@arbium/enterprise-agent-connect 0.0.0-stage → 0.1.2-dev.d2aa5ca

package/dist/connectors/okta/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../../connectors/okta/tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,OAAO,EACP,MAAM,EACN,IAAI,EACJ,SAAS,EACT,YAAY,GAGb,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAEzD,8FAA8F;AAC9F,8FAA8F;AAC9F,+FAA+F;AAC/F,+FAA+F;AAC/F,4FAA4F;AAC5F,4DAA4D;AAE5D,MAAM,OAAO,GAAG,sBAAsB,CAAC;AACvC,MAAM,QAAQ,GAAG,sBAAsB,CAAC;AACxC,MAAM,SAAS,GAAG,mBAAmB,CAAC;AACtC,MAAM,KAAK,GAAG,uBAAuB,CAAC;AACtC,MAAM,UAAU,GAAG,qBAAqB,CAAC;AACzC,MAAM,QAAQ,GAAG;IACf,QAAQ;IACR,YAAY;IACZ,kBAAkB;IAClB,UAAU;IACV,WAAW;IACX,aAAa;IACb,QAAQ;IACR,eAAe;CACP,CAAC;AACX,6FAA6F;AAC7F,qEAAqE;AACrE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC;AACjC,+FAA+F;AAC/F,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,qCAAqC;AACrC,MAAM,SAAS,GAAG,EAAE,GAAG,EAAE,CAAC;AAM1B,SAAS,SAAS,CAAC,GAAsC;IACvD,MAAM,CAAC,GAAG,GAAG,CAAC,IAA4E,CAAC;IAC3F,MAAM,MAAM,GAAG,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;SACnF,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACnG,CAAC;AAED,KAAK,UAAU,EAAE,CAAC,GAAgB,EAAE,IAAU,EAAE,GAAuC;IACrF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjB,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG;QAAE,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;IAChE,OAAO,GAAG,CAAC,IAAW,CAAC;AACzB,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,GAAgB,EAAE,IAAU,EAAE,IAAY,EAAE,EAAE,CAC1D,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAkB,CAAC;AAE1D,MAAM,KAAK,GAAG,CAAC,MAAiC,EAAE,EAAE,CAClD,MAAM,CAAC,CAAC,CAAC,UAAU,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAEvD,kDAAkD;AAClD,MAAM,UAAU,UAAU,CAAC,GAAgB;IACzC,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAgB,EAAE,IAAU,EAAE,MAAc;IAClE,MAAM,MAAM,GAAU,EAAE,CAAC;IACzB,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,eAAe,EAAE,IAAI,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,iBAAiB,MAAM,oBAAoB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/F,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC;QACpB,IAAI,CAAC,MAAM;YAAE,MAAM;IACrB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,KAAyB,EAAE,MAAa,EAAE,EAAE,CAC3D,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAEhD,SAAS,OAAO,CAAC,GAAW;IAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;QAC5C,MAAM,IAAI,MAAM,CAAC,2DAA2D,CAAC,CAAC;IAChF,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,sFAAsF;AACtF,KAAK,UAAU,QAAQ,CAAC,GAAgB,EAAE,IAAU,EAAE,GAAW,EAAE,UAAU,GAAG,KAAK;IACnF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,kDAAkD,CAAC,CAAC;IAC9E,IAAI,IAAS,CAAC;IACd,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IACvF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,sEAAsE;QACtE,IAAI,KAAK,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,MAAM,CAAC;QACjF,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxF,MAAM,MAAM,GAAG,KAAK,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;QAAE,MAAM,MAAM,CAAC;IAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;IAC1B,EAAE,EAAE,CAAC,CAAC,EAAE;IACR,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,IAAI,IAAI;IAC/B,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,IAAI,IAAI;IAC/B,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI;IACnF,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,IAAI,IAAI;IAC/B,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,UAAU,IAAI,IAAI;IACzC,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI;CACzB,CAAC,CAAC;AAEH,MAAM,KAAK,GAAG,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;IACzB,EAAE,EAAE,CAAC,CAAC,EAAE;IACR,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,IAAI;IAC7B,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,WAAW,IAAI,IAAI;IAC3C,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;CACrB,CAAC,CAAC;AAEH,4FAA4F;AAC5F,KAAK,UAAU,QAAQ,CACrB,GAAgB,EAChB,IAAU,EACV,IAAgC,EAChC,GAAW,EACX,MAA0B,EAC1B,MAAe,EACf,IAAmC;IAEnC,MAAM,IAAI,GAAQ,EAAE,CAAC;IACrB,IAAI,IAAI,GAAkB,MAAM,IAAI,IAAI,CAAC;IACzC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;QAClE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtD,KAAK,MAAM,IAAI,IAAI,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAAE,IAAI,IAAI,KAAK,IAAI;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/F,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;QAClB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG;YAAE,MAAM;IACzC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,uDAAuD;AACvD,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAEhE,6EAA6E;AAC7E,MAAM,GAAG,GAAG,oDAAoD,CAAC;AACjE,SAAS,SAAS,CAAC,MAA0B;IAC3C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACrE,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACxE,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI;QACxC,MAAM,IAAI,MAAM,CAAC,gDAAgD,CAAC,CAAC;IACrE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,KAAK,CAAC,CAAM,EAAE,MAAc,EAAE,MAAe;IACpD,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;IAC5B,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,IAAI,EAAE,CAAC;IACrC,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,mBAAmB,IAAI,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACzF,OAAO;QACL,IAAI,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;QACzB,UAAU,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;QAC/B,OAAO,EAAE,CAAC,CAAC,cAAc,IAAI,IAAI;QACjC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,IAAI,IAAI;QAClC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,IAAI,IAAI;QACjC,gFAAgF;QAChF,EAAE,EACA,KAAK,CAAC,EAAE,KAAK,MAAM;YACjB,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;gBAC/B,CAAC,CAAC,gBAAgB;gBAClB,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC;QACnC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,IAAI,IAAI;QAC/B,QAAQ,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI;QAC7E,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI;KAC/E,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,SAAS,GAAY;IAChC,KAAK,EAAE;QACL,eAAe;QACf,mBAAmB;QACnB,mBAAmB;QACnB,oBAAoB;QACpB,yBAAyB;QACzB,gBAAgB;QAChB,wBAAwB;QACxB,uBAAuB;QACvB,0BAA0B;QAC1B,kBAAkB;QAClB,0BAA0B;QAC1B,mBAAmB;QACnB,mBAAmB;QACnB,qBAAqB;QACrB,qBAAqB;QACrB,sBAAsB;KACvB;IAED,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO;QAC3B,MAAM,QAAQ,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAW,CAAC;QACtE,MAAM,KAAK,GAAG,CAAC,WAAoB,EAAE,EAAE,CACrC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,EAAE,CAAU,CAAC;QACxF,MAAM,IAAI,GAAG,CAAC;aACX,MAAM,EAAE;aACR,GAAG,CAAC,GAAG,CAAC;aACR,QAAQ,CAAC,gEAAgE,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,iDAAiD,CAAC,CAAC;QAC/F,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,QAAgB,EAAE,EAAE,CAC7C,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,CAAC,KAAyB,EAAE,EAAU,EAAE,EAAE;YAC3D,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,MAAM,CAAC,yCAAyC,CAAC,CAAC;YACpF,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,MAAM,IAAI,MAAM,CAAC,mCAAmC,CAAC,CAAC;QACrF,CAAC,CAAC;QAEF,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;YAC9B,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;gBACE,WAAW,EACT,2LAA2L;gBAC7L,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;gBAC/B,WAAW,EAAE,QAAQ;aACtB,EACD,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CACd,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAC9C,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;gBACtE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC9D,OAAO,IAAI,CAAC;oBACV,GAAG,MAAM,CAAC,CAAC,CAAC;oBACZ,UAAU,EAAE,CAAC,CAAC,MAAM,KAAK,YAAY;oBACrC,UAAU,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;oBAC/B,gBAAgB,EAAE,CAAC,CAAC,eAAe,IAAI,IAAI;oBAC3C,cAAc,EAAE,CAAC,CAAC,aAAa,IAAI,IAAI;oBACvC,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;oBAC1B,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;oBACtC,WAAW,EAAE,KAAK,CAAC,MAAM,GAAG,GAAG;iBAChC,CAAC,CAAC;YACL,CAAC,CAAC,CACL,CAAC;QAEJ,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAClC,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;gBACE,WAAW,EACT,sLAAsL;gBACxL,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;oBACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;oBACrC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE;oBACnC,WAAW,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;oBACxB,MAAM,EAAE,SAAS;iBAClB,CAAC;gBACF,WAAW,EAAE,QAAQ;aACtB,EACD,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,CACzC,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,KAAK,IAAI,MAAM,IAAI,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACxE,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBAC7B,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM;oBAAE,MAAM,IAAI,MAAM,CAAC,2CAA2C,CAAC,CAAC;gBACjF,MAAM,KAAK,GAAG;oBACZ,GAAG,CAAC,CAAC;wBACH,CAAC,CAAC;4BACE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG;yBACrG;wBACH,CAAC,CAAC,EAAE,CAAC;oBACP,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC7C,CAAC;gBACF,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;gBACvD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;gBAC9B,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CACzC,GAAG,EACH,IAAI,EACJ,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,MAAM,UAAU,WAAW,GAAG,CAAC,EAAE,EAChE,WAAW,EACX,MAAM,EACN,OAAO,CAAC,KAAK,CAAC,EACd,KAAK,EAAE,CAAC,EAAE,EAAE,CACV,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAClF,CAAC;gBACF,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5C,CAAC,CAAC,CACL,CAAC;QAEJ,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAClC,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;gBACE,WAAW,EACT,yHAAyH;gBAC3H,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;gBAC/B,WAAW,EAAE,QAAQ;aACtB,EACD,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CACd,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAClD,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBACjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;gBACpE,OAAO,IAAI,CAAC;oBACV,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;oBACf,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAC9B,EAAE,EAAE,CAAC,CAAC,EAAE;wBACR,IAAI,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI;wBAC1B,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI;wBAC5B,IAAI,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI;wBAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI;wBACxB,QAAQ,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;wBAC3B,YAAY,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;qBACpC,CAAC,CAAC;iBACJ,CAAC,CAAC;YACL,CAAC,CAAC,CACL,CAAC;QAEJ,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;YACnC,MAAM,CAAC,YAAY,CACjB,oBAAoB,EACpB;gBACE,WAAW,EACT,kIAAkI;gBACpI,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;oBACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;oBACrC,WAAW,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC;oBACzB,MAAM,EAAE,SAAS;iBAClB,CAAC;gBACF,WAAW,EAAE,QAAQ;aACtB,EACD,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,CACjC,OAAO,CAAC,GAAG,EAAE,oBAAoB,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAC/D,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;gBAC9B,IAAI,KAAK,EAAE,CAAC;oBACV,qFAAqF;oBACrF,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;wBAC1B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,CAAC,CAAC;wBAC5E,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;wBACjB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;4BAAE,OAAO,IAAI,CAAC;wBACpC,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG;4BAAE,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;wBAChE,OAAO,GAAG,CAAC,IAAW,CAAC;oBACzB,CAAC,CAAC,CACH,CAAC;oBACF,MAAM,MAAM,GAAG,KAAK;yBACjB,MAAM,CAAC,CAAC,CAAC,EAAY,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;yBACnC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;yBAChF,GAAG,CAAC,KAAK,CAAC,CAAC;oBACd,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnD,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,IAAI,CACrB,GAAG,EACH,IAAI,EACJ,kBAAkB,CAAC,CAAC,CAAC,CAAC,KAAK,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAC/F,CAAC;gBACF,OAAO,IAAI,CAAC;oBACV,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;oBAC7B,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;oBACzB,IAAI,EAAE,IAAI,CAAC,KAAK;iBACjB,CAAC,CAAC;YACL,CAAC,CAAC,CACL,CAAC;QAEJ,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;YACxC,MAAM,CAAC,YAAY,CACjB,yBAAyB,EACzB;gBACE,WAAW,EACT,0FAA0F;gBAC5F,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;oBACpB,QAAQ,EAAE,OAAO;oBACjB,WAAW,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC;oBACzB,MAAM,EAAE,SAAS;iBAClB,CAAC;gBACF,WAAW,EAAE,QAAQ;aACtB,EACD,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,CACpC,OAAO,CAAC,GAAG,EAAE,yBAAyB,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAC/D,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;gBACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CACrB,GAAG,EACH,IAAI,EACJ,kBAAkB,QAAQ,gBAAgB,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CACxE,CAAC;gBACF,OAAO,IAAI,CAAC;oBACV,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;oBAC9B,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;oBACzB,IAAI,EAAE,IAAI,CAAC,KAAK;iBACjB,CAAC,CAAC;YACL,CAAC,CAAC,CACL,CAAC;QAEJ,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;YAC/B,MAAM,CAAC,YAAY,CACjB,gBAAgB,EAChB;gBACE,WAAW,EACT,wKAAwK;gBAC1K,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;oBACpB,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;oBACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;oBACrC,WAAW,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC;oBACzB,MAAM,EAAE,SAAS;iBAClB,CAAC;gBACF,WAAW,EAAE,QAAQ;aACtB,EACD,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,CAC1C,OAAO,CAAC,GAAG,EAAE,gBAAgB,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAChE,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBAC7B,MAAM,MAAM,GAAG,CAAC;oBACd,CAAC,CAAC,UAAU,kBAAkB,CAAC,eAAe,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,GAAG;oBAC3F,CAAC,CAAC,EAAE,CAAC;gBACP,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,MAAM,IAAI,GAAG,MAAM,IAAI,CACrB,GAAG,EACH,IAAI,EACJ,gBAAgB,MAAM,GAAG,CAAC,SAAS,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CACjE,CAAC;gBACF,OAAO,IAAI,CAAC;oBACV,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAC3B,EAAE,EAAE,CAAC,CAAC,EAAE;wBACR,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI;wBACtB,GAAG,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;wBACnB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI;wBACxB,YAAY,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI;qBACnC,CAAC,CAAC;oBACH,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;oBACzB,IAAI,EAAE,IAAI,CAAC,KAAK;iBACjB,CAAC,CAAC;YACL,CAAC,CAAC,CACL,CAAC;QAEJ,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;YACvC,MAAM,CAAC,YAAY,CACjB,wBAAwB,EACxB;gBACE,WAAW,EACT,0XAA0X;gBAC5X,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;oBACpB,IAAI;oBACJ,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;oBACzD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;oBAC1C,WAAW,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC;oBACzB,MAAM,EAAE,SAAS;iBAClB,CAAC;gBACF,WAAW,EAAE,QAAQ;aACtB,EACD,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,CACtD,OAAO,CAAC,GAAG,EAAE,wBAAwB,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACvD,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;oBAC1D,MAAM,IAAI,MAAM,CAAC,oDAAoD,CAAC,CAAC;gBACzE,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;gBACjC,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBACxD,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;gBAClF,MAAM,MAAM,GAAG,iBAAiB,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC,CAAC,sBAAsB,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBAC3H,MAAM,IAAI,GAAG,MAAM,IAAI,CACrB,GAAG,EACH,IAAI,EACJ,sBAAsB,KAAK,UAAU,MAAM,CAAC,KAAK,gCAAgC,kBAAkB,CAAC,MAAM,CAAC,UAAU,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACzJ,CAAC;gBACF,OAAO,IAAI,CAAC;oBACV,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;oBACf,UAAU,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;oBAC/B,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;oBAC7D,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;oBACzB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI;iBAC1D,CAAC,CAAC;YACL,CAAC,CAAC,CACL,CAAC;QAEJ,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,GAAY,EAAE,EAAE,CAChD,MAAM,CAAC,YAAY,CACjB,IAAI,EACJ;YACE,WAAW,EAAE,GAAG;gBACd,CAAC,CAAC,oEAAoE;gBACtE,CAAC,CAAC,mEAAmE;YACvE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;YAClD,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC;SAC1B,EACD,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CACxB,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC3E,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;YACtC,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACjD,MAAM,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE;gBAClB,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;gBAC9B,IAAI,EAAE,kBAAkB,QAAQ,UAAU,CAAC,CAAC,EAAE,EAAE;aACjD,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1D,CAAC,CAAC,CACL,CAAC;QACJ,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;YAAE,UAAU,CAAC,uBAAuB,EAAE,IAAI,CAAC,CAAC;QACpF,IAAI,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;YAAE,UAAU,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;QAE3F,+EAA+E;QAC/E,MAAM,MAAM,GAAG,CACb,IAAY,EACZ,WAAmB,EACnB,WAAoB,EACpB,IAAiE,EACjE,IAAY,EACZ,EAAE,CACF,MAAM,CAAC,YAAY,CACjB,IAAI,EACJ,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,EACjF,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CACd,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnC,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACjD,MAAM,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAChC,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC,CAAC,CACL,CAAC;QACJ,MAAM,SAAS,GAAG,CAAC,EAAU,EAAE,IAAY,EAAE,KAAK,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;YAC3D,MAAM,EAAE,MAAe;YACvB,IAAI,EAAE,iBAAiB,EAAE,cAAc,IAAI,GAAG,KAAK,EAAE;SACtD,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;YACjC,MAAM,CACJ,kBAAkB,EAClB,gHAAgH,EAChH,KAAK,EACL,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,QAAQ,CAAC,EAC/B,UAAU,CACX,CAAC;QACJ,IAAI,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;YACzC,MAAM,CACJ,0BAA0B,EAC1B,8HAA8H,EAC9H,KAAK;YACL,6EAA6E;YAC7E,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,gBAAgB,EAAE,iBAAiB,CAAC,EAC1D,yCAAyC,CAC1C,CAAC;QACJ,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAClC,MAAM,CACJ,mBAAmB,EACnB,0FAA0F,EAC1F,IAAI,EACJ,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,EAChC,WAAW,CACZ,CAAC;QACJ,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;YACpC,MAAM,CACJ,qBAAqB,EACrB,yDAAyD,EACzD,KAAK,EACL,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,WAAW,CAAC,EAClC,aAAa,CACd,CAAC;QACJ,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;YACpC,MAAM,CACJ,qBAAqB,EACrB,sGAAsG,EACtG,IAAI,EACJ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,4BAA4B,EAAE,CAAC,EACrF,uBAAuB,CACxB,CAAC;QACJ,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;YACrC,MAAM,CACJ,sBAAsB,EACtB,2IAA2I,EAC3I,IAAI,EACJ,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,YAAY,EAAE,kBAAkB,CAAC,EACvD,aAAa,CACd,CAAC;QAEJ,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAClC,MAAM,CAAC,YAAY,CACjB,mBAAmB,EACnB;gBACE,WAAW,EACT,wIAAwI;gBAC1I,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC9D,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC;aACzB,EACD,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CACzB,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,GAAG,CAAC,WAAW,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAC3E,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;oBAC5B,MAAM,IAAI,MAAM,CAAC,yCAAyC,CAAC,CAAC;gBAC9D,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBACjD,MAAM,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE;oBAClB,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,iBAAiB,CAAC,CAAC,EAAE,YAAY,SAAS,EAAE;iBACnD,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;YACtE,CAAC,CAAC,CACL,CAAC;IACN,CAAC;CACF,CAAC"}

package/dist/connectors/okta/vendor.d.ts

@@ -0,0 +1,14 @@
+import { type Fetch, type Vendor, type VendorRequest } from "../../packages/connector-kit/src/types.js";
+export declare function normalizeOrg(input: string): string;
+/** The scope a Management API call needs: okta.<resource>.read for a GET, .manage otherwise. */
+export declare function scopeFor(request: VendorRequest): string;
+export declare function parsePrivateKey(raw: string): string;
+export declare function clientAssertion(input: {
+    clientId: string;
+    keyId: string;
+    privateKey: string;
+    tokenUrl: string;
+}): string;
+/** The `after` cursor of a Link header's rel="next" page. */
+export declare function nextAfter(link: string | null): string | null;
+export declare function oktaVendor(fetchImpl?: Fetch): Vendor;

package/dist/connectors/okta/vendor.js

@@ -0,0 +1,203 @@
+import { createHash, createPrivateKey, randomUUID, sign } from "node:crypto";
+import { vendorError } from "../../packages/connector-kit/src/oauth.js";
+import { ConnectError, TokenCache, } from "../../packages/connector-kit/src/types.js";
+// An Okta API service app: OAuth 2.0 client credentials from the org authorization server
+// (`/oauth2/v1/token`), the app proving itself with a private_key_jwt client assertion (RS256,
+// iss = sub = client id, aud = the token URL, 5 minutes). Okta has no catch-all scope, and a
+// token request naming a scope the app was not granted is refused whole, so every call gets a
+// token for the one scope its path and method need (`scopeFor`). Lists come back as
+// `{items, after}`: Okta pages with a Link header, whose `after` is the next page's cursor.
+// Sources: developer.okta.com/docs/guides/implement-oauth-for-okta-serviceapp,
+// developer.okta.com/docs/api/openapi/okta-oauth/guides/client-auth (private_key_jwt) and
+// developer.okta.com/docs/api/#pagination (read October 27, 2026).
+// The org's own Okta address; an admin address (acme-admin.okta.com) is its org's too.
+const ORG_HOST = /^[a-z0-9][a-z0-9-]*\.(okta|oktapreview|okta-emea|okta-gov)\.com$/;
+const CLIENT_ID = /^[A-Za-z0-9_-]{8,64}$/;
+const KEY_ID = /^[A-Za-z0-9_.-]{1,128}$/;
+const RESOURCES = new Set(["users", "groups", "apps", "logs"]);
+export function normalizeOrg(input) {
+    let host = input
+        .trim()
+        .toLowerCase()
+        .replace(/^https?:\/\//, "")
+        .replace(/\/.*$/, "");
+    if (/^[a-z0-9][a-z0-9-]*$/.test(host))
+        host = `${host}.okta.com`;
+    host = host.replace(/-admin\./, ".");
+    if (!ORG_HOST.test(host))
+        throw new ConnectError("Enter your Okta address, such as your-company.okta.com");
+    return host;
+}
+/** The scope a Management API call needs: okta.<resource>.read for a GET, .manage otherwise. */
+export function scopeFor(request) {
+    const resource = /^\/api\/v1\/([a-z]+)(?:[/?]|$)/.exec(request.path)?.[1];
+    if (!resource || !RESOURCES.has(resource))
+        throw new Error(`No Okta scope for ${request.path}`);
+    return `okta.${resource}.${request.method === "GET" ? "read" : "manage"}`;
+}
+// Okta's console offers the generated key as PEM or as a JWK; either is kept as PKCS#8 PEM.
+export function parsePrivateKey(raw) {
+    let key;
+    try {
+        const text = raw.trim();
+        key = text.startsWith("{")
+            ? createPrivateKey({ key: JSON.parse(text), format: "jwk" })
+            : createPrivateKey(text);
+    }
+    catch {
+        throw new ConnectError("The private key could not be read. Paste the whole key Okta showed.");
+    }
+    if (key.asymmetricKeyType !== "rsa")
+        throw new ConnectError("Okta signs in with an RSA key. Generate an RSA key in the app.");
+    return key.export({ type: "pkcs8", format: "pem" }).toString();
+}
+export function clientAssertion(input) {
+    const now = Math.floor(Date.now() / 1000);
+    const part = (o) => Buffer.from(JSON.stringify(o)).toString("base64url");
+    const signed = `${part({ alg: "RS256", typ: "JWT", kid: input.keyId })}.${part({
+        iss: input.clientId,
+        sub: input.clientId,
+        aud: input.tokenUrl,
+        iat: now,
+        exp: now + 300,
+        jti: randomUUID(),
+    })}`;
+    const signature = sign("sha256", Buffer.from(signed), input.privateKey).toString("base64url");
+    return `${signed}.${signature}`;
+}
+/** The `after` cursor of a Link header's rel="next" page. */
+export function nextAfter(link) {
+    for (const part of (link ?? "").split(",")) {
+        const m = /<([^>]+)>\s*;\s*rel="next"/.exec(part);
+        if (m)
+            return URL.parse(m[1])?.searchParams.get("after") ?? null;
+    }
+    return null;
+}
+function safeJson(raw) {
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return raw;
+    }
+}
+class ScopeRefused extends ConnectError {
+}
+export function oktaVendor(fetchImpl = fetch) {
+    const tokens = new TokenCache();
+    function host(c) {
+        const org = c.config.org ?? "";
+        if (!ORG_HOST.test(org))
+            throw new Error("Okta connection has no org");
+        return `https://${org}`;
+    }
+    async function mint(c, scope) {
+        const tokenUrl = `${host(c)}/oauth2/v1/token`;
+        const res = await fetchImpl(tokenUrl, {
+            method: "POST",
+            headers: { "content-type": "application/x-www-form-urlencoded", accept: "application/json" },
+            redirect: "error",
+            body: new URLSearchParams({
+                grant_type: "client_credentials",
+                scope,
+                client_assertion_type: "urn:ietf:params:oauth:client-assertion-type:jwt-bearer",
+                client_assertion: clientAssertion({
+                    clientId: c.config.clientId,
+                    keyId: c.config.keyId,
+                    privateKey: c.secret.private_key,
+                    tokenUrl,
+                }),
+            }),
+        });
+        const body = safeJson(await res.text());
+        if (!res.ok || typeof body?.access_token !== "string") {
+            const why = vendorError(body) || String(res.status);
+            if (body?.error === "invalid_scope")
+                throw new ScopeRefused(`Okta has not granted the app ${scope}: ${why}`);
+            if (/dpop/i.test(why))
+                throw new ConnectError(`Okta wants a proof-of-possession header (DPoP). In the app's General tab, edit Client Credentials and clear "Require Demonstrating Proof of Possession (DPoP) header in token requests". (${why})`);
+            throw new ConnectError(`Okta refused the app's sign-in: ${why}`);
+        }
+        return { token: body.access_token, expiresIn: Number(body.expires_in) || 3600 };
+    }
+    // Per credential and scope, so a new key never reuses an old token.
+    const cacheKey = (c, scope) => createHash("sha256")
+        .update([c.config.org, c.config.clientId, c.config.keyId, c.secret.private_key, scope].join("\n"))
+        .digest("hex");
+    async function send(c, token, request) {
+        const res = await fetchImpl(`${host(c)}${request.path}`, {
+            method: request.method,
+            headers: {
+                authorization: `Bearer ${token}`,
+                accept: "application/json",
+                ...request.headers,
+                ...(request.body === undefined ? {} : { "content-type": "application/json" }),
+            },
+            body: request.body === undefined ? undefined : JSON.stringify(request.body),
+            redirect: "error",
+        });
+        const raw = await res.text();
+        const data = raw ? safeJson(raw) : null;
+        return {
+            status: res.status,
+            data: Array.isArray(data) ? { items: data, after: nextAfter(res.headers.get("link")) } : data,
+        };
+    }
+    return {
+        async connect(fields) {
+            const org = normalizeOrg(fields.org ?? "");
+            const clientId = fields.client_id?.trim() ?? "";
+            const keyId = fields.key_id?.trim() ?? "";
+            if (!CLIENT_ID.test(clientId))
+                throw new ConnectError("Enter the app's Client ID, from its General tab");
+            if (!KEY_ID.test(keyId))
+                throw new ConnectError("Enter the key's KID, shown beside the key in the app's General tab");
+            const connection = {
+                config: { org, clientId, keyId },
+                secret: { private_key: parsePrivateKey(fields.private_key ?? "") },
+            };
+            // okta.users.read is every connection's least: proves the key, the app and the org.
+            const scope = "okta.users.read";
+            await tokens.get(cacheKey(connection, scope), () => mint(connection, scope));
+            return { ...connection, accountLabel: org };
+        },
+        async call(connection, request) {
+            const scope = scopeFor(request);
+            const key = cacheKey(connection, scope);
+            const token = () => tokens.get(key, () => mint(connection, scope));
+            let res = await send(connection, await token(), request);
+            if (res.status === 401) {
+                tokens.forget(key);
+                res = await send(connection, await token(), request);
+            }
+            return res;
+        },
+        checks: {
+            // One token request per scope the ceiling needs: Okta answers invalid_scope for one
+            // not granted. Extra grants are the admin's choice, so only missing ones are named.
+            async scopes(connection, input) {
+                const granted = [];
+                for (const scope of input.expected)
+                    try {
+                        await mint(connection, scope);
+                        granted.push(scope);
+                    }
+                    catch (error) {
+                        if (!(error instanceof ScopeRefused))
+                            throw error;
+                    }
+                const missing = input.expected.filter((s) => !granted.includes(s));
+                return {
+                    values: granted,
+                    ...(missing.length
+                        ? {
+                            warning: `Missing: ${missing.join(", ")}. Grant ${missing.length > 1 ? "them" : "it"} on the app's Okta API Scopes tab, or agents cannot do what you ticked.`,
+                        }
+                        : {}),
+                };
+            },
+        },
+    };
+}
+//# sourceMappingURL=vendor.js.map

package/dist/connectors/okta/vendor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vendor.js","sourceRoot":"","sources":["../../../connectors/okta/vendor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,UAAU,EAAE,IAAI,EAAkB,MAAM,aAAa,CAAC;AAC7F,OAAO,EAAE,WAAW,EAAE,MAAM,2CAA2C,CAAC;AACxE,OAAO,EACL,YAAY,EACZ,UAAU,GAMX,MAAM,2CAA2C,CAAC;AAEnD,0FAA0F;AAC1F,+FAA+F;AAC/F,6FAA6F;AAC7F,8FAA8F;AAC9F,oFAAoF;AACpF,4FAA4F;AAC5F,+EAA+E;AAC/E,0FAA0F;AAC1F,mEAAmE;AAEnE,uFAAuF;AACvF,MAAM,QAAQ,GAAG,kEAAkE,CAAC;AACpF,MAAM,SAAS,GAAG,uBAAuB,CAAC;AAC1C,MAAM,MAAM,GAAG,yBAAyB,CAAC;AACzC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAE/D,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,IAAI,IAAI,GAAG,KAAK;SACb,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;SAC3B,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACxB,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,IAAI,GAAG,GAAG,IAAI,WAAW,CAAC;IACjE,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QACtB,MAAM,IAAI,YAAY,CAAC,wDAAwD,CAAC,CAAC;IACnF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,QAAQ,CAAC,OAAsB;IAC7C,MAAM,QAAQ,GAAG,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1E,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAChG,OAAO,QAAQ,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AAC5E,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,IAAI,GAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YACxB,CAAC,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAC5D,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,qEAAqE,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,GAAG,CAAC,iBAAiB,KAAK,KAAK;QACjC,MAAM,IAAI,YAAY,CAAC,gEAAgE,CAAC,CAAC;IAC3F,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAK/B;IACC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC;QAC7E,GAAG,EAAE,KAAK,CAAC,QAAQ;QACnB,GAAG,EAAE,KAAK,CAAC,QAAQ;QACnB,GAAG,EAAE,KAAK,CAAC,QAAQ;QACnB,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,GAAG,GAAG,GAAG;QACd,GAAG,EAAE,UAAU,EAAE;KAClB,CAAC,EAAE,CAAC;IACL,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC9F,OAAO,GAAG,MAAM,IAAI,SAAS,EAAE,CAAC;AAClC,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,SAAS,CAAC,IAAmB;IAC3C,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC;YAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;IACnE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED,MAAM,YAAa,SAAQ,YAAY;CAAG;AAE1C,MAAM,UAAU,UAAU,CAAC,YAAmB,KAAK;IACjD,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;IAEhC,SAAS,IAAI,CAAC,CAAmB;QAC/B,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACvE,OAAO,WAAW,GAAG,EAAE,CAAC;IAC1B,CAAC;IAED,KAAK,UAAU,IAAI,CAAC,CAAmB,EAAE,KAAa;QACpD,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC;QAC9C,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE;YACpC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE,MAAM,EAAE,kBAAkB,EAAE;YAC5F,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,UAAU,EAAE,oBAAoB;gBAChC,KAAK;gBACL,qBAAqB,EAAE,wDAAwD;gBAC/E,gBAAgB,EAAE,eAAe,CAAC;oBAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ;oBAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK;oBACrB,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW;oBAChC,QAAQ;iBACT,CAAC;aACH,CAAC;SACH,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAIrC,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,OAAO,IAAI,EAAE,YAAY,KAAK,QAAQ,EAAE,CAAC;YACtD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACpD,IAAI,IAAI,EAAE,KAAK,KAAK,eAAe;gBACjC,MAAM,IAAI,YAAY,CAAC,gCAAgC,KAAK,KAAK,GAAG,EAAE,CAAC,CAAC;YAC1E,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;gBACnB,MAAM,IAAI,YAAY,CACpB,6LAA6L,GAAG,GAAG,CACpM,CAAC;YACJ,MAAM,IAAI,YAAY,CAAC,mCAAmC,GAAG,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC;IAClF,CAAC;IAED,oEAAoE;IACpE,MAAM,QAAQ,GAAG,CAAC,CAAmB,EAAE,KAAa,EAAE,EAAE,CACtD,UAAU,CAAC,QAAQ,CAAC;SACjB,MAAM,CACL,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC1F;SACA,MAAM,CAAC,KAAK,CAAC,CAAC;IAEnB,KAAK,UAAU,IAAI,CAAC,CAAmB,EAAE,KAAa,EAAE,OAAsB;QAC5E,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,EAAE;YACvD,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,MAAM,EAAE,kBAAkB;gBAC1B,GAAG,OAAO,CAAC,OAAO;gBAClB,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;aAC9E;YACD,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;YAC3E,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxC,OAAO;YACL,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;SAC9F,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,MAAM;YAClB,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;YAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAC1C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAC3B,MAAM,IAAI,YAAY,CAAC,iDAAiD,CAAC,CAAC;YAC5E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;gBACrB,MAAM,IAAI,YAAY,CACpB,oEAAoE,CACrE,CAAC;YACJ,MAAM,UAAU,GAAG;gBACjB,MAAM,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE;gBAChC,MAAM,EAAE,EAAE,WAAW,EAAE,eAAe,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE;aACnE,CAAC;YACF,oFAAoF;YACpF,MAAM,KAAK,GAAG,iBAAiB,CAAC;YAChC,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;YAC7E,OAAO,EAAE,GAAG,UAAU,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC;QAC9C,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO;YAC5B,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;YAChC,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;YACnE,IAAI,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,MAAM,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;YACzD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,MAAM,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;YACvD,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QAED,MAAM,EAAE;YACN,oFAAoF;YACpF,oFAAoF;YACpF,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,KAAiB;gBACxC,MAAM,OAAO,GAAa,EAAE,CAAC;gBAC7B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,QAAQ;oBAChC,IAAI,CAAC;wBACH,MAAM,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;wBAC9B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACtB,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,IAAI,CAAC,CAAC,KAAK,YAAY,YAAY,CAAC;4BAAE,MAAM,KAAK,CAAC;oBACpD,CAAC;gBACH,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBACnE,OAAO;oBACL,MAAM,EAAE,OAAO;oBACf,GAAG,CAAC,OAAO,CAAC,MAAM;wBAChB,CAAC,CAAC;4BACE,OAAO,EAAE,YAAY,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,yEAAyE;yBAC9J;wBACH,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC;YACJ,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/connectors/outlook-calendar/connector.json

@@ -0,0 +1,136 @@
+{
+  "id": "outlook-calendar",
+  "name": "Outlook calendar",
+  "description": "Let each agent read and manage the calendar of its own mailbox.",
+  "logo": "/brand/outlook.svg",
+  "identity": "Your Microsoft app registration, through the Microsoft connection. Exchange lets it open only the calendars of mailboxes you choose for agents, and it uses no Microsoft 365 license.",
+  "provider": "microsoft",
+  "order": 2,
+  "accountKey": "tenantId",
+  "connectionKind": "guided",
+  "setup": [
+    {
+      "title": "Make sure the app cannot open every calendar",
+      "body": "Outlook calendar needs no Microsoft Graph permission on the app. Do not add Calendars.Read or Calendars.ReadWrite under API permissions: they open every calendar in your organization.",
+      "click": [
+        "In the Microsoft Entra admin center, go to Entra ID, then App registrations, open {brand.microsoft.appName} and select API permissions.",
+        "Check that no Calendars permission is listed. Remove any that is."
+      ],
+      "copy": ["az ad app permission list --id {clientId} -o table"],
+      "shell": "bash"
+    },
+    {
+      "title": "Create the {brand.microsoft.mailboxGroup} group",
+      "body": "Agents can only reach mailboxes in this mail-enabled security group, the same one Outlook mail uses. If you created it there, it shows as done here.",
+      "link": {
+        "label": "Open the Exchange admin center",
+        "href": "https://admin.exchange.microsoft.com/#/groups"
+      },
+      "click": [
+        "In the Exchange admin center, go to Recipients, then Groups, then Mail-enabled security, and select Add a group.",
+        "Choose Mail-enabled security and select Next. Name it {brand.microsoft.mailboxGroup}, then Next.",
+        "Assign yourself as owner, skip members (you add each agent's mailbox later), then Next.",
+        "On Edit settings, enter a group email address such as {brand.microsoft.mailboxGroupAlias}@your-domain, then Next and Create group."
+      ],
+      "copy": [
+        "# Needs the ExchangeOnlineManagement module: Install-Module ExchangeOnlineManagement -Scope CurrentUser",
+        "Connect-ExchangeOnline",
+        "if (-not (Get-DistributionGroup -Identity '{brand.microsoft.mailboxGroup}' -ErrorAction SilentlyContinue)) { New-DistributionGroup -Name '{brand.microsoft.mailboxGroup}' -Type Security }"
+      ],
+      "shell": "powershell",
+      "confirm": "mailbox-group"
+    },
+    {
+      "title": "Limit the app to the calendars in that group",
+      "body": "This is the only calendar access the app gets. Exchange enforces it, so the app cannot open any other calendar. The role lines follow what you ticked in step 1; if you tick more later, run the matching New-ManagementRoleAssignment line again. Lines for what already exists (from Outlook mail) are skipped. Exchange can take up to 2 hours to apply this before Check access passes.",
+      "link": {
+        "label": "Connect to Exchange Online PowerShell",
+        "href": "https://learn.microsoft.com/powershell/exchange/connect-to-exchange-online-powershell"
+      },
+      "clickUnavailable": true,
+      "copy": [
+        "# Needs the ExchangeOnlineManagement module: Install-Module ExchangeOnlineManagement -Scope CurrentUser",
+        "Connect-ExchangeOnline",
+        "if (-not (Get-ServicePrincipal -Identity {clientId} -ErrorAction SilentlyContinue)) { New-ServicePrincipal -AppId {clientId} -ObjectId {servicePrincipalId} -DisplayName \"{brand.microsoft.appName}\" }",
+        "if (-not (Get-ManagementScope -Identity \"{brand.microsoft.mailboxGroup}\" -ErrorAction SilentlyContinue)) { New-ManagementScope -Name \"{brand.microsoft.mailboxGroup}\" -RecipientRestrictionFilter \"MemberOfGroup -eq '$((Get-DistributionGroup '{brand.microsoft.mailboxGroup}').DistinguishedName)'\" }",
+        "New-ManagementRoleAssignment -Role \"{scope}\" -App {clientId} -CustomResourceScope \"{brand.microsoft.mailboxGroup}\""
+      ],
+      "shell": "powershell",
+      "confirm": "calendar-roles"
+    }
+  ],
+  "afterConnect": [],
+  "fields": [],
+  "capabilities": [
+    {
+      "id": "read",
+      "label": "Read events",
+      "description": "List and read events in the agent's own calendar.",
+      "required": true,
+      "scopes": ["Application Calendars.Read"],
+      "roles": [],
+      "permissions": [],
+      "tools": ["calendar_list_events", "calendar_get_event"],
+      "forbidden": "Microsoft refused this. The app needs the Exchange role {scopes} on the {brand.microsoft.mailboxGroup} scope, and this mailbox must be in that group. A role added in the last hour may not apply yet."
+    },
+    {
+      "id": "write",
+      "label": "Create, update and answer events, and send invitations",
+      "description": "Add events to the agent's own calendar, including repeating ones, and change them. Accept, tentatively accept or decline invitations, which can email the organizer. Attendees get an invitation email from the agent's mailbox, and they can be any address.",
+      "scopes": ["Application Calendars.ReadWrite"],
+      "roles": [],
+      "permissions": [],
+      "tools": ["calendar_create_event", "calendar_update_event", "calendar_respond_to_event"],
+      "forbidden": "Microsoft refused this. The app needs the Exchange role {scopes} on the {brand.microsoft.mailboxGroup} scope, and this mailbox must be in that group. A role added in the last hour may not apply yet."
+    },
+    {
+      "id": "delete",
+      "label": "Delete events",
+      "description": "Delete events from the agent's own calendar, one occurrence or a whole repeating series. They cannot be brought back from here.",
+      "destructive": true,
+      "scopes": ["Application Calendars.ReadWrite"],
+      "roles": [],
+      "permissions": [],
+      "tools": ["calendar_delete_event"],
+      "forbidden": "Microsoft refused this. The app needs the Exchange role {scopes} on the {brand.microsoft.mailboxGroup} scope, and this mailbox must be in that group. A role added in the last hour may not apply yet."
+    }
+  ],
+  "limits": [
+    {
+      "id": "mailbox",
+      "label": "Mailbox",
+      "help": "The agent's own mailbox, a member of {brand.microsoft.mailboxGroup}. The agent can use no other calendar.",
+      "kind": "text",
+      "required": true,
+      "pattern": "^[A-Za-z0-9._+-]+@[A-Za-z0-9-]+(\\.[A-Za-z0-9-]+)+$"
+    }
+  ],
+  "verify": {
+    "label": "Microsoft Graph permissions on the app (Outlook calendar needs none: Exchange limits it to the {brand.microsoft.mailboxGroup} group)",
+    "check": "permissions"
+  },
+  "revoke": "In Exchange Online PowerShell, remove the app's calendar access with Get-ManagementRoleAssignment -RoleAssignee {clientId} | Where-Object Role -like \"Application Calendars*\" | Remove-ManagementRoleAssignment. To stop every Microsoft app at once, remove the app registration (see the Microsoft connection).",
+  "agentAccess": {
+    "limit": "mailbox",
+    "label": "Exchange lets the app open an agent's calendar",
+    "path": "/v1.0/users/{value}/calendar?$select=id",
+    "granted": "The app can open this calendar.",
+    "notGranted": "Exchange does not let the app open this calendar yet. Check that the mailbox is in {brand.microsoft.mailboxGroup} and that the calendar roles were given. Run Test-ServicePrincipalAuthorization to see which roles apply. Microsoft can take up to about 2 hours to apply a change.",
+    "notFound": "Exchange shows the app no calendar at this address. Either there is none yet (check the address, or wait a few minutes if you just created it), or it is not in {brand.microsoft.mailboxGroup} yet: Exchange answers the same for a mailbox the app may not open. Microsoft can take up to about 2 hours to apply a change.",
+    "probes": {
+      "write": {
+        "method": "PATCH",
+        "path": "/v1.0/users/{value}/calendar",
+        "body": {},
+        "allowed": [200]
+      },
+      "delete": {
+        "method": "PATCH",
+        "path": "/v1.0/users/{value}/calendar",
+        "body": {},
+        "allowed": [200]
+      }
+    },
+    "missing": "The app can open this calendar but Exchange does not let it do this yet: {missing}. Give that role (the step Limit the app to the calendars in that group, on the Outlook calendar page) and check again. Microsoft can take up to about 2 hours to apply a change."
+  }
+}

package/dist/connectors/outlook-calendar/index.d.ts

@@ -0,0 +1,2 @@
+declare const _default: import("../../packages/connector-kit/src/connector.js").ConnectorModule;
+export default _default;

package/dist/connectors/outlook-calendar/index.js

@@ -0,0 +1,4 @@
+import { microsoftApp } from "../microsoft/client.js";
+import { calendarTools } from "./tools.js";
+export default microsoftApp("outlook-calendar", calendarTools);
+//# sourceMappingURL=index.js.map

package/dist/connectors/outlook-calendar/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../connectors/outlook-calendar/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,eAAe,YAAY,CAAC,kBAAkB,EAAE,aAAa,CAAC,CAAC"}

package/dist/connectors/outlook-calendar/tools.d.ts

@@ -0,0 +1,65 @@
+import { type Toolset } from "../../packages/connector-kit/src/common.js";
+export declare const MAX_RANGE_DAYS = 62;
+export declare const MAX_OCCURRENCES = 999;
+declare const DAYS: readonly ["sunday", "monday", "tuesday", "wednesday", "thursday", "friday", "saturday"];
+type Day = (typeof DAYS)[number];
+export type RecurrenceInput = {
+    pattern: "daily" | "weekly" | "monthly" | "yearly";
+    interval: number;
+    days_of_week?: Day[];
+    end_date?: string;
+    count?: number;
+};
+/** The listing window as UTC instants; refused when unbounded, reversed or too long. */
+export declare function eventWindow(start: string, end: string): {
+    start: string;
+    end: string;
+};
+/**
+ * Microsoft's patternedRecurrence for a series whose first event starts on `startDate`
+ * (YYYY-MM-DD, read in `timeZone`). Monthly and yearly repeat on the start's day (and month);
+ * weekly defaults to the start's weekday. Every series ends, by date or by count.
+ * https://learn.microsoft.com/graph/outlook-schedule-recurring-events
+ */
+export declare function recurrence(r: RecurrenceInput, startDate: string, timeZone: string): {
+    pattern: {
+        type: string;
+        interval: number;
+        daysOfWeek?: undefined;
+        dayOfMonth?: undefined;
+        month?: undefined;
+    } | {
+        type: string;
+        interval: number;
+        daysOfWeek: ("sunday" | "monday" | "tuesday" | "wednesday" | "thursday" | "friday" | "saturday")[];
+        dayOfMonth?: undefined;
+        month?: undefined;
+    } | {
+        type: string;
+        interval: number;
+        dayOfMonth: number;
+        daysOfWeek?: undefined;
+        month?: undefined;
+    } | {
+        type: string;
+        interval: number;
+        dayOfMonth: number;
+        month: number;
+        daysOfWeek?: undefined;
+    };
+    range: {
+        type: string;
+        startDate: string;
+        endDate: string;
+        recurrenceTimeZone: string;
+        numberOfOccurrences?: undefined;
+    } | {
+        type: string;
+        startDate: string;
+        numberOfOccurrences: number | undefined;
+        recurrenceTimeZone: string;
+        endDate?: undefined;
+    };
+};
+export declare const calendarTools: Toolset;
+export {};