@the-ai-company/cbio-node-runtime 0.39.0 → 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (113) hide show
  1. package/README.md +116 -54
  2. package/dist/clients/agent/client.d.ts +9 -0
  3. package/dist/clients/agent/client.js +72 -0
  4. package/dist/clients/agent/client.js.map +1 -0
  5. package/dist/clients/agent/contracts.d.ts +34 -0
  6. package/dist/clients/agent/contracts.js +2 -0
  7. package/dist/clients/agent/contracts.js.map +1 -0
  8. package/dist/clients/agent/index.d.ts +3 -0
  9. package/dist/clients/agent/index.js +2 -0
  10. package/dist/clients/agent/index.js.map +1 -0
  11. package/dist/clients/owner/client.d.ts +18 -0
  12. package/dist/clients/owner/client.js +169 -0
  13. package/dist/clients/owner/client.js.map +1 -0
  14. package/dist/clients/owner/contracts.d.ts +34 -0
  15. package/dist/clients/owner/contracts.js +2 -0
  16. package/dist/clients/owner/contracts.js.map +1 -0
  17. package/dist/clients/owner/index.d.ts +3 -0
  18. package/dist/clients/owner/index.js +2 -0
  19. package/dist/clients/owner/index.js.map +1 -0
  20. package/dist/runtime/index.d.ts +8 -10
  21. package/dist/runtime/index.js +8 -7
  22. package/dist/runtime/index.js.map +1 -1
  23. package/dist/storage/fs.d.ts +1 -0
  24. package/dist/storage/fs.js +28 -0
  25. package/dist/storage/fs.js.map +1 -1
  26. package/dist/storage/memory.d.ts +1 -0
  27. package/dist/storage/memory.js +20 -0
  28. package/dist/storage/memory.js.map +1 -1
  29. package/dist/storage/provider.d.ts +2 -0
  30. package/dist/vault-core/contracts.d.ts +230 -0
  31. package/dist/vault-core/contracts.js +2 -0
  32. package/dist/vault-core/contracts.js.map +1 -0
  33. package/dist/vault-core/core.d.ts +21 -0
  34. package/dist/vault-core/core.js +335 -0
  35. package/dist/vault-core/core.js.map +1 -0
  36. package/dist/vault-core/defaults.d.ts +141 -0
  37. package/dist/vault-core/defaults.js +602 -0
  38. package/dist/vault-core/defaults.js.map +1 -0
  39. package/dist/vault-core/errors.d.ts +4 -0
  40. package/dist/vault-core/errors.js +9 -0
  41. package/dist/vault-core/errors.js.map +1 -0
  42. package/dist/vault-core/index.d.ts +6 -0
  43. package/dist/vault-core/index.js +5 -0
  44. package/dist/vault-core/index.js.map +1 -0
  45. package/dist/vault-core/persistence.d.ts +87 -0
  46. package/dist/vault-core/persistence.js +309 -0
  47. package/dist/vault-core/persistence.js.map +1 -0
  48. package/dist/vault-core/ports.d.ts +101 -0
  49. package/dist/vault-core/ports.js +2 -0
  50. package/dist/vault-core/ports.js.map +1 -0
  51. package/dist/vault-ingress/defaults.d.ts +14 -0
  52. package/dist/vault-ingress/defaults.js +41 -0
  53. package/dist/vault-ingress/defaults.js.map +1 -0
  54. package/dist/vault-ingress/flow-factories.d.ts +24 -0
  55. package/dist/vault-ingress/flow-factories.js +48 -0
  56. package/dist/vault-ingress/flow-factories.js.map +1 -0
  57. package/dist/vault-ingress/index.d.ts +81 -0
  58. package/dist/vault-ingress/index.js +357 -0
  59. package/dist/vault-ingress/index.js.map +1 -0
  60. package/docs/ARCHITECTURE.md +44 -76
  61. package/docs/REFERENCE.md +217 -218
  62. package/docs/WORKS_WITH_CUSTOM_FETCH.md +16 -191
  63. package/docs/es/README.md +8 -24
  64. package/docs/fr/README.md +8 -24
  65. package/docs/ja/README.md +8 -24
  66. package/docs/ko/README.md +8 -24
  67. package/docs/pt/README.md +8 -24
  68. package/docs/zh/README.md +21 -7
  69. package/package.json +2 -10
  70. package/dist/agent/agent.d.ts +0 -267
  71. package/dist/agent/agent.js +0 -689
  72. package/dist/agent/agent.js.map +0 -1
  73. package/dist/audit/ActivityLog.d.ts +0 -25
  74. package/dist/audit/ActivityLog.js +0 -71
  75. package/dist/audit/ActivityLog.js.map +0 -1
  76. package/dist/http/authClient.d.ts +0 -26
  77. package/dist/http/authClient.js +0 -132
  78. package/dist/http/authClient.js.map +0 -1
  79. package/dist/http/genericSecretValidator.d.ts +0 -11
  80. package/dist/http/genericSecretValidator.js +0 -42
  81. package/dist/http/genericSecretValidator.js.map +0 -1
  82. package/dist/http/localAuthProxy.d.ts +0 -33
  83. package/dist/http/localAuthProxy.js +0 -93
  84. package/dist/http/localAuthProxy.js.map +0 -1
  85. package/dist/http/localSecretIngress.d.ts +0 -33
  86. package/dist/http/localSecretIngress.js +0 -162
  87. package/dist/http/localSecretIngress.js.map +0 -1
  88. package/dist/http/secretAcquisition.d.ts +0 -54
  89. package/dist/http/secretAcquisition.js +0 -177
  90. package/dist/http/secretAcquisition.js.map +0 -1
  91. package/dist/protocol/childSecretNaming.d.ts +0 -7
  92. package/dist/protocol/childSecretNaming.js +0 -12
  93. package/dist/protocol/childSecretNaming.js.map +0 -1
  94. package/dist/protocol/identity.d.ts +0 -8
  95. package/dist/protocol/identity.js +0 -16
  96. package/dist/protocol/identity.js.map +0 -1
  97. package/dist/sealed/index.d.ts +0 -6
  98. package/dist/sealed/index.js +0 -6
  99. package/dist/sealed/index.js.map +0 -1
  100. package/dist/vault/secretPolicy.d.ts +0 -3
  101. package/dist/vault/secretPolicy.js +0 -14
  102. package/dist/vault/secretPolicy.js.map +0 -1
  103. package/dist/vault/vault.d.ts +0 -100
  104. package/dist/vault/vault.js +0 -603
  105. package/dist/vault/vault.js.map +0 -1
  106. package/docs/TODO-multi-vault.md +0 -29
  107. package/docs/spec/runtime/README.md +0 -44
  108. package/docs/spec/runtime/activity-log.md +0 -71
  109. package/docs/spec/runtime/exposure-surfaces.md +0 -99
  110. package/docs/spec/runtime/managed-agent-record.md +0 -52
  111. package/docs/spec/runtime/merge-rules.md +0 -52
  112. package/docs/spec/runtime/secret-origin-policy.md +0 -46
  113. package/docs/spec/runtime/secret-validation.md +0 -113
@@ -1 +0,0 @@
1
- {"version":3,"file":"agent.js","sourceRoot":"","sources":["../../src/agent/agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAmB,eAAe,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC5G,OAAO,EAAE,SAAS,EAAuC,MAAM,mBAAmB,CAAC;AACnF,OAAO,EAAE,UAAU,EAA6B,MAAM,uBAAuB,CAAC;AAC9E,OAAO,EACL,iBAAiB,GAIlB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,uBAAuB,GAGxB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACtG,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,oBAAoB,EACpB,yBAAyB,EACzB,sBAAsB,GAKvB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGhE,MAAM,cAAc,GAAG,IAAI,OAAO,EAA2B,CAAC;AAW9D,SAAS,+BAA+B,CAAC,MAA0C;IACjF,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;IAC7C,IAAI,CAAC,cAAc,IAAI,OAAO,cAAc,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvE,MAAM,YAAY,GAAI,cAA6C,CAAC,YAAY,CAAC;IACjF,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACtF,CAAC;IACD,OAAO,YAAsC,CAAC;AAChD,CAAC;AA2CD,SAAS,kBAAkB,CAAC,WAAmB,EAAE,SAAiB;IAChE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC7C,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/C,OAAO,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,iBAAiB,CAAC,WAAmB,EAAE,SAAiB,EAAE,SAA+B;IAChG,OAAO,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAgB,EAAE,UAAkB;IAC7D,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,gBAAgB,UAAU,uBAAuB,CAAC,CAAC;IACjH,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,2BAA2B,CAClC,KAAgB,EAChB,UAAsB,EACtB,UAAkB;IAElB,OAAO;QACL,aAAa,CAAC,GAAW,EAAE,OAA8B;YACvD,OAAO,UAAU,CAAC,aAAa,CAAC,UAAU,EAAE,GAAG,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,SAAiB;YAC7B,OAAO,kBAAkB,CAAC,iBAAiB,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,SAAS,CAAC,CAAC;QAC7E,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,OAA8C;YAC3E,OAAO,iBAAiB,CAAC,iBAAiB,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,QAAQ,CAAC,CAAC;QAC5G,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,KAAgB,EAChB,MAAkC,EAClC,UAAkB,EAClB,OAAgB,EAChB,KAAc;IAEd,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,sBAAsB,CAAC;YACjC,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;YACd,MAAM;YACN,UAAU;YACV,GAAG,EAAE,iBAAiB,MAAM,EAAE;YAC9B,MAAM,EAAE,MAAM;YACd,OAAO;YACP,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5B,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,qFAAqF;IACvF,CAAC;AACH,CAAC;AAaD,MAAM,6BAA6B,GAAwB,IAAI,GAAG,CAAuB;IACvF,YAAY;IACZ,aAAa;IACb,eAAe;IACf,eAAe;IACf,aAAa;IACb,eAAe;CAChB,CAAC,CAAC;AAmBH,SAAS,6BAA6B,CAAC,UAAgC;IACrE,OAAO,UAAU,CAAC;AACpB,CAAC;AAUD;;;;;;GAMG;AACH,MAAM,OAAO,YAAY;IAUL;IACC;IAVH,KAAK,CAAY;IACjB,OAAO,CAAS;IAChB,SAAS,CAAS;IAClC,eAAe,CAAuB;IAErB,WAAW,CAAa;IACxB,kBAAkB,CAAoB;IAEvD,YACkB,MAAc,EACb,MAAiB,EAClC,OAAgB,EAChB,SAAkB;QAHF,WAAM,GAAN,MAAM,CAAQ;QACb,WAAM,GAAN,MAAM,CAAW;QAIlC,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,IAAI,EAAE,CAAC;QAEjC,MAAM,SAAS,GAAG,CAAC,KAAuB,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;QACzF,IAAI,CAAC,WAAW,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACvE,IAAI,CAAC,kBAAkB,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACxE,IAAI,CAAC,KAAK,GAAG,IAAI,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9C,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,mBAAmB,CAAC,cAAmC;QACrD,IAAI,CAAC,yBAAyB,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,uBAAuB,EACzC,wBAAwB,IAAI,CAAC,SAAS,iCAAiC,CACxE,CAAC;QACJ,CAAC;QAED,IAAI,cAAc,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YACvD,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,uBAAuB,EACzC,gEAAgE,CACjE,CAAC;QACJ,CAAC;QAED,IAAI,cAAc,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YACnD,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,uBAAuB,EACzC,4DAA4D,CAC7D,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,eAAe,GAAG,cAAc,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAsB,EAAE,OAA6B;QACrE,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,IAAI,SAAS,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAEzE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,uBAAuB,GAAG,IAAI,CAAC,WAAW,EAAE,OAAO,KAAK,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,GAAG,KAAK,SAAS,CAAC;QAC3G,MAAM,cAAc,GAClB,IAAI,CAAC,WAAW,EAAE,OAAO,KAAK,KAAK;YACjC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,GAAG,iBAAiB,CAAC,CAAC;QACtF,MAAM,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,uBAAuB,CAAC,CAAC;QACjH,IAAI,IAAI,CAAC,cAAc;YAAE,QAAQ,CAAC,mBAAmB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAE3E,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,UAAkB,EAAE,GAAW,EAAE,OAA8B;QACjF,OAAO,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,UAAU,EAAE,GAAG,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,mBAAmB,CAAC,UAAkB;QACpC,OAAO,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,OAAO,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,UAAU;QACd,OAAO,IAAI,CAAC,OAAO,IAAI,iBAAiB,CAAC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,OAAuD;QAEvD,OAAO,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC5B,OAA0D;QAE1D,OAAO,IAAI,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,OAAuC;QACnE,OAAO,uBAAuB,CAAC;YAC7B,GAAG,OAAO;YACV,KAAK,EAAE,IAAI,CAAC,MAAM;SACnB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,UAAkB,EAAE,SAAiB;QACvD,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;YACtE,MAAM,MAAM,GAAG,kBAAkB,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,SAAS,CAAC,CAAC;YACzF,MAAM,wBAAwB,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;YAC/E,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,wBAAwB,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACxI,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,UAAkB,EAAE,SAAiB,EAAE,OAA8C;QACrG,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;YACpE,MAAM,MAAM,GAAG,iBAAiB,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,QAAQ,CAAC,CAAC;YACxH,MAAM,wBAAwB,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;YAC7E,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,wBAAwB,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACtI,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,UAAkB,EAAE,SAA0B;QACjE,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;YACvE,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,2BAA2B,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;YAChH,MAAM,wBAAwB,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;YAChF,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,wBAAwB,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACzI,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,SAAS,CAAC,UAAkB;QAC1B,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;IACvC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,qBAAqB,CAAC,IAAa,EAAE,OAAsC;QAC/E,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAa;QAC9B,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAED;;;;;;;;OAQG;IACH,QAAQ,CAAC,OAAyB;QAChC,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,CAAC;QAC3B,IAAI,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC;QAElC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,wBAAwB,EAAE,CAAC;YACjD,UAAU,GAAG,EAAE,CAAC;YAChB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,eAAe,EAAE,YAAY,IAAI,EAAE,EAAE,CAAC;gBAC3D,UAAU,CAAC,6BAA6B,CAAC,GAA2B,CAAC,CAAC,GAAG,IAAI,CAAC;YAChF,CAAC;YACD,UAAU,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC;YACjC,UAAU,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC;QAClC,CAAC;QAED,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACzH,CAAC;CAEF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,SAAS;IAUF;IACA;IAVlB,WAAW,CAAa;IACxB,kBAAkB,CAAoB;IACtC,YAAY,CAAqB;IACjC,MAAM,CAAY;IAElB,YACE,UAAsB,EACtB,iBAAoC,EACpC,KAAgB,EACA,OAAe,EACf,SAAiB,EACjC,WAAgC;QAFhB,YAAO,GAAP,OAAO,CAAQ;QACf,cAAS,GAAT,SAAS,CAAQ;QAGjC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;QAC9B,IAAI,CAAC,kBAAkB,GAAG,iBAAiB,CAAC;QAC5C,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,uFAAuF;QACvF,IAAI,CAAC,YAAY,GAAG,WAAW,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACjF,CAAC;IAED;;OAEG;IACH,IAAI,WAAW;QACb,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACjD,CAAC;IAEO,gBAAgB,CAAC,UAAiC;QACxD,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,iBAAiB,EACnC,+BAA+B,UAAU,eAAe,CACzD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,UAAkB,EAAE,GAAW,EAAE,OAA8B;QACjF,2CAA2C;QAC3C,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,UAAU,EAAE,GAAG,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,mBAAmB,CAAC,UAAkB;QACpC,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,UAAU;QACd,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,OAAuD;QAEvD,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC5B,OAA0D;QAE1D,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,OAAuC;QACnE,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC;QACvC,OAAO,uBAAuB,CAAC;YAC7B,GAAG,OAAO;YACV,KAAK,EAAE,IAAI,CAAC,MAAM;SACnB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,UAAkB,EAAE,SAAiB;QACvD,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;YACtE,MAAM,MAAM,GAAG,kBAAkB,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,SAAS,CAAC,CAAC;YACzF,MAAM,wBAAwB,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;YAC/E,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,wBAAwB,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACxI,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,UAAkB,EAAE,SAAiB,EAAE,OAA8C;QACrG,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;YACpE,MAAM,MAAM,GAAG,iBAAiB,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,QAAQ,CAAC,CAAC;YACxH,MAAM,wBAAwB,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;YAC7E,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,wBAAwB,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACtI,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,UAAkB,EAAE,SAA0B;QACjE,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;YACvE,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,2BAA2B,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;YAChH,MAAM,wBAAwB,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;YAChF,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,wBAAwB,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACzI,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,SAAS,CAAC,UAAkB;QAC1B,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACvD,CAAC;IAED,eAAe;QACb,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC,kBAAkB,CAAC,eAAe,EAAE,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,UAAiC;QACnC,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC;CACF;AAqDD;;;;GAIG;AACH,MAAM,mBAAmB;IAEF;IACA;IAFrB,YACqB,SAAuB,EACvB,MAAiB;QADjB,cAAS,GAAT,SAAS,CAAc;QACvB,WAAM,GAAN,MAAM,CAAW;IACnC,CAAC;IAEM,SAAS,CAAC,UAAkB;QACpC,OAAO,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,UAAkB,EAAE,WAAmB,EAAE,OAAsB;QAC7E,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC;IAES,sBAAsB,CAAC,SAAiB;QAChD,MAAM,UAAU,GAAG,0BAA0B,CAAC,SAAS,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAuB,CAAC;YACxD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAES,0BAA0B,CAAC,SAAiB;QACpD,MAAM,aAAa,GAAG,mBAAmB,SAAS,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAEzB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAqB,CAAC;YACtD,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC;YACjD,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,SAAS,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAC;YACvE,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC;YACnE,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,uBAAuB;gBAAE,OAAO,IAAI,CAAC;YAChE,IAAI,MAAM,CAAC,MAAM,CAAC,gBAAgB,KAAK,iBAAiB,CAAC,SAAS,CAAC;gBAAE,OAAO,IAAI,CAAC;YAEjF,MAAM,MAAM,GAAG,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,gBAAgB,GAAG,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,CAAC;YACpE,IAAI,gBAAgB,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,KAAK,gBAAgB;gBAAE,OAAO,IAAI,CAAC;YAE/F,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAES,sBAAsB,CAAC,SAAiB;QAChD,OAAO,IAAI,CAAC,0BAA0B,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC;IAC7D,CAAC;IAES,6BAA6B,CAAC,SAAiB;QACvD,IAAI,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,iBAAiB,EACnC,kBAAkB,SAAS,0CAA0C,CACtE,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED,MAAM,OAAO,cAAc;IAEN;IACA;IAFnB,YACmB,SAAuB,EACvB,MAAiB;QADjB,cAAS,GAAT,SAAS,CAAc;QACvB,WAAM,GAAN,MAAM,CAAW;IACjC,CAAC;IAEJ,SAAS,CAAC,UAAkB;QAC1B,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,UAAkB;QACnC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,UAAkB,EAAE,cAAiC;QACjF,MAAM,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,sBAAsB;QAC1B,OAAO,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,SAAS,CACb,aAA2B,EAC3B,OAAyD;QAEzD,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,uBAAuB,EACzC,iEAAiE,CAClE,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,GAAW;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAED,kBAAkB,CAAC,GAAW,EAAE,UAAkB;QAChD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,SAAS;QACb,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,UAAkB;QAClC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC5D,CAAC;CACF;AAED,MAAM,OAAO,qBAAsB,SAAQ,mBAAmB;IAC5D,2BAA2B,CAAC,SAAiB;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;QAE5D,IAAI,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;QACjD,CAAC;QAED,MAAM,YAAY,GAAG,+BAA+B,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;QACjD,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,SAAiB,EAAE,MAAe;QACzD,MAAM,UAAU,GAAG,0BAA0B,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,gBAAgB,EAClC,kCAAkC,SAAS,4BAA4B,CACxE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,YAAY,WAAW,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,2BAA2B,EAC7C,+DAA+D,CAChE,CAAC;QACJ,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;QAC5D,MAAM,aAAa,GAAG,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAC7D,MAAM,cAAc,GAAG,aAAa,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,IAAI,CAAC,CAAC;QAC9E,MAAM,kBAAkB,GAA6B;YACnD,aAAa,EAAE,MAAM;YACrB,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,iBAAiB,CAAC,eAAe,CAAC;YAC1C,MAAM,EAAE;gBACN,IAAI,EAAE,uBAAuB;gBAC7B,gBAAgB,EAAE,iBAAiB,CAAC,SAAS,CAAC;gBAC9C,QAAQ,EAAE,cAAc;aACzB;YACD,UAAU,EAAE;gBACV,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACpC,MAAM;aACP;SACF,CAAC;QAEF,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,EAAE,EAAE,kBAAkB,CAAC,CAAC;QAE5G,8BAA8B;QAC9B,MAAM,aAAa,GAAG,mBAAmB,SAAS,EAAE,CAAC;QACrD,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,OAAkC;QACxD,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,oBAAoB,EAAE,CAAC;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,0BAA0B,CAAC,SAAS,CAAC,CAAC;QAE7E,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,YAAY,WAAW,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,2BAA2B,EAC7C,yGAAyG,CAC1G,CAAC;QACJ,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;QAE5D,MAAM,gBAAgB,GAAgC;YACpD,aAAa,EAAE,MAAM;YACrB,IAAI,EAAE,uBAAuB;YAC7B,KAAK,EAAE,iBAAiB,CAAC,SAAS,CAAC;YACnC,SAAS,EAAE,iBAAiB,CAAC,eAAe,CAAC;YAC7C,QAAQ,EAAE;gBACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,QAAQ,EAAE,CAAC;aACZ;YACD,YAAY,EAAE,KAAK,CAAC,kBAAkB;SACvC,CAAC;QAEF,MAAM,cAAc,GAAG,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,EAAE,EAAE,gBAAgB,CAAC,CAAC;QAE3G,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,YAAY,CAAC,SAAS,CAAC,CAAC;QACjE,MAAM,MAAM,GAAuB;YACjC,OAAO;YACP,SAAS;YACT,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,cAAc;YACd,UAAU;SACX,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAExD,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,IAAI,CAC3C,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,EAC1C;YACE,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,UAAU;YACV,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,cAAc;SACf,CACF,CAAC;QACF,OAAO;YACL,OAAO;YACP,SAAS;YACT,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,kBAAkB,EAAE,CAAC;SAC1E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,SAAiB,EAAE,OAAiC;QACzE,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,CAAC;QAC3B,IAAI,CAAC,6BAA6B,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,0BAA0B,CAAC,SAAS,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,gBAAgB,EAClC,2BAA2B,SAAS,8CAA8C,CACnF,CAAC;QACJ,CAAC;QAED,IAAI,MAAmC,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAgC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,uBAAuB,EACzC,2BAA2B,SAAS,oCAAoC,CACzE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YACtE,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,uBAAuB,EACzC,2BAA2B,SAAS,oCAAoC,CACzE,CAAC;QACJ,CAAC;QAED,4BAA4B;QAC5B,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,uBAAuB,EACzC,2BAA2B,SAAS,iCAAiC,CACtE,CAAC;QACJ,CAAC;QAED,MAAM,gBAAgB,GAAG,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC5D,MAAM,cAAc,GAAG,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;QAC/D,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;QAC3D,MAAM,eAAe,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,CAAC;QAChE,MAAM,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC;QAC5D,MAAM,wBAAwB,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,UAAU,CAAC;QAC7E,MAAM,sBAAsB,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,QAAQ,CAAC;QAEzE,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,uBAAuB,EACzC,2BAA2B,SAAS,yDAAyD,CAC9F,CAAC;QACJ,CAAC;QAED,IAAI,gBAAgB,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;YAC1C,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,uBAAuB,EACzC,2BAA2B,SAAS,6CAA6C,CAClF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,cAAc,CAAC,KAAK,cAAc,EAAE,CAAC;YAC1D,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,uBAAuB,EACzC,2BAA2B,SAAS,gCAAgC,CACrE,CAAC;QACJ,CAAC;QAED,IAAI,eAAe,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;YACzC,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,uBAAuB,EACzC,2BAA2B,SAAS,8DAA8D,CACnG,CAAC;QACJ,CAAC;QAED,IAAI,aAAa,KAAK,cAAc,EAAE,CAAC;YACrC,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,uBAAuB,EACzC,2BAA2B,SAAS,0DAA0D,CAC/F,CAAC;QACJ,CAAC;QAED,IAAI,wBAAwB,KAAK,kBAAkB,EAAE,CAAC;YACpD,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,uBAAuB,EACzC,2BAA2B,SAAS,sEAAsE,CAC3G,CAAC;QACJ,CAAC;QAED,IAAI,sBAAsB,KAAK,gBAAgB,EAAE,CAAC;YAChD,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,uBAAuB,EACzC,2BAA2B,SAAS,oEAAoE,CACzG,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE,UAAU,IAAI,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnG,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,IAAI,CAC3C,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,EAC9D;YACE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO;YAC9B,UAAU;YACV,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW;YACtC,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CACF,CAAC;QACF,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC;YAC9D,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,kBAAkB,EAAE,CAAC;SAChF,CAAC;IACJ,CAAC;CACF;AAED,MAAM,OAAO,sBAAsB;IAEd;IACA;IAFnB,YACmB,SAAuB,EACvB,MAAiB;QADjB,cAAS,GAAT,SAAS,CAAc;QACvB,WAAM,GAAN,MAAM,CAAW;IACjC,CAAC;IAEJ;;;OAGG;IACH,KAAK,CAAC,qBAAqB,CAAC,IAAa,EAAE,OAAsC;QAC/E,IAAI,CAAC,IAAI,CAAC,UAAU;YAClB,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,mCAAmC,EACrD,qCAAqC,CACtC,CAAC;QAEJ,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,YAAY,WAAW,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,2BAA2B,EAC7C,8GAA8G,CAC/G,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,0BAA0B,CAAC,GAAG,CAAC,CAAC;QAEnD,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;QAC5D,MAAM,gBAAgB,GAAgC;YACpD,aAAa,EAAE,MAAM;YACrB,IAAI,EAAE,uBAAuB;YAC7B,KAAK,EAAE,iBAAiB,CAAC,GAAG,CAAC;YAC7B,SAAS,EAAE,iBAAiB,CAAC,eAAe,CAAC;YAC7C,QAAQ,EAAE;gBACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,QAAQ,EAAE,CAAC;aACZ;YACD,YAAY,EAAE,OAAO,EAAE,kBAAkB;SAC1C,CAAC;QAEF,MAAM,cAAc,GAAG,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,EAAE,EAAE,gBAAgB,CAAC,CAAC;QAE3G,MAAM,MAAM,GAAG;YACb,OAAO,EAAE,iBAAiB,CAAC,GAAG,CAAC;YAC/B,SAAS,EAAE,GAAG;YACd,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,cAAc;SACf,CAAC;QAEF,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACxD,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,OAAO,SAAS;IACJ,KAAK,CAAiB;IACtB,aAAa,CAAwB;IACrC,QAAQ,CAAyB;IAEjD,YAAY,QAAsB,EAAE,KAAgB;QAClD,IAAI,CAAC,KAAK,GAAG,IAAI,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,aAAa,GAAG,IAAI,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAChE,IAAI,CAAC,QAAQ,GAAG,IAAI,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9D,CAAC;CACF"}
@@ -1,25 +0,0 @@
1
- /**
2
- * ActivityLog
3
- *
4
- * Audit log for fetchWithAuth/fetchJsonAndAddSecret/fetchJsonAndUpdateSecret. Separate from vault.
5
- * No sensitive data. For dashboard/UI display. Optional, can be disabled.
6
- * First line is metadata (_meta) for consumer identification.
7
- */
8
- import type { IStorageProvider } from '../storage/provider.js';
9
- export interface ActivityLogMetadata {
10
- v: number;
11
- agentId: string;
12
- storageKey: string;
13
- }
14
- export interface ActivityLogEntry {
15
- ts: number;
16
- action: 'fetchWithAuth' | 'fetchJsonAndAddSecret' | 'fetchJsonAndUpdateSecret' | 'compareSecret' | 'proveSecret' | 'validateSecret';
17
- secretName: string;
18
- url: string;
19
- method: string;
20
- success: boolean;
21
- error?: string;
22
- }
23
- export declare function appendActivityLog(storage: IStorageProvider, key: string, entry: ActivityLogEntry, metadata?: ActivityLogMetadata): Promise<void>;
24
- export declare function readActivityLog(storage: IStorageProvider, key: string): Promise<ActivityLogEntry[]>;
25
- export declare function readActivityLogMetadata(storage: IStorageProvider, key: string): Promise<ActivityLogMetadata | null>;
@@ -1,71 +0,0 @@
1
- /**
2
- * ActivityLog
3
- *
4
- * Audit log for fetchWithAuth/fetchJsonAndAddSecret/fetchJsonAndUpdateSecret. Separate from vault.
5
- * No sensitive data. For dashboard/UI display. Optional, can be disabled.
6
- * First line is metadata (_meta) for consumer identification.
7
- */
8
- const NEWLINE = '\n';
9
- export async function appendActivityLog(storage, key, entry, metadata) {
10
- let existing = await storage.read(key);
11
- if ((!existing || existing.length === 0) && metadata) {
12
- const metaLine = JSON.stringify({ _meta: metadata }) + NEWLINE;
13
- existing = Buffer.from(metaLine, 'utf8');
14
- }
15
- const line = JSON.stringify(entry) + NEWLINE;
16
- const next = existing ? Buffer.concat([existing, Buffer.from(line, 'utf8')]) : Buffer.from(line, 'utf8');
17
- await storage.write(key, next);
18
- }
19
- export async function readActivityLog(storage, key) {
20
- const buf = await storage.read(key);
21
- if (!buf || buf.length === 0)
22
- return [];
23
- const text = buf.toString('utf8');
24
- const lines = text.split(NEWLINE).filter(Boolean);
25
- return lines
26
- .map((l) => {
27
- const raw = JSON.parse(l);
28
- if (raw._meta)
29
- return null;
30
- const secretName = raw.secretName ?? raw.alias;
31
- if (typeof raw.ts !== 'number')
32
- return null;
33
- if (raw.action !== 'fetchWithAuth' &&
34
- raw.action !== 'fetchJsonAndAddSecret' &&
35
- raw.action !== 'fetchJsonAndUpdateSecret' &&
36
- raw.action !== 'compareSecret' &&
37
- raw.action !== 'proveSecret' &&
38
- raw.action !== 'validateSecret')
39
- return null;
40
- if (typeof secretName !== 'string')
41
- return null;
42
- if (typeof raw.url !== 'string')
43
- return null;
44
- if (typeof raw.method !== 'string')
45
- return null;
46
- if (typeof raw.success !== 'boolean')
47
- return null;
48
- return {
49
- ts: raw.ts,
50
- action: raw.action,
51
- secretName,
52
- url: raw.url,
53
- method: raw.method,
54
- success: raw.success,
55
- ...(typeof raw.error === 'string' ? { error: raw.error } : {}),
56
- };
57
- })
58
- .filter((e) => e !== null);
59
- }
60
- export async function readActivityLogMetadata(storage, key) {
61
- const buf = await storage.read(key);
62
- if (!buf || buf.length === 0)
63
- return null;
64
- const firstLine = buf.toString('utf8').split(NEWLINE)[0];
65
- if (!firstLine)
66
- return null;
67
- const raw = JSON.parse(firstLine);
68
- const meta = raw._meta;
69
- return meta && typeof meta.agentId === 'string' && typeof meta.storageKey === 'string' ? meta : null;
70
- }
71
- //# sourceMappingURL=ActivityLog.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"ActivityLog.js","sourceRoot":"","sources":["../../src/audit/ActivityLog.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA+BH,MAAM,OAAO,GAAG,IAAI,CAAC;AAErB,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACnC,OAAyB,EACzB,GAAW,EACX,KAAuB,EACvB,QAA8B;IAE9B,IAAI,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,GAAG,OAAO,CAAC;QAC/D,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC;IAC7C,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzG,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACjC,OAAyB,EACzB,GAAW;IAEX,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,OAAO,KAAK;SACP,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACP,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAA8C,CAAC;QACvE,IAAI,GAAG,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAC3B,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,KAAK,CAAC;QAC/C,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC5C,IACI,GAAG,CAAC,MAAM,KAAK,eAAe;YAC9B,GAAG,CAAC,MAAM,KAAK,uBAAuB;YACtC,GAAG,CAAC,MAAM,KAAK,0BAA0B;YACzC,GAAG,CAAC,MAAM,KAAK,eAAe;YAC9B,GAAG,CAAC,MAAM,KAAK,aAAa;YAC5B,GAAG,CAAC,MAAM,KAAK,gBAAgB;YACjC,OAAO,IAAI,CAAC;QACd,IAAI,OAAO,UAAU,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAChD,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC7C,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAChD,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAClD,OAAO;YACH,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,UAAU;YACV,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,GAAG,CAAC,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC;IACjC,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,EAAyB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CACzC,OAAyB,EACzB,GAAW;IAEX,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAA4B,CAAC;IAC7D,MAAM,IAAI,GAAG,GAAG,CAAC,KAAwC,CAAC;IAC1D,OAAO,IAAI,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACzG,CAAC"}
@@ -1,26 +0,0 @@
1
- /**
2
- * AuthClient
3
- *
4
- * Runtime HTTP client that uses vault-stored secrets for Authorization.
5
- * Handles fetchWithAuth and createFetchWithAuth. Vault only does storage.
6
- */
7
- import { Signer } from '../protocol/crypto.js';
8
- import type { CbioVault } from '../vault/vault.js';
9
- import type { ActivityLogEntry } from '../audit/ActivityLog.js';
10
- export interface FetchWithAuthOptions extends RequestInit {
11
- authPrefix?: string;
12
- authHeaderName?: string;
13
- withSignature?: boolean;
14
- }
15
- /**
16
- * AuthClient uses vault's secrets for authenticated HTTP requests.
17
- * Secret values never leave the vault; AuthClient reads via vault.getSecret.
18
- */
19
- export declare class AuthClient {
20
- private readonly _vault;
21
- private readonly _signer;
22
- private readonly _appendActivityLog;
23
- constructor(_vault: CbioVault, _signer: Signer | null, _appendActivityLog: (entry: ActivityLogEntry) => Promise<void>);
24
- fetchWithAuth(secretName: string, url: string, options?: FetchWithAuthOptions): Promise<Response>;
25
- createFetchWithAuth(secretName: string): (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
26
- }
@@ -1,132 +0,0 @@
1
- /**
2
- * AuthClient
3
- *
4
- * Runtime HTTP client that uses vault-stored secrets for Authorization.
5
- * Handles fetchWithAuth and createFetchWithAuth. Vault only does storage.
6
- */
7
- import { createHash } from 'node:crypto';
8
- import { IdentityError, IdentityErrorCode } from '../errors.js';
9
- async function hashRequestBody(body) {
10
- if (body == null)
11
- return '';
12
- if (typeof body === 'string') {
13
- return createHash('sha256').update(body).digest('hex');
14
- }
15
- if (body instanceof URLSearchParams) {
16
- return createHash('sha256').update(body.toString()).digest('hex');
17
- }
18
- if (body instanceof ArrayBuffer) {
19
- return createHash('sha256').update(Buffer.from(body)).digest('hex');
20
- }
21
- if (ArrayBuffer.isView(body)) {
22
- return createHash('sha256')
23
- .update(Buffer.from(body.buffer, body.byteOffset, body.byteLength))
24
- .digest('hex');
25
- }
26
- if (typeof Blob !== 'undefined' && body instanceof Blob) {
27
- const bytes = Buffer.from(await body.arrayBuffer());
28
- return createHash('sha256').update(bytes).digest('hex');
29
- }
30
- throw new IdentityError(IdentityErrorCode.UNSUPPORTED_SIGNED_BODY, 'withSignature only supports string, URLSearchParams, Blob, ArrayBuffer, and typed array request bodies.');
31
- }
32
- /**
33
- * AuthClient uses vault's secrets for authenticated HTTP requests.
34
- * Secret values never leave the vault; AuthClient reads via vault.getSecret.
35
- */
36
- export class AuthClient {
37
- _vault;
38
- _signer;
39
- _appendActivityLog;
40
- constructor(_vault, _signer, _appendActivityLog) {
41
- this._vault = _vault;
42
- this._signer = _signer;
43
- this._appendActivityLog = _appendActivityLog;
44
- }
45
- async fetchWithAuth(secretName, url, options = {}) {
46
- const method = options.method ?? 'GET';
47
- const appendFailure = async (error) => {
48
- await this._appendActivityLog({
49
- ts: Date.now(),
50
- action: 'fetchWithAuth',
51
- secretName,
52
- url,
53
- method,
54
- success: false,
55
- error,
56
- });
57
- };
58
- const secretValue = this._vault.getSecret(secretName);
59
- if (!secretValue) {
60
- try {
61
- await appendFailure(`Secret name '${secretName}' not found in vault.`);
62
- }
63
- catch (appendErr) {
64
- throw new IdentityError(IdentityErrorCode.SECRET_NOT_FOUND, `Secret name '${secretName}' not found in vault.`, { cause: appendErr });
65
- }
66
- throw new IdentityError(IdentityErrorCode.SECRET_NOT_FOUND, `Secret name '${secretName}' not found in vault.`);
67
- }
68
- const { authPrefix = 'Bearer ', authHeaderName = 'Authorization', withSignature = false, ...fetchOptions } = options;
69
- const headers = new Headers(fetchOptions.headers || {});
70
- headers.set(authHeaderName, `${authPrefix}${secretValue}`);
71
- if (withSignature && this._signer) {
72
- const timestamp = Date.now().toString();
73
- const methodUpper = (fetchOptions.method ?? 'GET').toUpperCase();
74
- const bodyHash = await hashRequestBody(fetchOptions.body);
75
- const message = `${methodUpper}:${url}:${timestamp}:${bodyHash}`;
76
- const signature = await this._signer.sign(message);
77
- headers.set('X-CBIO-Signature', signature);
78
- headers.set('X-CBIO-Timestamp', timestamp);
79
- }
80
- try {
81
- const response = await fetch(url, {
82
- ...fetchOptions,
83
- headers
84
- });
85
- await this._appendActivityLog({
86
- ts: Date.now(),
87
- action: 'fetchWithAuth',
88
- secretName,
89
- url,
90
- method,
91
- success: true,
92
- });
93
- return response;
94
- }
95
- catch (e) {
96
- try {
97
- await appendFailure(e.message ?? String(e));
98
- }
99
- catch (appendErr) {
100
- const msg = e.message ?? String(e);
101
- if (IdentityError.isIdentityError(e)) {
102
- throw new IdentityError(e.code, msg, { cause: appendErr });
103
- }
104
- throw new Error(msg, { cause: appendErr });
105
- }
106
- throw e;
107
- }
108
- }
109
- createFetchWithAuth(secretName) {
110
- const self = this;
111
- return async function (input, init) {
112
- let url;
113
- let options = {};
114
- if (typeof input === 'string') {
115
- url = input;
116
- }
117
- else if (input instanceof URL) {
118
- url = input.toString();
119
- }
120
- else {
121
- const req = input.clone();
122
- url = req.url;
123
- options = { method: req.method, headers: req.headers, body: req.body };
124
- }
125
- if (init) {
126
- options = { ...options, ...init };
127
- }
128
- return self.fetchWithAuth(secretName, url, options);
129
- };
130
- }
131
- }
132
- //# sourceMappingURL=authClient.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"authClient.js","sourceRoot":"","sources":["../../src/http/authClient.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAUhE,KAAK,UAAU,eAAe,CAAC,IAAiC;IAC5D,IAAI,IAAI,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC;IAC5B,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,IAAI,YAAY,eAAe,EAAE,CAAC;QAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,IAAI,YAAY,WAAW,EAAE,CAAC;QAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC;aACtB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;aAClE,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,YAAY,IAAI,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACpD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,IAAI,aAAa,CACnB,iBAAiB,CAAC,uBAAuB,EACzC,yGAAyG,CAC5G,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,UAAU;IAEE;IACA;IACA;IAHrB,YACqB,MAAiB,EACjB,OAAsB,EACtB,kBAA8D;QAF9D,WAAM,GAAN,MAAM,CAAW;QACjB,YAAO,GAAP,OAAO,CAAe;QACtB,uBAAkB,GAAlB,kBAAkB,CAA4C;IAChF,CAAC;IAEJ,KAAK,CAAC,aAAa,CAAC,UAAkB,EAAE,GAAW,EAAE,UAAgC,EAAE;QACnF,MAAM,MAAM,GAAI,OAAO,CAAC,MAAiB,IAAI,KAAK,CAAC;QACnD,MAAM,aAAa,GAAG,KAAK,EAAE,KAAa,EAAiB,EAAE;YACzD,MAAM,IAAI,CAAC,kBAAkB,CAAC;gBAC1B,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;gBACd,MAAM,EAAE,eAAe;gBACvB,UAAU;gBACV,GAAG;gBACH,MAAM;gBACN,OAAO,EAAE,KAAK;gBACd,KAAK;aACR,CAAC,CAAC;QACP,CAAC,CAAC;QAEF,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,IAAI,CAAC;gBACD,MAAM,aAAa,CAAC,gBAAgB,UAAU,uBAAuB,CAAC,CAAC;YAC3E,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACjB,MAAM,IAAI,aAAa,CACnB,iBAAiB,CAAC,gBAAgB,EAClC,gBAAgB,UAAU,uBAAuB,EACjD,EAAE,KAAK,EAAE,SAAS,EAAE,CACvB,CAAC;YACN,CAAC;YACD,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,gBAAgB,UAAU,uBAAuB,CAAC,CAAC;QACnH,CAAC;QAED,MAAM,EAAE,UAAU,GAAG,SAAS,EAAE,cAAc,GAAG,eAAe,EAAE,aAAa,GAAG,KAAK,EAAE,GAAG,YAAY,EAAE,GAAG,OAAO,CAAC;QACrH,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,YAAY,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,UAAU,GAAG,WAAW,EAAE,CAAC,CAAC;QAE3D,IAAI,aAAa,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAChC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;YACxC,MAAM,WAAW,GAAG,CAAC,YAAY,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YACjE,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAE1D,MAAM,OAAO,GAAG,GAAG,WAAW,IAAI,GAAG,IAAI,SAAS,IAAI,QAAQ,EAAE,CAAC;YACjE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC9B,GAAG,YAAY;gBACf,OAAO;aACV,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,kBAAkB,CAAC;gBAC1B,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;gBACd,MAAM,EAAE,eAAe;gBACvB,UAAU;gBACV,GAAG;gBACH,MAAM;gBACN,OAAO,EAAE,IAAI;aAChB,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC;QACpB,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YACd,IAAI,CAAC;gBACD,MAAM,aAAa,CAAC,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACjB,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;gBACnC,IAAI,aAAa,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnC,MAAM,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC/D,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YAC/C,CAAC;YACD,MAAM,CAAC,CAAC;QACZ,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,UAAkB;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC;QAClB,OAAO,KAAK,WAAW,KAAwB,EAAE,IAAkB;YAC/D,IAAI,GAAW,CAAC;YAChB,IAAI,OAAO,GAAgB,EAAE,CAAC;YAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC5B,GAAG,GAAG,KAAK,CAAC;YAChB,CAAC;iBAAM,IAAI,KAAK,YAAY,GAAG,EAAE,CAAC;gBAC9B,GAAG,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC3B,CAAC;iBAAM,CAAC;gBACJ,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC1B,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;gBACd,OAAO,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3E,CAAC;YACD,IAAI,IAAI,EAAE,CAAC;gBACP,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;YACtC,CAAC;YACD,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC,CAAC;IACN,CAAC;CACJ"}
@@ -1,11 +0,0 @@
1
- import type { SecretValidationResult, SecretValidator } from "../agent/agent.js";
2
- export interface GenericHttpSecretValidatorConfig<TData = unknown> {
3
- url: string;
4
- method?: string;
5
- headers?: Record<string, string>;
6
- body?: unknown;
7
- isValid?: (response: Response, data: TData | undefined) => boolean;
8
- classifyStatus?: (response: Response, data: TData | undefined) => SecretValidationResult;
9
- extractResult?: (response: Response, data: TData | undefined) => Partial<SecretValidationResult>;
10
- }
11
- export declare function genericHttpValidator<TData = unknown>(config: GenericHttpSecretValidatorConfig<TData>): SecretValidator;
@@ -1,42 +0,0 @@
1
- function defaultStatusResult(response) {
2
- if (response.ok) {
3
- return { valid: true, status: "valid" };
4
- }
5
- if (response.status === 401 || response.status === 403) {
6
- return { valid: false, status: "invalid", reason: `http_${response.status}` };
7
- }
8
- return { valid: false, status: "indeterminate", reason: `http_${response.status}` };
9
- }
10
- async function readJsonIfPresent(response) {
11
- const contentType = response.headers.get("content-type") ?? "";
12
- if (!contentType.toLowerCase().includes("application/json")) {
13
- return undefined;
14
- }
15
- return response.json();
16
- }
17
- export function genericHttpValidator(config) {
18
- return {
19
- async validate(handle) {
20
- const options = {
21
- method: config.method ?? "GET",
22
- headers: config.headers,
23
- body: config.body === undefined ? undefined : JSON.stringify(config.body),
24
- };
25
- const response = await handle.fetchWithAuth(config.url, options);
26
- const data = await readJsonIfPresent(response);
27
- if (config.classifyStatus) {
28
- return config.classifyStatus(response, data);
29
- }
30
- const base = defaultStatusResult(response);
31
- const valid = config.isValid ? config.isValid(response, data) : base.valid;
32
- const extracted = config.extractResult?.(response, data) ?? {};
33
- return {
34
- ...base,
35
- ...extracted,
36
- valid,
37
- status: valid ? "valid" : (base.status === "valid" ? "invalid" : base.status),
38
- };
39
- },
40
- };
41
- }
42
- //# sourceMappingURL=genericSecretValidator.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"genericSecretValidator.js","sourceRoot":"","sources":["../../src/http/genericSecretValidator.ts"],"names":[],"mappings":"AAaA,SAAS,mBAAmB,CAAC,QAAkB;IAC7C,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;IAChF,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;AACtF,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAQ,QAAkB;IACxD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC/D,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC5D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,EAAoB,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,MAA+C;IAE/C,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,MAAM;YACnB,MAAM,OAAO,GAAyB;gBACpC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,KAAK;gBAC9B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;aAC1E,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACjE,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAQ,QAAQ,CAAC,CAAC;YAEtD,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC1B,OAAO,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC/C,CAAC;YAED,MAAM,IAAI,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;YAC3E,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/D,OAAO;gBACL,GAAG,IAAI;gBACP,GAAG,SAAS;gBACZ,KAAK;gBACL,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;aAC9E,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}
@@ -1,33 +0,0 @@
1
- import type { FetchWithAuthOptions } from "./authClient.js";
2
- export interface FetchWithAuthLike {
3
- fetchWithAuth(secretName: string, url: string, options?: FetchWithAuthOptions): Promise<Response>;
4
- }
5
- /**
6
- * Configuration for a local proxy that forwards requests to one upstream API
7
- * while injecting a vault-backed secret into each outbound request.
8
- */
9
- export interface LocalAuthProxyOptions {
10
- /** Trusted handle used to send authenticated requests upstream. */
11
- authHandle: FetchWithAuthLike;
12
- /** Vault secret name to inject into the outbound auth header. */
13
- secretName: string;
14
- /** Upstream API base URL, such as `https://api.openai.com`. */
15
- upstreamBaseUrl: string;
16
- /** HTTP header name for auth. Defaults to `Authorization`. */
17
- authHeaderName?: string;
18
- /** Prefix prepended before the secret value. Defaults to `Bearer `. */
19
- authPrefix?: string;
20
- /** Local bind host for the proxy server. Defaults to `127.0.0.1`. */
21
- host?: string;
22
- /** Local bind port. Defaults to `0` for an ephemeral port. */
23
- port?: number;
24
- }
25
- export interface LocalAuthProxyHandle {
26
- readonly secretName: string;
27
- readonly upstreamBaseUrl: string;
28
- readonly host: string;
29
- readonly port: number;
30
- readonly baseUrl: string;
31
- close(): Promise<void>;
32
- }
33
- export declare function startLocalAuthProxy(options: LocalAuthProxyOptions): Promise<LocalAuthProxyHandle>;
@@ -1,93 +0,0 @@
1
- import * as http from "node:http";
2
- function normalizeProxyRequestHeaders(headers) {
3
- const next = new Headers();
4
- for (const [key, value] of Object.entries(headers)) {
5
- if (value == null)
6
- continue;
7
- const lower = key.toLowerCase();
8
- if (lower === "host" || lower === "content-length" || lower === "connection" || lower === "authorization") {
9
- continue;
10
- }
11
- if (Array.isArray(value)) {
12
- next.set(key, value.join(", "));
13
- }
14
- else {
15
- next.set(key, value);
16
- }
17
- }
18
- next.set("x-cbio-local-proxy", "1");
19
- return next;
20
- }
21
- async function readRequestBody(req) {
22
- const chunks = [];
23
- for await (const chunk of req) {
24
- chunks.push(typeof chunk === "string" ? Buffer.from(chunk) : chunk);
25
- }
26
- if (chunks.length === 0)
27
- return undefined;
28
- return Buffer.concat(chunks);
29
- }
30
- export async function startLocalAuthProxy(options) {
31
- const { authHandle, secretName, upstreamBaseUrl, authHeaderName = "Authorization", authPrefix = "Bearer ", host = "127.0.0.1", port = 0, } = options;
32
- const upstream = new URL(upstreamBaseUrl);
33
- const server = http.createServer(async (req, res) => {
34
- try {
35
- const method = req.method ?? "GET";
36
- const targetUrl = new URL(req.url ?? "/", upstream);
37
- const headers = normalizeProxyRequestHeaders(req.headers);
38
- const body = await readRequestBody(req);
39
- const upstreamResponse = await authHandle.fetchWithAuth(secretName, targetUrl.toString(), {
40
- method,
41
- headers,
42
- body: body ? new Uint8Array(body) : undefined,
43
- authHeaderName,
44
- authPrefix,
45
- });
46
- res.statusCode = upstreamResponse.status;
47
- upstreamResponse.headers.forEach((value, key) => {
48
- const lower = key.toLowerCase();
49
- if (lower === "content-length" || lower === "transfer-encoding" || lower === "connection") {
50
- return;
51
- }
52
- res.setHeader(key, value);
53
- });
54
- const responseBuffer = Buffer.from(await upstreamResponse.arrayBuffer());
55
- res.end(responseBuffer);
56
- }
57
- catch (e) {
58
- const message = e instanceof Error ? e.message : String(e);
59
- res.statusCode = 502;
60
- res.setHeader("Content-Type", "application/json");
61
- res.end(JSON.stringify({
62
- error: "CBIO_LOCAL_PROXY_UPSTREAM_FAILED",
63
- message,
64
- }));
65
- }
66
- });
67
- await new Promise((resolve, reject) => {
68
- server.once("error", reject);
69
- server.listen(port, host, () => {
70
- server.off("error", reject);
71
- resolve();
72
- });
73
- });
74
- const address = server.address();
75
- if (!address || typeof address === "string") {
76
- throw new Error("Failed to determine local proxy address.");
77
- }
78
- const resolvedAddress = address;
79
- const baseUrl = `http://${host}:${resolvedAddress.port}`;
80
- return {
81
- secretName,
82
- upstreamBaseUrl,
83
- host,
84
- port: resolvedAddress.port,
85
- baseUrl,
86
- close() {
87
- return new Promise((resolve, reject) => {
88
- server.close((err) => (err ? reject(err) : resolve()));
89
- });
90
- },
91
- };
92
- }
93
- //# sourceMappingURL=localAuthProxy.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"localAuthProxy.js","sourceRoot":"","sources":["../../src/http/localAuthProxy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAsClC,SAAS,4BAA4B,CAAC,OAAiC;IACrE,MAAM,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,IAAI,IAAI;YAAE,SAAS;QAC5B,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAChC,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,gBAAgB,IAAI,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;YAC1G,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,GAAyB;IACtD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAA8B;IACtE,MAAM,EACJ,UAAU,EACV,UAAU,EACV,eAAe,EACf,cAAc,GAAG,eAAe,EAChC,UAAU,GAAG,SAAS,EACtB,IAAI,GAAG,WAAW,EAClB,IAAI,GAAG,CAAC,GACT,GAAG,OAAO,CAAC;IACZ,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;IAE1C,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAClD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;YACnC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,QAAQ,CAAC,CAAC;YACpD,MAAM,OAAO,GAAG,4BAA4B,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC1D,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;YAExC,MAAM,gBAAgB,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC,UAAU,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE;gBACxF,MAAM;gBACN,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC7C,cAAc;gBACd,UAAU;aACX,CAAC,CAAC;YAEH,GAAG,CAAC,UAAU,GAAG,gBAAgB,CAAC,MAAM,CAAC;YACzC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBAC9C,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;gBAChC,IAAI,KAAK,KAAK,gBAAgB,IAAI,KAAK,KAAK,mBAAmB,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;oBAC1F,OAAO;gBACT,CAAC;gBACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC5B,CAAC,CAAC,CAAC;YAEH,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,gBAAgB,CAAC,WAAW,EAAE,CAAC,CAAC;YACzE,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC3D,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;YAClD,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,kCAAkC;gBACzC,OAAO;aACR,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;YAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,eAAe,GAAG,OAAsB,CAAC;IAC/C,MAAM,OAAO,GAAG,UAAU,IAAI,IAAI,eAAe,CAAC,IAAI,EAAE,CAAC;IAEzD,OAAO;QACL,UAAU;QACV,eAAe;QACf,IAAI;QACJ,IAAI,EAAE,eAAe,CAAC,IAAI;QAC1B,OAAO;QACP,KAAK;YACH,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC3C,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACzD,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}
@@ -1,33 +0,0 @@
1
- import type { SecretPolicy } from "../vault/vault.js";
2
- export interface LocalSecretIngressWriter {
3
- addSecret(secretName: string, secretValue: string, options?: SecretPolicy): Promise<void>;
4
- hasSecret(secretName: string): boolean;
5
- updateSecret?(secretName: string, secretValue: string): Promise<void>;
6
- }
7
- export interface LocalSecretIngressOptions {
8
- vault: LocalSecretIngressWriter;
9
- secretName: string;
10
- allowedOrigins?: string[];
11
- overwrite?: boolean;
12
- host?: string;
13
- port?: number;
14
- path?: string;
15
- authToken?: string;
16
- once?: boolean;
17
- maxBodyBytes?: number;
18
- }
19
- export interface LocalSecretIngressResult {
20
- secretName: string;
21
- }
22
- export interface LocalSecretIngressHandle {
23
- readonly secretName: string;
24
- readonly host: string;
25
- readonly port: number;
26
- readonly path: string;
27
- readonly baseUrl: string;
28
- readonly url: string;
29
- readonly authToken: string;
30
- close(): Promise<void>;
31
- waitForSecret(): Promise<LocalSecretIngressResult>;
32
- }
33
- export declare function startLocalSecretIngress(options: LocalSecretIngressOptions): Promise<LocalSecretIngressHandle>;