@tokensrc/codex 1.14.3 → 1.14.4

package/dist/managed-credential-v3-assignment.d.ts

@@ -0,0 +1,38 @@
+import { z } from "zod";
+import type { CodexTokenPoolV4AssignmentTarget } from "./protocol.js";
+export declare const ManagedCodexV3AssignmentTargetSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    mode: z.ZodLiteral<"UNBOUND_POOL">;
+}, z.core.$strict>, z.ZodObject<{
+    mode: z.ZodLiteral<"DIRECTORY_PRINCIPAL">;
+    principal: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    mode: z.ZodLiteral<"SUBJECT">;
+    userSubject: z.ZodString;
+    explicitlyConfirmed: z.ZodLiteral<true>;
+}, z.core.$strict>], "mode">;
+export declare const ManagedCodexV3EnrollmentAssignmentJournalSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    uploaderAuditSubject: z.ZodString;
+    target: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        mode: z.ZodLiteral<"UNBOUND_POOL">;
+    }, z.core.$strict>, z.ZodObject<{
+        mode: z.ZodLiteral<"DIRECTORY_PRINCIPAL">;
+        principal: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        mode: z.ZodLiteral<"SUBJECT">;
+        userSubject: z.ZodString;
+        explicitlyConfirmed: z.ZodLiteral<true>;
+    }, z.core.$strict>], "mode">;
+}, z.core.$strict>;
+export type ManagedCodexV3AssignmentTarget = z.infer<typeof ManagedCodexV3AssignmentTargetSchema>;
+export type ManagedCodexV3EnrollmentAssignmentJournal = z.infer<typeof ManagedCodexV3EnrollmentAssignmentJournalSchema>;
+export declare function resolveManagedCodexV3AssignmentTarget(options: {
+    assignTo?: string;
+    assignToSubject?: string;
+    yes?: boolean;
+}): ManagedCodexV3AssignmentTarget;
+export declare function codexTokenPoolV4AssignmentTarget(target: ManagedCodexV3AssignmentTarget): CodexTokenPoolV4AssignmentTarget;
+export declare function prepareManagedCodexV3EnrollmentAssignment(input: {
+    uploaderAuditSubject: string;
+    target: ManagedCodexV3AssignmentTarget;
+}): ManagedCodexV3EnrollmentAssignmentJournal;

package/dist/managed-credential-v3-assignment.js

@@ -0,0 +1,68 @@
+import { z } from "zod";
+import { CodexServiceError } from "./errors.js";
+const SafePrincipalSchema = z.string().min(1).max(255)
+    .refine((value) => value === value.trim(), "Principal must not have surrounding whitespace.")
+    .refine((value) => !/[\s\u0000-\u001f\u007f]/u.test(value), "Principal contains unsafe characters.");
+const CanonicalUuidSchema = z.string()
+    .regex(/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/u);
+const AuditSubjectSchema = z.string().min(1).max(255)
+    .refine((value) => value === value.trim(), "Uploader subject must be canonical.")
+    .refine((value) => !/[\u0000-\u001f\u007f]/u.test(value), "Uploader subject contains controls.");
+export const ManagedCodexV3AssignmentTargetSchema = z.discriminatedUnion("mode", [
+    z.strictObject({
+        mode: z.literal("UNBOUND_POOL")
+    }),
+    z.strictObject({
+        mode: z.literal("DIRECTORY_PRINCIPAL"),
+        principal: SafePrincipalSchema
+    }),
+    z.strictObject({
+        mode: z.literal("SUBJECT"),
+        userSubject: CanonicalUuidSchema,
+        explicitlyConfirmed: z.literal(true)
+    })
+]);
+export const ManagedCodexV3EnrollmentAssignmentJournalSchema = z.strictObject({
+    schemaVersion: z.literal(1),
+    uploaderAuditSubject: AuditSubjectSchema,
+    target: ManagedCodexV3AssignmentTargetSchema
+});
+export function resolveManagedCodexV3AssignmentTarget(options) {
+    if (options.assignTo !== undefined && options.assignToSubject !== undefined) {
+        throw new CodexServiceError("--assign-to and --assign-to-subject are mutually exclusive.", "invalid_managed_codex_v3_assignment_target", 400);
+    }
+    if (options.assignToSubject !== undefined) {
+        if (options.yes !== true) {
+            throw new CodexServiceError("--assign-to-subject requires --yes because it bypasses username/email lookup.", "managed_codex_v3_subject_confirmation_required", 400);
+        }
+        const parsed = CanonicalUuidSchema.safeParse(options.assignToSubject);
+        if (!parsed.success) {
+            throw new CodexServiceError("--assign-to-subject must be a canonical lowercase UUID.", "invalid_managed_codex_v3_assignment_target", 400);
+        }
+        return { mode: "SUBJECT", userSubject: parsed.data, explicitlyConfirmed: true };
+    }
+    if (options.yes === true) {
+        throw new CodexServiceError("--yes is only valid with --assign-to-subject.", "invalid_managed_codex_v3_assignment_target", 400);
+    }
+    if (options.assignTo !== undefined) {
+        const parsed = SafePrincipalSchema.safeParse(options.assignTo);
+        if (!parsed.success) {
+            throw new CodexServiceError("--assign-to must be an exact username or email without whitespace.", "invalid_managed_codex_v3_assignment_target", 400);
+        }
+        return { mode: "DIRECTORY_PRINCIPAL", principal: parsed.data };
+    }
+    return { mode: "UNBOUND_POOL" };
+}
+export function codexTokenPoolV4AssignmentTarget(target) {
+    return target.mode === "SUBJECT"
+        ? { mode: "SUBJECT", userSubject: target.userSubject }
+        : target;
+}
+export function prepareManagedCodexV3EnrollmentAssignment(input) {
+    return ManagedCodexV3EnrollmentAssignmentJournalSchema.parse({
+        schemaVersion: 1,
+        uploaderAuditSubject: input.uploaderAuditSubject,
+        target: input.target
+    });
+}
+//# sourceMappingURL=managed-credential-v3-assignment.js.map

package/dist/managed-credential-v3-assignment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-credential-v3-assignment.js","sourceRoot":"","sources":["../src/managed-credential-v3-assignment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGhD,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;KACnD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,EAAE,iDAAiD,CAAC;KAC5F,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,uCAAuC,CAAC,CAAC;AACvG,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,EAAE;KACnC,KAAK,CAAC,iEAAiE,CAAC,CAAC;AAC5E,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;KAClD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,EAAE,qCAAqC,CAAC;KAChF,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,qCAAqC,CAAC,CAAC;AAEnG,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC/E,CAAC,CAAC,YAAY,CAAC;QACb,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;KAChC,CAAC;IACF,CAAC,CAAC,YAAY,CAAC;QACb,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;QACtC,SAAS,EAAE,mBAAmB;KAC/B,CAAC;IACF,CAAC,CAAC,YAAY,CAAC;QACb,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC1B,WAAW,EAAE,mBAAmB;QAChC,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;KACrC,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,+CAA+C,GAAG,CAAC,CAAC,YAAY,CAAC;IAC5E,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,oBAAoB,EAAE,kBAAkB;IACxC,MAAM,EAAE,oCAAoC;CAC7C,CAAC,CAAC;AAMH,MAAM,UAAU,qCAAqC,CAAC,OAIrD;IACC,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QAC5E,MAAM,IAAI,iBAAiB,CACzB,6DAA6D,EAC7D,4CAA4C,EAC5C,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QAC1C,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;YACzB,MAAM,IAAI,iBAAiB,CACzB,+EAA+E,EAC/E,gDAAgD,EAChD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACtE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,iBAAiB,CACzB,yDAAyD,EACzD,4CAA4C,EAC5C,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC;IAClF,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;QACzB,MAAM,IAAI,iBAAiB,CACzB,+CAA+C,EAC/C,4CAA4C,EAC5C,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,iBAAiB,CACzB,oEAAoE,EACpE,4CAA4C,EAC5C,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IACjE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,MAAsC;IAEtC,OAAO,MAAM,CAAC,IAAI,KAAK,SAAS;QAC9B,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE;QACtD,CAAC,CAAC,MAAM,CAAC;AACb,CAAC;AAED,MAAM,UAAU,yCAAyC,CAAC,KAGzD;IACC,OAAO,+CAA+C,CAAC,KAAK,CAAC;QAC3D,aAAa,EAAE,CAAC;QAChB,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;AACL,CAAC"}

package/dist/managed-credential-v3-envelope.d.ts

@@ -1,5 +1,5 @@
 import { type KeyObject } from "node:crypto";
-import { type CodexV3CredentialEnvelope, type CodexV3CredentialIngress, type CodexV3FullCredentialDeliveryResponse, type CodexV3FullCredentialBundle, type CodexShortLivedDeliveryClientKey } from "./protocol.js";
+import { type CodexV3CredentialEnvelope, type CodexV3CredentialIngress, type CodexV3FullCredentialDeliveryResponse, type CodexV3FullCredentialBundle, type CodexShortLivedDeliveryClientKey, type CodexTokenPoolV4AssignmentTarget } from "./protocol.js";
 export interface CodexV3FullCredentialInput {
     refreshToken: string;
     accessToken: string;
@@ -47,6 +47,23 @@ export declare function sealCodexV3GenerationReport(input: {
     ingress: CodexV3CredentialIngress;
     credentials: CodexV3FullCredentialInput;
 }): CodexV3CredentialEnvelope;
+export declare function codexTokenPoolV4UploadAad(input: {
+    tenantId: string;
+    uploaderSubject: string;
+    target: CodexTokenPoolV4AssignmentTarget;
+    clientRequestId: string;
+    idempotencyKey: string;
+    keyId: string;
+}): Buffer;
+export declare function sealCodexTokenPoolV4Upload(input: {
+    tenantId: string;
+    uploaderSubject: string;
+    target: CodexTokenPoolV4AssignmentTarget;
+    clientRequestId: string;
+    idempotencyKey: string;
+    ingress: CodexV3CredentialIngress;
+    credentials: CodexV3FullCredentialInput;
+}): CodexV3CredentialEnvelope;
 export declare function createCodexV3DeliveryKeyPair(): CodexV3DeliveryKeyPair;
 export declare function codexV3FullDeliveryAad(input: {
     tenantId: string;

package/dist/managed-credential-v3-envelope.js

@@ -1,6 +1,6 @@
 import { createCipheriv, createDecipheriv, createPublicKey, diffieHellman, generateKeyPairSync, hkdfSync, randomBytes } from "node:crypto";
 import { CodexServiceError } from "./errors.js";
-import { CodexV3FullCredentialBundleSchema } from "./protocol.js";
+import { CodexV3FullCredentialBundleSchema, CodexTokenPoolV4AssignmentTargetSchema } from "./protocol.js";
 const ALGORITHM = "X25519-HKDF-SHA256-AES-256-GCM";
 const ENROLLMENT_KDF = "active-code-inbox/codex-enrollment-candidate/key/v1\0";
 const DELIVERY_KDF = "active-code-inbox/codex-short-lived-delivery/key/v1\0";
@@ -66,6 +66,39 @@ export function sealCodexV3GenerationReport(input) {
         })
     });
 }
+export function codexTokenPoolV4UploadAad(input) {
+    const target = CodexTokenPoolV4AssignmentTargetSchema.parse(input.target);
+    return Buffer.from(JSON.stringify({
+        schemaVersion: 4,
+        purpose: "TOKEN_POOL_UPLOAD",
+        tenant: required(input.tenantId, "tenantId"),
+        uploaderSubject: required(input.uploaderSubject, "uploaderSubject"),
+        target,
+        clientRequestId: required(input.clientRequestId, "clientRequestId"),
+        idempotencyKey: required(input.idempotencyKey, "idempotencyKey"),
+        keyId: required(input.keyId, "keyId")
+    }), "utf8");
+}
+export function sealCodexTokenPoolV4Upload(input) {
+    return sealToServer({
+        ingress: input.ingress,
+        aad: codexTokenPoolV4UploadAad({ ...input, keyId: input.ingress.keyId }),
+        plaintext: {
+            schemaVersion: 3,
+            refreshToken: secret(input.credentials.refreshToken, "refreshToken"),
+            accessToken: secret(input.credentials.accessToken, "accessToken"),
+            idToken: secret(input.credentials.idToken, "idToken"),
+            providerAccountId: required(input.credentials.providerAccountId, "providerAccountId"),
+            expiresAt: instant(input.credentials.expiresAt, "expiresAt")
+        },
+        request: (envelope) => ({
+            schemaVersion: 4,
+            clientRequestId: input.clientRequestId,
+            target: input.target,
+            envelope
+        })
+    });
+}
 function sealToServer(input) {
     if (input.ingress.envelopeVersion !== 1 || input.ingress.algorithm !== ALGORITHM) {
         throw invalidEnvelope("The account service advertised an unsupported v3 credential envelope.");

package/dist/managed-credential-v3-envelope.js.map

@@ -1 +1 @@
-{"version":3,"file":"managed-credential-v3-envelope.js","sourceRoot":"","sources":["../src/managed-credential-v3-envelope.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,mBAAmB,EACnB,QAAQ,EACR,WAAW,EAEZ,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,iCAAiC,EAMlC,MAAM,eAAe,CAAC;AAEvB,MAAM,SAAS,GAAG,gCAAyC,CAAC;AAC5D,MAAM,cAAc,GAAG,uDAAuD,CAAC;AAC/E,MAAM,YAAY,GAAG,uDAAuD,CAAC;AAC7E,MAAM,SAAS,GAAG,mBAAmB,CAAC;AACtC,MAAM,eAAe,GAAG,MAAM,CAAC;AAe/B,MAAM,UAAU,oBAAoB,CAAC,KAMpC;IACC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QAChC,aAAa,EAAE,CAAC;QAChB,OAAO,EAAE,YAAY;QACrB,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC;QAC5C,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC;QAC3C,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,eAAe,EAAE,iBAAiB,CAAC;QACnE,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC;QAChE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC;KACtC,CAAC,EAAE,MAAM,CAAC,CAAC;AACd,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAS1C;IACC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QAChC,aAAa,EAAE,CAAC;QAChB,OAAO,EAAE,mBAAmB;QAC5B,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC;QAC5C,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC;QAC3C,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC;QACjD,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,eAAe,EAAE,iBAAiB,CAAC;QACnE,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC;QAChE,yBAAyB,EAAE,QAAQ,CAAC,KAAK,CAAC,yBAAyB,EAAE,2BAA2B,CAAC;QACjG,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC;KACtC,CAAC,EAAE,MAAM,CAAC,CAAC;AACd,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAOrC;IACC,OAAO,YAAY,CAAC;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,EAAE,oBAAoB,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnE,SAAS,EAAE;YACT,aAAa,EAAE,CAAC;YAChB,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,cAAc,CAAC;YACpE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,aAAa,CAAC;YACjE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC;YACrD,iBAAiB,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;YACrF,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC;SAC7D;QACD,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,QAAQ,EAAE,CAAC;KAC9E,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAU3C;IACC,OAAO,YAAY,CAAC;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,EAAE,0BAA0B,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACzE,SAAS,EAAE;YACT,aAAa,EAAE,CAAC;YAChB,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,cAAc,CAAC;YACpE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,aAAa,CAAC;YACjE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC;YACrD,iBAAiB,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;YACrF,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC;SAC7D;QACD,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACtB,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;YAC1D,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,QAAQ;SACT,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,KAKrB;IACC,IAAI,KAAK,CAAC,OAAO,CAAC,eAAe,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACjF,MAAM,eAAe,CAAC,uEAAuE,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,SAA6B,CAAC;IAClC,IAAI,YAAgC,CAAC;IACrC,IAAI,GAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,gCAAgC,CAAC,CAAC;QAC/E,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QACjE,IAAI,SAAS,CAAC,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;YACxD,MAAM,eAAe,CAAC,qDAAqD,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,IAAI,QAAQ,CAAC,GAAG,KAAK,KAAK,IAAI,QAAQ,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,QAAQ,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1F,MAAM,eAAe,CAAC,kDAAkD,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,eAAe,CAAC;YAC7B,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE;YAC9D,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;QACH,YAAY,GAAG,aAAa,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QAChE,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,EACrD,MAAM,CAAC,IAAI,CAAC,GAAG,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;QAChF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC7E,MAAM,QAAQ,GAA8B;YAC1C,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,SAAS;YACpB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK;YAC1B,kBAAkB,EAAE,QAAQ,CAAC,CAAC;YAC9B,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;YAChC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;YAClC,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC5C,iBAAiB,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;SAC7D,CAAC;QACF,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;YACvG,MAAM,eAAe,CAAC,sDAAsD,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,iBAAiB;YAAE,MAAM,KAAK,CAAC;QACpD,MAAM,eAAe,CAAC,4DAA4D,CAAC,CAAC;IACtF,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B;IAC1C,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,IAAI,QAAQ,CAAC,GAAG,KAAK,KAAK,IAAI,QAAQ,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,QAAQ,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1F,MAAM,eAAe,CAAC,qCAAqC,CAAC,CAAC;IAC/D,CAAC;IACD,eAAe,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,EAAE,qCAAqC,CAAC,CAAC;IACvE,OAAO,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAGtC;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QAChC,aAAa,EAAE,CAAC;QAChB,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC;QAC5C,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;QAC9C,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,cAAc,CAAC;QAC7D,gBAAgB,EAAE,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;QACzE,iBAAiB,EAAE,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;QAC5E,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC;QACpD,iBAAiB,EAAE,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;QAC5E,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAC;QAC/C,eAAe,EAAE,QAAQ,CAAC,QAAQ,CAAC,eAAe,EAAE,iBAAiB,CAAC;QACtE,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;QAChD,mBAAmB,EAAE,OAAO,CAAC,QAAQ,CAAC,mBAAmB,EAAE,qBAAqB,CAAC;QACjF,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE,cAAc,CAAC;KAC7D,CAAC,EAAE,MAAM,CAAC,CAAC;AACd,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,KAKjD;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;IACzC,IAAI,KAAK,CAAC,UAAU,CAAC,iBAAiB,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,KAAK,CAAC;WACjF,QAAQ,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC/C,MAAM,eAAe,CAAC,mEAAmE,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,EAAE,iCAAiC,CAAC,CAAC;IAC/G,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,2BAA2B,CAAC,CAAC;IACtF,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,4BAA4B,CAAC,CAAC;IACzF,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,EAAE,EAAE,EAAE,0BAA0B,CAAC,CAAC;IACjG,MAAM,UAAU,GAAG,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,SAAS,EAAE,iCAAiC,CAAC,CAAC;IAC/G,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1H,MAAM,YAAY,GAAG,aAAa,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IACxF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,EAC3D,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,GAAG,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7D,IAAI,SAA6B,CAAC;IAClC,MAAM,GAAG,GAAG,sBAAsB,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;QACpF,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrB,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACzB,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,iCAAiC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC,CAAC;QAC9G,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,eAAe,CAAC,+DAA+D,CAAC,CAAC;QAC5G,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC;QAC3B,IAAI,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,EAAE,IAAI,MAAM,CAAC,gBAAgB,KAAK,QAAQ,CAAC,gBAAgB;eACzF,MAAM,CAAC,iBAAiB,KAAK,QAAQ,CAAC,iBAAiB,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;eAClG,MAAM,CAAC,iBAAiB,KAAK,QAAQ,CAAC,iBAAiB,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,mBAAmB,EAAE,CAAC;YAClH,MAAM,eAAe,CAAC,gEAAgE,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;eACxD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,iBAAiB,CAAC,yCAAyC,EAAE,kCAAkC,CAAC,CAAC;QAC7G,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,iBAAiB;YAAE,MAAM,KAAK,CAAC;QACpD,MAAM,eAAe,CAAC,oDAAoD,CAAC,CAAC;IAC9E,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACZ,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,MAA0B,EAAE,OAAe;IACjF,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,KAAK,EAAE,CAAC;QACnG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,IAAY;IAC3C,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACrE,MAAM,eAAe,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,KAAa,EAAE,IAAY;IACzC,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,eAAe,EAAE,CAAC;QACjE,MAAM,eAAe,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,IAAY;IAC3C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QAAE,MAAM,eAAe,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;IACzF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,KAAa,EAAE,IAAY;IAC1C,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,eAAe,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;IAChH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,OAAO,IAAI,iBAAiB,CAAC,OAAO,EAAE,mCAAmC,CAAC,CAAC;AAC7E,CAAC"}
+{"version":3,"file":"managed-credential-v3-envelope.js","sourceRoot":"","sources":["../src/managed-credential-v3-envelope.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,mBAAmB,EACnB,QAAQ,EACR,WAAW,EAEZ,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,iCAAiC,EACjC,sCAAsC,EAOvC,MAAM,eAAe,CAAC;AAEvB,MAAM,SAAS,GAAG,gCAAyC,CAAC;AAC5D,MAAM,cAAc,GAAG,uDAAuD,CAAC;AAC/E,MAAM,YAAY,GAAG,uDAAuD,CAAC;AAC7E,MAAM,SAAS,GAAG,mBAAmB,CAAC;AACtC,MAAM,eAAe,GAAG,MAAM,CAAC;AAe/B,MAAM,UAAU,oBAAoB,CAAC,KAMpC;IACC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QAChC,aAAa,EAAE,CAAC;QAChB,OAAO,EAAE,YAAY;QACrB,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC;QAC5C,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC;QAC3C,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,eAAe,EAAE,iBAAiB,CAAC;QACnE,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC;QAChE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC;KACtC,CAAC,EAAE,MAAM,CAAC,CAAC;AACd,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAS1C;IACC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QAChC,aAAa,EAAE,CAAC;QAChB,OAAO,EAAE,mBAAmB;QAC5B,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC;QAC5C,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC;QAC3C,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC;QACjD,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,eAAe,EAAE,iBAAiB,CAAC;QACnE,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC;QAChE,yBAAyB,EAAE,QAAQ,CAAC,KAAK,CAAC,yBAAyB,EAAE,2BAA2B,CAAC;QACjG,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC;KACtC,CAAC,EAAE,MAAM,CAAC,CAAC;AACd,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAOrC;IACC,OAAO,YAAY,CAAC;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,EAAE,oBAAoB,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnE,SAAS,EAAE;YACT,aAAa,EAAE,CAAC;YAChB,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,cAAc,CAAC;YACpE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,aAAa,CAAC;YACjE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC;YACrD,iBAAiB,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;YACrF,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC;SAC7D;QACD,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,QAAQ,EAAE,CAAC;KAC9E,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAU3C;IACC,OAAO,YAAY,CAAC;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,EAAE,0BAA0B,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACzE,SAAS,EAAE;YACT,aAAa,EAAE,CAAC;YAChB,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,cAAc,CAAC;YACpE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,aAAa,CAAC;YACjE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC;YACrD,iBAAiB,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;YACrF,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC;SAC7D;QACD,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACtB,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;YAC1D,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,QAAQ;SACT,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAOzC;IACC,MAAM,MAAM,GAAG,sCAAsC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1E,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QAChC,aAAa,EAAE,CAAC;QAChB,OAAO,EAAE,mBAAmB;QAC5B,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC;QAC5C,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,eAAe,EAAE,iBAAiB,CAAC;QACnE,MAAM;QACN,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,eAAe,EAAE,iBAAiB,CAAC;QACnE,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC;QAChE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC;KACtC,CAAC,EAAE,MAAM,CAAC,CAAC;AACd,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAQ1C;IACC,OAAO,YAAY,CAAC;QAClB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,EAAE,yBAAyB,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACxE,SAAS,EAAE;YACT,aAAa,EAAE,CAAC;YAChB,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,cAAc,CAAC;YACpE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,aAAa,CAAC;YACjE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC;YACrD,iBAAiB,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;YACrF,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC;SAC7D;QACD,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACtB,aAAa,EAAE,CAAC;YAChB,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ;SACT,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,KAKrB;IACC,IAAI,KAAK,CAAC,OAAO,CAAC,eAAe,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACjF,MAAM,eAAe,CAAC,uEAAuE,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,SAA6B,CAAC;IAClC,IAAI,YAAgC,CAAC;IACrC,IAAI,GAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,gCAAgC,CAAC,CAAC;QAC/E,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;QACjE,IAAI,SAAS,CAAC,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;YACxD,MAAM,eAAe,CAAC,qDAAqD,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,IAAI,QAAQ,CAAC,GAAG,KAAK,KAAK,IAAI,QAAQ,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,QAAQ,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1F,MAAM,eAAe,CAAC,kDAAkD,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,eAAe,CAAC;YAC7B,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE;YAC9D,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;QACH,YAAY,GAAG,aAAa,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QAChE,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,EACrD,MAAM,CAAC,IAAI,CAAC,GAAG,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;QAChF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC7E,MAAM,QAAQ,GAA8B;YAC1C,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,SAAS;YACpB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK;YAC1B,kBAAkB,EAAE,QAAQ,CAAC,CAAC;YAC9B,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;YAChC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;YAClC,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC5C,iBAAiB,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;SAC7D,CAAC;QACF,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;YACvG,MAAM,eAAe,CAAC,sDAAsD,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,iBAAiB;YAAE,MAAM,KAAK,CAAC;QACpD,MAAM,eAAe,CAAC,4DAA4D,CAAC,CAAC;IACtF,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B;IAC1C,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,IAAI,QAAQ,CAAC,GAAG,KAAK,KAAK,IAAI,QAAQ,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,QAAQ,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1F,MAAM,eAAe,CAAC,qCAAqC,CAAC,CAAC;IAC/D,CAAC;IACD,eAAe,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,EAAE,qCAAqC,CAAC,CAAC;IACvE,OAAO,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAGtC;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QAChC,aAAa,EAAE,CAAC;QAChB,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC;QAC5C,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;QAC9C,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,YAAY,EAAE,cAAc,CAAC;QAC7D,gBAAgB,EAAE,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;QACzE,iBAAiB,EAAE,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;QAC5E,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC;QACpD,iBAAiB,EAAE,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;QAC5E,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAC;QAC/C,eAAe,EAAE,QAAQ,CAAC,QAAQ,CAAC,eAAe,EAAE,iBAAiB,CAAC;QACtE,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;QAChD,mBAAmB,EAAE,OAAO,CAAC,QAAQ,CAAC,mBAAmB,EAAE,qBAAqB,CAAC;QACjF,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE,cAAc,CAAC;KAC7D,CAAC,EAAE,MAAM,CAAC,CAAC;AACd,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,KAKjD;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;IACzC,IAAI,KAAK,CAAC,UAAU,CAAC,iBAAiB,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,KAAK,CAAC;WACjF,QAAQ,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC/C,MAAM,eAAe,CAAC,mEAAmE,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,EAAE,iCAAiC,CAAC,CAAC;IAC/G,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,2BAA2B,CAAC,CAAC;IACtF,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,4BAA4B,CAAC,CAAC;IACzF,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,EAAE,EAAE,EAAE,0BAA0B,CAAC,CAAC;IACjG,MAAM,UAAU,GAAG,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,SAAS,EAAE,iCAAiC,CAAC,CAAC;IAC/G,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1H,MAAM,YAAY,GAAG,aAAa,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IACxF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,EAC3D,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,GAAG,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7D,IAAI,SAA6B,CAAC;IAClC,MAAM,GAAG,GAAG,sBAAsB,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;QACpF,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrB,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACzB,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,iCAAiC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC,CAAC;QAC9G,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,eAAe,CAAC,+DAA+D,CAAC,CAAC;QAC5G,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC;QAC3B,IAAI,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,EAAE,IAAI,MAAM,CAAC,gBAAgB,KAAK,QAAQ,CAAC,gBAAgB;eACzF,MAAM,CAAC,iBAAiB,KAAK,QAAQ,CAAC,iBAAiB,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;eAClG,MAAM,CAAC,iBAAiB,KAAK,QAAQ,CAAC,iBAAiB,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,mBAAmB,EAAE,CAAC;YAClH,MAAM,eAAe,CAAC,gEAAgE,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;eACxD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,iBAAiB,CAAC,yCAAyC,EAAE,kCAAkC,CAAC,CAAC;QAC7G,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,iBAAiB;YAAE,MAAM,KAAK,CAAC;QACpD,MAAM,eAAe,CAAC,oDAAoD,CAAC,CAAC;IAC9E,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACZ,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,MAA0B,EAAE,OAAe;IACjF,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,KAAK,EAAE,CAAC;QACnG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,IAAY;IAC3C,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACrE,MAAM,eAAe,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,KAAa,EAAE,IAAY;IACzC,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,eAAe,EAAE,CAAC;QACjE,MAAM,eAAe,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,IAAY;IAC3C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QAAE,MAAM,eAAe,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;IACzF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,KAAa,EAAE,IAAY;IAC1C,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,eAAe,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;IAChH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,OAAO,IAAI,iBAAiB,CAAC,OAAO,EAAE,mCAAmC,CAAC,CAAC;AAC7E,CAAC"}

package/dist/protocol.d.ts

@@ -18,6 +18,11 @@ export declare const CODEX_V3_ENROLLMENTS_PATH = "/v3/codex/enrollments";
 export declare const CODEX_V3_CREDENTIAL_ASSIGNMENTS_PATH = "/v3/codex/credential-assignments";
 export declare const CODEX_V3_FULL_CREDENTIAL_DELIVERIES_PATH = "/v3/codex/full-credential-deliveries";
 export declare const CODEX_V3_CREDENTIAL_LINEAGES_PATH = "/v3/codex/credential-lineages";
+export declare const CODEX_TOKEN_POOL_V4_SCHEMA_VERSION: 4;
+export declare const CODEX_TOKEN_POOL_V4_PATH = "/v4/admin/codex";
+export declare const CODEX_TOKEN_POOL_V4_ENROLLMENT_CONFIGURATION_PATH = "/v4/admin/codex/enrollment-configuration";
+export declare const CODEX_TOKEN_POOL_V4_DIRECTORY_RESOLVE_PATH = "/v4/admin/codex/directory-users/resolve";
+export declare const CODEX_TOKEN_POOL_V4_UPLOADS_PATH = "/v4/admin/codex/token-pool/uploads";
 export declare const CODEX_MIGRATION_CAPACITY: {
     readonly verifiedMinimum: 2;
     readonly verifiedLimit: null;
@@ -1749,6 +1754,142 @@ export declare const CodexV3GenerationReportResponseSchema: z.ZodObject<{
     }, z.core.$strict>;
     replayed: z.ZodBoolean;
 }, z.core.$strict>;
+export declare const CodexTokenPoolV4IdempotencyKeySchema: z.ZodString;
+export declare const CodexTokenPoolV4AssignmentTargetSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    mode: z.ZodLiteral<"UNBOUND_POOL">;
+}, z.core.$strict>, z.ZodObject<{
+    mode: z.ZodLiteral<"DIRECTORY_PRINCIPAL">;
+    principal: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    mode: z.ZodLiteral<"SUBJECT">;
+    userSubject: z.ZodString;
+}, z.core.$strict>], "mode">;
+export declare const CodexTokenPoolV4EnrollmentConfigurationSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<4>;
+    ingress: z.ZodObject<{
+        envelopeVersion: z.ZodLiteral<1>;
+        algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
+        keyId: z.ZodString;
+        publicKey: z.ZodString;
+        maxRequestBytes: z.ZodNumber;
+        maxCiphertextBytes: z.ZodNumber;
+    }, z.core.$strict>;
+    assignmentModes: z.ZodTuple<[z.ZodLiteral<"UNBOUND_POOL">, z.ZodLiteral<"DIRECTORY_PRINCIPAL">, z.ZodLiteral<"SUBJECT">], null>;
+}, z.core.$strict>;
+export declare const CodexTokenPoolV4DirectoryResolveResponseSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<4>;
+    user: z.ZodObject<{
+        userSubject: z.ZodString;
+        username: z.ZodString;
+        email: z.ZodNullable<z.ZodEmail>;
+        enabled: z.ZodLiteral<true>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export declare const CodexTokenPoolV4UploadInputSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<4>;
+    clientRequestId: z.ZodString;
+    target: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        mode: z.ZodLiteral<"UNBOUND_POOL">;
+    }, z.core.$strict>, z.ZodObject<{
+        mode: z.ZodLiteral<"DIRECTORY_PRINCIPAL">;
+        principal: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        mode: z.ZodLiteral<"SUBJECT">;
+        userSubject: z.ZodString;
+    }, z.core.$strict>], "mode">;
+    envelope: z.ZodObject<{
+        version: z.ZodLiteral<1>;
+        algorithm: z.ZodLiteral<"X25519-HKDF-SHA256-AES-256-GCM">;
+        keyId: z.ZodString;
+        ephemeralPublicKey: z.ZodString;
+        salt: z.ZodString;
+        nonce: z.ZodString;
+        ciphertext: z.ZodString;
+        authenticationTag: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export declare const CodexTokenPoolV4UploadResponseTargetSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    mode: z.ZodLiteral<"UNBOUND_POOL">;
+}, z.core.$strict>, z.ZodObject<{
+    mode: z.ZodLiteral<"SUBJECT">;
+    userSubject: z.ZodString;
+    username: z.ZodString;
+    userEmail: z.ZodNullable<z.ZodEmail>;
+}, z.core.$strict>], "mode">;
+export declare const CodexTokenPoolV4UploadSchema: z.ZodObject<{
+    id: z.ZodString;
+    clientRequestId: z.ZodString;
+    status: z.ZodEnum<{
+        NEEDS_REAUTH: "NEEDS_REAUTH";
+        OUTCOME_AMBIGUOUS: "OUTCOME_AMBIGUOUS";
+        POOLED: "POOLED";
+        RESERVED: "RESERVED";
+        TEMPORARILY_UNAVAILABLE: "TEMPORARILY_UNAVAILABLE";
+        VALIDATING: "VALIDATING";
+    }>;
+    placement: z.ZodEnum<{
+        FAILED: "FAILED";
+        PENDING: "PENDING";
+        RESERVED: "RESERVED";
+        UNBOUND_POOL: "UNBOUND_POOL";
+    }>;
+    managedAccountId: z.ZodNullable<z.ZodString>;
+    providerAccountId: z.ZodNullable<z.ZodString>;
+    poolEntryId: z.ZodNullable<z.ZodString>;
+    assignmentId: z.ZodNullable<z.ZodString>;
+    assignedUserSubject: z.ZodNullable<z.ZodString>;
+    reservedLineageId: z.ZodNullable<z.ZodString>;
+    target: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        mode: z.ZodLiteral<"UNBOUND_POOL">;
+    }, z.core.$strict>, z.ZodObject<{
+        mode: z.ZodLiteral<"SUBJECT">;
+        userSubject: z.ZodString;
+        username: z.ZodString;
+        userEmail: z.ZodNullable<z.ZodEmail>;
+    }, z.core.$strict>], "mode">;
+    createdAt: z.ZodString;
+    completedAt: z.ZodNullable<z.ZodString>;
+    safeErrorCode: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+export declare const CodexTokenPoolV4UploadResponseSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<4>;
+    upload: z.ZodObject<{
+        id: z.ZodString;
+        clientRequestId: z.ZodString;
+        status: z.ZodEnum<{
+            NEEDS_REAUTH: "NEEDS_REAUTH";
+            OUTCOME_AMBIGUOUS: "OUTCOME_AMBIGUOUS";
+            POOLED: "POOLED";
+            RESERVED: "RESERVED";
+            TEMPORARILY_UNAVAILABLE: "TEMPORARILY_UNAVAILABLE";
+            VALIDATING: "VALIDATING";
+        }>;
+        placement: z.ZodEnum<{
+            FAILED: "FAILED";
+            PENDING: "PENDING";
+            RESERVED: "RESERVED";
+            UNBOUND_POOL: "UNBOUND_POOL";
+        }>;
+        managedAccountId: z.ZodNullable<z.ZodString>;
+        providerAccountId: z.ZodNullable<z.ZodString>;
+        poolEntryId: z.ZodNullable<z.ZodString>;
+        assignmentId: z.ZodNullable<z.ZodString>;
+        assignedUserSubject: z.ZodNullable<z.ZodString>;
+        reservedLineageId: z.ZodNullable<z.ZodString>;
+        target: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            mode: z.ZodLiteral<"UNBOUND_POOL">;
+        }, z.core.$strict>, z.ZodObject<{
+            mode: z.ZodLiteral<"SUBJECT">;
+            userSubject: z.ZodString;
+            username: z.ZodString;
+            userEmail: z.ZodNullable<z.ZodEmail>;
+        }, z.core.$strict>], "mode">;
+        createdAt: z.ZodString;
+        completedAt: z.ZodNullable<z.ZodString>;
+        safeErrorCode: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>;
+    replayed: z.ZodBoolean;
+}, z.core.$strict>;
 export type CodexAccountSummary = z.infer<typeof CodexAccountSummarySchema>;
 export type CodexQuotaSnapshotView = z.infer<typeof CodexQuotaSnapshotViewSchema>;
 export type CodexAccountListResponse = z.infer<typeof CodexAccountListResponseSchema>;
@@ -1805,6 +1946,11 @@ export type CodexV3FullCredentialDeliveryAckResponse = z.infer<typeof CodexV3Ful
 export type CodexV3FullCredentialBundle = z.infer<typeof CodexV3FullCredentialBundleSchema>;
 export type CodexV3GenerationReportInput = z.infer<typeof CodexV3GenerationReportInputSchema>;
 export type CodexV3GenerationReportResponse = z.infer<typeof CodexV3GenerationReportResponseSchema>;
+export type CodexTokenPoolV4AssignmentTarget = z.infer<typeof CodexTokenPoolV4AssignmentTargetSchema>;
+export type CodexTokenPoolV4EnrollmentConfiguration = z.infer<typeof CodexTokenPoolV4EnrollmentConfigurationSchema>;
+export type CodexTokenPoolV4DirectoryResolveResponse = z.infer<typeof CodexTokenPoolV4DirectoryResolveResponseSchema>;
+export type CodexTokenPoolV4UploadInput = z.infer<typeof CodexTokenPoolV4UploadInputSchema>;
+export type CodexTokenPoolV4UploadResponse = z.infer<typeof CodexTokenPoolV4UploadResponseSchema>;
 export declare function codexAccountLoginCredentialsPath(accountId: string): string;
 export declare function codexAdminCredentialVersionsPath(accountId: string): string;
 export declare function codexAdminRefreshPath(accountId: string): string;
@@ -1825,3 +1971,5 @@ export declare function codexV3AssignmentFullCredentialDeliveryResolvePath(assig
 export declare function codexV3FullCredentialDeliveryAckPath(deliveryId: string): string;
 export declare function codexV3LineageGenerationReportsPath(lineageId: string): string;
 export declare function codexV3LineageGenerationReportResolvePath(lineageId: string, clientRequestId: string): string;
+export declare function codexTokenPoolV4DirectoryResolvePath(principal: string): string;
+export declare function codexTokenPoolV4UploadResolvePath(clientRequestId: string): string;

package/dist/protocol.js

@@ -19,6 +19,11 @@ export const CODEX_V3_ENROLLMENTS_PATH = `${CODEX_MANAGED_CREDENTIALS_V3_PATH}/e
 export const CODEX_V3_CREDENTIAL_ASSIGNMENTS_PATH = `${CODEX_MANAGED_CREDENTIALS_V3_PATH}/credential-assignments`;
 export const CODEX_V3_FULL_CREDENTIAL_DELIVERIES_PATH = `${CODEX_MANAGED_CREDENTIALS_V3_PATH}/full-credential-deliveries`;
 export const CODEX_V3_CREDENTIAL_LINEAGES_PATH = `${CODEX_MANAGED_CREDENTIALS_V3_PATH}/credential-lineages`;
+export const CODEX_TOKEN_POOL_V4_SCHEMA_VERSION = 4;
+export const CODEX_TOKEN_POOL_V4_PATH = "/v4/admin/codex";
+export const CODEX_TOKEN_POOL_V4_ENROLLMENT_CONFIGURATION_PATH = `${CODEX_TOKEN_POOL_V4_PATH}/enrollment-configuration`;
+export const CODEX_TOKEN_POOL_V4_DIRECTORY_RESOLVE_PATH = `${CODEX_TOKEN_POOL_V4_PATH}/directory-users/resolve`;
+export const CODEX_TOKEN_POOL_V4_UPLOADS_PATH = `${CODEX_TOKEN_POOL_V4_PATH}/token-pool/uploads`;
 export const CODEX_MIGRATION_CAPACITY = {
     verifiedMinimum: 2,
     verifiedLimit: null,
@@ -742,6 +747,95 @@ export const CodexV3GenerationReportResponseSchema = z.strictObject({
         context.addIssue({ code: "custom", path: ["report", "generationVersion"], message: "Generation did not advance exactly once." });
     }
 });
+const CodexTokenPoolV4PrincipalSchema = z.string().min(1).max(255)
+    .refine((value) => value === value.trim(), "Principal must be canonical.")
+    .refine((value) => !/[\s\u0000-\u001f\u007f]/u.test(value), "Principal contains unsafe characters.");
+export const CodexTokenPoolV4IdempotencyKeySchema = z.string().min(8).max(255)
+    .refine((value) => value === value.trim(), "Idempotency key must be canonical.");
+export const CodexTokenPoolV4AssignmentTargetSchema = z.discriminatedUnion("mode", [
+    z.strictObject({ mode: z.literal("UNBOUND_POOL") }),
+    z.strictObject({ mode: z.literal("DIRECTORY_PRINCIPAL"), principal: CodexTokenPoolV4PrincipalSchema }),
+    z.strictObject({ mode: z.literal("SUBJECT"), userSubject: CodexV3IdSchema })
+]);
+export const CodexTokenPoolV4EnrollmentConfigurationSchema = z.strictObject({
+    schemaVersion: z.literal(CODEX_TOKEN_POOL_V4_SCHEMA_VERSION),
+    ingress: CodexV3CredentialIngressSchema,
+    assignmentModes: z.tuple([
+        z.literal("UNBOUND_POOL"),
+        z.literal("DIRECTORY_PRINCIPAL"),
+        z.literal("SUBJECT")
+    ])
+});
+export const CodexTokenPoolV4DirectoryResolveResponseSchema = z.strictObject({
+    schemaVersion: z.literal(CODEX_TOKEN_POOL_V4_SCHEMA_VERSION),
+    user: z.strictObject({
+        userSubject: CodexV3IdSchema,
+        username: z.string().min(1).max(255).refine((value) => value === value.trim()),
+        email: z.email().nullable(),
+        enabled: z.literal(true)
+    })
+});
+export const CodexTokenPoolV4UploadInputSchema = z.strictObject({
+    schemaVersion: z.literal(CODEX_TOKEN_POOL_V4_SCHEMA_VERSION),
+    clientRequestId: CodexV3ClientRequestIdSchema,
+    target: CodexTokenPoolV4AssignmentTargetSchema,
+    envelope: CodexV3CredentialEnvelopeSchema
+});
+export const CodexTokenPoolV4UploadResponseTargetSchema = z.discriminatedUnion("mode", [
+    z.strictObject({ mode: z.literal("UNBOUND_POOL") }),
+    z.strictObject({
+        mode: z.literal("SUBJECT"),
+        userSubject: CodexV3IdSchema,
+        username: z.string().min(1).max(255).refine((value) => value === value.trim()),
+        userEmail: z.email().nullable()
+    })
+]);
+export const CodexTokenPoolV4UploadSchema = z.strictObject({
+    id: CodexV3IdSchema,
+    clientRequestId: CodexV3ClientRequestIdSchema,
+    status: z.enum([
+        "VALIDATING",
+        "POOLED",
+        "RESERVED",
+        "TEMPORARILY_UNAVAILABLE",
+        "NEEDS_REAUTH",
+        "OUTCOME_AMBIGUOUS"
+    ]),
+    placement: z.enum(["PENDING", "UNBOUND_POOL", "RESERVED", "FAILED"]),
+    managedAccountId: CodexV3IdSchema.nullable(),
+    providerAccountId: CodexV3IdSchema.nullable(),
+    poolEntryId: CodexV3IdSchema.nullable(),
+    assignmentId: CodexV3IdSchema.nullable(),
+    assignedUserSubject: CodexV3IdSchema.nullable(),
+    reservedLineageId: CodexV3IdSchema.nullable(),
+    target: CodexTokenPoolV4UploadResponseTargetSchema,
+    createdAt: CodexV3InstantSchema,
+    completedAt: CodexV3InstantSchema.nullable(),
+    safeErrorCode: CodexV3IdSchema.nullable()
+}).superRefine((value, context) => {
+    const outcome = [value.managedAccountId, value.providerAccountId, value.poolEntryId];
+    const reservation = [value.assignmentId, value.assignedUserSubject, value.reservedLineageId];
+    const failure = ["TEMPORARILY_UNAVAILABLE", "NEEDS_REAUTH", "OUTCOME_AMBIGUOUS"].includes(value.status);
+    const invalid = value.status === "VALIDATING"
+        ? value.placement !== "PENDING" || [...outcome, ...reservation].some((item) => item != null)
+            || value.completedAt != null || value.safeErrorCode != null
+        : value.status === "POOLED"
+            ? value.placement !== "UNBOUND_POOL" || outcome.some((item) => item == null)
+                || reservation.some((item) => item != null) || value.completedAt == null
+                || value.safeErrorCode != null || value.target.mode !== "UNBOUND_POOL"
+            : value.status === "RESERVED"
+                ? value.placement !== "RESERVED" || [...outcome, ...reservation].some((item) => item == null)
+                    || value.completedAt == null || value.safeErrorCode != null || value.target.mode !== "SUBJECT"
+                : !failure || value.placement !== "FAILED" || [...outcome, ...reservation].some((item) => item != null)
+                    || value.completedAt == null || value.safeErrorCode == null;
+    if (invalid)
+        context.addIssue({ code: "custom", message: "Token pool upload evidence is inconsistent." });
+});
+export const CodexTokenPoolV4UploadResponseSchema = z.strictObject({
+    schemaVersion: z.literal(CODEX_TOKEN_POOL_V4_SCHEMA_VERSION),
+    upload: CodexTokenPoolV4UploadSchema,
+    replayed: z.boolean()
+});
 export function codexAccountLoginCredentialsPath(accountId) {
     return `${CODEX_ACCOUNTS_PATH}/${encodeURIComponent(accountId)}/login-credentials`;
 }
@@ -797,4 +891,10 @@ export function codexV3LineageGenerationReportResolvePath(lineageId, clientReque
     return `${CODEX_V3_CREDENTIAL_LINEAGES_PATH}/${encodeURIComponent(lineageId)}`
         + `/generations/resolve?clientRequestId=${encodeURIComponent(clientRequestId)}`;
 }
+export function codexTokenPoolV4DirectoryResolvePath(principal) {
+    return `${CODEX_TOKEN_POOL_V4_DIRECTORY_RESOLVE_PATH}?principal=${encodeURIComponent(principal)}`;
+}
+export function codexTokenPoolV4UploadResolvePath(clientRequestId) {
+    return `${CODEX_TOKEN_POOL_V4_UPLOADS_PATH}/resolve?clientRequestId=${encodeURIComponent(clientRequestId)}`;
+}
 //# sourceMappingURL=protocol.js.map