@agent-native/core 0.16.2 → 0.17.0

package/dist/templates/workspace-root/AGENTS.md

@@ -60,15 +60,15 @@ coding agents can discover the same workspace-wide guidance from the root.
 - Do not satisfy a new-app request by adding a route, page, component, or file
   to `apps/starter` or another existing app unless the user explicitly asks to
   modify that existing app.
-- Treat first-party apps such as Mail, Calendar, Analytics, and Dispatch as
+- Treat first-party apps such as Mail, Calendar, Analytics, Brain, and Dispatch as
   existing hosted/connected neighbors available through links and A2A/default
-  connected agents. For example, Mail, Calendar, and Analytics already exist at
+  connected agents. For example, Mail, Calendar, Analytics, and Brain already exist at
   `https://mail.agent-native.com`, `https://calendar.agent-native.com`, and
-  `https://analytics.agent-native.com`.
-- If a new app needs to use Mail, Calendar, Analytics, or similar first-party
+  `https://analytics.agent-native.com`, and `https://brain.agent-native.com`.
+- If a new app needs to use Mail, Calendar, Analytics, Brain, or similar first-party
   data/agents, build only the genuinely new workflow and delegate/link to those
   existing apps. Do not create wrapper apps, child apps, nested template copies,
-  or cloned Mail/Calendar/Analytics implementations inside the new app just to
+  or cloned Mail/Calendar/Analytics/Brain implementations inside the new app just to
   provide access.
 - Only create a first-party app copy when the user explicitly asks for a
   customized fork/copy of that app. Otherwise prefer the hosted/shared app so

package/dist/templates/workspace-root/README.md

@@ -116,7 +116,7 @@ separate workspace app registry to edit. React Router apps must preserve
 For requests phrased as creating an "agent", classify the scope first: simple
 recurring Dispatch behavior can stay in Dispatch, while a robust app-like
 teammate should become a real workspace app listed with the rest of the apps.
-First-party apps such as Mail, Calendar, Analytics, and Dispatch should be
+First-party apps such as Mail, Calendar, Analytics, Brain, and Dispatch should be
 treated as existing hosted or connected neighbors. If a new app needs access to
 their data or agents, link/delegate to those apps through the workspace/A2A
 path rather than creating wrapper apps, child apps, or cloned template copies

package/dist/workspace-connections/credentials.d.ts

@@ -0,0 +1,64 @@
+import { type CredentialStorageScope } from "../credentials/index.js";
+import { type SecretRef } from "../secrets/storage.js";
+import { type WorkspaceConnectionAppAccessMode, type WorkspaceConnectionPublicCredentialRef } from "./store.js";
+export type WorkspaceConnectionCredentialResolutionStatus = "resolved" | "missing_context" | "not_available" | "missing_ref" | "missing_secret" | "error";
+export type WorkspaceConnectionCredentialBackend = "secrets" | "credentials";
+export interface ResolveWorkspaceConnectionCredentialForAppOptions {
+    appId: string;
+    provider: string;
+    key: string;
+    connectionId?: string | null;
+    userEmail?: string | null;
+    orgId?: string | null;
+}
+export interface ResolveWorkspaceConnectionCredentialsForAppOptions extends Omit<ResolveWorkspaceConnectionCredentialForAppOptions, "key"> {
+    keys: string[];
+}
+export interface WorkspaceConnectionCredentialProvenance {
+    source: "workspace_connection";
+    provider: string;
+    requestedKey: string;
+    resolvedKey: string;
+    credentialRef: WorkspaceConnectionPublicCredentialRef;
+    connectionId: string;
+    connectionLabel: string;
+    grantId: string | null;
+    appAccessMode: WorkspaceConnectionAppAccessMode;
+    secretScope: SecretRef["scope"] | CredentialStorageScope;
+    backend: WorkspaceConnectionCredentialBackend;
+}
+export interface WorkspaceConnectionCredentialResolutionCheck {
+    status: Exclude<WorkspaceConnectionCredentialResolutionStatus, "resolved" | "missing_context">;
+    reason: string;
+    key: string;
+    resolvedKey?: string;
+    connectionId?: string;
+    connectionLabel?: string;
+    grantId?: string | null;
+    appAccessMode?: WorkspaceConnectionAppAccessMode;
+    credentialRef?: WorkspaceConnectionPublicCredentialRef;
+    secretScope?: SecretRef["scope"] | CredentialStorageScope;
+    backend?: WorkspaceConnectionCredentialBackend;
+}
+export interface WorkspaceConnectionCredentialResolution {
+    available: boolean;
+    status: WorkspaceConnectionCredentialResolutionStatus;
+    reason: string;
+    provider: string;
+    key: string;
+    value?: string;
+    provenance: WorkspaceConnectionCredentialProvenance | null;
+    checked: WorkspaceConnectionCredentialResolutionCheck[];
+}
+export interface WorkspaceConnectionCredentialsResolution {
+    available: boolean;
+    appId: string;
+    provider: string;
+    connectionId: string | null;
+    values: Record<string, string>;
+    results: Record<string, WorkspaceConnectionCredentialResolution>;
+    missingKeys: string[];
+}
+export declare function resolveWorkspaceConnectionCredentialForApp(options: ResolveWorkspaceConnectionCredentialForAppOptions): Promise<WorkspaceConnectionCredentialResolution>;
+export declare function resolveWorkspaceConnectionCredentialsForApp(options: ResolveWorkspaceConnectionCredentialsForAppOptions): Promise<WorkspaceConnectionCredentialsResolution>;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/workspace-connections/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../src/workspace-connections/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,sBAAsB,EAC5B,MAAM,yBAAyB,CAAC;AAMjC,OAAO,EAAiB,KAAK,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAIL,KAAK,gCAAgC,EAGrC,KAAK,sCAAsC,EAC5C,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,6CAA6C,GACrD,UAAU,GACV,iBAAiB,GACjB,eAAe,GACf,aAAa,GACb,gBAAgB,GAChB,OAAO,CAAC;AAEZ,MAAM,MAAM,oCAAoC,GAAG,SAAS,GAAG,aAAa,CAAC;AAE7E,MAAM,WAAW,iDAAiD;IAChE,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,kDAAmD,SAAQ,IAAI,CAC9E,iDAAiD,EACjD,KAAK,CACN;IACC,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,uCAAuC;IACtD,MAAM,EAAE,sBAAsB,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,sCAAsC,CAAC;IACtD,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,aAAa,EAAE,gCAAgC,CAAC;IAChD,WAAW,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,sBAAsB,CAAC;IACzD,OAAO,EAAE,oCAAoC,CAAC;CAC/C;AAED,MAAM,WAAW,4CAA4C;IAC3D,MAAM,EAAE,OAAO,CACb,6CAA6C,EAC7C,UAAU,GAAG,iBAAiB,CAC/B,CAAC;IACF,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,aAAa,CAAC,EAAE,gCAAgC,CAAC;IACjD,aAAa,CAAC,EAAE,sCAAsC,CAAC;IACvD,WAAW,CAAC,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,sBAAsB,CAAC;IAC1D,OAAO,CAAC,EAAE,oCAAoC,CAAC;CAChD;AAED,MAAM,WAAW,uCAAuC;IACtD,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,6CAA6C,CAAC;IACtD,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,uCAAuC,GAAG,IAAI,CAAC;IAC3D,OAAO,EAAE,4CAA4C,EAAE,CAAC;CACzD;AAED,MAAM,WAAW,wCAAwC;IACvD,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,uCAAuC,CAAC,CAAC;IACjE,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AA6bD,wBAAsB,0CAA0C,CAC9D,OAAO,EAAE,iDAAiD,GACzD,OAAO,CAAC,uCAAuC,CAAC,CAuBlD;AAED,wBAAsB,2CAA2C,CAC/D,OAAO,EAAE,kDAAkD,GAC1D,OAAO,CAAC,wCAAwC,CAAC,CA+BnD"}

package/dist/workspace-connections/credentials.js

@@ -0,0 +1,378 @@
+import { resolveCredentialForScope, } from "../credentials/index.js";
+import { getCredentialContext, getRequestContext, runWithRequestContext, } from "../server/request-context.js";
+import { readAppSecret } from "../secrets/storage.js";
+import { listWorkspaceConnectionsForApp, markWorkspaceConnectionUsed, resolveWorkspaceConnectionForApp, } from "./store.js";
+const PROVIDER_CREDENTIAL_KEY_ALIASES = {
+    hubspot: {
+        HUBSPOT_ACCESS_TOKEN: ["HUBSPOT_PRIVATE_APP_TOKEN"],
+        HUBSPOT_PRIVATE_APP_TOKEN: ["HUBSPOT_ACCESS_TOKEN"],
+    },
+};
+function normalizeRequired(value, label) {
+    const normalized = value.trim();
+    if (!normalized)
+        throw new Error(`${label} is required.`);
+    return normalized;
+}
+function normalizeCredentialKey(key) {
+    return key.trim().toUpperCase();
+}
+function uniqueStrings(values) {
+    return Array.from(new Set(values.map((value) => value.trim()).filter(Boolean)));
+}
+function credentialKeyAliases(provider, key) {
+    const aliases = PROVIDER_CREDENTIAL_KEY_ALIASES[provider.trim().toLowerCase()]?.[normalizeCredentialKey(key)] ?? [];
+    return uniqueStrings([key, ...aliases]);
+}
+function credentialKeyMatches(provider, requestedKey, refKey) {
+    const requested = new Set(credentialKeyAliases(provider, requestedKey).map(normalizeCredentialKey));
+    return requested.has(normalizeCredentialKey(refKey));
+}
+function lookupKeysForRef(provider, requestedKey, refKey) {
+    return uniqueStrings([
+        refKey,
+        ...credentialKeyAliases(provider, refKey),
+        requestedKey,
+        ...credentialKeyAliases(provider, requestedKey),
+    ]);
+}
+function publicCredentialRef(ref, source) {
+    return {
+        key: ref.key,
+        scope: ref.scope,
+        provider: ref.provider,
+        label: ref.label,
+        source,
+    };
+}
+function credentialRefsForConnection(connection) {
+    return [
+        ...(connection.explicitGrant?.credentialRefs ?? []).map((ref) => ({
+            ref,
+            publicRef: publicCredentialRef(ref, "grant"),
+        })),
+        ...connection.credentialRefs.map((ref) => ({
+            ref,
+            publicRef: publicCredentialRef(ref, "connection"),
+        })),
+    ];
+}
+function refScope(ref) {
+    return ref.scope === "user" ||
+        ref.scope === "org" ||
+        ref.scope === "workspace"
+        ? ref.scope
+        : undefined;
+}
+function workspaceScopeId(ctx) {
+    return ctx.orgId ?? `solo:${ctx.userEmail}`;
+}
+function credentialCandidatesForRef(ref, ctx) {
+    const scope = refScope(ref);
+    if (scope === "user") {
+        return [{ key: ref.key, scope: "user", scopeId: ctx.userEmail }];
+    }
+    if (scope === "org") {
+        return ctx.orgId
+            ? [{ key: ref.key, scope: "org", scopeId: ctx.orgId }]
+            : [];
+    }
+    if (scope === "workspace") {
+        return [
+            { key: ref.key, scope: "workspace", scopeId: workspaceScopeId(ctx) },
+        ];
+    }
+    if (ctx.orgId) {
+        return [
+            { key: ref.key, scope: "org", scopeId: ctx.orgId },
+            { key: ref.key, scope: "workspace", scopeId: ctx.orgId },
+            { key: ref.key, scope: "user", scopeId: ctx.userEmail },
+        ];
+    }
+    return [
+        { key: ref.key, scope: "user", scopeId: ctx.userEmail },
+        { key: ref.key, scope: "workspace", scopeId: workspaceScopeId(ctx) },
+    ];
+}
+async function readCandidate(candidate, ctx) {
+    const secret = await readAppSecret({
+        key: candidate.key,
+        scope: candidate.scope,
+        scopeId: candidate.scopeId,
+    });
+    if (secret?.value) {
+        return {
+            value: secret.value,
+            key: candidate.key,
+            scope: candidate.scope,
+            backend: "secrets",
+        };
+    }
+    if (candidate.scope === "user" || candidate.scope === "org") {
+        const credential = await resolveCredentialForScope(candidate.key, {
+            ...ctx,
+            scope: candidate.scope,
+        });
+        if (credential) {
+            return {
+                value: credential,
+                key: candidate.key,
+                scope: candidate.scope,
+                backend: "credentials",
+            };
+        }
+    }
+    return null;
+}
+async function readFirstCredentialForRef({ provider, requestedKey, ref, ctx, }) {
+    for (const key of lookupKeysForRef(provider, requestedKey, ref.key)) {
+        const candidates = credentialCandidatesForRef({ ...ref, key }, ctx);
+        for (const candidate of candidates) {
+            const hit = await readCandidate(candidate, ctx);
+            if (hit)
+                return hit;
+        }
+    }
+    return null;
+}
+function contextFromOptions(options) {
+    const requestCtx = getCredentialContext();
+    const userEmail = options.userEmail?.trim() || requestCtx?.userEmail;
+    if (!userEmail)
+        return null;
+    const orgId = options.orgId === undefined
+        ? options.userEmail
+            ? null
+            : (requestCtx?.orgId ?? null)
+        : options.orgId?.trim() || null;
+    return { userEmail: userEmail.toLowerCase(), orgId };
+}
+function result(options) {
+    return {
+        available: options.status === "resolved",
+        status: options.status,
+        reason: options.reason,
+        provider: options.provider,
+        key: options.key,
+        ...(options.value ? { value: options.value } : {}),
+        provenance: options.provenance ?? null,
+        checked: options.checked ?? [],
+    };
+}
+function unresolvedStatus(checked) {
+    if (checked.some((entry) => entry.status === "error"))
+        return "error";
+    if (checked.some((entry) => entry.status === "missing_secret")) {
+        return "missing_secret";
+    }
+    if (checked.some((entry) => entry.status === "missing_ref")) {
+        return "missing_ref";
+    }
+    return "not_available";
+}
+function unresolvedReason(checked, provider, key) {
+    if (checked.length > 0)
+        return checked[checked.length - 1].reason;
+    return `No connected ${provider} workspace connection could provide ${key}.`;
+}
+async function resolveInRequestContext(options, ctx) {
+    const appId = normalizeRequired(options.appId, "resolveWorkspaceConnectionCredentialForApp appId");
+    const provider = normalizeRequired(options.provider, "resolveWorkspaceConnectionCredentialForApp provider");
+    const key = normalizeRequired(options.key, "resolveWorkspaceConnectionCredentialForApp key");
+    const connectionId = options.connectionId?.trim();
+    const checked = [];
+    let connections = [];
+    if (connectionId) {
+        const resolved = await resolveWorkspaceConnectionForApp({
+            appId,
+            provider,
+            connectionId,
+            includeDisabled: true,
+            requireConnected: true,
+        });
+        if (!resolved.available || !resolved.connection) {
+            checked.push({
+                status: "not_available",
+                reason: resolved.reason,
+                key,
+                connectionId: resolved.connection?.id,
+                connectionLabel: resolved.connection?.label,
+                grantId: resolved.appAccess?.grantId ?? null,
+                appAccessMode: resolved.appAccess?.mode,
+            });
+            return result({
+                provider,
+                key,
+                status: "not_available",
+                reason: resolved.reason,
+                checked,
+            });
+        }
+        connections = [resolved.connection];
+    }
+    else {
+        connections = (await listWorkspaceConnectionsForApp({
+            appId,
+            provider,
+            includeDisabled: false,
+        })).filter((connection) => connection.status === "connected");
+        if (connections.length === 0) {
+            const resolved = await resolveWorkspaceConnectionForApp({
+                appId,
+                provider,
+                includeDisabled: true,
+                requireConnected: true,
+            });
+            checked.push({
+                status: "not_available",
+                reason: resolved.reason,
+                key,
+                connectionId: resolved.connection?.id,
+                connectionLabel: resolved.connection?.label,
+                grantId: resolved.appAccess?.grantId ?? null,
+                appAccessMode: resolved.appAccess?.mode,
+            });
+            return result({
+                provider,
+                key,
+                status: "not_available",
+                reason: resolved.reason,
+                checked,
+            });
+        }
+    }
+    for (const connection of connections) {
+        const matchingRefs = credentialRefsForConnection(connection).filter(({ ref }) => credentialKeyMatches(provider, key, ref.key));
+        if (matchingRefs.length === 0) {
+            checked.push({
+                status: "missing_ref",
+                reason: `${connection.label} is granted to ${appId} but does not reference ${key}.`,
+                key,
+                connectionId: connection.id,
+                connectionLabel: connection.label,
+                grantId: connection.appAccess.grantId,
+                appAccessMode: connection.appAccess.mode,
+            });
+            continue;
+        }
+        for (const { ref, publicRef } of matchingRefs) {
+            try {
+                const hit = await readFirstCredentialForRef({
+                    provider,
+                    requestedKey: key,
+                    ref,
+                    ctx,
+                });
+                if (hit) {
+                    await markWorkspaceConnectionUsed({
+                        connectionId: connection.id,
+                        appId: connection.appAccess.mode === "explicit-grant"
+                            ? appId
+                            : undefined,
+                    });
+                    const provenance = {
+                        source: "workspace_connection",
+                        provider,
+                        requestedKey: key,
+                        resolvedKey: hit.key,
+                        credentialRef: publicRef,
+                        connectionId: connection.id,
+                        connectionLabel: connection.label,
+                        grantId: connection.appAccess.grantId,
+                        appAccessMode: connection.appAccess.mode,
+                        secretScope: hit.scope,
+                        backend: hit.backend,
+                    };
+                    return result({
+                        provider,
+                        key,
+                        status: "resolved",
+                        reason: `${key} is available through ${connection.label}.`,
+                        value: hit.value,
+                        provenance,
+                        checked,
+                    });
+                }
+                checked.push({
+                    status: "missing_secret",
+                    reason: `${connection.label} references ${ref.key}, but no scoped credential value was found.`,
+                    key,
+                    resolvedKey: ref.key,
+                    connectionId: connection.id,
+                    connectionLabel: connection.label,
+                    grantId: connection.appAccess.grantId,
+                    appAccessMode: connection.appAccess.mode,
+                    credentialRef: publicRef,
+                });
+            }
+            catch (err) {
+                checked.push({
+                    status: "error",
+                    reason: `${connection.label} credential lookup failed: ${err instanceof Error ? err.message : String(err)}`,
+                    key,
+                    resolvedKey: ref.key,
+                    connectionId: connection.id,
+                    connectionLabel: connection.label,
+                    grantId: connection.appAccess.grantId,
+                    appAccessMode: connection.appAccess.mode,
+                    credentialRef: publicRef,
+                });
+            }
+        }
+    }
+    const status = unresolvedStatus(checked);
+    return result({
+        provider,
+        key,
+        status,
+        reason: unresolvedReason(checked, provider, key),
+        checked,
+    });
+}
+export async function resolveWorkspaceConnectionCredentialForApp(options) {
+    const ctx = contextFromOptions(options);
+    const provider = options.provider?.trim() ?? "";
+    const key = options.key?.trim() ?? "";
+    if (!ctx) {
+        return result({
+            provider,
+            key,
+            status: "missing_context",
+            reason: "Workspace connection credential resolution requires an authenticated request context.",
+        });
+    }
+    const existing = getRequestContext() ?? {};
+    return runWithRequestContext({
+        ...existing,
+        userEmail: ctx.userEmail,
+        orgId: ctx.orgId ?? undefined,
+    }, () => resolveInRequestContext(options, ctx));
+}
+export async function resolveWorkspaceConnectionCredentialsForApp(options) {
+    const keys = uniqueStrings(options.keys);
+    const entries = await Promise.all(keys.map(async (key) => [
+        key,
+        await resolveWorkspaceConnectionCredentialForApp({ ...options, key }),
+    ]));
+    const results = Object.fromEntries(entries);
+    const values = {};
+    const missingKeys = [];
+    for (const [key, resolution] of entries) {
+        if (resolution.value) {
+            values[key] = resolution.value;
+        }
+        else {
+            missingKeys.push(key);
+        }
+    }
+    return {
+        available: missingKeys.length === 0,
+        appId: options.appId,
+        provider: options.provider,
+        connectionId: options.connectionId?.trim() || null,
+        values,
+        results,
+        missingKeys,
+    };
+}
+//# sourceMappingURL=credentials.js.map

package/dist/workspace-connections/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/workspace-connections/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,GAG1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,aAAa,EAAkB,MAAM,uBAAuB,CAAC;AACtE,OAAO,EACL,8BAA8B,EAC9B,2BAA2B,EAC3B,gCAAgC,GAKjC,MAAM,YAAY,CAAC;AA6FpB,MAAM,+BAA+B,GAGjC;IACF,OAAO,EAAE;QACP,oBAAoB,EAAE,CAAC,2BAA2B,CAAC;QACnD,yBAAyB,EAAE,CAAC,sBAAsB,CAAC;KACpD;CACF,CAAC;AAEF,SAAS,iBAAiB,CAAC,KAAa,EAAE,KAAa;IACrD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,eAAe,CAAC,CAAC;IAC1D,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAW;IACzC,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,aAAa,CAAC,MAAgB;IACrC,OAAO,KAAK,CAAC,IAAI,CACf,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAC7D,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB,EAAE,GAAW;IACzD,MAAM,OAAO,GACX,+BAA+B,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,EAAE,CAC9D,sBAAsB,CAAC,GAAG,CAAC,CAC5B,IAAI,EAAE,CAAC;IACV,OAAO,aAAa,CAAC,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,oBAAoB,CAC3B,QAAgB,EAChB,YAAoB,EACpB,MAAc;IAEd,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,oBAAoB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,CACzE,CAAC;IACF,OAAO,SAAS,CAAC,GAAG,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,gBAAgB,CACvB,QAAgB,EAChB,YAAoB,EACpB,MAAc;IAEd,OAAO,aAAa,CAAC;QACnB,MAAM;QACN,GAAG,oBAAoB,CAAC,QAAQ,EAAE,MAAM,CAAC;QACzC,YAAY;QACZ,GAAG,oBAAoB,CAAC,QAAQ,EAAE,YAAY,CAAC;KAChD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAC1B,GAAqC,EACrC,MAAwD;IAExD,OAAO;QACL,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAClC,UAAqC;IAKrC,OAAO;QACL,GAAG,CAAC,UAAU,CAAC,aAAa,EAAE,cAAc,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAChE,GAAG;YACH,SAAS,EAAE,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC;SAC7C,CAAC,CAAC;QACH,GAAG,UAAU,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACzC,GAAG;YACH,SAAS,EAAE,mBAAmB,CAAC,GAAG,EAAE,YAAY,CAAC;SAClD,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CACf,GAAqC;IAErC,OAAO,GAAG,CAAC,KAAK,KAAK,MAAM;QACzB,GAAG,CAAC,KAAK,KAAK,KAAK;QACnB,GAAG,CAAC,KAAK,KAAK,WAAW;QACzB,CAAC,CAAC,GAAG,CAAC,KAAK;QACX,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAsB;IAC9C,OAAO,GAAG,CAAC,KAAK,IAAI,QAAQ,GAAG,CAAC,SAAS,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,0BAA0B,CACjC,GAAqC,EACrC,GAAsB;IAEtB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QACpB,OAAO,GAAG,CAAC,KAAK;YACd,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;YACtD,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;IACD,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;QAC1B,OAAO;YACL,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE;SACrE,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QACd,OAAO;YACL,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE;YAClD,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE;YACxD,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,EAAE;SACxD,CAAC;IACJ,CAAC;IACD,OAAO;QACL,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,SAAS,EAAE;QACvD,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE;KACrE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,SAAoC,EACpC,GAAsB;IAEtB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;QACjC,GAAG,EAAE,SAAS,CAAC,GAAG;QAClB,KAAK,EAAE,SAAS,CAAC,KAA2B;QAC5C,OAAO,EAAE,SAAS,CAAC,OAAO;KAC3B,CAAC,CAAC;IACH,IAAI,MAAM,EAAE,KAAK,EAAE,CAAC;QAClB,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,GAAG,EAAE,SAAS,CAAC,GAAG;YAClB,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,OAAO,EAAE,SAAS;SACnB,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,CAAC,KAAK,KAAK,MAAM,IAAI,SAAS,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QAC5D,MAAM,UAAU,GAAG,MAAM,yBAAyB,CAAC,SAAS,CAAC,GAAG,EAAE;YAChE,GAAG,GAAG;YACN,KAAK,EAAE,SAAS,CAAC,KAAK;SACvB,CAAC,CAAC;QACH,IAAI,UAAU,EAAE,CAAC;YACf,OAAO;gBACL,KAAK,EAAE,UAAU;gBACjB,GAAG,EAAE,SAAS,CAAC,GAAG;gBAClB,KAAK,EAAE,SAAS,CAAC,KAAK;gBACtB,OAAO,EAAE,aAAa;aACvB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,EACvC,QAAQ,EACR,YAAY,EACZ,GAAG,EACH,GAAG,GAMJ;IACC,KAAK,MAAM,GAAG,IAAI,gBAAgB,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACpE,MAAM,UAAU,GAAG,0BAA0B,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QACpE,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YAChD,IAAI,GAAG;gBAAE,OAAO,GAAG,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CACzB,OAGC;IAED,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC;IAC1C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,UAAU,EAAE,SAAS,CAAC;IACrE,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,KAAK,GACT,OAAO,CAAC,KAAK,KAAK,SAAS;QACzB,CAAC,CAAC,OAAO,CAAC,SAAS;YACjB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,IAAI,IAAI,CAAC;QAC/B,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;IACpC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,MAAM,CAAC,OAQf;IACC,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,MAAM,KAAK,UAAU;QACxC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI;QACtC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;KAC/B,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAuD;IAEvD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACtE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,gBAAgB,CAAC,EAAE,CAAC;QAC/D,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,aAAa,CAAC,EAAE,CAAC;QAC5D,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAuD,EACvD,QAAgB,EAChB,GAAW;IAEX,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;IAClE,OAAO,gBAAgB,QAAQ,uCAAuC,GAAG,GAAG,CAAC;AAC/E,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,OAA0D,EAC1D,GAAsB;IAEtB,MAAM,KAAK,GAAG,iBAAiB,CAC7B,OAAO,CAAC,KAAK,EACb,kDAAkD,CACnD,CAAC;IACF,MAAM,QAAQ,GAAG,iBAAiB,CAChC,OAAO,CAAC,QAAQ,EAChB,qDAAqD,CACtD,CAAC;IACF,MAAM,GAAG,GAAG,iBAAiB,CAC3B,OAAO,CAAC,GAAG,EACX,gDAAgD,CACjD,CAAC;IACF,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;IAClD,MAAM,OAAO,GAAmD,EAAE,CAAC;IAEnE,IAAI,WAAW,GAAgC,EAAE,CAAC;IAClD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,QAAQ,GAAG,MAAM,gCAAgC,CAAC;YACtD,KAAK;YACL,QAAQ;YACR,YAAY;YACZ,eAAe,EAAE,IAAI;YACrB,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YAChD,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM,EAAE,eAAe;gBACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,GAAG;gBACH,YAAY,EAAE,QAAQ,CAAC,UAAU,EAAE,EAAE;gBACrC,eAAe,EAAE,QAAQ,CAAC,UAAU,EAAE,KAAK;gBAC3C,OAAO,EAAE,QAAQ,CAAC,SAAS,EAAE,OAAO,IAAI,IAAI;gBAC5C,aAAa,EAAE,QAAQ,CAAC,SAAS,EAAE,IAAI;aACxC,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;gBACZ,QAAQ;gBACR,GAAG;gBACH,MAAM,EAAE,eAAe;gBACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QACD,WAAW,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,WAAW,GAAG,CACZ,MAAM,8BAA8B,CAAC;YACnC,KAAK;YACL,QAAQ;YACR,eAAe,EAAE,KAAK;SACvB,CAAC,CACH,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC;QAC5D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,MAAM,gCAAgC,CAAC;gBACtD,KAAK;gBACL,QAAQ;gBACR,eAAe,EAAE,IAAI;gBACrB,gBAAgB,EAAE,IAAI;aACvB,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM,EAAE,eAAe;gBACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,GAAG;gBACH,YAAY,EAAE,QAAQ,CAAC,UAAU,EAAE,EAAE;gBACrC,eAAe,EAAE,QAAQ,CAAC,UAAU,EAAE,KAAK;gBAC3C,OAAO,EAAE,QAAQ,CAAC,SAAS,EAAE,OAAO,IAAI,IAAI;gBAC5C,aAAa,EAAE,QAAQ,CAAC,SAAS,EAAE,IAAI;aACxC,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;gBACZ,QAAQ;gBACR,GAAG;gBACH,MAAM,EAAE,eAAe;gBACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,OAAO;aACR,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,MAAM,YAAY,GAAG,2BAA2B,CAAC,UAAU,CAAC,CAAC,MAAM,CACjE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,oBAAoB,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAC1D,CAAC;QAEF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM,EAAE,aAAa;gBACrB,MAAM,EAAE,GAAG,UAAU,CAAC,KAAK,kBAAkB,KAAK,2BAA2B,GAAG,GAAG;gBACnF,GAAG;gBACH,YAAY,EAAE,UAAU,CAAC,EAAE;gBAC3B,eAAe,EAAE,UAAU,CAAC,KAAK;gBACjC,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,OAAO;gBACrC,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC,IAAI;aACzC,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,KAAK,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,YAAY,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC;oBAC1C,QAAQ;oBACR,YAAY,EAAE,GAAG;oBACjB,GAAG;oBACH,GAAG;iBACJ,CAAC,CAAC;gBACH,IAAI,GAAG,EAAE,CAAC;oBACR,MAAM,2BAA2B,CAAC;wBAChC,YAAY,EAAE,UAAU,CAAC,EAAE;wBAC3B,KAAK,EACH,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,gBAAgB;4BAC5C,CAAC,CAAC,KAAK;4BACP,CAAC,CAAC,SAAS;qBAChB,CAAC,CAAC;oBACH,MAAM,UAAU,GAA4C;wBAC1D,MAAM,EAAE,sBAAsB;wBAC9B,QAAQ;wBACR,YAAY,EAAE,GAAG;wBACjB,WAAW,EAAE,GAAG,CAAC,GAAG;wBACpB,aAAa,EAAE,SAAS;wBACxB,YAAY,EAAE,UAAU,CAAC,EAAE;wBAC3B,eAAe,EAAE,UAAU,CAAC,KAAK;wBACjC,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,OAAO;wBACrC,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC,IAAI;wBACxC,WAAW,EAAE,GAAG,CAAC,KAAK;wBACtB,OAAO,EAAE,GAAG,CAAC,OAAO;qBACrB,CAAC;oBACF,OAAO,MAAM,CAAC;wBACZ,QAAQ;wBACR,GAAG;wBACH,MAAM,EAAE,UAAU;wBAClB,MAAM,EAAE,GAAG,GAAG,yBAAyB,UAAU,CAAC,KAAK,GAAG;wBAC1D,KAAK,EAAE,GAAG,CAAC,KAAK;wBAChB,UAAU;wBACV,OAAO;qBACR,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC;oBACX,MAAM,EAAE,gBAAgB;oBACxB,MAAM,EAAE,GAAG,UAAU,CAAC,KAAK,eAAe,GAAG,CAAC,GAAG,6CAA6C;oBAC9F,GAAG;oBACH,WAAW,EAAE,GAAG,CAAC,GAAG;oBACpB,YAAY,EAAE,UAAU,CAAC,EAAE;oBAC3B,eAAe,EAAE,UAAU,CAAC,KAAK;oBACjC,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,OAAO;oBACrC,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC,IAAI;oBACxC,aAAa,EAAE,SAAS;iBACzB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC;oBACX,MAAM,EAAE,OAAO;oBACf,MAAM,EAAE,GAAG,UAAU,CAAC,KAAK,8BACzB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE;oBACF,GAAG;oBACH,WAAW,EAAE,GAAG,CAAC,GAAG;oBACpB,YAAY,EAAE,UAAU,CAAC,EAAE;oBAC3B,eAAe,EAAE,UAAU,CAAC,KAAK;oBACjC,OAAO,EAAE,UAAU,CAAC,SAAS,CAAC,OAAO;oBACrC,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC,IAAI;oBACxC,aAAa,EAAE,SAAS;iBACzB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC;QACZ,QAAQ;QACR,GAAG;QACH,MAAM;QACN,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC;QAChD,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0CAA0C,CAC9D,OAA0D;IAE1D,MAAM,GAAG,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAChD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,MAAM,CAAC;YACZ,QAAQ;YACR,GAAG;YACH,MAAM,EAAE,iBAAiB;YACzB,MAAM,EACJ,uFAAuF;SAC1F,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,EAAE,IAAI,EAAE,CAAC;IAC3C,OAAO,qBAAqB,CAC1B;QACE,GAAG,QAAQ;QACX,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,SAAS;KAC9B,EACD,GAAG,EAAE,CAAC,uBAAuB,CAAC,OAAO,EAAE,GAAG,CAAC,CAC5C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2CAA2C,CAC/D,OAA2D;IAE3D,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,IAAI,CAAC,GAAG,CACN,KAAK,EAAE,GAAG,EAAE,EAAE,CACZ;QACE,GAAG;QACH,MAAM,0CAA0C,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,CAAC;KAC7D,CACb,CACF,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,OAAO,EAAE,CAAC;QACxC,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO;QACL,SAAS,EAAE,WAAW,CAAC,MAAM,KAAK,CAAC;QACnC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,IAAI;QAClD,MAAM;QACN,OAAO;QACP,WAAW;KACZ,CAAC;AACJ,CAAC","sourcesContent":["import {\n  resolveCredentialForScope,\n  type CredentialContext,\n  type CredentialStorageScope,\n} from \"../credentials/index.js\";\nimport {\n  getCredentialContext,\n  getRequestContext,\n  runWithRequestContext,\n} from \"../server/request-context.js\";\nimport { readAppSecret, type SecretRef } from \"../secrets/storage.js\";\nimport {\n  listWorkspaceConnectionsForApp,\n  markWorkspaceConnectionUsed,\n  resolveWorkspaceConnectionForApp,\n  type WorkspaceConnectionAppAccessMode,\n  type WorkspaceConnectionCredentialRef,\n  type WorkspaceConnectionForApp,\n  type WorkspaceConnectionPublicCredentialRef,\n} from \"./store.js\";\n\nexport type WorkspaceConnectionCredentialResolutionStatus =\n  | \"resolved\"\n  | \"missing_context\"\n  | \"not_available\"\n  | \"missing_ref\"\n  | \"missing_secret\"\n  | \"error\";\n\nexport type WorkspaceConnectionCredentialBackend = \"secrets\" | \"credentials\";\n\nexport interface ResolveWorkspaceConnectionCredentialForAppOptions {\n  appId: string;\n  provider: string;\n  key: string;\n  connectionId?: string | null;\n  userEmail?: string | null;\n  orgId?: string | null;\n}\n\nexport interface ResolveWorkspaceConnectionCredentialsForAppOptions extends Omit<\n  ResolveWorkspaceConnectionCredentialForAppOptions,\n  \"key\"\n> {\n  keys: string[];\n}\n\nexport interface WorkspaceConnectionCredentialProvenance {\n  source: \"workspace_connection\";\n  provider: string;\n  requestedKey: string;\n  resolvedKey: string;\n  credentialRef: WorkspaceConnectionPublicCredentialRef;\n  connectionId: string;\n  connectionLabel: string;\n  grantId: string | null;\n  appAccessMode: WorkspaceConnectionAppAccessMode;\n  secretScope: SecretRef[\"scope\"] | CredentialStorageScope;\n  backend: WorkspaceConnectionCredentialBackend;\n}\n\nexport interface WorkspaceConnectionCredentialResolutionCheck {\n  status: Exclude<\n    WorkspaceConnectionCredentialResolutionStatus,\n    \"resolved\" | \"missing_context\"\n  >;\n  reason: string;\n  key: string;\n  resolvedKey?: string;\n  connectionId?: string;\n  connectionLabel?: string;\n  grantId?: string | null;\n  appAccessMode?: WorkspaceConnectionAppAccessMode;\n  credentialRef?: WorkspaceConnectionPublicCredentialRef;\n  secretScope?: SecretRef[\"scope\"] | CredentialStorageScope;\n  backend?: WorkspaceConnectionCredentialBackend;\n}\n\nexport interface WorkspaceConnectionCredentialResolution {\n  available: boolean;\n  status: WorkspaceConnectionCredentialResolutionStatus;\n  reason: string;\n  provider: string;\n  key: string;\n  value?: string;\n  provenance: WorkspaceConnectionCredentialProvenance | null;\n  checked: WorkspaceConnectionCredentialResolutionCheck[];\n}\n\nexport interface WorkspaceConnectionCredentialsResolution {\n  available: boolean;\n  appId: string;\n  provider: string;\n  connectionId: string | null;\n  values: Record<string, string>;\n  results: Record<string, WorkspaceConnectionCredentialResolution>;\n  missingKeys: string[];\n}\n\ntype ScopedCredentialCandidate = {\n  key: string;\n  scope: SecretRef[\"scope\"] | CredentialStorageScope;\n  scopeId: string;\n};\n\ntype CredentialReadHit = {\n  value: string;\n  key: string;\n  scope: SecretRef[\"scope\"] | CredentialStorageScope;\n  backend: WorkspaceConnectionCredentialBackend;\n};\n\nconst PROVIDER_CREDENTIAL_KEY_ALIASES: Record<\n  string,\n  Record<string, string[]>\n> = {\n  hubspot: {\n    HUBSPOT_ACCESS_TOKEN: [\"HUBSPOT_PRIVATE_APP_TOKEN\"],\n    HUBSPOT_PRIVATE_APP_TOKEN: [\"HUBSPOT_ACCESS_TOKEN\"],\n  },\n};\n\nfunction normalizeRequired(value: string, label: string): string {\n  const normalized = value.trim();\n  if (!normalized) throw new Error(`${label} is required.`);\n  return normalized;\n}\n\nfunction normalizeCredentialKey(key: string): string {\n  return key.trim().toUpperCase();\n}\n\nfunction uniqueStrings(values: string[]): string[] {\n  return Array.from(\n    new Set(values.map((value) => value.trim()).filter(Boolean)),\n  );\n}\n\nfunction credentialKeyAliases(provider: string, key: string): string[] {\n  const aliases =\n    PROVIDER_CREDENTIAL_KEY_ALIASES[provider.trim().toLowerCase()]?.[\n      normalizeCredentialKey(key)\n    ] ?? [];\n  return uniqueStrings([key, ...aliases]);\n}\n\nfunction credentialKeyMatches(\n  provider: string,\n  requestedKey: string,\n  refKey: string,\n): boolean {\n  const requested = new Set(\n    credentialKeyAliases(provider, requestedKey).map(normalizeCredentialKey),\n  );\n  return requested.has(normalizeCredentialKey(refKey));\n}\n\nfunction lookupKeysForRef(\n  provider: string,\n  requestedKey: string,\n  refKey: string,\n): string[] {\n  return uniqueStrings([\n    refKey,\n    ...credentialKeyAliases(provider, refKey),\n    requestedKey,\n    ...credentialKeyAliases(provider, requestedKey),\n  ]);\n}\n\nfunction publicCredentialRef(\n  ref: WorkspaceConnectionCredentialRef,\n  source: WorkspaceConnectionPublicCredentialRef[\"source\"],\n): WorkspaceConnectionPublicCredentialRef {\n  return {\n    key: ref.key,\n    scope: ref.scope,\n    provider: ref.provider,\n    label: ref.label,\n    source,\n  };\n}\n\nfunction credentialRefsForConnection(\n  connection: WorkspaceConnectionForApp,\n): Array<{\n  ref: WorkspaceConnectionCredentialRef;\n  publicRef: WorkspaceConnectionPublicCredentialRef;\n}> {\n  return [\n    ...(connection.explicitGrant?.credentialRefs ?? []).map((ref) => ({\n      ref,\n      publicRef: publicCredentialRef(ref, \"grant\"),\n    })),\n    ...connection.credentialRefs.map((ref) => ({\n      ref,\n      publicRef: publicCredentialRef(ref, \"connection\"),\n    })),\n  ];\n}\n\nfunction refScope(\n  ref: WorkspaceConnectionCredentialRef,\n): SecretRef[\"scope\"] | undefined {\n  return ref.scope === \"user\" ||\n    ref.scope === \"org\" ||\n    ref.scope === \"workspace\"\n    ? ref.scope\n    : undefined;\n}\n\nfunction workspaceScopeId(ctx: CredentialContext): string {\n  return ctx.orgId ?? `solo:${ctx.userEmail}`;\n}\n\nfunction credentialCandidatesForRef(\n  ref: WorkspaceConnectionCredentialRef,\n  ctx: CredentialContext,\n): ScopedCredentialCandidate[] {\n  const scope = refScope(ref);\n  if (scope === \"user\") {\n    return [{ key: ref.key, scope: \"user\", scopeId: ctx.userEmail }];\n  }\n  if (scope === \"org\") {\n    return ctx.orgId\n      ? [{ key: ref.key, scope: \"org\", scopeId: ctx.orgId }]\n      : [];\n  }\n  if (scope === \"workspace\") {\n    return [\n      { key: ref.key, scope: \"workspace\", scopeId: workspaceScopeId(ctx) },\n    ];\n  }\n  if (ctx.orgId) {\n    return [\n      { key: ref.key, scope: \"org\", scopeId: ctx.orgId },\n      { key: ref.key, scope: \"workspace\", scopeId: ctx.orgId },\n      { key: ref.key, scope: \"user\", scopeId: ctx.userEmail },\n    ];\n  }\n  return [\n    { key: ref.key, scope: \"user\", scopeId: ctx.userEmail },\n    { key: ref.key, scope: \"workspace\", scopeId: workspaceScopeId(ctx) },\n  ];\n}\n\nasync function readCandidate(\n  candidate: ScopedCredentialCandidate,\n  ctx: CredentialContext,\n): Promise<CredentialReadHit | null> {\n  const secret = await readAppSecret({\n    key: candidate.key,\n    scope: candidate.scope as SecretRef[\"scope\"],\n    scopeId: candidate.scopeId,\n  });\n  if (secret?.value) {\n    return {\n      value: secret.value,\n      key: candidate.key,\n      scope: candidate.scope,\n      backend: \"secrets\",\n    };\n  }\n\n  if (candidate.scope === \"user\" || candidate.scope === \"org\") {\n    const credential = await resolveCredentialForScope(candidate.key, {\n      ...ctx,\n      scope: candidate.scope,\n    });\n    if (credential) {\n      return {\n        value: credential,\n        key: candidate.key,\n        scope: candidate.scope,\n        backend: \"credentials\",\n      };\n    }\n  }\n\n  return null;\n}\n\nasync function readFirstCredentialForRef({\n  provider,\n  requestedKey,\n  ref,\n  ctx,\n}: {\n  provider: string;\n  requestedKey: string;\n  ref: WorkspaceConnectionCredentialRef;\n  ctx: CredentialContext;\n}): Promise<CredentialReadHit | null> {\n  for (const key of lookupKeysForRef(provider, requestedKey, ref.key)) {\n    const candidates = credentialCandidatesForRef({ ...ref, key }, ctx);\n    for (const candidate of candidates) {\n      const hit = await readCandidate(candidate, ctx);\n      if (hit) return hit;\n    }\n  }\n\n  return null;\n}\n\nfunction contextFromOptions(\n  options: Pick<\n    ResolveWorkspaceConnectionCredentialForAppOptions,\n    \"userEmail\" | \"orgId\"\n  >,\n): CredentialContext | null {\n  const requestCtx = getCredentialContext();\n  const userEmail = options.userEmail?.trim() || requestCtx?.userEmail;\n  if (!userEmail) return null;\n  const orgId =\n    options.orgId === undefined\n      ? options.userEmail\n        ? null\n        : (requestCtx?.orgId ?? null)\n      : options.orgId?.trim() || null;\n  return { userEmail: userEmail.toLowerCase(), orgId };\n}\n\nfunction result(options: {\n  provider: string;\n  key: string;\n  status: WorkspaceConnectionCredentialResolutionStatus;\n  reason: string;\n  checked?: WorkspaceConnectionCredentialResolutionCheck[];\n  value?: string;\n  provenance?: WorkspaceConnectionCredentialProvenance | null;\n}): WorkspaceConnectionCredentialResolution {\n  return {\n    available: options.status === \"resolved\",\n    status: options.status,\n    reason: options.reason,\n    provider: options.provider,\n    key: options.key,\n    ...(options.value ? { value: options.value } : {}),\n    provenance: options.provenance ?? null,\n    checked: options.checked ?? [],\n  };\n}\n\nfunction unresolvedStatus(\n  checked: WorkspaceConnectionCredentialResolutionCheck[],\n): WorkspaceConnectionCredentialResolutionStatus {\n  if (checked.some((entry) => entry.status === \"error\")) return \"error\";\n  if (checked.some((entry) => entry.status === \"missing_secret\")) {\n    return \"missing_secret\";\n  }\n  if (checked.some((entry) => entry.status === \"missing_ref\")) {\n    return \"missing_ref\";\n  }\n  return \"not_available\";\n}\n\nfunction unresolvedReason(\n  checked: WorkspaceConnectionCredentialResolutionCheck[],\n  provider: string,\n  key: string,\n): string {\n  if (checked.length > 0) return checked[checked.length - 1].reason;\n  return `No connected ${provider} workspace connection could provide ${key}.`;\n}\n\nasync function resolveInRequestContext(\n  options: ResolveWorkspaceConnectionCredentialForAppOptions,\n  ctx: CredentialContext,\n): Promise<WorkspaceConnectionCredentialResolution> {\n  const appId = normalizeRequired(\n    options.appId,\n    \"resolveWorkspaceConnectionCredentialForApp appId\",\n  );\n  const provider = normalizeRequired(\n    options.provider,\n    \"resolveWorkspaceConnectionCredentialForApp provider\",\n  );\n  const key = normalizeRequired(\n    options.key,\n    \"resolveWorkspaceConnectionCredentialForApp key\",\n  );\n  const connectionId = options.connectionId?.trim();\n  const checked: WorkspaceConnectionCredentialResolutionCheck[] = [];\n\n  let connections: WorkspaceConnectionForApp[] = [];\n  if (connectionId) {\n    const resolved = await resolveWorkspaceConnectionForApp({\n      appId,\n      provider,\n      connectionId,\n      includeDisabled: true,\n      requireConnected: true,\n    });\n    if (!resolved.available || !resolved.connection) {\n      checked.push({\n        status: \"not_available\",\n        reason: resolved.reason,\n        key,\n        connectionId: resolved.connection?.id,\n        connectionLabel: resolved.connection?.label,\n        grantId: resolved.appAccess?.grantId ?? null,\n        appAccessMode: resolved.appAccess?.mode,\n      });\n      return result({\n        provider,\n        key,\n        status: \"not_available\",\n        reason: resolved.reason,\n        checked,\n      });\n    }\n    connections = [resolved.connection];\n  } else {\n    connections = (\n      await listWorkspaceConnectionsForApp({\n        appId,\n        provider,\n        includeDisabled: false,\n      })\n    ).filter((connection) => connection.status === \"connected\");\n    if (connections.length === 0) {\n      const resolved = await resolveWorkspaceConnectionForApp({\n        appId,\n        provider,\n        includeDisabled: true,\n        requireConnected: true,\n      });\n      checked.push({\n        status: \"not_available\",\n        reason: resolved.reason,\n        key,\n        connectionId: resolved.connection?.id,\n        connectionLabel: resolved.connection?.label,\n        grantId: resolved.appAccess?.grantId ?? null,\n        appAccessMode: resolved.appAccess?.mode,\n      });\n      return result({\n        provider,\n        key,\n        status: \"not_available\",\n        reason: resolved.reason,\n        checked,\n      });\n    }\n  }\n\n  for (const connection of connections) {\n    const matchingRefs = credentialRefsForConnection(connection).filter(\n      ({ ref }) => credentialKeyMatches(provider, key, ref.key),\n    );\n\n    if (matchingRefs.length === 0) {\n      checked.push({\n        status: \"missing_ref\",\n        reason: `${connection.label} is granted to ${appId} but does not reference ${key}.`,\n        key,\n        connectionId: connection.id,\n        connectionLabel: connection.label,\n        grantId: connection.appAccess.grantId,\n        appAccessMode: connection.appAccess.mode,\n      });\n      continue;\n    }\n\n    for (const { ref, publicRef } of matchingRefs) {\n      try {\n        const hit = await readFirstCredentialForRef({\n          provider,\n          requestedKey: key,\n          ref,\n          ctx,\n        });\n        if (hit) {\n          await markWorkspaceConnectionUsed({\n            connectionId: connection.id,\n            appId:\n              connection.appAccess.mode === \"explicit-grant\"\n                ? appId\n                : undefined,\n          });\n          const provenance: WorkspaceConnectionCredentialProvenance = {\n            source: \"workspace_connection\",\n            provider,\n            requestedKey: key,\n            resolvedKey: hit.key,\n            credentialRef: publicRef,\n            connectionId: connection.id,\n            connectionLabel: connection.label,\n            grantId: connection.appAccess.grantId,\n            appAccessMode: connection.appAccess.mode,\n            secretScope: hit.scope,\n            backend: hit.backend,\n          };\n          return result({\n            provider,\n            key,\n            status: \"resolved\",\n            reason: `${key} is available through ${connection.label}.`,\n            value: hit.value,\n            provenance,\n            checked,\n          });\n        }\n        checked.push({\n          status: \"missing_secret\",\n          reason: `${connection.label} references ${ref.key}, but no scoped credential value was found.`,\n          key,\n          resolvedKey: ref.key,\n          connectionId: connection.id,\n          connectionLabel: connection.label,\n          grantId: connection.appAccess.grantId,\n          appAccessMode: connection.appAccess.mode,\n          credentialRef: publicRef,\n        });\n      } catch (err) {\n        checked.push({\n          status: \"error\",\n          reason: `${connection.label} credential lookup failed: ${\n            err instanceof Error ? err.message : String(err)\n          }`,\n          key,\n          resolvedKey: ref.key,\n          connectionId: connection.id,\n          connectionLabel: connection.label,\n          grantId: connection.appAccess.grantId,\n          appAccessMode: connection.appAccess.mode,\n          credentialRef: publicRef,\n        });\n      }\n    }\n  }\n\n  const status = unresolvedStatus(checked);\n  return result({\n    provider,\n    key,\n    status,\n    reason: unresolvedReason(checked, provider, key),\n    checked,\n  });\n}\n\nexport async function resolveWorkspaceConnectionCredentialForApp(\n  options: ResolveWorkspaceConnectionCredentialForAppOptions,\n): Promise<WorkspaceConnectionCredentialResolution> {\n  const ctx = contextFromOptions(options);\n  const provider = options.provider?.trim() ?? \"\";\n  const key = options.key?.trim() ?? \"\";\n  if (!ctx) {\n    return result({\n      provider,\n      key,\n      status: \"missing_context\",\n      reason:\n        \"Workspace connection credential resolution requires an authenticated request context.\",\n    });\n  }\n\n  const existing = getRequestContext() ?? {};\n  return runWithRequestContext(\n    {\n      ...existing,\n      userEmail: ctx.userEmail,\n      orgId: ctx.orgId ?? undefined,\n    },\n    () => resolveInRequestContext(options, ctx),\n  );\n}\n\nexport async function resolveWorkspaceConnectionCredentialsForApp(\n  options: ResolveWorkspaceConnectionCredentialsForAppOptions,\n): Promise<WorkspaceConnectionCredentialsResolution> {\n  const keys = uniqueStrings(options.keys);\n  const entries = await Promise.all(\n    keys.map(\n      async (key) =>\n        [\n          key,\n          await resolveWorkspaceConnectionCredentialForApp({ ...options, key }),\n        ] as const,\n    ),\n  );\n  const results = Object.fromEntries(entries);\n  const values: Record<string, string> = {};\n  const missingKeys: string[] = [];\n  for (const [key, resolution] of entries) {\n    if (resolution.value) {\n      values[key] = resolution.value;\n    } else {\n      missingKeys.push(key);\n    }\n  }\n\n  return {\n    available: missingKeys.length === 0,\n    appId: options.appId,\n    provider: options.provider,\n    connectionId: options.connectionId?.trim() || null,\n    values,\n    results,\n    missingKeys,\n  };\n}\n"]}

package/dist/workspace-connections/index.d.ts

@@ -1,2 +1,3 @@
-export { deleteWorkspaceConnection, ensureWorkspaceConnectionsTable, getWorkspaceConnectionAppAccess, getWorkspaceConnection, getWorkspaceConnectionGrant, listWorkspaceConnectionProviderCatalogForApp, listWorkspaceConnectionGrants, listWorkspaceConnections, listWorkspaceConnectionsForApp, resolveWorkspaceConnectionForApp, revokeWorkspaceConnectionGrant, serializeWorkspaceConnectionGrant, serializeWorkspaceConnection, summarizeWorkspaceConnectionProviderForApp, summarizeWorkspaceConnectionProviderReadiness, upsertWorkspaceConnectionGrant, upsertWorkspaceConnection, type ListWorkspaceConnectionProviderCatalogForAppOptions, type ListWorkspaceConnectionGrantsOptions, type ListWorkspaceConnectionsOptions, type ListWorkspaceConnectionsForAppOptions, type ResolvedWorkspaceConnectionForApp, type ResolveWorkspaceConnectionForAppOptions, type SerializedWorkspaceConnectionGrant, type SerializedWorkspaceConnection, type SummarizeWorkspaceConnectionProviderForAppOptions, type SummarizeWorkspaceConnectionProviderReadinessOptions, type UpsertWorkspaceConnectionGrantInput, type UpsertWorkspaceConnectionInput, type WorkspaceConnectionAppAccess, type WorkspaceConnectionAppAccessMode, type WorkspaceConnection, type WorkspaceConnectionCredentialRef, type WorkspaceConnectionExplicitGrantSummary, type WorkspaceConnectionForApp, type WorkspaceConnectionForAppSummary, type WorkspaceConnectionGrant, type WorkspaceConnectionGrantAvailability, type WorkspaceConnectionGrantState, type WorkspaceConnectionProviderAppSummary, type WorkspaceConnectionProviderLike, type WorkspaceConnectionProviderCatalogForApp, type WorkspaceConnectionProviderCatalogForAppItem, type WorkspaceConnectionProviderReadiness, type WorkspaceConnectionProviderReadinessStatus, type WorkspaceConnectionPublicCredentialRef, type WorkspaceConnectionStatus, workspaceConnectionIsAvailableToApp, } from "./store.js";
+export { deleteWorkspaceConnection, ensureWorkspaceConnectionsTable, getWorkspaceConnectionAppAccess, getWorkspaceConnection, getWorkspaceConnectionGrant, listWorkspaceConnectionProviderCatalogForApp, listWorkspaceConnectionGrants, listWorkspaceConnections, listWorkspaceConnectionsForApp, markWorkspaceConnectionUsed, resolveWorkspaceConnectionForApp, revokeWorkspaceConnectionGrant, serializeWorkspaceConnectionGrant, serializeWorkspaceConnection, summarizeWorkspaceConnectionProviderForApp, summarizeWorkspaceConnectionProviderReadiness, upsertWorkspaceConnectionGrant, upsertWorkspaceConnection, type ListWorkspaceConnectionProviderCatalogForAppOptions, type ListWorkspaceConnectionGrantsOptions, type ListWorkspaceConnectionsOptions, type ListWorkspaceConnectionsForAppOptions, type MarkWorkspaceConnectionUsedOptions, type MarkWorkspaceConnectionUsedResult, type ResolvedWorkspaceConnectionForApp, type ResolveWorkspaceConnectionForAppOptions, type SerializedWorkspaceConnectionGrant, type SerializedWorkspaceConnection, type SummarizeWorkspaceConnectionProviderForAppOptions, type SummarizeWorkspaceConnectionProviderReadinessOptions, type UpsertWorkspaceConnectionGrantInput, type UpsertWorkspaceConnectionInput, type WorkspaceConnectionAppAccess, type WorkspaceConnectionAppAccessMode, type WorkspaceConnection, type WorkspaceConnectionCredentialRef, type WorkspaceConnectionExplicitGrantSummary, type WorkspaceConnectionForApp, type WorkspaceConnectionForAppSummary, type WorkspaceConnectionGrant, type WorkspaceConnectionGrantAvailability, type WorkspaceConnectionGrantState, type WorkspaceConnectionProviderAppSummary, type WorkspaceConnectionProviderLike, type WorkspaceConnectionProviderCatalogForApp, type WorkspaceConnectionProviderCatalogForAppItem, type WorkspaceConnectionProviderReadiness, type WorkspaceConnectionProviderReadinessStatus, type WorkspaceConnectionPublicCredentialRef, type WorkspaceConnectionStatus, workspaceConnectionIsAvailableToApp, } from "./store.js";
+export { resolveWorkspaceConnectionCredentialForApp, resolveWorkspaceConnectionCredentialsForApp, type ResolveWorkspaceConnectionCredentialForAppOptions, type ResolveWorkspaceConnectionCredentialsForAppOptions, type WorkspaceConnectionCredentialBackend, type WorkspaceConnectionCredentialProvenance, type WorkspaceConnectionCredentialResolution, type WorkspaceConnectionCredentialResolutionCheck, type WorkspaceConnectionCredentialResolutionStatus, type WorkspaceConnectionCredentialsResolution, } from "./credentials.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/workspace-connections/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/workspace-connections/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,+BAA+B,EAC/B,+BAA+B,EAC/B,sBAAsB,EACtB,2BAA2B,EAC3B,4CAA4C,EAC5C,6BAA6B,EAC7B,wBAAwB,EACxB,8BAA8B,EAC9B,gCAAgC,EAChC,8BAA8B,EAC9B,iCAAiC,EACjC,4BAA4B,EAC5B,0CAA0C,EAC1C,6CAA6C,EAC7C,8BAA8B,EAC9B,yBAAyB,EACzB,KAAK,mDAAmD,EACxD,KAAK,oCAAoC,EACzC,KAAK,+BAA+B,EACpC,KAAK,qCAAqC,EAC1C,KAAK,iCAAiC,EACtC,KAAK,uCAAuC,EAC5C,KAAK,kCAAkC,EACvC,KAAK,6BAA6B,EAClC,KAAK,iDAAiD,EACtD,KAAK,oDAAoD,EACzD,KAAK,mCAAmC,EACxC,KAAK,8BAA8B,EACnC,KAAK,4BAA4B,EACjC,KAAK,gCAAgC,EACrC,KAAK,mBAAmB,EACxB,KAAK,gCAAgC,EACrC,KAAK,uCAAuC,EAC5C,KAAK,yBAAyB,EAC9B,KAAK,gCAAgC,EACrC,KAAK,wBAAwB,EAC7B,KAAK,oCAAoC,EACzC,KAAK,6BAA6B,EAClC,KAAK,qCAAqC,EAC1C,KAAK,+BAA+B,EACpC,KAAK,wCAAwC,EAC7C,KAAK,4CAA4C,EACjD,KAAK,oCAAoC,EACzC,KAAK,0CAA0C,EAC/C,KAAK,sCAAsC,EAC3C,KAAK,yBAAyB,EAC9B,mCAAmC,GACpC,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/workspace-connections/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,+BAA+B,EAC/B,+BAA+B,EAC/B,sBAAsB,EACtB,2BAA2B,EAC3B,4CAA4C,EAC5C,6BAA6B,EAC7B,wBAAwB,EACxB,8BAA8B,EAC9B,2BAA2B,EAC3B,gCAAgC,EAChC,8BAA8B,EAC9B,iCAAiC,EACjC,4BAA4B,EAC5B,0CAA0C,EAC1C,6CAA6C,EAC7C,8BAA8B,EAC9B,yBAAyB,EACzB,KAAK,mDAAmD,EACxD,KAAK,oCAAoC,EACzC,KAAK,+BAA+B,EACpC,KAAK,qCAAqC,EAC1C,KAAK,kCAAkC,EACvC,KAAK,iCAAiC,EACtC,KAAK,iCAAiC,EACtC,KAAK,uCAAuC,EAC5C,KAAK,kCAAkC,EACvC,KAAK,6BAA6B,EAClC,KAAK,iDAAiD,EACtD,KAAK,oDAAoD,EACzD,KAAK,mCAAmC,EACxC,KAAK,8BAA8B,EACnC,KAAK,4BAA4B,EACjC,KAAK,gCAAgC,EACrC,KAAK,mBAAmB,EACxB,KAAK,gCAAgC,EACrC,KAAK,uCAAuC,EAC5C,KAAK,yBAAyB,EAC9B,KAAK,gCAAgC,EACrC,KAAK,wBAAwB,EAC7B,KAAK,oCAAoC,EACzC,KAAK,6BAA6B,EAClC,KAAK,qCAAqC,EAC1C,KAAK,+BAA+B,EACpC,KAAK,wCAAwC,EAC7C,KAAK,4CAA4C,EACjD,KAAK,oCAAoC,EACzC,KAAK,0CAA0C,EAC/C,KAAK,sCAAsC,EAC3C,KAAK,yBAAyB,EAC9B,mCAAmC,GACpC,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,0CAA0C,EAC1C,2CAA2C,EAC3C,KAAK,iDAAiD,EACtD,KAAK,kDAAkD,EACvD,KAAK,oCAAoC,EACzC,KAAK,uCAAuC,EAC5C,KAAK,uCAAuC,EAC5C,KAAK,4CAA4C,EACjD,KAAK,6CAA6C,EAClD,KAAK,wCAAwC,GAC9C,MAAM,kBAAkB,CAAC"}

package/dist/workspace-connections/index.js

@@ -1,2 +1,3 @@
-export { deleteWorkspaceConnection, ensureWorkspaceConnectionsTable, getWorkspaceConnectionAppAccess, getWorkspaceConnection, getWorkspaceConnectionGrant, listWorkspaceConnectionProviderCatalogForApp, listWorkspaceConnectionGrants, listWorkspaceConnections, listWorkspaceConnectionsForApp, resolveWorkspaceConnectionForApp, revokeWorkspaceConnectionGrant, serializeWorkspaceConnectionGrant, serializeWorkspaceConnection, summarizeWorkspaceConnectionProviderForApp, summarizeWorkspaceConnectionProviderReadiness, upsertWorkspaceConnectionGrant, upsertWorkspaceConnection, workspaceConnectionIsAvailableToApp, } from "./store.js";
+export { deleteWorkspaceConnection, ensureWorkspaceConnectionsTable, getWorkspaceConnectionAppAccess, getWorkspaceConnection, getWorkspaceConnectionGrant, listWorkspaceConnectionProviderCatalogForApp, listWorkspaceConnectionGrants, listWorkspaceConnections, listWorkspaceConnectionsForApp, markWorkspaceConnectionUsed, resolveWorkspaceConnectionForApp, revokeWorkspaceConnectionGrant, serializeWorkspaceConnectionGrant, serializeWorkspaceConnection, summarizeWorkspaceConnectionProviderForApp, summarizeWorkspaceConnectionProviderReadiness, upsertWorkspaceConnectionGrant, upsertWorkspaceConnection, workspaceConnectionIsAvailableToApp, } from "./store.js";
+export { resolveWorkspaceConnectionCredentialForApp, resolveWorkspaceConnectionCredentialsForApp, } from "./credentials.js";
 //# sourceMappingURL=index.js.map

package/dist/workspace-connections/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/workspace-connections/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,+BAA+B,EAC/B,+BAA+B,EAC/B,sBAAsB,EACtB,2BAA2B,EAC3B,4CAA4C,EAC5C,6BAA6B,EAC7B,wBAAwB,EACxB,8BAA8B,EAC9B,gCAAgC,EAChC,8BAA8B,EAC9B,iCAAiC,EACjC,4BAA4B,EAC5B,0CAA0C,EAC1C,6CAA6C,EAC7C,8BAA8B,EAC9B,yBAAyB,EA+BzB,mCAAmC,GACpC,MAAM,YAAY,CAAC","sourcesContent":["export {\n  deleteWorkspaceConnection,\n  ensureWorkspaceConnectionsTable,\n  getWorkspaceConnectionAppAccess,\n  getWorkspaceConnection,\n  getWorkspaceConnectionGrant,\n  listWorkspaceConnectionProviderCatalogForApp,\n  listWorkspaceConnectionGrants,\n  listWorkspaceConnections,\n  listWorkspaceConnectionsForApp,\n  resolveWorkspaceConnectionForApp,\n  revokeWorkspaceConnectionGrant,\n  serializeWorkspaceConnectionGrant,\n  serializeWorkspaceConnection,\n  summarizeWorkspaceConnectionProviderForApp,\n  summarizeWorkspaceConnectionProviderReadiness,\n  upsertWorkspaceConnectionGrant,\n  upsertWorkspaceConnection,\n  type ListWorkspaceConnectionProviderCatalogForAppOptions,\n  type ListWorkspaceConnectionGrantsOptions,\n  type ListWorkspaceConnectionsOptions,\n  type ListWorkspaceConnectionsForAppOptions,\n  type ResolvedWorkspaceConnectionForApp,\n  type ResolveWorkspaceConnectionForAppOptions,\n  type SerializedWorkspaceConnectionGrant,\n  type SerializedWorkspaceConnection,\n  type SummarizeWorkspaceConnectionProviderForAppOptions,\n  type SummarizeWorkspaceConnectionProviderReadinessOptions,\n  type UpsertWorkspaceConnectionGrantInput,\n  type UpsertWorkspaceConnectionInput,\n  type WorkspaceConnectionAppAccess,\n  type WorkspaceConnectionAppAccessMode,\n  type WorkspaceConnection,\n  type WorkspaceConnectionCredentialRef,\n  type WorkspaceConnectionExplicitGrantSummary,\n  type WorkspaceConnectionForApp,\n  type WorkspaceConnectionForAppSummary,\n  type WorkspaceConnectionGrant,\n  type WorkspaceConnectionGrantAvailability,\n  type WorkspaceConnectionGrantState,\n  type WorkspaceConnectionProviderAppSummary,\n  type WorkspaceConnectionProviderLike,\n  type WorkspaceConnectionProviderCatalogForApp,\n  type WorkspaceConnectionProviderCatalogForAppItem,\n  type WorkspaceConnectionProviderReadiness,\n  type WorkspaceConnectionProviderReadinessStatus,\n  type WorkspaceConnectionPublicCredentialRef,\n  type WorkspaceConnectionStatus,\n  workspaceConnectionIsAvailableToApp,\n} from \"./store.js\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/workspace-connections/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,+BAA+B,EAC/B,+BAA+B,EAC/B,sBAAsB,EACtB,2BAA2B,EAC3B,4CAA4C,EAC5C,6BAA6B,EAC7B,wBAAwB,EACxB,8BAA8B,EAC9B,2BAA2B,EAC3B,gCAAgC,EAChC,8BAA8B,EAC9B,iCAAiC,EACjC,4BAA4B,EAC5B,0CAA0C,EAC1C,6CAA6C,EAC7C,8BAA8B,EAC9B,yBAAyB,EAiCzB,mCAAmC,GACpC,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,0CAA0C,EAC1C,2CAA2C,GAS5C,MAAM,kBAAkB,CAAC","sourcesContent":["export {\n  deleteWorkspaceConnection,\n  ensureWorkspaceConnectionsTable,\n  getWorkspaceConnectionAppAccess,\n  getWorkspaceConnection,\n  getWorkspaceConnectionGrant,\n  listWorkspaceConnectionProviderCatalogForApp,\n  listWorkspaceConnectionGrants,\n  listWorkspaceConnections,\n  listWorkspaceConnectionsForApp,\n  markWorkspaceConnectionUsed,\n  resolveWorkspaceConnectionForApp,\n  revokeWorkspaceConnectionGrant,\n  serializeWorkspaceConnectionGrant,\n  serializeWorkspaceConnection,\n  summarizeWorkspaceConnectionProviderForApp,\n  summarizeWorkspaceConnectionProviderReadiness,\n  upsertWorkspaceConnectionGrant,\n  upsertWorkspaceConnection,\n  type ListWorkspaceConnectionProviderCatalogForAppOptions,\n  type ListWorkspaceConnectionGrantsOptions,\n  type ListWorkspaceConnectionsOptions,\n  type ListWorkspaceConnectionsForAppOptions,\n  type MarkWorkspaceConnectionUsedOptions,\n  type MarkWorkspaceConnectionUsedResult,\n  type ResolvedWorkspaceConnectionForApp,\n  type ResolveWorkspaceConnectionForAppOptions,\n  type SerializedWorkspaceConnectionGrant,\n  type SerializedWorkspaceConnection,\n  type SummarizeWorkspaceConnectionProviderForAppOptions,\n  type SummarizeWorkspaceConnectionProviderReadinessOptions,\n  type UpsertWorkspaceConnectionGrantInput,\n  type UpsertWorkspaceConnectionInput,\n  type WorkspaceConnectionAppAccess,\n  type WorkspaceConnectionAppAccessMode,\n  type WorkspaceConnection,\n  type WorkspaceConnectionCredentialRef,\n  type WorkspaceConnectionExplicitGrantSummary,\n  type WorkspaceConnectionForApp,\n  type WorkspaceConnectionForAppSummary,\n  type WorkspaceConnectionGrant,\n  type WorkspaceConnectionGrantAvailability,\n  type WorkspaceConnectionGrantState,\n  type WorkspaceConnectionProviderAppSummary,\n  type WorkspaceConnectionProviderLike,\n  type WorkspaceConnectionProviderCatalogForApp,\n  type WorkspaceConnectionProviderCatalogForAppItem,\n  type WorkspaceConnectionProviderReadiness,\n  type WorkspaceConnectionProviderReadinessStatus,\n  type WorkspaceConnectionPublicCredentialRef,\n  type WorkspaceConnectionStatus,\n  workspaceConnectionIsAvailableToApp,\n} from \"./store.js\";\n\nexport {\n  resolveWorkspaceConnectionCredentialForApp,\n  resolveWorkspaceConnectionCredentialsForApp,\n  type ResolveWorkspaceConnectionCredentialForAppOptions,\n  type ResolveWorkspaceConnectionCredentialsForAppOptions,\n  type WorkspaceConnectionCredentialBackend,\n  type WorkspaceConnectionCredentialProvenance,\n  type WorkspaceConnectionCredentialResolution,\n  type WorkspaceConnectionCredentialResolutionCheck,\n  type WorkspaceConnectionCredentialResolutionStatus,\n  type WorkspaceConnectionCredentialsResolution,\n} from \"./credentials.js\";\n"]}