@ankhorage/studio 0.2.0 → 0.4.0

package/dist/host/auth/projectAuthService.js

@@ -0,0 +1,63 @@
+import { applyStudioAuthSettings, readStudioAuthSettings, validateStudioAuthSettings, } from '../../authSettings';
+export class ProjectAuthService {
+    projectManager;
+    constructor(projectManager) {
+        this.projectManager = projectManager;
+    }
+    async get(projectId) {
+        try {
+            const manifest = await this.readEditableManifest(projectId);
+            return { ok: true, state: 'loaded', data: readStudioAuthSettings(manifest) };
+        }
+        catch {
+            return {
+                ok: false,
+                error: {
+                    code: 'manifest_read_failed',
+                    message: 'The project authentication configuration could not be loaded.',
+                },
+            };
+        }
+    }
+    async configure(projectId, value) {
+        const parsed = validateStudioAuthSettings(value);
+        if (!parsed.ok)
+            return parsed;
+        let manifest;
+        try {
+            manifest = await this.readEditableManifest(projectId);
+        }
+        catch {
+            return {
+                ok: false,
+                error: {
+                    code: 'manifest_read_failed',
+                    message: 'The project authentication configuration could not be loaded.',
+                },
+            };
+        }
+        const nextManifest = applyStudioAuthSettings(manifest, parsed.data);
+        try {
+            await this.projectManager.saveStudioManifest({ projectId, manifest: nextManifest });
+        }
+        catch {
+            return {
+                ok: false,
+                error: {
+                    code: 'manifest_write_failed',
+                    message: 'The canonical authentication configuration could not be saved.',
+                },
+            };
+        }
+        return { ok: true, state: 'saved', data: readStudioAuthSettings(nextManifest) };
+    }
+    async readEditableManifest(projectId) {
+        try {
+            return await this.projectManager.getStudioManifest(projectId);
+        }
+        catch {
+            return this.projectManager.getProjectManifest(projectId);
+        }
+    }
+}
+//# sourceMappingURL=projectAuthService.js.map

package/dist/host/auth/projectAuthService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectAuthService.js","sourceRoot":"","sources":["../../../src/host/auth/projectAuthService.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EAEtB,0BAA0B,GAC3B,MAAM,oBAAoB,CAAC;AAsB5B,MAAM,OAAO,kBAAkB;IACA;IAA7B,YAA6B,cAAkC;QAAlC,mBAAc,GAAd,cAAc,CAAoB;IAAG,CAAC;IAEnE,KAAK,CAAC,GAAG,CAAC,SAAiB;QACzB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;YAC5D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,IAAI,EAAE,sBAAsB;oBAC5B,OAAO,EAAE,+DAA+D;iBACzE;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,SAAiB,EAAE,KAAc;QAC/C,MAAM,MAAM,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAE9B,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,IAAI,EAAE,sBAAsB;oBAC5B,OAAO,EAAE,+DAA+D;iBACzE;aACF,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,uBAAuB,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACpE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;QACtF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,IAAI,EAAE,uBAAuB;oBAC7B,OAAO,EAAE,gEAAgE;iBAC1E;aACF,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,sBAAsB,CAAC,YAAY,CAAC,EAAE,CAAC;IAClF,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,SAAiB;QAClD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,cAAc,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;CACF"}

package/dist/host/http/authRoutes.d.ts

@@ -0,0 +1,6 @@
+import type { FastifyInstance } from 'fastify';
+import type { ProjectManager } from '../orchestrator/projectManager';
+export declare function registerProjectAuthRoutes(fastify: FastifyInstance, options: {
+    readonly projectManager: ProjectManager;
+}): void;
+//# sourceMappingURL=authRoutes.d.ts.map

package/dist/host/http/authRoutes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authRoutes.d.ts","sourceRoot":"","sources":["../../../src/host/http/authRoutes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAgC,MAAM,SAAS,CAAC;AAG7E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAErE,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE;IAAE,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAA;CAAE,GACnD,IAAI,CAuBN"}

package/dist/host/http/authRoutes.js

@@ -0,0 +1,34 @@
+import { ProjectAuthService } from '../auth/projectAuthService';
+export function registerProjectAuthRoutes(fastify, options) {
+    const service = new ProjectAuthService(options.projectManager);
+    fastify.get('/api/projects/:id/auth/config', async (request, reply) => {
+        const { id } = request.params;
+        return sendProjectAuthResult(reply, await service.get(id));
+    });
+    fastify.put('/api/projects/:id/auth/config', async (request, reply) => {
+        const { id } = request.params;
+        const body = asRecord(request.body);
+        if (!body || !Object.hasOwn(body, 'config')) {
+            return reply.status(400).send({
+                ok: false,
+                error: {
+                    code: 'invalid_config',
+                    message: 'Auth configuration request requires a config object.',
+                },
+            });
+        }
+        return sendProjectAuthResult(reply, await service.configure(id, body.config));
+    });
+}
+function sendProjectAuthResult(reply, result) {
+    if (result.ok)
+        return result;
+    const status = result.error.code === 'invalid_config' ? 400 : 500;
+    return reply.status(status).send(result);
+}
+function asRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value)
+        ? value
+        : null;
+}
+//# sourceMappingURL=authRoutes.js.map

package/dist/host/http/authRoutes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authRoutes.js","sourceRoot":"","sources":["../../../src/host/http/authRoutes.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAkC,MAAM,4BAA4B,CAAC;AAGhG,MAAM,UAAU,yBAAyB,CACvC,OAAwB,EACxB,OAAoD;IAEpD,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAE/D,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,KAAK,EAAE,OAAuB,EAAE,KAAK,EAAE,EAAE;QACpF,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAwB,CAAC;QAChD,OAAO,qBAAqB,CAAC,KAAK,EAAE,MAAM,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,KAAK,EAAE,OAAuB,EAAE,KAAK,EAAE,EAAE;QACpF,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAwB,CAAC;QAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC5C,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC5B,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,sDAAsD;iBAChE;aACF,CAAC,CAAC;QACL,CAAC;QAED,OAAO,qBAAqB,CAAC,KAAK,EAAE,MAAM,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAmB,EAAE,MAAiC;IACnF,IAAI,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAE7B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAClE,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,IAAI,CAAC;AACX,CAAC"}

package/dist/host/http/serverWithSecrets.d.ts

@@ -0,0 +1,6 @@
+import { type StartStudioHostServerOptions } from './server';
+/**
+ * Starts the Studio host with the Phase 2 auth and metadata-only secret bridges registered.
+ */
+export declare function startStudioHostServerWithSecrets(options?: number | StartStudioHostServerOptions): Promise<import("fastify").FastifyInstance<import("fastify").RawServerDefault, import("node:http").IncomingMessage, import("node:http").ServerResponse<import("node:http").IncomingMessage>, import("fastify").FastifyBaseLogger, import("fastify").FastifyTypeProviderDefault>>;
+//# sourceMappingURL=serverWithSecrets.d.ts.map

package/dist/host/http/serverWithSecrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serverWithSecrets.d.ts","sourceRoot":"","sources":["../../../src/host/http/serverWithSecrets.ts"],"names":[],"mappings":"AAKA,OAAO,EAA0B,KAAK,4BAA4B,EAAE,MAAM,UAAU,CAAC;AAErF;;GAEG;AACH,wBAAsB,gCAAgC,CACpD,OAAO,GAAE,MAAM,GAAG,4BAAiC,mRAmBpD"}

package/dist/host/http/serverWithSecrets.js

@@ -0,0 +1,27 @@
+import { ModuleManager } from '../orchestrator/moduleManager';
+import { ProjectManager } from '../orchestrator/projectManager';
+import { resolveWorkspaceRoot } from '../utils/workspaceRoot';
+import { registerProjectAuthRoutes } from './authRoutes';
+import { registerProjectSecretRoutes } from './secretRoutes';
+import { createStudioHostServer } from './server';
+/**
+ * Starts the Studio host with the Phase 2 auth and metadata-only secret bridges registered.
+ */
+export async function startStudioHostServerWithSecrets(options = {}) {
+    const resolvedOptions = typeof options === 'number' ? { port: options } : options;
+    const projectRoot = resolvedOptions.projectRoot ?? resolveWorkspaceRoot(import.meta.dirname);
+    const orchestrator = new ModuleManager(projectRoot);
+    const projectManager = new ProjectManager(projectRoot);
+    const fastify = await createStudioHostServer({ projectManager, orchestrator, projectRoot });
+    registerProjectAuthRoutes(fastify, { projectManager });
+    registerProjectSecretRoutes(fastify, {
+        projectManager,
+        workspaceRoot: projectRoot,
+    });
+    const port = resolvedOptions.port ?? 3000;
+    const host = resolvedOptions.host ?? '127.0.0.1';
+    await fastify.listen({ port, host });
+    console.log(`Ankhorage Studio Host running at http://${host}:${port}`);
+    return fastify;
+}
+//# sourceMappingURL=serverWithSecrets.js.map

package/dist/host/http/serverWithSecrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serverWithSecrets.js","sourceRoot":"","sources":["../../../src/host/http/serverWithSecrets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAqC,MAAM,UAAU,CAAC;AAErF;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,UAAiD,EAAE;IAEnD,MAAM,eAAe,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IAClF,MAAM,WAAW,GAAG,eAAe,CAAC,WAAW,IAAI,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7F,MAAM,YAAY,GAAG,IAAI,aAAa,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,cAAc,GAAG,IAAI,cAAc,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;IAE5F,yBAAyB,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;IACvD,2BAA2B,CAAC,OAAO,EAAE;QACnC,cAAc;QACd,aAAa,EAAE,WAAW;KAC3B,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,IAAI,IAAI,CAAC;IAC1C,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,IAAI,WAAW,CAAC;IACjD,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,2CAA2C,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;IACvE,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/host/index.d.ts

@@ -1,7 +1,10 @@
+export { ProjectAuthService, type ProjectAuthSettingsResult } from './auth/projectAuthService';
 export { createStudioHost, type CreateStudioHostOptions, type StudioHost, } from './createStudioHost';
+export { registerProjectAuthRoutes } from './http/authRoutes';
 export { registerProjectSecretRoutes } from './http/secretRoutes';
 export { isOriginAllowed } from './http/security';
 export { createStudioHostServer, startStudioHostServer, type StartStudioHostServerOptions, } from './http/server';
+export { startStudioHostServerWithSecrets } from './http/serverWithSecrets';
 export { ModuleManager } from './orchestrator/moduleManager';
 export { ProjectManager } from './orchestrator/projectManager';
 export { assertProjectId, getAppsRoot, getProjectPath } from './orchestrator/projectPaths';

package/dist/host/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/host/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,KAAK,uBAAuB,EAC5B,KAAK,UAAU,GAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,KAAK,4BAA4B,GAClC,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAE,KAAK,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAChF,OAAO,EACL,KAAK,sBAAsB,EAC3B,4BAA4B,GAC7B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,8BAA8B,EAC9B,KAAK,2BAA2B,EAChC,KAAK,4BAA4B,EACjC,oBAAoB,EACpB,KAAK,2BAA2B,GACjC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,+BAA+B,EAAE,MAAM,2CAA2C,CAAC;AAC5F,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/host/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,KAAK,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAC/F,OAAO,EACL,gBAAgB,EAChB,KAAK,uBAAuB,EAC5B,KAAK,UAAU,GAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,KAAK,4BAA4B,GAClC,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,gCAAgC,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAE,KAAK,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAChF,OAAO,EACL,KAAK,sBAAsB,EAC3B,4BAA4B,GAC7B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,8BAA8B,EAC9B,KAAK,2BAA2B,EAChC,KAAK,4BAA4B,EACjC,oBAAoB,EACpB,KAAK,2BAA2B,GACjC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,+BAA+B,EAAE,MAAM,2CAA2C,CAAC;AAC5F,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/host/index.js

@@ -1,7 +1,10 @@
+export { ProjectAuthService } from './auth/projectAuthService';
 export { createStudioHost, } from './createStudioHost';
+export { registerProjectAuthRoutes } from './http/authRoutes';
 export { registerProjectSecretRoutes } from './http/secretRoutes';
 export { isOriginAllowed } from './http/security';
 export { createStudioHostServer, startStudioHostServer, } from './http/server';
+export { startStudioHostServerWithSecrets } from './http/serverWithSecrets';
 export { ModuleManager } from './orchestrator/moduleManager';
 export { ProjectManager } from './orchestrator/projectManager';
 export { assertProjectId, getAppsRoot, getProjectPath } from './orchestrator/projectPaths';

package/dist/host/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/host/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,GAGjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EACL,sBAAsB,EACtB,qBAAqB,GAEtB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAuB,MAAM,6BAA6B,CAAC;AAChF,OAAO,EAEL,4BAA4B,GAC7B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,8BAA8B,EAG9B,oBAAoB,GAErB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,+BAA+B,EAAE,MAAM,2CAA2C,CAAC;AAC5F,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/host/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAkC,MAAM,2BAA2B,CAAC;AAC/F,OAAO,EACL,gBAAgB,GAGjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EACL,sBAAsB,EACtB,qBAAqB,GAEtB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,gCAAgC,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAuB,MAAM,6BAA6B,CAAC;AAChF,OAAO,EAEL,4BAA4B,GAC7B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,8BAA8B,EAG9B,oBAAoB,GAErB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,+BAA+B,EAAE,MAAM,2CAA2C,CAAC;AAC5F,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/projectAuthApi.d.ts

@@ -0,0 +1,17 @@
+import type { StudioAuthSettings } from './authSettings';
+export declare class ProjectAuthApiError extends Error {
+    readonly code: string;
+    readonly status: number;
+    constructor(args: {
+        readonly code: string;
+        readonly message: string;
+        readonly status: number;
+    });
+}
+export declare function getProjectAuthSettings(projectId: string): Promise<StudioAuthSettings | null>;
+export declare function saveProjectAuthSettings(input: {
+    readonly projectId: string;
+    readonly config: StudioAuthSettings;
+}): Promise<StudioAuthSettings>;
+export declare function parseProjectAuthSettingsResponse(value: unknown, expectedState: 'loaded' | 'saved'): StudioAuthSettings | null;
+//# sourceMappingURL=projectAuthApi.d.ts.map

package/dist/projectAuthApi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectAuthApi.d.ts","sourceRoot":"","sources":["../src/projectAuthApi.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAGzD,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,IAAI,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE;CAM/F;AAED,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAGpC;AAED,wBAAsB,uBAAuB,CAAC,KAAK,EAAE;IACnD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;CACrC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAe9B;AAED,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,OAAO,EACd,aAAa,EAAE,QAAQ,GAAG,OAAO,GAChC,kBAAkB,GAAG,IAAI,CAU3B"}

package/dist/projectAuthApi.js

@@ -0,0 +1,83 @@
+import { validateStudioAuthSettings } from './authSettings';
+export class ProjectAuthApiError extends Error {
+    code;
+    status;
+    constructor(args) {
+        super(args.message);
+        this.name = 'ProjectAuthApiError';
+        this.code = args.code;
+        this.status = args.status;
+    }
+}
+export async function getProjectAuthSettings(projectId) {
+    const value = await requestJson(`/projects/${encodeURIComponent(projectId)}/auth/config`);
+    return parseProjectAuthSettingsResponse(value, 'loaded');
+}
+export async function saveProjectAuthSettings(input) {
+    const value = await requestJson(`/projects/${encodeURIComponent(input.projectId)}/auth/config`, {
+        method: 'PUT',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ config: input.config }),
+    });
+    const result = parseProjectAuthSettingsResponse(value, 'saved');
+    if (!result) {
+        throw new ProjectAuthApiError({
+            code: 'invalid_response',
+            message: 'Saved auth configuration response did not contain configuration data.',
+            status: 502,
+        });
+    }
+    return result;
+}
+export function parseProjectAuthSettingsResponse(value, expectedState) {
+    const record = asRecord(value);
+    if (record?.ok !== true || record.state !== expectedState) {
+        throw invalidResponse('Project auth response was invalid.');
+    }
+    if (record.data === null && expectedState === 'loaded')
+        return null;
+    const parsed = validateStudioAuthSettings(record.data);
+    if (!parsed.ok)
+        throw invalidResponse(parsed.error.message);
+    return parsed.data;
+}
+async function requestJson(path, init) {
+    const { API_BASE } = await import('./core/constants');
+    const response = await fetch(`${API_BASE}${path}`, init);
+    const value = await readJson(response);
+    if (!response.ok)
+        throw parseHttpError(value, response.status);
+    return value;
+}
+async function readJson(response) {
+    try {
+        return await response.json();
+    }
+    catch {
+        throw new ProjectAuthApiError({
+            code: 'invalid_response',
+            message: 'The Studio host returned a non-JSON auth response.',
+            status: response.status,
+        });
+    }
+}
+function parseHttpError(value, status) {
+    const record = asRecord(value);
+    const error = asRecord(record?.error);
+    return new ProjectAuthApiError({
+        code: typeof error?.code === 'string' ? error.code : 'request_failed',
+        message: typeof error?.message === 'string'
+            ? error.message
+            : 'The Studio authentication configuration request failed.',
+        status,
+    });
+}
+function invalidResponse(message) {
+    return new ProjectAuthApiError({ code: 'invalid_response', message, status: 502 });
+}
+function asRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value)
+        ? value
+        : null;
+}
+//# sourceMappingURL=projectAuthApi.js.map

package/dist/projectAuthApi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectAuthApi.js","sourceRoot":"","sources":["../src/projectAuthApi.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAE5D,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,IAAI,CAAS;IACb,MAAM,CAAS;IAExB,YAAY,IAAkF;QAC5F,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,SAAiB;IAEjB,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,aAAa,kBAAkB,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IAC1F,OAAO,gCAAgC,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAG7C;IACC,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,aAAa,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,cAAc,EAAE;QAC9F,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;KAC/C,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,gCAAgC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,mBAAmB,CAAC;YAC5B,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,uEAAuE;YAChF,MAAM,EAAE,GAAG;SACZ,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,KAAc,EACd,aAAiC;IAEjC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,MAAM,EAAE,EAAE,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;QAC1D,MAAM,eAAe,CAAC,oCAAoC,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,aAAa,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEpE,MAAM,MAAM,GAAG,0BAA0B,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,IAAkB;IACzD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAkB;IACxC,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAAC;YAC5B,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,oDAAoD;YAC7D,MAAM,EAAE,QAAQ,CAAC,MAAM;SACxB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,MAAc;IACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtC,OAAO,IAAI,mBAAmB,CAAC;QAC7B,IAAI,EAAE,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB;QACrE,OAAO,EACL,OAAO,KAAK,EAAE,OAAO,KAAK,QAAQ;YAChC,CAAC,CAAC,KAAK,CAAC,OAAO;YACf,CAAC,CAAC,yDAAyD;QAC/D,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,OAAO,IAAI,mBAAmB,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,IAAI,CAAC;AACX,CAAC"}

package/dist/projectSecretApi.d.ts

@@ -0,0 +1,70 @@
+import type { AuthOAuthProviderId } from '@ankhorage/contracts';
+import type { SecretMetadata, SecretPayload } from '@ankhorage/contracts/secrets';
+export interface ProjectSecretCreateInput {
+    readonly projectId: string;
+    readonly environment?: string;
+    readonly ref: string;
+    readonly kind: string;
+    readonly provider?: string;
+    readonly payload: SecretPayload;
+}
+export interface ProjectSecretReplaceInput {
+    readonly projectId: string;
+    readonly environment?: string;
+    readonly ref: string;
+    readonly payload: SecretPayload;
+}
+export interface ProjectSecretRemoveInput {
+    readonly projectId: string;
+    readonly environment?: string;
+    readonly ref: string;
+}
+export interface ConfigureProjectOAuthProviderInput {
+    readonly projectId: string;
+    readonly providerId: AuthOAuthProviderId;
+    readonly environment?: string;
+    readonly credentialsRef?: string;
+    readonly enabled?: boolean;
+    readonly label?: string;
+    readonly scopes?: readonly string[];
+    readonly callbackRoute?: string;
+    readonly payload: SecretPayload;
+}
+export type ConfigureProjectOAuthProviderResponse = {
+    readonly ok: true;
+    readonly state: 'saved';
+    readonly metadata: SecretMetadata;
+    readonly credentialsRef: string;
+} | {
+    readonly ok: false;
+    readonly state: 'secret_write_failed' | 'secret_saved_manifest_failed';
+    readonly error: {
+        readonly code: string;
+        readonly message: string;
+    };
+    readonly metadata?: SecretMetadata;
+    readonly credentialsRef?: string;
+};
+export declare class ProjectSecretApiError extends Error {
+    readonly code: string;
+    readonly status: number;
+    constructor(args: {
+        readonly code: string;
+        readonly message: string;
+        readonly status: number;
+    });
+}
+export declare function listProjectSecrets(input: {
+    readonly projectId: string;
+    readonly environment?: string;
+    readonly kind?: string;
+    readonly provider?: string;
+}): Promise<readonly SecretMetadata[]>;
+export declare function createProjectSecret(input: ProjectSecretCreateInput): Promise<SecretMetadata>;
+export declare function replaceProjectSecret(input: ProjectSecretReplaceInput): Promise<SecretMetadata>;
+export declare function removeProjectSecret(input: ProjectSecretRemoveInput): Promise<void>;
+export declare function configureProjectOAuthProvider(input: ConfigureProjectOAuthProviderInput): Promise<ConfigureProjectOAuthProviderResponse>;
+export declare function parseProjectSecretListResponse(value: unknown): readonly SecretMetadata[];
+export declare function parseProjectSecretMetadataResponse(value: unknown): SecretMetadata;
+export declare function parseConfigureProjectOAuthProviderResponse(value: unknown): ConfigureProjectOAuthProviderResponse;
+//# sourceMappingURL=projectSecretApi.d.ts.map

package/dist/projectSecretApi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectSecretApi.d.ts","sourceRoot":"","sources":["../src/projectSecretApi.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAalF,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;CACjC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;CACjC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;CACjC;AAED,MAAM,MAAM,qCAAqC,GAC7C;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC,GACD;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,KAAK,EAAE,qBAAqB,GAAG,8BAA8B,CAAC;IACvE,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACpE,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC,CAAC;AAEN,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,IAAI,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE;CAM/F;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B,GAAG,OAAO,CAAC,SAAS,cAAc,EAAE,CAAC,CAUrC;AAED,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,cAAc,CAAC,CAazB;AAED,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,cAAc,CAAC,CAWzB;AAED,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAOxF;AAED,wBAAsB,6BAA6B,CACjD,KAAK,EAAE,kCAAkC,GACxC,OAAO,CAAC,qCAAqC,CAAC,CAmBhD;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,cAAc,EAAE,CAMxF;AAED,wBAAgB,kCAAkC,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,CAMjF;AASD,wBAAgB,0CAA0C,CACxD,KAAK,EAAE,OAAO,GACb,qCAAqC,CA6BvC"}

package/dist/projectSecretApi.js

@@ -0,0 +1,233 @@
+const FORBIDDEN_SECRET_RESPONSE_KEYS = new Set([
+    'clientSecret',
+    'payload',
+    'privateKey',
+    'rawValue',
+    'secret',
+    'secretValue',
+    'token',
+    'value',
+]);
+export class ProjectSecretApiError extends Error {
+    code;
+    status;
+    constructor(args) {
+        super(args.message);
+        this.name = 'ProjectSecretApiError';
+        this.code = args.code;
+        this.status = args.status;
+    }
+}
+export async function listProjectSecrets(input) {
+    const query = createQuery({
+        environment: input.environment,
+        kind: input.kind,
+        provider: input.provider,
+    });
+    const value = await requestJson(`/projects/${encodeURIComponent(input.projectId)}/secrets${query}`);
+    return parseProjectSecretListResponse(value);
+}
+export async function createProjectSecret(input) {
+    const value = await requestJson(`/projects/${encodeURIComponent(input.projectId)}/secrets`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({
+            environment: input.environment,
+            ref: input.ref,
+            kind: input.kind,
+            provider: input.provider,
+            payload: input.payload,
+        }),
+    });
+    return parseProjectSecretMetadataResponse(value);
+}
+export async function replaceProjectSecret(input) {
+    const value = await requestJson(`/projects/${encodeURIComponent(input.projectId)}/secrets`, {
+        method: 'PUT',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({
+            environment: input.environment,
+            ref: input.ref,
+            payload: input.payload,
+        }),
+    });
+    return parseProjectSecretMetadataResponse(value);
+}
+export async function removeProjectSecret(input) {
+    const query = createQuery({ environment: input.environment, ref: input.ref });
+    const value = await requestJson(`/projects/${encodeURIComponent(input.projectId)}/secrets${query}`, { method: 'DELETE' });
+    parseProjectSecretRemoveResponse(value);
+}
+export async function configureProjectOAuthProvider(input) {
+    const value = await requestJson(`/projects/${encodeURIComponent(input.projectId)}/auth/oauth/${encodeURIComponent(input.providerId)}`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({
+            environment: input.environment,
+            credentialsRef: input.credentialsRef,
+            enabled: input.enabled,
+            label: input.label,
+            scopes: input.scopes,
+            callbackRoute: input.callbackRoute,
+            payload: input.payload,
+        }),
+    }, true);
+    return parseConfigureProjectOAuthProviderResponse(value);
+}
+export function parseProjectSecretListResponse(value) {
+    const result = readResult(value);
+    if (!result.ok || !Array.isArray(result.data)) {
+        throw createInvalidResponseError('Secret list response was invalid.');
+    }
+    return result.data.map(parseSecretMetadata);
+}
+export function parseProjectSecretMetadataResponse(value) {
+    const result = readResult(value);
+    if (!result.ok) {
+        throw createInvalidResponseError('Secret metadata response was invalid.');
+    }
+    return parseSecretMetadata(result.data);
+}
+function parseProjectSecretRemoveResponse(value) {
+    const result = readResult(value);
+    if (!result.ok) {
+        throw createInvalidResponseError('Secret removal response was invalid.');
+    }
+}
+export function parseConfigureProjectOAuthProviderResponse(value) {
+    const record = asRecord(value);
+    if (record === null || typeof record.ok !== 'boolean') {
+        throw createInvalidResponseError('OAuth configuration response was invalid.');
+    }
+    if (record.ok) {
+        if (record.state !== 'saved' || typeof record.credentialsRef !== 'string') {
+            throw createInvalidResponseError('OAuth configuration response was invalid.');
+        }
+        return {
+            ok: true,
+            state: 'saved',
+            metadata: parseSecretMetadata(record.metadata),
+            credentialsRef: record.credentialsRef,
+        };
+    }
+    if (record.state !== 'secret_write_failed' && record.state !== 'secret_saved_manifest_failed') {
+        throw createInvalidResponseError('OAuth configuration response was invalid.');
+    }
+    return {
+        ok: false,
+        state: record.state,
+        error: parseError(record.error),
+        ...(record.metadata === undefined ? {} : { metadata: parseSecretMetadata(record.metadata) }),
+        ...(typeof record.credentialsRef === 'string' ? { credentialsRef: record.credentialsRef } : {}),
+    };
+}
+async function requestJson(path, init, allowStructuredFailure = false) {
+    const { API_BASE } = await import('./core/constants');
+    const response = await fetch(`${API_BASE}${path}`, init);
+    const value = await readJson(response);
+    if (!response.ok && !allowStructuredFailure) {
+        throw parseHttpError(value, response.status);
+    }
+    if (!response.ok && allowStructuredFailure) {
+        const record = asRecord(value);
+        if (record?.ok !== false) {
+            throw parseHttpError(value, response.status);
+        }
+    }
+    return value;
+}
+async function readJson(response) {
+    try {
+        return await response.json();
+    }
+    catch {
+        throw new ProjectSecretApiError({
+            code: 'invalid_response',
+            message: 'The Studio host returned a non-JSON secret response.',
+            status: response.status,
+        });
+    }
+}
+function parseHttpError(value, status) {
+    const record = asRecord(value);
+    const errorRecord = asRecord(record?.error);
+    const code = typeof errorRecord?.code === 'string'
+        ? errorRecord.code
+        : typeof record?.code === 'string'
+            ? record.code
+            : 'request_failed';
+    const message = typeof errorRecord?.message === 'string'
+        ? errorRecord.message
+        : typeof record?.error === 'string'
+            ? record.error
+            : 'The Studio secret request failed.';
+    return new ProjectSecretApiError({ code, message, status });
+}
+function readResult(value) {
+    const record = asRecord(value);
+    if (record === null || typeof record.ok !== 'boolean') {
+        throw createInvalidResponseError('Secret-store response was invalid.');
+    }
+    return { ok: record.ok, data: record.data };
+}
+function parseSecretMetadata(value) {
+    const record = asRecord(value);
+    if (record === null) {
+        throw createInvalidResponseError('Secret metadata was invalid.');
+    }
+    for (const key of Object.keys(record)) {
+        if (FORBIDDEN_SECRET_RESPONSE_KEYS.has(key)) {
+            throw createInvalidResponseError('Secret response unexpectedly contained a raw value field.');
+        }
+    }
+    const scope = asRecord(record.scope);
+    if (typeof record.ref !== 'string' ||
+        scope === null ||
+        typeof scope.projectId !== 'string' ||
+        typeof scope.environment !== 'string' ||
+        typeof record.kind !== 'string' ||
+        (record.provider !== undefined && typeof record.provider !== 'string') ||
+        !isStringArray(record.configuredFields) ||
+        typeof record.createdAt !== 'string' ||
+        typeof record.updatedAt !== 'string') {
+        throw createInvalidResponseError('Secret metadata was invalid.');
+    }
+    return {
+        ref: record.ref,
+        scope: { projectId: scope.projectId, environment: scope.environment },
+        kind: record.kind,
+        ...(typeof record.provider === 'string' ? { provider: record.provider } : {}),
+        configuredFields: [...record.configuredFields],
+        createdAt: record.createdAt,
+        updatedAt: record.updatedAt,
+    };
+}
+function parseError(value) {
+    const record = asRecord(value);
+    if (record === null || typeof record.code !== 'string' || typeof record.message !== 'string') {
+        throw createInvalidResponseError('Secret error response was invalid.');
+    }
+    return { code: record.code, message: record.message };
+}
+function createQuery(values) {
+    const params = new URLSearchParams();
+    for (const [key, value] of Object.entries(values)) {
+        const normalized = value?.trim();
+        if (normalized)
+            params.set(key, normalized);
+    }
+    const query = params.toString();
+    return query ? `?${query}` : '';
+}
+function asRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value)
+        ? value
+        : null;
+}
+function isStringArray(value) {
+    return Array.isArray(value) && value.every((entry) => typeof entry === 'string');
+}
+function createInvalidResponseError(message) {
+    return new ProjectSecretApiError({ code: 'invalid_response', message, status: 502 });
+}
+//# sourceMappingURL=projectSecretApi.js.map

package/dist/projectSecretApi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectSecretApi.js","sourceRoot":"","sources":["../src/projectSecretApi.ts"],"names":[],"mappings":"AAGA,MAAM,8BAA8B,GAAG,IAAI,GAAG,CAAC;IAC7C,cAAc;IACd,SAAS;IACT,YAAY;IACZ,UAAU;IACV,QAAQ;IACR,aAAa;IACb,OAAO;IACP,OAAO;CACR,CAAC,CAAC;AAmDH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACrC,IAAI,CAAS;IACb,MAAM,CAAS;IAExB,YAAY,IAAkF;QAC5F,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAKxC;IACC,MAAM,KAAK,GAAG,WAAW,CAAC;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,WAAW,CAC7B,aAAa,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,KAAK,EAAE,CACnE,CAAC;IACF,OAAO,8BAA8B,CAAC,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAA+B;IAE/B,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,aAAa,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE;QAC1F,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC;KACH,CAAC,CAAC;IACH,OAAO,kCAAkC,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAgC;IAEhC,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,aAAa,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE;QAC1F,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC;KACH,CAAC,CAAC;IACH,OAAO,kCAAkC,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAA+B;IACvE,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9E,MAAM,KAAK,GAAG,MAAM,WAAW,CAC7B,aAAa,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,KAAK,EAAE,EAClE,EAAE,MAAM,EAAE,QAAQ,EAAE,CACrB,CAAC;IACF,gCAAgC,CAAC,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,KAAyC;IAEzC,MAAM,KAAK,GAAG,MAAM,WAAW,CAC7B,aAAa,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,eAAe,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,EACrG;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC;KACH,EACD,IAAI,CACL,CAAC;IACF,OAAO,0CAA0C,CAAC,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAAc;IAC3D,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,0BAA0B,CAAC,mCAAmC,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,KAAc;IAC/D,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,0BAA0B,CAAC,uCAAuC,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,gCAAgC,CAAC,KAAc;IACtD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,0BAA0B,CAAC,sCAAsC,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0CAA0C,CACxD,KAAc;IAEd,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QACtD,MAAM,0BAA0B,CAAC,2CAA2C,CAAC,CAAC;IAChF,CAAC;IAED,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,IAAI,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;YAC1E,MAAM,0BAA0B,CAAC,2CAA2C,CAAC,CAAC;QAChF,CAAC;QACD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,OAAO;YACd,QAAQ,EAAE,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC9C,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,KAAK,qBAAqB,IAAI,MAAM,CAAC,KAAK,KAAK,8BAA8B,EAAE,CAAC;QAC9F,MAAM,0BAA0B,CAAC,2CAA2C,CAAC,CAAC;IAChF,CAAC;IAED,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5F,GAAG,CAAC,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChG,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,IAAY,EACZ,IAAkB,EAClB,sBAAsB,GAAG,KAAK;IAE9B,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEvC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC5C,MAAM,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,sBAAsB,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,MAAM,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;YACzB,MAAM,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAkB;IACxC,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,qBAAqB,CAAC;YAC9B,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,sDAAsD;YAC/D,MAAM,EAAE,QAAQ,CAAC,MAAM;SACxB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,MAAc;IACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC5C,MAAM,IAAI,GACR,OAAO,WAAW,EAAE,IAAI,KAAK,QAAQ;QACnC,CAAC,CAAC,WAAW,CAAC,IAAI;QAClB,CAAC,CAAC,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ;YAChC,CAAC,CAAC,MAAM,CAAC,IAAI;YACb,CAAC,CAAC,gBAAgB,CAAC;IACzB,MAAM,OAAO,GACX,OAAO,WAAW,EAAE,OAAO,KAAK,QAAQ;QACtC,CAAC,CAAC,WAAW,CAAC,OAAO;QACrB,CAAC,CAAC,OAAO,MAAM,EAAE,KAAK,KAAK,QAAQ;YACjC,CAAC,CAAC,MAAM,CAAC,KAAK;YACd,CAAC,CAAC,mCAAmC,CAAC;IAC5C,OAAO,IAAI,qBAAqB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QACtD,MAAM,0BAA0B,CAAC,oCAAoC,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,0BAA0B,CAAC,8BAA8B,CAAC,CAAC;IACnE,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,IAAI,8BAA8B,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5C,MAAM,0BAA0B,CAAC,2DAA2D,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrC,IACE,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;QAC9B,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QACrC,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAC/B,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC;QACtE,CAAC,aAAa,CAAC,MAAM,CAAC,gBAAgB,CAAC;QACvC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;QACpC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EACpC,CAAC;QACD,MAAM,0BAA0B,CAAC,8BAA8B,CAAC,CAAC;IACnE,CAAC;IAED,OAAO;QACL,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE;QACrE,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,GAAG,CAAC,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,gBAAgB,EAAE,CAAC,GAAG,MAAM,CAAC,gBAAgB,CAAC;QAC9C,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC7F,MAAM,0BAA0B,CAAC,oCAAoC,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,WAAW,CAAC,MAAoD;IACvE,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,UAAU,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;QACjC,IAAI,UAAU;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAChC,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,0BAA0B,CAAC,OAAe;IACjD,OAAO,IAAI,qBAAqB,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AACvF,CAAC"}