@quiltdata/benchling-webhook 0.5.4-20251102T020826Z → 0.5.4-20251103T180145Z

package/dist/lib/benchling-auth-validator.js

@@ -0,0 +1,213 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BenchlingAuthValidator = void 0;
+const https = __importStar(require("https"));
+/**
+ * Benchling authentication validator
+ *
+ * Validates Benchling credentials by attempting OAuth authentication
+ * and checking required permissions.
+ */
+class BenchlingAuthValidator {
+    /**
+     * Validate Benchling credentials
+     *
+     * @param credentials - Benchling credentials to validate
+     * @returns Validation result with errors and warnings
+     */
+    static async validate(credentials) {
+        const errors = [];
+        const warnings = [];
+        // Basic credential validation
+        if (!BenchlingAuthValidator.validateCredentials(credentials)) {
+            errors.push("Invalid credentials: missing required fields");
+            return {
+                isValid: false,
+                errors,
+                warnings,
+            };
+        }
+        // Validate tenant format
+        if (!(await BenchlingAuthValidator.validateTenant(credentials.tenant))) {
+            errors.push("Invalid tenant format");
+            return {
+                isValid: false,
+                errors,
+                warnings,
+            };
+        }
+        // Attempt OAuth authentication
+        try {
+            const tokenResponse = await BenchlingAuthValidator.authenticate(credentials);
+            if (!tokenResponse.access_token) {
+                if (tokenResponse.error === "invalid_client") {
+                    errors.push("Invalid client credentials");
+                }
+                else {
+                    errors.push("Authentication failed");
+                }
+                return {
+                    isValid: false,
+                    errors,
+                    warnings,
+                };
+            }
+            // Check OAuth scopes
+            const hasPermissions = BenchlingAuthValidator.checkPermissions(tokenResponse.scope || "");
+            if (!hasPermissions) {
+                warnings.push("Missing required permissions");
+            }
+            return {
+                isValid: true,
+                hasRequiredPermissions: hasPermissions,
+                errors: [],
+                warnings: warnings.length > 0 ? warnings : undefined,
+            };
+        }
+        catch (error) {
+            if (error instanceof Error) {
+                if (error.message.includes("404") || error.message.includes("tenant_not_found")) {
+                    errors.push("Tenant not found");
+                }
+                else {
+                    errors.push("Network error during validation");
+                }
+            }
+            return {
+                isValid: false,
+                errors,
+                warnings,
+            };
+        }
+    }
+    /**
+     * Validate tenant format
+     *
+     * @param tenant - Benchling tenant name
+     * @returns True if tenant format is valid
+     */
+    static async validateTenant(tenant) {
+        if (!tenant || tenant.trim() === "") {
+            return false;
+        }
+        // Check for invalid characters (spaces, special chars)
+        if (/\s/.test(tenant)) {
+            return false;
+        }
+        return true;
+    }
+    /**
+     * Validate credentials completeness
+     *
+     * @param credentials - Credentials to validate
+     * @returns True if all required fields are present
+     */
+    static validateCredentials(credentials) {
+        return !!(credentials.tenant &&
+            credentials.clientId &&
+            credentials.clientSecret &&
+            credentials.tenant.trim() !== "" &&
+            credentials.clientId.trim() !== "" &&
+            credentials.clientSecret.trim() !== "");
+    }
+    /**
+     * Authenticate with Benchling OAuth API
+     *
+     * @param credentials - Benchling credentials
+     * @returns Token response from Benchling
+     */
+    static async authenticate(credentials) {
+        const { tenant, clientId, clientSecret } = credentials;
+        return new Promise((resolve, reject) => {
+            const authString = Buffer.from(`${clientId}:${clientSecret}`).toString("base64");
+            const postData = "grant_type=client_credentials";
+            const options = {
+                hostname: `${tenant}.benchling.com`,
+                port: 443,
+                path: "/api/v2/token",
+                method: "POST",
+                headers: {
+                    "Authorization": `Basic ${authString}`,
+                    "Content-Type": "application/x-www-form-urlencoded",
+                    "Content-Length": Buffer.byteLength(postData),
+                },
+            };
+            const req = https.request(options, (res) => {
+                let data = "";
+                res.on("data", (chunk) => {
+                    data += chunk.toString();
+                });
+                res.on("end", () => {
+                    if (res.statusCode === 404) {
+                        reject(new Error("404: Tenant not found"));
+                        return;
+                    }
+                    try {
+                        const response = JSON.parse(data);
+                        if (res.statusCode === 401) {
+                            response.error = "invalid_client";
+                        }
+                        resolve(response);
+                    }
+                    catch (error) {
+                        reject(error);
+                    }
+                });
+            });
+            req.on("error", (error) => {
+                reject(error);
+            });
+            req.write(postData);
+            req.end();
+        });
+    }
+    /**
+     * Check if OAuth scopes include required permissions
+     *
+     * @param scope - OAuth scope string
+     * @returns True if all required scopes are present
+     */
+    static checkPermissions(scope) {
+        const scopes = scope.toLowerCase().split(" ");
+        return BenchlingAuthValidator.REQUIRED_SCOPES.every((requiredScope) => scopes.includes(requiredScope));
+    }
+}
+exports.BenchlingAuthValidator = BenchlingAuthValidator;
+/**
+ * Required OAuth scopes for the webhook integration
+ */
+BenchlingAuthValidator.REQUIRED_SCOPES = ["read", "write"];
+//# sourceMappingURL=benchling-auth-validator.js.map

package/dist/lib/benchling-auth-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"benchling-auth-validator.js","sourceRoot":"","sources":["../../lib/benchling-auth-validator.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,6CAA+B;AA8B/B;;;;;GAKG;AACH,MAAa,sBAAsB;IAM/B;;;;;OAKG;IACI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAiC;QAC1D,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,8BAA8B;QAC9B,IAAI,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3D,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;YAC5D,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,MAAM;gBACN,QAAQ;aACX,CAAC;QACN,CAAC;QAED,yBAAyB;QACzB,IAAI,CAAC,CAAC,MAAM,sBAAsB,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACrE,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACrC,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,MAAM;gBACN,QAAQ;aACX,CAAC;QACN,CAAC;QAED,+BAA+B;QAC/B,IAAI,CAAC;YACD,MAAM,aAAa,GAAG,MAAM,sBAAsB,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;YAE7E,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC;gBAC9B,IAAI,aAAa,CAAC,KAAK,KAAK,gBAAgB,EAAE,CAAC;oBAC3C,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;gBAC9C,CAAC;qBAAM,CAAC;oBACJ,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;gBACzC,CAAC;gBACD,OAAO;oBACH,OAAO,EAAE,KAAK;oBACd,MAAM;oBACN,QAAQ;iBACX,CAAC;YACN,CAAC;YAED,qBAAqB;YACrB,MAAM,cAAc,GAAG,sBAAsB,CAAC,gBAAgB,CAAC,aAAa,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAC1F,IAAI,CAAC,cAAc,EAAE,CAAC;gBAClB,QAAQ,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;YAClD,CAAC;YAED,OAAO;gBACH,OAAO,EAAE,IAAI;gBACb,sBAAsB,EAAE,cAAc;gBACtC,MAAM,EAAE,EAAE;gBACV,QAAQ,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;aACvD,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;gBACzB,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;oBAC9E,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;gBACpC,CAAC;qBAAM,CAAC;oBACJ,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;gBACnD,CAAC;YACL,CAAC;YACD,OAAO;gBACH,OAAO,EAAE,KAAK;gBACd,MAAM;gBACN,QAAQ;aACX,CAAC;QACN,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,MAAc;QAC7C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAClC,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,uDAAuD;QACvD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACI,MAAM,CAAC,mBAAmB,CAAC,WAAiC;QAC/D,OAAO,CAAC,CAAC,CACL,WAAW,CAAC,MAAM;YAClB,WAAW,CAAC,QAAQ;YACpB,WAAW,CAAC,YAAY;YACxB,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE;YAChC,WAAW,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE;YAClC,WAAW,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,CACzC,CAAC;IACN,CAAC;IAED;;;;;OAKG;IACK,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,WAAiC;QAC/D,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,WAAW,CAAC;QAEvD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACjF,MAAM,QAAQ,GAAG,+BAA+B,CAAC;YAEjD,MAAM,OAAO,GAAG;gBACZ,QAAQ,EAAE,GAAG,MAAM,gBAAgB;gBACnC,IAAI,EAAE,GAAG;gBACT,IAAI,EAAE,eAAe;gBACrB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACL,eAAe,EAAE,SAAS,UAAU,EAAE;oBACtC,cAAc,EAAE,mCAAmC;oBACnD,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;iBAChD;aACJ,CAAC;YAEF,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACvC,IAAI,IAAI,GAAG,EAAE,CAAC;gBAEd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBAC7B,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC7B,CAAC,CAAC,CAAC;gBAEH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACf,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;wBACzB,MAAM,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;wBAC3C,OAAO;oBACX,CAAC;oBAED,IAAI,CAAC;wBACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAkB,CAAC;wBACnD,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;4BACzB,QAAQ,CAAC,KAAK,GAAG,gBAAgB,CAAC;wBACtC,CAAC;wBACD,OAAO,CAAC,QAAQ,CAAC,CAAC;oBACtB,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACb,MAAM,CAAC,KAAK,CAAC,CAAC;oBAClB,CAAC;gBACL,CAAC,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE;gBAC7B,MAAM,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACpB,GAAG,CAAC,GAAG,EAAE,CAAC;QACd,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;;;OAKG;IACK,MAAM,CAAC,gBAAgB,CAAC,KAAa;QACzC,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9C,OAAO,sBAAsB,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,EAAE,CAClE,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CACjC,CAAC;IACN,CAAC;;AA3LL,wDA4LC;AA3LG;;GAEG;AACqB,sCAAe,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC"}

package/dist/lib/benchling-webhook-stack.d.ts

@@ -3,35 +3,17 @@ import { Construct } from "constructs";
 export interface BenchlingWebhookStackProps extends cdk.StackProps {
     /**
      * ARN of the Quilt CloudFormation stack.
-     * When provided with benchlingSecret, enables secrets-only mode where all configuration
-     * is resolved from AWS (CloudFormation outputs + Secrets Manager).
+     * All configuration is resolved from AWS (CloudFormation outputs + Secrets Manager).
      * Format: arn:aws:cloudformation:{region}:{account}:stack/{name}/{id}
+     * REQUIRED.
      */
-    readonly quiltStackArn?: string;
+    readonly quiltStackArn: string;
     /**
      * Name or ARN of the AWS Secrets Manager secret containing Benchling credentials.
-     * When provided with quiltStackArn, enables secrets-only mode.
      * Secret must contain: client_id, client_secret, tenant, app_definition_id (optional)
+     * REQUIRED.
      */
-    readonly benchlingSecret?: string;
-    readonly bucketName?: string;
-    readonly environment?: string;
-    readonly prefix?: string;
-    readonly queueArn?: string;
-    readonly benchlingClientId?: string;
-    readonly benchlingClientSecret?: string;
-    readonly benchlingTenant?: string;
-    readonly benchlingAppDefinitionId?: string;
-    /**
-     * Consolidated Benchling secrets as JSON string.
-     * When provided, this takes precedence over individual secret parameters.
-     * Expected format: {"client_id": "...", "client_secret": "...", "tenant": "...", "app_definition_id": "..."}
-     * If not provided or empty, individual parameters (benchlingClientId, benchlingClientSecret, benchlingTenant) are used.
-     */
-    readonly benchlingSecrets?: string;
-    readonly quiltCatalog?: string;
-    readonly quiltDatabase?: string;
-    readonly webhookAllowList?: string;
+    readonly benchlingSecret: string;
     readonly createEcrRepository?: boolean;
     readonly ecrRepositoryName?: string;
     readonly logLevel?: string;

package/dist/lib/benchling-webhook-stack.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"benchling-webhook-stack.d.ts","sourceRoot":"","sources":["../../lib/benchling-webhook-stack.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,aAAa,CAAC;AAInC,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAMvC,MAAM,WAAW,0BAA2B,SAAQ,GAAG,CAAC,UAAU;IAE9D;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAGlC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAGnC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,qBAAa,qBAAsB,SAAQ,GAAG,CAAC,KAAK;IAChD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAgB;IACpC,SAAgB,eAAe,EAAE,MAAM,CAAC;gBAGpC,KAAK,EAAE,SAAS,EAChB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,0BAA0B;CAgRxC"}
+{"version":3,"file":"benchling-webhook-stack.d.ts","sourceRoot":"","sources":["../../lib/benchling-webhook-stack.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,aAAa,CAAC;AAInC,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAMvC,MAAM,WAAW,0BAA2B,SAAQ,GAAG,CAAC,UAAU;IAE9D;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IAGjC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,qBAAa,qBAAsB,SAAQ,GAAG,CAAC,KAAK;IAChD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAgB;IACpC,SAAgB,eAAe,EAAE,MAAM,CAAC;gBAGpC,KAAK,EAAE,SAAS,EAChB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,0BAA0B;CA0IxC"}

package/dist/lib/benchling-webhook-stack.js

@@ -48,80 +48,26 @@ const package_json_1 = __importDefault(require("../package.json"));
 class BenchlingWebhookStack extends cdk.Stack {
     constructor(scope, id, props) {
         super(scope, id, props);
-        // Determine which mode we're operating in
-        const useSecretsOnlyMode = !!(props.quiltStackArn && props.benchlingSecret);
-        // Validation
-        if (useSecretsOnlyMode) {
-            // Secrets-only mode: only quiltStackArn and benchlingSecret are required
-            console.log("✓ Using secrets-only mode (v0.6.0+)");
-        }
-        else {
-            // Legacy mode: validate required legacy props
-            if (!props.bucketName || !props.prefix || !props.queueArn || !props.quiltDatabase) {
-                throw new Error("Legacy mode requires: bucketName, prefix, queueArn, quiltDatabase.\n" +
-                    "Or use secrets-only mode with: quiltStackArn, benchlingSecret");
-            }
-            if (props.prefix.includes("/")) {
-                throw new Error("Prefix should not contain a '/' character.");
-            }
-            console.log("⚠️  Using legacy mode (DEPRECATED - consider migrating to secrets-only mode)");
+        // Validate required secrets-only mode parameters
+        if (!props.quiltStackArn || !props.benchlingSecret) {
+            throw new Error("Secrets-only mode (v0.6.0+) requires both:\n" +
+                "  - quiltStackArn: CloudFormation stack ARN\n" +
+                "  - benchlingSecret: Secrets Manager secret name\n\n" +
+                "See: https://github.com/quiltdata/benchling-webhook/issues/156");
         }
+        console.log("✓ Using secrets-only mode (v0.6.0+)");
         // Create CloudFormation parameters for runtime-configurable values
-        // Note: Use actual values from props during initial deployment to avoid empty string issues
-        // Parameters can be updated later via CloudFormation stack updates
-        // ===== Secrets-Only Mode Parameters (NEW) =====
+        // Parameters can be updated via CloudFormation stack updates
+        // ===== Secrets-Only Mode Parameters (v0.6.0+) =====
         const quiltStackArnParam = new cdk.CfnParameter(this, "QuiltStackARN", {
             type: "String",
-            description: "[v0.6.0+] ARN of Quilt CloudFormation stack (enables secrets-only mode with BenchlingSecret)",
-            default: props.quiltStackArn || "",
+            description: "ARN of Quilt CloudFormation stack for configuration resolution",
+            default: props.quiltStackArn,
         });
         const benchlingSecretParam = new cdk.CfnParameter(this, "BenchlingSecret", {
             type: "String",
-            description: "[v0.6.0+] Name/ARN of Secrets Manager secret with Benchling credentials (enables secrets-only mode with QuiltStackARN)",
-            default: props.benchlingSecret || "",
-        });
-        // ===== Legacy Mode Parameters (DEPRECATED) =====
-        const webhookAllowListParam = new cdk.CfnParameter(this, "WebhookAllowList", {
-            type: "String",
-            description: "Comma-separated list of IP addresses allowed to send webhooks (leave empty to allow all IPs)",
-            default: props.webhookAllowList || "",
-        });
-        const quiltCatalogParam = new cdk.CfnParameter(this, "QuiltCatalog", {
-            type: "String",
-            description: "Quilt catalog URL for package links",
-            default: props.quiltCatalog || "open.quiltdata.com",
-        });
-        // Infrastructure parameters - these can be updated without redeploying
-        const bucketNameParam = new cdk.CfnParameter(this, "BucketName", {
-            type: "String",
-            description: "[LEGACY] S3 bucket name for storing packages (not used in secrets-only mode)",
-            default: props.bucketName || "",
-        });
-        const prefixParam = new cdk.CfnParameter(this, "PackagePrefix", {
-            type: "String",
-            description: "[LEGACY] Prefix for package names (not used in secrets-only mode)",
-            default: props.prefix || "benchling",
-        });
-        const pkgKeyParam = new cdk.CfnParameter(this, "PackageKey", {
-            type: "String",
-            description: "Metadata key used to link Benchling entries to Quilt packages",
-            default: "experiment_id",
-        });
-        const queueArnParam = new cdk.CfnParameter(this, "QueueArn", {
-            type: "String",
-            description: "[LEGACY] SQS queue ARN for package notifications (not used in secrets-only mode)",
-            default: props.queueArn || "",
-        });
-        const quiltDatabaseParam = new cdk.CfnParameter(this, "QuiltDatabase", {
-            type: "String",
-            description: "[LEGACY] Quilt database name (not used in secrets-only mode)",
-            default: props.quiltDatabase || "",
-        });
-        // DEPRECATED: Benchling tenant parameter (kept for backward compatibility)
-        const benchlingTenantParam = new cdk.CfnParameter(this, "BenchlingTenant", {
-            type: "String",
-            description: "[DEPRECATED] Use BenchlingSecrets parameter instead. Benchling tenant name (e.g., 'company' for company.benchling.com)",
-            default: props.benchlingTenant,
+            description: "Name/ARN of Secrets Manager secret with Benchling credentials",
+            default: props.benchlingSecret,
         });
         const logLevelParam = new cdk.CfnParameter(this, "LogLevel", {
             type: "String",
@@ -129,66 +75,20 @@ class BenchlingWebhookStack extends cdk.Stack {
             default: props.logLevel || "INFO",
             allowedValues: ["DEBUG", "INFO", "WARNING", "ERROR", "CRITICAL"],
         });
-        const enableWebhookVerificationParam = new cdk.CfnParameter(this, "EnableWebhookVerification", {
-            type: "String",
-            description: "Enable webhook signature verification (true/false)",
-            default: "true",
-            allowedValues: ["true", "false"],
-        });
         const imageTagParam = new cdk.CfnParameter(this, "ImageTag", {
             type: "String",
             description: "Docker image tag to deploy (e.g., latest, 0.5.3, 0.5.3-20251030T123456Z)",
             default: props.imageTag || "latest",
         });
-        // Benchling Secrets - consolidated secret parameter (Phase 3)
-        const benchlingSecretsParam = new cdk.CfnParameter(this, "BenchlingSecrets", {
-            type: "String",
-            description: "JSON string containing Benchling secrets (client_id, client_secret, tenant, app_definition_id)",
-            default: "",
-            noEcho: true,
-        });
-        // DEPRECATED: Individual secret parameters (kept for backward compatibility)
-        const benchlingClientIdParam = new cdk.CfnParameter(this, "BenchlingClientId", {
-            type: "String",
-            description: "[DEPRECATED] Use BenchlingSecrets parameter instead. Benchling OAuth client ID.",
-            default: "",
-            noEcho: true,
-        });
-        const benchlingClientSecretParam = new cdk.CfnParameter(this, "BenchlingClientSecret", {
-            type: "String",
-            description: "[DEPRECATED] Use BenchlingSecrets parameter instead. Benchling OAuth client secret.",
-            default: "",
-            noEcho: true,
-        });
         // Use parameter values (which have props as defaults)
         // This allows runtime updates via CloudFormation
-        const webhookAllowListValue = webhookAllowListParam.valueAsString;
-        const quiltCatalogValue = quiltCatalogParam.valueAsString;
-        const bucketNameValue = bucketNameParam.valueAsString;
-        const prefixValue = prefixParam.valueAsString;
-        const pkgKeyValue = pkgKeyParam.valueAsString;
-        const queueArnValue = queueArnParam.valueAsString;
-        const quiltDatabaseValue = quiltDatabaseParam.valueAsString;
-        const benchlingTenantValue = benchlingTenantParam.valueAsString;
-        const logLevelValue = logLevelParam.valueAsString;
-        const enableWebhookVerificationValue = enableWebhookVerificationParam.valueAsString;
-        const imageTagValue = imageTagParam.valueAsString;
-        // Phase 3: New secret parameters (not used directly - mode determined by props)
-        // eslint-disable-next-line @typescript-eslint/no-unused-vars
-        const benchlingSecretsValue = benchlingSecretsParam.valueAsString;
-        // eslint-disable-next-line @typescript-eslint/no-unused-vars
-        const benchlingClientIdValue = benchlingClientIdParam.valueAsString;
-        // eslint-disable-next-line @typescript-eslint/no-unused-vars
-        const benchlingClientSecretValue = benchlingClientSecretParam.valueAsString;
-        // New secrets-only mode parameter values
         const quiltStackArnValue = quiltStackArnParam.valueAsString;
         const benchlingSecretValue = benchlingSecretParam.valueAsString;
-        // In secrets-only mode, bucket name will be resolved at runtime from CloudFormation outputs
-        // For CDK purposes, we still need a bucket reference for IAM permissions
-        // Use a placeholder that will be overridden at runtime
-        this.bucket = useSecretsOnlyMode
-            ? s3.Bucket.fromBucketName(this, "BWBucket", "placeholder-bucket-resolved-at-runtime")
-            : s3.Bucket.fromBucketName(this, "BWBucket", bucketNameValue);
+        const logLevelValue = logLevelParam.valueAsString;
+        const imageTagValue = imageTagParam.valueAsString;
+        // Bucket name will be resolved at runtime from CloudFormation outputs
+        // For CDK purposes, we use a placeholder for IAM permissions
+        this.bucket = s3.Bucket.fromBucketName(this, "BWBucket", "placeholder-bucket-resolved-at-runtime");
         // Get the default VPC or create a new one
         const vpc = ec2.Vpc.fromLookup(this, "DefaultVPC", {
             isDefault: true,
@@ -215,8 +115,8 @@ class BenchlingWebhookStack extends cdk.Stack {
         // (e.g., "0.5.3-20251031T000139Z"), otherwise use package.json version
         const isDevVersion = imageTagValue.match(/^\d+\.\d+\.\d+-\d{8}T\d{6}Z$/);
         const stackVersion = isDevVersion ? imageTagValue : package_json_1.default.version;
-        // Build Fargate Service props based on mode
-        const fargateProps = {
+        // Build Fargate Service props - secrets-only mode
+        this.fargateService = new fargate_service_1.FargateService(this, "FargateService", {
             vpc,
             bucket: this.bucket,
             region: this.region,
@@ -225,34 +125,14 @@ class BenchlingWebhookStack extends cdk.Stack {
             imageTag: imageTagValue,
             stackVersion: stackVersion,
             logLevel: logLevelValue,
-            enableWebhookVerification: enableWebhookVerificationValue,
-        };
-        if (useSecretsOnlyMode) {
-            // Secrets-only mode: Pass only the 2 required parameters
-            fargateProps.quiltStackArn = quiltStackArnValue;
-            fargateProps.benchlingSecret = benchlingSecretValue;
-        }
-        else {
-            // Legacy mode: Pass all individual parameters
-            fargateProps.queueArn = queueArnValue;
-            fargateProps.prefix = prefixValue;
-            fargateProps.pkgKey = pkgKeyValue;
-            fargateProps.benchlingClientId = props.benchlingClientId;
-            fargateProps.benchlingClientSecret = props.benchlingClientSecret;
-            fargateProps.benchlingTenant = benchlingTenantValue;
-            fargateProps.benchlingAppDefinitionId = props.benchlingAppDefinitionId;
-            // Use props.benchlingSecrets (original value) to determine mode
-            // The CloudFormation parameter value (benchlingSecretsValue) is a token that can't be evaluated at synth time
-            fargateProps.benchlingSecrets = props.benchlingSecrets;
-            fargateProps.quiltCatalog = quiltCatalogValue;
-            fargateProps.quiltDatabase = quiltDatabaseValue;
-            fargateProps.webhookAllowList = webhookAllowListValue;
-        }
-        this.fargateService = new fargate_service_1.FargateService(this, "FargateService", fargateProps);
+            // Secrets-only mode: Only 2 required parameters
+            quiltStackArn: quiltStackArnValue,
+            benchlingSecret: benchlingSecretValue,
+        });
         // Create API Gateway that routes to the ALB
         this.api = new alb_api_gateway_1.AlbApiGateway(this, "ApiGateway", {
             loadBalancer: this.fargateService.loadBalancer,
-            webhookAllowList: webhookAllowListValue,
+            webhookAllowList: "", // Empty allow list = allow all IPs
         });
         // Store webhook endpoint for easy access
         this.webhookEndpoint = this.api.api.url;

package/dist/lib/benchling-webhook-stack.js.map

@@ -1 +1 @@
-{"version":3,"file":"benchling-webhook-stack.js","sourceRoot":"","sources":["../../lib/benchling-webhook-stack.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iDAAmC;AACnC,uDAAyC;AACzC,yDAA2C;AAC3C,yDAA2C;AAE3C,uDAAmD;AACnD,uDAAkD;AAClD,qDAAiD;AACjD,mEAA0C;AA6C1C,MAAa,qBAAsB,SAAQ,GAAG,CAAC,KAAK;IAMhD,YACI,KAAgB,EAChB,EAAU,EACV,KAAiC;QAEjC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;QAExB,0CAA0C;QAC1C,MAAM,kBAAkB,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QAE5E,aAAa;QACb,IAAI,kBAAkB,EAAE,CAAC;YACrB,yEAAyE;YACzE,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACJ,8CAA8C;YAC9C,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;gBAChF,MAAM,IAAI,KAAK,CACX,sEAAsE;oBACtE,+DAA+D,CAClE,CAAC;YACN,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAClE,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,8EAA8E,CAAC,CAAC;QAChG,CAAC;QAED,mEAAmE;QACnE,4FAA4F;QAC5F,mEAAmE;QAEnE,iDAAiD;QACjD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,eAAe,EAAE;YACnE,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,8FAA8F;YAC3G,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,EAAE;SACrC,CAAC,CAAC;QAEH,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,iBAAiB,EAAE;YACvE,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,wHAAwH;YACrI,OAAO,EAAE,KAAK,CAAC,eAAe,IAAI,EAAE;SACvC,CAAC,CAAC;QAEH,kDAAkD;QAClD,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,kBAAkB,EAAE;YACzE,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,8FAA8F;YAC3G,OAAO,EAAE,KAAK,CAAC,gBAAgB,IAAI,EAAE;SACxC,CAAC,CAAC;QAEH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,cAAc,EAAE;YACjE,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,qCAAqC;YAClD,OAAO,EAAE,KAAK,CAAC,YAAY,IAAI,oBAAoB;SACtD,CAAC,CAAC;QAEH,uEAAuE;QACvE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE;YAC7D,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,8EAA8E;YAC3F,OAAO,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE;SAClC,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,eAAe,EAAE;YAC5D,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,mEAAmE;YAChF,OAAO,EAAE,KAAK,CAAC,MAAM,IAAI,WAAW;SACvC,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE;YACzD,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,+DAA+D;YAC5E,OAAO,EAAE,eAAe;SAC3B,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE;YACzD,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,kFAAkF;YAC/F,OAAO,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE;SAChC,CAAC,CAAC;QAEH,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,eAAe,EAAE;YACnE,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,8DAA8D;YAC3E,OAAO,EAAE,KAAK,CAAC,aAAa,IAAI,EAAE;SACrC,CAAC,CAAC;QAEH,2EAA2E;QAC3E,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,iBAAiB,EAAE;YACvE,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,wHAAwH;YACrI,OAAO,EAAE,KAAK,CAAC,eAAe;SACjC,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE;YACzD,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,+DAA+D;YAC5E,OAAO,EAAE,KAAK,CAAC,QAAQ,IAAI,MAAM;YACjC,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC;SACnE,CAAC,CAAC;QAEH,MAAM,8BAA8B,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,2BAA2B,EAAE;YAC3F,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,oDAAoD;YACjE,OAAO,EAAE,MAAM;YACf,aAAa,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;SACnC,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE;YACzD,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,0EAA0E;YACvF,OAAO,EAAE,KAAK,CAAC,QAAQ,IAAI,QAAQ;SACtC,CAAC,CAAC;QAEH,8DAA8D;QAC9D,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,kBAAkB,EAAE;YACzE,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,gGAAgG;YAC7G,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,IAAI;SACf,CAAC,CAAC;QAEH,6EAA6E;QAC7E,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,mBAAmB,EAAE;YAC3E,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,iFAAiF;YAC9F,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,IAAI;SACf,CAAC,CAAC;QAEH,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,uBAAuB,EAAE;YACnF,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,qFAAqF;YAClG,OAAO,EAAE,EAAE;YACX,MAAM,EAAE,IAAI;SACf,CAAC,CAAC;QAEH,sDAAsD;QACtD,iDAAiD;QACjD,MAAM,qBAAqB,GAAG,qBAAqB,CAAC,aAAa,CAAC;QAClE,MAAM,iBAAiB,GAAG,iBAAiB,CAAC,aAAa,CAAC;QAC1D,MAAM,eAAe,GAAG,eAAe,CAAC,aAAa,CAAC;QACtD,MAAM,WAAW,GAAG,WAAW,CAAC,aAAa,CAAC;QAC9C,MAAM,WAAW,GAAG,WAAW,CAAC,aAAa,CAAC;QAC9C,MAAM,aAAa,GAAG,aAAa,CAAC,aAAa,CAAC;QAClD,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,aAAa,CAAC;QAC5D,MAAM,oBAAoB,GAAG,oBAAoB,CAAC,aAAa,CAAC;QAChE,MAAM,aAAa,GAAG,aAAa,CAAC,aAAa,CAAC;QAClD,MAAM,8BAA8B,GAAG,8BAA8B,CAAC,aAAa,CAAC;QACpF,MAAM,aAAa,GAAG,aAAa,CAAC,aAAa,CAAC;QAClD,gFAAgF;QAChF,6DAA6D;QAC7D,MAAM,qBAAqB,GAAG,qBAAqB,CAAC,aAAa,CAAC;QAClE,6DAA6D;QAC7D,MAAM,sBAAsB,GAAG,sBAAsB,CAAC,aAAa,CAAC;QACpE,6DAA6D;QAC7D,MAAM,0BAA0B,GAAG,0BAA0B,CAAC,aAAa,CAAC;QAE5E,yCAAyC;QACzC,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,aAAa,CAAC;QAC5D,MAAM,oBAAoB,GAAG,oBAAoB,CAAC,aAAa,CAAC;QAEhE,4FAA4F;QAC5F,yEAAyE;QACzE,uDAAuD;QACvD,IAAI,CAAC,MAAM,GAAG,kBAAkB;YAC5B,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,wCAAwC,CAAC;YACtF,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;QAElE,0CAA0C;QAC1C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,YAAY,EAAE;YAC/C,SAAS,EAAE,IAAI;SAClB,CAAC,CAAC;QAEH,+BAA+B;QAC/B,IAAI,OAAwB,CAAC;QAC7B,IAAI,WAAmB,CAAC;QACxB,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,IAAI,8BAAa,CAAC,IAAI,EAAE,eAAe,EAAE;gBACrD,cAAc,EAAE,KAAK,CAAC,iBAAiB,IAAI,qBAAqB;gBAChE,gBAAgB,EAAE,IAAI;aACzB,CAAC,CAAC;YACH,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC;YAC7B,WAAW,GAAG,GAAG,OAAO,CAAC,aAAa,SAAS,CAAC;QACpD,CAAC;aAAM,CAAC;YACJ,oCAAoC;YACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,iBAAiB,IAAI,qBAAqB,CAAC;YAClE,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,EAAE,uBAAuB,EAAE,QAAQ,CAAC,CAAC;YACrF,WAAW,GAAG,GAAG,IAAI,CAAC,OAAO,YAAY,IAAI,CAAC,MAAM,kBAAkB,QAAQ,SAAS,CAAC;QAC5F,CAAC;QAED,6BAA6B;QAC7B,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACzE,MAAM,YAAY,GAAG,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,sBAAW,CAAC,OAAO,CAAC;QAExE,4CAA4C;QAC5C,MAAM,YAAY,GAAQ;YACtB,GAAG;YACH,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,aAAa,EAAE,OAAO;YACtB,QAAQ,EAAE,aAAa;YACvB,YAAY,EAAE,YAAY;YAC1B,QAAQ,EAAE,aAAa;YACvB,yBAAyB,EAAE,8BAA8B;SAC5D,CAAC;QAEF,IAAI,kBAAkB,EAAE,CAAC;YACrB,yDAAyD;YACzD,YAAY,CAAC,aAAa,GAAG,kBAAkB,CAAC;YAChD,YAAY,CAAC,eAAe,GAAG,oBAAoB,CAAC;QACxD,CAAC;aAAM,CAAC;YACJ,8CAA8C;YAC9C,YAAY,CAAC,QAAQ,GAAG,aAAa,CAAC;YACtC,YAAY,CAAC,MAAM,GAAG,WAAW,CAAC;YAClC,YAAY,CAAC,MAAM,GAAG,WAAW,CAAC;YAClC,YAAY,CAAC,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAC;YACzD,YAAY,CAAC,qBAAqB,GAAG,KAAK,CAAC,qBAAqB,CAAC;YACjE,YAAY,CAAC,eAAe,GAAG,oBAAoB,CAAC;YACpD,YAAY,CAAC,wBAAwB,GAAG,KAAK,CAAC,wBAAwB,CAAC;YACvE,gEAAgE;YAChE,8GAA8G;YAC9G,YAAY,CAAC,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAC;YACvD,YAAY,CAAC,YAAY,GAAG,iBAAiB,CAAC;YAC9C,YAAY,CAAC,aAAa,GAAG,kBAAkB,CAAC;YAChD,YAAY,CAAC,gBAAgB,GAAG,qBAAqB,CAAC;QAC1D,CAAC;QAED,IAAI,CAAC,cAAc,GAAG,IAAI,gCAAc,CAAC,IAAI,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;QAE/E,4CAA4C;QAC5C,IAAI,CAAC,GAAG,GAAG,IAAI,+BAAa,CAAC,IAAI,EAAE,YAAY,EAAE;YAC7C,YAAY,EAAE,IAAI,CAAC,cAAc,CAAC,YAAY;YAC9C,gBAAgB,EAAE,qBAAqB;SAC1C,CAAC,CAAC;QAEH,yCAAyC;QACzC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC;QAExC,4CAA4C;QAC5C,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,iBAAiB,EAAE;YACvC,KAAK,EAAE,IAAI,CAAC,eAAe;YAC3B,WAAW,EAAE,gEAAgE;SAChF,CAAC,CAAC;QAEH,kCAAkC;QAClC,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,gBAAgB,EAAE;YACtC,KAAK,EAAE,WAAW;YAClB,WAAW,EAAE,sCAAsC;SACtD,CAAC,CAAC;QAEH,6BAA6B;QAC7B,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,cAAc,EAAE;YACpC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,sBAAW,CAAC,OAAO;YAChE,WAAW,EAAE,eAAe;SAC/B,CAAC,CAAC;QAEH,+BAA+B;QAC/B,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,aAAa,EAAE;YACnC,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,YAAY;YAChD,WAAW,EAAE,6CAA6C;SAC7D,CAAC,CAAC;QAEH,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,oBAAoB,EAAE;YAC1C,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY;YACrC,WAAW,EAAE,kDAAkD;SAClE,CAAC,CAAC;IACP,CAAC;CAGJ;AAzRD,sDAyRC"}
+{"version":3,"file":"benchling-webhook-stack.js","sourceRoot":"","sources":["../../lib/benchling-webhook-stack.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,iDAAmC;AACnC,uDAAyC;AACzC,yDAA2C;AAC3C,yDAA2C;AAE3C,uDAAmD;AACnD,uDAAkD;AAClD,qDAAiD;AACjD,mEAA0C;AAyB1C,MAAa,qBAAsB,SAAQ,GAAG,CAAC,KAAK;IAMhD,YACI,KAAgB,EAChB,EAAU,EACV,KAAiC;QAEjC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;QAExB,iDAAiD;QACjD,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CACX,8CAA8C;gBAC9C,+CAA+C;gBAC/C,sDAAsD;gBACtD,gEAAgE,CACnE,CAAC;QACN,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QAEnD,mEAAmE;QACnE,6DAA6D;QAE7D,qDAAqD;QACrD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,eAAe,EAAE;YACnE,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,gEAAgE;YAC7E,OAAO,EAAE,KAAK,CAAC,aAAa;SAC/B,CAAC,CAAC;QAEH,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,iBAAiB,EAAE;YACvE,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,+DAA+D;YAC5E,OAAO,EAAE,KAAK,CAAC,eAAe;SACjC,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE;YACzD,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,+DAA+D;YAC5E,OAAO,EAAE,KAAK,CAAC,QAAQ,IAAI,MAAM;YACjC,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC;SACnE,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE;YACzD,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,0EAA0E;YACvF,OAAO,EAAE,KAAK,CAAC,QAAQ,IAAI,QAAQ;SACtC,CAAC,CAAC;QAEH,sDAAsD;QACtD,iDAAiD;QACjD,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,aAAa,CAAC;QAC5D,MAAM,oBAAoB,GAAG,oBAAoB,CAAC,aAAa,CAAC;QAChE,MAAM,aAAa,GAAG,aAAa,CAAC,aAAa,CAAC;QAClD,MAAM,aAAa,GAAG,aAAa,CAAC,aAAa,CAAC;QAElD,sEAAsE;QACtE,6DAA6D;QAC7D,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,wCAAwC,CAAC,CAAC;QAEnG,0CAA0C;QAC1C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,YAAY,EAAE;YAC/C,SAAS,EAAE,IAAI;SAClB,CAAC,CAAC;QAEH,+BAA+B;QAC/B,IAAI,OAAwB,CAAC;QAC7B,IAAI,WAAmB,CAAC;QACxB,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,IAAI,8BAAa,CAAC,IAAI,EAAE,eAAe,EAAE;gBACrD,cAAc,EAAE,KAAK,CAAC,iBAAiB,IAAI,qBAAqB;gBAChE,gBAAgB,EAAE,IAAI;aACzB,CAAC,CAAC;YACH,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC;YAC7B,WAAW,GAAG,GAAG,OAAO,CAAC,aAAa,SAAS,CAAC;QACpD,CAAC;aAAM,CAAC;YACJ,oCAAoC;YACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,iBAAiB,IAAI,qBAAqB,CAAC;YAClE,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,EAAE,uBAAuB,EAAE,QAAQ,CAAC,CAAC;YACrF,WAAW,GAAG,GAAG,IAAI,CAAC,OAAO,YAAY,IAAI,CAAC,MAAM,kBAAkB,QAAQ,SAAS,CAAC;QAC5F,CAAC;QAED,6BAA6B;QAC7B,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACzE,MAAM,YAAY,GAAG,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,sBAAW,CAAC,OAAO,CAAC;QAExE,kDAAkD;QAClD,IAAI,CAAC,cAAc,GAAG,IAAI,gCAAc,CAAC,IAAI,EAAE,gBAAgB,EAAE;YAC7D,GAAG;YACH,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,aAAa,EAAE,OAAO;YACtB,QAAQ,EAAE,aAAa;YACvB,YAAY,EAAE,YAAY;YAC1B,QAAQ,EAAE,aAAa;YACvB,gDAAgD;YAChD,aAAa,EAAE,kBAAkB;YACjC,eAAe,EAAE,oBAAoB;SACxC,CAAC,CAAC;QAEH,4CAA4C;QAC5C,IAAI,CAAC,GAAG,GAAG,IAAI,+BAAa,CAAC,IAAI,EAAE,YAAY,EAAE;YAC7C,YAAY,EAAE,IAAI,CAAC,cAAc,CAAC,YAAY;YAC9C,gBAAgB,EAAE,EAAE,EAAE,mCAAmC;SAC5D,CAAC,CAAC;QAEH,yCAAyC;QACzC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC;QAExC,4CAA4C;QAC5C,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,iBAAiB,EAAE;YACvC,KAAK,EAAE,IAAI,CAAC,eAAe;YAC3B,WAAW,EAAE,gEAAgE;SAChF,CAAC,CAAC;QAEH,kCAAkC;QAClC,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,gBAAgB,EAAE;YACtC,KAAK,EAAE,WAAW;YAClB,WAAW,EAAE,sCAAsC;SACtD,CAAC,CAAC;QAEH,6BAA6B;QAC7B,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,cAAc,EAAE;YACpC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,sBAAW,CAAC,OAAO;YAChE,WAAW,EAAE,eAAe;SAC/B,CAAC,CAAC;QAEH,+BAA+B;QAC/B,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,aAAa,EAAE;YACnC,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,YAAY;YAChD,WAAW,EAAE,6CAA6C;SAC7D,CAAC,CAAC;QAEH,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,oBAAoB,EAAE;YAC1C,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY;YACrC,WAAW,EAAE,kDAAkD;SAClE,CAAC,CAAC;IACP,CAAC;CAGJ;AAnJD,sDAmJC"}