@arbium/enterprise-agent-connect 0.2.0 → 0.2.1-dev.fd7a648

package/README.md

@@ -185,6 +185,10 @@ const orders: ConnectorJson = {
 };
 ```
 
+**Your own app, per organization.** Each organization can add its own apps through the admin
+API, as many as it wants, without a restart: see [Add internal apps through the admin
+API](docs/http-connector.md#add-internal-apps-through-the-admin-api).
+
 **Your own app, as code.** Build a `ConnectorModule` on the connector kit and give it its
 definition as `connector` ([docs/connectors.md](docs/connectors.md)). `create` gets a
 `ConnectorContext`, `{ connector }`: the definition parsed, with the branding filled in.
@@ -249,7 +253,8 @@ authority signed, name a ConfigMap or Secret holding its bundle in `caBundle`
   described only in its `connector.json` (docs/http-connector.md, docs/soap-connector.md,
   docs/odata-connector.md, docs/sql-connector.md)
 - `examples/internal-app`: a small internal API and its connector, for the quick start
-- `scripts/openapi-to-connector.ts`: drafts an http connector from an OpenAPI 3.x spec
+- `scripts/openapi-to-connector.ts`: drafts an http connector from an OpenAPI 3.x spec (the
+  drafting itself is `connectors/http/openapi.ts`, also behind the admin API's internal app drafts)
 - `examples/legacy-apps`: a SOAP and an SAP OData connector, described only in JSON
 - `scripts/wsdl-to-connector.ts`, `scripts/odata-to-connector.ts`: draft a connector from a WSDL
   or an OData `$metadata`

package/dist/connectors/http/openapi.d.ts

@@ -0,0 +1,62 @@
+type Json = Record<string, unknown>;
+export type DraftOptions = {
+    id: string;
+    operations?: string[];
+    tags?: string[];
+    source?: string;
+};
+export declare function draftConnector(spec: Json, options: DraftOptions): {
+    connector: {
+        id: string;
+        name: string;
+        description: string;
+        logo: string;
+        identity: string;
+        accountKey: string;
+        connectionKind: string;
+        setup: {
+            title: string;
+            body: string;
+        }[];
+        afterConnect: never[];
+        fields: Json[];
+        capabilities: {
+            scopes: never[];
+            permissions: never[];
+            tools: string[];
+            destructive?: boolean | undefined;
+            id: string;
+            label: string;
+            description: string;
+        }[];
+        limits: never[];
+        verify: {
+            method: string;
+            path: string;
+            label: string;
+            show: string;
+        };
+        revoke: string;
+        http: {
+            auth: Json;
+            tools: {
+                result?: {
+                    fields: string[];
+                    items?: undefined;
+                } | {
+                    items: string;
+                    fields: string[];
+                } | undefined;
+                name: string;
+                description: string;
+                method: string;
+                path: string;
+                params: Record<string, Json>;
+            }[];
+            allowInsecureHttp?: boolean | undefined;
+            baseUrl: string;
+        };
+    };
+    notes: string[];
+};
+export {};

package/dist/connectors/http/openapi.js

@@ -0,0 +1,342 @@
+// Drafts a connector.json for the http connector from an OpenAPI 3.x spec (JSON), for
+// scripts/openapi-to-connector.ts and the admin API's internal app drafts. The draft loads, but
+// a person finishes it: copy, capabilities, limits, answer limits.
+const METHODS = ["get", "post", "put", "patch", "delete"];
+const SCALARS = new Set(["string", "number", "integer", "boolean"]);
+const snake = (s) => s
+    .replace(/([a-z0-9])([A-Z])/g, "$1_$2")
+    .toLowerCase()
+    .replace(/[^a-z0-9]+/g, "_")
+    .replace(/^[^a-z]+|_+$/g, "");
+const firstLine = (s) => typeof s === "string"
+    ? s
+        .trim()
+        .split(/\n\s*\n|\r?\n/)[0]
+        .slice(0, 300)
+    : "";
+export function draftConnector(spec, options) {
+    const notes = [];
+    if (typeof spec.openapi !== "string" || !spec.openapi.startsWith("3."))
+        throw new Error("This takes an OpenAPI 3.x spec (its openapi field starts with 3.)");
+    // Follows local $refs (#/components/...); other specs' refs are left out.
+    const resolve = (node, seen = 0) => {
+        if (!node || typeof node !== "object")
+            return {};
+        const ref = node.$ref;
+        if (typeof ref !== "string")
+            return node;
+        if (!ref.startsWith("#/") || seen > 20) {
+            notes.push(`Left out ${ref}: only references inside the spec are followed`);
+            return {};
+        }
+        const target = ref
+            .slice(2)
+            .split("/")
+            .reduce((at, key) => at?.[key.replace(/~1/g, "/").replace(/~0/g, "~")], spec);
+        return resolve(target, seen + 1);
+    };
+    const objectOf = (raw) => {
+        const s = resolve(raw);
+        const parts = Array.isArray(s.allOf) ? s.allOf.map((p) => objectOf(p)) : [];
+        return {
+            properties: Object.assign({}, ...parts.map((p) => p.properties), s.properties ?? {}),
+            required: [
+                ...parts.flatMap((p) => p.required),
+                ...(Array.isArray(s.required) ? s.required : []),
+            ],
+        };
+    };
+    const typeOf = (s) => (Array.isArray(s.type) ? s.type.find((t) => t !== "null") : s.type);
+    // The http connector's param fields for a schema, or null for one it cannot take (an object).
+    const shape = (raw) => {
+        const s = resolve(raw);
+        const type = typeOf(s);
+        const items = type === "array" ? resolve(s.items) : null;
+        const scalar = items ? typeOf(items) : type;
+        if (!scalar || !SCALARS.has(scalar))
+            return null;
+        const fits = (v) => scalar === "integer"
+            ? Number.isInteger(v)
+            : typeof v === (scalar === "integer" ? "number" : scalar);
+        const values = (items ?? s).enum;
+        const allowed = Array.isArray(values) && values.length && values.every(fits) ? values : undefined;
+        const ok = (v) => fits(v) && (!allowed || allowed.includes(v));
+        const noDefault = s.default === undefined ||
+            (items ? !Array.isArray(s.default) || !s.default.every(ok) : !ok(s.default));
+        return {
+            type: items ? "array" : scalar,
+            ...(items ? { items: scalar } : {}),
+            ...(allowed ? { enum: allowed } : {}),
+            ...(noDefault ? {} : { default: s.default }),
+        };
+    };
+    const scalarFields = (raw) => Object.entries(objectOf(raw).properties)
+        .filter(([, p]) => SCALARS.has(typeOf(resolve(p)) ?? ""))
+        .map(([k]) => k);
+    const resultOf = (op) => {
+        const responses = resolve(op.responses);
+        const ok = Object.keys(responses).find((code) => /^2/.test(code));
+        const schema = ok && resolve(resolve(resolve(responses[ok]).content)["application/json"]).schema;
+        if (!schema)
+            return undefined;
+        const s = resolve(schema);
+        if (typeOf(s) === "array") {
+            const fields = scalarFields(s.items);
+            return fields.length ? { fields } : undefined;
+        }
+        const props = objectOf(s).properties;
+        // A list of records inside an object is taken as the page, e.g. {issues: [...], next}.
+        const lists = Object.entries(props)
+            .filter(([, p]) => typeOf(resolve(p)) === "array")
+            .map(([k, p]) => [k, scalarFields(resolve(p).items)])
+            .filter(([, fields]) => fields.length);
+        if (lists.length === 1)
+            return { items: lists[0][0], fields: lists[0][1] };
+        const fields = scalarFields(s);
+        return fields.length ? { fields } : undefined;
+    };
+    const app = snake(options.id);
+    const info = resolve(spec.info);
+    const title = typeof info.title === "string" && info.title.trim() ? info.title.trim() : options.id;
+    const picked = [];
+    for (const [path, rawItem] of Object.entries(resolve(spec.paths))) {
+        const item = resolve(rawItem);
+        for (const method of METHODS) {
+            const op = item[method];
+            if (!op)
+                continue;
+            const tags = Array.isArray(op.tags) ? op.tags : [];
+            if (options.operations?.includes(op.operationId) ||
+                options.tags?.some((t) => tags.includes(t)))
+                picked.push({ path, method, op, shared: item.parameters ?? [] });
+        }
+    }
+    const missing = (options.operations ?? []).filter((id) => !picked.some((p) => p.op.operationId === id));
+    if (missing.length)
+        throw new Error(`No operation has the id ${missing.join(", ")}`);
+    if (!picked.length)
+        throw new Error("No operation matched: name operations or tags");
+    const tools = picked.map(({ path, method, op, shared }) => {
+        const opId = typeof op.operationId === "string" ? op.operationId : `${method} ${path}`;
+        const base = snake(opId);
+        const name = base.startsWith(`${app}_`) ? base : `${app}_${base}`;
+        const params = {};
+        const add = (key, param, why) => {
+            if (params[key])
+                notes.push(`${name}: left out ${why}, its name is taken by another param`);
+            else
+                params[key] = param;
+        };
+        const byPlace = new Map();
+        for (const raw of [...shared, ...(op.parameters ?? [])]) {
+            const p = resolve(raw);
+            byPlace.set(`${p.in}:${p.name}`, p);
+        }
+        let template = path;
+        for (const p of byPlace.values()) {
+            const wire = String(p.name);
+            if (p.in !== "path" && p.in !== "query") {
+                notes.push(`${name}: left out the ${p.in} param ${wire} (a fixed header goes in http.headers)`);
+                continue;
+            }
+            const fields = shape(p.schema);
+            if (!fields) {
+                notes.push(`${name}: left out ${wire}, whose type the http connector cannot take`);
+                continue;
+            }
+            const key = snake(wire) || "param";
+            if (p.in === "path")
+                template = template.replaceAll(`{${wire}}`, `{${key}}`);
+            if (p.in === "path")
+                delete fields.default;
+            const style = p.style ?? "form";
+            const join = fields.type === "array" && p.in === "query"
+                ? style === "spaceDelimited"
+                    ? " "
+                    : style === "pipeDelimited"
+                        ? "|"
+                        : p.explode === false
+                            ? ","
+                            : undefined
+                : undefined;
+            add(key, {
+                ...fields,
+                description: firstLine(p.description) || firstLine(resolve(p.schema).description) || wire,
+                in: p.in,
+                ...(key === wire || p.in === "path" ? {} : { name: wire }),
+                ...(p.in === "path" || p.required === true || fields.default !== undefined
+                    ? {}
+                    : { required: false }),
+                ...(join ? { join } : {}),
+            }, `query param ${wire}`);
+        }
+        const body = resolve(op.requestBody);
+        const content = resolve(body.content);
+        if (method === "get" && op.requestBody)
+            notes.push(`${name}: left out its request body (a GET)`);
+        else if (op.requestBody && !content["application/json"])
+            notes.push(`${name}: left out its request body, which is not JSON`);
+        else if (op.requestBody) {
+            const { properties, required } = objectOf(resolve(content["application/json"]).schema);
+            if (!Object.keys(properties).length)
+                notes.push(`${name}: its request body has no listed fields, so it sends none`);
+            for (const [wire, raw] of Object.entries(properties)) {
+                const prop = resolve(raw);
+                if (prop.readOnly)
+                    continue;
+                const fields = shape(prop);
+                if (!fields) {
+                    notes.push(`${name}: left out body field ${wire}, an object or a type not supported`);
+                    continue;
+                }
+                const key = snake(wire) || "field";
+                add(key, {
+                    ...fields,
+                    description: firstLine(prop.description) || wire,
+                    in: "body",
+                    ...(key === wire ? {} : { name: wire }),
+                    ...(required.includes(wire) || fields.default !== undefined ? {} : { required: false }),
+                }, `body field ${wire}`);
+            }
+        }
+        const result = method === "get" ? resultOf(op) : undefined;
+        if (result)
+            notes.push(`${name}: its answer is trimmed to fields guessed from the spec; check them`);
+        return {
+            name,
+            description: firstLine(op.summary) || firstLine(op.description) || `${method.toUpperCase()} ${path}`,
+            method: method.toUpperCase(),
+            path: template,
+            params,
+            ...(result ? { result } : {}),
+        };
+    });
+    const baseUrl = (() => {
+        const server = resolve(spec.servers?.[0]);
+        let url = typeof server.url === "string" ? server.url : "";
+        for (const [name, v] of Object.entries(resolve(server.variables)))
+            url = url.replaceAll(`{${name}}`, String(resolve(v).default ?? ""));
+        if (!url || !URL.canParse(url, options.source)) {
+            notes.push("The spec names no server address: set http.baseUrl");
+            return "https://app.example.com";
+        }
+        return new URL(url, options.source).href.replace(/\/+$/, "");
+    })();
+    const auth = authOf();
+    function authOf() {
+        const requirement = [
+            ...(picked[0].op.security ?? spec.security ?? []),
+        ][0];
+        const schemeName = requirement && Object.keys(requirement)[0];
+        const scheme = schemeName
+            ? resolve(resolve(resolve(spec.components).securitySchemes)[schemeName])
+            : {};
+        const secret = (id, label) => ({ id, label, secret: true });
+        const plain = (id, label) => ({ id, label, secret: false });
+        if (scheme.type === "apiKey" && scheme.in === "header") {
+            if (String(scheme.name).toLowerCase() === "authorization")
+                notes.push("The key goes in Authorization: add auth.prefix if a word comes before it");
+            return {
+                auth: { type: "header", header: scheme.name, value: "api_key" },
+                fields: [secret("api_key", "API key")],
+                credential: "an API key",
+            };
+        }
+        if (scheme.type === "apiKey" && scheme.in === "query")
+            return {
+                auth: { type: "query", param: scheme.name, value: "api_key" },
+                fields: [secret("api_key", "API key")],
+                credential: "an API key",
+            };
+        if (scheme.type === "http" && String(scheme.scheme).toLowerCase() === "basic")
+            return {
+                auth: { type: "basic", username: "username", password: "password" },
+                fields: [plain("username", "Username"), secret("password", "Password")],
+                credential: "a username and password",
+            };
+        const flow = resolve(resolve(scheme.flows).clientCredentials);
+        if (scheme.type === "oauth2" && typeof flow.tokenUrl === "string")
+            return {
+                auth: {
+                    type: "oauth2",
+                    tokenUrl: new URL(flow.tokenUrl, baseUrl).href,
+                    clientId: "client_id",
+                    clientSecret: "client_secret",
+                },
+                fields: [plain("client_id", "Client ID"), secret("client_secret", "Client secret")],
+                credential: "a client ID and secret",
+            };
+        if (!(scheme.type === "http" && String(scheme.scheme).toLowerCase() === "bearer"))
+            notes.push(schemeName
+                ? `Sign-in ${schemeName} (${String(scheme.type)}) does not map to one the http connector has; the draft uses a token, which may work if the app issues tokens for services`
+                : "The spec names no sign-in; the draft uses a token");
+        return {
+            auth: { type: "bearer", token: "token" },
+            fields: [secret("token", "Token")],
+            credential: "a token",
+        };
+    }
+    const insecure = !baseUrl.startsWith("https://");
+    if (insecure)
+        notes.push("The address is plain http: allowInsecureHttp is on, check that it must be");
+    const group = (label, id, description, list, destructive = false) => list.length
+        ? [
+            {
+                id,
+                label,
+                description,
+                ...(destructive ? { destructive: true } : {}),
+                scopes: [],
+                permissions: [],
+                tools: list.map((t) => t.name),
+            },
+        ]
+        : [];
+    const reads = tools.filter((t) => t.method === "GET");
+    const writes = tools.filter((t) => !["GET", "DELETE"].includes(t.method));
+    if (writes.length)
+        notes.push("Writes: mark any tool that overwrites data destructive, and move it with the deletes");
+    const check = reads.find((t) => Object.values(t.params).every((p) => p.required === false || p.default !== undefined));
+    if (!check)
+        notes.push("No read without required params to check the connection with: set verify.path");
+    const shown = check?.result?.fields?.[0] ?? "id";
+    const connector = {
+        id: options.id,
+        name: title,
+        description: firstLine(info.description) || `Let agents use ${title}.`,
+        logo: `/brand/registry/${options.id}.svg`,
+        identity: `${auth.credential.replace(/^\w/, (c) => c.toUpperCase())} for ${title}.`,
+        accountKey: "host",
+        connectionKind: "guided",
+        setup: [
+            {
+                title: "Create a credential for agents",
+                body: `In ${title}, create ${auth.credential} for agents, with only the access they need.`,
+            },
+        ],
+        afterConnect: [],
+        fields: auth.fields,
+        capabilities: [
+            ...group("Read", "read", `Look things up in ${title}.`, reads),
+            ...group("Make changes", "write", `Create and change things in ${title}.`, writes),
+            ...group("Delete", "delete", `Delete things in ${title}.`, tools.filter((t) => t.method === "DELETE"), true),
+        ],
+        limits: [],
+        verify: {
+            method: "GET",
+            path: check?.path ?? "/",
+            label: `${title} answers`,
+            show: shown,
+        },
+        revoke: `Delete the credential in ${title}.`,
+        http: {
+            baseUrl,
+            ...(insecure ? { allowInsecureHttp: true } : {}),
+            auth: auth.auth,
+            tools,
+        },
+    };
+    notes.push("Add limits (and answerLimits on reads by id) for the values agents may be narrowed to", "Add paging to list tools that take a cursor or page number", "Rewrite the name, description, setup and revoke copy in plain words for the admin");
+    return { connector, notes };
+}
+//# sourceMappingURL=openapi.js.map

package/dist/connectors/http/openapi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openapi.js","sourceRoot":"","sources":["../../../connectors/http/openapi.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,gGAAgG;AAChG,mEAAmE;AAMnE,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAC;AACnE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAEpE,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAC1B,CAAC;KACE,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC;KACtC,WAAW,EAAE;KACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;KAC3B,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;AAElC,MAAM,SAAS,GAAG,CAAC,CAAU,EAAE,EAAE,CAC/B,OAAO,CAAC,KAAK,QAAQ;IACnB,CAAC,CAAC,CAAC;SACE,IAAI,EAAE;SACN,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;SACzB,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;IAClB,CAAC,CAAC,EAAE,CAAC;AAET,MAAM,UAAU,cAAc,CAAC,IAAU,EAAE,OAAqB;IAC9D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IAEvF,0EAA0E;IAC1E,MAAM,OAAO,GAAG,CAAC,IAAa,EAAE,IAAI,GAAG,CAAC,EAAQ,EAAE;QAChD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QACjD,MAAM,GAAG,GAAI,IAAa,CAAC,IAAI,CAAC;QAChC,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,IAAY,CAAC;QACjD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,EAAE,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,YAAY,GAAG,gDAAgD,CAAC,CAAC;YAC5E,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,MAAM,GAAG,GAAG;aACf,KAAK,CAAC,CAAC,CAAC;aACR,KAAK,CAAC,GAAG,CAAC;aACV,MAAM,CACL,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,CAAE,EAAuB,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,EACpF,IAAI,CACL,CAAC;QACJ,OAAO,OAAO,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;IACnC,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,CAAC,GAAY,EAA4C,EAAE;QAC1E,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,OAAO;YACL,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI,EAAE,CAAS;YAC5F,QAAQ,EAAE;gBACR,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;gBACnC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;aACjD;SACF,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,CAAC,CAAO,EAAE,EAAE,CACzB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAuB,CAAC;IAE5F,8FAA8F;IAC9F,MAAM,KAAK,GAAG,CAAC,GAAY,EAAE,EAAE;QAC7B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACvB,MAAM,KAAK,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACzD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5C,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACjD,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,EAAE,CAC1B,MAAM,KAAK,SAAS;YAClB,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YACrB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACjC,MAAM,OAAO,GACX,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACpF,MAAM,EAAE,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,MAAM,SAAS,GACb,CAAC,CAAC,OAAO,KAAK,SAAS;YACvB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/E,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;YAC9B,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;SACrC,CAAC;IACZ,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,CAAC,GAAY,EAAE,EAAE,CACpC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC;SACrC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;SACxD,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAErB,MAAM,QAAQ,GAAG,CAAC,EAAQ,EAAE,EAAE;QAC5B,MAAM,SAAS,GAAG,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,MAAM,MAAM,GACV,EAAE,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC;QACpF,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9B,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACrC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAChD,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QACrC,uFAAuF;QACvF,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;aAChC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC;aACjD,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAU,CAAC;aAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAChD,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,KAAK,GACT,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAEvF,MAAM,MAAM,GACV,EAAE,CAAC;IACL,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAqB,CAAC;YAC5C,IAAI,CAAC,EAAE;gBAAE,SAAS;YAClB,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,IAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,IACE,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC,WAAqB,CAAC;gBACtD,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAE3C,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAG,IAAI,CAAC,UAAwB,IAAI,EAAE,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,CAC/C,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,KAAK,EAAE,CAAC,CACrD,CAAC;IACF,IAAI,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrF,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAErF,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QACxD,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC;QACvF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAClE,MAAM,MAAM,GAAyB,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,KAAW,EAAE,GAAW,EAAE,EAAE;YACpD,IAAI,MAAM,CAAC,GAAG,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,cAAc,GAAG,sCAAsC,CAAC,CAAC;;gBACvF,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC3B,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAgB,CAAC;QACxC,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,MAAM,EAAE,GAAG,CAAE,EAAE,CAAC,UAAwB,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,QAAQ,GAAG,IAAI,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,CAAC,CAAC,EAAE,KAAK,MAAM,IAAI,CAAC,CAAC,EAAE,KAAK,OAAO,EAAE,CAAC;gBACxC,KAAK,CAAC,IAAI,CACR,GAAG,IAAI,kBAAkB,CAAC,CAAC,EAAE,UAAU,IAAI,wCAAwC,CACpF,CAAC;gBACF,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,cAAc,IAAI,6CAA6C,CAAC,CAAC;gBACnF,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC;YACnC,IAAI,CAAC,CAAC,EAAE,KAAK,MAAM;gBAAE,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,GAAG,EAAE,IAAI,GAAG,GAAG,CAAC,CAAC;YAC7E,IAAI,CAAC,CAAC,EAAE,KAAK,MAAM;gBAAE,OAAO,MAAM,CAAC,OAAO,CAAC;YAC3C,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC;YAChC,MAAM,IAAI,GACR,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,EAAE,KAAK,OAAO;gBACzC,CAAC,CAAC,KAAK,KAAK,gBAAgB;oBAC1B,CAAC,CAAC,GAAG;oBACL,CAAC,CAAC,KAAK,KAAK,eAAe;wBACzB,CAAC,CAAC,GAAG;wBACL,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK;4BACnB,CAAC,CAAC,GAAG;4BACL,CAAC,CAAC,SAAS;gBACjB,CAAC,CAAC,SAAS,CAAC;YAChB,GAAG,CACD,GAAG,EACH;gBACE,GAAG,MAAM;gBACT,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,IAAI,IAAI;gBACzF,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAC1D,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;oBACxE,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;gBACxB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1B,EACD,eAAe,IAAI,EAAE,CACtB,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,MAAM,KAAK,KAAK,IAAI,EAAE,CAAC,WAAW;YACpC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,qCAAqC,CAAC,CAAC;aACtD,IAAI,EAAE,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;YACrD,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,gDAAgD,CAAC,CAAC;aACjE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACvF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM;gBACjC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,2DAA2D,CAAC,CAAC;YACjF,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC1B,IAAI,IAAI,CAAC,QAAQ;oBAAE,SAAS;gBAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC3B,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,yBAAyB,IAAI,qCAAqC,CAAC,CAAC;oBACtF,SAAS;gBACX,CAAC;gBACD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC;gBACnC,GAAG,CACD,GAAG,EACH;oBACE,GAAG,MAAM;oBACT,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI;oBAChD,EAAE,EAAE,MAAM;oBACV,GAAG,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;oBACvC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;iBACxF,EACD,cAAc,IAAI,EAAE,CACrB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3D,IAAI,MAAM;YACR,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,qEAAqE,CAAC,CAAC;QAC3F,OAAO;YACL,IAAI;YACJ,WAAW,EACT,SAAS,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE;YACzF,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE;YAC5B,IAAI,EAAE,QAAQ;YACd,MAAM;YACN,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE;QACpB,MAAM,MAAM,GAAG,OAAO,CAAE,IAAI,CAAC,OAAiC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,IAAI,GAAG,GAAG,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC/D,GAAG,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;YACjE,OAAO,yBAAyB,CAAC;QACnC,CAAC;QACD,OAAO,IAAI,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC;IACtB,SAAS,MAAM;QACb,MAAM,WAAW,GAAG;YAClB,GAAG,CAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,QAA+B,IAAK,IAAI,CAAC,QAAmB,IAAI,EAAE,CAAC;SACtF,CAAC,CAAC,CAAC,CAAC;QACL,MAAM,UAAU,GAAG,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,UAAU;YACvB,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,CAAC,UAAU,CAAC,CAAC;YACxE,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,MAAM,GAAG,CAAC,EAAU,EAAE,KAAa,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5E,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,KAAa,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YACvD,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,eAAe;gBACvD,KAAK,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;YACzF,OAAO;gBACL,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE;gBAC/D,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;gBACtC,UAAU,EAAE,YAAY;aACzB,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,EAAE,KAAK,OAAO;YACnD,OAAO;gBACL,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE;gBAC7D,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;gBACtC,UAAU,EAAE,YAAY;aACzB,CAAC;QACJ,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO;YAC3E,OAAO;gBACL,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE;gBACnE,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;gBACvE,UAAU,EAAE,yBAAyB;aACtC,CAAC;QACJ,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC9D,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ;YAC/D,OAAO;gBACL,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI;oBAC9C,QAAQ,EAAE,WAAW;oBACrB,YAAY,EAAE,eAAe;iBAC9B;gBACD,MAAM,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;gBACnF,UAAU,EAAE,wBAAwB;aACrC,CAAC;QACJ,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC;YAC/E,KAAK,CAAC,IAAI,CACR,UAAU;gBACR,CAAC,CAAC,WAAW,UAAU,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,4HAA4H;gBAC3K,CAAC,CAAC,mDAAmD,CACxD,CAAC;QACJ,OAAO;YACL,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE;YACxC,MAAM,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClC,UAAU,EAAE,SAAS;SACtB,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IACjD,IAAI,QAAQ;QACV,KAAK,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;IAE1F,MAAM,KAAK,GAAG,CACZ,KAAa,EACb,EAAU,EACV,WAAmB,EACnB,IAAkB,EAClB,WAAW,GAAG,KAAK,EACnB,EAAE,CACF,IAAI,CAAC,MAAM;QACT,CAAC,CAAC;YACE;gBACE,EAAE;gBACF,KAAK;gBACL,WAAW;gBACX,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7C,MAAM,EAAE,EAAE;gBACV,WAAW,EAAE,EAAE;gBACf,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;aAC/B;SACF;QACH,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1E,IAAI,MAAM,CAAC,MAAM;QACf,KAAK,CAAC,IAAI,CACR,sFAAsF,CACvF,CAAC;IAEJ,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CACtF,CAAC;IACF,IAAI,CAAC,KAAK;QACR,KAAK,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAC;IAC9F,MAAM,KAAK,GAAI,KAAK,EAAE,MAA4C,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAExF,MAAM,SAAS,GAAG;QAChB,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,IAAI,EAAE,KAAK;QACX,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,kBAAkB,KAAK,GAAG;QACtE,IAAI,EAAE,mBAAmB,OAAO,CAAC,EAAE,MAAM;QACzC,QAAQ,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,KAAK,GAAG;QACnF,UAAU,EAAE,MAAM;QAClB,cAAc,EAAE,QAAQ;QACxB,KAAK,EAAE;YACL;gBACE,KAAK,EAAE,gCAAgC;gBACvC,IAAI,EAAE,MAAM,KAAK,YAAY,IAAI,CAAC,UAAU,8CAA8C;aAC3F;SACF;QACD,YAAY,EAAE,EAAE;QAChB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,YAAY,EAAE;YACZ,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,qBAAqB,KAAK,GAAG,EAAE,KAAK,CAAC;YAC9D,GAAG,KAAK,CAAC,cAAc,EAAE,OAAO,EAAE,+BAA+B,KAAK,GAAG,EAAE,MAAM,CAAC;YAClF,GAAG,KAAK,CACN,QAAQ,EACR,QAAQ,EACR,oBAAoB,KAAK,GAAG,EAC5B,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,EAC1C,IAAI,CACL;SACF;QACD,MAAM,EAAE,EAAE;QACV,MAAM,EAAE;YACN,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,KAAK,EAAE,IAAI,IAAI,GAAG;YACxB,KAAK,EAAE,GAAG,KAAK,UAAU;YACzB,IAAI,EAAE,KAAK;SACZ;QACD,MAAM,EAAE,4BAA4B,KAAK,GAAG;QAC5C,IAAI,EAAE;YACJ,OAAO;YACP,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK;SACN;KACF,CAAC;IACF,KAAK,CAAC,IAAI,CACR,uFAAuF,EACvF,4DAA4D,EAC5D,mFAAmF,CACpF,CAAC;IACF,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC"}

package/dist/packages/server/migrations/0008_internal_apps.sql

@@ -0,0 +1,16 @@
+-- An organization's own apps, added through the admin API: a connector.json (with an http,
+-- soap, odata or sql block) kept as written, run on the generic module of its kind. Never
+-- holds a secret: those are entered at connect time and sealed in connections.
+create table internal_apps (
+  organization_id uuid not null references organizations (id) on delete cascade,
+  id text not null check (id ~ '^[a-z0-9-]+$'),
+  definition jsonb not null,
+  created_by text not null,
+  created_at timestamptz not null default now(),
+  updated_by text not null,
+  updated_at timestamptz not null default now(),
+  primary key (organization_id, id)
+);
+alter table internal_apps enable row level security;
+alter table internal_apps force row level security;
+create policy service on internal_apps for all to current_user using (true) with check (true);

package/dist/packages/server/migrations/rollback/to-legacy.sql

@@ -12,6 +12,8 @@ drop view if exists public.agent_connect_agents, public.agent_connect_providers,
   public.agent_connect_teams_conversations, public.agent_connect_teams_events,
   public.agent_connect_teams_triggers, public.agent_connect_teams_runs,
   public.agent_connect_teams_spend;
+-- 0008: organizations' own apps, which 0.7.5 does not have.
+drop table agent_connect.internal_apps;
 -- 0007: app events and their triggers, which 0.7.5 does not have.
 drop table agent_connect.event_runs, agent_connect.event_triggers, agent_connect.app_events,
   agent_connect.event_subscriptions;