@assemblyline-agents/runtime 5.0.10 → 6.0.0

package/dist/connection-authorization-service.js

@@ -0,0 +1,417 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+import { randomUUID } from "node:crypto";
+import { ConnectionAuthorizationFailedError, ConnectionAuthorizationRequiredError, isConnectionAuthorizationFailedError, isConnectionAuthorizationRequiredError } from "@assemblyline-agents/core";
+import { buildOAuthChallenge, connectionPrincipalFor, connectionPrincipalKey, grantToTokenResult, isTokenExpired, normalizeAuthorization, randomUrlToken, resolveHeadersDefinition, storedGrantExpired, tokenCacheKey } from "./connection-auth-util.js";
+import { requestOAuthToken } from "./connection-oauth-client.js";
+import { CredentialBroker } from "./credential-broker.js";
+import { createConnectionAssetApi } from "./connection-assets.js";
+import { InMemoryConnectionAuthorizationSessionStore, InMemoryConnectionGrantStore } from "./connection-stores.js";
+import { isLiveConnection, liveDefinitionUrl, timestamp } from "./connection-util.js";
+/** Owns grants, authorization sessions, token caching, and OAuth exchange. */
+export class ConnectionAuthorizationService {
+    options;
+    resolveConnection;
+    authorizationIntent = new AsyncLocalStorage();
+    pendingAuthorizationCreations = new Map();
+    tokenCache = new Map();
+    grantStore;
+    sessionStore;
+    executionContext = new AsyncLocalStorage();
+    credentialBroker;
+    constructor(options, resolveConnection) {
+        this.options = options;
+        this.resolveConnection = resolveConnection;
+        this.grantStore = options.grantStore ?? new InMemoryConnectionGrantStore();
+        this.credentialBroker = options.credentialBroker ?? new CredentialBroker({
+            store: { resolve: async () => undefined },
+            grantStore: this.grantStore
+        });
+        this.sessionStore = options.authorizationSessionStore ?? new InMemoryConnectionAuthorizationSessionStore();
+    }
+    runWithIntent(intent, work) {
+        return this.authorizationIntent.run(intent, work);
+    }
+    async withExecutionContext(execution, work) {
+        return execution ? this.executionContext.run(execution, work) : work();
+    }
+    currentExecutionContext() {
+        return this.executionContext.getStore();
+    }
+    resolverContext(connection, session = this.options.session) {
+        const factory = this.factoryContext(connection, session);
+        return {
+            config: factory.config,
+            credentials: factory.credentials,
+            fetch: this.options.fetch,
+            session
+        };
+    }
+    factoryContext(connection, session = this.options.session) {
+        const principal = this.connectionPrincipal(connection, session);
+        const audience = this.options.audience ?? { private: true };
+        const identity = () => {
+            const runId = this.executionContext.getStore()?.runId ?? this.options.runId;
+            return { principal, audience, ...(runId ? { runId } : {}) };
+        };
+        const configNames = [...(connection.requiredConfig ?? []), ...(connection.optionalConfig ?? [])];
+        return {
+            connectionName: connection.name,
+            agentId: this.options.agentId ?? "",
+            principal,
+            audience,
+            config: Object.freeze(Object.fromEntries(configNames.map((name) => [name, this.options.config?.[name]]))),
+            credentials: this.credentialBroker.scoped(connection, identity),
+            ...(this.options.blob && (this.executionContext.getStore()?.runId ?? this.options.runId) ? {
+                assets: createConnectionAssetApi({
+                    blob: this.options.blob,
+                    runId: (this.executionContext.getStore()?.runId ?? this.options.runId),
+                    sourceConnection: connection.name
+                })
+            } : {}),
+            fetch: this.options.fetch,
+            session
+        };
+    }
+    connectionPrincipal(connection, session = this.options.session) {
+        if (connection.subject !== "user")
+            return { type: "app" };
+        if (session.principal?.type === "user")
+            return session.principal;
+        if (session.userId)
+            return { type: "user", id: session.userId, issuer: session.channel ?? "assembly-line" };
+        throw new Error(`Connection ${connection.name} requires an authenticated user principal.`);
+    }
+    async resolveHeaders(connection, definition) {
+        const headers = {};
+        const context = this.resolverContext(connection);
+        if (definition.auth !== undefined) {
+            const token = await this.resolveToken(connection, definition.auth, context, liveDefinitionUrl(definition));
+            const tokenType = token.tokenType?.trim() || "Bearer";
+            headers.Authorization = `${tokenType} ${token.token}`;
+        }
+        if (definition.headers !== undefined) {
+            const resolved = await resolveHeadersDefinition(definition.headers, context);
+            for (const [key, value] of Object.entries(resolved)) {
+                if (key.toLowerCase() === "authorization" && headers.Authorization !== undefined) {
+                    throw new Error(`Connection ${connection.name} headers must not include Authorization when auth is configured.`);
+                }
+                headers[key] = value;
+            }
+        }
+        return headers;
+    }
+    async beginAuthorization(connectionName) {
+        return this.runWithIntent("authorize", async () => {
+            const compiled = this.options.connections.find((connection) => connection.name === connectionName);
+            if (!compiled || !isLiveConnection(compiled))
+                return { status: "unavailable", reason: "unknown_connection" };
+            let definition;
+            try {
+                definition = (await this.resolveConnection(compiled)).definition;
+            }
+            catch (error) {
+                return { status: "unavailable", reason: error instanceof Error ? error.message : String(error) };
+            }
+            if (!definition.auth)
+                return { status: "unavailable", reason: "connection_has_no_auth" };
+            try {
+                await this.resolveToken(compiled, definition.auth, this.resolverContext(compiled), liveDefinitionUrl(definition));
+                return { status: "connected" };
+            }
+            catch (error) {
+                if (isConnectionAuthorizationRequiredError(error)) {
+                    const url = typeof error.challenge?.url === "string" ? error.challenge.url : undefined;
+                    return url ? { status: "authorize", url } : { status: "unavailable", reason: error.reason };
+                }
+                return { status: "unavailable", reason: error instanceof Error ? error.message : String(error) };
+            }
+        });
+    }
+    async resolveToken(connection, auth, context, resolvedUrl) {
+        const authorization = await normalizeAuthorization(auth, context);
+        const principal = connectionPrincipalFor(connection, authorization, context);
+        const principalKey = connectionPrincipalKey(principal);
+        const cacheKey = tokenCacheKey(connection.name, principal);
+        const cached = this.tokenCache.get(cacheKey);
+        if (cached && !isTokenExpired(cached.token))
+            return cached.token;
+        const connectionContext = { url: resolvedUrl ?? connection.url ?? "" };
+        if (authorization.kind === "oauth" || authorization.kind === "interactive") {
+            const stored = await this.grantStore.getGrant(connection.name, principalKey);
+            if (stored && !storedGrantExpired(stored)) {
+                const token = grantToTokenResult(stored);
+                this.tokenCache.set(cacheKey, { token, authorization, principal, connection: connectionContext });
+                return token;
+            }
+            if (stored?.refreshToken && authorization.kind === "oauth" && authorization.oauth) {
+                const refreshed = await this.refreshOAuthGrant(authorization.oauth, connection.name, principal, principalKey, stored.refreshToken);
+                if (!refreshed.credential && stored.credential)
+                    refreshed.credential = stored.credential;
+                this.tokenCache.set(cacheKey, { token: refreshed, authorization, principal, connection: connectionContext });
+                return refreshed;
+            }
+            if (authorization.kind === "oauth") {
+                throw await this.createAuthorizationRequiredError(connection, authorization, principal, principalKey, context, connectionContext);
+            }
+        }
+        try {
+            const token = await authorization.getToken({ principal, connection: connectionContext });
+            this.tokenCache.set(cacheKey, { token, authorization, principal, connection: connectionContext });
+            return token;
+        }
+        catch (error) {
+            if (isConnectionAuthorizationRequiredError(error) && authorization.kind === "interactive") {
+                if (this.authorizationIntent.getStore() === "discover") {
+                    throw this.authorizationRequiredWithoutSession(connection, error);
+                }
+                throw await this.createAuthorizationRequiredError(connection, authorization, principal, principalKey, context, connectionContext, error);
+            }
+            if (isConnectionAuthorizationRequiredError(error) || isConnectionAuthorizationFailedError(error))
+                throw error;
+            throw error;
+        }
+    }
+    async storeToken(connection, principal, principalKey, token) {
+        await this.saveGrantFromToken(connection.name, principal, principalKey, token);
+        this.tokenCache.delete(tokenCacheKey(connection.name, principal));
+    }
+    async evictToken(connection, definition) {
+        if (!definition.auth)
+            return;
+        const context = this.resolverContext(connection);
+        const authorization = await normalizeAuthorization(definition.auth, context);
+        const principal = connectionPrincipalFor(connection, authorization, context);
+        const cacheKey = tokenCacheKey(connection.name, principal);
+        const principalKey = connectionPrincipalKey(principal);
+        const cached = this.tokenCache.get(cacheKey);
+        this.tokenCache.delete(cacheKey);
+        if (cached?.authorization.kind === "oauth" || authorization.kind === "oauth") {
+            await this.grantStore.deleteGrant(connection.name, principalKey);
+        }
+        await (cached?.authorization ?? authorization).evict?.({ principal, connection: { url: connection.url ?? "" } });
+    }
+    async completeAuthorization(callback) {
+        const state = callback.params.state;
+        if (!state)
+            throw new ConnectionAuthorizationFailedError("unknown", { reason: "missing_state", retryable: false });
+        const session = await this.sessionStore.getSessionByState(state);
+        if (!session)
+            throw new ConnectionAuthorizationFailedError("unknown", { reason: "unknown_state", retryable: false });
+        if (session.status === "completed")
+            return session;
+        if (session.expiresAt <= Date.now()) {
+            await this.sessionStore.updateSession(session.id, { status: "expired" });
+            throw new ConnectionAuthorizationFailedError(session.connectionName, { reason: "authorization_expired", retryable: true });
+        }
+        if (callback.params.error) {
+            await this.sessionStore.updateSession(session.id, { status: "denied" });
+            throw new ConnectionAuthorizationFailedError(session.connectionName, {
+                reason: callback.params.error,
+                retryable: true,
+                message: callback.params.error_description ?? `Connection ${session.connectionName} authorization was denied.`
+            });
+        }
+        const compiled = this.options.connections.find((connection) => connection.name === session.connectionName);
+        if (!compiled || !isLiveConnection(compiled)) {
+            throw new ConnectionAuthorizationFailedError(session.connectionName, { reason: "connection_not_found", retryable: false });
+        }
+        const resolved = await this.resolveConnection(compiled, session.session);
+        if (!resolved.definition.auth) {
+            throw new ConnectionAuthorizationFailedError(session.connectionName, { reason: "auth_not_configured", retryable: false });
+        }
+        const authorization = await normalizeAuthorization(resolved.definition.auth, this.resolverContext(compiled, session.session));
+        const connectionContext = { url: compiled.url ?? "" };
+        let token;
+        if (authorization.kind === "oauth" && authorization.oauth) {
+            token = await this.exchangeOAuthAuthorizationCode(authorization.oauth, session, callback);
+        }
+        else if (authorization.completeAuthorization) {
+            const completeOptions = {
+                principal: session.principal,
+                connection: connectionContext,
+                callbackUrl: session.callbackUrl,
+                callback
+            };
+            if (session.resume !== undefined)
+                completeOptions.resume = session.resume;
+            token = await authorization.completeAuthorization(completeOptions);
+        }
+        else {
+            throw new ConnectionAuthorizationFailedError(session.connectionName, { reason: "callback_not_supported", retryable: false });
+        }
+        await this.saveGrantFromToken(compiled.name, session.principal, session.principalKey, token);
+        return this.sessionStore.updateSession(session.id, { status: "completed" });
+    }
+    getAuthorizationSession(id) {
+        return this.sessionStore.getSession(id);
+    }
+    updateAuthorizationSession(id, patch) {
+        return this.sessionStore.updateSession(id, patch);
+    }
+    async createAuthorizationRequiredError(connection, authorization, principal, principalKey, context, connectionContext, cause) {
+        if (this.authorizationIntent.getStore() === "discover") {
+            return this.authorizationRequiredWithoutSession(connection, cause);
+        }
+        const key = `${connection.name}\0${principalKey}`;
+        const pending = this.pendingAuthorizationCreations.get(key);
+        if (pending)
+            return pending;
+        const creation = this.createAuthorizationRequiredErrorWithContext(connection, authorization, principal, principalKey, context, connectionContext, cause);
+        this.pendingAuthorizationCreations.set(key, creation);
+        try {
+            return await creation;
+        }
+        finally {
+            if (this.pendingAuthorizationCreations.get(key) === creation) {
+                this.pendingAuthorizationCreations.delete(key);
+            }
+        }
+    }
+    authorizationRequiredWithoutSession(connection, cause) {
+        const options = {
+            reason: cause?.reason ?? "authorization_required"
+        };
+        if (cause?.message)
+            options.message = cause.message;
+        if (cause?.challenge)
+            options.challenge = cause.challenge;
+        return new ConnectionAuthorizationRequiredError(connection.name, options);
+    }
+    async createAuthorizationRequiredErrorWithContext(connection, authorization, principal, principalKey, context, connectionContext, cause) {
+        await this.sessionStore.deleteExpiredSessions?.(Date.now());
+        const existing = await this.sessionStore.findPendingSession(connection.name, principalKey);
+        if (existing) {
+            const options = {
+                reason: cause?.reason ?? "authorization_required",
+                challenge: existing.challenge
+            };
+            if (cause?.message)
+                options.message = cause.message;
+            return new ConnectionAuthorizationRequiredError(connection.name, options);
+        }
+        const callbackUrl = this.callbackUrl();
+        const id = randomUUID();
+        const state = randomUrlToken();
+        const expiresAt = Date.now() + 10 * 60_000;
+        let challenge;
+        let resume;
+        let codeVerifier;
+        if (authorization.kind === "oauth" && authorization.oauth) {
+            codeVerifier = randomUrlToken(48);
+            const oauthChallengeOptions = {
+                state,
+                callbackUrl,
+                codeVerifier
+            };
+            if (authorization.displayName)
+                oauthChallengeOptions.displayName = authorization.displayName;
+            challenge = buildOAuthChallenge(authorization.oauth, oauthChallengeOptions);
+        }
+        else if (authorization.startAuthorization) {
+            const started = await authorization.startAuthorization({ principal, connection: connectionContext, callbackUrl, state });
+            challenge = started.challenge;
+            resume = started.resume;
+            if (!challenge.url && cause?.challenge?.url)
+                challenge.url = cause.challenge.url;
+            if (!challenge.instructions && cause?.challenge?.instructions)
+                challenge.instructions = cause.challenge.instructions;
+        }
+        else {
+            challenge = cause?.challenge ?? { instructions: `Authorize connection ${connection.name} and retry.` };
+            if (authorization.displayName)
+                challenge.displayName = authorization.displayName;
+        }
+        challenge.sessionId = id;
+        challenge.state = state;
+        challenge.expiresAt = expiresAt;
+        const session = {
+            id,
+            state,
+            connectionName: connection.name,
+            principal,
+            principalKey,
+            session: context.session,
+            callbackUrl,
+            challenge,
+            status: "pending",
+            expiresAt,
+            createdAt: timestamp(),
+            updatedAt: timestamp()
+        };
+        if (codeVerifier)
+            session.codeVerifier = codeVerifier;
+        if (resume !== undefined)
+            session.resume = resume;
+        const execution = this.executionContext.getStore();
+        const runId = execution?.runId ?? this.options.runId;
+        if (runId)
+            session.runId = runId;
+        if (execution?.toolCallId)
+            session.toolCallId = execution.toolCallId;
+        if (execution?.toolName)
+            session.toolName = execution.toolName;
+        await this.sessionStore.createSession(session);
+        const errorOptions = {
+            reason: cause?.reason ?? "authorization_required",
+            challenge
+        };
+        if (cause?.message)
+            errorOptions.message = cause.message;
+        return new ConnectionAuthorizationRequiredError(connection.name, errorOptions);
+    }
+    callbackUrl() {
+        const base = (this.options.callbackBaseUrl ?? this.options.config?.ASSEMBLY_LINE_PUBLIC_URL ?? "http://localhost")
+            .replace(/\/+$/u, "");
+        return `${base}/assembly-line/connections/callback`;
+    }
+    async exchangeOAuthAuthorizationCode(oauth, session, callback) {
+        const code = callback.params.code;
+        if (!code) {
+            throw new ConnectionAuthorizationFailedError(session.connectionName, { reason: "missing_code", retryable: true });
+        }
+        return requestOAuthToken(this.options.fetch, oauth, {
+            grant_type: "authorization_code",
+            code,
+            redirect_uri: oauth.redirectUri ?? session.callbackUrl,
+            code_verifier: session.codeVerifier
+        });
+    }
+    async refreshOAuthGrant(oauth, connectionName, principal, principalKey, refreshToken) {
+        const token = await requestOAuthToken(this.options.fetch, oauth, {
+            grant_type: "refresh_token",
+            refresh_token: refreshToken
+        });
+        if (!token.refreshToken)
+            token.refreshToken = refreshToken;
+        await this.saveGrantFromToken(connectionName, principal, principalKey, token);
+        return token;
+    }
+    async saveGrantFromToken(connectionName, principal, principalKey, token) {
+        const now = timestamp();
+        const existing = await this.grantStore.getGrant(connectionName, principalKey);
+        const grant = {
+            connectionName,
+            principalKey,
+            principal,
+            token: token.token,
+            createdAt: existing?.createdAt ?? now,
+            updatedAt: now
+        };
+        if (token.refreshToken)
+            grant.refreshToken = token.refreshToken;
+        else if (existing?.refreshToken)
+            grant.refreshToken = existing.refreshToken;
+        if (token.tokenType)
+            grant.tokenType = token.tokenType;
+        if (token.scopes)
+            grant.scopes = token.scopes;
+        if (token.expiresAt)
+            grant.expiresAt = token.expiresAt;
+        if (token.credential)
+            grant.credential = token.credential;
+        else if (existing?.credential)
+            grant.credential = existing.credential;
+        await this.grantStore.saveGrant(grant);
+    }
+}
+//# sourceMappingURL=connection-authorization-service.js.map

package/dist/connection-authorization-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection-authorization-service.js","sourceRoot":"","sources":["../src/connection-authorization-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,kCAAkC,EAClC,oCAAoC,EACpC,oCAAoC,EACpC,sCAAsC,EAWvC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,cAAc,EACd,sBAAsB,EACtB,cAAc,EACd,wBAAwB,EACxB,kBAAkB,EAClB,aAAa,EAEd,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEjE,OAAO,EAAE,gBAAgB,EAAiC,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EACL,2CAA2C,EAC3C,4BAA4B,EAK7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAStF,8EAA8E;AAC9E,MAAM,OAAO,8BAA8B;IAUtB;IACA;IAVF,mBAAmB,GAAG,IAAI,iBAAiB,EAA4B,CAAC;IACxE,6BAA6B,GAAG,IAAI,GAAG,EAAyD,CAAC;IACjG,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;IAChD,UAAU,CAAuB;IACjC,YAAY,CAAsC;IAClD,gBAAgB,GAAG,IAAI,iBAAiB,EAA8B,CAAC;IAC/E,gBAAgB,CAAmB;IAE5C,YACmB,OAAiC,EACjC,iBAGe;QAJf,YAAO,GAAP,OAAO,CAA0B;QACjC,sBAAiB,GAAjB,iBAAiB,CAGF;QAEhC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,4BAA4B,EAAE,CAAC;QAC3E,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,IAAI,gBAAgB,CAAC;YACvE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,EAAE;YACzC,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,yBAAyB,IAAI,IAAI,2CAA2C,EAAE,CAAC;IAC7G,CAAC;IAED,aAAa,CAAI,MAAgC,EAAE,IAAsB;QACvE,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAI,SAAiD,EAAE,IAAsB;QACrG,OAAO,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzE,CAAC;IAED,uBAAuB;QACrB,OAAO,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC;IAC1C,CAAC;IAED,eAAe,CACb,UAA8B,EAC9B,UAAgD,IAAI,CAAC,OAAO,CAAC,OAAO;QAEpE,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACzD,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;YACzB,OAAO;SACR,CAAC;IACJ,CAAC;IAED,cAAc,CACZ,UAA8B,EAC9B,UAAgD,IAAI,CAAC,OAAO,CAAC,OAAO;QAEpE,MAAM,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC5D,MAAM,QAAQ,GAAG,GAA6B,EAAE;YAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YAC5E,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC9D,CAAC,CAAC;QACF,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC;QACjG,OAAO;YACL,cAAc,EAAE,UAAU,CAAC,IAAI;YAC/B,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE;YACnC,SAAS;YACT,QAAQ;YACR,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACzG,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC;YAC/D,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACzF,MAAM,EAAE,wBAAwB,CAAC;oBAC/B,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;oBACvB,KAAK,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,EAAE,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAE;oBACvE,gBAAgB,EAAE,UAAU,CAAC,IAAI;iBAClC,CAAC;aACH,CAAC,CAAC,CAAC,EAAE,CAAC;YACP,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;YACzB,OAAO;SACR,CAAC;IACJ,CAAC;IAED,mBAAmB,CACjB,UAA8B,EAC9B,UAAgD,IAAI,CAAC,OAAO,CAAC,OAAO;QAEpE,IAAI,UAAU,CAAC,OAAO,KAAK,MAAM;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAC1D,IAAI,OAAO,CAAC,SAAS,EAAE,IAAI,KAAK,MAAM;YAAE,OAAO,OAAO,CAAC,SAAS,CAAC;QACjE,IAAI,OAAO,CAAC,MAAM;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,IAAI,eAAe,EAAE,CAAC;QAC5G,MAAM,IAAI,KAAK,CAAC,cAAc,UAAU,CAAC,IAAI,4CAA4C,CAAC,CAAC;IAC7F,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,UAA8B,EAC9B,UAAoC;QAEpC,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QACjD,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;YAC3G,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,QAAQ,CAAC;YACtD,OAAO,CAAC,aAAa,GAAG,GAAG,SAAS,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QACxD,CAAC;QACD,IAAI,UAAU,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7E,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACpD,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,eAAe,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;oBACjF,MAAM,IAAI,KAAK,CAAC,cAAc,UAAU,CAAC,IAAI,kEAAkE,CAAC,CAAC;gBACnH,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACvB,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,cAAsB;QAG7C,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE;YAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;YACnG,IAAI,CAAC,QAAQ,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;YAC7G,IAAI,UAAoC,CAAC;YACzC,IAAI,CAAC;gBACH,UAAU,GAAG,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;YACnE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACnG,CAAC;YACD,IAAI,CAAC,UAAU,CAAC,IAAI;gBAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;YACzF,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;gBAClH,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;YACjC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,sCAAsC,CAAC,KAAK,CAAC,EAAE,CAAC;oBAClD,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,SAAS,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;oBACvF,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC9F,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACnG,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,UAA8B,EAC9B,IAA8B,EAC9B,OAAkC,EAClC,WAAoB;QAEpB,MAAM,aAAa,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClE,MAAM,SAAS,GAAG,sBAAsB,CAAC,UAAU,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;QAC7E,MAAM,YAAY,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,aAAa,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC;QACjE,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,WAAW,IAAI,UAAU,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC;QACvE,IAAI,aAAa,CAAC,IAAI,KAAK,OAAO,IAAI,aAAa,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAC3E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YAC7E,IAAI,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1C,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;gBACzC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC,CAAC;gBAClG,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IAAI,MAAM,EAAE,YAAY,IAAI,aAAa,CAAC,IAAI,KAAK,OAAO,IAAI,aAAa,CAAC,KAAK,EAAE,CAAC;gBAClF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAC5C,aAAa,CAAC,KAAK,EACnB,UAAU,CAAC,IAAI,EACf,SAAS,EACT,YAAY,EACZ,MAAM,CAAC,YAAY,CACpB,CAAC;gBACF,IAAI,CAAC,SAAS,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU;oBAAE,SAAS,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;gBACzF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC,CAAC;gBAC7G,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,IAAI,aAAa,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBACnC,MAAM,MAAM,IAAI,CAAC,gCAAgC,CAC/C,UAAU,EACV,aAAa,EACb,SAAS,EACT,YAAY,EACZ,OAAO,EACP,iBAAiB,CAClB,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACzF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAClG,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,sCAAsC,CAAC,KAAK,CAAC,IAAI,aAAa,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBAC1F,IAAI,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,KAAK,UAAU,EAAE,CAAC;oBACvD,MAAM,IAAI,CAAC,mCAAmC,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;gBACpE,CAAC;gBACD,MAAM,MAAM,IAAI,CAAC,gCAAgC,CAC/C,UAAU,EACV,aAAa,EACb,SAAS,EACT,YAAY,EACZ,OAAO,EACP,iBAAiB,EACjB,KAAK,CACN,CAAC;YACJ,CAAC;YACD,IAAI,sCAAsC,CAAC,KAAK,CAAC,IAAI,oCAAoC,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC9G,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CACd,UAA8B,EAC9B,SAA8B,EAC9B,YAAoB,EACpB,KAAkB;QAElB,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;QAC/E,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,UAA8B,EAAE,UAAoC;QACnF,IAAI,CAAC,UAAU,CAAC,IAAI;YAAE,OAAO;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,aAAa,GAAG,MAAM,sBAAsB,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC7E,MAAM,SAAS,GAAG,sBAAsB,CAAC,UAAU,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;QAC7E,MAAM,QAAQ,GAAG,aAAa,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC3D,MAAM,YAAY,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,MAAM,EAAE,aAAa,CAAC,IAAI,KAAK,OAAO,IAAI,aAAa,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7E,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,CAAC,MAAM,EAAE,aAAa,IAAI,aAAa,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACnH,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,QAI3B;QACC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;QACpC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,kCAAkC,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACnH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACjE,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,kCAAkC,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACrH,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO,OAAO,CAAC;QACnD,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACpC,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YACzE,MAAM,IAAI,kCAAkC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7H,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YACxE,MAAM,IAAI,kCAAkC,CAAC,OAAO,CAAC,cAAc,EAAE;gBACnE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK;gBAC7B,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,iBAAiB,IAAI,cAAc,OAAO,CAAC,cAAc,4BAA4B;aAC/G,CAAC,CAAC;QACL,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;QAC3G,IAAI,CAAC,QAAQ,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,kCAAkC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7H,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACzE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,kCAAkC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5H,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,sBAAsB,CAChD,QAAQ,CAAC,UAAU,CAAC,IAAI,EACxB,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAChD,CAAC;QACF,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC;QACtD,IAAI,KAAkB,CAAC;QACvB,IAAI,aAAa,CAAC,IAAI,KAAK,OAAO,IAAI,aAAa,CAAC,KAAK,EAAE,CAAC;YAC1D,KAAK,GAAG,MAAM,IAAI,CAAC,8BAA8B,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC5F,CAAC;aAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,CAAC;YAC/C,MAAM,eAAe,GAMjB;gBACF,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,UAAU,EAAE,iBAAiB;gBAC7B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,QAAQ;aACT,CAAC;YACF,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;gBAAE,eAAe,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAC1E,KAAK,GAAG,MAAM,aAAa,CAAC,qBAAqB,CAAC,eAAe,CAAC,CAAC;QACrE,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,kCAAkC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,wBAAwB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/H,CAAC;QACD,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAC7F,OAAO,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,uBAAuB,CAAC,EAAU;QAChC,OAAO,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,0BAA0B,CACxB,EAAU,EACV,KAA8E;QAE9E,OAAO,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;IAEO,KAAK,CAAC,gCAAgC,CAC5C,UAA8B,EAC9B,aAAsC,EACtC,SAA8B,EAC9B,YAAoB,EACpB,OAAkC,EAClC,iBAAiD,EACjD,KAA4C;QAE5C,IAAI,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,KAAK,UAAU,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC,mCAAmC,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5D,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,2CAA2C,CAC/D,UAAU,EACV,aAAa,EACb,SAAS,EACT,YAAY,EACZ,OAAO,EACP,iBAAiB,EACjB,KAAK,CACN,CAAC;QACF,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC;YACH,OAAO,MAAM,QAAQ,CAAC;QACxB,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC7D,IAAI,CAAC,6BAA6B,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IAEO,mCAAmC,CACzC,UAA8B,EAC9B,KAA4C;QAE5C,MAAM,OAAO,GAAuF;YAClG,MAAM,EAAE,KAAK,EAAE,MAAM,IAAI,wBAAwB;SAClD,CAAC;QACF,IAAI,KAAK,EAAE,OAAO;YAAE,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QACpD,IAAI,KAAK,EAAE,SAAS;YAAE,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QAC1D,OAAO,IAAI,oCAAoC,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5E,CAAC;IAEO,KAAK,CAAC,2CAA2C,CACvD,UAA8B,EAC9B,aAAsC,EACtC,SAA8B,EAC9B,YAAoB,EACpB,OAAkC,EAClC,iBAAiD,EACjD,KAA4C;QAE5C,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAC3F,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,OAAO,GAAsF;gBACjG,MAAM,EAAE,KAAK,EAAE,MAAM,IAAI,wBAAwB;gBACjD,SAAS,EAAE,QAAQ,CAAC,SAAS;aAC9B,CAAC;YACF,IAAI,KAAK,EAAE,OAAO;gBAAE,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YACpD,OAAO,IAAI,oCAAoC,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;QAC3C,IAAI,SAA2C,CAAC;QAChD,IAAI,MAA6B,CAAC;QAClC,IAAI,YAAgC,CAAC;QACrC,IAAI,aAAa,CAAC,IAAI,KAAK,OAAO,IAAI,aAAa,CAAC,KAAK,EAAE,CAAC;YAC1D,YAAY,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;YAClC,MAAM,qBAAqB,GAAuF;gBAChH,KAAK;gBACL,WAAW;gBACX,YAAY;aACb,CAAC;YACF,IAAI,aAAa,CAAC,WAAW;gBAAE,qBAAqB,CAAC,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;YAC7F,SAAS,GAAG,mBAAmB,CAAC,aAAa,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;QAC9E,CAAC;aAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,iBAAiB,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;YACzH,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;YAC9B,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YACxB,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,KAAK,EAAE,SAAS,EAAE,GAAG;gBAAE,SAAS,CAAC,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC;YACjF,IAAI,CAAC,SAAS,CAAC,YAAY,IAAI,KAAK,EAAE,SAAS,EAAE,YAAY;gBAAE,SAAS,CAAC,YAAY,GAAG,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC;QACvH,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,KAAK,EAAE,SAAS,IAAI,EAAE,YAAY,EAAE,wBAAwB,UAAU,CAAC,IAAI,aAAa,EAAE,CAAC;YACvG,IAAI,aAAa,CAAC,WAAW;gBAAE,SAAS,CAAC,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;QACnF,CAAC;QACD,SAAS,CAAC,SAAS,GAAG,EAAE,CAAC;QACzB,SAAS,CAAC,KAAK,GAAG,KAAK,CAAC;QACxB,SAAS,CAAC,SAAS,GAAG,SAAS,CAAC;QAChC,MAAM,OAAO,GAAyC;YACpD,EAAE;YACF,KAAK;YACL,cAAc,EAAE,UAAU,CAAC,IAAI;YAC/B,SAAS;YACT,YAAY;YACZ,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,WAAW;YACX,SAAS;YACT,MAAM,EAAE,SAAS;YACjB,SAAS;YACT,SAAS,EAAE,SAAS,EAAE;YACtB,SAAS,EAAE,SAAS,EAAE;SACvB,CAAC;QACF,IAAI,YAAY;YAAE,OAAO,CAAC,YAAY,GAAG,YAAY,CAAC;QACtD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,SAAS,EAAE,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QACrD,IAAI,KAAK;YAAE,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;QACjC,IAAI,SAAS,EAAE,UAAU;YAAE,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC;QACrE,IAAI,SAAS,EAAE,QAAQ;YAAE,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;QAC/D,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,YAAY,GAAsF;YACtG,MAAM,EAAE,KAAK,EAAE,MAAM,IAAI,wBAAwB;YACjD,SAAS;SACV,CAAC;QACF,IAAI,KAAK,EAAE,OAAO;YAAE,YAAY,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QACzD,OAAO,IAAI,oCAAoC,CAAC,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACjF,CAAC;IAEO,WAAW;QACjB,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,wBAAwB,IAAI,kBAAkB,CAAC;aAC/G,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACxB,OAAO,GAAG,IAAI,qCAAqC,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,8BAA8B,CAC1C,KAAmC,EACnC,OAA6C,EAC7C,QAA2E;QAE3E,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;QAClC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,kCAAkC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpH,CAAC;QACD,OAAO,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE;YAClD,UAAU,EAAE,oBAAoB;YAChC,IAAI;YACJ,YAAY,EAAE,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,WAAW;YACtD,aAAa,EAAE,OAAO,CAAC,YAAY;SACpC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,KAAmC,EACnC,cAAsB,EACtB,SAA8B,EAC9B,YAAoB,EACpB,YAAoB;QAEpB,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE;YAC/D,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,YAAY;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,YAAY;YAAE,KAAK,CAAC,YAAY,GAAG,YAAY,CAAC;QAC3D,MAAM,IAAI,CAAC,kBAAkB,CAAC,cAAc,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;QAC9E,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,cAAsB,EACtB,SAA8B,EAC9B,YAAoB,EACpB,KAAkB;QAElB,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;QAC9E,MAAM,KAAK,GAA0B;YACnC,cAAc;YACd,YAAY;YACZ,SAAS;YACT,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,GAAG;YACrC,SAAS,EAAE,GAAG;SACf,CAAC;QACF,IAAI,KAAK,CAAC,YAAY;YAAE,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;aAC3D,IAAI,QAAQ,EAAE,YAAY;YAAE,KAAK,CAAC,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC;QAC5E,IAAI,KAAK,CAAC,SAAS;YAAE,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QACvD,IAAI,KAAK,CAAC,MAAM;YAAE,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC9C,IAAI,KAAK,CAAC,SAAS;YAAE,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QACvD,IAAI,KAAK,CAAC,UAAU;YAAE,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;aACrD,IAAI,QAAQ,EAAE,UAAU;YAAE,KAAK,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;QACtE,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;CACF"}

package/dist/connection-credential-materialization.d.ts

@@ -0,0 +1,23 @@
+import { type CompiledConnection, type ConnectionAuthDefinition, type ConnectionResolverContext, type JsonObject, type TokenResult } from "@assemblyline-agents/core";
+import type { ResolvedConnection } from "./connection-clients.js";
+import { type ConnectionCredentialMaterialization, type CredentialMaterializationRun, type RuntimeConnectionOptions } from "./connection-runtime-types.js";
+import type { RuntimeConnectionRegistry } from "./connections.js";
+export declare function connectionAuthorizationPrompt(store: import("./connection-stores.js").ConnectionAuthorizationSessionStore, authorizationSessionId: string | undefined, baseResponse: string): Promise<string>;
+/** Project declared connection credentials into a freshly acquired sandbox. */
+export declare function materializeConnectionCredentialsIntoSandbox(run: {
+    id: string;
+    input: Record<string, unknown>;
+}, registry: RuntimeConnectionRegistry, sandbox: {
+    root: string;
+    writeFile(path: string, contents: string): unknown;
+    shell(command: string): unknown;
+}, appendEvent: (eventType: string, payload: JsonObject) => Promise<unknown>): Promise<void>;
+interface CredentialMaterializationDependencies {
+    toolAllowed(connection: CompiledConnection): boolean;
+    resolveConnection(connection: CompiledConnection): Promise<ResolvedConnection>;
+    resolveToken(connection: CompiledConnection, auth: ConnectionAuthDefinition, context: ConnectionResolverContext, resolvedUrl?: string): Promise<TokenResult>;
+    resolverContext(connection: CompiledConnection): ConnectionResolverContext;
+}
+export declare function materializeCredentialsWithContext(options: RuntimeConnectionOptions, run: CredentialMaterializationRun | undefined, dependencies: CredentialMaterializationDependencies): Promise<ConnectionCredentialMaterialization>;
+export {};
+//# sourceMappingURL=connection-credential-materialization.d.ts.map

package/dist/connection-credential-materialization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection-credential-materialization.d.ts","sourceRoot":"","sources":["../src/connection-credential-materialization.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,UAAU,EAEf,KAAK,WAAW,EACjB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,KAAK,EAA4B,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC5F,OAAO,EAEL,KAAK,mCAAmC,EACxC,KAAK,4BAA4B,EAEjC,KAAK,wBAAwB,EAC9B,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAKlE,wBAAsB,6BAA6B,CACjD,KAAK,EAAE,OAAO,wBAAwB,EAAE,mCAAmC,EAC3E,sBAAsB,EAAE,MAAM,GAAG,SAAS,EAC1C,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,MAAM,CAAC,CAMjB;AAED,+EAA+E;AAC/E,wBAAsB,2CAA2C,CAC/D,GAAG,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,EACnD,QAAQ,EAAE,yBAAyB,EACnC,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAAC,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,EAC9G,WAAW,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,KAAK,OAAO,CAAC,OAAO,CAAC,GACxE,OAAO,CAAC,IAAI,CAAC,CAwBf;AAED,UAAU,qCAAqC;IAC7C,WAAW,CAAC,UAAU,EAAE,kBAAkB,GAAG,OAAO,CAAC;IACrD,iBAAiB,CAAC,UAAU,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC/E,YAAY,CACV,UAAU,EAAE,kBAAkB,EAC9B,IAAI,EAAE,wBAAwB,EAC9B,OAAO,EAAE,yBAAyB,EAClC,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,WAAW,CAAC,CAAC;IACxB,eAAe,CAAC,UAAU,EAAE,kBAAkB,GAAG,yBAAyB,CAAC;CAC5E;AAED,wBAAsB,iCAAiC,CACrD,OAAO,EAAE,wBAAwB,EACjC,GAAG,EAAE,4BAA4B,GAAG,SAAS,EAC7C,YAAY,EAAE,qCAAqC,GAClD,OAAO,CAAC,mCAAmC,CAAC,CAwG9C"}