@open-everywhere/adapters 0.5.0 → 0.7.0

package/agent/sandbox/long-lived-box.ts

@@ -0,0 +1,464 @@
+// The long-lived box on each sandbox backend — the vendor half of core's sandbox/long-lived-box.ts seam.
+// One implementation per backend `resolveSandboxBackend()` can pick, so a box runs where the conversation
+// sandbox runs. A box carries the `oeBox` label and never `sessionId`, so the turn-end stopper
+// (backend-stop.ts) cannot match it.
+//
+// A PERSISTENT box (a `persist` spec — the person's browser, OPE-2441) keeps its files between opens: a
+// NAMED, persistent Vercel Sandbox whose filesystem snapshot survives each stop, or a docker container on a
+// named volume. Before it starts one, the backend stops any box still running on the same key, because two
+// programs on one browser profile corrupt it.
+
+import { Sandbox } from "@vercel/sandbox";
+import {
+  BOX_LABEL,
+  BOX_REF_LABEL,
+  boxLabels,
+  clampBoxMinutes,
+  registerLongLivedBoxBackend,
+  resolveSandboxBackend,
+  type BoxListing,
+  type BoxPurpose,
+  type BoxSpec,
+  type LongLivedBoxBackend,
+  type OpenedBox,
+} from "@open-everywhere/core/agent/adapter-api.js";
+import { dockerStatusToSandboxStatus } from "./backend-stop.js";
+import { execFile } from "node:child_process";
+
+/** Vercel Sandbox's plan ceiling per session on Pro and Enterprise (vercel.com/docs/sandbox/pricing). */
+export const VERCEL_BOX_CEILING_MINUTES = 24 * 60;
+/** Docker has no platform ceiling. OE still caps a box, at the same 24 h, so one rule bounds both stacks. */
+const DOCKER_BOX_CEILING_MINUTES = 24 * 60;
+
+function isPurpose(v: string | undefined): v is BoxPurpose {
+  return v === "meeting" || v === "browser";
+}
+
+// ── Vercel ────────────────────────────────────────────────────────────────────────────────────
+
+/** The raw `@vercel/sandbox` surface the Vercel box needs. Injected in tests. */
+export interface VercelBoxSdk {
+  create(params: {
+    image: string;
+    vcpus: number;
+    timeoutMs: number;
+    tags: Record<string, string>;
+    env: Record<string, string>;
+    networkPolicy: "allow-all" | "deny-all" | { allow: string[] };
+  }): Promise<{ name: string; createdAt: number }>;
+  /** `env` (a persistent box) goes to this one command only, never into the sandbox's stored config. */
+  runDetached(name: string, cmd: string, args: string[], timeoutMs: number, env?: Record<string, string>): Promise<void>;
+  get(name: string): Promise<BoxListing | undefined>;
+  /** Every sandbox carrying the `oeBox` tag with this purpose. */
+  listByPurpose(purpose: BoxPurpose): Promise<BoxListing[]>;
+  stop(name: string): Promise<void>;
+  /**
+   * A persistent, NAMED sandbox: create it, or update the one that exists (and stop it first when it is
+   * running, so the program that starts next is the only one on its files). The next command resumes it
+   * from its snapshot. `createdAt` is the start of THIS session, for billing.
+   */
+  openPersistent?(params: {
+    name: string;
+    image: string;
+    vcpus: number;
+    timeoutMs: number;
+    tags: Record<string, string>;
+    networkPolicy: "allow-all" | "deny-all" | { allow: string[] };
+    snapshotExpirationMs: number;
+    ports: number[];
+  }): Promise<{ name: string; createdAt: number }>;
+  /** The public HTTPS URL of an exposed port. */
+  domain?(name: string, port: number): Promise<string>;
+  /** Delete a persistent sandbox and its snapshots. Idempotent. */
+  remove?(name: string): Promise<void>;
+}
+
+const defaultVercelBoxSdk: VercelBoxSdk = {
+  async create(p) {
+    const sandbox = await Sandbox.create({
+      image: p.image,
+      resources: { vcpus: p.vcpus },
+      timeout: p.timeoutMs,
+      tags: p.tags,
+      env: p.env,
+      networkPolicy: p.networkPolicy,
+      // A box is single-use. Nothing resumes it, so it keeps no snapshot.
+      persistent: false,
+    });
+    return { name: sandbox.name, createdAt: sandbox.createdAt.getTime() };
+  },
+  async runDetached(name, cmd, args, timeoutMs, env) {
+    const sandbox = await Sandbox.get({ name, resume: false });
+    await sandbox.runCommand({ cmd, args, detached: true, timeoutMs, ...(env !== undefined ? { env } : {}) });
+  },
+  async get(name) {
+    try {
+      const s = await Sandbox.get({ name, resume: false });
+      const purpose = s.tags?.[BOX_LABEL];
+      return {
+        name: s.name,
+        status: s.status,
+        createdAt: s.createdAt.getTime(),
+        ...(isPurpose(purpose) ? { purpose } : {}),
+        ...(s.tags?.[BOX_REF_LABEL] !== undefined ? { ref: s.tags[BOX_REF_LABEL] } : {}),
+      };
+    } catch {
+      return undefined;
+    }
+  },
+  async listByPurpose(purpose) {
+    const result = await Sandbox.list({ tags: { oeBox: purpose } });
+    const out: BoxListing[] = [];
+    for await (const s of result) out.push({ name: s.name, status: s.status, createdAt: s.createdAt, purpose });
+    return out;
+  },
+  async stop(name) {
+    try {
+      await (await Sandbox.get({ name, resume: false })).stop();
+    } catch {
+      // Idempotent: a box that is already gone is stopped.
+    }
+  },
+  async openPersistent(p) {
+    let existing: Sandbox | undefined;
+    try {
+      existing = await Sandbox.get({ name: p.name, resume: false });
+    } catch {
+      existing = undefined;
+    }
+    if (existing === undefined) {
+      await Sandbox.create({
+        name: p.name,
+        image: p.image,
+        resources: { vcpus: p.vcpus },
+        timeout: p.timeoutMs,
+        tags: p.tags,
+        networkPolicy: p.networkPolicy,
+        ports: p.ports,
+        // The filesystem (the browser profile) survives each stop as a snapshot, and expires unused.
+        persistent: true,
+        snapshotExpiration: p.snapshotExpirationMs,
+      });
+      return { name: p.name, createdAt: Date.now() };
+    }
+    // A program still running on these files would share the profile with the one about to start. A stop
+    // snapshots the filesystem; the next command resumes from it with no process left over.
+    if (existing.status === "running" || existing.status === "pending") await existing.stop();
+    await existing.update({ timeout: p.timeoutMs, networkPolicy: p.networkPolicy, ports: p.ports, tags: p.tags, snapshotExpiration: p.snapshotExpirationMs });
+    return { name: p.name, createdAt: Date.now() };
+  },
+  async domain(name, port) {
+    return (await Sandbox.get({ name, resume: false })).domain(port);
+  },
+  async remove(name) {
+    try {
+      await (await Sandbox.get({ name, resume: false })).delete({ deleteOrphanSnapshots: true });
+    } catch {
+      // Idempotent: a sandbox that is already gone is deleted.
+    }
+  },
+};
+
+/** The Vercel firewall form of a box's egress. */
+function vercelNetworkPolicy(egress: BoxSpec["egress"]): "allow-all" | "deny-all" | { allow: string[] } {
+  return egress === "open" ? "allow-all" : egress.allow.length === 0 ? "deny-all" : { allow: [...egress.allow] };
+}
+
+export function createVercelBoxBackend(sdk: VercelBoxSdk = defaultVercelBoxSdk): LongLivedBoxBackend {
+  return {
+    backend: "vercel",
+    metered: true,
+    maxMinutesCeiling: VERCEL_BOX_CEILING_MINUTES,
+    // The Vercel Sandbox firewall holds an `{ allow }` list at the network, outside the box.
+    enforcesHostAllowList: true,
+    async open(spec: BoxSpec): Promise<OpenedBox> {
+      const [cmd, ...args] = spec.command;
+      if (cmd === undefined) throw new Error("a box needs a command to run");
+      const maxMinutes = clampBoxMinutes(spec.maxMinutes, VERCEL_BOX_CEILING_MINUTES);
+      const timeoutMs = maxMinutes * 60_000;
+      if (spec.persist !== undefined) {
+        if (sdk.openPersistent === undefined || sdk.domain === undefined) throw new Error("this Vercel box SDK cannot keep a box's files between opens");
+        const opened = await sdk.openPersistent({
+          name: spec.persist.key,
+          image: spec.image,
+          vcpus: Math.max(1, Math.floor(spec.vcpus)),
+          timeoutMs,
+          tags: boxLabels(spec),
+          networkPolicy: vercelNetworkPolicy(spec.egress),
+          snapshotExpirationMs: Math.max(1, Math.floor(spec.persist.keepDays)) * 24 * 60 * 60_000,
+          ports: spec.port !== undefined ? [spec.port] : [],
+        });
+        try {
+          // The per-open secrets go to this command only. A persistent sandbox stores its create-time env in its
+          // config, so a key placed there would outlive the box it was minted for.
+          await sdk.runDetached(opened.name, cmd, args, timeoutMs, { ...spec.env });
+        } catch (err) {
+          await sdk.stop(opened.name);
+          throw err;
+        }
+        const url = spec.port !== undefined ? await sdk.domain(opened.name, spec.port) : undefined;
+        return { name: opened.name, backend: "vercel", createdAt: opened.createdAt, maxMinutes, ...(url !== undefined ? { url } : {}) };
+      }
+      const created = await sdk.create({
+        image: spec.image,
+        // Vercel sizes memory from vCPUs (2 GiB each), so `memoryMb` has no field to land in.
+        vcpus: Math.max(1, Math.floor(spec.vcpus)),
+        // The session timeout IS the cap: Vercel stops the VM at it whatever the bot does.
+        timeoutMs,
+        tags: boxLabels(spec),
+        env: { ...spec.env },
+        networkPolicy: vercelNetworkPolicy(spec.egress),
+      });
+      try {
+        await sdk.runDetached(created.name, cmd, args, timeoutMs);
+      } catch (err) {
+        // A box whose program never started must not idle out its whole cap.
+        await sdk.stop(created.name);
+        throw err;
+      }
+      return { name: created.name, backend: "vercel", createdAt: created.createdAt, maxMinutes };
+    },
+    status: async (name) => await sdk.get(name),
+    list: async (purpose) => await sdk.listByPurpose(purpose),
+    stop: async (name) => await sdk.stop(name),
+    async forget(key) {
+      if (sdk.remove === undefined) throw new Error("this Vercel box SDK cannot delete a persistent box");
+      await sdk.remove(key);
+    },
+  };
+}
+
+// ── docker ────────────────────────────────────────────────────────────────────────────────────
+
+/** The pid ceiling of a docker box: Chromium's threads count against it, so it is generous. */
+const DOCKER_BOX_PIDS_LIMIT = 2048;
+
+/** The docker label keys. Prefixed like eve's own `eve.sandbox.tag.*`, but never its `sessionId` key. */
+export const DOCKER_BOX_LABEL = `oe.box.${BOX_LABEL}`;
+const DOCKER_BOX_REF_LABEL = `oe.box.${BOX_REF_LABEL}`;
+/** The label naming a persistent box's volume, so a second open finds the box still on it. */
+export const DOCKER_BOX_PERSIST_LABEL = "oe.box.oePersist";
+
+/** A docker volume name from a persistence key: lowercase, `[a-z0-9_.-]`, never empty. */
+function dockerVolumeName(key: string): string {
+  const clean = key.toLowerCase().replace(/[^a-z0-9_.-]/g, "-").slice(0, 60);
+  return clean.length > 0 ? clean : "oe-box-data";
+}
+
+/**
+ * The docker CLI for boxes. `env` carries the VALUES of the box's `--env NAME` flags: docker reads each named
+ * variable from its own environment, so a value (the meeting's callback key, a meeting passcode) never sits
+ * on the argv, where `ps` shows it and Node's `execFile` error message would repeat it.
+ */
+export type BoxDockerRunner = (args: readonly string[], env?: Readonly<Record<string, string>>) => Promise<string>;
+
+const defaultDockerRunner: BoxDockerRunner = async (args, env) =>
+  await new Promise<string>((resolve, reject) => {
+    const bin = process.env.EVE_DOCKER_PATH?.trim() || "docker";
+    execFile(bin, [...args], { encoding: "utf8", maxBuffer: 8 * 1024 * 1024, ...(env !== undefined ? { env: { ...process.env, ...env } } : {}) }, (err, stdout, stderr) => {
+      // A SANITISED error: the verb and docker's own first stderr line, never the argv. The message reaches
+      // an approval card's outcome line and the `approval.failed` audit row.
+      if (err) reject(new Error(`docker ${args[0] ?? ""} failed: ${String(stderr).split("\n")[0]?.trim() || "no error output"}`));
+      else resolve(stdout);
+    });
+  });
+
+/** A docker container name from the box ref: lowercase, `[a-z0-9_.-]`, unique per open. */
+function dockerBoxName(spec: Pick<BoxSpec, "purpose" | "ref">, nonce: string): string {
+  const ref = spec.ref.toLowerCase().replace(/[^a-z0-9_.-]/g, "-").slice(0, 40);
+  return `oe-box-${spec.purpose}-${ref}-${nonce}`;
+}
+
+/** The `docker run` argument list for a box. Pure, so the sizing and the labels are unit-tested. */
+export function dockerRunArgs(spec: BoxSpec, name: string, maxMinutes: number): string[] {
+  if (spec.egress !== "open" && spec.egress.allow.length > 0) {
+    // docker's own network has no host allow-list, and a box outside the egress proxy cannot be
+    // filtered by it (OPE-2407). Refuse rather than run a box open that asked to be closed.
+    throw new Error("the docker backend cannot enforce a host allow-list on a box — refusing to open it with open network");
+  }
+  const labels = boxLabels(spec);
+  const args = [
+    "run",
+    "-d",
+    // The box removes itself when its program exits, so nothing accumulates on the host.
+    "--rm",
+    "--name",
+    name,
+    "--label",
+    `${DOCKER_BOX_LABEL}=${labels[BOX_LABEL]}`,
+    "--label",
+    `${DOCKER_BOX_REF_LABEL}=${labels[BOX_REF_LABEL]}`,
+    "--cpus",
+    String(Math.max(0.5, spec.vcpus)),
+    "--memory",
+    `${Math.max(256, Math.floor(spec.memoryMb))}m`,
+    "--shm-size",
+    `${Math.max(64, Math.floor(spec.shmMb ?? 64))}m`,
+    // Hardening every box gets: no Linux capabilities, no privilege gain through setuid binaries, and a pid
+    // ceiling (Chromium runs a few hundred threads; a fork bomb stops here). The box program runs as the
+    // image's non-root user when the spec names one.
+    "--cap-drop",
+    "ALL",
+    "--security-opt",
+    "no-new-privileges",
+    "--pids-limit",
+    String(DOCKER_BOX_PIDS_LIMIT),
+    ...(spec.user !== undefined ? ["--user", spec.user] : []),
+  ];
+  if (spec.persist !== undefined) {
+    args.push("--label", `${DOCKER_BOX_PERSIST_LABEL}=${dockerVolumeName(spec.persist.key)}`, "--volume", `${dockerVolumeName(spec.persist.key)}:${spec.persist.mount}`);
+  }
+  if (spec.egress !== "open") {
+    // A closed box has no network, so nothing could reach its port either.
+    if (spec.port !== undefined) throw new Error("a docker box with no network cannot serve a port — refusing to open it");
+    args.push("--network", "none");
+  } else if (spec.network !== undefined) {
+    args.push("--network", spec.network);
+  }
+  // Off a named network the port is published on the loopback interface only, never on the host's others.
+  if (spec.port !== undefined && spec.network === undefined) args.push("--publish", `127.0.0.1::${spec.port}`);
+  // Names only: the values travel in the CLI's own environment (BoxDockerRunner), never on the argv.
+  for (const k of Object.keys(spec.env)) args.push("--env", k);
+  // `timeout` is the cap on this backend: coreutils kills the program at it, and `--rm` removes the box.
+  args.push("--entrypoint", "timeout", spec.image, `${maxMinutes * 60}s`, ...spec.command);
+  return args;
+}
+
+export function createDockerBoxBackend(run: BoxDockerRunner = defaultDockerRunner, nonce: () => string = () => Date.now().toString(36)): LongLivedBoxBackend {
+  async function inspect(names: readonly string[]): Promise<BoxListing[]> {
+    if (names.length === 0) return [];
+    let out: string;
+    try {
+      out = await run([
+        "inspect",
+        "--format",
+        `{{.Name}}\t{{.State.Status}}\t{{.State.StartedAt}}\t{{index .Config.Labels "${DOCKER_BOX_LABEL}"}}\t{{index .Config.Labels "${DOCKER_BOX_REF_LABEL}"}}`,
+        ...names,
+      ]);
+    } catch {
+      return [];
+    }
+    const listings: BoxListing[] = [];
+    for (const line of out.split("\n")) {
+      const [rawName, state, startedAt, purpose, ref] = line.trim().split("\t");
+      if (rawName === undefined || state === undefined) continue;
+      const parsed = startedAt === undefined ? Number.NaN : Date.parse(startedAt);
+      listings.push({
+        name: rawName.replace(/^\//, ""),
+        status: dockerStatusToSandboxStatus(state),
+        createdAt: Number.isFinite(parsed) ? parsed : Date.now(),
+        ...(isPurpose(purpose) ? { purpose } : {}),
+        ...(ref !== undefined && ref.length > 0 ? { ref } : {}),
+      });
+    }
+    return listings;
+  }
+  /** Stop every box still running on a persistent key's volume. */
+  async function stopOnVolume(volume: string): Promise<void> {
+    const ids = (await run(["ps", "-q", "--filter", `label=${DOCKER_BOX_PERSIST_LABEL}=${volume}`]))
+      .split("\n")
+      .map((l) => l.trim())
+      .filter((l) => l.length > 0);
+    for (const id of ids) {
+      try {
+        await run(["stop", "-t", "10", id]);
+      } catch {
+        // Already gone.
+      }
+    }
+  }
+  /** Where the app reaches a box's port: by name on a shared network, else the loopback port docker picked. */
+  async function boxUrl(spec: BoxSpec, name: string): Promise<string | undefined> {
+    if (spec.port === undefined) return undefined;
+    if (spec.network !== undefined) return `http://${name}:${spec.port}`;
+    const mapped = (await run(["port", name, `${spec.port}/tcp`])).split("\n").map((l) => l.trim()).find((l) => /^127\.0\.0\.1:\d+$/.test(l));
+    return mapped === undefined ? undefined : `http://${mapped}`;
+  }
+  return {
+    backend: "docker",
+    metered: false,
+    maxMinutesCeiling: DOCKER_BOX_CEILING_MINUTES,
+    // docker has no host firewall for a box: `dockerRunArgs` refuses a non-empty `{ allow }` list.
+    enforcesHostAllowList: false,
+    async open(spec) {
+      if (spec.command.length === 0) throw new Error("a box needs a command to run");
+      const maxMinutes = clampBoxMinutes(spec.maxMinutes, DOCKER_BOX_CEILING_MINUTES);
+      const name = dockerBoxName(spec, nonce());
+      const args = dockerRunArgs(spec, name, maxMinutes);
+      if (spec.persist !== undefined) await stopOnVolume(dockerVolumeName(spec.persist.key));
+      await run(args, spec.env);
+      const [listing] = await inspect([name]);
+      let url: string | undefined;
+      try {
+        url = await boxUrl(spec, name);
+      } catch (err) {
+        await run(["stop", "-t", "10", name]).catch(() => "");
+        throw err;
+      }
+      return { name, backend: "docker", createdAt: listing?.createdAt ?? Date.now(), maxMinutes, ...(url !== undefined ? { url } : {}) };
+    },
+    async status(name) {
+      const [listing] = await inspect([name]);
+      return listing;
+    },
+    async list(purpose) {
+      const names = (await run(["ps", "-a", "--no-trunc", "--filter", `label=${DOCKER_BOX_LABEL}=${purpose}`, "--format", "{{.Names}}"]))
+        .split("\n")
+        .map((l) => l.trim())
+        .filter((l) => l.length > 0);
+      return await inspect(names);
+    },
+    async stop(name) {
+      try {
+        await run(["stop", "-t", "10", name]);
+      } catch {
+        // Idempotent: `--rm` already removed a box whose program exited.
+      }
+    },
+    async forget(key) {
+      const volume = dockerVolumeName(key);
+      await stopOnVolume(volume);
+      // `-f` makes a missing volume a success, so a forget is idempotent.
+      await run(["volume", "rm", "-f", volume]);
+    },
+  };
+}
+
+// ── just-bash ─────────────────────────────────────────────────────────────────────────────────
+
+/** just-bash is an in-process interpreter: it has no VM, no container and no browser. It refuses. */
+export const justBashBoxBackend: LongLivedBoxBackend = {
+  backend: "justbash",
+  metered: false,
+  maxMinutesCeiling: 0,
+  unavailable:
+    "this deployment's sandbox backend is just-bash, which runs inside the app process and cannot run a long-lived box (no VM, no container, no browser). Declare `sandbox.selfHostBackend: \"docker\"` or run on Vercel Sandbox",
+  async open() {
+    throw new Error(justBashBoxBackend.unavailable);
+  },
+  async status() {
+    return undefined;
+  },
+  async list() {
+    return [];
+  },
+  async stop() {
+    // Nothing to stop: this backend never opens a box.
+  },
+};
+
+// ── selection ─────────────────────────────────────────────────────────────────────────────────
+
+/** The box backend for this deployment: the SAME rule `resolveSandboxStopper()` reads, so they never disagree. */
+export function selectLongLivedBoxBackend(): LongLivedBoxBackend {
+  const backend = resolveSandboxBackend();
+  if (backend === "vercel") return createVercelBoxBackend();
+  return backend === "justbash" ? justBashBoxBackend : createDockerBoxBackend();
+}
+
+/** Boot registration, from `registerDefaultAdapters`. */
+export function registerLongLivedBoxes(): string {
+  const backend = selectLongLivedBoxBackend();
+  registerLongLivedBoxBackend(backend);
+  return backend.backend;
+}

package/dist/agent/directory/okta.d.ts

@@ -8,7 +8,17 @@ export interface OktaDirectoryDeps {
     readonly fetch?: FetchLike;
     /** Resolve the API token. Default: core's broker seam — see config.ts's header. */
     readonly resolveToken?: (broker: string, ref: string) => Promise<string>;
+    /** Does a connection sign people in through THIS Okta org for Cross App Access? Default: a declared `xaa`
+     *  sign-in whose `idpIssuer` has this org's origin. See {@link xaaNamesOrg}. */
+    readonly proposeOwnAccount?: () => boolean;
 }
+/**
+ * (OPE-2453) True when a declared `xaa` sign-in names this Okta org as its IdP. Only then does the arm propose each
+ * person's OWN Okta account (`okta`, the Okta user id) beside the app accounts: the Cross App Access completion
+ * admits a sign-in only for a confirmed `okta` account, and nothing else writes one. With no `xaa` declaration
+ * the arm proposes exactly what it did before, so a deployment that does not use Cross App Access sees no change.
+ */
+export declare function xaaNamesOrg(orgUrl: string, declared?: ReadonlyMap<string, unknown>): boolean;
 /**
  * The `rel="next"` URL from the RFC-5988 `Link` header. Okta paginates with an opaque cursor and no total
  * count, so following the header is the ONLY correct way to page — an offset would truncate or duplicate.

package/dist/agent/directory/okta.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"okta.d.ts","sourceRoot":"","sources":["../../../agent/directory/okta.ts"],"names":[],"mappings":"AAGA,OAAO,EAA6D,KAAK,iBAAiB,EAAE,MAAM,4CAA4C,CAAC;AAC/I,OAAO,KAAK,EAAkB,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEvE,oGAAoG;AACpG,MAAM,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC;AAoDrC,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,8DAA8D;IAC9D,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;IAC3B,mFAAmF;IACnF,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CAC1E;AAUD;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAO9E;AAED,2GAA2G;AAC3G,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,iBAAiB,GAAG,iBAAiB,CA8HpF"}
+{"version":3,"file":"okta.d.ts","sourceRoot":"","sources":["../../../agent/directory/okta.ts"],"names":[],"mappings":"AAGA,OAAO,EAML,KAAK,iBAAiB,EACvB,MAAM,4CAA4C,CAAC;AACpD,OAAO,KAAK,EAAkB,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEvE,oGAAoG;AACpG,MAAM,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC;AAoDrC,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,8DAA8D;IAC9D,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;IAC3B,mFAAmF;IACnF,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACzE;oFACgF;IAChF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,OAAO,CAAC;CAC5C;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,GAAE,WAAW,CAAC,MAAM,EAAE,OAAO,CAA+B,GAAG,OAAO,CAiBzH;AAUD;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAO9E;AAED,2GAA2G;AAC3G,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,iBAAiB,GAAG,iBAAiB,CAkIpF"}

package/dist/agent/directory/okta.js

@@ -1,6 +1,6 @@
 // THE OKTA DIRECTORY ADAPTER — everything it returns is a PROPOSAL, and nothing here confirms a link. The
 // grade follows the field: `externalId` is attested (the SCIM write-back), `credentials.userName` asserted.
-import { getSecretVia } from "@open-everywhere/core/agent/adapter-api.js";
+import { declaredConnectionSignIns, getSecretVia, OKTA_LINK_PLATFORM, } from "@open-everywhere/core/agent/adapter-api.js";
 /** Okta user statuses that mean "this person is deactivated". Everything else (ACTIVE, PROVISIONED,
  *  STAGED, RECOVERY, LOCKED_OUT, PASSWORD_EXPIRED) is a live human with an access problem, not a
  *  departed one — and treating a locked-out person as deprovisioned would suspend their identity
@@ -13,6 +13,34 @@ const APP_PAGE_LIMIT = 500;
 /** A hard cap on pages followed per resource — a runaway `Link: rel="next"` loop (a proxy rewriting
  *  the header, a vendor bug) must not spin forever inside a scheduled tick. 200 pages ≈ 40k users. */
 const MAX_PAGES = 200;
+/**
+ * (OPE-2453) True when a declared `xaa` sign-in names this Okta org as its IdP. Only then does the arm propose each
+ * person's OWN Okta account (`okta`, the Okta user id) beside the app accounts: the Cross App Access completion
+ * admits a sign-in only for a confirmed `okta` account, and nothing else writes one. With no `xaa` declaration
+ * the arm proposes exactly what it did before, so a deployment that does not use Cross App Access sees no change.
+ */
+export function xaaNamesOrg(orgUrl, declared = declaredConnectionSignIns()) {
+    let origin;
+    try {
+        origin = new URL(orgUrl).origin;
+    }
+    catch {
+        return false;
+    }
+    for (const v of declared.values()) {
+        const rec = v;
+        if (rec.mode !== "xaa" || typeof rec.idpIssuer !== "string")
+            continue;
+        try {
+            if (new URL(rec.idpIssuer).origin === origin)
+                return true;
+        }
+        catch {
+            continue;
+        }
+    }
+    return false;
+}
 /** The display name to show a human, from whichever profile fields Okta actually filled in. DISPLAY
  *  ONLY — link-store.ts invariant 4 means it can never become a lookup key, here or downstream. */
 function displayNameOf(user) {
@@ -39,6 +67,7 @@ export function makeOktaDirectoryProvider(deps) {
     const { config } = deps;
     const fetchImpl = deps.fetch ?? fetch;
     const resolveToken = deps.resolveToken ?? ((broker, ref) => getSecretVia(broker, ref));
+    const proposeOwnAccount = deps.proposeOwnAccount ?? (() => xaaNamesOrg(config.orgUrl));
     // The operator's OWN Okta origin — the ONLY origin the SSWS token may ever be sent to. Computed
     // once; every request in getAll (the first AND every `Link: rel="next"` hop) is checked against it.
     const orgOrigin = new URL(config.orgUrl).origin;
@@ -148,6 +177,8 @@ export function makeOktaDirectoryProvider(deps) {
             const users = await getAll(`/api/v1/users?limit=${PAGE_LIMIT}`, token);
             const groups = await groupsByUser(token);
             const accounts = await accountsByUser(token);
+            // Read once per sync, like the token: a declaration change takes effect at the next tick.
+            const ownAccount = proposeOwnAccount();
             const people = [];
             for (const user of users) {
                 if (!user.id)
@@ -157,7 +188,8 @@ export function makeOktaDirectoryProvider(deps) {
                     externalId: user.id,
                     displayName: displayNameOf(user),
                     ...(email ? { email } : {}),
-                    accounts: accounts.get(user.id) ?? [],
+                    // The Okta user id IS Okta's own answer for its own account, so the grade is "attested".
+                    accounts: ownAccount ? [...(accounts.get(user.id) ?? []), { platform: OKTA_LINK_PLATFORM, nativeId: user.id, grade: "attested" }] : (accounts.get(user.id) ?? []),
                     groups: (groups.get(user.id) ?? []).slice().sort(),
                     deprovisioned: DEPROVISIONED_STATUSES.has((user.status ?? "").toUpperCase()),
                 });

package/dist/agent/directory/okta.js.map

@@ -1 +1 @@
-{"version":3,"file":"okta.js","sourceRoot":"","sources":["../../../agent/directory/okta.ts"],"names":[],"mappings":"AAAA,0GAA0G;AAC1G,4GAA4G;AAE5G,OAAO,EAAE,YAAY,EAAuE,MAAM,4CAA4C,CAAC;AAM/I;;;+CAG+C;AAC/C,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC;AAEvE;wEACwE;AACxE,MAAM,UAAU,GAAG,GAAG,CAAC;AACvB,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B;sGACsG;AACtG,MAAM,SAAS,GAAG,GAAG,CAAC;AA6CtB;mGACmG;AACnG,SAAS,aAAa,CAAC,IAAc;IACnC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACxE,OAAO,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,IAAI,SAAS,CAAC;AACrG,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,MAAiC;IACxD,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,yBAAyB,CAAC,IAAuB;IAC/D,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACxB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IACtC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,MAAc,EAAE,GAAW,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IAEvG,gGAAgG;IAChG,oGAAoG;IACpG,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IAEhD,sGAAsG;IACtG,KAAK,UAAU,MAAM,CAAI,IAAY,EAAE,KAAa;QAClD,IAAI,GAAG,GAAuB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QACzF,MAAM,GAAG,GAAQ,EAAE,CAAC;QACpB,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,GAAG,IAAI,IAAI,GAAG,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;YACnD,6GAA6G;YAC7G,0FAA0F;YAC1F,IAAI,SAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC,CAAC;YACzG,CAAC;YACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CAAC,kDAAkD,SAAS,MAAM,SAAS,2CAA2C,SAAS,GAAG,CAAC,CAAC;YACrJ,CAAC;YACD,IAAI,GAAa,CAAC;YAClB,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;oBACzB,MAAM,EAAE,KAAK;oBACb,oFAAoF;oBACpF,sFAAsF;oBACtF,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,EAAE,aAAa,EAAE,QAAQ,KAAK,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;iBACxE,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,sFAAsF;gBACtF,yCAAyC;gBACzC,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACxG,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,IAAI,MAAM,GAAG,EAAE,CAAC;gBAChB,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAc,CAAC;oBAC7C,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC3E,CAAC;gBAAC,MAAM,CAAC;oBACP,gEAAgE;gBAClE,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,QAAQ,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClF,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAY,CAAC;YAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAI,IAAY,CAAC,CAAC;YACpD,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;OAGG;IACH,KAAK,UAAU,YAAY,CAAC,KAAa;QACvC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAY,wBAAwB,UAAU,EAAE,EAAE,KAAK,CAAC,CAAC;QACpF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACzC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI;gBAAE,SAAS;YACjC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAW,kBAAkB,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,gBAAgB,UAAU,EAAE,EAAE,KAAK,CAAC,CAAC;YAC1H,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,IAAI,CAAC,CAAC,CAAC,EAAE;oBAAE,SAAS;gBACpB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;gBACpC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,+EAA+E;IAC/E,KAAK,UAAU,cAAc,CAAC,KAAa;QACzC,MAAM,MAAM,GAAG,IAAI,GAAG,EAA8B,CAAC;QACrD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,WAAW,GAAG,MAAM,MAAM,CAAc,gBAAgB,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,cAAc,EAAE,EAAE,KAAK,CAAC,CAAC;YACpI,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;gBAC5B,IAAI,CAAC,CAAC,CAAC,EAAE;oBAAE,SAAS;gBACpB,0FAA0F;gBAC1F,oFAAoF;gBACpF,oEAAoE;gBACpE,IAAI,CAAC,CAAC,MAAM,IAAI,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;oBAAE,SAAS;gBAC7E,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBACnC,IAAI,CAAC,QAAQ;oBAAE,SAAS;gBACxB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;gBACpC,8GAA8G;gBAC9G,uGAAuG;gBACvG,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;gBAC1J,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO;QACL,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,SAAS,MAAM,CAAC,MAAM,GAAG;QAC/B,KAAK,CAAC,UAAU;YACd,2FAA2F;YAC3F,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YACtE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAW,uBAAuB,UAAU,EAAE,EAAE,KAAK,CAAC,CAAC;YACjF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;YAE7C,MAAM,MAAM,GAAsB,EAAE,CAAC;YACrC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,EAAE;oBAAE,SAAS;gBACvB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;gBAC1C,MAAM,CAAC,IAAI,CAAC;oBACV,UAAU,EAAE,IAAI,CAAC,EAAE;oBACnB,WAAW,EAAE,aAAa,CAAC,IAAI,CAAC;oBAChC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3B,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE;oBACrC,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE;oBAClD,aAAa,EAAE,sBAAsB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;iBAC7E,CAAC,CAAC;YACL,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,UAAuB,EAAE,GAAmB;IAC7D,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IAChG,MAAM,OAAO,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC;IAC5B,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACvC,CAAC"}
+{"version":3,"file":"okta.js","sourceRoot":"","sources":["../../../agent/directory/okta.ts"],"names":[],"mappings":"AAAA,0GAA0G;AAC1G,4GAA4G;AAE5G,OAAO,EACL,yBAAyB,EACzB,YAAY,EACZ,kBAAkB,GAInB,MAAM,4CAA4C,CAAC;AAMpD;;;+CAG+C;AAC/C,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC;AAEvE;wEACwE;AACxE,MAAM,UAAU,GAAG,GAAG,CAAC;AACvB,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B;sGACsG;AACtG,MAAM,SAAS,GAAG,GAAG,CAAC;AAgDtB;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,QAAQ,GAAiC,yBAAyB,EAAE;IAC9G,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,CAA4C,CAAC;QACzD,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;YAAE,SAAS;QACtE,IAAI,CAAC;YACH,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;mGACmG;AACnG,SAAS,aAAa,CAAC,IAAc;IACnC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACxE,OAAO,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,IAAI,SAAS,CAAC;AACrG,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,MAAiC;IACxD,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,yBAAyB,CAAC,IAAuB;IAC/D,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACxB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IACtC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,MAAc,EAAE,GAAW,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IACvG,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAEvF,gGAAgG;IAChG,oGAAoG;IACpG,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IAEhD,sGAAsG;IACtG,KAAK,UAAU,MAAM,CAAI,IAAY,EAAE,KAAa;QAClD,IAAI,GAAG,GAAuB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QACzF,MAAM,GAAG,GAAQ,EAAE,CAAC;QACpB,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,GAAG,IAAI,IAAI,GAAG,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;YACnD,6GAA6G;YAC7G,0FAA0F;YAC1F,IAAI,SAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC,CAAC;YACzG,CAAC;YACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CAAC,kDAAkD,SAAS,MAAM,SAAS,2CAA2C,SAAS,GAAG,CAAC,CAAC;YACrJ,CAAC;YACD,IAAI,GAAa,CAAC;YAClB,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;oBACzB,MAAM,EAAE,KAAK;oBACb,oFAAoF;oBACpF,sFAAsF;oBACtF,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,EAAE,aAAa,EAAE,QAAQ,KAAK,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;iBACxE,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,sFAAsF;gBACtF,yCAAyC;gBACzC,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACxG,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,IAAI,MAAM,GAAG,EAAE,CAAC;gBAChB,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAc,CAAC;oBAC7C,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC3E,CAAC;gBAAC,MAAM,CAAC;oBACP,gEAAgE;gBAClE,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,QAAQ,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClF,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAY,CAAC;YAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAI,IAAY,CAAC,CAAC;YACpD,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;OAGG;IACH,KAAK,UAAU,YAAY,CAAC,KAAa;QACvC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAY,wBAAwB,UAAU,EAAE,EAAE,KAAK,CAAC,CAAC;QACpF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACzC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI;gBAAE,SAAS;YACjC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAW,kBAAkB,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,gBAAgB,UAAU,EAAE,EAAE,KAAK,CAAC,CAAC;YAC1H,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,IAAI,CAAC,CAAC,CAAC,EAAE;oBAAE,SAAS;gBACpB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;gBACpC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,+EAA+E;IAC/E,KAAK,UAAU,cAAc,CAAC,KAAa;QACzC,MAAM,MAAM,GAAG,IAAI,GAAG,EAA8B,CAAC;QACrD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,WAAW,GAAG,MAAM,MAAM,CAAc,gBAAgB,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,cAAc,EAAE,EAAE,KAAK,CAAC,CAAC;YACpI,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;gBAC5B,IAAI,CAAC,CAAC,CAAC,EAAE;oBAAE,SAAS;gBACpB,0FAA0F;gBAC1F,oFAAoF;gBACpF,oEAAoE;gBACpE,IAAI,CAAC,CAAC,MAAM,IAAI,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;oBAAE,SAAS;gBAC7E,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBACnC,IAAI,CAAC,QAAQ;oBAAE,SAAS;gBACxB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;gBACpC,8GAA8G;gBAC9G,uGAAuG;gBACvG,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;gBAC1J,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO;QACL,EAAE,EAAE,MAAM;QACV,IAAI,EAAE,SAAS,MAAM,CAAC,MAAM,GAAG;QAC/B,KAAK,CAAC,UAAU;YACd,2FAA2F;YAC3F,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YACtE,MAAM,KAAK,GAAG,MAAM,MAAM,CAAW,uBAAuB,UAAU,EAAE,EAAE,KAAK,CAAC,CAAC;YACjF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;YAC7C,0FAA0F;YAC1F,MAAM,UAAU,GAAG,iBAAiB,EAAE,CAAC;YAEvC,MAAM,MAAM,GAAsB,EAAE,CAAC;YACrC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,EAAE;oBAAE,SAAS;gBACvB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;gBAC1C,MAAM,CAAC,IAAI,CAAC;oBACV,UAAU,EAAE,IAAI,CAAC,EAAE;oBACnB,WAAW,EAAE,aAAa,CAAC,IAAI,CAAC;oBAChC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3B,yFAAyF;oBACzF,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;oBACjK,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE;oBAClD,aAAa,EAAE,sBAAsB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;iBAC7E,CAAC,CAAC;YACL,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,UAAuB,EAAE,GAAmB;IAC7D,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IAChG,MAAM,OAAO,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC;IAC5B,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACvC,CAAC"}

package/dist/agent/meetings/native-http.d.ts

@@ -0,0 +1,22 @@
+/** The fetch a reader uses. Injected in tests with recorded fixtures; the live one is the global fetch. */
+export type NativeFetch = (url: string, init?: RequestInit) => Promise<Response>;
+/** The live fetch every reader uses by default: the global fetch with a per-call timeout. */
+export declare const timedFetch: NativeFetch;
+/** Read a response body as text, refusing one larger than the cap. */
+export declare function readCappedText(res: Response): Promise<string>;
+/** Read a JSON body, or `{}` when it does not parse (an error body need not be JSON). */
+export declare function readJsonLoose(res: Response): Promise<Record<string, unknown>>;
+/** A thrown error a reader turns into "the platform did not answer, check again later". Never echoes a body. */
+export declare function unexpectedStatus(what: string, status: number): Error;
+/**
+ * A per-process access-token cache, keyed by the caller (credential + subject). A token is reused until one
+ * minute before it expires. The key never holds the secret itself: callers pass a non-secret key.
+ */
+export declare class TokenCache {
+    #private;
+    get(key: string, now: number): string | undefined;
+    set(key: string, token: string, expiresInSeconds: unknown, now: number): void;
+}
+/** True when `raw` is an https URL on `host` or one of its subdomains. A reader sends its token only there. */
+export declare function onHost(raw: string, host: string): boolean;
+//# sourceMappingURL=native-http.d.ts.map

package/dist/agent/meetings/native-http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-http.d.ts","sourceRoot":"","sources":["../../../agent/meetings/native-http.ts"],"names":[],"mappings":"AAIA,2GAA2G;AAC3G,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAOjF,6FAA6F;AAC7F,eAAO,MAAM,UAAU,EAAE,WAAyG,CAAC;AAKnI,sEAAsE;AACtE,wBAAsB,cAAc,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAMnE;AAED,yFAAyF;AACzF,wBAAsB,aAAa,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAOnF;AAED,gHAAgH;AAChH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,KAAK,CAEpE;AAOD;;;GAGG;AACH,qBAAa,UAAU;;IAErB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGhD;IACD,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAG5E;CACF;AAED,+GAA+G;AAC/G,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAOzD"}