
|
+
export function requireFirebaseCaller(request, provider) {
|
|
2
|
+
const caller = request.caller;
|
|
3
|
+
if (caller === undefined ||
|
|
4
|
+
caller.identityKind !== 'customer' ||
|
|
5
|
+
caller.identityProvider !== provider ||
|
|
6
|
+
caller.audience === undefined) {
|
|
7
|
+
throw new Error('delegated credential requires a matching customer caller');
|
|
8
|
+
}
|
|
9
|
+
return caller;
|
|
10
|
+
}
|
|
11
|
+
export function requireFirebaseProvider(provider) {
|
|
12
|
+
if (provider === undefined || provider !== 'firebase') {
|
|
13
|
+
throw new Error('unsupported delegated credential provider');
|
|
14
|
+
}
|
|
15
|
+
}
|
|
16
|
+
export function requireMicrosoftDelegatedBinding(binding) {
|
|
17
|
+
const delegated = binding.delegated;
|
|
18
|
+
if (delegated?.provider !== 'microsoft' ||
|
|
19
|
+
delegated.tokenUrl === undefined ||
|
|
20
|
+
delegated.clientId === undefined) {
|
|
21
|
+
throw new Error('Microsoft delegated OAuth is not configured');
|
|
22
|
+
}
|
|
23
|
+
return delegated;
|
|
24
|
+
}
|
|
25
|
+
export function requireMicrosoftCaller(request) {
|
|
26
|
+
const caller = request.caller;
|
|
27
|
+
if (caller === undefined ||
|
|
28
|
+
caller.identityProvider !== 'microsoft' ||
|
|
29
|
+
caller.audience === undefined) {
|
|
30
|
+
throw new Error('delegated Microsoft credential requires a matching Microsoft caller');
|
|
31
|
+
}
|
|
32
|
+
return caller;
|
|
33
|
+
}
|
|
34
|
+
export async function fetchFirebaseRefreshToken(input) {
|
|
35
|
+
const params = new URLSearchParams();
|
|
36
|
+
params.set('grant_type', 'refresh_token');
|
|
37
|
+
params.set('refresh_token', input.refreshToken);
|
|
38
|
+
const response = await input.fetchImpl(`https://securetoken.googleapis.com/v1/token?key=${encodeURIComponent(input.apiKey)}`, {
|
|
39
|
+
method: 'POST',
|
|
40
|
+
headers: {
|
|
41
|
+
accept: 'application/json',
|
|
42
|
+
'content-type': 'application/x-www-form-urlencoded',
|
|
43
|
+
'user-agent': 'noodle-borg/0.0',
|
|
44
|
+
},
|
|
45
|
+
body: params.toString(),
|
|
46
|
+
signal: AbortSignal.timeout(10_000),
|
|
47
|
+
});
|
|
48
|
+
if (!response.ok)
|
|
49
|
+
throw new Error(`Firebase refresh failed with status ${response.status}`);
|
|
50
|
+
const json = (await response.json());
|
|
51
|
+
if (typeof json.id_token !== 'string' || json.id_token.length === 0) {
|
|
52
|
+
throw new Error('Firebase refresh response did not include id_token');
|
|
53
|
+
}
|
|
54
|
+
if (typeof json.refresh_token !== 'string' || json.refresh_token.length === 0) {
|
|
55
|
+
throw new Error('Firebase refresh response did not include refresh_token');
|
|
56
|
+
}
|
|
57
|
+
const expiresIn = typeof json.expires_in === 'string'
|
|
58
|
+
? Number.parseInt(json.expires_in, 10)
|
|
59
|
+
: typeof json.expires_in === 'number'
|
|
60
|
+
? json.expires_in
|
|
61
|
+
: 3600;
|
|
62
|
+
return {
|
|
63
|
+
idToken: json.id_token,
|
|
64
|
+
refreshToken: json.refresh_token,
|
|
65
|
+
expiresIn: Number.isFinite(expiresIn) && expiresIn > 0 ? expiresIn : 3600,
|
|
66
|
+
};
|
|
67
|
+
}
|
|
68
|
+
export async function fetchMicrosoftRefreshToken(input) {
|
|
69
|
+
const params = new URLSearchParams();
|
|
70
|
+
params.set('grant_type', 'refresh_token');
|
|
71
|
+
params.set('refresh_token', input.refreshToken);
|
|
72
|
+
if (input.scopes !== undefined && input.scopes.length > 0) {
|
|
73
|
+
params.set('scope', input.scopes.join(' '));
|
|
74
|
+
}
|
|
75
|
+
const headers = {
|
|
76
|
+
accept: 'application/json',
|
|
77
|
+
'content-type': 'application/x-www-form-urlencoded',
|
|
78
|
+
'user-agent': 'noodle-borg/0.0',
|
|
79
|
+
};
|
|
80
|
+
if (input.authMethod === 'client_secret_basic') {
|
|
81
|
+
headers.authorization = `Basic ${Buffer.from(`${input.clientId}:${input.clientSecret}`).toString('base64')}`;
|
|
82
|
+
}
|
|
83
|
+
else {
|
|
84
|
+
params.set('client_id', input.clientId);
|
|
85
|
+
params.set('client_secret', input.clientSecret);
|
|
86
|
+
}
|
|
87
|
+
const response = await input.fetchImpl(input.tokenUrl, {
|
|
88
|
+
method: 'POST',
|
|
89
|
+
headers,
|
|
90
|
+
body: params.toString(),
|
|
91
|
+
signal: AbortSignal.timeout(10_000),
|
|
92
|
+
});
|
|
93
|
+
if (!response.ok)
|
|
94
|
+
throw new Error(`Microsoft refresh failed with status ${response.status}`);
|
|
95
|
+
const json = (await response.json());
|
|
96
|
+
if (typeof json.access_token !== 'string' || json.access_token.length === 0) {
|
|
97
|
+
throw new Error('Microsoft refresh response did not include access_token');
|
|
98
|
+
}
|
|
99
|
+
const refreshToken = typeof json.refresh_token === 'string' && json.refresh_token.length > 0
|
|
100
|
+
? json.refresh_token
|
|
101
|
+
: undefined;
|
|
102
|
+
const expiresIn = typeof json.expires_in === 'string'
|
|
103
|
+
? Number.parseInt(json.expires_in, 10)
|
|
104
|
+
: typeof json.expires_in === 'number'
|
|
105
|
+
? json.expires_in
|
|
106
|
+
: 3600;
|
|
107
|
+
return {
|
|
108
|
+
accessToken: json.access_token,
|
|
109
|
+
...(refreshToken !== undefined ? { refreshToken } : {}),
|
|
110
|
+
expiresIn: Number.isFinite(expiresIn) && expiresIn > 0 ? expiresIn : 3600,
|
|
111
|
+
};
|
|
112
|
+
}
|
|
113
|
+
export async function exchangeFirebaseTokenForSessionCookie(input) {
|
|
114
|
+
const response = await input.fetchImpl(input.sessionUrl, {
|
|
115
|
+
method: 'POST',
|
|
116
|
+
headers: {
|
|
117
|
+
accept: 'application/json',
|
|
118
|
+
'content-type': 'application/json',
|
|
119
|
+
'user-agent': 'noodle-borg/0.0',
|
|
120
|
+
},
|
|
121
|
+
body: JSON.stringify({ [input.tokenField]: input.idToken }),
|
|
122
|
+
signal: AbortSignal.timeout(10_000),
|
|
123
|
+
});
|
|
124
|
+
if (!response.ok)
|
|
125
|
+
throw new Error(`delegated session endpoint failed with status ${response.status}`);
|
|
126
|
+
const cookies = extractSetCookieHeaders(response.headers);
|
|
127
|
+
const cookie = cookies.map(cookiePair).filter(Boolean).join('; ');
|
|
128
|
+
if (cookie.length === 0)
|
|
129
|
+
throw new Error('delegated session endpoint did not return a cookie');
|
|
130
|
+
const expiresAt = cookieExpiry(cookies, input.now);
|
|
131
|
+
return {
|
|
132
|
+
kind: 'cookie',
|
|
133
|
+
cookie,
|
|
134
|
+
...(expiresAt !== undefined ? { expiresAt } : {}),
|
|
135
|
+
};
|
|
136
|
+
}
|
|
137
|
+
function extractSetCookieHeaders(headers) {
|
|
138
|
+
const maybeHeaders = headers;
|
|
139
|
+
const values = maybeHeaders.getSetCookie?.();
|
|
140
|
+
if (values !== undefined && values.length > 0)
|
|
141
|
+
return values;
|
|
142
|
+
const single = headers.get('set-cookie');
|
|
143
|
+
return single === null ? [] : [single];
|
|
144
|
+
}
|
|
145
|
+
function cookiePair(setCookie) {
|
|
146
|
+
return setCookie.split(';', 1)[0]?.trim() ?? '';
|
|
147
|
+
}
|
|
148
|
+
function cookieExpiry(setCookies, now) {
|
|
149
|
+
const expiries = setCookies
|
|
150
|
+
.map((value) => maxAgeExpiry(value, now))
|
|
151
|
+
.filter((value) => value !== undefined);
|
|
152
|
+
if (expiries.length === 0)
|
|
153
|
+
return undefined;
|
|
154
|
+
return Math.min(...expiries);
|
|
155
|
+
}
|
|
156
|
+
function maxAgeExpiry(setCookie, now) {
|
|
157
|
+
const match = /(?:^|;)\s*max-age=(\d+)/i.exec(setCookie);
|
|
158
|
+
if (match === null)
|
|
159
|
+
return undefined;
|
|
160
|
+
const seconds = Number.parseInt(match[1] ?? '', 10);
|
|
161
|
+
if (!Number.isFinite(seconds) || seconds <= 0)
|
|
162
|
+
return undefined;
|
|
163
|
+
return now + seconds * 1000;
|
|
164
|
+
}
|
|
165
|
+
//# sourceMappingURL=credential-broker-delegated-refresh.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"credential-broker-delegated-refresh.js","sourceRoot":"","sources":["../src/credential-broker-delegated-refresh.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,qBAAqB,CACnC,OAA0B,EAC1B,QAAgB;IAEhB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IACE,MAAM,KAAK,SAAS;QACpB,MAAM,CAAC,YAAY,KAAK,UAAU;QAClC,MAAM,CAAC,gBAAgB,KAAK,QAAQ;QACpC,MAAM,CAAC,QAAQ,KAAK,SAAS,EAC7B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,MAAkF,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,QAA4B;IAClE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAQD,MAAM,UAAU,gCAAgC,CAC9C,OAAsB;IAEtB,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACpC,IACE,SAAS,EAAE,QAAQ,KAAK,WAAW;QACnC,SAAS,CAAC,QAAQ,KAAK,SAAS;QAChC,SAAS,CAAC,QAAQ,KAAK,SAAS,EAChC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,SAAsC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,OAA0B;IAE1B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IACE,MAAM,KAAK,SAAS;QACpB,MAAM,CAAC,gBAAgB,KAAK,WAAW;QACvC,MAAM,CAAC,QAAQ,KAAK,SAAS,EAC7B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,MAAkF,CAAC;AAC5F,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,KAI/C;IACC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CACpC,mDAAmD,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EACrF;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,MAAM,EAAE,kBAAkB;YAC1B,cAAc,EAAE,mCAAmC;YACnD,YAAY,EAAE,iBAAiB;SAChC;QACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;QACvB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CACF,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5F,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIlC,CAAC;IACF,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,SAAS,GACb,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACjC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QACtC,CAAC,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;YACnC,CAAC,CAAC,IAAI,CAAC,UAAU;YACjB,CAAC,CAAC,IAAI,CAAC;IACb,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,QAAQ;QACtB,YAAY,EAAE,IAAI,CAAC,aAAa;QAChC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;KAC1E,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAQhD;IACC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,OAAO,GAA2B;QACtC,MAAM,EAAE,kBAAkB;QAC1B,cAAc,EAAE,mCAAmC;QACnD,YAAY,EAAE,iBAAiB;KAChC,CAAC;IACF,IAAI,KAAK,CAAC,UAAU,KAAK,qBAAqB,EAAE,CAAC;QAC/C,OAAO,CAAC,aAAa,GAAG,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC/G,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE;QACrD,MAAM,EAAE,MAAM;QACd,OAAO;QACP,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;QACvB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7F,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIlC,CAAC;IACF,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,YAAY,GAChB,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;QACrE,CAAC,CAAC,IAAI,CAAC,aAAa;QACpB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,SAAS,GACb,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACjC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QACtC,CAAC,CAAC,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;YACnC,CAAC,CAAC,IAAI,CAAC,UAAU;YACjB,CAAC,CAAC,IAAI,CAAC;IACb,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;KAC1E,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qCAAqC,CAAC,KAM3D;IACC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE;QACvD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,MAAM,EAAE,kBAAkB;YAC1B,cAAc,EAAE,kBAAkB;YAClC,YAAY,EAAE,iBAAiB;SAChC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAC3D,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;KACpC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QACd,MAAM,IAAI,KAAK,CAAC,iDAAiD,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACtF,MAAM,OAAO,GAAG,uBAAuB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAC/F,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACnD,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,MAAM;QACN,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAgB;IAC/C,MAAM,YAAY,GAAG,OAAsD,CAAC;IAC5E,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,EAAE,EAAE,CAAC;IAC7C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IAC7D,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzC,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB;IACnC,OAAO,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,YAAY,CAAC,UAA6B,EAAE,GAAW;IAC9D,MAAM,QAAQ,GAAG,UAAU;SACxB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;SACxC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB,EAAE,GAAW;IAClD,MAAM,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAChE,OAAO,GAAG,GAAG,OAAO,GAAG,IAAI,CAAC;AAC9B,CAAC"}
|
package/node_modules/@noodle-borg/service/dist/credential-broker-delegated-token-exchange.d.ts
ADDED
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
import type { SecretBinding } from '@noodle-borg/connector-defs';
|
|
2
|
+
import { type CredentialRequest, type DownstreamCredential } from '@noodle-borg/runtime';
|
|
3
|
+
import { type DelegatedExchangeOptions } from './delegated-token-exchange.js';
|
|
4
|
+
import type { ConfigScope, ConfigStore } from './store.js';
|
|
5
|
+
export interface DelegatedTokenExchangeBrokerOptions {
|
|
6
|
+
/** Platform signer/issuer + deployment identity for `delegatedTokenExchange` (ADR 0152). */
|
|
7
|
+
readonly delegatedExchange?: DelegatedExchangeOptions;
|
|
8
|
+
readonly fetchImpl?: typeof fetch;
|
|
9
|
+
readonly now?: () => number;
|
|
10
|
+
}
|
|
11
|
+
export declare class DelegatedTokenExchangeBroker {
|
|
12
|
+
#private;
|
|
13
|
+
constructor(store: ConfigStore, scope: ConfigScope, options: DelegatedTokenExchangeBrokerOptions, delegatedCache: Map<string, DownstreamCredential & {
|
|
14
|
+
expiresAt: number;
|
|
15
|
+
}>, delegatedInflight: Map<string, Promise<DownstreamCredential>>);
|
|
16
|
+
getCredential(binding: SecretBinding, request: CredentialRequest): Promise<DownstreamCredential>;
|
|
17
|
+
}
|
|
18
|
+
//# sourceMappingURL=credential-broker-delegated-token-exchange.d.ts.map
|
package/node_modules/@noodle-borg/service/dist/credential-broker-delegated-token-exchange.d.ts.map
ADDED
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"credential-broker-delegated-token-exchange.d.ts","sourceRoot":"","sources":["../src/credential-broker-delegated-token-exchange.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EACL,KAAK,iBAAiB,EAEtB,KAAK,oBAAoB,EAC1B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,KAAK,wBAAwB,EAI9B,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE3D,MAAM,WAAW,mCAAmC;IAClD,4FAA4F;IAC5F,QAAQ,CAAC,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;IACtD,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAED,qBAAa,4BAA4B;;gBAQrC,KAAK,EAAE,WAAW,EAClB,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,mCAAmC,EAC5C,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,oBAAoB,GAAG;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,EACzE,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;IASzD,aAAa,CACjB,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,oBAAoB,CAAC;CAiGjC"}
|
|
@@ -0,0 +1,112 @@
|
|
|
1
|
+
import { CredentialUnavailableError, } from '@noodle-borg/runtime';
|
|
2
|
+
import { copyCustomerRouteBinding, routeBoundCredentialKey } from './credential-route-key.js';
|
|
3
|
+
import { fetchDelegatedTokenExchange, requireExchangeCaller, signExchangeAssertion, } from './delegated-token-exchange.js';
|
|
4
|
+
import { resolveManagedVariablesInString } from './managed-config-expressions.js';
|
|
5
|
+
export class DelegatedTokenExchangeBroker {
|
|
6
|
+
#delegatedCache;
|
|
7
|
+
#delegatedInflight;
|
|
8
|
+
#store;
|
|
9
|
+
#scope;
|
|
10
|
+
#options;
|
|
11
|
+
constructor(store, scope, options, delegatedCache, delegatedInflight) {
|
|
12
|
+
this.#store = store;
|
|
13
|
+
this.#scope = scope;
|
|
14
|
+
this.#options = options;
|
|
15
|
+
this.#delegatedCache = delegatedCache;
|
|
16
|
+
this.#delegatedInflight = delegatedInflight;
|
|
17
|
+
}
|
|
18
|
+
async getCredential(binding, request) {
|
|
19
|
+
const options = this.#options.delegatedExchange;
|
|
20
|
+
const declared = binding.tokenExchange;
|
|
21
|
+
if (options === undefined || declared === undefined) {
|
|
22
|
+
throw new CredentialUnavailableError('credential_not_configured', {
|
|
23
|
+
fix: 'Configure delegatedTokenExchange for this connector and deployment.',
|
|
24
|
+
next: ['noodle auth doctor'],
|
|
25
|
+
});
|
|
26
|
+
}
|
|
27
|
+
const caller = requireExchangeCaller(request);
|
|
28
|
+
const cacheKey = routeBoundCredentialKey([
|
|
29
|
+
'tokenExchange',
|
|
30
|
+
caller.audience,
|
|
31
|
+
caller.customerIssuer,
|
|
32
|
+
caller.subject,
|
|
33
|
+
request.connectorId,
|
|
34
|
+
request.operation,
|
|
35
|
+
declared.scopes?.join(' ') ?? '',
|
|
36
|
+
].join('\u0000'), request.route);
|
|
37
|
+
const now = this.#now();
|
|
38
|
+
const cached = this.#delegatedCache.get(cacheKey);
|
|
39
|
+
if (cached !== undefined && cached.expiresAt > now) {
|
|
40
|
+
if (cached.kind === 'cookie')
|
|
41
|
+
throw new Error('cached delegated credential type mismatch');
|
|
42
|
+
return { token: cached.token };
|
|
43
|
+
}
|
|
44
|
+
const inflight = this.#delegatedInflight.get(cacheKey);
|
|
45
|
+
if (inflight !== undefined)
|
|
46
|
+
return inflight;
|
|
47
|
+
const promise = (async () => {
|
|
48
|
+
if (binding.secretRef === undefined) {
|
|
49
|
+
throw new CredentialUnavailableError('credential_not_configured', {
|
|
50
|
+
fix: 'Configure the delegated token exchange client secret reference.',
|
|
51
|
+
next: ['noodle auth doctor'],
|
|
52
|
+
});
|
|
53
|
+
}
|
|
54
|
+
const secrets = await this.#store.resolveConfigValues('secret', this.#scope);
|
|
55
|
+
const clientSecret = secrets[binding.secretRef];
|
|
56
|
+
if (clientSecret === undefined) {
|
|
57
|
+
throw new CredentialUnavailableError('credential_not_configured', {
|
|
58
|
+
fix: 'Set the managed secret required by delegated token exchange.',
|
|
59
|
+
next: ['noodle auth doctor'],
|
|
60
|
+
});
|
|
61
|
+
}
|
|
62
|
+
const resolved = await this.#resolveTokenExchangeBinding(declared);
|
|
63
|
+
const audience = resolved.audience ?? resolved.tokenUrl;
|
|
64
|
+
const assertion = await signExchangeAssertion({
|
|
65
|
+
options,
|
|
66
|
+
caller,
|
|
67
|
+
audience,
|
|
68
|
+
nowMs: this.#now(),
|
|
69
|
+
...(request.route === undefined ? {} : { route: copyCustomerRouteBinding(request.route) }),
|
|
70
|
+
});
|
|
71
|
+
let result;
|
|
72
|
+
try {
|
|
73
|
+
result = await fetchDelegatedTokenExchange({
|
|
74
|
+
binding: resolved,
|
|
75
|
+
clientSecret,
|
|
76
|
+
assertion,
|
|
77
|
+
fetchImpl: this.#options.fetchImpl ?? fetch,
|
|
78
|
+
});
|
|
79
|
+
}
|
|
80
|
+
catch {
|
|
81
|
+
throw new CredentialUnavailableError('credential_exchange_failed', {
|
|
82
|
+
fix: 'Verify the customer token endpoint, client credentials, audience, and scopes.',
|
|
83
|
+
next: ['noodle auth doctor --live'],
|
|
84
|
+
});
|
|
85
|
+
}
|
|
86
|
+
if (result.expiresIn !== undefined) {
|
|
87
|
+
this.#delegatedCache.set(cacheKey, {
|
|
88
|
+
token: result.token,
|
|
89
|
+
expiresAt: this.#now() + Math.max(1, result.expiresIn - 300) * 1000,
|
|
90
|
+
});
|
|
91
|
+
}
|
|
92
|
+
return { token: result.token };
|
|
93
|
+
})().finally(() => this.#delegatedInflight.delete(cacheKey));
|
|
94
|
+
this.#delegatedInflight.set(cacheKey, promise);
|
|
95
|
+
return promise;
|
|
96
|
+
}
|
|
97
|
+
async #resolveTokenExchangeBinding(declared) {
|
|
98
|
+
const variables = await this.#store.resolveConfigValues('variable', this.#scope);
|
|
99
|
+
return {
|
|
100
|
+
...declared,
|
|
101
|
+
tokenUrl: resolveManagedVariablesInString(declared.tokenUrl, variables),
|
|
102
|
+
clientId: resolveManagedVariablesInString(declared.clientId, variables),
|
|
103
|
+
...(declared.audience !== undefined
|
|
104
|
+
? { audience: resolveManagedVariablesInString(declared.audience, variables) }
|
|
105
|
+
: {}),
|
|
106
|
+
};
|
|
107
|
+
}
|
|
108
|
+
#now() {
|
|
109
|
+
return this.#options.now?.() ?? Date.now();
|
|
110
|
+
}
|
|
111
|
+
}
|
|
112
|
+
//# sourceMappingURL=credential-broker-delegated-token-exchange.js.map
|
package/node_modules/@noodle-borg/service/dist/credential-broker-delegated-token-exchange.js.map
ADDED
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"credential-broker-delegated-token-exchange.js","sourceRoot":"","sources":["../src/credential-broker-delegated-token-exchange.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,0BAA0B,GAE3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAC9F,OAAO,EAEL,2BAA2B,EAC3B,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAC;AAUlF,MAAM,OAAO,4BAA4B;IAC9B,eAAe,CAA4D;IAC3E,kBAAkB,CAA6C;IAC/D,MAAM,CAAc;IACpB,MAAM,CAAc;IACpB,QAAQ,CAAsC;IAEvD,YACE,KAAkB,EAClB,KAAkB,EAClB,OAA4C,EAC5C,cAAyE,EACzE,iBAA6D;QAE7D,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,eAAe,GAAG,cAAc,CAAC;QACtC,IAAI,CAAC,kBAAkB,GAAG,iBAAiB,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,OAAsB,EACtB,OAA0B;QAE1B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC;QACvC,IAAI,OAAO,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,EAAE;gBAChE,GAAG,EAAE,qEAAqE;gBAC1E,IAAI,EAAE,CAAC,oBAAoB,CAAC;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,uBAAuB,CACtC;YACE,eAAe;YACf,MAAM,CAAC,QAAQ;YACf,MAAM,CAAC,cAAc;YACrB,MAAM,CAAC,OAAO;YACd,OAAO,CAAC,WAAW;YACnB,OAAO,CAAC,SAAS;YACjB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;SACjC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAChB,OAAO,CAAC,KAAK,CACd,CAAC;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;YACnD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC3F,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,OAAO,GAAG,CAAC,KAAK,IAAmC,EAAE;YACzD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACpC,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,EAAE;oBAChE,GAAG,EAAE,iEAAiE;oBACtE,IAAI,EAAE,CAAC,oBAAoB,CAAC;iBAC7B,CAAC,CAAC;YACL,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7E,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,IAAI,0BAA0B,CAAC,2BAA2B,EAAE;oBAChE,GAAG,EAAE,8DAA8D;oBACnE,IAAI,EAAE,CAAC,oBAAoB,CAAC;iBAC7B,CAAC,CAAC;YACL,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,4BAA4B,CAAC,QAAQ,CAAC,CAAC;YACnE,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC;YACxD,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC;gBAC5C,OAAO;gBACP,MAAM;gBACN,QAAQ;gBACR,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE;gBAClB,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,wBAAwB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;aAC3F,CAAC,CAAC;YACH,IAAI,MAA+D,CAAC;YACpE,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,2BAA2B,CAAC;oBACzC,OAAO,EAAE,QAAQ;oBACjB,YAAY;oBACZ,SAAS;oBACT,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,KAAK;iBAC5C,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,0BAA0B,CAAC,4BAA4B,EAAE;oBACjE,GAAG,EAAE,+EAA+E;oBACpF,IAAI,EAAE,CAAC,2BAA2B,CAAC;iBACpC,CAAC,CAAC;YACL,CAAC;YACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE;oBACjC,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI;iBACpE,CAAC,CAAC;YACL,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,4BAA4B,CAChC,QAAqD;QAErD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjF,OAAO;YACL,GAAG,QAAQ;YACX,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;YACvE,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;YACvE,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS;gBACjC,CAAC,CAAC,EAAE,QAAQ,EAAE,+BAA+B,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE;gBAC7E,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7C,CAAC;CACF"}
|