@viewportai/daemon 0.5.2 → 0.5.3

package/dist/hooks/trusted-edge-plan-artifacts.d.ts

@@ -0,0 +1,114 @@
+import { transportFetch, type TlsVerifyMode } from '../cli/network.js';
+import type { DaemonEvents } from '../core/events.js';
+export declare const TRUSTED_EDGE_PLAN_BODY_SCHEMA = "viewport.plan_body_encrypted/v1";
+declare const PLAN_BODY_ALGORITHM = "AES-GCM-256";
+type PlanProposedEvent = DaemonEvents['hook:plan-proposed'];
+export interface TrustedEdgePlanEnvelope {
+    schema: typeof TRUSTED_EDGE_PLAN_BODY_SCHEMA;
+    algorithm: typeof PLAN_BODY_ALGORITHM;
+    key_ref: string;
+    ciphertext: string;
+    iv: string;
+    tag: string;
+    digest: string;
+    aad: Record<string, unknown>;
+}
+export interface TrustedEdgePlanFeedbackEnvelope {
+    schema: 'viewport.plan_feedback_field_encrypted/v1';
+    algorithm: typeof PLAN_BODY_ALGORITHM;
+    key_ref: string;
+    ciphertext: string;
+    iv: string;
+    tag: string;
+    digest: string;
+    aad: Record<string, unknown>;
+}
+export interface TrustedEdgePlanRecord {
+    workspaceId: string;
+    planId?: string;
+    sourceRef: string;
+    keyRef: string;
+    rawKey: string;
+    bodySha256: string;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface TrustedEdgePlanWrappingKey {
+    keyId: string;
+    label: string;
+    algorithm: 'RSA-OAEP-256';
+    publicKeyJwk: Record<string, unknown>;
+    privateKeyJwk: Record<string, unknown>;
+    createdAt: string;
+    lastSeenAt: string;
+}
+export interface TrustedEdgePlanBodyKeyGrant {
+    schema: 'viewport.plan_body_key_grant/v1';
+    algorithm: 'RSA-OAEP-256';
+    recipient_user_id: number;
+    recipient_key_id: string;
+    key_ref: string;
+    encrypted_key: string;
+}
+export interface TrustedEdgePlanGrantRecipient {
+    user_id: number;
+    key_id: string;
+    public_key_jwk: Record<string, unknown>;
+}
+export interface TrustedEdgePlanSyncTarget {
+    workspaceId: string;
+    serverUrl: string;
+    credential: string;
+    tlsVerify?: TlsVerifyMode;
+    caCertPath?: string;
+    tlsPins?: string[];
+}
+export declare function saveTrustedEdgePlanDraft(options: {
+    event: PlanProposedEvent;
+    target: TrustedEdgePlanSyncTarget;
+    home?: string;
+    fetchImpl?: typeof transportFetch;
+}): Promise<{
+    planId: string;
+    sourceRef: string;
+    envelope: TrustedEdgePlanEnvelope;
+}>;
+export declare function decryptTrustedEdgePlanBody(options: {
+    workspaceId: string;
+    planId?: string;
+    sourceRef?: string;
+    envelope: TrustedEdgePlanEnvelope;
+    bodyKeyGrants?: TrustedEdgePlanBodyKeyGrant[];
+    home?: string;
+}): Promise<{
+    body: string;
+    bodySha256: string;
+    keyRef: string;
+}>;
+export declare function encryptTrustedEdgePlanFeedbackField(options: {
+    workspaceId: string;
+    planId?: string;
+    sourceRef?: string;
+    envelope: TrustedEdgePlanEnvelope;
+    text: string;
+    aad?: Record<string, unknown>;
+    bodyKeyGrants?: TrustedEdgePlanBodyKeyGrant[];
+    home?: string;
+}): Promise<TrustedEdgePlanFeedbackEnvelope>;
+export declare function publishTrustedEdgePlanWrappingKey(options: {
+    target: TrustedEdgePlanSyncTarget;
+    home?: string;
+    label?: string;
+    fetchImpl?: typeof transportFetch;
+}): Promise<TrustedEdgePlanWrappingKey>;
+export declare function wrapTrustedEdgePlanBodyKey(options: {
+    workspaceId: string;
+    planId?: string;
+    sourceRef?: string;
+    envelope: TrustedEdgePlanEnvelope;
+    bodyKeyGrants?: TrustedEdgePlanBodyKeyGrant[];
+    recipients: TrustedEdgePlanGrantRecipient[];
+    home?: string;
+}): Promise<TrustedEdgePlanBodyKeyGrant[]>;
+export {};
+//# sourceMappingURL=trusted-edge-plan-artifacts.d.ts.map

package/dist/hooks/trusted-edge-plan-artifacts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trusted-edge-plan-artifacts.d.ts","sourceRoot":"","sources":["../../src/hooks/trusted-edge-plan-artifacts.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,cAAc,EAAE,KAAK,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,eAAO,MAAM,6BAA6B,oCAAoC,CAAC;AAE/E,QAAA,MAAM,mBAAmB,gBAAgB,CAAC;AAE1C,KAAK,iBAAiB,GAAG,YAAY,CAAC,oBAAoB,CAAC,CAAC;AAE5D,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,OAAO,6BAA6B,CAAC;IAC7C,SAAS,EAAE,OAAO,mBAAmB,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,+BAA+B;IAC9C,MAAM,EAAE,2CAA2C,CAAC;IACpD,SAAS,EAAE,OAAO,mBAAmB,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,cAAc,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,iCAAiC,CAAC;IAC1C,SAAS,EAAE,cAAc,CAAC;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC;AAQD,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,wBAAsB,wBAAwB,CAAC,OAAO,EAAE;IACtD,KAAK,EAAE,iBAAiB,CAAC;IACzB,MAAM,EAAE,yBAAyB,CAAC;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,cAAc,CAAC;CACnC,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,uBAAuB,CAAA;CAAE,CAAC,CAmEpF;AAED,wBAAsB,0BAA0B,CAAC,OAAO,EAAE;IACxD,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,uBAAuB,CAAC;IAClC,aAAa,CAAC,EAAE,2BAA2B,EAAE,CAAC;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA0BhE;AAED,wBAAsB,mCAAmC,CAAC,OAAO,EAAE;IACjE,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,uBAAuB,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,aAAa,CAAC,EAAE,2BAA2B,EAAE,CAAC;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC,+BAA+B,CAAC,CA+B3C;AAED,wBAAsB,iCAAiC,CAAC,OAAO,EAAE;IAC/D,MAAM,EAAE,yBAAyB,CAAC;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,OAAO,cAAc,CAAC;CACnC,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAoBtC;AAED,wBAAsB,0BAA0B,CAAC,OAAO,EAAE;IACxD,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,uBAAuB,CAAC;IAClC,aAAa,CAAC,EAAE,2BAA2B,EAAE,CAAC;IAC9C,UAAU,EAAE,6BAA6B,EAAE,CAAC;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC,2BAA2B,EAAE,CAAC,CAoBzC"}

package/dist/hooks/trusted-edge-plan-artifacts.js

@@ -0,0 +1,389 @@
+import crypto from 'node:crypto';
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { configDir } from '../core/config.js';
+import { stableJson } from '../context/local-edge-crypto.js';
+import { transportFetch } from '../cli/network.js';
+export const TRUSTED_EDGE_PLAN_BODY_SCHEMA = 'viewport.plan_body_encrypted/v1';
+const TRUSTED_EDGE_PLAN_KEY_STORE_SCHEMA = 'viewport.trusted_edge_plan_keys/v1';
+const PLAN_BODY_ALGORITHM = 'AES-GCM-256';
+export async function saveTrustedEdgePlanDraft(options) {
+    const sourceRef = options.event.sourceRef ?? `agent-hook:${options.event.sessionId}`;
+    await publishTrustedEdgePlanWrappingKey({
+        target: options.target,
+        home: options.home,
+        fetchImpl: options.fetchImpl,
+    });
+    const encrypted = await encryptTrustedEdgePlanBody({
+        workspaceId: options.target.workspaceId,
+        sourceRef,
+        sessionId: options.event.sessionId,
+        body: options.event.body,
+        source: options.event.source ?? options.event.adapter ?? null,
+    });
+    await upsertTrustedEdgePlanKey({
+        workspaceId: options.target.workspaceId,
+        sourceRef,
+        keyRef: encrypted.envelope.key_ref,
+        rawKey: encrypted.rawKey.toString('base64'),
+        bodySha256: encrypted.envelope.digest,
+    }, options.home);
+    const payload = await postJson(options.fetchImpl ?? transportFetch, `${options.target.serverUrl.replace(/\/+$/, '')}/api/runtime/workspaces/${encodeURIComponent(options.target.workspaceId)}/agent-hooks/plans`, {
+        credential: options.target.credential,
+        hook_event_name: 'PlanProposed',
+        schema: 'viewport.plan_proposal/v1',
+        session_id: options.event.sessionId,
+        cwd: options.event.cwd ?? null,
+        title: options.event.title?.trim() || 'Agent plan',
+        summary: options.event.summary?.trim() || null,
+        body_encryption: encrypted.envelope,
+        source: options.event.source ?? options.event.adapter ?? null,
+        source_ref: sourceRef,
+        payload: {
+            ...(options.event.metadata ?? {}),
+            privacy: 'trusted-edge',
+            encrypted_by: 'vpd',
+        },
+    }, {
+        tlsVerify: options.target.tlsVerify,
+        caCertPath: options.target.caCertPath,
+        tlsPins: options.target.tlsPins,
+    });
+    const plan = objectField(payload, 'data');
+    const planId = stringField(plan, 'id');
+    await upsertTrustedEdgePlanKey({
+        workspaceId: options.target.workspaceId,
+        planId,
+        sourceRef,
+        keyRef: encrypted.envelope.key_ref,
+        rawKey: encrypted.rawKey.toString('base64'),
+        bodySha256: encrypted.envelope.digest,
+    }, options.home);
+    return { planId, sourceRef, envelope: encrypted.envelope };
+}
+export async function decryptTrustedEdgePlanBody(options) {
+    const record = await resolveTrustedEdgePlanKey({
+        workspaceId: options.workspaceId,
+        planId: options.planId,
+        sourceRef: options.sourceRef,
+        keyRef: options.envelope.key_ref,
+        bodyKeyGrants: options.bodyKeyGrants,
+    }, options.home);
+    if (!record) {
+        throw new Error('Trusted edge does not have the key for this plan.');
+    }
+    const body = decryptEnvelope(options.envelope, Buffer.from(record.rawKey, 'base64'));
+    const digest = digestText(body);
+    if (record.bodySha256 &&
+        record.bodySha256 !== digest &&
+        record.bodySha256 !== options.envelope.digest) {
+        throw new Error('Trusted edge plan key does not match this encrypted body.');
+    }
+    return { body, bodySha256: digest, keyRef: record.keyRef };
+}
+export async function encryptTrustedEdgePlanFeedbackField(options) {
+    const record = await resolveTrustedEdgePlanKey({
+        workspaceId: options.workspaceId,
+        planId: options.planId,
+        sourceRef: options.sourceRef,
+        keyRef: options.envelope.key_ref,
+        bodyKeyGrants: options.bodyKeyGrants,
+    }, options.home);
+    if (!record) {
+        throw new Error('Trusted edge does not have the key for this plan.');
+    }
+    const rawKey = Buffer.from(record.rawKey, 'base64');
+    const aad = options.aad ?? {};
+    const iv = crypto.randomBytes(12);
+    const cipher = crypto.createCipheriv('aes-256-gcm', rawKey, iv);
+    cipher.setAAD(Buffer.from(stableJson(aad), 'utf8'));
+    const ciphertext = Buffer.concat([cipher.update(options.text, 'utf8'), cipher.final()]);
+    return {
+        schema: 'viewport.plan_feedback_field_encrypted/v1',
+        algorithm: PLAN_BODY_ALGORITHM,
+        key_ref: options.envelope.key_ref,
+        ciphertext: ciphertext.toString('base64'),
+        iv: iv.toString('base64'),
+        tag: cipher.getAuthTag().toString('base64'),
+        digest: digestText(options.text),
+        aad,
+    };
+}
+export async function publishTrustedEdgePlanWrappingKey(options) {
+    const key = await ensureTrustedEdgePlanWrappingKey(options.home, options.label);
+    await postJson(options.fetchImpl ?? transportFetch, `${options.target.serverUrl.replace(/\/+$/, '')}/api/runtime/workspaces/${encodeURIComponent(options.target.workspaceId)}/plan-encryption-keys`, {
+        credential: options.target.credential,
+        key_id: key.keyId,
+        label: key.label,
+        algorithm: key.algorithm,
+        public_key_jwk: key.publicKeyJwk,
+    }, {
+        tlsVerify: options.target.tlsVerify,
+        caCertPath: options.target.caCertPath,
+        tlsPins: options.target.tlsPins,
+    });
+    return key;
+}
+export async function wrapTrustedEdgePlanBodyKey(options) {
+    const record = await resolveTrustedEdgePlanKey({
+        workspaceId: options.workspaceId,
+        planId: options.planId,
+        sourceRef: options.sourceRef,
+        keyRef: options.envelope.key_ref,
+        bodyKeyGrants: options.bodyKeyGrants,
+    }, options.home);
+    if (!record) {
+        throw new Error('Trusted edge does not have the key for this plan.');
+    }
+    return wrapRawPlanBodyKey({
+        rawKey: Buffer.from(record.rawKey, 'base64'),
+        keyRef: options.envelope.key_ref,
+        recipients: options.recipients,
+    });
+}
+async function ensureTrustedEdgePlanWrappingKey(home = configDir(), label = 'Trusted edge plan key') {
+    const store = await readTrustedEdgePlanKeyStore(home);
+    const existing = store.wrappingKeys?.find((key) => key.algorithm === 'RSA-OAEP-256');
+    if (existing) {
+        existing.lastSeenAt = new Date().toISOString();
+        await writeTrustedEdgePlanKeyStore(store, home);
+        return existing;
+    }
+    const pair = crypto.generateKeyPairSync('rsa', {
+        modulusLength: 2048,
+        publicExponent: 0x10001,
+    });
+    const now = new Date().toISOString();
+    const key = {
+        keyId: `trusted-edge-${crypto.randomUUID()}`,
+        label,
+        algorithm: 'RSA-OAEP-256',
+        publicKeyJwk: withPublicJwkMetadata(pair.publicKey.export({ format: 'jwk' })),
+        privateKeyJwk: withPrivateJwkMetadata(pair.privateKey.export({ format: 'jwk' })),
+        createdAt: now,
+        lastSeenAt: now,
+    };
+    store.wrappingKeys = [...(store.wrappingKeys ?? []), key];
+    await writeTrustedEdgePlanKeyStore(store, home);
+    return key;
+}
+async function resolveTrustedEdgePlanKey(input, home = configDir()) {
+    const existing = await findTrustedEdgePlanKey(input, home);
+    if (existing)
+        return existing;
+    const unwrapped = await unwrapTrustedEdgePlanKeyGrant(input, home);
+    if (!unwrapped)
+        return null;
+    const recordInput = {
+        workspaceId: input.workspaceId,
+        planId: input.planId,
+        sourceRef: input.sourceRef ?? `grant:${input.keyRef}`,
+        keyRef: input.keyRef,
+        rawKey: unwrapped.toString('base64'),
+        bodySha256: '',
+    };
+    await upsertTrustedEdgePlanKey(recordInput, home);
+    return findTrustedEdgePlanKey(input, home);
+}
+async function unwrapTrustedEdgePlanKeyGrant(input, home = configDir()) {
+    const grants = input.bodyKeyGrants ?? [];
+    if (grants.length === 0)
+        return null;
+    const store = await readTrustedEdgePlanKeyStore(home);
+    const wrappingKeys = store.wrappingKeys ?? [];
+    for (const localKey of wrappingKeys) {
+        const grant = grants.find((candidate) => candidate.key_ref === input.keyRef &&
+            candidate.recipient_key_id === localKey.keyId &&
+            candidate.algorithm === 'RSA-OAEP-256');
+        if (!grant)
+            continue;
+        try {
+            return crypto.privateDecrypt({
+                key: crypto.createPrivateKey({
+                    key: localKey.privateKeyJwk,
+                    format: 'jwk',
+                }),
+                oaepHash: 'sha256',
+            }, Buffer.from(grant.encrypted_key, 'base64'));
+        }
+        catch {
+            continue;
+        }
+    }
+    return null;
+}
+async function wrapRawPlanBodyKey(input) {
+    const unique = new Map();
+    for (const recipient of input.recipients) {
+        unique.set(`${recipient.user_id}:${recipient.key_id}`, recipient);
+    }
+    return [...unique.values()].map((recipient) => {
+        const publicKey = crypto.createPublicKey({
+            key: recipient.public_key_jwk,
+            format: 'jwk',
+        });
+        const encryptedKey = crypto.publicEncrypt({
+            key: publicKey,
+            oaepHash: 'sha256',
+        }, input.rawKey);
+        return {
+            schema: 'viewport.plan_body_key_grant/v1',
+            algorithm: 'RSA-OAEP-256',
+            recipient_user_id: recipient.user_id,
+            recipient_key_id: recipient.key_id,
+            key_ref: input.keyRef,
+            encrypted_key: encryptedKey.toString('base64'),
+        };
+    });
+}
+function withPublicJwkMetadata(jwk) {
+    return {
+        ...jwk,
+        alg: 'RSA-OAEP-256',
+        key_ops: ['encrypt'],
+        ext: true,
+    };
+}
+function withPrivateJwkMetadata(jwk) {
+    return {
+        ...jwk,
+        alg: 'RSA-OAEP-256',
+        key_ops: ['decrypt'],
+        ext: true,
+    };
+}
+async function encryptTrustedEdgePlanBody(input) {
+    const rawKey = crypto.randomBytes(32);
+    const keyRef = `trusted-edge-plan-${crypto.randomUUID()}`;
+    const aad = {
+        purpose: 'trusted-edge-plan-body',
+        workspace_id: input.workspaceId,
+        source_ref: input.sourceRef,
+        session_id: input.sessionId,
+        source: input.source,
+        created_at: new Date().toISOString(),
+    };
+    const iv = crypto.randomBytes(12);
+    const cipher = crypto.createCipheriv('aes-256-gcm', rawKey, iv);
+    cipher.setAAD(Buffer.from(stableJson(aad), 'utf8'));
+    const ciphertext = Buffer.concat([cipher.update(input.body, 'utf8'), cipher.final()]);
+    return {
+        rawKey,
+        envelope: {
+            schema: TRUSTED_EDGE_PLAN_BODY_SCHEMA,
+            algorithm: PLAN_BODY_ALGORITHM,
+            key_ref: keyRef,
+            ciphertext: ciphertext.toString('base64'),
+            iv: iv.toString('base64'),
+            tag: cipher.getAuthTag().toString('base64'),
+            digest: digestText(input.body),
+            aad,
+        },
+    };
+}
+function decryptEnvelope(envelope, rawKey) {
+    if (envelope.schema !== TRUSTED_EDGE_PLAN_BODY_SCHEMA) {
+        throw new Error(`Unsupported plan body schema: ${envelope.schema}`);
+    }
+    if (envelope.algorithm !== PLAN_BODY_ALGORITHM) {
+        throw new Error(`Unsupported plan body algorithm: ${envelope.algorithm}`);
+    }
+    if (!envelope.tag) {
+        throw new Error('Trusted-edge plan envelope is missing an authentication tag.');
+    }
+    const decipher = crypto.createDecipheriv('aes-256-gcm', rawKey, Buffer.from(envelope.iv, 'base64'));
+    decipher.setAAD(Buffer.from(stableJson(envelope.aad ?? {}), 'utf8'));
+    decipher.setAuthTag(Buffer.from(envelope.tag, 'base64'));
+    return Buffer.concat([
+        decipher.update(Buffer.from(envelope.ciphertext, 'base64')),
+        decipher.final(),
+    ]).toString('utf8');
+}
+async function upsertTrustedEdgePlanKey(input, home = configDir()) {
+    const store = await readTrustedEdgePlanKeyStore(home);
+    const now = new Date().toISOString();
+    const existing = store.records.find((record) => record.workspaceId === input.workspaceId &&
+        record.keyRef === input.keyRef &&
+        ((input.planId && record.planId === input.planId) ||
+            (!input.planId && record.sourceRef === input.sourceRef)));
+    if (existing) {
+        Object.assign(existing, input, { updatedAt: now });
+    }
+    else {
+        store.records.push({ ...input, createdAt: now, updatedAt: now });
+    }
+    await writeTrustedEdgePlanKeyStore(store, home);
+}
+async function findTrustedEdgePlanKey(input, home = configDir()) {
+    const store = await readTrustedEdgePlanKeyStore(home);
+    return (store.records.find((record) => record.workspaceId === input.workspaceId &&
+        record.keyRef === input.keyRef &&
+        ((input.planId && record.planId === input.planId) ||
+            (input.sourceRef && record.sourceRef === input.sourceRef))) ?? null);
+}
+async function readTrustedEdgePlanKeyStore(home = configDir()) {
+    try {
+        const raw = await fs.readFile(trustedEdgePlanKeyStorePath(home), 'utf8');
+        const parsed = JSON.parse(raw);
+        if (parsed.schema !== TRUSTED_EDGE_PLAN_KEY_STORE_SCHEMA || !Array.isArray(parsed.records)) {
+            throw new Error('Invalid trusted-edge plan key store.');
+        }
+        return parsed;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT') {
+            return { schema: TRUSTED_EDGE_PLAN_KEY_STORE_SCHEMA, records: [] };
+        }
+        throw error;
+    }
+}
+async function writeTrustedEdgePlanKeyStore(store, home = configDir()) {
+    const filePath = trustedEdgePlanKeyStorePath(home);
+    await fs.mkdir(path.dirname(filePath), { recursive: true });
+    await fs.writeFile(filePath, JSON.stringify(store, null, 2) + '\n', {
+        encoding: 'utf8',
+        mode: 0o600,
+    });
+    await fs.chmod(filePath, 0o600);
+}
+function trustedEdgePlanKeyStorePath(home = configDir()) {
+    return path.join(home, 'plans', 'trusted-edge-keys.json');
+}
+async function postJson(fetchImpl, url, body, transportOptions = {}) {
+    const response = await fetchImpl(url, {
+        method: 'POST',
+        headers: { 'content-type': 'application/json', accept: 'application/json' },
+        body: JSON.stringify(body),
+        timeoutMs: 5_000,
+        ...transportOptions,
+    });
+    const payload = await response.json().catch(() => null);
+    if (!response.ok) {
+        const reason = payload && typeof payload === 'object' && 'reason' in payload
+            ? String(payload.reason)
+            : `${response.status} ${response.statusText}`;
+        throw new Error(`Plan hook sync request failed: ${reason}`);
+    }
+    return payload;
+}
+function digestText(value) {
+    return `sha256:${crypto.createHash('sha256').update(value, 'utf8').digest('hex')}`;
+}
+function objectField(value, field) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        throw new Error(`Expected response object while reading ${field}`);
+    }
+    const child = value[field];
+    if (!child || typeof child !== 'object' || Array.isArray(child)) {
+        throw new Error(`Plan hook sync response did not include ${field}`);
+    }
+    return child;
+}
+function stringField(value, field) {
+    const child = value[field];
+    if (typeof child !== 'string' || child.trim().length === 0) {
+        throw new Error(`Plan hook sync response did not include ${field}`);
+    }
+    return child;
+}
+//# sourceMappingURL=trusted-edge-plan-artifacts.js.map

package/dist/hooks/trusted-edge-plan-artifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trusted-edge-plan-artifacts.js","sourceRoot":"","sources":["../../src/hooks/trusted-edge-plan-artifacts.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAsB,MAAM,mBAAmB,CAAC;AAGvE,MAAM,CAAC,MAAM,6BAA6B,GAAG,iCAAiC,CAAC;AAC/E,MAAM,kCAAkC,GAAG,oCAAoC,CAAC;AAChF,MAAM,mBAAmB,GAAG,aAAa,CAAC;AA6E1C,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAK9C;IACC,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,cAAc,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;IACrF,MAAM,iCAAiC,CAAC;QACtC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAAC;QACjD,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW;QACvC,SAAS;QACT,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS;QAClC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI;QACxB,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI;KAC9D,CAAC,CAAC;IACH,MAAM,wBAAwB,CAC5B;QACE,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW;QACvC,SAAS;QACT,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,OAAO;QAClC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC3C,UAAU,EAAE,SAAS,CAAC,QAAQ,CAAC,MAAM;KACtC,EACD,OAAO,CAAC,IAAI,CACb,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAC5B,OAAO,CAAC,SAAS,IAAI,cAAc,EACnC,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,2BAA2B,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,oBAAoB,EAC5I;QACE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU;QACrC,eAAe,EAAE,cAAc;QAC/B,MAAM,EAAE,2BAA2B;QACnC,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS;QACnC,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI;QAC9B,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,YAAY;QAClD,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI;QAC9C,eAAe,EAAE,SAAS,CAAC,QAAQ;QACnC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI;QAC7D,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE;YACP,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;YACjC,OAAO,EAAE,cAAc;YACvB,YAAY,EAAE,KAAK;SACpB;KACF,EACD;QACE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS;QACnC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU;QACrC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;KAChC,CACF,CAAC;IAEF,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,MAAM,wBAAwB,CAC5B;QACE,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW;QACvC,MAAM;QACN,SAAS;QACT,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,OAAO;QAClC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC3C,UAAU,EAAE,SAAS,CAAC,QAAQ,CAAC,MAAM;KACtC,EACD,OAAO,CAAC,IAAI,CACb,CAAC;IAEF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,OAOhD;IACC,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAC5C;QACE,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;QAChC,aAAa,EAAE,OAAO,CAAC,aAAa;KACrC,EACD,OAAO,CAAC,IAAI,CACb,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,IACE,MAAM,CAAC,UAAU;QACjB,MAAM,CAAC,UAAU,KAAK,MAAM;QAC5B,MAAM,CAAC,UAAU,KAAK,OAAO,CAAC,QAAQ,CAAC,MAAM,EAC7C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CAAC,OASzD;IACC,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAC5C;QACE,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;QAChC,aAAa,EAAE,OAAO,CAAC,aAAa;KACrC,EACD,OAAO,CAAC,IAAI,CACb,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC;IAC9B,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAChE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAExF,OAAO;QACL,MAAM,EAAE,2CAA2C;QACnD,SAAS,EAAE,mBAAmB;QAC9B,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;QACjC,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACzC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACzB,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC3C,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC;QAChC,GAAG;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,OAKvD;IACC,MAAM,GAAG,GAAG,MAAM,gCAAgC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAChF,MAAM,QAAQ,CACZ,OAAO,CAAC,SAAS,IAAI,cAAc,EACnC,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,2BAA2B,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,uBAAuB,EAC/I;QACE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU;QACrC,MAAM,EAAE,GAAG,CAAC,KAAK;QACjB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,cAAc,EAAE,GAAG,CAAC,YAAY;KACjC,EACD;QACE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS;QACnC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU;QACrC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;KAChC,CACF,CAAC;IAEF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,OAQhD;IACC,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAC5C;QACE,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;QAChC,aAAa,EAAE,OAAO,CAAC,aAAa;KACrC,EACD,OAAO,CAAC,IAAI,CACb,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IAED,OAAO,kBAAkB,CAAC;QACxB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC;QAC5C,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;QAChC,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,gCAAgC,CAC7C,IAAI,GAAG,SAAS,EAAE,EAClB,KAAK,GAAG,uBAAuB;IAE/B,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,cAAc,CAAC,CAAC;IACrF,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC/C,MAAM,4BAA4B,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAChD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE;QAC7C,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,OAAO;KACxB,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,GAAG,GAA+B;QACtC,KAAK,EAAE,gBAAgB,MAAM,CAAC,UAAU,EAAE,EAAE;QAC5C,KAAK;QACL,SAAS,EAAE,cAAc;QACzB,YAAY,EAAE,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7E,aAAa,EAAE,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAChF,SAAS,EAAE,GAAG;QACd,UAAU,EAAE,GAAG;KAChB,CAAC;IACF,KAAK,CAAC,YAAY,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1D,MAAM,4BAA4B,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAChD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,KAMC,EACD,IAAI,GAAG,SAAS,EAAE;IAElB,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC3D,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAE9B,MAAM,SAAS,GAAG,MAAM,6BAA6B,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACnE,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5B,MAAM,WAAW,GAAG;QAClB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,SAAS,KAAK,CAAC,MAAM,EAAE;QACrD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACpC,UAAU,EAAE,EAAE;KACf,CAAC;IACF,MAAM,wBAAwB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAClD,OAAO,sBAAsB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,6BAA6B,CAC1C,KAGC,EACD,IAAI,GAAG,SAAS,EAAE;IAElB,MAAM,MAAM,GAAG,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC;IACzC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC;IAC9C,KAAK,MAAM,QAAQ,IAAI,YAAY,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACvB,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,OAAO,KAAK,KAAK,CAAC,MAAM;YAClC,SAAS,CAAC,gBAAgB,KAAK,QAAQ,CAAC,KAAK;YAC7C,SAAS,CAAC,SAAS,KAAK,cAAc,CACzC,CAAC;QACF,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,cAAc,CAC1B;gBACE,GAAG,EAAE,MAAM,CAAC,gBAAgB,CAAC;oBAC3B,GAAG,EAAE,QAAQ,CAAC,aAAkC;oBAChD,MAAM,EAAE,KAAK;iBACd,CAAC;gBACF,QAAQ,EAAE,QAAQ;aACnB,EACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,QAAQ,CAAC,CAC3C,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,KAIjC;IACC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyC,CAAC;IAChE,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC;IACpE,CAAC;IAED,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QAC5C,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC;YACvC,GAAG,EAAE,SAAS,CAAC,cAAmC;YAClD,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,CAAC,aAAa,CACvC;YACE,GAAG,EAAE,SAAS;YACd,QAAQ,EAAE,QAAQ;SACnB,EACD,KAAK,CAAC,MAAM,CACb,CAAC;QAEF,OAAO;YACL,MAAM,EAAE,iCAAiC;YACzC,SAAS,EAAE,cAAc;YACzB,iBAAiB,EAAE,SAAS,CAAC,OAAO;YACpC,gBAAgB,EAAE,SAAS,CAAC,MAAM;YAClC,OAAO,EAAE,KAAK,CAAC,MAAM;YACrB,aAAa,EAAE,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAC/C,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAsB;IACnD,OAAO;QACL,GAAG,GAAG;QACN,GAAG,EAAE,cAAc;QACnB,OAAO,EAAE,CAAC,SAAS,CAAC;QACpB,GAAG,EAAE,IAAI;KACV,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAsB;IACpD,OAAO;QACL,GAAG,GAAG;QACN,GAAG,EAAE,cAAc;QACnB,OAAO,EAAE,CAAC,SAAS,CAAC;QACpB,GAAG,EAAE,IAAI;KACV,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,KAMzC;IACC,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,qBAAqB,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;IAC1D,MAAM,GAAG,GAAG;QACV,OAAO,EAAE,wBAAwB;QACjC,YAAY,EAAE,KAAK,CAAC,WAAW;QAC/B,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IACF,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAChE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAEtF,OAAO;QACL,MAAM;QACN,QAAQ,EAAE;YACR,MAAM,EAAE,6BAA6B;YACrC,SAAS,EAAE,mBAAmB;YAC9B,OAAO,EAAE,MAAM;YACf,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACzC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACzB,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC3C,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC;YAC9B,GAAG;SACJ;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,QAAiC,EAAE,MAAc;IACxE,IAAI,QAAQ,CAAC,MAAM,KAAK,6BAA6B,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,KAAK,mBAAmB,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CACtC,aAAa,EACb,MAAM,EACN,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CACnC,CAAC;IACF,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IACrE,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC3D,QAAQ,CAAC,KAAK,EAAE;KACjB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,KAA6D,EAC7D,IAAI,GAAG,SAAS,EAAE;IAElB,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CACjC,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;QACxC,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAC9B,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC;YAC/C,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC,CAC7D,CAAC;IACF,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IACrD,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,4BAA4B,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAClD,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,KAAmF,EACnF,IAAI,GAAG,SAAS,EAAE;IAElB,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,IAAI,CAAC,CAAC;IACtD,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,IAAI,CAChB,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;QACxC,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAC9B,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC;YAC/C,CAAC,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC,CAC/D,IAAI,IAAI,CACV,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,IAAI,GAAG,SAAS,EAAE;IAC3D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QAC1D,IAAI,MAAM,CAAC,MAAM,KAAK,kCAAkC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3F,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,OAAO,EAAE,MAAM,EAAE,kCAAkC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACrE,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,KAA8B,EAC9B,IAAI,GAAG,SAAS,EAAE;IAElB,MAAM,QAAQ,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE;QAClE,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,2BAA2B,CAAC,IAAI,GAAG,SAAS,EAAE;IACrD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,wBAAwB,CAAC,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,SAAgC,EAChC,GAAW,EACX,IAA6B,EAC7B,mBAII,EAAE;IAEN,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;QACpC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE;QAC3E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAC1B,SAAS,EAAE,KAAK;QAChB,GAAG,gBAAgB;KACpB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,MAAM,GACV,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,QAAQ,IAAI,OAAO;YAC3D,CAAC,CAAC,MAAM,CAAE,OAAgC,CAAC,MAAM,CAAC;YAClD,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,UAAU,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACrF,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa;IAChD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,0CAA0C,KAAK,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,KAAK,GAAI,KAAiC,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,2CAA2C,KAAK,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,WAAW,CAAC,KAA8B,EAAE,KAAa;IAChE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,2CAA2C,KAAK,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/relay/bridge-token-issuer.d.ts

@@ -29,4 +29,5 @@ export declare class RelayTokenIssuer {
     private verifyTokenClaims;
     private resolveRelayTokenVerificationKeys;
 }
+export declare function parseJwksSigningKeys(entries: Array<Record<string, unknown>>): Record<string, string>;
 //# sourceMappingURL=bridge-token-issuer.d.ts.map

package/dist/relay/bridge-token-issuer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bridge-token-issuer.d.ts","sourceRoot":"","sources":["../../src/relay/bridge-token-issuer.ts"],"names":[],"mappings":"AAIA,OAAO,EAA8B,KAAK,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAclG,MAAM,WAAW,uBAAuB;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC;IACpC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qBAAqB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/C,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,qBAAa,gBAAgB;IAOzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,gBAAgB;IAP1B,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAqB;IACvD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAyB;IAC/D,OAAO,CAAC,kBAAkB,CAAK;IAC/B,OAAO,CAAC,aAAa,CAA8B;gBAGhC,OAAO,EAAE,uBAAuB,EACzC,gBAAgB,EAAE,MAAM,GAAG,IAAI;IAMzC,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAIzC,KAAK,IAAI,OAAO,CAAC;QACrB,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,qBAAqB,CAAC;KAChC,CAAC;YAkDY,wBAAwB;IAkBtC,OAAO,CAAC,iBAAiB;YAYX,iCAAiC;CAqDhD"}
+{"version":3,"file":"bridge-token-issuer.d.ts","sourceRoot":"","sources":["../../src/relay/bridge-token-issuer.ts"],"names":[],"mappings":"AAIA,OAAO,EAA8B,KAAK,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAclG,MAAM,WAAW,uBAAuB;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC;IACpC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qBAAqB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/C,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,qBAAa,gBAAgB;IAOzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,gBAAgB;IAP1B,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAqB;IACvD,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAyB;IAC/D,OAAO,CAAC,kBAAkB,CAAK;IAC/B,OAAO,CAAC,aAAa,CAA8B;gBAGhC,OAAO,EAAE,uBAAuB,EACzC,gBAAgB,EAAE,MAAM,GAAG,IAAI;IAMzC,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAIzC,KAAK,IAAI,OAAO,CAAC;QACrB,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,qBAAqB,CAAC;KAChC,CAAC;YAkDY,wBAAwB;IAkBtC,OAAO,CAAC,iBAAiB;YAYX,iCAAiC;CAqDhD;AAaD,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACtC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA4BxB"}

package/dist/relay/bridge-token-issuer.js

@@ -140,7 +140,7 @@ async function parseRelayIssueResponse(res) {
     }
     return json;
 }
-function parseJwksSigningKeys(entries) {
+export function parseJwksSigningKeys(entries) {
     const keys = {};
     for (const entry of entries) {
         if (!entry || typeof entry !== 'object' || Array.isArray(entry))

package/dist/relay/bridge-token-issuer.js.map

@@ -1 +1 @@
-{"version":3,"file":"bridge-token-issuer.js","sourceRoot":"","sources":["../../src/relay/bridge-token-issuer.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAyB,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EAAE,0BAA0B,EAA8B,MAAM,0BAA0B,CAAC;AAYlG,MAAM,aAAa,GAAG,EAAE,CAAC;AAgBzB,MAAM,OAAO,gBAAgB;IAOR;IACT;IAPO,iBAAiB,CAAqB;IACtC,qBAAqB,CAAyB;IACvD,kBAAkB,GAAG,CAAC,CAAC;IACvB,aAAa,GAA2B,EAAE,CAAC;IAEnD,YACmB,OAAgC,EACzC,gBAA+B;QADtB,YAAO,GAAP,OAAO,CAAyB;QACzC,qBAAgB,GAAhB,gBAAgB,CAAe;QAEvC,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;QACnD,IAAI,CAAC,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,IAAI,EAAE,CAAC;IACnE,CAAC;IAED,mBAAmB,CAAC,KAAoB;QACtC,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,KAAK;QAIT,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,0BAA0B,CAAC;QACzF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;QAC5D,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,4BAA4B,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE;gBAC9B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,IAAI,EAAE,kBAAkB;oBACxB,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;oBACrC,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;oBAC7C,UAAU,EAAE,IAAI,CAAC,gBAAgB;iBAClC,CAAC;gBACF,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,MAAM;gBAChD,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;gBACxC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;aACnC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,IAAI,WAAW,CACnB,oBAAoB,EACpB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;QACJ,CAAC;QACD,YAAY,CAAC,OAAO,CAAC,CAAC;QAEtB,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YACrE,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,6BAA6B,MAAM,EAAE,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,0BAA0B,CAAC,WAAW,CAAC,WAAW,IAAI,UAAU,CAAC,CAAC;QAClF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,WAAW,CAAC,wBAAwB,EAAE,mCAAmC,CAAC,CAAC;QACvF,CAAC;QAED,OAAO;YACL,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,OAAO;SACR,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,wBAAwB,CAAC,UAAkB;QACvD,IAAI,gBAAgB,GAAG,MAAM,IAAI,CAAC,iCAAiC,CAAC,KAAK,CAAC,CAAC;QAC3E,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,IAAI,CAAC,iBAAiB;gBACtB,KAAK,YAAY,WAAW;gBAC5B,KAAK,CAAC,IAAI,KAAK,wBAAwB;gBACvC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EACxC,CAAC;gBACD,gBAAgB,GAAG,MAAM,IAAI,CAAC,iCAAiC,CAAC,IAAI,CAAC,CAAC;gBACtE,OAAO,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,iBAAiB,CACvB,UAAkB,EAClB,WAAmC;QAEnC,OAAO,sBAAsB,CAAC,UAAU,EAAE;YACxC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,iBAAiB;YAC1D,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,kBAAkB,IAAI,gBAAgB;YAC7D,WAAW;YACX,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,sBAAsB,IAAI,EAAE;SACxD,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,iCAAiC,CAC7C,YAAqB;QAErB,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,qBAAqB,CAAC;QACpC,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,YAAY,IAAI,GAAG,GAAG,IAAI,CAAC,kBAAkB,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,EAAE,CAAC;YAC7F,OAAO,IAAI,CAAC,aAAa,CAAC;QAC5B,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;QAE5D,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,iBAAiB,EAAE;gBACjD,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;gBACvC,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,MAAM;gBAChD,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;gBACxC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;aACnC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,IAAI,WAAW,CACnB,wBAAwB,EACxB,yBAAyB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAClF,CAAC;QACJ,CAAC;QACD,YAAY,CAAC,OAAO,CAAC,CAAC;QAEtB,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,WAAW,CAAC,wBAAwB,EAAE,+BAA+B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/F,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAwB,CAAC;QAC3E,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,WAAW,CAAC,wBAAwB,EAAE,kCAAkC,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;YACvC,MAAM,IAAI,WAAW,CACnB,wBAAwB,EACxB,yCAAyC,MAAM,CAAC,IAAI,CAAC,MAAM,MAAM,aAAa,GAAG,CAClF,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,KAAK,UAAU,uBAAuB,CAAC,GAAa;IAClD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAA8B,CAAC;IAC/E,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,2CAA2C,GAAG,CAAC,MAAM,GAAG;SACjE,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAuC;IACnE,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,SAAS;QAC1E,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,CAAC,GAAG,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,MAAM,CAAC,GAAG,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;YAAE,SAAS;QAChD,IAAI,GAAG,IAAI,GAAG,KAAK,OAAO;YAAE,SAAS;QAErC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC;gBACvC,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE;gBACzB,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,WAAW,CAAC,wBAAwB,EAAE,uCAAuC,CAAC,CAAC;IAC3F,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"bridge-token-issuer.js","sourceRoot":"","sources":["../../src/relay/bridge-token-issuer.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAyB,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAChF,OAAO,EAAE,0BAA0B,EAA8B,MAAM,0BAA0B,CAAC;AAYlG,MAAM,aAAa,GAAG,EAAE,CAAC;AAgBzB,MAAM,OAAO,gBAAgB;IAOR;IACT;IAPO,iBAAiB,CAAqB;IACtC,qBAAqB,CAAyB;IACvD,kBAAkB,GAAG,CAAC,CAAC;IACvB,aAAa,GAA2B,EAAE,CAAC;IAEnD,YACmB,OAAgC,EACzC,gBAA+B;QADtB,YAAO,GAAP,OAAO,CAAyB;QACzC,qBAAgB,GAAhB,gBAAgB,CAAe;QAEvC,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;QACnD,IAAI,CAAC,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,IAAI,EAAE,CAAC;IACnE,CAAC;IAED,mBAAmB,CAAC,KAAoB;QACtC,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,KAAK;QAIT,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,0BAA0B,CAAC;QACzF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;QAC5D,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,4BAA4B,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE;gBAC9B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,IAAI,EAAE,kBAAkB;oBACxB,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;oBACrC,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;oBAC7C,UAAU,EAAE,IAAI,CAAC,gBAAgB;iBAClC,CAAC;gBACF,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,MAAM;gBAChD,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;gBACxC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;aACnC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,IAAI,WAAW,CACnB,oBAAoB,EACpB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;QACJ,CAAC;QACD,YAAY,CAAC,OAAO,CAAC,CAAC;QAEtB,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YACrE,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,6BAA6B,MAAM,EAAE,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,0BAA0B,CAAC,WAAW,CAAC,WAAW,IAAI,UAAU,CAAC,CAAC;QAClF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,WAAW,CAAC,wBAAwB,EAAE,mCAAmC,CAAC,CAAC;QACvF,CAAC;QAED,OAAO;YACL,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,OAAO;SACR,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,wBAAwB,CAAC,UAAkB;QACvD,IAAI,gBAAgB,GAAG,MAAM,IAAI,CAAC,iCAAiC,CAAC,KAAK,CAAC,CAAC;QAC3E,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,IAAI,CAAC,iBAAiB;gBACtB,KAAK,YAAY,WAAW;gBAC5B,KAAK,CAAC,IAAI,KAAK,wBAAwB;gBACvC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EACxC,CAAC;gBACD,gBAAgB,GAAG,MAAM,IAAI,CAAC,iCAAiC,CAAC,IAAI,CAAC,CAAC;gBACtE,OAAO,IAAI,CAAC,iBAAiB,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,iBAAiB,CACvB,UAAkB,EAClB,WAAmC;QAEnC,OAAO,sBAAsB,CAAC,UAAU,EAAE;YACxC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,iBAAiB;YAC1D,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,kBAAkB,IAAI,gBAAgB;YAC7D,WAAW;YACX,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,sBAAsB,IAAI,EAAE;SACxD,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,iCAAiC,CAC7C,YAAqB;QAErB,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,qBAAqB,CAAC;QACpC,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,YAAY,IAAI,GAAG,GAAG,IAAI,CAAC,kBAAkB,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,EAAE,CAAC;YAC7F,OAAO,IAAI,CAAC,aAAa,CAAC;QAC5B,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;QAE5D,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,iBAAiB,EAAE;gBACjD,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;gBACvC,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,MAAM;gBAChD,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;gBACxC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;aACnC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,IAAI,WAAW,CACnB,wBAAwB,EACxB,yBAAyB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAClF,CAAC;QACJ,CAAC;QACD,YAAY,CAAC,OAAO,CAAC,CAAC;QAEtB,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,WAAW,CAAC,wBAAwB,EAAE,+BAA+B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/F,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAwB,CAAC;QAC3E,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,WAAW,CAAC,wBAAwB,EAAE,kCAAkC,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;YACvC,MAAM,IAAI,WAAW,CACnB,wBAAwB,EACxB,yCAAyC,MAAM,CAAC,IAAI,CAAC,MAAM,MAAM,aAAa,GAAG,CAClF,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,KAAK,UAAU,uBAAuB,CAAC,GAAa;IAClD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAA8B,CAAC;IAC/E,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,2CAA2C,GAAG,CAAC,MAAM,GAAG;SACjE,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAAuC;IAEvC,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,SAAS;QAC1E,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,CAAC,GAAG,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,MAAM,CAAC,GAAG,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;YAAE,SAAS;QAChD,IAAI,GAAG,IAAI,GAAG,KAAK,OAAO;YAAE,SAAS;QAErC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC;gBACvC,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE;gBACzB,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,WAAW,CAAC,wBAAwB,EAAE,uCAAuC,CAAC,CAAC;IAC3F,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/server/context-preview-service.d.ts

@@ -0,0 +1,26 @@
+import { previewContextCandidate } from '../context/local-edge-candidates.js';
+export interface ContextCandidatePreviewInput {
+    contextResourceId: string;
+    workspaceId?: string;
+    actorName: string;
+    candidateEventId?: string;
+    payloadDigest?: string;
+    passphrase?: string;
+    recoveryCode?: string;
+}
+export type ContextCandidatePreviewProof = {
+    ok: true;
+    previewProofId: string;
+    expiresAt: string | null;
+    workspaceId: string;
+} | {
+    ok: false;
+    error: string;
+};
+export declare function previewContextCandidateForTrustedEdge(input: ContextCandidatePreviewInput): Promise<{
+    candidate: Awaited<ReturnType<typeof previewContextCandidate>> & {
+        previewProof: ContextCandidatePreviewProof;
+    };
+    previewProof: ContextCandidatePreviewProof;
+}>;
+//# sourceMappingURL=context-preview-service.d.ts.map

package/dist/server/context-preview-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-preview-service.d.ts","sourceRoot":"","sources":["../../src/server/context-preview-service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAI9E,MAAM,WAAW,4BAA4B;IAC3C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,4BAA4B,GACpC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACnF;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC,wBAAsB,qCAAqC,CACzD,KAAK,EAAE,4BAA4B,GAClC,OAAO,CAAC;IACT,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC,GAAG;QAC/D,YAAY,EAAE,4BAA4B,CAAC;KAC5C,CAAC;IACF,YAAY,EAAE,4BAA4B,CAAC;CAC5C,CAAC,CA2BD"}