@vm0/cli 9.269.0 → 9.269.2

package/chunk-MD3YWUKO.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/lib/api/zero-token.ts"],"sourcesContent":["import type { FeatureSwitchKey } from \"@vm0/core/feature-switch-key\";\n\nexport interface ZeroTokenPayload {\n  userId: string;\n  runId: string;\n  orgId: string;\n  scope: string;\n  capabilities: string[];\n  featureSwitchOverrides?: Partial<Record<FeatureSwitchKey, boolean>>;\n  iat: number;\n  exp: number;\n}\n\n/**\n * Decode a ZERO_TOKEN JWT payload.\n * Only decodes — does NOT verify signature (server does that).\n * If no token is provided, reads from process.env.ZERO_TOKEN.\n * Returns undefined if token is missing, malformed, or not a zero-scoped token.\n */\nexport function decodeZeroTokenPayload(\n  token?: string,\n): ZeroTokenPayload | undefined {\n  const raw = token ?? process.env.ZERO_TOKEN;\n  if (!raw) return undefined;\n\n  const prefix = \"vm0_sandbox_\";\n  if (!raw.startsWith(prefix)) return undefined;\n  const jwt = raw.slice(prefix.length);\n\n  const parts = jwt.split(\".\");\n  if (parts.length !== 3) return undefined;\n\n  try {\n    const payload = JSON.parse(\n      Buffer.from(parts[1]!, \"base64url\").toString(),\n    ) as ZeroTokenPayload;\n    if (payload.scope === \"zero\" && Array.isArray(payload.capabilities)) {\n      return payload;\n    }\n  } catch {\n    // Malformed token — fall through\n  }\n  return undefined;\n}\n"],"mappings":";;;;;;;;AAAA;AAmBO,SAAS,uBACd,OAC8B;AAC9B,QAAM,MAAM,SAAS,QAAQ,IAAI;AACjC,MAAI,CAAC,IAAK,QAAO;AAEjB,QAAM,SAAS;AACf,MAAI,CAAC,IAAI,WAAW,MAAM,EAAG,QAAO;AACpC,QAAM,MAAM,IAAI,MAAM,OAAO,MAAM;AAEnC,QAAM,QAAQ,IAAI,MAAM,GAAG;AAC3B,MAAI,MAAM,WAAW,EAAG,QAAO;AAE/B,MAAI;AACF,UAAM,UAAU,KAAK;AAAA,MACnB,OAAO,KAAK,MAAM,CAAC,GAAI,WAAW,EAAE,SAAS;AAAA,IAC/C;AACA,QAAI,QAAQ,UAAU,UAAU,MAAM,QAAQ,QAAQ,YAAY,GAAG;AACnE,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AACT;","names":[]}