@zuplo/runtime 6.70.49 → 6.70.51

package/out/esm/chunk-WASXKKBJ.js

@@ -0,0 +1,26 @@
+
+/*---------------------------------------------------------------------------------------------
+ *  Copyright (c) Zuplo, Inc. All rights reserved.
+ *
+ *  This software and associated documentation files (the "Software") is intended to be used
+ *  only by Zuplo customers solely to develop and test applications that will be deployed
+ *  to Zuplo hosted services. You and others in your organization may use these files on your
+ *  Development Devices solely for the above stated purpose.
+ *
+ *  Outside of uses stated above, no license is granted for any other purpose including
+ *  without limitation the rights to use, copy, modify, merge, publish, distribute,
+ *  sublicense, host, and/or sell copies of the Software.
+ *
+ *  The software may include third party components with separate legal notices or governed by
+ *  other agreements, as described in licenses either embedded in or accompanying the Software.
+ *
+ *  THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, 
+ *  INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR 
+ *  PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE 
+ *  FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR 
+ *  OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER 
+ *  DEALINGS IN THE SOFTWARE.
+ *--------------------------------------------------------------------------------------------*/
+    
+import{Eb as q,fc as N,gb as w,gc as b,hb as U,jb as H,kc as G,zb as u}from"./chunk-ORBTGJIA.js";import{d as L}from"./chunk-JRXZBVXH.js";import{a as n,aa as d}from"./chunk-ZIKV2LUM.js";function l(e){return new d({message:e,extensionMembers:{[u]:"invalid_request"}})}n(l,"invalidOutboundUrl");function X(){let e=L.__TEST_ONLY_MCP_GATEWAY_ALLOW_HTTP_LOOPBACK_IDP??globalThis.process?.env?.__TEST_ONLY_MCP_GATEWAY_ALLOW_HTTP_LOOPBACK_IDP;return typeof e=="string"&&e==="1"}n(X,"isTestOnlyAllowHttpLoopbackIdpEnabled");function Z(){let e=L.__TEST_ONLY_MCP_GATEWAY_ALLOW_HTTP_LOOPBACK_CIMD??globalThis.process?.env?.__TEST_ONLY_MCP_GATEWAY_ALLOW_HTTP_LOOPBACK_CIMD;return typeof e=="string"&&e==="1"}n(Z,"isTestOnlyAllowHttpLoopbackCimdEnabled");var Q=new Set(["undefined","null","nan"]);function E(e,t){if(!e.hostname)throw l(`Outbound URL has an empty hostname (got ${JSON.stringify(t)}). This typically indicates an unset $env(...) reference or a JS template literal coercing \`undefined\` into a URL. Check the policy options or runtime config that produced this URL.`);if(Q.has(e.hostname.toLowerCase()))throw l(`Outbound URL hostname is ${JSON.stringify(e.hostname)} (from ${JSON.stringify(t)}). This almost always means an environment variable referenced by $env(...) is unset and a JS value was string-coerced into a URL. Set the missing env var or fix the policy option that produced this URL.`)}n(E,"assertSafeOutboundHostname");var ee=new Set(["localhost","169.254.169.254","metadata.google.internal","metadata"]),te=[{first:0},{first:10},{first:127},{first:169,secondMin:254,secondMax:254},{first:172,secondMin:16,secondMax:31},{first:192,secondMin:168,secondMax:168},{first:100,secondMin:64,secondMax:127},{first:224,firstMax:239},{first:240,firstMax:255}];function F(e){if(!/^\d+\.\d+\.\d+\.\d+$/.test(e))return;let t=e.split(".").map(r=>Number(r));if(!(t.length!==4||t.some(r=>Number.isNaN(r)||r<0||r>255)))return t}n(F,"parseIpv4Octets");function re([e,t],r){let o=r.firstMax??r.first;return e<r.first||e>o?!1:r.secondMin===void 0||r.secondMax===void 0?!0:t>=r.secondMin&&t<=r.secondMax}n(re,"ipv4RangeMatches");function j(e){let t=F(e);return t!==void 0&&te.some(r=>re(t,r))}n(j,"isPrivateIpv4");function P(e){if(!e||e.length>4)return;let t=Number.parseInt(e,16);return Number.isNaN(t)||t<0||t>65535?void 0:t}n(P,"parseIpv6Word");function ne(e,t){return[e>>8&255,e&255,t>>8&255,t&255].join(".")}n(ne,"formatIpv4FromWords");function oe(e){let t=e.slice(7),r=F(t);if(r!==void 0)return r.join(".");let[o,s,i]=t.split(":"),c=P(o),m=P(s);return i===void 0&&c!==void 0&&m!==void 0?ne(c,m):void 0}n(oe,"parseIpv6MappedIpv4");function se(e){return P(e.split(":").find(Boolean))}n(se,"readFirstIpv6Hextet");function ie(e){let t=w(e);if(!t.includes(":"))return!1;if(t==="::"||t==="::1")return!0;if(t.startsWith("::ffff:")){let o=oe(t);return o===void 0||j(o)}let r=se(t);return r===void 0?!1:(r&65024)===64512||(r&65472)===65152}n(ie,"isPrivateIpv6");function S(e){let t=w(e);return ee.has(t)||t.endsWith(".internal")||j(t)||ie(t)}n(S,"isBlockedOutboundHostname");function D(e){let t=new URL(e);if(t.protocol!=="https:"&&t.protocol!=="http:")throw l(`Unsupported outbound protocol: ${t.protocol}`);E(t,e);let r=U(t);if(t.protocol==="http:"&&!r)throw l("Configured outbound HTTP URLs must target loopback hosts.");let o=w(t.hostname);if(!r&&S(o))throw l(`Blocked outbound host: ${o}`);return t}n(D,"validateConfiguredOutboundUrl");function W(e){let t=new URL(e),r=U(t),o=r&&X();if(t.protocol!=="https:"&&!o)throw l("Identity provider URLs must use https.");if(t.username||t.password||t.search||t.hash)throw l("Identity provider URLs must not include credentials, query params, or fragments.");E(t,e);let s=w(t.hostname);if(!r&&S(s))throw l(`Blocked identity provider host: ${s}`);return t}n(W,"validateIdentityProviderUrl");function J(e,t){let r=new URL(e),o=r.protocol==="http:"&&U(r)&&Z();if(r.protocol!=="https:"&&!o||r.pathname==="/"||r.username||r.password||r.hash)throw l(`CIMD ${t} must be an HTTPS URL with a path and no credentials or fragment.`);if(E(r,e),!o&&S(r.hostname))throw l(`CIMD ${t} points at a blocked host.`);return r}n(J,"validateCimdUrl");function $(e){return J(e,"client_id")}n($,"validateCimdClientMetadataUrl");function Y(e){return J(e,"jwks_uri")}n(Y,"validateCimdClientJwksUrl");function z(e,t){if(!t)return;if(t.aborted){e.abort(t.reason);return}let r=n(()=>e.abort(t.reason),"abort");return t.addEventListener("abort",r,{once:!0}),()=>t.removeEventListener("abort",r)}n(z,"mergeAbortSignals");async function ae(e){try{await e.cancel()}catch{}}n(ae,"cancelReader");async function K(e,t){if(!e)return new Uint8Array;let r=e.getReader(),o=[],s=0,i=await r.read();for(;!i.done;){let a=i.value;if(s+=a.byteLength,s>t.maxBytes)throw await ae(r),t.createLimitError();o.push(a),i=await r.read()}let c=new Uint8Array(s),m=0;for(let a of o)c.set(a,m),m+=a.byteLength;return c}n(K,"readBoundedByteStream");var de=2,ue=1024*1024,ce=1e4,fe=new Set([301,302,303,307,308]),le=["authorization","proxy-authorization","cookie","cookie2"];function T(e){return typeof e=="string"?e:e instanceof URL?e.toString():e.url}n(T,"readRequestUrl");function y(e,t){return t?.method!==void 0?t.method.toUpperCase():e instanceof Request?e.method.toUpperCase():"GET"}n(y,"readRequestMethod");function me(e,t,r){let o=e.headers.get("content-length");if(!o)return;let s=Number.parseInt(o,10);if(Number.isFinite(s)&&s>t)throw new d({message:"Outbound response exceeded the maximum allowed size.",extensionMembers:{[u]:r}})}n(me,"assertContentLengthWithinLimit");async function pe(e,t,r){return me(e,t,r),K(e.body,{maxBytes:t,createLimitError:n(()=>new d({message:"Outbound response exceeded the maximum allowed size.",extensionMembers:{[u]:r}}),"createLimitError")})}n(pe,"readBoundedResponseBody");function he(e,t){let r=new ArrayBuffer(t.byteLength);return new Uint8Array(r).set(t),new Response(r,{status:e.status,statusText:e.statusText,headers:e.headers})}n(he,"responseFromBufferedBody");function be(e,t){if(!fe.has(e.status))return;let r=e.headers.get("location");if(r)return new URL(r,t).toString()}n(be,"resolveRedirectUrl");function V(e,t){try{return t.validateUrl(e)}catch(r){throw new d({message:"Outbound URL was not allowed.",extensionMembers:{[u]:t.problemCode}},{cause:r})}}n(V,"validateOutboundUrl");function ge(e,t){throw e instanceof d&&q(e.extensionMembers?.[u])?e:new d({message:"Outbound fetch failed.",extensionMembers:{[u]:t}},{cause:e})}n(ge,"normalizeFetchError");function O(e,t){if(e===void 0)return;let r={event:t.event,code:t.problemCode,method:t.method};if(t.host!==void 0&&(r.host=t.host),t.extra!==void 0)for(let[o,s]of Object.entries(t.extra))s!==void 0&&(r[o]=s);t.error!==void 0&&N(r,"error",t.error),e.log.warn(r,"Outbound HTTP exchange rejected")}n(O,"logOutboundFailure");async function ye(e,t,r,o,s,i,c){let m=y(r,o);try{return await t(r,o)}catch(a){let g=a instanceof DOMException&&a.name==="AbortError";O(e,{event:g?"outbound_fetch_aborted":"outbound_fetch_failed",problemCode:s,method:m,host:b(i),error:a,extra:{abortReason:c()}}),ge(a,s)}}n(ye,"fetchWithNormalizedError");function Re(e){if(e.redirects>=e.maxRedirects)throw new d({message:"Outbound redirects exceeded the maximum allowed depth.",extensionMembers:{[u]:e.problemCode}});if(e.method!=="GET"&&e.method!=="HEAD")throw new d({message:"Outbound redirect after a non-idempotent request was blocked.",extensionMembers:{[u]:e.problemCode}})}n(Re,"assertRedirectAllowed");function xe(e,t){let r=new Headers(e);for(let o of le)r.delete(o);for(let o of t)r.delete(o);return r}n(xe,"stripCrossOriginHeaders");function we(e,t,r,o,s){let i={...e,method:t,redirect:"manual",signal:r};return o&&(i.headers=xe(e.headers,s)),i}n(we,"buildRedirectInit");function Oe(e,t,r){let o={...t,redirect:"manual",signal:r};return o.headers===void 0&&e instanceof Request&&(o.headers=e.headers),o}n(Oe,"buildInitialRequestInit");function ve(e){let t=y(e.currentInput,e.currentInit);Re({redirects:e.redirects,maxRedirects:e.maxRedirects,method:t,problemCode:e.problemCode});let r=V(e.redirectUrl,{problemCode:e.problemCode,validateUrl:e.validateUrl}),o=new URL(e.currentUrl),s=r.origin!==o.origin,i=r.toString();return{currentInput:i,currentUrl:i,currentInit:we(e.currentInit,t,e.signal,s,e.additionalCrossOriginStrippedHeaders),redirects:e.redirects+1}}n(ve,"followRedirect");async function M(e,t,r){let o=r.problemCode??"invalid_request",s=r.maxRedirects??de,i=r.maxResponseBytes??ue,c=r.timeoutMs??ce,m=r.fetchImpl??fetch,a=r.additionalCrossOriginStrippedHeaders??[],g=r.context,v=new AbortController,A=z(v,t.signal),B=!1,k=setTimeout(()=>{B=!0,v.abort()},c),R=e,x=Oe(e,t,v.signal),p;try{p=V(T(e),{problemCode:o,validateUrl:r.validateUrl}).toString()}catch(h){throw O(g,{event:"outbound_url_blocked",problemCode:o,method:y(e,t),host:b(T(e)),error:h}),clearTimeout(k),A?.(),h}let C=0;try{for(;;){let h=await ye(g,m,R,x,o,p,()=>B?`timeout_after_${c}ms`:void 0),I=be(h,p);if(I!==void 0)try{let f=ve({currentInput:R,currentInit:x,currentUrl:p,redirectUrl:I,redirects:C,maxRedirects:s,problemCode:o,validateUrl:r.validateUrl,signal:v.signal,additionalCrossOriginStrippedHeaders:a});R=f.currentInput,x=f.currentInit,p=f.currentUrl,C=f.redirects;continue}catch(f){throw O(g,{event:"outbound_redirect_blocked",problemCode:o,method:y(R,x),host:b(p),error:f,extra:{redirects:C,maxRedirects:s,redirectTargetHost:b(I)}}),f}try{return he(h,await pe(h,i,o))}catch(f){throw O(g,{event:"outbound_response_size_exceeded",problemCode:o,method:y(R,x),host:b(p),error:f,extra:{maxResponseBytes:i,status:h.status}}),f}}}finally{clearTimeout(k),A?.()}}n(M,"runSafeOutboundExchange");async function _(e,t,r){let o=await M(e,t,r);try{return{response:o,json:await o.clone().json()}}catch(s){throw O(r.context,{event:"outbound_json_parse_failed",problemCode:r.problemCode??"invalid_request",method:y(e,t),host:b(T(e)),error:s,extra:{status:o.status,contentType:o.headers.get("content-type")??void 0}}),new d({message:"Outbound JSON response could not be parsed.",extensionMembers:{[u]:r.problemCode??"invalid_request"}},{cause:s})}}n(_,"runSafeOutboundJsonExchange");function je(e,t={},r={}){return M(e,t,{...r,validateUrl:D})}n(je,"fetchConfiguredOutbound");function De(e,t={},r={}){return _(e,t,{...r,validateUrl:W})}n(De,"fetchIdentityProviderJson");function We(e,t={},r={}){return _(e,t,{...r,validateUrl:$})}n(We,"fetchCimdClientMetadataJson");function Je(e,t={},r={}){return _(e,t,{...r,validateUrl:Y})}n(Je,"fetchCimdClientJwksJson");function Ve(e){let t=H().browserLogin[e];if(typeof t=="string"&&t.length>0)return t;throw G("internal_server_error",`browserLogin.${e} is required for federated browser login. Set it on the mcp-oauth-inbound policy options.`)}n(Ve,"requireBrowserLoginField");export{D as a,$ as b,Y as c,K as d,je as e,De as f,We as g,Je as h,Ve as i};
+//# sourceMappingURL=chunk-WASXKKBJ.js.map

package/out/esm/chunk-WASXKKBJ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["@zuplo/runtime/mcp-gateway/v2/runtime-utils/outbound-network-policy.ts","@zuplo/runtime/utils/abort-signal.ts","@zuplo/runtime/utils/bounded-stream.ts","@zuplo/runtime/mcp-gateway/v2/runtime-utils/safe-outbound-exchange.ts","@zuplo/runtime/mcp-gateway/v2/runtime-utils/outbound-http.ts","@zuplo/runtime/mcp-gateway/v2/downstream-oauth/browser-login-context.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;yLAOA,SAASA,EAAmBC,EAA+B,CACzD,OAAO,IAAIC,EAAa,CACtB,QAAAD,EACA,iBAAkB,CAChB,CAACE,CAAqC,EAAG,iBAC3C,CACF,CAAC,CACH,CAPSC,EAAAJ,EAAA,sBAiBT,SAASK,GAAiD,CACxD,IAAMC,EACJC,EAAY,iDACX,WACE,SAAS,KAAK,gDACnB,OAAO,OAAOD,GAAU,UAAYA,IAAU,GAChD,CANSF,EAAAC,EAAA,yCAQT,SAASG,GAAkD,CACzD,IAAMF,EACJC,EAAY,kDACX,WACE,SAAS,KAAK,iDACnB,OAAO,OAAOD,GAAU,UAAYA,IAAU,GAChD,CANSF,EAAAI,EAAA,0CA2BT,IAAMC,EAA0B,IAAI,IAAI,CAAC,YAAa,OAAQ,KAAK,CAAC,EAc7D,SAASC,EAA2BC,EAAUC,EAAsB,CACzE,GAAI,CAACD,EAAI,SACP,MAAMX,EACJ,2CAA2C,KAAK,UAAUY,CAAM,CAAC,yLAInE,EAGF,GAAIH,EAAwB,IAAIE,EAAI,SAAS,YAAY,CAAC,EACxD,MAAMX,EACJ,4BAA4B,KAAK,UAAUW,EAAI,QAAQ,CAAC,UAC7C,KAAK,UAAUC,CAAM,CAAC,6MAInC,CAEJ,CAnBgBR,EAAAM,EAAA,8BAqBhB,IAAMG,GAAyB,IAAI,IAAI,CACrC,YACA,kBACA,2BACA,UACF,CAAC,EASKC,GAA4C,CAChD,CAAE,MAAO,CAAE,EACX,CAAE,MAAO,EAAG,EACZ,CAAE,MAAO,GAAI,EACb,CAAE,MAAO,IAAK,UAAW,IAAK,UAAW,GAAI,EAC7C,CAAE,MAAO,IAAK,UAAW,GAAI,UAAW,EAAG,EAC3C,CAAE,MAAO,IAAK,UAAW,IAAK,UAAW,GAAI,EAI7C,CAAE,MAAO,IAAK,UAAW,GAAI,UAAW,GAAI,EAE5C,CAAE,MAAO,IAAK,SAAU,GAAI,EAI5B,CAAE,MAAO,IAAK,SAAU,GAAI,CAC9B,EAEA,SAASC,EACPC,EAC8C,CAC9C,GAAI,CAAC,uBAAuB,KAAKA,CAAQ,EACvC,OAGF,IAAMC,EAAWD,EAAS,MAAM,GAAG,EAAE,IAAKE,GAAY,OAAOA,CAAO,CAAC,EACrE,GACE,EAAAD,EAAS,SAAW,GACpBA,EAAS,KACNC,GAAY,OAAO,MAAMA,CAAO,GAAKA,EAAU,GAAKA,EAAU,GACjE,GAKF,OAAOD,CACT,CAlBSb,EAAAW,EAAA,mBAoBT,SAASI,GACP,CAACC,EAAOC,CAAM,EACdC,EACS,CACT,IAAMC,EAAWD,EAAM,UAAYA,EAAM,MACzC,OAAIF,EAAQE,EAAM,OAASF,EAAQG,EAC1B,GAGLD,EAAM,YAAc,QAAaA,EAAM,YAAc,OAChD,GAGFD,GAAUC,EAAM,WAAaD,GAAUC,EAAM,SACtD,CAdSlB,EAAAe,GAAA,oBAgBT,SAASK,EAAcR,EAA2B,CAChD,IAAMS,EAASV,EAAgBC,CAAQ,EAEvC,OACES,IAAW,QACXX,GAAoB,KAAMQ,GAAUH,GAAiBM,EAAQH,CAAK,CAAC,CAEvE,CAPSlB,EAAAoB,EAAA,iBAST,SAASE,EAAcC,EAAkD,CACvE,GAAI,CAACA,GAAYA,EAAS,OAAS,EACjC,OAGF,IAAMrB,EAAQ,OAAO,SAASqB,EAAU,EAAE,EAE1C,OAAO,OAAO,MAAMrB,CAAK,GAAKA,EAAQ,GAAKA,EAAQ,MAAS,OAAYA,CAC1E,CARSF,EAAAsB,EAAA,iBAUT,SAASE,GAAoBC,EAAcC,EAAqB,CAC9D,MAAO,CAAED,GAAQ,EAAK,IAAMA,EAAO,IAAOC,GAAO,EAAK,IAAMA,EAAM,GAAI,EAAE,KACtE,GACF,CACF,CAJS1B,EAAAwB,GAAA,uBAMT,SAASG,GAAoBC,EAAqC,CAChE,IAAMC,EAASD,EAAQ,MAAM,CAAgB,EACvCE,EAAenB,EAAgBkB,CAAM,EAC3C,GAAIC,IAAiB,OACnB,OAAOA,EAAa,KAAK,GAAG,EAG9B,GAAM,CAACC,EAASC,EAAQC,CAAK,EAAIJ,EAAO,MAAM,GAAG,EAC3CJ,EAAOH,EAAcS,CAAO,EAC5BL,EAAMJ,EAAcU,CAAM,EAEhC,OAAOC,IAAU,QAAaR,IAAS,QAAaC,IAAQ,OACxDF,GAAoBC,EAAMC,CAAG,EAC7B,MACN,CAdS1B,EAAA2B,GAAA,uBAgBT,SAASO,GAAoBN,EAAqC,CAChE,OAAON,EAAcM,EAAQ,MAAM,GAAG,EAAE,KAAK,OAAO,CAAC,CACvD,CAFS5B,EAAAkC,GAAA,uBAIT,SAASC,GAAcvB,EAA2B,CAChD,IAAMgB,EAAUQ,EAAkBxB,CAAQ,EAC1C,GAAI,CAACgB,EAAQ,SAAS,GAAG,EACvB,MAAO,GAGT,GAAIA,IAAY,MAAQA,IAAY,MAClC,MAAO,GAGT,GAAIA,EAAQ,WAAW,SAAS,EAAG,CACjC,IAAMS,EAAaV,GAAoBC,CAAO,EAC9C,OAAOS,IAAe,QAAajB,EAAciB,CAAU,CAC7D,CAEA,IAAMC,EAAmBJ,GAAoBN,CAAO,EACpD,OAAIU,IAAqB,OAChB,IAINA,EAAmB,SAAY,QAC/BA,EAAmB,SAAY,KAEpC,CAxBStC,EAAAmC,GAAA,iBA0BT,SAASI,EAA0B3B,EAA2B,CAC5D,IAAM4B,EAAqBJ,EAAkBxB,CAAQ,EAErD,OACEH,GAAuB,IAAI+B,CAAkB,GAC7CA,EAAmB,SAAS,WAAW,GACvCpB,EAAcoB,CAAkB,GAChCL,GAAcK,CAAkB,CAEpC,CATSxC,EAAAuC,EAAA,6BAWF,SAASE,EAA8BjC,EAAqB,CACjE,IAAMD,EAAM,IAAI,IAAIC,CAAM,EAK1B,GAAID,EAAI,WAAa,UAAYA,EAAI,WAAa,QAChD,MAAMX,EAAmB,kCAAkCW,EAAI,QAAQ,EAAE,EAE3ED,EAA2BC,EAAKC,CAAM,EAEtC,IAAMkC,EAAiBC,EAAkBpC,CAAG,EAC5C,GAAIA,EAAI,WAAa,SAAW,CAACmC,EAC/B,MAAM9C,EACJ,2DACF,EAGF,IAAMgB,EAAWwB,EAAkB7B,EAAI,QAAQ,EAC/C,GAAI,CAACmC,GAAkBH,EAA0B3B,CAAQ,EACvD,MAAMhB,EAAmB,0BAA0BgB,CAAQ,EAAE,EAG/D,OAAOL,CACT,CAxBgBP,EAAAyC,EAAA,iCA0BT,SAASG,EAA4BpC,EAAqB,CAC/D,IAAMD,EAAM,IAAI,IAAIC,CAAM,EACpBkC,EAAiBC,EAAkBpC,CAAG,EAQtCsC,EACJH,GAAkBzC,EAAsC,EAE1D,GAAIM,EAAI,WAAa,UAAY,CAACsC,EAChC,MAAMjD,EAAmB,wCAAwC,EAGnE,GAAIW,EAAI,UAAYA,EAAI,UAAYA,EAAI,QAAUA,EAAI,KACpD,MAAMX,EACJ,kFACF,EAKFU,EAA2BC,EAAKC,CAAM,EAEtC,IAAMI,EAAWwB,EAAkB7B,EAAI,QAAQ,EAC/C,GAAI,CAACmC,GAAkBH,EAA0B3B,CAAQ,EACvD,MAAMhB,EAAmB,mCAAmCgB,CAAQ,EAAE,EAGxE,OAAOL,CACT,CAjCgBP,EAAA4C,EAAA,+BAmChB,SAASE,EACPtC,EACAuC,EACK,CACL,IAAMxC,EAAM,IAAI,IAAIC,CAAM,EACpBwC,EACJzC,EAAI,WAAa,SACjBoC,EAAkBpC,CAAG,GACrBH,EAAuC,EAEzC,GACGG,EAAI,WAAa,UAAY,CAACyC,GAC/BzC,EAAI,WAAa,KACjBA,EAAI,UACJA,EAAI,UACJA,EAAI,KAEJ,MAAMX,EACJ,QAAQmD,CAAS,mEACnB,EASF,GAFAzC,EAA2BC,EAAKC,CAAM,EAElC,CAACwC,GAAsBT,EAA0BhC,EAAI,QAAQ,EAC/D,MAAMX,EAAmB,QAAQmD,CAAS,4BAA4B,EAQxE,OAAOxC,CACT,CAtCSP,EAAA8C,EAAA,mBAwCF,SAASG,EAA8BzC,EAAqB,CACjE,OAAOsC,EAAgBtC,EAAQ,WAAW,CAC5C,CAFgBR,EAAAiD,EAAA,iCAIT,SAASC,EAA0B1C,EAAqB,CAC7D,OAAOsC,EAAgBtC,EAAQ,UAAU,CAC3C,CAFgBR,EAAAkD,EAAA,6BCpVT,SAASC,EACdC,EACAC,EAC0B,CAC1B,GAAI,CAACA,EACH,OAGF,GAAIA,EAAO,QAAS,CAClBD,EAAW,MAAMC,EAAO,MAAM,EAC9B,MACF,CAEA,IAAMC,EAAQC,EAAA,IAAMH,EAAW,MAAMC,EAAO,MAAM,EAApC,SACd,OAAAA,EAAO,iBAAiB,QAASC,EAAO,CAAE,KAAM,EAAK,CAAC,EAE/C,IAAMD,EAAO,oBAAoB,QAASC,CAAK,CACxD,CAjBgBC,EAAAJ,EAAA,qBCLhB,eAAeK,GACbC,EACe,CACf,GAAI,CACF,MAAMA,EAAO,OAAO,CACtB,MAAQ,CAER,CACF,CAReC,EAAAF,GAAA,gBAkBf,eAAsBG,EACpBC,EACAC,EACqB,CACrB,GAAI,CAACD,EACH,OAAO,IAAI,WAGb,IAAMH,EAASG,EAAO,UAAU,EAC1BE,EAAuB,CAAC,EAC1BC,EAAgB,EAEhBC,EAAY,MAAMP,EAAO,KAAK,EAClC,KAAO,CAACO,EAAU,MAAM,CACtB,IAAMC,EAAQD,EAAU,MAExB,GADAD,GAAiBE,EAAM,WACnBF,EAAgBF,EAAQ,SAC1B,YAAML,GAAaC,CAAM,EACnBI,EAAQ,iBAAiB,EAGjCC,EAAO,KAAKG,CAAK,EACjBD,EAAY,MAAMP,EAAO,KAAK,CAChC,CAEA,IAAMS,EAAO,IAAI,WAAWH,CAAa,EACrCI,EAAS,EACb,QAAWC,KAASN,EAClBI,EAAK,IAAIE,EAAOD,CAAM,EACtBA,GAAUC,EAAM,WAGlB,OAAOF,CACT,CAjCsBR,EAAAC,EAAA,yBCuBtB,IAAMU,GAAwB,EACxBC,GAA6B,KAAO,KACpCC,GAAqB,IACrBC,GAAoB,IAAI,IAAI,CAAC,IAAK,IAAK,IAAK,IAAK,GAAG,CAAC,EACrDC,GAAmD,CACvD,gBACA,sBACA,SACA,SACF,EAEA,SAASC,EAAeC,EAA4C,CAClE,OAAI,OAAOA,GAAU,SACZA,EAGLA,aAAiB,IACZA,EAAM,SAAS,EAGjBA,EAAM,GACf,CAVSC,EAAAF,EAAA,kBAYT,SAASG,EACPF,EACAG,EACQ,CACR,OAAIA,GAAM,SAAW,OACZA,EAAK,OAAO,YAAY,EAG7BH,aAAiB,QACZA,EAAM,OAAO,YAAY,EAG3B,KACT,CAbSC,EAAAC,EAAA,qBAeT,SAASE,GACPC,EACAC,EACAC,EACM,CACN,IAAMC,EAAgBH,EAAS,QAAQ,IAAI,gBAAgB,EAC3D,GAAI,CAACG,EACH,OAGF,IAAMC,EAAS,OAAO,SAASD,EAAe,EAAE,EAChD,GAAI,OAAO,SAASC,CAAM,GAAKA,EAASH,EACtC,MAAM,IAAII,EAAa,CACrB,QAAS,uDACT,iBAAkB,CAChB,CAACC,CAAqC,EAAGJ,CAC3C,CACF,CAAC,CAEL,CAnBSN,EAAAG,GAAA,kCAqBT,eAAeQ,GACbP,EACAC,EACAC,EACqB,CACrB,OAAAH,GAA+BC,EAAUC,EAAkBC,CAAW,EAE/DM,EAAsBR,EAAS,KAAM,CAC1C,SAAUC,EACV,iBAAkBL,EAAA,IAChB,IAAIS,EAAa,CACf,QAAS,uDACT,iBAAkB,CAChB,CAACC,CAAqC,EAAGJ,CAC3C,CACF,CAAC,EANe,mBAOpB,CAAC,CACH,CAjBeN,EAAAW,GAAA,2BAmBf,SAASE,GACPT,EACAU,EACU,CACV,IAAMC,EAAc,IAAI,YAAYD,EAAK,UAAU,EACnD,WAAI,WAAWC,CAAW,EAAE,IAAID,CAAI,EAE7B,IAAI,SAASC,EAAa,CAC/B,OAAQX,EAAS,OACjB,WAAYA,EAAS,WACrB,QAASA,EAAS,OACpB,CAAC,CACH,CAZSJ,EAAAa,GAAA,4BAcT,SAASG,GACPZ,EACAa,EACoB,CACpB,GAAI,CAACrB,GAAkB,IAAIQ,EAAS,MAAM,EACxC,OAGF,IAAMc,EAAWd,EAAS,QAAQ,IAAI,UAAU,EAChD,GAAKc,EAIL,OAAO,IAAI,IAAIA,EAAUD,CAAO,EAAE,SAAS,CAC7C,CAdSjB,EAAAgB,GAAA,sBAgBT,SAASG,EACPC,EACAC,EAIK,CACL,GAAI,CACF,OAAOA,EAAQ,YAAYD,CAAM,CACnC,OAASE,EAAO,CACd,MAAM,IAAIb,EACR,CACE,QAAS,gCACT,iBAAkB,CAChB,CAACC,CAAqC,EAAGW,EAAQ,WACnD,CACF,EACA,CAAE,MAAOC,CAAM,CACjB,CACF,CACF,CApBStB,EAAAmB,EAAA,uBAsBT,SAASI,GACPD,EACAhB,EACO,CACP,MACEgB,aAAiBb,GACjBe,EACEF,EAAM,mBAAmBZ,CAAqC,CAChE,EAEMY,EAGF,IAAIb,EACR,CACE,QAAS,yBACT,iBAAkB,CAChB,CAACC,CAAqC,EAAGJ,CAC3C,CACF,EACA,CAAE,MAAOgB,CAAM,CACjB,CACF,CAtBStB,EAAAuB,GAAA,uBAwBT,SAASE,EACPC,EACAL,EAQM,CACN,GAAIK,IAAY,OACd,OAEF,IAAMC,EAAoD,CACxD,MAAON,EAAQ,MACf,KAAMA,EAAQ,YACd,OAAQA,EAAQ,MAClB,EAIA,GAHIA,EAAQ,OAAS,SACnBM,EAAO,KAAON,EAAQ,MAEpBA,EAAQ,QAAU,OACpB,OAAW,CAACO,EAAKC,CAAK,IAAK,OAAO,QAAQR,EAAQ,KAAK,EACjDQ,IAAU,SACZF,EAAOC,CAAG,EAAIC,GAIhBR,EAAQ,QAAU,QACpBS,EAAkBH,EAAQ,QAASN,EAAQ,KAAK,EAElDK,EAAQ,IAAI,KAAKC,EAAQ,iCAAiC,CAC5D,CAjCS3B,EAAAyB,EAAA,sBAmCT,eAAeM,GACbL,EACAM,EACAjC,EACAG,EACAI,EACA2B,EACAC,EACmB,CACnB,IAAMC,EAASlC,EAAkBF,EAAOG,CAAI,EAC5C,GAAI,CACF,OAAO,MAAM8B,EAAUjC,EAAOG,CAAI,CACpC,OAASoB,EAAO,CACd,IAAMc,EACJd,aAAiB,cAAgBA,EAAM,OAAS,aAClDG,EAAmBC,EAAS,CAC1B,MAAOU,EAAU,yBAA2B,wBAC5C,YAAA9B,EACA,OAAA6B,EACA,KAAME,EAASJ,CAAG,EAClB,MAAAX,EACA,MAAO,CAAE,YAAaY,EAAY,CAAE,CACtC,CAAC,EACDX,GAAoBD,EAAOhB,CAAW,CACxC,CACF,CAzBeN,EAAA+B,GAAA,4BA2Bf,SAASO,GAAsBvC,EAKtB,CACP,GAAIA,EAAM,WAAaA,EAAM,aAC3B,MAAM,IAAIU,EAAa,CACrB,QAAS,yDACT,iBAAkB,CAChB,CAACC,CAAqC,EAAGX,EAAM,WACjD,CACF,CAAC,EAGH,GAAIA,EAAM,SAAW,OAASA,EAAM,SAAW,OAC7C,MAAM,IAAIU,EAAa,CACrB,QAAS,gEACT,iBAAkB,CAChB,CAACC,CAAqC,EAAGX,EAAM,WACjD,CACF,CAAC,CAEL,CAvBSC,EAAAsC,GAAA,yBAyBT,SAASC,GACPC,EACAC,EACS,CACT,IAAMC,EAAW,IAAI,QAAQF,CAAO,EACpC,QAAWG,KAAc9C,GACvB6C,EAAS,OAAOC,CAAU,EAE5B,QAAWA,KAAcF,EACvBC,EAAS,OAAOC,CAAU,EAG5B,OAAOD,CACT,CAbS1C,EAAAuC,GAAA,2BAeT,SAASK,GACPC,EACAV,EACAW,EACAC,EACAN,EACa,CACb,IAAMO,EAAoB,CACxB,GAAGH,EACH,OAAAV,EACA,SAAU,SACV,OAAAW,CACF,EAEA,OAAIC,IACFC,EAAK,QAAUT,GACbM,EAAa,QACbJ,CACF,GAGKO,CACT,CAtBShD,EAAA4C,GAAA,qBAwBT,SAASK,GACPlD,EACAG,EACA4C,EACa,CACb,IAAME,EAAoB,CACxB,GAAG9C,EACH,SAAU,SACV,OAAA4C,CACF,EAEA,OAAIE,EAAK,UAAY,QAAajD,aAAiB,UACjDiD,EAAK,QAAUjD,EAAM,SAGhBiD,CACT,CAhBShD,EAAAiD,GAAA,2BAkBT,SAASC,GAAenD,EAgBtB,CACA,IAAMoC,EAASlC,EAAkBF,EAAM,aAAcA,EAAM,WAAW,EACtEuC,GAAsB,CACpB,UAAWvC,EAAM,UACjB,aAAcA,EAAM,aACpB,OAAAoC,EACA,YAAapC,EAAM,WACrB,CAAC,EACD,IAAMoD,EAAUhC,EAAoBpB,EAAM,YAAa,CACrD,YAAaA,EAAM,YACnB,YAAaA,EAAM,WACrB,CAAC,EACKqD,EAAc,IAAI,IAAIrD,EAAM,UAAU,EACtCgD,EAAgBI,EAAQ,SAAWC,EAAY,OAC/CC,EAAgBF,EAAQ,SAAS,EAEvC,MAAO,CACL,aAAcE,EACd,WAAYA,EACZ,YAAaT,GACX7C,EAAM,YACNoC,EACApC,EAAM,OACNgD,EACAhD,EAAM,oCACR,EACA,UAAWA,EAAM,UAAY,CAC/B,CACF,CA5CSC,EAAAkD,GAAA,kBA8CT,eAAsBI,EACpBvD,EACAG,EACAmB,EACmB,CACnB,IAAMf,EAAce,EAAQ,aAAe,kBACrCkC,EAAelC,EAAQ,cAAgB5B,GACvCY,EACJgB,EAAQ,kBAAoB3B,GACxB8D,EAAYnC,EAAQ,WAAa1B,GACjCqC,EAAYX,EAAQ,WAAa,MACjCoC,EACJpC,EAAQ,sCAAwC,CAAC,EAC7CK,EAAUL,EAAQ,QAElBqC,EAAa,IAAI,gBACjBC,EAAuBC,EAAkBF,EAAYxD,EAAK,MAAM,EAClE2D,EAAW,GACTC,EAAU,WAAW,IAAM,CAC/BD,EAAW,GACXH,EAAW,MAAM,CACnB,EAAGF,CAAS,EACRO,EAAehE,EACfiE,EAAcf,GAAwBlD,EAAOG,EAAMwD,EAAW,MAAM,EACpEO,EACJ,GAAI,CACFA,EAAa9C,EAAoBrB,EAAeC,CAAK,EAAG,CACtD,YAAAO,EACA,YAAae,EAAQ,WACvB,CAAC,EAAE,SAAS,CACd,OAASC,EAAO,CACd,MAAAG,EAAmBC,EAAS,CAC1B,MAAO,uBACP,YAAApB,EACA,OAAQL,EAAkBF,EAAOG,CAAI,EACrC,KAAMmC,EAASvC,EAAeC,CAAK,CAAC,EACpC,MAAAuB,CACF,CAAC,EACD,aAAawC,CAAO,EACpBH,IAAuB,EACjBrC,CACR,CACA,IAAI4C,EAAY,EAEhB,GAAI,CACF,OAAa,CACX,IAAM9D,EAAW,MAAM2B,GACrBL,EACAM,EACA+B,EACAC,EACA1D,EACA2D,EACA,IAAOJ,EAAW,iBAAiBL,CAAS,KAAO,MACrD,EAEMW,EAAcnD,GAAmBZ,EAAU6D,CAAU,EAC3D,GAAIE,IAAgB,OAClB,GAAI,CACF,IAAMnB,EAAOE,GAAe,CAC1B,aAAAa,EACA,YAAAC,EACA,WAAAC,EACA,YAAAE,EACA,UAAAD,EACA,aAAAX,EACA,YAAAjD,EACA,YAAae,EAAQ,YACrB,OAAQqC,EAAW,OACnB,qCAAAD,CACF,CAAC,EACDM,EAAef,EAAK,aACpBgB,EAAchB,EAAK,YACnBiB,EAAajB,EAAK,WAClBkB,EAAYlB,EAAK,UACjB,QACF,OAAS1B,EAAO,CACd,MAAAG,EAAmBC,EAAS,CAC1B,MAAO,4BACP,YAAApB,EACA,OAAQL,EAAkB8D,EAAcC,CAAW,EACnD,KAAM3B,EAAS4B,CAAU,EACzB,MAAA3C,EACA,MAAO,CACL,UAAA4C,EACA,aAAAX,EACA,mBAAoBlB,EAAS8B,CAAW,CAC1C,CACF,CAAC,EACK7C,CACR,CAGF,GAAI,CACF,OAAOT,GACLT,EACA,MAAMO,GAAwBP,EAAUC,EAAkBC,CAAW,CACvE,CACF,OAASgB,EAAO,CACd,MAAAG,EAAmBC,EAAS,CAC1B,MAAO,kCACP,YAAApB,EACA,OAAQL,EAAkB8D,EAAcC,CAAW,EACnD,KAAM3B,EAAS4B,CAAU,EACzB,MAAA3C,EACA,MAAO,CAAE,iBAAAjB,EAAkB,OAAQD,EAAS,MAAO,CACrD,CAAC,EACKkB,CACR,CACF,CACF,QAAE,CACA,aAAawC,CAAO,EACpBH,IAAuB,CACzB,CACF,CAlHsB3D,EAAAsD,EAAA,2BAoHtB,eAAsBc,EACpBrE,EACAG,EACAmB,EACgD,CAChD,IAAMjB,EAAW,MAAMkD,EAAwBvD,EAAOG,EAAMmB,CAAO,EAEnE,GAAI,CACF,MAAO,CACL,SAAAjB,EACA,KAAM,MAAMA,EAAS,MAAM,EAAE,KAAK,CACpC,CACF,OAASkB,EAAO,CACd,MAAAG,EAAmBJ,EAAQ,QAAS,CAClC,MAAO,6BACP,YAAaA,EAAQ,aAAe,kBACpC,OAAQpB,EAAkBF,EAAOG,CAAI,EACrC,KAAMmC,EAASvC,EAAeC,CAAK,CAAC,EACpC,MAAAuB,EACA,MAAO,CACL,OAAQlB,EAAS,OACjB,YAAaA,EAAS,QAAQ,IAAI,cAAc,GAAK,MACvD,CACF,CAAC,EACK,IAAIK,EACR,CACE,QAAS,8CACT,iBAAkB,CAChB,CAACC,CAAqC,EACpCW,EAAQ,aAAe,iBAC3B,CACF,EACA,CAAE,MAAOC,CAAM,CACjB,CACF,CACF,CAnCsBtB,EAAAoE,EAAA,+BC1ef,SAASC,GACdC,EACAC,EAAoB,CAAC,EACrBC,EAAgC,CAAC,EACd,CACnB,OAAOC,EAAwBH,EAAOC,EAAM,CAC1C,GAAGC,EACH,YAAaE,CACf,CAAC,CACH,CATgBC,EAAAN,GAAA,2BAiCT,SAASO,GACdC,EACAC,EAAoB,CAAC,EACrBC,EAAgC,CAAC,EACe,CAChD,OAAOC,EAA4BH,EAAOC,EAAM,CAC9C,GAAGC,EACH,YAAaE,CACf,CAAC,CACH,CATgBC,EAAAN,GAAA,6BAWT,SAASO,GACdN,EACAC,EAAoB,CAAC,EACrBC,EAAgC,CAAC,EACe,CAChD,OAAOC,EAA4BH,EAAOC,EAAM,CAC9C,GAAGC,EACH,YAAaK,CACf,CAAC,CACH,CATgBF,EAAAC,GAAA,+BAWT,SAASE,GACdR,EACAC,EAAoB,CAAC,EACrBC,EAAgC,CAAC,EACe,CAChD,OAAOC,EAA4BH,EAAOC,EAAM,CAC9C,GAAGC,EACH,YAAaO,CACf,CAAC,CACH,CATgBJ,EAAAG,GAAA,2BCvDT,SAASE,GAAyBC,EAAkC,CACzE,IAAMC,EAAQC,EAAsB,EAAE,aAAaF,CAAK,EACxD,GAAI,OAAOC,GAAU,UAAYA,EAAM,OAAS,EAC9C,OAAOA,EAGT,MAAME,EACJ,wBACA,gBAAgBH,CAAK,2FACvB,CACF,CAVgBI,EAAAL,GAAA","names":["invalidOutboundUrl","message","RuntimeError","GATEWAY_PROBLEM_CODE_EXTENSION_MEMBER","__name","isTestOnlyAllowHttpLoopbackIdpEnabled","value","environment","isTestOnlyAllowHttpLoopbackCimdEnabled","HOSTNAME_LOOKS_LIKE_BUG","assertSafeOutboundHostname","url","rawUrl","BLOCKED_OUTBOUND_HOSTS","PRIVATE_IPV4_RANGES","parseIpv4Octets","hostname","segments","segment","ipv4RangeMatches","first","second","range","firstMax","isPrivateIpv4","octets","parseIpv6Word","rawValue","formatIpv4FromWords","high","low","parseIpv6MappedIpv4","literal","suffix","dottedOctets","highRaw","lowRaw","extra","readFirstIpv6Hextet","isPrivateIpv6","normalizeHostname","mappedIpv4","firstHextetValue","isBlockedOutboundHostname","normalizedHostname","validateConfiguredOutboundUrl","isLoopbackHttp","isLoopbackHttpUrl","validateIdentityProviderUrl","allowLoopbackHttpForTests","validateCimdUrl","fieldName","isTestLoopbackHttp","validateCimdClientMetadataUrl","validateCimdClientJwksUrl","mergeAbortSignals","controller","signal","abort","__name","cancelReader","reader","__name","readBoundedByteStream","stream","options","chunks","receivedBytes","nextChunk","value","body","offset","chunk","DEFAULT_MAX_REDIRECTS","DEFAULT_MAX_RESPONSE_BYTES","DEFAULT_TIMEOUT_MS","REDIRECT_STATUSES","CROSS_ORIGIN_STRIPPED_HEADERS","readRequestUrl","input","__name","readRequestMethod","init","assertContentLengthWithinLimit","response","maxResponseBytes","problemCode","contentLength","parsed","RuntimeError","GATEWAY_PROBLEM_CODE_EXTENSION_MEMBER","readBoundedResponseBody","readBoundedByteStream","responseFromBufferedBody","body","arrayBuffer","resolveRedirectUrl","baseUrl","location","validateOutboundUrl","rawUrl","options","error","normalizeFetchError","isGatewayProblemCode","logOutboundFailure","context","fields","key","value","addErrorLogFields","fetchWithNormalizedError","fetchImpl","url","abortReason","method","isAbort","safeHost","assertRedirectAllowed","stripCrossOriginHeaders","headers","additionalStrippedHeaders","stripped","headerName","buildRedirectInit","previousInit","signal","isCrossOrigin","next","buildInitialRequestInit","followRedirect","nextUrl","previousUrl","nextUrlString","runSafeOutboundExchange","maxRedirects","timeoutMs","additionalCrossOriginStrippedHeaders","controller","removeSignalListener","mergeAbortSignals","timedOut","timeout","currentInput","currentInit","currentUrl","redirects","redirectUrl","runSafeOutboundJsonExchange","fetchConfiguredOutbound","input","init","options","runSafeOutboundExchange","validateConfiguredOutboundUrl","__name","fetchIdentityProviderJson","input","init","options","runSafeOutboundJsonExchange","validateIdentityProviderUrl","__name","fetchCimdClientMetadataJson","validateCimdClientMetadataUrl","fetchCimdClientJwksJson","validateCimdClientJwksUrl","requireBrowserLoginField","field","value","getGatewayOAuthConfig","createGatewayRuntimeError","__name"]}

package/out/esm/index.js

@@ -22,5 +22,5 @@
  *  DEALINGS IN THE SOFTWARE.
  *--------------------------------------------------------------------------------------------*/
     
-import{$a as zt,$b as Mr,Aa as gt,Ab as gr,B as v,Ba as dt,Bb as dr,C as G,Ca as ut,Cb as ur,D as I,Da as ft,Db as fr,E as J,Ea as xt,Eb as xr,F as K,Fa as yt,Fb as yr,G as M,Ga as wt,Gb as wr,H as N,Ha as At,Hb as Ar,I as O,Ia as bt,Ib as br,Ja as lt,Jb as lr,Ka as jt,Kb as jr,La as Bt,Lb as Br,Ma as Ct,Mb as Cr,Na as Dt,Nb as Dr,Oa as Et,Ob as Er,Pa as Ht,Pb as $r,Qa as Pt,Qb as kr,Ra as St,Rb as Fr,Sa as Tt,Sb as Lr,Ta as Ut,Tb as Rr,Ua as $t,Ub as qr,Va as kt,Vb as vr,Wa as Ft,Wb as zr,Xa as Lt,Xb as Gr,Ya as Rt,Yb as Ir,Za as qt,Zb as Jr,_a as vt,_b as Kr,a as n,ab as Gt,ac as Nr,bb as It,bc as Or,c as x,cb as Jt,cc as Qr,d as y,db as Kt,dc as Vr,e as w,eb as Mt,ec as Wr,f as A,fb as Nt,fc as Xr,g as b,gb as Ot,gc as Yr,h as l,ha as Q,hb as Qt,hc as Zr,i as j,ia as V,ib as Vt,ic as _r,j as B,ja as W,jb as Wt,jc as ts,ka as X,kb as Xt,kc as rs,l as C,la as Y,lb as Yt,lc as ss,m as D,ma as Z,mb as Zt,mc as es,n as E,na as _,nb as _t,nc as os,o as H,oa as tt,ob as tr,oc as as,p as P,pa as rt,pb as rr,qa as st,qb as sr,r as T,ra as et,rb as er,s as U,sa as ot,sb as or,t as $,ta as at,tb as ar,u as k,ua as nt,ub as nr,v as F,va as it,vb as ir,w as L,wa as pt,wb as pr,xa as ct,xb as cr,y as R,ya as ht,yb as hr,z as q,za as mt,zb as mr}from"./chunk-J7JE2DD5.js";import{a as S,d as z,e as Hr,f as Pr,g as Sr,h as Tr,i as Ur}from"./chunk-JRXZBVXH.js";import"./chunk-4SACVMDH.js";import{_ as u,a as t,aa as a,ba as f}from"./chunk-ZIKV2LUM.js";var e=["sha-1","sha-256","sha-384","sha-512"],r=class{static{t(this,"BaseCryptoBeta")}};var o=class extends r{static{t(this,"WorkerCryptoBeta")}async digest(s,p){if(n("runtime.crypto-beta"),!e.includes(s.toLowerCase()))throw new a(`Algorithm ${s} is not supported. Try using ${e.join(", ")}`);let c=new TextEncoder().encode(p),h=await crypto.subtle.digest(s,c);return Array.from(new Uint8Array(h)).map(m=>m.toString(16).padStart(2,"0")).join("")}};export{Dt as AIGatewayAnthropicToOpenAIInboundPolicy,Et as AIGatewayAuthInboundPolicy,I as AIGatewayMeteringInboundPolicy,Ht as AIGatewayOpenAIToAnthropicOutboundPolicy,Pt as AIGatewaySemanticCacheInboundPolicy,St as AIGatewaySemanticCacheOutboundPolicy,Tt as AIGatewayUsageTrackerPolicy,rt as AWSLoggingPlugin,Ut as AkamaiAIFirewallInboundPolicy,wt as AkamaiApiSecurityPlugin,$t as AkamaiFirewallForAiInboundPolicy,kt as AkamaiFirewallForAiOutboundPolicy,Lt as AmberfloMeteringInboundPolicy,Ft as AmberfloMeteringPolicy,qt as ApiAuthKeyInboundPolicy,os as ApiKeyConsumerClient,Rt as ApiKeyInboundPolicy,dt as AuditLogDataStaxProvider,ut as AuditLogPlugin,zt as Auth0JwtInboundPolicy,Gt as AuthZenInboundPolicy,K as AwsLambdaHandlerExtensions,It as AxiomaticsAuthZInboundPolicy,bt as AzureBlobPlugin,lt as AzureEventHubsRequestLoggerPlugin,At as BackgroundDispatcher,as as BackgroundLoader,Jt as BasicAuthInboundPolicy,br as BasicRateLimitInboundPolicy,P as BatchDispatch,Kt as BrownoutInboundPolicy,Mt as CachingInboundPolicy,Nt as ChangeMethodInboundPolicy,Ot as ClearHeadersInboundPolicy,Qt as ClearHeadersOutboundPolicy,Vt as ClerkJwtInboundPolicy,Wt as CognitoJwtInboundPolicy,Xt as CometOpikTracingInboundPolicy,Yt as ComplexRateLimitInboundPolicy,Zt as CompositeInboundPolicy,_t as CompositeOutboundPolicy,f as ConfigurationError,E as ContentTypes,v as ContextData,o as CryptoBeta,tr as CurityPhantomTokenInboundPolicy,F as DataDogLoggingPlugin,ct as DataDogMetricsPlugin,st as DynaTraceLoggingPlugin,ht as DynatraceMetricsPlugin,rr as FirebaseJwtInboundPolicy,sr as FormDataToJsonInboundPolicy,er as GalileoTracingInboundPolicy,or as GeoFilterInboundPolicy,k as GoogleCloudLoggingPlugin,G as Handler,ar as HttpDeprecationOutboundPolicy,B as HttpProblems,b as HttpStatusCode,Bt as HydrolixRequestLoggerPlugin,U as InboundPolicy,nr as JWTScopeValidationInboundPolicy,ft as JwtServicePlugin,et as LokiLoggingPlugin,L as LookupResult,mr as MTLSAuthInboundPolicy,xt as McpGatewayOAuthProtectedResourcePlugin,w as MemoryZoneReadThroughCache,ir as MockApiInboundPolicy,cr as MoesifInboundPolicy,hr as MonetizationInboundPolicy,ot as NewRelicLoggingPlugin,mt as NewRelicMetricsPlugin,yt as OAuthProtectedResourcePlugin,gt as OTelMetricsPlugin,gr as OktaFGAAuthZInboundPolicy,dr as OktaJwtInboundPolicy,ur as OpenFGAAuthZInboundPolicy,vt as OpenIdJwtInboundPolicy,fr as OpenMeterInboundPolicy,$ as OutboundPolicy,j as ProblemResponseFormatter,xr as PromptInjectionDetectionOutboundPolicy,yr as PropelAuthJwtInboundPolicy,wr as QueryParamToHeaderInboundPolicy,Ar as QuotaInboundPolicy,br as RateLimitInboundPolicy,lr as ReadmeMetricsInboundPolicy,jr as RemoveHeadersInboundPolicy,Br as RemoveHeadersOutboundPolicy,Cr as RemoveQueryParamsInboundPolicy,Dr as ReplaceStringOutboundPolicy,Ct as RequestLoggerPlugin,Er as RequestSizeLimitInboundPolicy,$r as RequestValidationInboundPolicy,Fr as RequireOriginInboundPolicy,R as ResponseSendingEvent,q as ResponseSentEvent,a as RuntimeError,u as SYSTEM_LOGGER,kr as SchemaBasedRequestValidation,Lr as SecretMaskingOutboundPolicy,T as SemanticAttributes,Rr as SemanticCacheInboundPolicy,es as ServiceProviderImpl,qr as SetBodyInboundPolicy,vr as SetHeadersInboundPolicy,zr as SetHeadersOutboundPolicy,Gr as SetQueryParamsInboundPolicy,Ir as SetStatusOutboundPolicy,Jr as SetUpstreamApiKeyInboundPolicy,Kr as SleepInboundPolicy,at as SplunkLoggingPlugin,A as StreamingZoneCache,Mr as StripeWebhookVerificationInboundPolicy,nt as SumoLogicLoggingPlugin,Nr as SupabaseJwtInboundPolicy,S as SystemRouteName,C as TelemetryPlugin,Or as UpstreamAzureAdServiceAuthInboundPolicy,Qr as UpstreamFirebaseAdminAuthInboundPolicy,Vr as UpstreamFirebaseUserAuthInboundPolicy,Xr as UpstreamGcpFederatedAuthInboundPolicy,Yr as UpstreamGcpJwtInboundPolicy,Zr as UpstreamGcpServiceAuthInboundPolicy,_r as UpstreamZuploJwtAuthInboundPolicy,it as VMWareLogInsightLoggingPlugin,ts as ValidateJsonSchemaInbound,rs as WebBotAuthInboundPolicy,ss as XmlToJsonOutboundPolicy,y as ZoneCache,pt as ZuploMcpSdk,D as ZuploRequest,Wr as ZuploServices,J as aiGatewayHandler,x as apiServices,M as awsLambdaHandler,jt as defaultGenerateHydrolixEntry,z as environment,Pr as getIdForParameterSchema,Tr as getIdForRefSchema,Sr as getIdForRequestBodySchema,Hr as getRawOperationDataIdentifierName,l as httpStatuses,N as legacyDevPortalHandler,Q as mcpServerHandler,V as openApiSpecHandler,W as redirectHandler,O as redirectLegacyDevPortal,Ur as sanitizedIdentifierName,H as serialize,pr as setMoesifContext,n as trackFeature,Y as urlForwardHandler,Z as urlRewriteHandler,_ as webSocketHandler,tt as webSocketPipelineHandler,X as zuploServiceProxy};
+import{$ as tt,$a as tr,$c as wr,A as I,Aa as Ht,Ad as Xr,B as J,Ba as Pt,Bd as Yr,C as K,Ca as St,Cd as Zr,D as M,Da as Tt,Dd as _r,E as N,Ea as Ut,Ed as ts,F as O,Fa as $t,Fd as rs,Ga as kt,Gd as ss,Ha as Ft,Hd as es,Ia as Lt,Id as os,Ja as Rt,Jd as as,Ka as qt,Kd as ns,La as vt,Ld as is,Ma as zt,Md as ps,Na as Gt,Nd as cs,Oa as It,Od as hs,Pa as Jt,Pd as ms,Qa as Kt,Qd as gs,Ra as Mt,Rd as ds,Sa as Nt,Sd as us,Ta as Ot,Td as fs,U as Q,Ua as Qt,Ud as xs,V,Va as Vt,Vd as ys,W,Wa as Wt,X,Xa as Xt,Y,Ya as Yt,Z,Za as Zt,_,_a as _t,a as n,aa as rt,ab as rr,ad as Ar,b as x,ba as st,bb as sr,bd as br,c as y,ca as et,cb as er,cd as lr,d as w,da as ot,db as or,dd as jr,e as A,ea as at,eb as ar,ed as Br,f as b,fa as nt,fb as nr,fd as Cr,g as l,ga as it,gd as Dr,h as j,ha as pt,hd as Er,i as B,ia as ct,id as Hr,ja as ht,jd as Pr,k as C,ka as mt,kd as Sr,l as D,la as gt,lb as ir,ld as Tr,m as E,ma as dt,mb as pr,md as Ur,n as H,na as ut,nb as cr,nd as $r,o as P,oa as ft,ob as hr,od as kr,pa as xt,pb as mr,pd as Fr,q as T,qa as yt,qb as gr,qd as Lr,r as U,ra as wt,rb as dr,rd as Rr,s as $,sa as At,sb as ur,sd as qr,t as k,ta as bt,tb as fr,td as vr,u as F,ua as lt,ub as xr,ud as Mr,v as L,va as jt,vb as yr,vd as Nr,w as R,wa as Bt,wd as Or,x as q,xa as Ct,xd as Qr,y as v,ya as Dt,yd as Vr,z as G,za as Et,zd as Wr}from"./chunk-ORBTGJIA.js";import{a as S,d as z,e as zr,f as Gr,g as Ir,h as Jr,i as Kr}from"./chunk-JRXZBVXH.js";import"./chunk-4SACVMDH.js";import{_ as u,a as t,aa as a,ba as f}from"./chunk-ZIKV2LUM.js";var e=["sha-1","sha-256","sha-384","sha-512"],r=class{static{t(this,"BaseCryptoBeta")}};var o=class extends r{static{t(this,"WorkerCryptoBeta")}async digest(s,p){if(n("runtime.crypto-beta"),!e.includes(s.toLowerCase()))throw new a(`Algorithm ${s} is not supported. Try using ${e.join(", ")}`);let c=new TextEncoder().encode(p),h=await crypto.subtle.digest(s,c);return Array.from(new Uint8Array(h)).map(m=>m.toString(16).padStart(2,"0")).join("")}};export{Dt as AIGatewayAnthropicToOpenAIInboundPolicy,Et as AIGatewayAuthInboundPolicy,I as AIGatewayMeteringInboundPolicy,Ht as AIGatewayOpenAIToAnthropicOutboundPolicy,Pt as AIGatewaySemanticCacheInboundPolicy,St as AIGatewaySemanticCacheOutboundPolicy,Tt as AIGatewayUsageTrackerPolicy,rt as AWSLoggingPlugin,Ut as AkamaiAIFirewallInboundPolicy,wt as AkamaiApiSecurityPlugin,$t as AkamaiFirewallForAiInboundPolicy,kt as AkamaiFirewallForAiOutboundPolicy,Lt as AmberfloMeteringInboundPolicy,Ft as AmberfloMeteringPolicy,qt as ApiAuthKeyInboundPolicy,xs as ApiKeyConsumerClient,Rt as ApiKeyInboundPolicy,dt as AuditLogDataStaxProvider,ut as AuditLogPlugin,zt as Auth0JwtInboundPolicy,Gt as AuthZenInboundPolicy,K as AwsLambdaHandlerExtensions,It as AxiomaticsAuthZInboundPolicy,bt as AzureBlobPlugin,lt as AzureEventHubsRequestLoggerPlugin,At as BackgroundDispatcher,ys as BackgroundLoader,Jt as BasicAuthInboundPolicy,$r as BasicRateLimitInboundPolicy,P as BatchDispatch,Kt as BrownoutInboundPolicy,Mt as CachingInboundPolicy,Nt as ChangeMethodInboundPolicy,Ot as ClearHeadersInboundPolicy,Qt as ClearHeadersOutboundPolicy,Vt as ClerkJwtInboundPolicy,Wt as CognitoJwtInboundPolicy,Xt as CometOpikTracingInboundPolicy,Yt as ComplexRateLimitInboundPolicy,Zt as CompositeInboundPolicy,_t as CompositeOutboundPolicy,f as ConfigurationError,E as ContentTypes,v as ContextData,o as CryptoBeta,tr as CurityPhantomTokenInboundPolicy,F as DataDogLoggingPlugin,ct as DataDogMetricsPlugin,st as DynaTraceLoggingPlugin,ht as DynatraceMetricsPlugin,rr as FirebaseJwtInboundPolicy,sr as FormDataToJsonInboundPolicy,er as GalileoTracingInboundPolicy,or as GeoFilterInboundPolicy,k as GoogleCloudLoggingPlugin,G as Handler,ar as HttpDeprecationOutboundPolicy,B as HttpProblems,b as HttpStatusCode,Bt as HydrolixRequestLoggerPlugin,U as InboundPolicy,nr as JWTScopeValidationInboundPolicy,ft as JwtServicePlugin,et as LokiLoggingPlugin,L as LookupResult,Br as MTLSAuthInboundPolicy,wr as McpAuth0OAuthInboundPolicy,ir as McpClerkOAuthInboundPolicy,pr as McpCognitoOAuthInboundPolicy,cr as McpEntraOAuthInboundPolicy,xt as McpGatewayOAuthProtectedResourcePlugin,hr as McpGoogleOAuthInboundPolicy,mr as McpKeycloakOAuthInboundPolicy,gr as McpLogtoOAuthInboundPolicy,dr as McpOAuthInboundPolicy,ur as McpOktaOAuthInboundPolicy,fr as McpOneLoginOAuthInboundPolicy,xr as McpPingOAuthInboundPolicy,yr as McpWorkosOAuthInboundPolicy,w as MemoryZoneReadThroughCache,Ar as MockApiInboundPolicy,lr as MoesifInboundPolicy,jr as MonetizationInboundPolicy,ot as NewRelicLoggingPlugin,mt as NewRelicMetricsPlugin,yt as OAuthProtectedResourcePlugin,gt as OTelMetricsPlugin,Cr as OktaFGAAuthZInboundPolicy,Dr as OktaJwtInboundPolicy,Er as OpenFGAAuthZInboundPolicy,vt as OpenIdJwtInboundPolicy,Hr as OpenMeterInboundPolicy,$ as OutboundPolicy,j as ProblemResponseFormatter,Pr as PromptInjectionDetectionOutboundPolicy,Sr as PropelAuthJwtInboundPolicy,Tr as QueryParamToHeaderInboundPolicy,Ur as QuotaInboundPolicy,$r as RateLimitInboundPolicy,kr as ReadmeMetricsInboundPolicy,Fr as RemoveHeadersInboundPolicy,Lr as RemoveHeadersOutboundPolicy,Rr as RemoveQueryParamsInboundPolicy,qr as ReplaceStringOutboundPolicy,Ct as RequestLoggerPlugin,vr as RequestSizeLimitInboundPolicy,Mr as RequestValidationInboundPolicy,Or as RequireOriginInboundPolicy,R as ResponseSendingEvent,q as ResponseSentEvent,a as RuntimeError,u as SYSTEM_LOGGER,Nr as SchemaBasedRequestValidation,Qr as SecretMaskingOutboundPolicy,T as SemanticAttributes,Vr as SemanticCacheInboundPolicy,fs as ServiceProviderImpl,Wr as SetBodyInboundPolicy,Xr as SetHeadersInboundPolicy,Yr as SetHeadersOutboundPolicy,Zr as SetQueryParamsInboundPolicy,_r as SetStatusOutboundPolicy,ts as SetUpstreamApiKeyInboundPolicy,rs as SleepInboundPolicy,at as SplunkLoggingPlugin,A as StreamingZoneCache,ss as StripeWebhookVerificationInboundPolicy,nt as SumoLogicLoggingPlugin,es as SupabaseJwtInboundPolicy,S as SystemRouteName,C as TelemetryPlugin,os as UpstreamAzureAdServiceAuthInboundPolicy,as as UpstreamFirebaseAdminAuthInboundPolicy,ns as UpstreamFirebaseUserAuthInboundPolicy,ps as UpstreamGcpFederatedAuthInboundPolicy,cs as UpstreamGcpJwtInboundPolicy,hs as UpstreamGcpServiceAuthInboundPolicy,ms as UpstreamZuploJwtAuthInboundPolicy,it as VMWareLogInsightLoggingPlugin,gs as ValidateJsonSchemaInbound,ds as WebBotAuthInboundPolicy,us as XmlToJsonOutboundPolicy,y as ZoneCache,pt as ZuploMcpSdk,D as ZuploRequest,is as ZuploServices,J as aiGatewayHandler,x as apiServices,M as awsLambdaHandler,jt as defaultGenerateHydrolixEntry,z as environment,Gr as getIdForParameterSchema,Jr as getIdForRefSchema,Ir as getIdForRequestBodySchema,zr as getRawOperationDataIdentifierName,l as httpStatuses,N as legacyDevPortalHandler,Q as mcpServerHandler,V as openApiSpecHandler,W as redirectHandler,O as redirectLegacyDevPortal,Kr as sanitizedIdentifierName,H as serialize,br as setMoesifContext,n as trackFeature,Y as urlForwardHandler,Z as urlRewriteHandler,_ as webSocketHandler,tt as webSocketPipelineHandler,X as zuploServiceProxy};
 //# sourceMappingURL=index.js.map

package/out/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["@zuplo/runtime/crypto-beta.ts","@zuplo/runtime/platforms/worker/crypto-beta.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;k7CAIO,IAAMA,EAAmB,CAAC,QAAS,UAAW,UAAW,SAAS,EAKnDC,EAAf,KAA8B,CATrC,MASqC,CAAAC,EAAA,uBAErC,ECHO,IAAMC,EAAN,cAA+BC,CAAe,CARrD,MAQqD,CAAAC,EAAA,yBACnD,MAAM,OAAOC,EAAmBC,EAA+B,CAE7D,GADAC,EAAa,qBAAqB,EAC9B,CAACC,EAAiB,SAASH,EAAU,YAAY,CAAC,EACpD,MAAM,IAAII,EACR,aAAaJ,CAAS,gCAAgCG,EAAiB,KACrE,IACF,CAAC,EACH,EAEF,IAAME,EAAW,IAAI,YAAY,EAAE,OAAOJ,CAAI,EACxCK,EAAa,MAAM,OAAO,OAAO,OAAON,EAAWK,CAAQ,EAKjE,OAJkB,MAAM,KAAK,IAAI,WAAWC,CAAU,CAAC,EAEpD,IAAKC,GAAMA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAC1C,KAAK,EAAE,CAEZ,CACF","names":["supportedDigests","BaseCryptoBeta","__name","WorkerCryptoBeta","BaseCryptoBeta","__name","algorithm","data","trackFeature","supportedDigests","RuntimeError","msgUint8","hashBuffer","b"]}
+{"version":3,"sources":["@zuplo/runtime/crypto-beta.ts","@zuplo/runtime/platforms/worker/crypto-beta.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;w/CAIO,IAAMA,EAAmB,CAAC,QAAS,UAAW,UAAW,SAAS,EAKnDC,EAAf,KAA8B,CATrC,MASqC,CAAAC,EAAA,uBAErC,ECHO,IAAMC,EAAN,cAA+BC,CAAe,CARrD,MAQqD,CAAAC,EAAA,yBACnD,MAAM,OAAOC,EAAmBC,EAA+B,CAE7D,GADAC,EAAa,qBAAqB,EAC9B,CAACC,EAAiB,SAASH,EAAU,YAAY,CAAC,EACpD,MAAM,IAAII,EACR,aAAaJ,CAAS,gCAAgCG,EAAiB,KACrE,IACF,CAAC,EACH,EAEF,IAAME,EAAW,IAAI,YAAY,EAAE,OAAOJ,CAAI,EACxCK,EAAa,MAAM,OAAO,OAAO,OAAON,EAAWK,CAAQ,EAKjE,OAJkB,MAAM,KAAK,IAAI,WAAWC,CAAU,CAAC,EAEpD,IAAKC,GAAMA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAC1C,KAAK,EAAE,CAEZ,CACF","names":["supportedDigests","BaseCryptoBeta","__name","WorkerCryptoBeta","BaseCryptoBeta","__name","algorithm","data","trackFeature","supportedDigests","RuntimeError","msgUint8","hashBuffer","b"]}