@truefoundry/tfy-auth-handler-lib 0.1.0

package/dist/TenantCache.js

@@ -0,0 +1,359 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TenantCache = void 0;
+const logger_1 = require("./logger");
+const types_1 = require("./types");
+/**
+ * Holds all cached authorization data for a single tenant: grants, users,
+ * and teams. Exposes public query methods via ITenantCache and internal
+ * mutation methods used by the watcher layer.
+ */
+class TenantCache {
+    constructor(logger) {
+        this.grantIndex = new Map();
+        this.cachedGrants = [];
+        this.userTeamIndex = new Map();
+        this.cachedUsers = [];
+        this.cachedTeams = [];
+        /** Raw KVStoreV2Data blobs — kept as-is because they are JWK key sets, not entity arrays. */
+        this.cachedExternalJwks = null;
+        this.cachedPrimaryJwks = null;
+        this.cachedMcpServers = [];
+        this.cachedRoles = [];
+        this.cachedAgents = [];
+        this.cachedExternalIdentities = [];
+        this.cachedModels = [];
+        this.cachedGuardrails = [];
+        this.cachedGatewayConfigs = [];
+        this.cachedServiceAccounts = [];
+        this.cachedVirtualAccounts = [];
+        this.cachedPats = [];
+        this.cachedExternalIdentityProviders = [];
+        this.logger = logger ?? (0, logger_1.createDefaultLogger)('TenantCache');
+    }
+    // ---------------------------------------------------------------------------
+    // Internal mutation API (called by AuthCache when the watcher delivers data)
+    // ---------------------------------------------------------------------------
+    updateEntity(entity, data) {
+        switch (entity) {
+            case types_1.AuthCacheEntity.AUTHORIZATION:
+                this.updateAuthorization(data);
+                break;
+            case types_1.AuthCacheEntity.USERS:
+                this.updateUsers(data);
+                break;
+            case types_1.AuthCacheEntity.TEAMS:
+                this.updateTeams(data);
+                break;
+            case types_1.AuthCacheEntity.MCP_SERVER:
+                this.updateMcpServers(data);
+                break;
+            case types_1.AuthCacheEntity.AGENT:
+                this.updateAgents(data);
+                break;
+            case types_1.AuthCacheEntity.EXTERNAL_IDENTITY:
+                this.updateExternalIdentities(data);
+                break;
+            case types_1.AuthCacheEntity.ROLE:
+                this.updateRoles(data);
+                break;
+            case types_1.AuthCacheEntity.EXTERNAL_JWKS:
+                this.updateExternalJwks(data);
+                break;
+            case types_1.AuthCacheEntity.PRIMARY_JWKS:
+                this.updatePrimaryJwks(data);
+                break;
+            case types_1.AuthCacheEntity.MODEL:
+                this.updateModels(data);
+                break;
+            case types_1.AuthCacheEntity.GUARDRAIL:
+                this.updateGuardrails(data);
+                break;
+            case types_1.AuthCacheEntity.GATEWAY_CONFIG:
+                this.updateGatewayConfigs(data);
+                break;
+            case types_1.AuthCacheEntity.SERVICE_ACCOUNT:
+                this.updateServiceAccounts(data);
+                break;
+            case types_1.AuthCacheEntity.VIRTUAL_ACCOUNT:
+                this.updateVirtualAccounts(data);
+                break;
+            case types_1.AuthCacheEntity.PAT:
+                this.updatePats(data);
+                break;
+            case types_1.AuthCacheEntity.EXTERNAL_IDENTITY_PROVIDER:
+                this.updateExternalIdentityProviders(data);
+                break;
+            default:
+                this.logger.warn(`Unrecognized entity type: "${entity}"`);
+        }
+    }
+    deleteEntity(entity) {
+        switch (entity) {
+            case types_1.AuthCacheEntity.AUTHORIZATION:
+                this.grantIndex = new Map();
+                this.cachedGrants = [];
+                break;
+            case types_1.AuthCacheEntity.USERS:
+                this.cachedUsers = [];
+                break;
+            case types_1.AuthCacheEntity.TEAMS:
+                this.cachedTeams = [];
+                this.userTeamIndex = new Map();
+                break;
+            case types_1.AuthCacheEntity.MCP_SERVER:
+                this.cachedMcpServers = [];
+                break;
+            case types_1.AuthCacheEntity.AGENT:
+                this.cachedAgents = [];
+                break;
+            case types_1.AuthCacheEntity.EXTERNAL_IDENTITY:
+                this.cachedExternalIdentities = [];
+                break;
+            case types_1.AuthCacheEntity.ROLE:
+                this.cachedRoles = [];
+                break;
+            case types_1.AuthCacheEntity.EXTERNAL_JWKS:
+                this.cachedExternalJwks = null;
+                break;
+            case types_1.AuthCacheEntity.PRIMARY_JWKS:
+                this.cachedPrimaryJwks = null;
+                break;
+            case types_1.AuthCacheEntity.MODEL:
+                this.cachedModels = [];
+                break;
+            case types_1.AuthCacheEntity.GUARDRAIL:
+                this.cachedGuardrails = [];
+                break;
+            case types_1.AuthCacheEntity.GATEWAY_CONFIG:
+                this.cachedGatewayConfigs = [];
+                break;
+            case types_1.AuthCacheEntity.SERVICE_ACCOUNT:
+                this.cachedServiceAccounts = [];
+                break;
+            case types_1.AuthCacheEntity.VIRTUAL_ACCOUNT:
+                this.cachedVirtualAccounts = [];
+                break;
+            case types_1.AuthCacheEntity.PAT:
+                this.cachedPats = [];
+                break;
+            case types_1.AuthCacheEntity.EXTERNAL_IDENTITY_PROVIDER:
+                this.cachedExternalIdentityProviders = [];
+                break;
+            default:
+                this.logger.warn(`Unrecognized entity type: "${entity}"`);
+        }
+    }
+    /**
+     * Builds the full index into a temporary map first, then swaps it in
+     * atomically so that concurrent reads never see a partially built or
+     * empty index.
+     */
+    updateAuthorization(grants) {
+        this.cachedGrants = grants;
+        const nextIndex = new Map();
+        for (const grant of grants) {
+            let subjectMap = nextIndex.get(grant.subjectIdentifier);
+            if (!subjectMap) {
+                subjectMap = new Map();
+                nextIndex.set(grant.subjectIdentifier, subjectMap);
+            }
+            let permSet = subjectMap.get(grant.resourceId);
+            if (!permSet) {
+                permSet = new Set();
+                subjectMap.set(grant.resourceId, permSet);
+            }
+            for (const perm of grant.permissions) {
+                permSet.add(perm);
+            }
+        }
+        this.grantIndex = nextIndex;
+    }
+    updateUsers(users) {
+        this.cachedUsers = users;
+    }
+    /**
+     * Stores the team list and builds a reverse index (userEmail → teamNames[])
+     * so that checkAccess can resolve team-inherited grants without the caller
+     * needing to supply team memberships.
+     */
+    updateTeams(teams) {
+        this.cachedTeams = teams;
+        const userTeamMap = new Map();
+        for (const team of teams) {
+            for (const memberEmail of team.members) {
+                const existing = userTeamMap.get(memberEmail);
+                if (existing) {
+                    existing.push(team.name);
+                }
+                else {
+                    userTeamMap.set(memberEmail, [team.name]);
+                }
+            }
+        }
+        this.userTeamIndex = userTeamMap;
+    }
+    updateExternalIdentities(kvStorePayload) {
+        this.cachedExternalIdentities = this.natsPayloadDataValues(kvStorePayload);
+    }
+    /** Kid → public key DTO map from `addExternalJWKSPublicKeysV2InNats` (`data` field). */
+    updateExternalJwks(data) {
+        this.cachedExternalJwks = data;
+    }
+    /** Kid → public key DTO map from `addPrimaryJWKSPublicKeysV2InNats` (`data` field). */
+    updatePrimaryJwks(data) {
+        this.cachedPrimaryJwks = data;
+    }
+    /** Virtual accounts from DB snapshot (`AuthInvalidationConsumerService`). */
+    updateVirtualAccounts(data) {
+        this.cachedVirtualAccounts = data;
+    }
+    /** PATs from DB snapshot (`AuthInvalidationConsumerService`). */
+    updatePats(data) {
+        this.cachedPats = data;
+    }
+    // ---------------------------------------------------------------------------
+    // Public API (ITenantCache)
+    // ---------------------------------------------------------------------------
+    checkAccessForResourceId(opts) {
+        const directPerms = this.getPermissionsByResourceId(opts.subjectIdentifier, opts.resourceId);
+        if (directPerms?.has(opts.requiredPermission)) {
+            return true;
+        }
+        const teamNames = this.getUserTeams(opts.subjectIdentifier);
+        for (const teamName of teamNames) {
+            const teamPerms = this.getPermissionsByResourceId(teamName, opts.resourceId);
+            if (teamPerms?.has(opts.requiredPermission)) {
+                return true;
+            }
+        }
+        return false;
+    }
+    getUserTeams(userEmail) {
+        return this.userTeamIndex.get(userEmail) ?? [];
+    }
+    searchUsers(substring, limit = 10) {
+        const lower = substring.toLowerCase();
+        const results = [];
+        for (const user of this.cachedUsers) {
+            if (results.length >= limit) {
+                break;
+            }
+            if (user.email.toLowerCase().includes(lower) || (user.displayName?.toLowerCase().includes(lower) ?? false)) {
+                results.push(user);
+            }
+        }
+        return results;
+    }
+    searchTeams(substring, limit = 10) {
+        const lower = substring.toLowerCase();
+        const results = [];
+        for (const team of this.cachedTeams) {
+            if (results.length >= limit) {
+                break;
+            }
+            if (team.name.toLowerCase().includes(lower)) {
+                results.push(team);
+            }
+        }
+        return results;
+    }
+    getGrants() {
+        return this.cachedGrants;
+    }
+    getUsers() {
+        return this.cachedUsers;
+    }
+    getTeams() {
+        return this.cachedTeams;
+    }
+    getMcpServers() {
+        return this.cachedMcpServers;
+    }
+    getRoles() {
+        return this.cachedRoles;
+    }
+    getExternalJwks() {
+        return this.cachedExternalJwks;
+    }
+    getPrimaryJwks() {
+        return this.cachedPrimaryJwks;
+    }
+    getAgents() {
+        return this.cachedAgents;
+    }
+    getExternalIdentities() {
+        return this.cachedExternalIdentities;
+    }
+    getModels() {
+        return this.cachedModels;
+    }
+    getGuardrails() {
+        return this.cachedGuardrails;
+    }
+    getGatewayConfigs() {
+        return this.cachedGatewayConfigs;
+    }
+    getServiceAccounts() {
+        return this.cachedServiceAccounts;
+    }
+    getVirtualAccounts() {
+        return this.cachedVirtualAccounts;
+    }
+    getPats() {
+        return this.cachedPats;
+    }
+    getExternalIdentityProviders() {
+        return this.cachedExternalIdentityProviders;
+    }
+    // ---------------------------------------------------------------------------
+    // Private helpers
+    // ---------------------------------------------------------------------------
+    natsPayloadDataValues(natsPayload) {
+        if (natsPayload === null || typeof natsPayload !== 'object') {
+            return [];
+        }
+        const inner = natsPayload.data;
+        if (!inner || typeof inner !== 'object') {
+            return [];
+        }
+        return Object.values(inner);
+    }
+    /** MCP servers and guardrails share the same `toNatsFormatIntegration` wire shape (llmgateway/utils). */
+    parseIntegrationRows(kvStorePayload) {
+        return this.natsPayloadDataValues(kvStorePayload);
+    }
+    updateMcpServers(kvStorePayload) {
+        this.cachedMcpServers = this.parseIntegrationRows(kvStorePayload);
+    }
+    updateGuardrails(kvStorePayload) {
+        this.cachedGuardrails = this.parseIntegrationRows(kvStorePayload);
+    }
+    updateRoles(kvStorePayload) {
+        this.cachedRoles = this.natsPayloadDataValues(kvStorePayload);
+    }
+    /** Value shape from `addAgentsV2InNats` (llmgateway/natsUtilsV2). */
+    updateAgents(kvStorePayload) {
+        this.cachedAgents = this.natsPayloadDataValues(kvStorePayload);
+    }
+    /** Provider account rows from `addModelsV2InNats` (`toNatsFormatProviderAccount` + integrations). */
+    updateModels(kvStorePayload) {
+        this.cachedModels = this.natsPayloadDataValues(kvStorePayload);
+    }
+    /** KV value is `config.manifest` (`addGatewayConfigsV2InNats`). */
+    updateGatewayConfigs(kvStorePayload) {
+        this.cachedGatewayConfigs = this.natsPayloadDataValues(kvStorePayload);
+    }
+    updateServiceAccounts(kvStorePayload) {
+        this.cachedServiceAccounts = this.natsPayloadDataValues(kvStorePayload);
+    }
+    updateExternalIdentityProviders(kvStorePayload) {
+        this.cachedExternalIdentityProviders =
+            this.natsPayloadDataValues(kvStorePayload);
+    }
+    getPermissionsByResourceId(subjectIdentifier, resourceId) {
+        return this.grantIndex.get(subjectIdentifier)?.get(resourceId);
+    }
+}
+exports.TenantCache = TenantCache;
+//# sourceMappingURL=TenantCache.js.map

package/dist/TenantCache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TenantCache.js","sourceRoot":"","sources":["../src/TenantCache.ts"],"names":[],"mappings":";;;AAAA,qCAA+C;AAqB/C,mCAA0C;AAK1C;;;;GAIG;AACH,MAAa,WAAW;IAGtB,YAAY,MAAwB;QAG5B,eAAU,GAAe,IAAI,GAAG,EAAE,CAAC;QACnC,iBAAY,GAAgB,EAAE,CAAC;QAC/B,kBAAa,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC5C,gBAAW,GAAiB,EAAE,CAAC;QAC/B,gBAAW,GAAiB,EAAE,CAAC;QACvC,6FAA6F;QACrF,uBAAkB,GAAkB,IAAI,CAAC;QACzC,sBAAiB,GAAkB,IAAI,CAAC;QAExC,qBAAgB,GAAsB,EAAE,CAAC;QACzC,gBAAW,GAAiB,EAAE,CAAC;QAC/B,iBAAY,GAAkB,EAAE,CAAC;QACjC,6BAAwB,GAA6B,EAAE,CAAC;QACxD,iBAAY,GAAkB,EAAE,CAAC;QACjC,qBAAgB,GAAsB,EAAE,CAAC;QACzC,yBAAoB,GAA0B,EAAE,CAAC;QACjD,0BAAqB,GAA2B,EAAE,CAAC;QACnD,0BAAqB,GAA2B,EAAE,CAAC;QACnD,eAAU,GAAgB,EAAE,CAAC;QAC7B,oCAA+B,GAAqC,EAAE,CAAC;QArB7E,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,IAAA,4BAAmB,EAAC,aAAa,CAAC,CAAC;IAC7D,CAAC;IAsBD,8EAA8E;IAC9E,6EAA6E;IAC7E,8EAA8E;IAE9E,YAAY,CAAC,MAAuB,EAAE,IAAa;QACjD,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,uBAAe,CAAC,aAAa;gBAChC,IAAI,CAAC,mBAAmB,CAAC,IAAmB,CAAC,CAAC;gBAC9C,MAAM;YACR,KAAK,uBAAe,CAAC,KAAK;gBACxB,IAAI,CAAC,WAAW,CAAC,IAAoB,CAAC,CAAC;gBACvC,MAAM;YACR,KAAK,uBAAe,CAAC,KAAK;gBACxB,IAAI,CAAC,WAAW,CAAC,IAAoB,CAAC,CAAC;gBACvC,MAAM;YACR,KAAK,uBAAe,CAAC,UAAU;gBAC7B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;gBAC5B,MAAM;YACR,KAAK,uBAAe,CAAC,KAAK;gBACxB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;gBACxB,MAAM;YACR,KAAK,uBAAe,CAAC,iBAAiB;gBACpC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;gBACpC,MAAM;YACR,KAAK,uBAAe,CAAC,IAAI;gBACvB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;gBACvB,MAAM;YACR,KAAK,uBAAe,CAAC,aAAa;gBAChC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;gBAC9B,MAAM;YACR,KAAK,uBAAe,CAAC,YAAY;gBAC/B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;gBAC7B,MAAM;YACR,KAAK,uBAAe,CAAC,KAAK;gBACxB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;gBACxB,MAAM;YACR,KAAK,uBAAe,CAAC,SAAS;gBAC5B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;gBAC5B,MAAM;YACR,KAAK,uBAAe,CAAC,cAAc;gBACjC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;gBAChC,MAAM;YACR,KAAK,uBAAe,CAAC,eAAe;gBAClC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;gBACjC,MAAM;YACR,KAAK,uBAAe,CAAC,eAAe;gBAClC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;gBACjC,MAAM;YACR,KAAK,uBAAe,CAAC,GAAG;gBACtB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBACtB,MAAM;YACR,KAAK,uBAAe,CAAC,0BAA0B;gBAC7C,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,CAAC;gBAC3C,MAAM;YACR;gBACE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,MAAM,GAAG,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,YAAY,CAAC,MAAuB;QAClC,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,uBAAe,CAAC,aAAa;gBAChC,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,EAAE,CAAC;gBAC5B,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC;gBACvB,MAAM;YACR,KAAK,uBAAe,CAAC,KAAK;gBACxB,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;gBACtB,MAAM;YACR,KAAK,uBAAe,CAAC,KAAK;gBACxB,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;gBACtB,IAAI,CAAC,aAAa,GAAG,IAAI,GAAG,EAAE,CAAC;gBAC/B,MAAM;YACR,KAAK,uBAAe,CAAC,UAAU;gBAC7B,IAAI,CAAC,gBAAgB,GAAG,EAAE,CAAC;gBAC3B,MAAM;YACR,KAAK,uBAAe,CAAC,KAAK;gBACxB,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC;gBACvB,MAAM;YACR,KAAK,uBAAe,CAAC,iBAAiB;gBACpC,IAAI,CAAC,wBAAwB,GAAG,EAAE,CAAC;gBACnC,MAAM;YACR,KAAK,uBAAe,CAAC,IAAI;gBACvB,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;gBACtB,MAAM;YACR,KAAK,uBAAe,CAAC,aAAa;gBAChC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;gBAC/B,MAAM;YACR,KAAK,uBAAe,CAAC,YAAY;gBAC/B,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;gBAC9B,MAAM;YACR,KAAK,uBAAe,CAAC,KAAK;gBACxB,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC;gBACvB,MAAM;YACR,KAAK,uBAAe,CAAC,SAAS;gBAC5B,IAAI,CAAC,gBAAgB,GAAG,EAAE,CAAC;gBAC3B,MAAM;YACR,KAAK,uBAAe,CAAC,cAAc;gBACjC,IAAI,CAAC,oBAAoB,GAAG,EAAE,CAAC;gBAC/B,MAAM;YACR,KAAK,uBAAe,CAAC,eAAe;gBAClC,IAAI,CAAC,qBAAqB,GAAG,EAAE,CAAC;gBAChC,MAAM;YACR,KAAK,uBAAe,CAAC,eAAe;gBAClC,IAAI,CAAC,qBAAqB,GAAG,EAAE,CAAC;gBAChC,MAAM;YACR,KAAK,uBAAe,CAAC,GAAG;gBACtB,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;gBACrB,MAAM;YACR,KAAK,uBAAe,CAAC,0BAA0B;gBAC7C,IAAI,CAAC,+BAA+B,GAAG,EAAE,CAAC;gBAC1C,MAAM;YACR;gBACE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,MAAM,GAAG,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,mBAAmB,CAAC,MAAmB;QAC7C,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC;QAC3B,MAAM,SAAS,GAAe,IAAI,GAAG,EAAE,CAAC;QAExC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACxD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,UAAU,GAAG,IAAI,GAAG,EAAE,CAAC;gBACvB,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;YACrD,CAAC;YAED,IAAI,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;gBACpB,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAC5C,CAAC;YAED,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBACrC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;IAC9B,CAAC;IAEO,WAAW,CAAC,KAAmB;QACrC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED;;;;OAIG;IACK,WAAW,CAAC,KAAmB;QACrC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QAEzB,MAAM,WAAW,GAAG,IAAI,GAAG,EAAoB,CAAC;QAChD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACvC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBAC9C,IAAI,QAAQ,EAAE,CAAC;oBACb,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC3B,CAAC;qBAAM,CAAC;oBACN,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,CAAC,aAAa,GAAG,WAAW,CAAC;IACnC,CAAC;IAEO,wBAAwB,CAAC,cAAuB;QACtD,IAAI,CAAC,wBAAwB,GAAG,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAA6B,CAAC;IACzG,CAAC;IAED,wFAAwF;IAChF,kBAAkB,CAAC,IAAa;QACtC,IAAI,CAAC,kBAAkB,GAAG,IAAc,CAAC;IAC3C,CAAC;IAED,uFAAuF;IAC/E,iBAAiB,CAAC,IAAa;QACrC,IAAI,CAAC,iBAAiB,GAAG,IAAc,CAAC;IAC1C,CAAC;IAED,6EAA6E;IACrE,qBAAqB,CAAC,IAAa;QACzC,IAAI,CAAC,qBAAqB,GAAG,IAA8B,CAAC;IAC9D,CAAC;IAED,iEAAiE;IACzD,UAAU,CAAC,IAAa;QAC9B,IAAI,CAAC,UAAU,GAAG,IAAmB,CAAC;IACxC,CAAC;IAED,8EAA8E;IAC9E,4BAA4B;IAC5B,8EAA8E;IAE9E,wBAAwB,CAAC,IAA0C;QACjE,MAAM,WAAW,GAAG,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC7F,IAAI,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC9C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC5D,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,IAAI,CAAC,0BAA0B,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YAC7E,IAAI,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC5C,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,YAAY,CAAC,SAAiB;QAC5B,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IACjD,CAAC;IAED,WAAW,CAAC,SAAiB,EAAE,KAAK,GAAG,EAAE;QACvC,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,OAAO,GAAiB,EAAE,CAAC;QAEjC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACpC,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;gBAC5B,MAAM;YACR,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC3G,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,WAAW,CAAC,SAAiB,EAAE,KAAK,GAAG,EAAE;QACvC,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,OAAO,GAAiB,EAAE,CAAC;QAEjC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACpC,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;gBAC5B,MAAM;YACR,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAChC,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,qBAAqB;QACnB,OAAO,IAAI,CAAC,wBAAwB,CAAC;IACvC,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;IAED,iBAAiB;QACf,OAAO,IAAI,CAAC,oBAAoB,CAAC;IACnC,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,qBAAqB,CAAC;IACpC,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,qBAAqB,CAAC;IACpC,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,4BAA4B;QAC1B,OAAO,IAAI,CAAC,+BAA+B,CAAC;IAC9C,CAAC;IAED,8EAA8E;IAC9E,kBAAkB;IAClB,8EAA8E;IAEtE,qBAAqB,CAAC,WAAoB;QAChD,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YAC5D,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,GAAI,WAAkC,CAAC,IAAI,CAAC;QACvD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC,CAAC;IACzD,CAAC;IAED,yGAAyG;IACjG,oBAAoB,CAAC,cAAuB;QAClD,OAAO,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAmC,CAAC;IACtF,CAAC;IAEO,gBAAgB,CAAC,cAAuB;QAC9C,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;IACpE,CAAC;IAEO,gBAAgB,CAAC,cAAuB;QAC9C,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC;IACpE,CAAC;IAEO,WAAW,CAAC,cAAuB;QACzC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAiB,CAAC;IAChF,CAAC;IAED,qEAAqE;IAC7D,YAAY,CAAC,cAAuB;QAC1C,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAkB,CAAC;IAClF,CAAC;IAED,qGAAqG;IAC7F,YAAY,CAAC,cAAuB;QAC1C,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAkB,CAAC;IAClF,CAAC;IAED,mEAAmE;IAC3D,oBAAoB,CAAC,cAAuB;QAClD,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAA0B,CAAC;IAClG,CAAC;IAEO,qBAAqB,CAAC,cAAuB;QACnD,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAA2B,CAAC;IACpG,CAAC;IAEO,+BAA+B,CAAC,cAAuB;QAC7D,IAAI,CAAC,+BAA+B;YAClC,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAqC,CAAC;IACnF,CAAC;IAEO,0BAA0B,CAAC,iBAAyB,EAAE,UAAkB;QAC9E,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IACjE,CAAC;CACF;AAjZD,kCAiZC"}

package/dist/decompress.d.ts

@@ -0,0 +1,2 @@
+export declare function deserializeBlob(data: Uint8Array): Promise<string>;
+//# sourceMappingURL=decompress.d.ts.map

package/dist/decompress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decompress.d.ts","sourceRoot":"","sources":["../src/decompress.ts"],"names":[],"mappings":"AAYA,wBAAsB,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAOvE"}

package/dist/decompress.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deserializeBlob = deserializeBlob;
+const node_util_1 = require("node:util");
+const node_zlib_1 = require("node:zlib");
+const gunzipAsync = (0, node_util_1.promisify)(node_zlib_1.gunzip);
+const GZIP_MAGIC_BYTE_0 = 0x1f;
+const GZIP_MAGIC_BYTE_1 = 0x8b;
+function isGzipped(data) {
+    return data.length >= 2 && data[0] === GZIP_MAGIC_BYTE_0 && data[1] === GZIP_MAGIC_BYTE_1;
+}
+async function deserializeBlob(data) {
+    if (isGzipped(data)) {
+        const buffer = Buffer.from(data.buffer, data.byteOffset, data.byteLength);
+        const decompressed = await gunzipAsync(buffer);
+        return decompressed.toString('utf-8');
+    }
+    return new TextDecoder().decode(data);
+}
+//# sourceMappingURL=decompress.js.map

package/dist/decompress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decompress.js","sourceRoot":"","sources":["../src/decompress.ts"],"names":[],"mappings":";;AAYA,0CAOC;AAnBD,yCAAsC;AACtC,yCAAmC;AAEnC,MAAM,WAAW,GAAG,IAAA,qBAAS,EAAC,kBAAM,CAAC,CAAC;AAEtC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAC/B,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAE/B,SAAS,SAAS,CAAC,IAAgB;IACjC,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,iBAAiB,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,iBAAiB,CAAC;AAC5F,CAAC;AAEM,KAAK,UAAU,eAAe,CAAC,IAAgB;IACpD,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1E,MAAM,YAAY,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;QAC/C,OAAO,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export { AUTH_DATA_BUCKET_NAME, createAuthCache } from './AuthCache';
+export { AuthCacheEntity } from './types';
+export type { AuthCacheConfig, AuthCacheLogger, AuthGrant, CachedAgent, CachedExternalIdentity, CachedExternalIdentityProvider, CachedGatewayConfig, CachedGuardrail, CachedIntegrationProviderAccount, CachedMcpServer, CachedModel, CachedModelIntegration, CachedPAT, CachedProviderAccountRow, CachedProviderIntegrationRow, CachedRole, CachedServiceAccount, CachedTeam, CachedUser, CachedVirtualAccount, CheckAccessByResourceIdOptions, IAuthCache, ITenantCache, TenantCheckAccessByResourceIdOptions, } from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC1C,YAAY,EACV,eAAe,EACf,eAAe,EACf,SAAS,EACT,WAAW,EACX,sBAAsB,EACtB,8BAA8B,EAC9B,mBAAmB,EACnB,eAAe,EACf,gCAAgC,EAChC,eAAe,EACf,WAAW,EACX,sBAAsB,EACtB,SAAS,EACT,wBAAwB,EACxB,4BAA4B,EAC5B,UAAU,EACV,oBAAoB,EACpB,UAAU,EACV,UAAU,EACV,oBAAoB,EACpB,8BAA8B,EAC9B,UAAU,EACV,YAAY,EACZ,oCAAoC,GACrC,MAAM,SAAS,CAAC"}

package/dist/index.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthCacheEntity = exports.createAuthCache = exports.AUTH_DATA_BUCKET_NAME = void 0;
+var AuthCache_1 = require("./AuthCache");
+Object.defineProperty(exports, "AUTH_DATA_BUCKET_NAME", { enumerable: true, get: function () { return AuthCache_1.AUTH_DATA_BUCKET_NAME; } });
+Object.defineProperty(exports, "createAuthCache", { enumerable: true, get: function () { return AuthCache_1.createAuthCache; } });
+var types_1 = require("./types");
+Object.defineProperty(exports, "AuthCacheEntity", { enumerable: true, get: function () { return types_1.AuthCacheEntity; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,yCAAqE;AAA5D,kHAAA,qBAAqB,OAAA;AAAE,4GAAA,eAAe,OAAA;AAC/C,iCAA0C;AAAjC,wGAAA,eAAe,OAAA"}

package/dist/logger.d.ts

@@ -0,0 +1,3 @@
+import type { AuthCacheLogger } from './types';
+export declare function createDefaultLogger(context: string): AuthCacheLogger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE/C,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,CAOpE"}

package/dist/logger.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createDefaultLogger = createDefaultLogger;
+function createDefaultLogger(context) {
+    return {
+        log: (message, ...args) => console.log(`[${context}] ${message}`, ...args),
+        error: (message, ...args) => console.error(`[${context}] ${message}`, ...args),
+        warn: (message, ...args) => console.warn(`[${context}] ${message}`, ...args),
+        debug: (message, ...args) => console.debug(`[${context}] ${message}`, ...args),
+    };
+}
+//# sourceMappingURL=logger.js.map

package/dist/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":";;AAEA,kDAOC;AAPD,SAAgB,mBAAmB,CAAC,OAAe;IACjD,OAAO;QACL,GAAG,EAAE,CAAC,OAAe,EAAE,GAAG,IAAe,EAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC;QACnG,KAAK,EAAE,CAAC,OAAe,EAAE,GAAG,IAAe,EAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC;QACvG,IAAI,EAAE,CAAC,OAAe,EAAE,GAAG,IAAe,EAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC;QACrG,KAAK,EAAE,CAAC,OAAe,EAAE,GAAG,IAAe,EAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC;KACxG,CAAC;AACJ,CAAC"}