@the-ai-company/cbio-node-runtime 0.39.0 → 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +116 -54
- package/dist/clients/agent/client.d.ts +9 -0
- package/dist/clients/agent/client.js +72 -0
- package/dist/clients/agent/client.js.map +1 -0
- package/dist/clients/agent/contracts.d.ts +34 -0
- package/dist/clients/agent/contracts.js +2 -0
- package/dist/clients/agent/contracts.js.map +1 -0
- package/dist/clients/agent/index.d.ts +3 -0
- package/dist/clients/agent/index.js +2 -0
- package/dist/clients/agent/index.js.map +1 -0
- package/dist/clients/owner/client.d.ts +18 -0
- package/dist/clients/owner/client.js +169 -0
- package/dist/clients/owner/client.js.map +1 -0
- package/dist/clients/owner/contracts.d.ts +34 -0
- package/dist/clients/owner/contracts.js +2 -0
- package/dist/clients/owner/contracts.js.map +1 -0
- package/dist/clients/owner/index.d.ts +3 -0
- package/dist/clients/owner/index.js +2 -0
- package/dist/clients/owner/index.js.map +1 -0
- package/dist/runtime/index.d.ts +8 -10
- package/dist/runtime/index.js +8 -7
- package/dist/runtime/index.js.map +1 -1
- package/dist/storage/fs.d.ts +1 -0
- package/dist/storage/fs.js +28 -0
- package/dist/storage/fs.js.map +1 -1
- package/dist/storage/memory.d.ts +1 -0
- package/dist/storage/memory.js +20 -0
- package/dist/storage/memory.js.map +1 -1
- package/dist/storage/provider.d.ts +2 -0
- package/dist/vault-core/contracts.d.ts +230 -0
- package/dist/vault-core/contracts.js +2 -0
- package/dist/vault-core/contracts.js.map +1 -0
- package/dist/vault-core/core.d.ts +21 -0
- package/dist/vault-core/core.js +335 -0
- package/dist/vault-core/core.js.map +1 -0
- package/dist/vault-core/defaults.d.ts +141 -0
- package/dist/vault-core/defaults.js +602 -0
- package/dist/vault-core/defaults.js.map +1 -0
- package/dist/vault-core/errors.d.ts +4 -0
- package/dist/vault-core/errors.js +9 -0
- package/dist/vault-core/errors.js.map +1 -0
- package/dist/vault-core/index.d.ts +6 -0
- package/dist/vault-core/index.js +5 -0
- package/dist/vault-core/index.js.map +1 -0
- package/dist/vault-core/persistence.d.ts +87 -0
- package/dist/vault-core/persistence.js +309 -0
- package/dist/vault-core/persistence.js.map +1 -0
- package/dist/vault-core/ports.d.ts +101 -0
- package/dist/vault-core/ports.js +2 -0
- package/dist/vault-core/ports.js.map +1 -0
- package/dist/vault-ingress/defaults.d.ts +14 -0
- package/dist/vault-ingress/defaults.js +41 -0
- package/dist/vault-ingress/defaults.js.map +1 -0
- package/dist/vault-ingress/flow-factories.d.ts +24 -0
- package/dist/vault-ingress/flow-factories.js +48 -0
- package/dist/vault-ingress/flow-factories.js.map +1 -0
- package/dist/vault-ingress/index.d.ts +81 -0
- package/dist/vault-ingress/index.js +357 -0
- package/dist/vault-ingress/index.js.map +1 -0
- package/docs/ARCHITECTURE.md +44 -76
- package/docs/REFERENCE.md +217 -218
- package/docs/WORKS_WITH_CUSTOM_FETCH.md +16 -191
- package/docs/es/README.md +8 -24
- package/docs/fr/README.md +8 -24
- package/docs/ja/README.md +8 -24
- package/docs/ko/README.md +8 -24
- package/docs/pt/README.md +8 -24
- package/docs/zh/README.md +21 -7
- package/package.json +2 -10
- package/dist/agent/agent.d.ts +0 -267
- package/dist/agent/agent.js +0 -689
- package/dist/agent/agent.js.map +0 -1
- package/dist/audit/ActivityLog.d.ts +0 -25
- package/dist/audit/ActivityLog.js +0 -71
- package/dist/audit/ActivityLog.js.map +0 -1
- package/dist/http/authClient.d.ts +0 -26
- package/dist/http/authClient.js +0 -132
- package/dist/http/authClient.js.map +0 -1
- package/dist/http/genericSecretValidator.d.ts +0 -11
- package/dist/http/genericSecretValidator.js +0 -42
- package/dist/http/genericSecretValidator.js.map +0 -1
- package/dist/http/localAuthProxy.d.ts +0 -33
- package/dist/http/localAuthProxy.js +0 -93
- package/dist/http/localAuthProxy.js.map +0 -1
- package/dist/http/localSecretIngress.d.ts +0 -33
- package/dist/http/localSecretIngress.js +0 -162
- package/dist/http/localSecretIngress.js.map +0 -1
- package/dist/http/secretAcquisition.d.ts +0 -54
- package/dist/http/secretAcquisition.js +0 -177
- package/dist/http/secretAcquisition.js.map +0 -1
- package/dist/protocol/childSecretNaming.d.ts +0 -7
- package/dist/protocol/childSecretNaming.js +0 -12
- package/dist/protocol/childSecretNaming.js.map +0 -1
- package/dist/protocol/identity.d.ts +0 -8
- package/dist/protocol/identity.js +0 -16
- package/dist/protocol/identity.js.map +0 -1
- package/dist/sealed/index.d.ts +0 -6
- package/dist/sealed/index.js +0 -6
- package/dist/sealed/index.js.map +0 -1
- package/dist/vault/secretPolicy.d.ts +0 -3
- package/dist/vault/secretPolicy.js +0 -14
- package/dist/vault/secretPolicy.js.map +0 -1
- package/dist/vault/vault.d.ts +0 -100
- package/dist/vault/vault.js +0 -603
- package/dist/vault/vault.js.map +0 -1
- package/docs/TODO-multi-vault.md +0 -29
- package/docs/spec/runtime/README.md +0 -44
- package/docs/spec/runtime/activity-log.md +0 -71
- package/docs/spec/runtime/exposure-surfaces.md +0 -99
- package/docs/spec/runtime/managed-agent-record.md +0 -52
- package/docs/spec/runtime/merge-rules.md +0 -52
- package/docs/spec/runtime/secret-origin-policy.md +0 -46
- package/docs/spec/runtime/secret-validation.md +0 -113
package/dist/agent/agent.js.map
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"agent.js","sourceRoot":"","sources":["../../src/agent/agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAmB,eAAe,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC5G,OAAO,EAAE,SAAS,EAAuC,MAAM,mBAAmB,CAAC;AACnF,OAAO,EAAE,UAAU,EAA6B,MAAM,uBAAuB,CAAC;AAC9E,OAAO,EACL,iBAAiB,GAIlB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,uBAAuB,GAGxB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACtG,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,oBAAoB,EACpB,yBAAyB,EACzB,sBAAsB,GAKvB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGhE,MAAM,cAAc,GAAG,IAAI,OAAO,EAA2B,CAAC;AAW9D,SAAS,+BAA+B,CAAC,MAA0C;IACjF,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;IAC7C,IAAI,CAAC,cAAc,IAAI,OAAO,cAAc,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvE,MAAM,YAAY,GAAI,cAA6C,CAAC,YAAY,CAAC;IACjF,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACtF,CAAC;IACD,OAAO,YAAsC,CAAC;AAChD,CAAC;AA2CD,SAAS,kBAAkB,CAAC,WAAmB,EAAE,SAAiB;IAChE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC7C,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/C,OAAO,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,iBAAiB,CAAC,WAAmB,EAAE,SAAiB,EAAE,SAA+B;IAChG,OAAO,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAgB,EAAE,UAAkB;IAC7D,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,gBAAgB,UAAU,uBAAuB,CAAC,CAAC;IACjH,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,2BAA2B,CAClC,KAAgB,EAChB,UAAsB,EACtB,UAAkB;IAElB,OAAO;QACL,aAAa,CAAC,GAAW,EAAE,OAA8B;YACvD,OAAO,UAAU,CAAC,aAAa,CAAC,UAAU,EAAE,GAAG,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,SAAiB;YAC7B,OAAO,kBAAkB,CAAC,iBAAiB,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,SAAS,CAAC,CAAC;QAC7E,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,OAA8C;YAC3E,OAAO,iBAAiB,CAAC,iBAAiB,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,QAAQ,CAAC,CAAC;QAC5G,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,KAAgB,EAChB,MAAkC,EAClC,UAAkB,EAClB,OAAgB,EAChB,KAAc;IAEd,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,sBAAsB,CAAC;YACjC,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;YACd,MAAM;YACN,UAAU;YACV,GAAG,EAAE,iBAAiB,MAAM,EAAE;YAC9B,MAAM,EAAE,MAAM;YACd,OAAO;YACP,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5B,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,qFAAqF;IACvF,CAAC;AACH,CAAC;AAaD,MAAM,6BAA6B,GAAwB,IAAI,GAAG,CAAuB;IACvF,YAAY;IACZ,aAAa;IACb,eAAe;IACf,eAAe;IACf,aAAa;IACb,eAAe;CAChB,CAAC,CAAC;AAmBH,SAAS,6BAA6B,CAAC,UAAgC;IACrE,OAAO,UAAU,CAAC;AACpB,CAAC;AAUD;;;;;;GAMG;AACH,MAAM,OAAO,YAAY;IAUL;IACC;IAVH,KAAK,CAAY;IACjB,OAAO,CAAS;IAChB,SAAS,CAAS;IAClC,eAAe,CAAuB;IAErB,WAAW,CAAa;IACxB,kBAAkB,CAAoB;IAEvD,YACkB,MAAc,EACb,MAAiB,EAClC,OAAgB,EAChB,SAAkB;QAHF,WAAM,GAAN,MAAM,CAAQ;QACb,WAAM,GAAN,MAAM,CAAW;QAIlC,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,IAAI,EAAE,CAAC;QAEjC,MAAM,SAAS,GAAG,CAAC,KAAuB,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;QACzF,IAAI,CAAC,WAAW,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACvE,IAAI,CAAC,kBAAkB,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACxE,IAAI,CAAC,KAAK,GAAG,IAAI,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9C,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,mBAAmB,CAAC,cAAmC;QACrD,IAAI,CAAC,yBAAyB,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,uBAAuB,EACzC,wBAAwB,IAAI,CAAC,SAAS,iCAAiC,CACxE,CAAC;QACJ,CAAC;QAED,IAAI,cAAc,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YACvD,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,uBAAuB,EACzC,gEAAgE,CACjE,CAAC;QACJ,CAAC;QAED,IAAI,cAAc,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YACnD,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,uBAAuB,EACzC,4DAA4D,CAC7D,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,eAAe,GAAG,cAAc,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAsB,EAAE,OAA6B;QACrE,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,IAAI,SAAS,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAEzE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,uBAAuB,GAAG,IAAI,CAAC,WAAW,EAAE,OAAO,KAAK,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,GAAG,KAAK,SAAS,CAAC;QAC3G,MAAM,cAAc,GAClB,IAAI,CAAC,WAAW,EAAE,OAAO,KAAK,KAAK;YACjC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,GAAG,iBAAiB,CAAC,CAAC;QACtF,MAAM,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,uBAAuB,CAAC,CAAC;QACjH,IAAI,IAAI,CAAC,cAAc;YAAE,QAAQ,CAAC,mBAAmB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAE3E,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,UAAkB,EAAE,GAAW,EAAE,OAA8B;QACjF,OAAO,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,UAAU,EAAE,GAAG,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,mBAAmB,CAAC,UAAkB;QACpC,OAAO,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,OAAO,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,UAAU;QACd,OAAO,IAAI,CAAC,OAAO,IAAI,iBAAiB,CAAC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,OAAuD;QAEvD,OAAO,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC5B,OAA0D;QAE1D,OAAO,IAAI,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,OAAuC;QACnE,OAAO,uBAAuB,CAAC;YAC7B,GAAG,OAAO;YACV,KAAK,EAAE,IAAI,CAAC,MAAM;SACnB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,UAAkB,EAAE,SAAiB;QACvD,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;YACtE,MAAM,MAAM,GAAG,kBAAkB,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,SAAS,CAAC,CAAC;YACzF,MAAM,wBAAwB,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;YAC/E,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,wBAAwB,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACxI,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,UAAkB,EAAE,SAAiB,EAAE,OAA8C;QACrG,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;YACpE,MAAM,MAAM,GAAG,iBAAiB,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,QAAQ,CAAC,CAAC;YACxH,MAAM,wBAAwB,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;YAC7E,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,wBAAwB,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACtI,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,UAAkB,EAAE,SAA0B;QACjE,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;YACvE,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,2BAA2B,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;YAChH,MAAM,wBAAwB,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;YAChF,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,wBAAwB,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACzI,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,SAAS,CAAC,UAAkB;QAC1B,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;IACvC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,qBAAqB,CAAC,IAAa,EAAE,OAAsC;QAC/E,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAa;QAC9B,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAED;;;;;;;;OAQG;IACH,QAAQ,CAAC,OAAyB;QAChC,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,CAAC;QAC3B,IAAI,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC;QAElC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,wBAAwB,EAAE,CAAC;YACjD,UAAU,GAAG,EAAE,CAAC;YAChB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,eAAe,EAAE,YAAY,IAAI,EAAE,EAAE,CAAC;gBAC3D,UAAU,CAAC,6BAA6B,CAAC,GAA2B,CAAC,CAAC,GAAG,IAAI,CAAC;YAChF,CAAC;YACD,UAAU,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC;YACjC,UAAU,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC;QAClC,CAAC;QAED,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACzH,CAAC;CAEF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,SAAS;IAUF;IACA;IAVlB,WAAW,CAAa;IACxB,kBAAkB,CAAoB;IACtC,YAAY,CAAqB;IACjC,MAAM,CAAY;IAElB,YACE,UAAsB,EACtB,iBAAoC,EACpC,KAAgB,EACA,OAAe,EACf,SAAiB,EACjC,WAAgC;QAFhB,YAAO,GAAP,OAAO,CAAQ;QACf,cAAS,GAAT,SAAS,CAAQ;QAGjC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;QAC9B,IAAI,CAAC,kBAAkB,GAAG,iBAAiB,CAAC;QAC5C,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,uFAAuF;QACvF,IAAI,CAAC,YAAY,GAAG,WAAW,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACjF,CAAC;IAED;;OAEG;IACH,IAAI,WAAW;QACb,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACjD,CAAC;IAEO,gBAAgB,CAAC,UAAiC;QACxD,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,iBAAiB,EACnC,+BAA+B,UAAU,eAAe,CACzD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,UAAkB,EAAE,GAAW,EAAE,OAA8B;QACjF,2CAA2C;QAC3C,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,UAAU,EAAE,GAAG,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,mBAAmB,CAAC,UAAkB;QACpC,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,UAAU;QACd,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,OAAuD;QAEvD,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC5B,OAA0D;QAE1D,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,OAAuC;QACnE,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC;QACvC,OAAO,uBAAuB,CAAC;YAC7B,GAAG,OAAO;YACV,KAAK,EAAE,IAAI,CAAC,MAAM;SACnB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,UAAkB,EAAE,SAAiB;QACvD,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;YACtE,MAAM,MAAM,GAAG,kBAAkB,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,SAAS,CAAC,CAAC;YACzF,MAAM,wBAAwB,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;YAC/E,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,wBAAwB,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACxI,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,UAAkB,EAAE,SAAiB,EAAE,OAA8C;QACrG,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;YACpE,MAAM,MAAM,GAAG,iBAAiB,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,QAAQ,CAAC,CAAC;YACxH,MAAM,wBAAwB,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;YAC7E,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,wBAAwB,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACtI,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,UAAkB,EAAE,SAA0B;QACjE,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,4BAA4B,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;YACvE,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,2BAA2B,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;YAChH,MAAM,wBAAwB,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;YAChF,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,wBAAwB,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACzI,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,SAAS,CAAC,UAAkB;QAC1B,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACvD,CAAC;IAED,eAAe;QACb,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC,kBAAkB,CAAC,eAAe,EAAE,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,UAAiC;QACnC,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC;CACF;AAqDD;;;;GAIG;AACH,MAAM,mBAAmB;IAEF;IACA;IAFrB,YACqB,SAAuB,EACvB,MAAiB;QADjB,cAAS,GAAT,SAAS,CAAc;QACvB,WAAM,GAAN,MAAM,CAAW;IACnC,CAAC;IAEM,SAAS,CAAC,UAAkB;QACpC,OAAO,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,UAAkB,EAAE,WAAmB,EAAE,OAAsB;QAC7E,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC;IAES,sBAAsB,CAAC,SAAiB;QAChD,MAAM,UAAU,GAAG,0BAA0B,CAAC,SAAS,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAuB,CAAC;YACxD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAES,0BAA0B,CAAC,SAAiB;QACpD,MAAM,aAAa,GAAG,mBAAmB,SAAS,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAEzB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAqB,CAAC;YACtD,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC;YACjD,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,SAAS,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAC;YACvE,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC;YACnE,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,uBAAuB;gBAAE,OAAO,IAAI,CAAC;YAChE,IAAI,MAAM,CAAC,MAAM,CAAC,gBAAgB,KAAK,iBAAiB,CAAC,SAAS,CAAC;gBAAE,OAAO,IAAI,CAAC;YAEjF,MAAM,MAAM,GAAG,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,gBAAgB,GAAG,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,CAAC;YACpE,IAAI,gBAAgB,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,KAAK,gBAAgB;gBAAE,OAAO,IAAI,CAAC;YAE/F,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAES,sBAAsB,CAAC,SAAiB;QAChD,OAAO,IAAI,CAAC,0BAA0B,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC;IAC7D,CAAC;IAES,6BAA6B,CAAC,SAAiB;QACvD,IAAI,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,iBAAiB,EACnC,kBAAkB,SAAS,0CAA0C,CACtE,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED,MAAM,OAAO,cAAc;IAEN;IACA;IAFnB,YACmB,SAAuB,EACvB,MAAiB;QADjB,cAAS,GAAT,SAAS,CAAc;QACvB,WAAM,GAAN,MAAM,CAAW;IACjC,CAAC;IAEJ,SAAS,CAAC,UAAkB;QAC1B,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,UAAkB;QACnC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,UAAkB,EAAE,cAAiC;QACjF,MAAM,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,sBAAsB;QAC1B,OAAO,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,SAAS,CACb,aAA2B,EAC3B,OAAyD;QAEzD,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,uBAAuB,EACzC,iEAAiE,CAClE,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,GAAW;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAED,kBAAkB,CAAC,GAAW,EAAE,UAAkB;QAChD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,SAAS;QACb,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,UAAkB;QAClC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC5D,CAAC;CACF;AAED,MAAM,OAAO,qBAAsB,SAAQ,mBAAmB;IAC5D,2BAA2B,CAAC,SAAiB;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;QAE5D,IAAI,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;QACjD,CAAC;QAED,MAAM,YAAY,GAAG,+BAA+B,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;QACjD,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,SAAiB,EAAE,MAAe;QACzD,MAAM,UAAU,GAAG,0BAA0B,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,gBAAgB,EAClC,kCAAkC,SAAS,4BAA4B,CACxE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,YAAY,WAAW,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,2BAA2B,EAC7C,+DAA+D,CAChE,CAAC;QACJ,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;QAC5D,MAAM,aAAa,GAAG,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAC7D,MAAM,cAAc,GAAG,aAAa,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,IAAI,CAAC,CAAC;QAC9E,MAAM,kBAAkB,GAA6B;YACnD,aAAa,EAAE,MAAM;YACrB,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,iBAAiB,CAAC,eAAe,CAAC;YAC1C,MAAM,EAAE;gBACN,IAAI,EAAE,uBAAuB;gBAC7B,gBAAgB,EAAE,iBAAiB,CAAC,SAAS,CAAC;gBAC9C,QAAQ,EAAE,cAAc;aACzB;YACD,UAAU,EAAE;gBACV,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACpC,MAAM;aACP;SACF,CAAC;QAEF,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,EAAE,EAAE,kBAAkB,CAAC,CAAC;QAE5G,8BAA8B;QAC9B,MAAM,aAAa,GAAG,mBAAmB,SAAS,EAAE,CAAC;QACrD,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,OAAkC;QACxD,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,oBAAoB,EAAE,CAAC;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,0BAA0B,CAAC,SAAS,CAAC,CAAC;QAE7E,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,YAAY,WAAW,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,2BAA2B,EAC7C,yGAAyG,CAC1G,CAAC;QACJ,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;QAE5D,MAAM,gBAAgB,GAAgC;YACpD,aAAa,EAAE,MAAM;YACrB,IAAI,EAAE,uBAAuB;YAC7B,KAAK,EAAE,iBAAiB,CAAC,SAAS,CAAC;YACnC,SAAS,EAAE,iBAAiB,CAAC,eAAe,CAAC;YAC7C,QAAQ,EAAE;gBACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,QAAQ,EAAE,CAAC;aACZ;YACD,YAAY,EAAE,KAAK,CAAC,kBAAkB;SACvC,CAAC;QAEF,MAAM,cAAc,GAAG,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,EAAE,EAAE,gBAAgB,CAAC,CAAC;QAE3G,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,YAAY,CAAC,SAAS,CAAC,CAAC;QACjE,MAAM,MAAM,GAAuB;YACjC,OAAO;YACP,SAAS;YACT,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,cAAc;YACd,UAAU;SACX,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAExD,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,IAAI,CAC3C,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,EAC1C;YACE,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,UAAU;YACV,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,cAAc;SACf,CACF,CAAC;QACF,OAAO;YACL,OAAO;YACP,SAAS;YACT,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,kBAAkB,EAAE,CAAC;SAC1E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,SAAiB,EAAE,OAAiC;QACzE,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,CAAC;QAC3B,IAAI,CAAC,6BAA6B,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,0BAA0B,CAAC,SAAS,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,gBAAgB,EAClC,2BAA2B,SAAS,8CAA8C,CACnF,CAAC;QACJ,CAAC;QAED,IAAI,MAAmC,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAgC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,uBAAuB,EACzC,2BAA2B,SAAS,oCAAoC,CACzE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YACtE,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,uBAAuB,EACzC,2BAA2B,SAAS,oCAAoC,CACzE,CAAC;QACJ,CAAC;QAED,4BAA4B;QAC5B,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,uBAAuB,EACzC,2BAA2B,SAAS,iCAAiC,CACtE,CAAC;QACJ,CAAC;QAED,MAAM,gBAAgB,GAAG,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC5D,MAAM,cAAc,GAAG,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3D,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;QAC/D,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;QAC3D,MAAM,eAAe,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,CAAC;QAChE,MAAM,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC;QAC5D,MAAM,wBAAwB,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,UAAU,CAAC;QAC7E,MAAM,sBAAsB,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,QAAQ,CAAC;QAEzE,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,uBAAuB,EACzC,2BAA2B,SAAS,yDAAyD,CAC9F,CAAC;QACJ,CAAC;QAED,IAAI,gBAAgB,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;YAC1C,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,uBAAuB,EACzC,2BAA2B,SAAS,6CAA6C,CAClF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,cAAc,CAAC,KAAK,cAAc,EAAE,CAAC;YAC1D,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,uBAAuB,EACzC,2BAA2B,SAAS,gCAAgC,CACrE,CAAC;QACJ,CAAC;QAED,IAAI,eAAe,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;YACzC,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,uBAAuB,EACzC,2BAA2B,SAAS,8DAA8D,CACnG,CAAC;QACJ,CAAC;QAED,IAAI,aAAa,KAAK,cAAc,EAAE,CAAC;YACrC,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,uBAAuB,EACzC,2BAA2B,SAAS,0DAA0D,CAC/F,CAAC;QACJ,CAAC;QAED,IAAI,wBAAwB,KAAK,kBAAkB,EAAE,CAAC;YACpD,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,uBAAuB,EACzC,2BAA2B,SAAS,sEAAsE,CAC3G,CAAC;QACJ,CAAC;QAED,IAAI,sBAAsB,KAAK,gBAAgB,EAAE,CAAC;YAChD,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,uBAAuB,EACzC,2BAA2B,SAAS,oEAAoE,CACzG,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE,UAAU,IAAI,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACnG,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,IAAI,CAC3C,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,EAC9D;YACE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO;YAC9B,UAAU;YACV,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW;YACtC,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CACF,CAAC;QACF,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC;YAC9D,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,kBAAkB,EAAE,CAAC;SAChF,CAAC;IACJ,CAAC;CACF;AAED,MAAM,OAAO,sBAAsB;IAEd;IACA;IAFnB,YACmB,SAAuB,EACvB,MAAiB;QADjB,cAAS,GAAT,SAAS,CAAc;QACvB,WAAM,GAAN,MAAM,CAAW;IACjC,CAAC;IAEJ;;;OAGG;IACH,KAAK,CAAC,qBAAqB,CAAC,IAAa,EAAE,OAAsC;QAC/E,IAAI,CAAC,IAAI,CAAC,UAAU;YAClB,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,mCAAmC,EACrD,qCAAqC,CACtC,CAAC;QAEJ,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,YAAY,WAAW,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,aAAa,CACrB,iBAAiB,CAAC,2BAA2B,EAC7C,8GAA8G,CAC/G,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,0BAA0B,CAAC,GAAG,CAAC,CAAC;QAEnD,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;QAC5D,MAAM,gBAAgB,GAAgC;YACpD,aAAa,EAAE,MAAM;YACrB,IAAI,EAAE,uBAAuB;YAC7B,KAAK,EAAE,iBAAiB,CAAC,GAAG,CAAC;YAC7B,SAAS,EAAE,iBAAiB,CAAC,eAAe,CAAC;YAC7C,QAAQ,EAAE;gBACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,QAAQ,EAAE,CAAC;aACZ;YACD,YAAY,EAAE,OAAO,EAAE,kBAAkB;SAC1C,CAAC;QAEF,MAAM,cAAc,GAAG,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,EAAE,EAAE,gBAAgB,CAAC,CAAC;QAE3G,MAAM,MAAM,GAAG;YACb,OAAO,EAAE,iBAAiB,CAAC,GAAG,CAAC;YAC/B,SAAS,EAAE,GAAG;YACd,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,cAAc;SACf,CAAC;QAEF,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACxD,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,OAAO,SAAS;IACJ,KAAK,CAAiB;IACtB,aAAa,CAAwB;IACrC,QAAQ,CAAyB;IAEjD,YAAY,QAAsB,EAAE,KAAgB;QAClD,IAAI,CAAC,KAAK,GAAG,IAAI,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,aAAa,GAAG,IAAI,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAChE,IAAI,CAAC,QAAQ,GAAG,IAAI,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9D,CAAC;CACF"}
|
|
@@ -1,25 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* ActivityLog
|
|
3
|
-
*
|
|
4
|
-
* Audit log for fetchWithAuth/fetchJsonAndAddSecret/fetchJsonAndUpdateSecret. Separate from vault.
|
|
5
|
-
* No sensitive data. For dashboard/UI display. Optional, can be disabled.
|
|
6
|
-
* First line is metadata (_meta) for consumer identification.
|
|
7
|
-
*/
|
|
8
|
-
import type { IStorageProvider } from '../storage/provider.js';
|
|
9
|
-
export interface ActivityLogMetadata {
|
|
10
|
-
v: number;
|
|
11
|
-
agentId: string;
|
|
12
|
-
storageKey: string;
|
|
13
|
-
}
|
|
14
|
-
export interface ActivityLogEntry {
|
|
15
|
-
ts: number;
|
|
16
|
-
action: 'fetchWithAuth' | 'fetchJsonAndAddSecret' | 'fetchJsonAndUpdateSecret' | 'compareSecret' | 'proveSecret' | 'validateSecret';
|
|
17
|
-
secretName: string;
|
|
18
|
-
url: string;
|
|
19
|
-
method: string;
|
|
20
|
-
success: boolean;
|
|
21
|
-
error?: string;
|
|
22
|
-
}
|
|
23
|
-
export declare function appendActivityLog(storage: IStorageProvider, key: string, entry: ActivityLogEntry, metadata?: ActivityLogMetadata): Promise<void>;
|
|
24
|
-
export declare function readActivityLog(storage: IStorageProvider, key: string): Promise<ActivityLogEntry[]>;
|
|
25
|
-
export declare function readActivityLogMetadata(storage: IStorageProvider, key: string): Promise<ActivityLogMetadata | null>;
|
|
@@ -1,71 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* ActivityLog
|
|
3
|
-
*
|
|
4
|
-
* Audit log for fetchWithAuth/fetchJsonAndAddSecret/fetchJsonAndUpdateSecret. Separate from vault.
|
|
5
|
-
* No sensitive data. For dashboard/UI display. Optional, can be disabled.
|
|
6
|
-
* First line is metadata (_meta) for consumer identification.
|
|
7
|
-
*/
|
|
8
|
-
const NEWLINE = '\n';
|
|
9
|
-
export async function appendActivityLog(storage, key, entry, metadata) {
|
|
10
|
-
let existing = await storage.read(key);
|
|
11
|
-
if ((!existing || existing.length === 0) && metadata) {
|
|
12
|
-
const metaLine = JSON.stringify({ _meta: metadata }) + NEWLINE;
|
|
13
|
-
existing = Buffer.from(metaLine, 'utf8');
|
|
14
|
-
}
|
|
15
|
-
const line = JSON.stringify(entry) + NEWLINE;
|
|
16
|
-
const next = existing ? Buffer.concat([existing, Buffer.from(line, 'utf8')]) : Buffer.from(line, 'utf8');
|
|
17
|
-
await storage.write(key, next);
|
|
18
|
-
}
|
|
19
|
-
export async function readActivityLog(storage, key) {
|
|
20
|
-
const buf = await storage.read(key);
|
|
21
|
-
if (!buf || buf.length === 0)
|
|
22
|
-
return [];
|
|
23
|
-
const text = buf.toString('utf8');
|
|
24
|
-
const lines = text.split(NEWLINE).filter(Boolean);
|
|
25
|
-
return lines
|
|
26
|
-
.map((l) => {
|
|
27
|
-
const raw = JSON.parse(l);
|
|
28
|
-
if (raw._meta)
|
|
29
|
-
return null;
|
|
30
|
-
const secretName = raw.secretName ?? raw.alias;
|
|
31
|
-
if (typeof raw.ts !== 'number')
|
|
32
|
-
return null;
|
|
33
|
-
if (raw.action !== 'fetchWithAuth' &&
|
|
34
|
-
raw.action !== 'fetchJsonAndAddSecret' &&
|
|
35
|
-
raw.action !== 'fetchJsonAndUpdateSecret' &&
|
|
36
|
-
raw.action !== 'compareSecret' &&
|
|
37
|
-
raw.action !== 'proveSecret' &&
|
|
38
|
-
raw.action !== 'validateSecret')
|
|
39
|
-
return null;
|
|
40
|
-
if (typeof secretName !== 'string')
|
|
41
|
-
return null;
|
|
42
|
-
if (typeof raw.url !== 'string')
|
|
43
|
-
return null;
|
|
44
|
-
if (typeof raw.method !== 'string')
|
|
45
|
-
return null;
|
|
46
|
-
if (typeof raw.success !== 'boolean')
|
|
47
|
-
return null;
|
|
48
|
-
return {
|
|
49
|
-
ts: raw.ts,
|
|
50
|
-
action: raw.action,
|
|
51
|
-
secretName,
|
|
52
|
-
url: raw.url,
|
|
53
|
-
method: raw.method,
|
|
54
|
-
success: raw.success,
|
|
55
|
-
...(typeof raw.error === 'string' ? { error: raw.error } : {}),
|
|
56
|
-
};
|
|
57
|
-
})
|
|
58
|
-
.filter((e) => e !== null);
|
|
59
|
-
}
|
|
60
|
-
export async function readActivityLogMetadata(storage, key) {
|
|
61
|
-
const buf = await storage.read(key);
|
|
62
|
-
if (!buf || buf.length === 0)
|
|
63
|
-
return null;
|
|
64
|
-
const firstLine = buf.toString('utf8').split(NEWLINE)[0];
|
|
65
|
-
if (!firstLine)
|
|
66
|
-
return null;
|
|
67
|
-
const raw = JSON.parse(firstLine);
|
|
68
|
-
const meta = raw._meta;
|
|
69
|
-
return meta && typeof meta.agentId === 'string' && typeof meta.storageKey === 'string' ? meta : null;
|
|
70
|
-
}
|
|
71
|
-
//# sourceMappingURL=ActivityLog.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"ActivityLog.js","sourceRoot":"","sources":["../../src/audit/ActivityLog.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA+BH,MAAM,OAAO,GAAG,IAAI,CAAC;AAErB,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACnC,OAAyB,EACzB,GAAW,EACX,KAAuB,EACvB,QAA8B;IAE9B,IAAI,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,GAAG,OAAO,CAAC;QAC/D,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC;IAC7C,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzG,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACjC,OAAyB,EACzB,GAAW;IAEX,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,OAAO,KAAK;SACP,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACP,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAA8C,CAAC;QACvE,IAAI,GAAG,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAC3B,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,KAAK,CAAC;QAC/C,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC5C,IACI,GAAG,CAAC,MAAM,KAAK,eAAe;YAC9B,GAAG,CAAC,MAAM,KAAK,uBAAuB;YACtC,GAAG,CAAC,MAAM,KAAK,0BAA0B;YACzC,GAAG,CAAC,MAAM,KAAK,eAAe;YAC9B,GAAG,CAAC,MAAM,KAAK,aAAa;YAC5B,GAAG,CAAC,MAAM,KAAK,gBAAgB;YACjC,OAAO,IAAI,CAAC;QACd,IAAI,OAAO,UAAU,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAChD,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC7C,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAChD,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAClD,OAAO;YACH,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,UAAU;YACV,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,GAAG,CAAC,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC;IACjC,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,EAAyB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CACzC,OAAyB,EACzB,GAAW;IAEX,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAA4B,CAAC;IAC7D,MAAM,IAAI,GAAG,GAAG,CAAC,KAAwC,CAAC;IAC1D,OAAO,IAAI,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACzG,CAAC"}
|
|
@@ -1,26 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* AuthClient
|
|
3
|
-
*
|
|
4
|
-
* Runtime HTTP client that uses vault-stored secrets for Authorization.
|
|
5
|
-
* Handles fetchWithAuth and createFetchWithAuth. Vault only does storage.
|
|
6
|
-
*/
|
|
7
|
-
import { Signer } from '../protocol/crypto.js';
|
|
8
|
-
import type { CbioVault } from '../vault/vault.js';
|
|
9
|
-
import type { ActivityLogEntry } from '../audit/ActivityLog.js';
|
|
10
|
-
export interface FetchWithAuthOptions extends RequestInit {
|
|
11
|
-
authPrefix?: string;
|
|
12
|
-
authHeaderName?: string;
|
|
13
|
-
withSignature?: boolean;
|
|
14
|
-
}
|
|
15
|
-
/**
|
|
16
|
-
* AuthClient uses vault's secrets for authenticated HTTP requests.
|
|
17
|
-
* Secret values never leave the vault; AuthClient reads via vault.getSecret.
|
|
18
|
-
*/
|
|
19
|
-
export declare class AuthClient {
|
|
20
|
-
private readonly _vault;
|
|
21
|
-
private readonly _signer;
|
|
22
|
-
private readonly _appendActivityLog;
|
|
23
|
-
constructor(_vault: CbioVault, _signer: Signer | null, _appendActivityLog: (entry: ActivityLogEntry) => Promise<void>);
|
|
24
|
-
fetchWithAuth(secretName: string, url: string, options?: FetchWithAuthOptions): Promise<Response>;
|
|
25
|
-
createFetchWithAuth(secretName: string): (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
|
|
26
|
-
}
|
package/dist/http/authClient.js
DELETED
|
@@ -1,132 +0,0 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* AuthClient
|
|
3
|
-
*
|
|
4
|
-
* Runtime HTTP client that uses vault-stored secrets for Authorization.
|
|
5
|
-
* Handles fetchWithAuth and createFetchWithAuth. Vault only does storage.
|
|
6
|
-
*/
|
|
7
|
-
import { createHash } from 'node:crypto';
|
|
8
|
-
import { IdentityError, IdentityErrorCode } from '../errors.js';
|
|
9
|
-
async function hashRequestBody(body) {
|
|
10
|
-
if (body == null)
|
|
11
|
-
return '';
|
|
12
|
-
if (typeof body === 'string') {
|
|
13
|
-
return createHash('sha256').update(body).digest('hex');
|
|
14
|
-
}
|
|
15
|
-
if (body instanceof URLSearchParams) {
|
|
16
|
-
return createHash('sha256').update(body.toString()).digest('hex');
|
|
17
|
-
}
|
|
18
|
-
if (body instanceof ArrayBuffer) {
|
|
19
|
-
return createHash('sha256').update(Buffer.from(body)).digest('hex');
|
|
20
|
-
}
|
|
21
|
-
if (ArrayBuffer.isView(body)) {
|
|
22
|
-
return createHash('sha256')
|
|
23
|
-
.update(Buffer.from(body.buffer, body.byteOffset, body.byteLength))
|
|
24
|
-
.digest('hex');
|
|
25
|
-
}
|
|
26
|
-
if (typeof Blob !== 'undefined' && body instanceof Blob) {
|
|
27
|
-
const bytes = Buffer.from(await body.arrayBuffer());
|
|
28
|
-
return createHash('sha256').update(bytes).digest('hex');
|
|
29
|
-
}
|
|
30
|
-
throw new IdentityError(IdentityErrorCode.UNSUPPORTED_SIGNED_BODY, 'withSignature only supports string, URLSearchParams, Blob, ArrayBuffer, and typed array request bodies.');
|
|
31
|
-
}
|
|
32
|
-
/**
|
|
33
|
-
* AuthClient uses vault's secrets for authenticated HTTP requests.
|
|
34
|
-
* Secret values never leave the vault; AuthClient reads via vault.getSecret.
|
|
35
|
-
*/
|
|
36
|
-
export class AuthClient {
|
|
37
|
-
_vault;
|
|
38
|
-
_signer;
|
|
39
|
-
_appendActivityLog;
|
|
40
|
-
constructor(_vault, _signer, _appendActivityLog) {
|
|
41
|
-
this._vault = _vault;
|
|
42
|
-
this._signer = _signer;
|
|
43
|
-
this._appendActivityLog = _appendActivityLog;
|
|
44
|
-
}
|
|
45
|
-
async fetchWithAuth(secretName, url, options = {}) {
|
|
46
|
-
const method = options.method ?? 'GET';
|
|
47
|
-
const appendFailure = async (error) => {
|
|
48
|
-
await this._appendActivityLog({
|
|
49
|
-
ts: Date.now(),
|
|
50
|
-
action: 'fetchWithAuth',
|
|
51
|
-
secretName,
|
|
52
|
-
url,
|
|
53
|
-
method,
|
|
54
|
-
success: false,
|
|
55
|
-
error,
|
|
56
|
-
});
|
|
57
|
-
};
|
|
58
|
-
const secretValue = this._vault.getSecret(secretName);
|
|
59
|
-
if (!secretValue) {
|
|
60
|
-
try {
|
|
61
|
-
await appendFailure(`Secret name '${secretName}' not found in vault.`);
|
|
62
|
-
}
|
|
63
|
-
catch (appendErr) {
|
|
64
|
-
throw new IdentityError(IdentityErrorCode.SECRET_NOT_FOUND, `Secret name '${secretName}' not found in vault.`, { cause: appendErr });
|
|
65
|
-
}
|
|
66
|
-
throw new IdentityError(IdentityErrorCode.SECRET_NOT_FOUND, `Secret name '${secretName}' not found in vault.`);
|
|
67
|
-
}
|
|
68
|
-
const { authPrefix = 'Bearer ', authHeaderName = 'Authorization', withSignature = false, ...fetchOptions } = options;
|
|
69
|
-
const headers = new Headers(fetchOptions.headers || {});
|
|
70
|
-
headers.set(authHeaderName, `${authPrefix}${secretValue}`);
|
|
71
|
-
if (withSignature && this._signer) {
|
|
72
|
-
const timestamp = Date.now().toString();
|
|
73
|
-
const methodUpper = (fetchOptions.method ?? 'GET').toUpperCase();
|
|
74
|
-
const bodyHash = await hashRequestBody(fetchOptions.body);
|
|
75
|
-
const message = `${methodUpper}:${url}:${timestamp}:${bodyHash}`;
|
|
76
|
-
const signature = await this._signer.sign(message);
|
|
77
|
-
headers.set('X-CBIO-Signature', signature);
|
|
78
|
-
headers.set('X-CBIO-Timestamp', timestamp);
|
|
79
|
-
}
|
|
80
|
-
try {
|
|
81
|
-
const response = await fetch(url, {
|
|
82
|
-
...fetchOptions,
|
|
83
|
-
headers
|
|
84
|
-
});
|
|
85
|
-
await this._appendActivityLog({
|
|
86
|
-
ts: Date.now(),
|
|
87
|
-
action: 'fetchWithAuth',
|
|
88
|
-
secretName,
|
|
89
|
-
url,
|
|
90
|
-
method,
|
|
91
|
-
success: true,
|
|
92
|
-
});
|
|
93
|
-
return response;
|
|
94
|
-
}
|
|
95
|
-
catch (e) {
|
|
96
|
-
try {
|
|
97
|
-
await appendFailure(e.message ?? String(e));
|
|
98
|
-
}
|
|
99
|
-
catch (appendErr) {
|
|
100
|
-
const msg = e.message ?? String(e);
|
|
101
|
-
if (IdentityError.isIdentityError(e)) {
|
|
102
|
-
throw new IdentityError(e.code, msg, { cause: appendErr });
|
|
103
|
-
}
|
|
104
|
-
throw new Error(msg, { cause: appendErr });
|
|
105
|
-
}
|
|
106
|
-
throw e;
|
|
107
|
-
}
|
|
108
|
-
}
|
|
109
|
-
createFetchWithAuth(secretName) {
|
|
110
|
-
const self = this;
|
|
111
|
-
return async function (input, init) {
|
|
112
|
-
let url;
|
|
113
|
-
let options = {};
|
|
114
|
-
if (typeof input === 'string') {
|
|
115
|
-
url = input;
|
|
116
|
-
}
|
|
117
|
-
else if (input instanceof URL) {
|
|
118
|
-
url = input.toString();
|
|
119
|
-
}
|
|
120
|
-
else {
|
|
121
|
-
const req = input.clone();
|
|
122
|
-
url = req.url;
|
|
123
|
-
options = { method: req.method, headers: req.headers, body: req.body };
|
|
124
|
-
}
|
|
125
|
-
if (init) {
|
|
126
|
-
options = { ...options, ...init };
|
|
127
|
-
}
|
|
128
|
-
return self.fetchWithAuth(secretName, url, options);
|
|
129
|
-
};
|
|
130
|
-
}
|
|
131
|
-
}
|
|
132
|
-
//# sourceMappingURL=authClient.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"authClient.js","sourceRoot":"","sources":["../../src/http/authClient.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAUhE,KAAK,UAAU,eAAe,CAAC,IAAiC;IAC5D,IAAI,IAAI,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC;IAC5B,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,IAAI,YAAY,eAAe,EAAE,CAAC;QAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,IAAI,YAAY,WAAW,EAAE,CAAC;QAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC;aACtB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;aAClE,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,YAAY,IAAI,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACpD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,IAAI,aAAa,CACnB,iBAAiB,CAAC,uBAAuB,EACzC,yGAAyG,CAC5G,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,UAAU;IAEE;IACA;IACA;IAHrB,YACqB,MAAiB,EACjB,OAAsB,EACtB,kBAA8D;QAF9D,WAAM,GAAN,MAAM,CAAW;QACjB,YAAO,GAAP,OAAO,CAAe;QACtB,uBAAkB,GAAlB,kBAAkB,CAA4C;IAChF,CAAC;IAEJ,KAAK,CAAC,aAAa,CAAC,UAAkB,EAAE,GAAW,EAAE,UAAgC,EAAE;QACnF,MAAM,MAAM,GAAI,OAAO,CAAC,MAAiB,IAAI,KAAK,CAAC;QACnD,MAAM,aAAa,GAAG,KAAK,EAAE,KAAa,EAAiB,EAAE;YACzD,MAAM,IAAI,CAAC,kBAAkB,CAAC;gBAC1B,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;gBACd,MAAM,EAAE,eAAe;gBACvB,UAAU;gBACV,GAAG;gBACH,MAAM;gBACN,OAAO,EAAE,KAAK;gBACd,KAAK;aACR,CAAC,CAAC;QACP,CAAC,CAAC;QAEF,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,IAAI,CAAC;gBACD,MAAM,aAAa,CAAC,gBAAgB,UAAU,uBAAuB,CAAC,CAAC;YAC3E,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACjB,MAAM,IAAI,aAAa,CACnB,iBAAiB,CAAC,gBAAgB,EAClC,gBAAgB,UAAU,uBAAuB,EACjD,EAAE,KAAK,EAAE,SAAS,EAAE,CACvB,CAAC;YACN,CAAC;YACD,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,gBAAgB,UAAU,uBAAuB,CAAC,CAAC;QACnH,CAAC;QAED,MAAM,EAAE,UAAU,GAAG,SAAS,EAAE,cAAc,GAAG,eAAe,EAAE,aAAa,GAAG,KAAK,EAAE,GAAG,YAAY,EAAE,GAAG,OAAO,CAAC;QACrH,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,YAAY,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,UAAU,GAAG,WAAW,EAAE,CAAC,CAAC;QAE3D,IAAI,aAAa,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAChC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;YACxC,MAAM,WAAW,GAAG,CAAC,YAAY,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YACjE,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAE1D,MAAM,OAAO,GAAG,GAAG,WAAW,IAAI,GAAG,IAAI,SAAS,IAAI,QAAQ,EAAE,CAAC;YACjE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC9B,GAAG,YAAY;gBACf,OAAO;aACV,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,kBAAkB,CAAC;gBAC1B,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;gBACd,MAAM,EAAE,eAAe;gBACvB,UAAU;gBACV,GAAG;gBACH,MAAM;gBACN,OAAO,EAAE,IAAI;aAChB,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC;QACpB,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YACd,IAAI,CAAC;gBACD,MAAM,aAAa,CAAC,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACjB,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;gBACnC,IAAI,aAAa,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnC,MAAM,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC/D,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YAC/C,CAAC;YACD,MAAM,CAAC,CAAC;QACZ,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,UAAkB;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC;QAClB,OAAO,KAAK,WAAW,KAAwB,EAAE,IAAkB;YAC/D,IAAI,GAAW,CAAC;YAChB,IAAI,OAAO,GAAgB,EAAE,CAAC;YAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC5B,GAAG,GAAG,KAAK,CAAC;YAChB,CAAC;iBAAM,IAAI,KAAK,YAAY,GAAG,EAAE,CAAC;gBAC9B,GAAG,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC3B,CAAC;iBAAM,CAAC;gBACJ,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC1B,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;gBACd,OAAO,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3E,CAAC;YACD,IAAI,IAAI,EAAE,CAAC;gBACP,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;YACtC,CAAC;YACD,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC,CAAC;IACN,CAAC;CACJ"}
|
|
@@ -1,11 +0,0 @@
|
|
|
1
|
-
import type { SecretValidationResult, SecretValidator } from "../agent/agent.js";
|
|
2
|
-
export interface GenericHttpSecretValidatorConfig<TData = unknown> {
|
|
3
|
-
url: string;
|
|
4
|
-
method?: string;
|
|
5
|
-
headers?: Record<string, string>;
|
|
6
|
-
body?: unknown;
|
|
7
|
-
isValid?: (response: Response, data: TData | undefined) => boolean;
|
|
8
|
-
classifyStatus?: (response: Response, data: TData | undefined) => SecretValidationResult;
|
|
9
|
-
extractResult?: (response: Response, data: TData | undefined) => Partial<SecretValidationResult>;
|
|
10
|
-
}
|
|
11
|
-
export declare function genericHttpValidator<TData = unknown>(config: GenericHttpSecretValidatorConfig<TData>): SecretValidator;
|
|
@@ -1,42 +0,0 @@
|
|
|
1
|
-
function defaultStatusResult(response) {
|
|
2
|
-
if (response.ok) {
|
|
3
|
-
return { valid: true, status: "valid" };
|
|
4
|
-
}
|
|
5
|
-
if (response.status === 401 || response.status === 403) {
|
|
6
|
-
return { valid: false, status: "invalid", reason: `http_${response.status}` };
|
|
7
|
-
}
|
|
8
|
-
return { valid: false, status: "indeterminate", reason: `http_${response.status}` };
|
|
9
|
-
}
|
|
10
|
-
async function readJsonIfPresent(response) {
|
|
11
|
-
const contentType = response.headers.get("content-type") ?? "";
|
|
12
|
-
if (!contentType.toLowerCase().includes("application/json")) {
|
|
13
|
-
return undefined;
|
|
14
|
-
}
|
|
15
|
-
return response.json();
|
|
16
|
-
}
|
|
17
|
-
export function genericHttpValidator(config) {
|
|
18
|
-
return {
|
|
19
|
-
async validate(handle) {
|
|
20
|
-
const options = {
|
|
21
|
-
method: config.method ?? "GET",
|
|
22
|
-
headers: config.headers,
|
|
23
|
-
body: config.body === undefined ? undefined : JSON.stringify(config.body),
|
|
24
|
-
};
|
|
25
|
-
const response = await handle.fetchWithAuth(config.url, options);
|
|
26
|
-
const data = await readJsonIfPresent(response);
|
|
27
|
-
if (config.classifyStatus) {
|
|
28
|
-
return config.classifyStatus(response, data);
|
|
29
|
-
}
|
|
30
|
-
const base = defaultStatusResult(response);
|
|
31
|
-
const valid = config.isValid ? config.isValid(response, data) : base.valid;
|
|
32
|
-
const extracted = config.extractResult?.(response, data) ?? {};
|
|
33
|
-
return {
|
|
34
|
-
...base,
|
|
35
|
-
...extracted,
|
|
36
|
-
valid,
|
|
37
|
-
status: valid ? "valid" : (base.status === "valid" ? "invalid" : base.status),
|
|
38
|
-
};
|
|
39
|
-
},
|
|
40
|
-
};
|
|
41
|
-
}
|
|
42
|
-
//# sourceMappingURL=genericSecretValidator.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"genericSecretValidator.js","sourceRoot":"","sources":["../../src/http/genericSecretValidator.ts"],"names":[],"mappings":"AAaA,SAAS,mBAAmB,CAAC,QAAkB;IAC7C,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;IAChF,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;AACtF,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAQ,QAAkB;IACxD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC/D,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC5D,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,EAAoB,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,MAA+C;IAE/C,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,MAAM;YACnB,MAAM,OAAO,GAAyB;gBACpC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,KAAK;gBAC9B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;aAC1E,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACjE,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAQ,QAAQ,CAAC,CAAC;YAEtD,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC1B,OAAO,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC/C,CAAC;YAED,MAAM,IAAI,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;YAC3E,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/D,OAAO;gBACL,GAAG,IAAI;gBACP,GAAG,SAAS;gBACZ,KAAK;gBACL,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;aAC9E,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}
|
|
@@ -1,33 +0,0 @@
|
|
|
1
|
-
import type { FetchWithAuthOptions } from "./authClient.js";
|
|
2
|
-
export interface FetchWithAuthLike {
|
|
3
|
-
fetchWithAuth(secretName: string, url: string, options?: FetchWithAuthOptions): Promise<Response>;
|
|
4
|
-
}
|
|
5
|
-
/**
|
|
6
|
-
* Configuration for a local proxy that forwards requests to one upstream API
|
|
7
|
-
* while injecting a vault-backed secret into each outbound request.
|
|
8
|
-
*/
|
|
9
|
-
export interface LocalAuthProxyOptions {
|
|
10
|
-
/** Trusted handle used to send authenticated requests upstream. */
|
|
11
|
-
authHandle: FetchWithAuthLike;
|
|
12
|
-
/** Vault secret name to inject into the outbound auth header. */
|
|
13
|
-
secretName: string;
|
|
14
|
-
/** Upstream API base URL, such as `https://api.openai.com`. */
|
|
15
|
-
upstreamBaseUrl: string;
|
|
16
|
-
/** HTTP header name for auth. Defaults to `Authorization`. */
|
|
17
|
-
authHeaderName?: string;
|
|
18
|
-
/** Prefix prepended before the secret value. Defaults to `Bearer `. */
|
|
19
|
-
authPrefix?: string;
|
|
20
|
-
/** Local bind host for the proxy server. Defaults to `127.0.0.1`. */
|
|
21
|
-
host?: string;
|
|
22
|
-
/** Local bind port. Defaults to `0` for an ephemeral port. */
|
|
23
|
-
port?: number;
|
|
24
|
-
}
|
|
25
|
-
export interface LocalAuthProxyHandle {
|
|
26
|
-
readonly secretName: string;
|
|
27
|
-
readonly upstreamBaseUrl: string;
|
|
28
|
-
readonly host: string;
|
|
29
|
-
readonly port: number;
|
|
30
|
-
readonly baseUrl: string;
|
|
31
|
-
close(): Promise<void>;
|
|
32
|
-
}
|
|
33
|
-
export declare function startLocalAuthProxy(options: LocalAuthProxyOptions): Promise<LocalAuthProxyHandle>;
|
|
@@ -1,93 +0,0 @@
|
|
|
1
|
-
import * as http from "node:http";
|
|
2
|
-
function normalizeProxyRequestHeaders(headers) {
|
|
3
|
-
const next = new Headers();
|
|
4
|
-
for (const [key, value] of Object.entries(headers)) {
|
|
5
|
-
if (value == null)
|
|
6
|
-
continue;
|
|
7
|
-
const lower = key.toLowerCase();
|
|
8
|
-
if (lower === "host" || lower === "content-length" || lower === "connection" || lower === "authorization") {
|
|
9
|
-
continue;
|
|
10
|
-
}
|
|
11
|
-
if (Array.isArray(value)) {
|
|
12
|
-
next.set(key, value.join(", "));
|
|
13
|
-
}
|
|
14
|
-
else {
|
|
15
|
-
next.set(key, value);
|
|
16
|
-
}
|
|
17
|
-
}
|
|
18
|
-
next.set("x-cbio-local-proxy", "1");
|
|
19
|
-
return next;
|
|
20
|
-
}
|
|
21
|
-
async function readRequestBody(req) {
|
|
22
|
-
const chunks = [];
|
|
23
|
-
for await (const chunk of req) {
|
|
24
|
-
chunks.push(typeof chunk === "string" ? Buffer.from(chunk) : chunk);
|
|
25
|
-
}
|
|
26
|
-
if (chunks.length === 0)
|
|
27
|
-
return undefined;
|
|
28
|
-
return Buffer.concat(chunks);
|
|
29
|
-
}
|
|
30
|
-
export async function startLocalAuthProxy(options) {
|
|
31
|
-
const { authHandle, secretName, upstreamBaseUrl, authHeaderName = "Authorization", authPrefix = "Bearer ", host = "127.0.0.1", port = 0, } = options;
|
|
32
|
-
const upstream = new URL(upstreamBaseUrl);
|
|
33
|
-
const server = http.createServer(async (req, res) => {
|
|
34
|
-
try {
|
|
35
|
-
const method = req.method ?? "GET";
|
|
36
|
-
const targetUrl = new URL(req.url ?? "/", upstream);
|
|
37
|
-
const headers = normalizeProxyRequestHeaders(req.headers);
|
|
38
|
-
const body = await readRequestBody(req);
|
|
39
|
-
const upstreamResponse = await authHandle.fetchWithAuth(secretName, targetUrl.toString(), {
|
|
40
|
-
method,
|
|
41
|
-
headers,
|
|
42
|
-
body: body ? new Uint8Array(body) : undefined,
|
|
43
|
-
authHeaderName,
|
|
44
|
-
authPrefix,
|
|
45
|
-
});
|
|
46
|
-
res.statusCode = upstreamResponse.status;
|
|
47
|
-
upstreamResponse.headers.forEach((value, key) => {
|
|
48
|
-
const lower = key.toLowerCase();
|
|
49
|
-
if (lower === "content-length" || lower === "transfer-encoding" || lower === "connection") {
|
|
50
|
-
return;
|
|
51
|
-
}
|
|
52
|
-
res.setHeader(key, value);
|
|
53
|
-
});
|
|
54
|
-
const responseBuffer = Buffer.from(await upstreamResponse.arrayBuffer());
|
|
55
|
-
res.end(responseBuffer);
|
|
56
|
-
}
|
|
57
|
-
catch (e) {
|
|
58
|
-
const message = e instanceof Error ? e.message : String(e);
|
|
59
|
-
res.statusCode = 502;
|
|
60
|
-
res.setHeader("Content-Type", "application/json");
|
|
61
|
-
res.end(JSON.stringify({
|
|
62
|
-
error: "CBIO_LOCAL_PROXY_UPSTREAM_FAILED",
|
|
63
|
-
message,
|
|
64
|
-
}));
|
|
65
|
-
}
|
|
66
|
-
});
|
|
67
|
-
await new Promise((resolve, reject) => {
|
|
68
|
-
server.once("error", reject);
|
|
69
|
-
server.listen(port, host, () => {
|
|
70
|
-
server.off("error", reject);
|
|
71
|
-
resolve();
|
|
72
|
-
});
|
|
73
|
-
});
|
|
74
|
-
const address = server.address();
|
|
75
|
-
if (!address || typeof address === "string") {
|
|
76
|
-
throw new Error("Failed to determine local proxy address.");
|
|
77
|
-
}
|
|
78
|
-
const resolvedAddress = address;
|
|
79
|
-
const baseUrl = `http://${host}:${resolvedAddress.port}`;
|
|
80
|
-
return {
|
|
81
|
-
secretName,
|
|
82
|
-
upstreamBaseUrl,
|
|
83
|
-
host,
|
|
84
|
-
port: resolvedAddress.port,
|
|
85
|
-
baseUrl,
|
|
86
|
-
close() {
|
|
87
|
-
return new Promise((resolve, reject) => {
|
|
88
|
-
server.close((err) => (err ? reject(err) : resolve()));
|
|
89
|
-
});
|
|
90
|
-
},
|
|
91
|
-
};
|
|
92
|
-
}
|
|
93
|
-
//# sourceMappingURL=localAuthProxy.js.map
|
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"localAuthProxy.js","sourceRoot":"","sources":["../../src/http/localAuthProxy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAsClC,SAAS,4BAA4B,CAAC,OAAiC;IACrE,MAAM,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,IAAI,IAAI;YAAE,SAAS;QAC5B,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAChC,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,gBAAgB,IAAI,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;YAC1G,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,GAAyB;IACtD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAA8B;IACtE,MAAM,EACJ,UAAU,EACV,UAAU,EACV,eAAe,EACf,cAAc,GAAG,eAAe,EAChC,UAAU,GAAG,SAAS,EACtB,IAAI,GAAG,WAAW,EAClB,IAAI,GAAG,CAAC,GACT,GAAG,OAAO,CAAC;IACZ,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;IAE1C,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAClD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;YACnC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,QAAQ,CAAC,CAAC;YACpD,MAAM,OAAO,GAAG,4BAA4B,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC1D,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;YAExC,MAAM,gBAAgB,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC,UAAU,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE;gBACxF,MAAM;gBACN,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC7C,cAAc;gBACd,UAAU;aACX,CAAC,CAAC;YAEH,GAAG,CAAC,UAAU,GAAG,gBAAgB,CAAC,MAAM,CAAC;YACzC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBAC9C,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;gBAChC,IAAI,KAAK,KAAK,gBAAgB,IAAI,KAAK,KAAK,mBAAmB,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;oBAC1F,OAAO;gBACT,CAAC;gBACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC5B,CAAC,CAAC,CAAC;YAEH,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,gBAAgB,CAAC,WAAW,EAAE,CAAC,CAAC;YACzE,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAC3D,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;YAClD,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,kCAAkC;gBACzC,OAAO;aACR,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;YAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,eAAe,GAAG,OAAsB,CAAC;IAC/C,MAAM,OAAO,GAAG,UAAU,IAAI,IAAI,eAAe,CAAC,IAAI,EAAE,CAAC;IAEzD,OAAO;QACL,UAAU;QACV,eAAe;QACf,IAAI;QACJ,IAAI,EAAE,eAAe,CAAC,IAAI;QAC1B,OAAO;QACP,KAAK;YACH,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC3C,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACzD,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}
|
|
@@ -1,33 +0,0 @@
|
|
|
1
|
-
import type { SecretPolicy } from "../vault/vault.js";
|
|
2
|
-
export interface LocalSecretIngressWriter {
|
|
3
|
-
addSecret(secretName: string, secretValue: string, options?: SecretPolicy): Promise<void>;
|
|
4
|
-
hasSecret(secretName: string): boolean;
|
|
5
|
-
updateSecret?(secretName: string, secretValue: string): Promise<void>;
|
|
6
|
-
}
|
|
7
|
-
export interface LocalSecretIngressOptions {
|
|
8
|
-
vault: LocalSecretIngressWriter;
|
|
9
|
-
secretName: string;
|
|
10
|
-
allowedOrigins?: string[];
|
|
11
|
-
overwrite?: boolean;
|
|
12
|
-
host?: string;
|
|
13
|
-
port?: number;
|
|
14
|
-
path?: string;
|
|
15
|
-
authToken?: string;
|
|
16
|
-
once?: boolean;
|
|
17
|
-
maxBodyBytes?: number;
|
|
18
|
-
}
|
|
19
|
-
export interface LocalSecretIngressResult {
|
|
20
|
-
secretName: string;
|
|
21
|
-
}
|
|
22
|
-
export interface LocalSecretIngressHandle {
|
|
23
|
-
readonly secretName: string;
|
|
24
|
-
readonly host: string;
|
|
25
|
-
readonly port: number;
|
|
26
|
-
readonly path: string;
|
|
27
|
-
readonly baseUrl: string;
|
|
28
|
-
readonly url: string;
|
|
29
|
-
readonly authToken: string;
|
|
30
|
-
close(): Promise<void>;
|
|
31
|
-
waitForSecret(): Promise<LocalSecretIngressResult>;
|
|
32
|
-
}
|
|
33
|
-
export declare function startLocalSecretIngress(options: LocalSecretIngressOptions): Promise<LocalSecretIngressHandle>;
|