@noodleseed/one 0.99.0 → 0.100.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/commands/auth-ops.d.ts.map +1 -1
- package/dist/commands/auth-ops.js +6 -1
- package/dist/commands/auth-ops.js.map +1 -1
- package/dist/commands/auth-service-principals.d.ts +3 -0
- package/dist/commands/auth-service-principals.d.ts.map +1 -0
- package/dist/commands/auth-service-principals.js +380 -0
- package/dist/commands/auth-service-principals.js.map +1 -0
- package/dist/commands/catalog-data-auth-discovery.d.ts.map +1 -1
- package/dist/commands/catalog-data-auth-discovery.js +187 -2
- package/dist/commands/catalog-data-auth-discovery.js.map +1 -1
- package/dist/commands/catalog.d.ts.map +1 -1
- package/dist/commands/catalog.js +1 -0
- package/dist/commands/catalog.js.map +1 -1
- package/node_modules/@noodle-borg/auth/dist/index.d.ts +1 -1
- package/node_modules/@noodle-borg/auth/dist/index.d.ts.map +1 -1
- package/node_modules/@noodle-borg/auth/dist/index.js.map +1 -1
- package/node_modules/@noodle-borg/auth/dist/jwt-issuer.d.ts +5 -1
- package/node_modules/@noodle-borg/auth/dist/jwt-issuer.d.ts.map +1 -1
- package/node_modules/@noodle-borg/auth/dist/jwt-issuer.js +6 -0
- package/node_modules/@noodle-borg/auth/dist/jwt-issuer.js.map +1 -1
- package/node_modules/@noodle-borg/auth/dist/verify.d.ts +9 -2
- package/node_modules/@noodle-borg/auth/dist/verify.d.ts.map +1 -1
- package/node_modules/@noodle-borg/auth/dist/verify.js +25 -1
- package/node_modules/@noodle-borg/auth/dist/verify.js.map +1 -1
- package/node_modules/@noodle-borg/capabilities/dist/index.d.ts.map +1 -1
- package/node_modules/@noodle-borg/capabilities/dist/index.js +7 -0
- package/node_modules/@noodle-borg/capabilities/dist/index.js.map +1 -1
- package/node_modules/@noodle-borg/module/dist/contract.d.ts +1 -1
- package/node_modules/@noodle-borg/module/dist/contract.d.ts.map +1 -1
- package/node_modules/@noodle-borg/protocol/dist/index.d.ts +1 -0
- package/node_modules/@noodle-borg/protocol/dist/index.d.ts.map +1 -1
- package/node_modules/@noodle-borg/protocol/dist/index.js +1 -0
- package/node_modules/@noodle-borg/protocol/dist/index.js.map +1 -1
- package/node_modules/@noodle-borg/protocol/dist/sdk-server.d.ts +2 -0
- package/node_modules/@noodle-borg/protocol/dist/sdk-server.d.ts.map +1 -1
- package/node_modules/@noodle-borg/protocol/dist/sdk-server.js.map +1 -1
- package/node_modules/@noodle-borg/protocol/dist/tool-confirmation.d.ts +6 -0
- package/node_modules/@noodle-borg/protocol/dist/tool-confirmation.d.ts.map +1 -0
- package/node_modules/@noodle-borg/protocol/dist/tool-confirmation.js +6 -0
- package/node_modules/@noodle-borg/protocol/dist/tool-confirmation.js.map +1 -0
- package/node_modules/@noodle-borg/protocol/dist/tool-interaction.d.ts +1 -1
- package/node_modules/@noodle-borg/protocol/dist/tool-interaction.d.ts.map +1 -1
- package/node_modules/@noodle-borg/protocol/dist/tool-interaction.js +2 -2
- package/node_modules/@noodle-borg/protocol/dist/tool-interaction.js.map +1 -1
- package/node_modules/@noodle-borg/protocol/dist/v2/confirmation.d.ts +1 -1
- package/node_modules/@noodle-borg/protocol/dist/v2/confirmation.d.ts.map +1 -1
- package/node_modules/@noodle-borg/protocol/dist/v2/confirmation.js +2 -2
- package/node_modules/@noodle-borg/protocol/dist/v2/confirmation.js.map +1 -1
- package/node_modules/@noodle-borg/protocol/dist/v2/input-required.d.ts.map +1 -1
- package/node_modules/@noodle-borg/protocol/dist/v2/input-required.js +5 -0
- package/node_modules/@noodle-borg/protocol/dist/v2/input-required.js.map +1 -1
- package/node_modules/@noodle-borg/protocol/dist/v2/server.d.ts.map +1 -1
- package/node_modules/@noodle-borg/protocol/dist/v2/server.js +13 -9
- package/node_modules/@noodle-borg/protocol/dist/v2/server.js.map +1 -1
- package/node_modules/@noodle-borg/runtime/dist/connector/types.d.ts +1 -1
- package/node_modules/@noodle-borg/runtime/dist/connector/types.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/index.d.ts +4 -0
- package/node_modules/@noodle-borg/service/dist/index.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/index.js +4 -0
- package/node_modules/@noodle-borg/service/dist/index.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/app.d.ts +2 -0
- package/node_modules/@noodle-borg/service/dist/oauth/app.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/app.js +29 -0
- package/node_modules/@noodle-borg/service/dist/oauth/app.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/metadata.d.ts +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/metadata.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/metadata.js +19 -2
- package/node_modules/@noodle-borg/service/dist/oauth/metadata.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/platform-principal-guard.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/platform-principal-guard.js +3 -1
- package/node_modules/@noodle-borg/service/dist/oauth/platform-principal-guard.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/provider.d.ts +5 -0
- package/node_modules/@noodle-borg/service/dist/oauth/provider.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/provider.js +11 -1
- package/node_modules/@noodle-borg/service/dist/oauth/provider.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/service-bootstrap.d.ts +8 -1
- package/node_modules/@noodle-borg/service/dist/oauth/service-bootstrap.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/service-bootstrap.js +60 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-bootstrap.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-client-auth.d.ts +22 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-client-auth.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-client-auth.js +199 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-client-auth.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-credentials.d.ts +14 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-credentials.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-credentials.js +119 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-credentials.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-guard.d.ts +16 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-guard.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-guard.js +34 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-guard.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-resource.d.ts +14 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-resource.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-resource.js +53 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-resource.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-store-postgres-schema.d.ts +4 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-store-postgres-schema.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-store-postgres-schema.js +98 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-store-postgres-schema.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-store-postgres.d.ts +22 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-store-postgres.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-store-postgres.js +359 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-store-postgres.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-store.d.ts +165 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-store.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-store.js +349 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-store.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-token-handler.d.ts +20 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-token-handler.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-token-handler.js +175 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-token-handler.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-token-issuer.d.ts +12 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-token-issuer.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-token-issuer.js +20 -0
- package/node_modules/@noodle-borg/service/dist/oauth/service-principal-token-issuer.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/oauth/token-issuer.d.ts +9 -3
- package/node_modules/@noodle-borg/service/dist/oauth/token-issuer.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/oauth/token-issuer.js +6 -0
- package/node_modules/@noodle-borg/service/dist/oauth/token-issuer.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/options.d.ts +5 -0
- package/node_modules/@noodle-borg/service/dist/options.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/feedback-operations-dispatch.d.ts +2 -1
- package/node_modules/@noodle-borg/service/dist/routes/feedback-operations-dispatch.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/feedback-operations-dispatch.js +2 -1
- package/node_modules/@noodle-borg/service/dist/routes/feedback-operations-dispatch.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/service-principal-contracts.d.ts +24 -0
- package/node_modules/@noodle-borg/service/dist/routes/service-principal-contracts.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/service-principal-contracts.js +55 -0
- package/node_modules/@noodle-borg/service/dist/routes/service-principal-contracts.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/service-principal-paths.d.ts +29 -0
- package/node_modules/@noodle-borg/service/dist/routes/service-principal-paths.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/service-principal-paths.js +63 -0
- package/node_modules/@noodle-borg/service/dist/routes/service-principal-paths.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/service-principals-dispatch.d.ts +27 -0
- package/node_modules/@noodle-borg/service/dist/routes/service-principals-dispatch.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/service-principals-dispatch.js +33 -0
- package/node_modules/@noodle-borg/service/dist/routes/service-principals-dispatch.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/service-principals.d.ts +17 -0
- package/node_modules/@noodle-borg/service/dist/routes/service-principals.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/service-principals.js +203 -0
- package/node_modules/@noodle-borg/service/dist/routes/service-principals.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/routes/slack-feedback-actions.d.ts +2 -0
- package/node_modules/@noodle-borg/service/dist/routes/slack-feedback-actions.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/routes/slack-feedback-actions.js +44 -14
- package/node_modules/@noodle-borg/service/dist/routes/slack-feedback-actions.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/serve.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/serve.js +4 -1
- package/node_modules/@noodle-borg/service/dist/serve.js.map +1 -1
- package/node_modules/@noodle-borg/service/dist/service-principal-data-plane.d.ts +12 -0
- package/node_modules/@noodle-borg/service/dist/service-principal-data-plane.d.ts.map +1 -0
- package/node_modules/@noodle-borg/service/dist/service-principal-data-plane.js +71 -0
- package/node_modules/@noodle-borg/service/dist/service-principal-data-plane.js.map +1 -0
- package/node_modules/@noodle-borg/service/dist/service.d.ts +1 -3
- package/node_modules/@noodle-borg/service/dist/service.d.ts.map +1 -1
- package/node_modules/@noodle-borg/service/dist/service.js +9 -5
- package/node_modules/@noodle-borg/service/dist/service.js.map +1 -1
- package/node_modules/@noodle-borg/service/package.json +1 -0
- package/node_modules/@noodle-borg/transport-http/dist/handler.d.ts +5 -0
- package/node_modules/@noodle-borg/transport-http/dist/handler.d.ts.map +1 -1
- package/node_modules/@noodle-borg/transport-http/dist/handler.js +4 -0
- package/node_modules/@noodle-borg/transport-http/dist/handler.js.map +1 -1
- package/node_modules/@noodle-borg/transport-http/dist/identity-authorization.d.ts +5 -0
- package/node_modules/@noodle-borg/transport-http/dist/identity-authorization.d.ts.map +1 -1
- package/node_modules/@noodle-borg/transport-http/dist/identity-authorization.js +16 -0
- package/node_modules/@noodle-borg/transport-http/dist/identity-authorization.js.map +1 -1
- package/node_modules/@noodle-borg/transport-http/dist/index.d.ts +2 -0
- package/node_modules/@noodle-borg/transport-http/dist/index.d.ts.map +1 -1
- package/node_modules/@noodle-borg/transport-http/dist/index.js +1 -0
- package/node_modules/@noodle-borg/transport-http/dist/index.js.map +1 -1
- package/node_modules/@noodle-borg/transport-http/dist/serve-request.d.ts +3 -0
- package/node_modules/@noodle-borg/transport-http/dist/serve-request.d.ts.map +1 -1
- package/node_modules/@noodle-borg/transport-http/dist/serve-request.js +56 -2
- package/node_modules/@noodle-borg/transport-http/dist/serve-request.js.map +1 -1
- package/node_modules/@noodle-borg/transport-http/dist/service-principal-authorization.d.ts +31 -0
- package/node_modules/@noodle-borg/transport-http/dist/service-principal-authorization.d.ts.map +1 -0
- package/node_modules/@noodle-borg/transport-http/dist/service-principal-authorization.js +51 -0
- package/node_modules/@noodle-borg/transport-http/dist/service-principal-authorization.js.map +1 -0
- package/package.json +1 -1
|
@@ -2,7 +2,7 @@ import type { OAuthTokens } from '@modelcontextprotocol/sdk/shared/auth.js';
|
|
|
2
2
|
import { type SigningKeyProvider } from '@noodle-borg/auth';
|
|
3
3
|
import type { Response } from 'express';
|
|
4
4
|
import type { OAuthStore } from './store.js';
|
|
5
|
-
|
|
5
|
+
interface OAuthAccessTokenIdentity {
|
|
6
6
|
readonly ownerSubject: string;
|
|
7
7
|
readonly resource: string;
|
|
8
8
|
readonly ownerEmail?: string;
|
|
@@ -13,10 +13,15 @@ export interface OAuthTokenIdentity {
|
|
|
13
13
|
readonly authTime?: number;
|
|
14
14
|
/** Verified upstream customer assertion expiry, used to clamp every derived credential. */
|
|
15
15
|
readonly upstreamExpiresAt?: number;
|
|
16
|
-
readonly identityKind?: 'platform' | 'customer';
|
|
16
|
+
readonly identityKind?: 'platform' | 'customer' | 'service';
|
|
17
17
|
readonly identityProvider?: string;
|
|
18
18
|
readonly developerGrantId?: string;
|
|
19
19
|
readonly oauthClientId?: string;
|
|
20
|
+
readonly servicePrincipalGrantId?: string;
|
|
21
|
+
readonly servicePrincipalCredentialId?: string;
|
|
22
|
+
}
|
|
23
|
+
export interface OAuthTokenIdentity extends Omit<OAuthAccessTokenIdentity, 'identityKind' | 'servicePrincipalGrantId' | 'servicePrincipalCredentialId'> {
|
|
24
|
+
readonly identityKind?: 'platform' | 'customer';
|
|
20
25
|
}
|
|
21
26
|
export interface OAuthAuthorizationCodeGrant extends OAuthTokenIdentity {
|
|
22
27
|
readonly clientId: string;
|
|
@@ -46,7 +51,8 @@ export declare function mintOAuthAccessToken(input: {
|
|
|
46
51
|
readonly signer: SigningKeyProvider;
|
|
47
52
|
readonly issuer: string;
|
|
48
53
|
readonly ttlSeconds: number;
|
|
49
|
-
readonly identity:
|
|
54
|
+
readonly identity: OAuthAccessTokenIdentity;
|
|
50
55
|
}): Promise<string>;
|
|
51
56
|
export declare function effectiveCredentialTtl(nowSeconds: number, configuredTtl: number, upstreamExpiresAt: number | undefined): number;
|
|
57
|
+
export {};
|
|
52
58
|
//# sourceMappingURL=token-issuer.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"token-issuer.d.ts","sourceRoot":"","sources":["../../src/oauth/token-issuer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0CAA0C,CAAC;AAC5E,OAAO,EAAmB,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAOxC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAG7C,
|
|
1
|
+
{"version":3,"file":"token-issuer.d.ts","sourceRoot":"","sources":["../../src/oauth/token-issuer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0CAA0C,CAAC;AAC5E,OAAO,EAAmB,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAOxC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAG7C,UAAU,wBAAwB;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,2FAA2F;IAC3F,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,YAAY,CAAC,EAAE,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAC1C,QAAQ,CAAC,4BAA4B,CAAC,EAAE,MAAM,CAAC;CAChD;AAED,MAAM,WAAW,kBACf,SAAQ,IAAI,CACV,wBAAwB,EACxB,cAAc,GAAG,yBAAyB,GAAG,8BAA8B,CAC5E;IACD,QAAQ,CAAC,YAAY,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;CACjD;AAED,MAAM,WAAW,2BAA4B,SAAQ,kBAAkB;IACrE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,sBAAuB,SAAQ,kBAAkB;IAChE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,qBAAa,gBAAgB;;gBASf,KAAK,EAAE;QACjB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;QAC3B,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;QACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,MAAM,CAAC;KACnC;IAUK,sBAAsB,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC;IAmCxF,WAAW,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,WAAW,CAAC;CA+DvE;AAED,oGAAoG;AACpG,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,wBAAwB,CAAC;CAC7C,GAAG,OAAO,CAAC,MAAM,CAAC,CAmClB;AAED,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,EACrB,iBAAiB,EAAE,MAAM,GAAG,SAAS,GACpC,MAAM,CAKR"}
|
|
@@ -140,6 +140,12 @@ export function mintOAuthAccessToken(input) {
|
|
|
140
140
|
? { developerGrantId: identity.developerGrantId }
|
|
141
141
|
: {}),
|
|
142
142
|
...(identity.oauthClientId !== undefined ? { oauthClientId: identity.oauthClientId } : {}),
|
|
143
|
+
...(identity.servicePrincipalGrantId !== undefined
|
|
144
|
+
? { servicePrincipalGrantId: identity.servicePrincipalGrantId }
|
|
145
|
+
: {}),
|
|
146
|
+
...(identity.servicePrincipalCredentialId !== undefined
|
|
147
|
+
? { servicePrincipalCredentialId: identity.servicePrincipalCredentialId }
|
|
148
|
+
: {}),
|
|
143
149
|
}, input.ttlSeconds);
|
|
144
150
|
}
|
|
145
151
|
export function effectiveCredentialTtl(nowSeconds, configuredTtl, upstreamExpiresAt) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"token-issuer.js","sourceRoot":"","sources":["../../src/oauth/token-issuer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAA2B,MAAM,mBAAmB,CAAC;AAE7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EACL,iCAAiC,EACjC,2BAA2B,GAC5B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;
|
|
1
|
+
{"version":3,"file":"token-issuer.js","sourceRoot":"","sources":["../../src/oauth/token-issuer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAA2B,MAAM,mBAAmB,CAAC;AAE7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EACL,iCAAiC,EACjC,2BAA2B,GAC5B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAwCrD,MAAM,OAAO,gBAAgB;IAClB,MAAM,CAAa;IACnB,OAAO,CAAqB;IAC5B,OAAO,CAAS;IAChB,UAAU,CAAS;IACnB,WAAW,CAAS;IACpB,QAAQ,CAAS;IACjB,WAAW,CAAe;IAEnC,YAAY,KAQX;QACC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,UAAU,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,GAAa,EAAE,KAAkC;QAC5E,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,sBAAsB,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC3F,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,2BAA2B,CAAC;YAC9C,MAAM,EAAE,KAAK,CAAC,WAAW;YACzB,QAAQ,EAAE,KAAK,CAAC,aAAa;SAC9B,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC;YACxC,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,WAAW;YACd,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS;gBACvC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE;gBAChD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7F,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7F,SAAS,EAAE,UAAU,GAAG,OAAO;SAChC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC5C,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;YAAE,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3F,6BAA6B,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAA6B;QAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,sBAAsB,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC/F,MAAM,UAAU,GAAG,sBAAsB,CACvC,UAAU,EACV,IAAI,CAAC,WAAW,EAChB,KAAK,CAAC,iBAAiB,CACxB,CAAC;QACF,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,2BAA2B,CAAC;YAC9C,MAAM,EAAE,KAAK,CAAC,WAAW;YACzB,QAAQ,EAAE,KAAK,CAAC,aAAa;SAC9B,CAAC,CAAC;QACH,MAAM,QAAQ,GAAuB;YACnC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,WAAW;YACd,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS;gBACvC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE;gBAChD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7F,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7F,aAAa,EAAE,KAAK,CAAC,QAAQ;SAC9B,CAAC;QACF,MAAM,YAAY,GAAG,MAAM,oBAAoB,CAAC;YAC9C,MAAM,EAAE,IAAI,CAAC,OAAO;YACpB,MAAM,EAAE,IAAI,CAAC,OAAO;YACpB,UAAU,EAAE,SAAS;YACrB,QAAQ;SACT,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,WAAW,EAAE,CAAC;QACjC,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;YACnC,KAAK,EAAE,SAAS,CAAC,UAAU,CAAC;YAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,WAAW;YACd,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS;gBACvC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE;gBAChD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7F,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7F,SAAS,EAAE,UAAU,GAAG,UAAU;YAClC,QAAQ,EAAE,WAAW,EAAE;SACxB,CAAC,CAAC;QACH,OAAO;YACL,YAAY;YACZ,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,SAAS;YACrB,aAAa,EAAE,UAAU;YACzB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC;IACJ,CAAC;CACF;AAED,oGAAoG;AACpG,MAAM,UAAU,oBAAoB,CAAC,KAKpC;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,iCAAiC,CAAC;QACpD,MAAM,EAAE,QAAQ,CAAC,WAAW;QAC5B,QAAQ,EAAE,QAAQ,CAAC,aAAa;KACjC,CAAC,CAAC;IACH,OAAO,eAAe,CACpB,KAAK,CAAC,MAAM,EACZ;QACE,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,QAAQ,CAAC,YAAY;QAC9B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,GAAG,CAAC,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,GAAG,WAAW;QACd,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,GAAG,CAAC,QAAQ,CAAC,gBAAgB,KAAK,SAAS;YACzC,CAAC,CAAC,EAAE,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,EAAE;YACjD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,QAAQ,CAAC,gBAAgB,KAAK,SAAS;YACzC,CAAC,CAAC,EAAE,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,EAAE;YACjD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,QAAQ,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,GAAG,CAAC,QAAQ,CAAC,uBAAuB,KAAK,SAAS;YAChD,CAAC,CAAC,EAAE,uBAAuB,EAAE,QAAQ,CAAC,uBAAuB,EAAE;YAC/D,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,QAAQ,CAAC,4BAA4B,KAAK,SAAS;YACrD,CAAC,CAAC,EAAE,4BAA4B,EAAE,QAAQ,CAAC,4BAA4B,EAAE;YACzE,CAAC,CAAC,EAAE,CAAC;KACR,EACD,KAAK,CAAC,UAAU,CACjB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,UAAkB,EAClB,aAAqB,EACrB,iBAAqC;IAErC,IAAI,iBAAiB,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IAC1D,MAAM,SAAS,GAAG,iBAAiB,GAAG,UAAU,CAAC;IACjD,IAAI,SAAS,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;AAC5C,CAAC"}
|
|
@@ -31,6 +31,7 @@ import type { PendingGithubInstallationStore } from './github/pending-installati
|
|
|
31
31
|
import type { GoogleWorkloadIdentityStore } from './google-workload-identity-store.js';
|
|
32
32
|
import type { LoadedServiceModule } from './modules/host.js';
|
|
33
33
|
import type { DeveloperGrantStore } from './oauth/developer-grant.js';
|
|
34
|
+
import type { ServicePrincipalRuntime } from './oauth/service-principal-store.js';
|
|
34
35
|
import type { PlatformAccountResetTargetSet } from './platform-account-reset.js';
|
|
35
36
|
import type { PlatformAccountResetRegistryPlan } from './platform-account-reset-operation-postgres.js';
|
|
36
37
|
import type { PlatformAccountResetOperatorPort } from './platform-account-reset-ports.js';
|
|
@@ -55,6 +56,10 @@ export interface ServiceOptions {
|
|
|
55
56
|
};
|
|
56
57
|
/** Server-side authorization records for grant-bound developer plugin and managed CLI tokens. */
|
|
57
58
|
readonly developerGrantStore?: DeveloperGrantStore;
|
|
59
|
+
/** Platform-owned service-principal lifecycle, ready only after its durable schema is available. */
|
|
60
|
+
readonly servicePrincipalRuntime?: ServicePrincipalRuntime;
|
|
61
|
+
/** Internal origin-wide fact: the co-hosted OAuth machine lifecycle is completely ready. */
|
|
62
|
+
readonly oauthClientCredentialsReady?: boolean;
|
|
58
63
|
/** Embedded-assistant clients and ephemeral sessions. Production injects a durable shared store. */
|
|
59
64
|
readonly assistantStore?: AssistantStore;
|
|
60
65
|
/** Injectable OpenAI-compatible fetch for tests and controlled provider adapters. */
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,KAAK,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC1F,OAAO,KAAK,EACV,aAAa,EACb,MAAM,EACN,eAAe,EACf,kBAAkB,EAClB,UAAU,EACX,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACpF,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAC/F,OAAO,KAAK,EAAE,2CAA2C,EAAE,MAAM,gDAAgD,CAAC;AAClH,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,qCAAqC,CAAC;AAC7F,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AACvF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC/E,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,mCAAmC,CAAC;AAC7F,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,qCAAqC,CAAC;AAC5F,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAChF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,KAAK,EACV,wBAAwB,EACxB,wBAAwB,EACzB,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,wCAAwC,CAAC;AACxF,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AAC3F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC/E,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AAC9E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,mCAAmC,CAAC;AACxF,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AACvF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AACjF,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,gDAAgD,CAAC;AACvG,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,mCAAmC,CAAC;AAC1F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,KAAK,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,oCAAoC,CAAC;AAC7F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EACjB,6BAA6B,EAC7B,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAEpF,MAAM,WAAW,cAAc;IAC7B,sFAAsF;IACtF,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,gFAAgF;IAChF,QAAQ,CAAC,sBAAsB,CAAC,EAAE;QAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;QACpC,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;KAC7C,CAAC;IACF,iGAAiG;IACjG,QAAQ,CAAC,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IACnD,oGAAoG;IACpG,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IACzC,qFAAqF;IACrF,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,KAAK,CAAC;IAC5C,mGAAmG;IACnG,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE;QAC1B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;QACnC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAChD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;KAC7B,CAAC;IACF,wFAAwF;IACxF,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C,uFAAuF;IACvF,QAAQ,CAAC,eAAe,CAAC,EAAE,mBAAmB,CAAC;IAC/C,0FAA0F;IAC1F,QAAQ,CAAC,0BAA0B,CAAC,EAAE,uBAAuB,CAAC;IAC9D,kEAAkE;IAClE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,iEAAiE;IACjE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,0GAA0G;IAC1G,QAAQ,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC;IACrC;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C,uGAAuG;IACvG,QAAQ,CAAC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IACvD,uGAAuG;IACvG,QAAQ,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IACrD,qGAAqG;IACrG,QAAQ,CAAC,4BAA4B,CAAC,EAAE,CACtC,gBAAgB,EAAE,MAAM,EACxB,iBAAiB,EAAE,CAAC,KAAK,EAAE,gCAAgC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EACpF,8BAA8B,EAAE,CAC9B,aAAa,EAAE,SAAS,MAAM,EAAE,KAC7B,OAAO,CAAC,SAAS,6BAA6B,EAAE,CAAC,KACnD,gCAAgC,CAAC;IACtC,sGAAsG;IACtG,QAAQ,CAAC,kCAAkC,CAAC,EAAE,MAAM,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAChG;;;OAGG;IACH,QAAQ,CAAC,qCAAqC,CAAC,EAAE,6BAA6B,CAAC;IAC/E;;;OAGG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,2BAA2B,CAAC;IAC7D,wGAAwG;IACxG,QAAQ,CAAC,8BAA8B,CAAC,EAAE,8BAA8B,CAAC;IACzE,iGAAiG;IACjG,QAAQ,CAAC,iCAAiC,CAAC,EAAE,iCAAiC,CAAC;IAC/E;;;OAGG;IACH,QAAQ,CAAC,0BAA0B,CAAC,EAAE,0BAA0B,CAAC;IACjE,wGAAwG;IACxG,QAAQ,CAAC,gCAAgC,CAAC,EAAE,gCAAgC,CAAC;IAC7E;;;OAGG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC;;;OAGG;IACH,QAAQ,CAAC,kCAAkC,CAAC,EAAE,kCAAkC,CAAC;IACjF,iGAAiG;IACjG,QAAQ,CAAC,2CAA2C,CAAC,EAAE,2CAA2C,CAAC;IACnG,uGAAuG;IACvG,QAAQ,CAAC,sBAAsB,CAAC,EAAE,mCAAmC,CAAC;IACtE,oGAAoG;IACpG,QAAQ,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IACrD,sGAAsG;IACtG,QAAQ,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IACrD,yGAAyG;IACzG,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACjD,qGAAqG;IACrG,QAAQ,CAAC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IACvD,uEAAuE;IACvE,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAC3C,kGAAkG;IAClG,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;IAC3B,sEAAsE;IACtE,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,kGAAkG;IAClG,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,yGAAyG;IACzG,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,wFAAwF;IACxF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B;;;OAGG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,kBAAkB,CAAC;IAC/C;;;OAGG;IACH,QAAQ,CAAC,sCAAsC,CAAC,EAAE,OAAO,CAAC;IAC1D;;;OAGG;IACH,QAAQ,CAAC,4BAA4B,CAAC,EAAE,aAAa,CAAC;IACtD,yFAAyF;IACzF,QAAQ,CAAC,+BAA+B,CAAC,EAAE,MAAM,CAAC;IAClD,qFAAqF;IACrF,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,qBAAqB,CAAC;IAC7C,uFAAuF;IACvF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,uEAAuE;IACvE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACjD,iGAAiG;IACjG,QAAQ,CAAC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IACvD;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C;;;OAGG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAClE;;;OAGG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IAC5C;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IACzC;;;;OAIG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,OAAO,CAAC;IAC7C;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,CAAC;IAC7E;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,CAAC;IAC9E,0FAA0F;IAC1F,QAAQ,CAAC,0BAA0B,CAAC,EAAE,MAAM,CAAC;IAC7C,4GAA4G;IAC5G,QAAQ,CAAC,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACjD,sGAAsG;IACtG,QAAQ,CAAC,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IACzD,6FAA6F;IAC7F,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjD,4GAA4G;IAC5G,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClD,0GAA0G;IAC1G,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACxD;;;;OAIG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IACvD;;;OAGG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IACrD;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,mBAAmB,CAAC;IAC9C,iEAAiE;IACjE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,uBAAuB,CAAC;IACtD,gGAAgG;IAChG,QAAQ,CAAC,wBAAwB,CAAC,EAAE,wBAAwB,CAAC;IAC7D,6FAA6F;IAC7F,QAAQ,CAAC,wBAAwB,CAAC,EAAE,wBAAwB,CAAC;IAC7D,QAAQ,CAAC,oBAAoB,CAAC,EAAE,yBAAyB,CAAC;IAC1D,QAAQ,CAAC,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IACnD,QAAQ,CAAC,2BAA2B,CAAC,EAAE,2BAA2B,CAAC;IACnE;;;;OAIG;IACH,QAAQ,CAAC,8BAA8B,CAAC,EAAE,8BAA8B,CAAC;IACzE;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,6EAA6E;IAC7E,QAAQ,CAAC,4BAA4B,CAAC,EAAE,MAAM,CAAC;IAC/C,mGAAmG;IACnG,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,6FAA6F;IAC7F,QAAQ,CAAC,gCAAgC,CAAC,EAAE,MAAM,CAAC;IACnD;;;OAGG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE;QACvB,8EAA8E;QAC9E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,iGAAiG;QACjG,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;QACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,6BAA6B,CAAC;KACnD,CAAC;CACH"}
|
|
1
|
+
{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../src/options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,KAAK,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC1F,OAAO,KAAK,EACV,aAAa,EACb,MAAM,EACN,eAAe,EACf,kBAAkB,EAClB,UAAU,EACX,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACpF,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAC/F,OAAO,KAAK,EAAE,2CAA2C,EAAE,MAAM,gDAAgD,CAAC;AAClH,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,qCAAqC,CAAC;AAC7F,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AACvF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC/E,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,mCAAmC,CAAC;AAC7F,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,qCAAqC,CAAC;AAC5F,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAChF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,KAAK,EACV,wBAAwB,EACxB,wBAAwB,EACzB,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,wCAAwC,CAAC;AACxF,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AAC3F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC/E,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AAC9E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,mCAAmC,CAAC;AACxF,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AACvF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAClF,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AACjF,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,gDAAgD,CAAC;AACvG,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,mCAAmC,CAAC;AAC1F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,KAAK,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,oCAAoC,CAAC;AAC7F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EACjB,6BAA6B,EAC7B,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAEpF,MAAM,WAAW,cAAc;IAC7B,sFAAsF;IACtF,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,gFAAgF;IAChF,QAAQ,CAAC,sBAAsB,CAAC,EAAE;QAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;QACpC,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;KAC7C,CAAC;IACF,iGAAiG;IACjG,QAAQ,CAAC,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IACnD,oGAAoG;IACpG,QAAQ,CAAC,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;IAC3D,4FAA4F;IAC5F,QAAQ,CAAC,2BAA2B,CAAC,EAAE,OAAO,CAAC;IAC/C,oGAAoG;IACpG,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IACzC,qFAAqF;IACrF,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,KAAK,CAAC;IAC5C,mGAAmG;IACnG,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE;QAC1B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;QACnC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAChD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;KAC7B,CAAC;IACF,wFAAwF;IACxF,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C,uFAAuF;IACvF,QAAQ,CAAC,eAAe,CAAC,EAAE,mBAAmB,CAAC;IAC/C,0FAA0F;IAC1F,QAAQ,CAAC,0BAA0B,CAAC,EAAE,uBAAuB,CAAC;IAC9D,kEAAkE;IAClE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,iEAAiE;IACjE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,0GAA0G;IAC1G,QAAQ,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC;IACrC;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C,uGAAuG;IACvG,QAAQ,CAAC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IACvD,uGAAuG;IACvG,QAAQ,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IACrD,qGAAqG;IACrG,QAAQ,CAAC,4BAA4B,CAAC,EAAE,CACtC,gBAAgB,EAAE,MAAM,EACxB,iBAAiB,EAAE,CAAC,KAAK,EAAE,gCAAgC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EACpF,8BAA8B,EAAE,CAC9B,aAAa,EAAE,SAAS,MAAM,EAAE,KAC7B,OAAO,CAAC,SAAS,6BAA6B,EAAE,CAAC,KACnD,gCAAgC,CAAC;IACtC,sGAAsG;IACtG,QAAQ,CAAC,kCAAkC,CAAC,EAAE,MAAM,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAChG;;;OAGG;IACH,QAAQ,CAAC,qCAAqC,CAAC,EAAE,6BAA6B,CAAC;IAC/E;;;OAGG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,2BAA2B,CAAC;IAC7D,wGAAwG;IACxG,QAAQ,CAAC,8BAA8B,CAAC,EAAE,8BAA8B,CAAC;IACzE,iGAAiG;IACjG,QAAQ,CAAC,iCAAiC,CAAC,EAAE,iCAAiC,CAAC;IAC/E;;;OAGG;IACH,QAAQ,CAAC,0BAA0B,CAAC,EAAE,0BAA0B,CAAC;IACjE,wGAAwG;IACxG,QAAQ,CAAC,gCAAgC,CAAC,EAAE,gCAAgC,CAAC;IAC7E;;;OAGG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC;;;OAGG;IACH,QAAQ,CAAC,kCAAkC,CAAC,EAAE,kCAAkC,CAAC;IACjF,iGAAiG;IACjG,QAAQ,CAAC,2CAA2C,CAAC,EAAE,2CAA2C,CAAC;IACnG,uGAAuG;IACvG,QAAQ,CAAC,sBAAsB,CAAC,EAAE,mCAAmC,CAAC;IACtE,oGAAoG;IACpG,QAAQ,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IACrD,sGAAsG;IACtG,QAAQ,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IACrD,yGAAyG;IACzG,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACjD,qGAAqG;IACrG,QAAQ,CAAC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IACvD,uEAAuE;IACvE,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAC3C,kGAAkG;IAClG,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;IAC3B,sEAAsE;IACtE,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,kGAAkG;IAClG,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,yGAAyG;IACzG,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,wFAAwF;IACxF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B;;;OAGG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,kBAAkB,CAAC;IAC/C;;;OAGG;IACH,QAAQ,CAAC,sCAAsC,CAAC,EAAE,OAAO,CAAC;IAC1D;;;OAGG;IACH,QAAQ,CAAC,4BAA4B,CAAC,EAAE,aAAa,CAAC;IACtD,yFAAyF;IACzF,QAAQ,CAAC,+BAA+B,CAAC,EAAE,MAAM,CAAC;IAClD,qFAAqF;IACrF,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,qBAAqB,CAAC;IAC7C,uFAAuF;IACvF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,uEAAuE;IACvE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACjD,iGAAiG;IACjG,QAAQ,CAAC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IACvD;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C;;;OAGG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAClE;;;OAGG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IAC5C;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IACzC;;;;OAIG;IACH,QAAQ,CAAC,yBAAyB,CAAC,EAAE,OAAO,CAAC;IAC7C;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,CAAC;IAC7E;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,CAAC;IAC9E,0FAA0F;IAC1F,QAAQ,CAAC,0BAA0B,CAAC,EAAE,MAAM,CAAC;IAC7C,4GAA4G;IAC5G,QAAQ,CAAC,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACjD,sGAAsG;IACtG,QAAQ,CAAC,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IACzD,6FAA6F;IAC7F,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjD,4GAA4G;IAC5G,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClD,0GAA0G;IAC1G,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACxD;;;;OAIG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IACvD;;;OAGG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IACrD;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,mBAAmB,CAAC;IAC9C,iEAAiE;IACjE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,uBAAuB,CAAC;IACtD,gGAAgG;IAChG,QAAQ,CAAC,wBAAwB,CAAC,EAAE,wBAAwB,CAAC;IAC7D,6FAA6F;IAC7F,QAAQ,CAAC,wBAAwB,CAAC,EAAE,wBAAwB,CAAC;IAC7D,QAAQ,CAAC,oBAAoB,CAAC,EAAE,yBAAyB,CAAC;IAC1D,QAAQ,CAAC,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IACnD,QAAQ,CAAC,2BAA2B,CAAC,EAAE,2BAA2B,CAAC;IACnE;;;;OAIG;IACH,QAAQ,CAAC,8BAA8B,CAAC,EAAE,8BAA8B,CAAC;IACzE;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,6EAA6E;IAC7E,QAAQ,CAAC,4BAA4B,CAAC,EAAE,MAAM,CAAC;IAC/C,mGAAmG;IACnG,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,6FAA6F;IAC7F,QAAQ,CAAC,gCAAgC,CAAC,EAAE,MAAM,CAAC;IACnD;;;OAGG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE;QACvB,8EAA8E;QAC9E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,iGAAiG;QACjG,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;QACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,6BAA6B,CAAC;KACnD,CAAC;CACH"}
|
|
@@ -1,9 +1,10 @@
|
|
|
1
1
|
import type { IncomingMessage, ServerResponse } from 'node:http';
|
|
2
|
-
import { type TlsPosture } from '@noodle-borg/transport-http';
|
|
2
|
+
import { type Logger, type TlsPosture } from '@noodle-borg/transport-http';
|
|
3
3
|
import type { ServiceOptions } from '../options.js';
|
|
4
4
|
export declare function dispatchFeedbackOperationsRoutes(req: IncomingMessage, res: ServerResponse, url: URL, input: {
|
|
5
5
|
readonly options: ServiceOptions;
|
|
6
6
|
readonly maxBody: number;
|
|
7
7
|
readonly tls: TlsPosture;
|
|
8
|
+
readonly logger: Logger;
|
|
8
9
|
}): boolean;
|
|
9
10
|
//# sourceMappingURL=feedback-operations-dispatch.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"feedback-operations-dispatch.d.ts","sourceRoot":"","sources":["../../src/routes/feedback-operations-dispatch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,
|
|
1
|
+
{"version":3,"file":"feedback-operations-dispatch.d.ts","sourceRoot":"","sources":["../../src/routes/feedback-operations-dispatch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAGL,KAAK,MAAM,EACX,KAAK,UAAU,EAChB,MAAM,6BAA6B,CAAC;AAGrC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAIpD,wBAAgB,gCAAgC,CAC9C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,GAAG,EACR,KAAK,EAAE;IACL,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,GACA,OAAO,CAgDT"}
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
import { applySecurityHeaders, enforceHttps } from '@noodle-borg/transport-http';
|
|
1
|
+
import { applySecurityHeaders, enforceHttps, } from '@noodle-borg/transport-http';
|
|
2
2
|
import { resolveFeedbackGithubRepository } from '../feedback-operations/config.js';
|
|
3
3
|
import { sendJson } from '../http-util.js';
|
|
4
4
|
import { handleLinearFeedbackWebhook } from './linear-feedback-webhook.js';
|
|
@@ -42,6 +42,7 @@ export function dispatchFeedbackOperationsRoutes(req, res, url, input) {
|
|
|
42
42
|
channelId: options.feedbackOperationsConfig.NOODLE_FEEDBACK_SLACK_CHANNEL_ID,
|
|
43
43
|
maxBody: input.maxBody,
|
|
44
44
|
clock: options.clock ?? (() => new Date()),
|
|
45
|
+
logger: input.logger,
|
|
45
46
|
}).catch(() => {
|
|
46
47
|
if (!res.headersSent)
|
|
47
48
|
sendJson(res, 500, { error: 'internal error' });
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"feedback-operations-dispatch.js","sourceRoot":"","sources":["../../src/routes/feedback-operations-dispatch.ts"],"names":[],"mappings":"AACA,OAAO,
|
|
1
|
+
{"version":3,"file":"feedback-operations-dispatch.js","sourceRoot":"","sources":["../../src/routes/feedback-operations-dispatch.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oBAAoB,EACpB,YAAY,GAGb,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,+BAA+B,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AAEzE,MAAM,UAAU,gCAAgC,CAC9C,GAAoB,EACpB,GAAmB,EACnB,GAAQ,EACR,KAKC;IAED,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,IACE,GAAG,CAAC,QAAQ,KAAK,kCAAkC;QACnD,GAAG,CAAC,MAAM,KAAK,MAAM;QACrB,OAAO,CAAC,wBAAwB,KAAK,SAAS;QAC9C,OAAO,CAAC,kBAAkB,KAAK,SAAS;QACxC,OAAO,CAAC,oBAAoB,KAAK,SAAS,EAC1C,CAAC;QACD,oBAAoB,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACnD,2BAA2B,CAAC,GAAG,EAAE,GAAG,EAAE;YACpC,KAAK,EAAE,OAAO,CAAC,kBAAkB;YACjC,MAAM,EAAE,OAAO,CAAC,oBAAoB;YACpC,aAAa,EAAE,OAAO,CAAC,wBAAwB,CAAC,qCAAqC;YACrF,MAAM,EAAE,OAAO,CAAC,wBAAwB,CAAC,8BAA8B;YACvE,kBAAkB,EAChB,OAAO,CAAC,wBAAwB,CAAC,4CAA4C;YAC/E,gBAAgB,EAAE,OAAO,CAAC,wBAAwB,IAAI,+BAA+B,CAAC,EAAE,CAAC;YACzF,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;SAC3C,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YACZ,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IACE,GAAG,CAAC,QAAQ,KAAK,yCAAyC;QAC1D,GAAG,CAAC,MAAM,KAAK,MAAM;QACrB,OAAO,CAAC,wBAAwB,KAAK,SAAS;QAC9C,OAAO,CAAC,kBAAkB,KAAK,SAAS,EACxC,CAAC;QACD,oBAAoB,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACnD,0BAA0B,CAAC,GAAG,EAAE,GAAG,EAAE;YACnC,KAAK,EAAE,OAAO,CAAC,kBAAkB;YACjC,aAAa,EAAE,OAAO,CAAC,wBAAwB,CAAC,oCAAoC;YACpF,WAAW,EAAE,OAAO,CAAC,wBAAwB,CAAC,kCAAkC;YAChF,SAAS,EAAE,OAAO,CAAC,wBAAwB,CAAC,gCAAgC;YAC5E,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;YAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YACZ,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
|
|
@@ -0,0 +1,24 @@
|
|
|
1
|
+
import { z } from 'zod';
|
|
2
|
+
export declare const createServicePrincipalSchema: z.ZodObject<{
|
|
3
|
+
name: z.ZodString;
|
|
4
|
+
}, z.core.$strict>;
|
|
5
|
+
export declare const createServicePrincipalGrantSchema: z.ZodObject<{
|
|
6
|
+
app: z.ZodString;
|
|
7
|
+
environment: z.ZodString;
|
|
8
|
+
scopes: z.ZodArray<z.ZodString>;
|
|
9
|
+
}, z.core.$strict>;
|
|
10
|
+
export declare const createServicePrincipalCredentialSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
|
|
11
|
+
kind: z.ZodLiteral<"client_secret">;
|
|
12
|
+
label: z.ZodString;
|
|
13
|
+
expiresAt: z.ZodOptional<z.ZodString>;
|
|
14
|
+
}, z.core.$strict>, z.ZodObject<{
|
|
15
|
+
kind: z.ZodLiteral<"public_jwk">;
|
|
16
|
+
algorithm: z.ZodEnum<{
|
|
17
|
+
RS256: "RS256";
|
|
18
|
+
ES256: "ES256";
|
|
19
|
+
}>;
|
|
20
|
+
publicJwk: z.ZodObject<{}, z.core.$catchall<z.ZodUnknown>>;
|
|
21
|
+
label: z.ZodString;
|
|
22
|
+
expiresAt: z.ZodOptional<z.ZodString>;
|
|
23
|
+
}, z.core.$strict>], "kind">;
|
|
24
|
+
//# sourceMappingURL=service-principal-contracts.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"service-principal-contracts.d.ts","sourceRoot":"","sources":["../../src/routes/service-principal-contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAkBxB,eAAO,MAAM,4BAA4B;;kBAA6C,CAAC;AAEvF,eAAO,MAAM,iCAAiC;;;;kBAU1C,CAAC;AAOL,eAAO,MAAM,sCAAsC;;;;;;;;;;;;;4BAejD,CAAC"}
|
|
@@ -0,0 +1,55 @@
|
|
|
1
|
+
import { z } from 'zod';
|
|
2
|
+
import { SLUG_PATTERN } from '../store/validate.js';
|
|
3
|
+
const printableName = z
|
|
4
|
+
.string()
|
|
5
|
+
.trim()
|
|
6
|
+
.min(1)
|
|
7
|
+
.max(80)
|
|
8
|
+
.refine((value) => !hasAsciiControlCharacters(value), 'must contain printable characters only');
|
|
9
|
+
const slug = z.string().regex(SLUG_PATTERN);
|
|
10
|
+
const scope = z
|
|
11
|
+
.string()
|
|
12
|
+
.trim()
|
|
13
|
+
.min(1)
|
|
14
|
+
.max(128)
|
|
15
|
+
.regex(/^[\x21\x23-\x5b\x5d-\x7e]+$/);
|
|
16
|
+
const expiresAt = z.string().datetime({ offset: true }).optional();
|
|
17
|
+
export const createServicePrincipalSchema = z.object({ name: printableName }).strict();
|
|
18
|
+
export const createServicePrincipalGrantSchema = z
|
|
19
|
+
.object({
|
|
20
|
+
app: slug,
|
|
21
|
+
environment: slug,
|
|
22
|
+
scopes: z.array(scope).max(64),
|
|
23
|
+
})
|
|
24
|
+
.strict()
|
|
25
|
+
.refine((value) => new Set(value.scopes).size === value.scopes.length, {
|
|
26
|
+
message: 'scopes must not contain duplicates',
|
|
27
|
+
path: ['scopes'],
|
|
28
|
+
});
|
|
29
|
+
const credentialBase = {
|
|
30
|
+
label: printableName,
|
|
31
|
+
expiresAt,
|
|
32
|
+
};
|
|
33
|
+
export const createServicePrincipalCredentialSchema = z.discriminatedUnion('kind', [
|
|
34
|
+
z
|
|
35
|
+
.object({
|
|
36
|
+
...credentialBase,
|
|
37
|
+
kind: z.literal('client_secret'),
|
|
38
|
+
})
|
|
39
|
+
.strict(),
|
|
40
|
+
z
|
|
41
|
+
.object({
|
|
42
|
+
...credentialBase,
|
|
43
|
+
kind: z.literal('public_jwk'),
|
|
44
|
+
algorithm: z.enum(['RS256', 'ES256']),
|
|
45
|
+
publicJwk: z.object({}).catchall(z.unknown()),
|
|
46
|
+
})
|
|
47
|
+
.strict(),
|
|
48
|
+
]);
|
|
49
|
+
function hasAsciiControlCharacters(value) {
|
|
50
|
+
return [...value].some((character) => {
|
|
51
|
+
const code = character.charCodeAt(0);
|
|
52
|
+
return code <= 0x1f || code === 0x7f;
|
|
53
|
+
});
|
|
54
|
+
}
|
|
55
|
+
//# sourceMappingURL=service-principal-contracts.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"service-principal-contracts.js","sourceRoot":"","sources":["../../src/routes/service-principal-contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,MAAM,aAAa,GAAG,CAAC;KACpB,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,yBAAyB,CAAC,KAAK,CAAC,EAAE,wCAAwC,CAAC,CAAC;AAClG,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;AAC5C,MAAM,KAAK,GAAG,CAAC;KACZ,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,6BAA6B,CAAC,CAAC;AACxC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AAEnE,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEvF,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC;KAC/C,MAAM,CAAC;IACN,GAAG,EAAE,IAAI;IACT,WAAW,EAAE,IAAI;IACjB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CAC/B,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE;IACrE,OAAO,EAAE,oCAAoC;IAC7C,IAAI,EAAE,CAAC,QAAQ,CAAC;CACjB,CAAC,CAAC;AAEL,MAAM,cAAc,GAAG;IACrB,KAAK,EAAE,aAAa;IACpB,SAAS;CACV,CAAC;AAEF,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACjF,CAAC;SACE,MAAM,CAAC;QACN,GAAG,cAAc;QACjB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;KACjC,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,GAAG,cAAc;QACjB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;QAC7B,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;KAC9C,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAC;AAEH,SAAS,yBAAyB,CAAC,KAAa;IAC9C,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACrC,OAAO,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -0,0 +1,29 @@
|
|
|
1
|
+
export type ServicePrincipalPath = {
|
|
2
|
+
readonly kind: 'collection';
|
|
3
|
+
readonly org: string;
|
|
4
|
+
} | {
|
|
5
|
+
readonly kind: 'principal';
|
|
6
|
+
readonly org: string;
|
|
7
|
+
readonly principalId: string;
|
|
8
|
+
} | {
|
|
9
|
+
readonly kind: 'grants';
|
|
10
|
+
readonly org: string;
|
|
11
|
+
readonly principalId: string;
|
|
12
|
+
} | {
|
|
13
|
+
readonly kind: 'grant';
|
|
14
|
+
readonly org: string;
|
|
15
|
+
readonly principalId: string;
|
|
16
|
+
readonly grantId: string;
|
|
17
|
+
} | {
|
|
18
|
+
readonly kind: 'credentials';
|
|
19
|
+
readonly org: string;
|
|
20
|
+
readonly principalId: string;
|
|
21
|
+
} | {
|
|
22
|
+
readonly kind: 'credential';
|
|
23
|
+
readonly org: string;
|
|
24
|
+
readonly principalId: string;
|
|
25
|
+
readonly credentialId: string;
|
|
26
|
+
};
|
|
27
|
+
/** Parse only the exact organization-scoped service-principal management family. */
|
|
28
|
+
export declare function parseServicePrincipalPath(pathname: string): ServicePrincipalPath | undefined;
|
|
29
|
+
//# sourceMappingURL=service-principal-paths.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"service-principal-paths.d.ts","sourceRoot":"","sources":["../../src/routes/service-principal-paths.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAClF;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC/E;IACE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACpF;IACE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B,CAAC;AAMN,oFAAoF;AACpF,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS,CAyD5F"}
|
|
@@ -0,0 +1,63 @@
|
|
|
1
|
+
const PRINCIPAL = 'spn_[0-9a-f-]{36}';
|
|
2
|
+
const GRANT = 'spg_[0-9a-f-]{36}';
|
|
3
|
+
const CREDENTIAL = 'spc_[0-9a-f-]{36}';
|
|
4
|
+
/** Parse only the exact organization-scoped service-principal management family. */
|
|
5
|
+
export function parseServicePrincipalPath(pathname) {
|
|
6
|
+
const collection = /^\/v1\/orgs\/([^/]+)\/service-principals$/.exec(pathname);
|
|
7
|
+
if (collection !== null)
|
|
8
|
+
return { kind: 'collection', org: decode(collection[1]) };
|
|
9
|
+
const credentials = new RegExp(`^/v1/orgs/([^/]+)/service-principals/(${PRINCIPAL})/credentials$`).exec(pathname);
|
|
10
|
+
if (credentials !== null) {
|
|
11
|
+
return {
|
|
12
|
+
kind: 'credentials',
|
|
13
|
+
org: decode(credentials[1]),
|
|
14
|
+
principalId: credentials[2],
|
|
15
|
+
};
|
|
16
|
+
}
|
|
17
|
+
const credential = new RegExp(`^/v1/orgs/([^/]+)/service-principals/(${PRINCIPAL})/credentials/(${CREDENTIAL})$`).exec(pathname);
|
|
18
|
+
if (credential !== null) {
|
|
19
|
+
return {
|
|
20
|
+
kind: 'credential',
|
|
21
|
+
org: decode(credential[1]),
|
|
22
|
+
principalId: credential[2],
|
|
23
|
+
credentialId: credential[3],
|
|
24
|
+
};
|
|
25
|
+
}
|
|
26
|
+
const grants = new RegExp(`^/v1/orgs/([^/]+)/service-principals/(${PRINCIPAL})/grants$`).exec(pathname);
|
|
27
|
+
if (grants !== null) {
|
|
28
|
+
return {
|
|
29
|
+
kind: 'grants',
|
|
30
|
+
org: decode(grants[1]),
|
|
31
|
+
principalId: grants[2],
|
|
32
|
+
};
|
|
33
|
+
}
|
|
34
|
+
const grant = new RegExp(`^/v1/orgs/([^/]+)/service-principals/(${PRINCIPAL})/grants/(${GRANT})$`).exec(pathname);
|
|
35
|
+
if (grant !== null) {
|
|
36
|
+
return {
|
|
37
|
+
kind: 'grant',
|
|
38
|
+
org: decode(grant[1]),
|
|
39
|
+
principalId: grant[2],
|
|
40
|
+
grantId: grant[3],
|
|
41
|
+
};
|
|
42
|
+
}
|
|
43
|
+
const principal = new RegExp(`^/v1/orgs/([^/]+)/service-principals/(${PRINCIPAL})$`).exec(pathname);
|
|
44
|
+
if (principal !== null) {
|
|
45
|
+
return {
|
|
46
|
+
kind: 'principal',
|
|
47
|
+
org: decode(principal[1]),
|
|
48
|
+
principalId: principal[2],
|
|
49
|
+
};
|
|
50
|
+
}
|
|
51
|
+
return undefined;
|
|
52
|
+
}
|
|
53
|
+
function decode(value) {
|
|
54
|
+
if (value === undefined)
|
|
55
|
+
return '';
|
|
56
|
+
try {
|
|
57
|
+
return decodeURIComponent(value);
|
|
58
|
+
}
|
|
59
|
+
catch {
|
|
60
|
+
return '';
|
|
61
|
+
}
|
|
62
|
+
}
|
|
63
|
+
//# sourceMappingURL=service-principal-paths.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"service-principal-paths.js","sourceRoot":"","sources":["../../src/routes/service-principal-paths.ts"],"names":[],"mappings":"AAkBA,MAAM,SAAS,GAAG,mBAAmB,CAAC;AACtC,MAAM,KAAK,GAAG,mBAAmB,CAAC;AAClC,MAAM,UAAU,GAAG,mBAAmB,CAAC;AAEvC,oFAAoF;AACpF,MAAM,UAAU,yBAAyB,CAAC,QAAgB;IACxD,MAAM,UAAU,GAAG,2CAA2C,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9E,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEnF,MAAM,WAAW,GAAG,IAAI,MAAM,CAC5B,yCAAyC,SAAS,gBAAgB,CACnE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjB,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YAC3B,WAAW,EAAE,WAAW,CAAC,CAAC,CAAW;SACtC,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,MAAM,CAC3B,yCAAyC,SAAS,kBAAkB,UAAU,IAAI,CACnF,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjB,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAC1B,WAAW,EAAE,UAAU,CAAC,CAAC,CAAW;YACpC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAW;SACtC,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,yCAAyC,SAAS,WAAW,CAAC,CAAC,IAAI,CAC3F,QAAQ,CACT,CAAC;IACF,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACtB,WAAW,EAAE,MAAM,CAAC,CAAC,CAAW;SACjC,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,MAAM,CACtB,yCAAyC,SAAS,aAAa,KAAK,IAAI,CACzE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjB,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO;YACL,IAAI,EAAE,OAAO;YACb,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACrB,WAAW,EAAE,KAAK,CAAC,CAAC,CAAW;YAC/B,OAAO,EAAE,KAAK,CAAC,CAAC,CAAW;SAC5B,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,MAAM,CAAC,yCAAyC,SAAS,IAAI,CAAC,CAAC,IAAI,CACvF,QAAQ,CACT,CAAC;IACF,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACzB,WAAW,EAAE,SAAS,CAAC,CAAC,CAAW;SACpC,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,MAAM,CAAC,KAAyB;IACvC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}
|
|
@@ -0,0 +1,27 @@
|
|
|
1
|
+
import type { IncomingMessage, ServerResponse } from 'node:http';
|
|
2
|
+
import { type Logger, type TlsPosture } from '@noodle-borg/transport-http';
|
|
3
|
+
import type { DeployAuthGate } from '../auth/deploy-gate.js';
|
|
4
|
+
import type { ServicePrincipalRuntime } from '../oauth/service-principal-store.js';
|
|
5
|
+
import type { ServerRegistry } from '../registry.js';
|
|
6
|
+
import type { AuditSink } from '../store/audit.js';
|
|
7
|
+
import type { ControlPlaneStore } from '../store.js';
|
|
8
|
+
export interface ServicePrincipalsDispatchDeps {
|
|
9
|
+
readonly gate: DeployAuthGate;
|
|
10
|
+
readonly controlPlane: ControlPlaneStore;
|
|
11
|
+
readonly registry: ServerRegistry;
|
|
12
|
+
readonly runtime: ServicePrincipalRuntime;
|
|
13
|
+
readonly audit: AuditSink;
|
|
14
|
+
readonly maxBody: number;
|
|
15
|
+
readonly logger: Logger;
|
|
16
|
+
readonly applySecurityHeaders: (res: ServerResponse, tls: TlsPosture) => void;
|
|
17
|
+
readonly enforceHttps: (req: IncomingMessage, res: ServerResponse, tls: TlsPosture) => boolean;
|
|
18
|
+
readonly sendJson: (res: ServerResponse, status: number, body: unknown) => void;
|
|
19
|
+
readonly tls: TlsPosture;
|
|
20
|
+
}
|
|
21
|
+
type BoundServicePrincipalDeps = Omit<ServicePrincipalsDispatchDeps, 'applySecurityHeaders' | 'enforceHttps' | 'registry' | 'runtime' | 'sendJson'>;
|
|
22
|
+
/** Bind the shared security front door when the optional service-principal runtime is configured. */
|
|
23
|
+
export declare function createServicePrincipalDispatcher(registry: ServerRegistry, runtime: ServicePrincipalRuntime | undefined, deps: BoundServicePrincipalDeps): ((req: IncomingMessage, res: ServerResponse, url: URL) => boolean) | undefined;
|
|
24
|
+
/** Dispatch the exact service-principal route family before generic MCP/tenant fallback. */
|
|
25
|
+
export declare function dispatchServicePrincipalRoutes(req: IncomingMessage, res: ServerResponse, url: URL, deps: ServicePrincipalsDispatchDeps): boolean;
|
|
26
|
+
export {};
|
|
27
|
+
//# sourceMappingURL=service-principals-dispatch.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"service-principals-dispatch.d.ts","sourceRoot":"","sources":["../../src/routes/service-principals-dispatch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAGL,KAAK,MAAM,EACX,KAAK,UAAU,EAChB,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE7D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AACnF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAIrD,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,oBAAoB,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,KAAK,IAAI,CAAC;IAC9E,QAAQ,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,KAAK,OAAO,CAAC;IAC/F,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IAChF,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;CAC1B;AAED,KAAK,yBAAyB,GAAG,IAAI,CACnC,6BAA6B,EAC7B,sBAAsB,GAAG,cAAc,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,CAC9E,CAAC;AAEF,qGAAqG;AACrG,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,uBAAuB,GAAG,SAAS,EAC5C,IAAI,EAAE,yBAAyB,GAC9B,CAAC,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,SAAS,CAWhF;AAED,4FAA4F;AAC5F,wBAAgB,8BAA8B,CAC5C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,6BAA6B,GAClC,OAAO,CAUT"}
|
|
@@ -0,0 +1,33 @@
|
|
|
1
|
+
import { applySecurityHeaders, enforceHttps, } from '@noodle-borg/transport-http';
|
|
2
|
+
import { sendJson } from '../http-util.js';
|
|
3
|
+
import { parseServicePrincipalPath } from './service-principal-paths.js';
|
|
4
|
+
import { handleServicePrincipalRequest } from './service-principals.js';
|
|
5
|
+
/** Bind the shared security front door when the optional service-principal runtime is configured. */
|
|
6
|
+
export function createServicePrincipalDispatcher(registry, runtime, deps) {
|
|
7
|
+
if (runtime === undefined)
|
|
8
|
+
return undefined;
|
|
9
|
+
return (req, res, url) => dispatchServicePrincipalRoutes(req, res, url, {
|
|
10
|
+
...deps,
|
|
11
|
+
registry,
|
|
12
|
+
runtime,
|
|
13
|
+
applySecurityHeaders,
|
|
14
|
+
enforceHttps,
|
|
15
|
+
sendJson,
|
|
16
|
+
});
|
|
17
|
+
}
|
|
18
|
+
/** Dispatch the exact service-principal route family before generic MCP/tenant fallback. */
|
|
19
|
+
export function dispatchServicePrincipalRoutes(req, res, url, deps) {
|
|
20
|
+
const path = parseServicePrincipalPath(url.pathname);
|
|
21
|
+
if (path === undefined)
|
|
22
|
+
return false;
|
|
23
|
+
deps.applySecurityHeaders(res, deps.tls);
|
|
24
|
+
if (deps.enforceHttps(req, res, deps.tls))
|
|
25
|
+
return true;
|
|
26
|
+
handleServicePrincipalRequest(req, res, path, deps).catch(() => {
|
|
27
|
+
deps.logger.error('service_principal.request.failed', { reason: 'operation_failed' });
|
|
28
|
+
if (!res.headersSent)
|
|
29
|
+
deps.sendJson(res, 500, { error: 'internal error' });
|
|
30
|
+
});
|
|
31
|
+
return true;
|
|
32
|
+
}
|
|
33
|
+
//# sourceMappingURL=service-principals-dispatch.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"service-principals-dispatch.js","sourceRoot":"","sources":["../../src/routes/service-principals-dispatch.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oBAAoB,EACpB,YAAY,GAGb,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAK3C,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AAqBxE,qGAAqG;AACrG,MAAM,UAAU,gCAAgC,CAC9C,QAAwB,EACxB,OAA4C,EAC5C,IAA+B;IAE/B,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CACvB,8BAA8B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;QAC5C,GAAG,IAAI;QACP,QAAQ;QACR,OAAO;QACP,oBAAoB;QACpB,YAAY;QACZ,QAAQ;KACT,CAAC,CAAC;AACP,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,8BAA8B,CAC5C,GAAoB,EACpB,GAAmB,EACnB,GAAQ,EACR,IAAmC;IAEnC,MAAM,IAAI,GAAG,yBAAyB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,6BAA6B,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QAC7D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACtF,IAAI,CAAC,GAAG,CAAC,WAAW;YAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC"}
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
import type { IncomingMessage, ServerResponse } from 'node:http';
|
|
2
|
+
import type { DeployAuthGate } from '../auth/deploy-gate.js';
|
|
3
|
+
import type { ServicePrincipalRuntime } from '../oauth/service-principal-store.js';
|
|
4
|
+
import type { ServerRegistry } from '../registry.js';
|
|
5
|
+
import type { AuditSink } from '../store/audit.js';
|
|
6
|
+
import type { ControlPlaneStore } from '../store.js';
|
|
7
|
+
import type { ServicePrincipalPath } from './service-principal-paths.js';
|
|
8
|
+
export interface ServicePrincipalRouteDeps {
|
|
9
|
+
readonly gate: DeployAuthGate;
|
|
10
|
+
readonly controlPlane: ControlPlaneStore;
|
|
11
|
+
readonly registry: ServerRegistry;
|
|
12
|
+
readonly runtime: ServicePrincipalRuntime;
|
|
13
|
+
readonly audit: AuditSink;
|
|
14
|
+
readonly maxBody: number;
|
|
15
|
+
}
|
|
16
|
+
export declare function handleServicePrincipalRequest(req: IncomingMessage, res: ServerResponse, path: ServicePrincipalPath, deps: ServicePrincipalRouteDeps): Promise<void>;
|
|
17
|
+
//# sourceMappingURL=service-principals.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"service-principals.d.ts","sourceRoot":"","sources":["../../src/routes/service-principals.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAwB,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAGnF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AACnF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAOrD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEzE,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAsB,6BAA6B,CACjD,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,oBAAoB,EAC1B,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAsIf"}
|