@cat-factory/integrations 0.166.21 → 0.167.0

package/dist/modules/serviceCatalog/BackstageCatalogClient.js

@@ -0,0 +1,410 @@
+import { UnavailableError, connectionFailureResult, noopLogger, redactSecrets, } from '@cat-factory/kernel';
+import { assertSafePublicUrl } from '../shared/url-guard.js';
+import { readCappedText, safeFetch } from '../shared/safe-fetch.js';
+import { API_FETCH_FIELDS, CATALOG_LIST_FIELDS, providedApiRefs, serviceIdForEntity, toServiceCatalogApi, toServiceCatalogEntry, } from './backstage-catalog.logic.js';
+import { clientCredentialsBody, mintLegacyBackstageToken, readAccessToken, requiresResolvedBearer, serviceCatalogAuthHeaders, } from './serviceCatalogAuth.js';
+// ---------------------------------------------------------------------------
+// The WIRE half of the Backstage adapter: paged reads of the Software Catalog, and the token
+// exchange the proxied deployments need. Hand-rolled on `fetch` (no vendor SDK) so it bundles
+// into a Worker isolate, exactly as the MCP OAuth client is.
+//
+// Two requests per import, never one per service. The listing runs against
+// `/entities/by-query` with a `fields` projection that leaves out the API definitions, and the
+// definitions come back from ONE batched `/entities/by-refs` per chunk of references. A
+// per-service definition fetch would be a textbook N+1 against someone else's server.
+// ---------------------------------------------------------------------------
+/** How many entities one listing page asks for. The vendor's own default ceiling is higher. */
+const PAGE_SIZE = 100;
+/** How many pages one import will walk, whatever the cap says. A stop, not a policy. */
+const MAX_PAGES = 50;
+/** How many entity references ride one batched by-refs request. */
+const REF_CHUNK = 50;
+/**
+ * How many API entities one import will resolve in total.
+ *
+ * Independent of the service cap because the two counts are independent: a 200-service estate
+ * where each component provides four interfaces is 800 entities, and the definitions are the
+ * large half of the payload. Whatever this drops stays out of the resolved map, which is what
+ * makes `fetchCatalog` count it as a skipped interface: a service never appears to publish fewer
+ * interfaces than it does without the number saying so.
+ */
+const MAX_API_REFS = 600;
+/**
+ * How many bytes one response may carry before it is refused.
+ *
+ * A ceiling on what this platform will buffer, not a claim about what a portal may send: a batched
+ * by-refs request carrying {@link REF_CHUNK} large definitions can exceed it legitimately, which is
+ * why passing it produces a refusal naming the two settings that shrink the response rather than a
+ * quietly truncated document (see `makeOversizedError`).
+ */
+const MAX_RESPONSE_BYTES = 8_000_000;
+/** Reads a Backstage Software Catalog through the platform's neutral service-catalog port. */
+export class BackstageCatalogClient {
+    options;
+    provider = 'backstage';
+    log;
+    constructor(options) {
+        this.options = options;
+        this.log = options.logger ?? noopLogger;
+    }
+    async fetchCatalog(fetchOptions) {
+        // An empty filter is REFUSED rather than sent as "no filter", which the vendor reads as the
+        // whole catalog. The write boundary substitutes a default for an empty one, so the only way to
+        // arrive here with none is a connection row whose filter could not be read, and importing an
+        // organisation's entire estate because its narrowing was lost is the one outcome worse than
+        // failing. (`probe` deliberately asks unfiltered: it wants "can I read ANY entity".)
+        if (fetchOptions.entityFilter.length === 0) {
+            throw new UnavailableError('This service-catalog connection has no entity filter, so there is nothing to import. Re-save the connection to restore its filter.', 'service_catalog_filter_missing');
+        }
+        const bearer = await this.resolveBearer();
+        const listed = await this.listEntities(fetchOptions, bearer);
+        const byRef = fetchOptions.includeApis
+            ? await this.resolveApis(listed.entities, bearer)
+            : new Map();
+        const entries = [];
+        const claimed = new Set();
+        // Every DISTINCT interface an imported service declares and this pass could not store, counted
+        // once however many components declare it. A per-declaration tally double-counts twice over: an
+        // interface provided by three components would add three, and a reference dropped by the
+        // resolver's own cap would be counted there AND here. The number is the only evidence an
+        // operator has of how much of the estate is missing, so it has to be the count of things.
+        const unresolvedApis = new Set();
+        let skippedEntries = listed.skipped;
+        for (const entity of listed.entities) {
+            const id = serviceIdForEntity(entity);
+            // Two entities slugging onto one id is a real collision (a namespaced name whose prefix
+            // collapses, a title-cased duplicate), and the first one wins rather than the last: an
+            // import has to be STABLE across passes, and "last wins" would flip the survivor whenever
+            // the portal paged them in a different order.
+            if (!id || claimed.has(id)) {
+                skippedEntries += 1;
+                continue;
+            }
+            const refs = fetchOptions.includeApis ? providedApiRefs(entity) : [];
+            const resolved = [];
+            const missing = [];
+            for (const ref of refs) {
+                const api = byRef.get(ref);
+                if (api)
+                    resolved.push(api);
+                else
+                    missing.push(ref);
+            }
+            const entry = toServiceCatalogEntry(entity, resolved);
+            if (!entry) {
+                skippedEntries += 1;
+                continue;
+            }
+            // Recorded only once the entity is ADMITTED: an entity that became no service at all is
+            // already reported as a skipped service, and counting its interfaces again would describe
+            // one loss twice.
+            for (const ref of missing)
+                unresolvedApis.add(ref);
+            claimed.add(id);
+            entries.push(entry);
+        }
+        return {
+            entries,
+            coverage: listed.coverage,
+            skippedEntries,
+            skippedApis: unresolvedApis.size,
+        };
+    }
+    async probe() {
+        try {
+            const bearer = await this.resolveBearer();
+            const page = await this.getJson(this.listUrl({ entityFilter: [] }, 1, null), bearer);
+            // An EMPTY answer is reported as a connected-but-empty success rather than a failure: the
+            // request was authorized and answered, and "this instance holds no entities the credential
+            // may read" is a different problem from "the platform cannot reach it" with a different fix.
+            return {
+                ok: true,
+                message: readItems(page).length > 0
+                    ? 'Connected: the catalog answered and returned at least one entity.'
+                    : 'Connected, but the catalog returned no entities. Check that this instance holds entities and that the credential is allowed to read them.',
+            };
+        }
+        catch (error) {
+            return connectionFailureResult(error, {
+                subject: 'the Backstage catalog API',
+                target: this.base(),
+            });
+        }
+    }
+    /**
+     * The bearer value every request in this pass carries, or null for the modes that need none.
+     *
+     * Resolved ONCE per pass, which is the whole reason it is a separate step: a legacy token has a
+     * short expiry and an OAuth2 exchange is a round trip, so minting or fetching per page would
+     * multiply both the latency and the load on someone else's identity provider by the page count.
+     */
+    async resolveBearer() {
+        const auth = this.options.auth;
+        if (!requiresResolvedBearer(auth.mode))
+            return null;
+        if (auth.mode === 'legacy-shared-secret') {
+            return mintLegacyBackstageToken(auth.sharedSecret, Math.floor(this.now() / 1000));
+        }
+        if (auth.mode !== 'oauth2-client-credentials')
+            return null;
+        assertSafePublicUrl(auth.tokenUrl, {
+            subject: 'Backstage',
+            label: 'OAuth token URL',
+            ...(this.options.urlPolicy ? { policy: this.options.urlPolicy } : {}),
+        });
+        const response = await this.fetchSafely(auth.tokenUrl, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/x-www-form-urlencoded',
+                accept: 'application/json',
+            },
+            body: clientCredentialsBody(auth),
+        });
+        if (!response.ok) {
+            throw upstream(`The identity provider refused the service-catalog client credentials (HTTP ${response.status}): ${snippet(await readSnippetBody(response))}`, 'service_catalog_unauthorized');
+        }
+        const token = readAccessToken(parseJson(await readWholeBody(response)));
+        if (!token) {
+            throw upstream('The identity provider answered the service-catalog token request without an `access_token`.', 'service_catalog_unauthorized');
+        }
+        return token;
+    }
+    /**
+     * Walk the listing until the cap, the last page, or the page ceiling.
+     *
+     * Coverage is decided HERE rather than by comparing counts afterwards, because only this loop
+     * knows WHY it stopped: a cursor still outstanding when the cap was reached is a truncation, and
+     * the same entity count with no cursor left is a complete read of a small estate.
+     */
+    async listEntities(fetchOptions, bearer) {
+        const entities = [];
+        let skipped = 0;
+        let cursor = null;
+        let truncated = false;
+        for (let page = 0; page < MAX_PAGES; page++) {
+            const remaining = fetchOptions.maxServices - entities.length;
+            if (remaining <= 0) {
+                truncated = true;
+                break;
+            }
+            const body = await this.getJson(this.listUrl(fetchOptions, Math.min(PAGE_SIZE, remaining), cursor), bearer);
+            for (const item of readItems(body)) {
+                if (item && typeof item === 'object')
+                    entities.push(item);
+                else
+                    skipped += 1;
+            }
+            cursor = readNextCursor(body);
+            if (!cursor)
+                break;
+            if (page === MAX_PAGES - 1)
+                truncated = true;
+        }
+        if (cursor)
+            truncated = true;
+        const coverage = entities.length === 0 ? 'empty' : truncated ? 'truncated' : 'complete';
+        return { entities, coverage, skipped };
+    }
+    /**
+     * Every API entity the listed components declare, in batched requests, indexed by reference.
+     *
+     * Indexed rather than returned in order, because one interface is routinely provided by several
+     * components and the portal answers a by-refs request positionally: a map is what lets the
+     * caller attach the same definition to each provider without asking for it twice.
+     *
+     * Nothing is COUNTED here, deliberately. A reference dropped by {@link MAX_API_REFS} is simply
+     * absent from the map, which is the same state as one the portal would not serve, and the caller
+     * counts both once by looking at what it could not attach.
+     */
+    async resolveApis(entities, bearer) {
+        const refs = [];
+        for (const entity of entities) {
+            for (const ref of providedApiRefs(entity)) {
+                if (refs.includes(ref))
+                    continue;
+                if (refs.length >= MAX_API_REFS)
+                    break;
+                refs.push(ref);
+            }
+            if (refs.length >= MAX_API_REFS)
+                break;
+        }
+        const byRef = new Map();
+        for (let offset = 0; offset < refs.length; offset += REF_CHUNK) {
+            const chunk = refs.slice(offset, offset + REF_CHUNK);
+            const body = await this.postJson(`${this.base()}/api/catalog/entities/by-refs`, { entityRefs: chunk, fields: [...API_FETCH_FIELDS] }, bearer);
+            // Positional against the refs we asked for: the vendor answers null for an entity that does
+            // not exist (or that this credential may not read), and reading the answer by index is what
+            // keeps a null attributed to the reference that produced it.
+            for (const [index, item] of readItems(body).entries()) {
+                const ref = chunk[index];
+                if (!ref)
+                    continue;
+                const api = item && typeof item === 'object' ? toServiceCatalogApi(item) : null;
+                if (api)
+                    byRef.set(ref, api);
+            }
+        }
+        return byRef;
+    }
+    listUrl(fetchOptions, limit, cursor) {
+        const query = new URLSearchParams();
+        // Comma-separated terms are the vendor's AND, and one `filter` parameter is what keeps this an
+        // intersection: repeating the parameter would make the terms a UNION and silently widen an
+        // operator's narrowing into the whole catalog.
+        if (fetchOptions.entityFilter.length > 0) {
+            query.set('filter', fetchOptions.entityFilter.join(','));
+        }
+        query.set('limit', String(limit));
+        query.set('fields', CATALOG_LIST_FIELDS.join(','));
+        if (cursor)
+            query.set('cursor', cursor);
+        return `${this.base()}/api/catalog/entities/by-query?${query.toString()}`;
+    }
+    base() {
+        return this.options.baseUrl.replace(/\/+$/, '');
+    }
+    now() {
+        return this.options.clock?.now() ?? Date.now();
+    }
+    async getJson(url, bearer) {
+        const response = await this.fetchSafely(url, {
+            method: 'GET',
+            headers: { accept: 'application/json', ...this.authHeaders(bearer) },
+        });
+        return this.readJson(response, url);
+    }
+    async postJson(url, body, bearer) {
+        const response = await this.fetchSafely(url, {
+            method: 'POST',
+            headers: {
+                accept: 'application/json',
+                'content-type': 'application/json',
+                ...this.authHeaders(bearer),
+            },
+            body: JSON.stringify(body),
+        });
+        return this.readJson(response, url);
+    }
+    authHeaders(bearer) {
+        return serviceCatalogAuthHeaders(this.options.auth, bearer);
+    }
+    /**
+     * `fetch` with the SSRF guard re-run on every redirect hop.
+     *
+     * The per-hop check is what a per-connection host needs and a host-pinned helper cannot give:
+     * the base URL is operator-supplied, so a permitted first host could 302 the credential-bearing
+     * request at a link-local metadata address. `safeFetch` also drops the body and the
+     * `Authorization` header on a cross-origin hop, so a portal cannot bounce the token to a
+     * different public host either.
+     */
+    fetchSafely(url, init) {
+        const assertSafe = (candidate) => assertSafePublicUrl(candidate, {
+            subject: 'Backstage',
+            label: 'catalog URL',
+            ...(this.options.urlPolicy ? { policy: this.options.urlPolicy } : {}),
+        });
+        return safeFetch(url, init, assertSafe, makeCatalogError, undefined, this.options.fetchImpl);
+    }
+    async readJson(response, url) {
+        if (!response.ok) {
+            const reason = response.status === 401 || response.status === 403
+                ? 'service_catalog_unauthorized'
+                : 'service_catalog_unreachable';
+            // The PATHNAME only: a catalog URL carries the filter and the cursor, and a cursor is an
+            // opaque vendor token that has no business in a log line or an operator-facing message.
+            this.log.warn('serviceCatalog.backstage.requestFailed', {
+                status: response.status,
+                path: pathOf(url),
+            });
+            throw upstream(`The Backstage catalog answered HTTP ${response.status}: ${snippet(await readSnippetBody(response))}`, reason);
+        }
+        const parsed = parseJson(await readWholeBody(response));
+        if (parsed === null) {
+            throw upstream('The Backstage catalog answered with a body that is not JSON.', 'service_catalog_unreachable');
+        }
+        return parsed;
+    }
+}
+/**
+ * The body of a SUCCESSFUL response, or a refusal naming OUR limit.
+ *
+ * The overflow THROWS here, where the error path below truncates. That asymmetry is the whole
+ * point: a truncated error snippet is still a usable excerpt, while a truncated success body is a
+ * JSON document cut mid-token, which the parser then rejects and the caller reports as "the portal
+ * answered with a body that is not JSON", blaming someone else's server for a ceiling on this
+ * side of the wire. A batched by-refs request carrying fifty definitions can genuinely exceed it,
+ * so the refusal names the two knobs that shrink the response.
+ */
+function readWholeBody(response) {
+    return readCappedText(response, MAX_RESPONSE_BYTES, makeOversizedError, true);
+}
+/** The body of a FAILED response, truncated: it is quoted as an excerpt, never parsed. */
+function readSnippetBody(response) {
+    return readCappedText(response, MAX_RESPONSE_BYTES, makeCatalogError, false);
+}
+/** The `items` array a catalog response carries, or empty when it carries none. */
+function readItems(body) {
+    const items = body.items;
+    return Array.isArray(items) ? items : [];
+}
+/** The cursor the vendor's paged listing hands back, or null on the last page. */
+function readNextCursor(body) {
+    const pageInfo = body.pageInfo;
+    const cursor = pageInfo?.nextCursor;
+    return typeof cursor === 'string' && cursor ? cursor : null;
+}
+function parseJson(text) {
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        // silent-catch-ok: the caller turns a null into a stated "not JSON" refusal that names the
+        // portal, which is strictly more useful than the parser's own column number.
+        return null;
+    }
+}
+/**
+ * A bounded, SCRUBBED excerpt of what the portal said.
+ *
+ * Scrubbed because an error body is the one response that routinely echoes the request: a proxy's
+ * 401 page can include the `Authorization` header it rejected, and this string reaches an operator
+ * message and a log field.
+ */
+function snippet(text) {
+    const cleaned = redactSecrets(text.replace(/\s+/g, ' ').trim()) ?? '';
+    if (!cleaned)
+        return '(empty response)';
+    return cleaned.length > 300 ? `${cleaned.slice(0, 300)}...` : cleaned;
+}
+function pathOf(url) {
+    try {
+        return new URL(url).pathname;
+    }
+    catch {
+        // silent-catch-ok: this is a log field, and an unparseable URL was already refused by the
+        // guard above; a placeholder keeps the line emitting rather than failing the request.
+        return '(unparseable)';
+    }
+}
+/**
+ * The refusal a portal failure raises: a 503 carrying the machine-readable reason, so the SPA maps
+ * it to translated copy instead of rendering the vendor's prose as the whole explanation.
+ */
+function upstream(message, reason) {
+    return new UnavailableError(message, reason);
+}
+/** The error shape `safeFetch` / `readCappedText` build for a blocked hop or an oversized body. */
+function makeCatalogError(status, message) {
+    return new UnavailableError(`Backstage catalog request failed (${status}): ${message}`, 'service_catalog_unreachable');
+}
+/**
+ * The refusal an oversized SUCCESS body raises. Its own reason, because it is the one portal
+ * failure with a remedy on this side: the operator lowers the service cap or turns off interface
+ * import, and the next pass fits. Reported as "unreachable" it would read as someone else's
+ * outage and send them to wait for it to end.
+ */
+function makeOversizedError(_status, _message) {
+    return new UnavailableError(`The Backstage catalog answered with more than ${MAX_RESPONSE_BYTES} bytes in one response, which this platform will not buffer. Lower the service cap, or turn off interface import, so the portal answers in smaller pieces.`, 'service_catalog_response_too_large');
+}
+//# sourceMappingURL=BackstageCatalogClient.js.map

package/dist/modules/serviceCatalog/BackstageCatalogClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"BackstageCatalogClient.js","sourceRoot":"","sources":["../../../src/modules/serviceCatalog/BackstageCatalogClient.ts"],"names":[],"mappings":"AAeA,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,UAAU,EACV,aAAa,GACd,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAC5D,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AACnE,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EAEnB,eAAe,EACf,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,8BAA8B,CAAA;AACrC,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,eAAe,EACf,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,yBAAyB,CAAA;AAEhC,8EAA8E;AAC9E,6FAA6F;AAC7F,8FAA8F;AAC9F,6DAA6D;AAC7D,EAAE;AACF,2EAA2E;AAC3E,+FAA+F;AAC/F,wFAAwF;AACxF,sFAAsF;AACtF,8EAA8E;AAE9E,+FAA+F;AAC/F,MAAM,SAAS,GAAG,GAAG,CAAA;AAErB,wFAAwF;AACxF,MAAM,SAAS,GAAG,EAAE,CAAA;AAEpB,mEAAmE;AACnE,MAAM,SAAS,GAAG,EAAE,CAAA;AAEpB;;;;;;;;GAQG;AACH,MAAM,YAAY,GAAG,GAAG,CAAA;AAExB;;;;;;;GAOG;AACH,MAAM,kBAAkB,GAAG,SAAS,CAAA;AAmBpC,8FAA8F;AAC9F,MAAM,OAAO,sBAAsB;IAKJ,OAAO;IAJ3B,QAAQ,GAA2B,WAAW,CAAA;IAEtC,GAAG,CAAQ;IAE5B,YAA6B,OAAsC;uBAAtC,OAAO;QAClC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,UAAU,CAAA;IACzC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,YAAwC;QACzD,4FAA4F;QAC5F,+FAA+F;QAC/F,6FAA6F;QAC7F,4FAA4F;QAC5F,qFAAqF;QACrF,IAAI,YAAY,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,gBAAgB,CACxB,oIAAoI,EACpI,gCAAgC,CACjC,CAAA;QACH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAA;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;QAC5D,MAAM,KAAK,GAAG,YAAY,CAAC,WAAW;YACpC,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC;YACjD,CAAC,CAAC,IAAI,GAAG,EAA6B,CAAA;QACxC,MAAM,OAAO,GAA0B,EAAE,CAAA;QACzC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;QACjC,+FAA+F;QAC/F,gGAAgG;QAChG,yFAAyF;QACzF,yFAAyF;QACzF,0FAA0F;QAC1F,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAA;QACxC,IAAI,cAAc,GAAG,MAAM,CAAC,OAAO,CAAA;QACnC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrC,MAAM,EAAE,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;YACrC,wFAAwF;YACxF,uFAAuF;YACvF,0FAA0F;YAC1F,8CAA8C;YAC9C,IAAI,CAAC,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC3B,cAAc,IAAI,CAAC,CAAA;gBACnB,SAAQ;YACV,CAAC;YACD,MAAM,IAAI,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YACpE,MAAM,QAAQ,GAAwB,EAAE,CAAA;YACxC,MAAM,OAAO,GAAa,EAAE,CAAA;YAC5B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBAC1B,IAAI,GAAG;oBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;;oBACtB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACxB,CAAC;YACD,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;YACrD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,cAAc,IAAI,CAAC,CAAA;gBACnB,SAAQ;YACV,CAAC;YACD,wFAAwF;YACxF,0FAA0F;YAC1F,kBAAkB;YAClB,KAAK,MAAM,GAAG,IAAI,OAAO;gBAAE,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YAClD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACf,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACrB,CAAC;QACD,OAAO;YACL,OAAO;YACP,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,cAAc;YACd,WAAW,EAAE,cAAc,CAAC,IAAI;SACjC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAA;YACzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAA;YACpF,0FAA0F;YAC1F,2FAA2F;YAC3F,6FAA6F;YAC7F,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,OAAO,EACL,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;oBACxB,CAAC,CAAC,mEAAmE;oBACrE,CAAC,CAAC,2IAA2I;aAClJ,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,uBAAuB,CAAC,KAAK,EAAE;gBACpC,OAAO,EAAE,2BAA2B;gBACpC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE;aACpB,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,aAAa;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAA;QAC9B,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QACnD,IAAI,IAAI,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;YACzC,OAAO,wBAAwB,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAA;QACnF,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,2BAA2B;YAAE,OAAO,IAAI,CAAA;QAC1D,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE;YACjC,OAAO,EAAE,WAAW;YACpB,KAAK,EAAE,iBAAiB;YACxB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtE,CAAC,CAAA;QACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE;YACrD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI,EAAE,qBAAqB,CAAC,IAAI,CAAC;SAClC,CAAC,CAAA;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,QAAQ,CACZ,8EAA8E,QAAQ,CAAC,MAAM,MAAM,OAAO,CAAC,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC,EAAE,EAC7I,8BAA8B,CAC/B,CAAA;QACH,CAAC;QACD,MAAM,KAAK,GAAG,eAAe,CAAC,SAAS,CAAC,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;QACvE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,QAAQ,CACZ,6FAA6F,EAC7F,8BAA8B,CAC/B,CAAA;QACH,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,YAAY,CACxB,YAAwC,EACxC,MAAqB;QAErB,MAAM,QAAQ,GAAsB,EAAE,CAAA;QACtC,IAAI,OAAO,GAAG,CAAC,CAAA;QACf,IAAI,MAAM,GAAkB,IAAI,CAAA;QAChC,IAAI,SAAS,GAAG,KAAK,CAAA;QACrB,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;YAC5C,MAAM,SAAS,GAAG,YAAY,CAAC,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAA;YAC5D,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;gBACnB,SAAS,GAAG,IAAI,CAAA;gBAChB,MAAK;YACP,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAC7B,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,EAClE,MAAM,CACP,CAAA;YACD,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;oBAAE,QAAQ,CAAC,IAAI,CAAC,IAAuB,CAAC,CAAA;;oBACvE,OAAO,IAAI,CAAC,CAAA;YACnB,CAAC;YACD,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAA;YAC7B,IAAI,CAAC,MAAM;gBAAE,MAAK;YAClB,IAAI,IAAI,KAAK,SAAS,GAAG,CAAC;gBAAE,SAAS,GAAG,IAAI,CAAA;QAC9C,CAAC;QACD,IAAI,MAAM;YAAE,SAAS,GAAG,IAAI,CAAA;QAC5B,MAAM,QAAQ,GACZ,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAA;QACxE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAA;IACxC,CAAC;IAED;;;;;;;;;;OAUG;IACK,KAAK,CAAC,WAAW,CACvB,QAA2B,EAC3B,MAAqB;QAErB,MAAM,IAAI,GAAa,EAAE,CAAA;QACzB,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC9B,KAAK,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1C,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,SAAQ;gBAChC,IAAI,IAAI,CAAC,MAAM,IAAI,YAAY;oBAAE,MAAK;gBACtC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAChB,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,IAAI,YAAY;gBAAE,MAAK;QACxC,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAA6B,CAAA;QAClD,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,SAAS,EAAE,CAAC;YAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;YACpD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAC9B,GAAG,IAAI,CAAC,IAAI,EAAE,+BAA+B,EAC7C,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,GAAG,gBAAgB,CAAC,EAAE,EACpD,MAAM,CACP,CAAA;YACD,4FAA4F;YAC5F,4FAA4F;YAC5F,6DAA6D;YAC7D,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;gBACtD,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAA;gBACxB,IAAI,CAAC,GAAG;oBAAE,SAAQ;gBAClB,MAAM,GAAG,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;gBAC/E,IAAI,GAAG;oBAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;YAC9B,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAEO,OAAO,CACb,YAA8D,EAC9D,KAAa,EACb,MAAqB;QAErB,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAA;QACnC,+FAA+F;QAC/F,2FAA2F;QAC3F,+CAA+C;QAC/C,IAAI,YAAY,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;QAC1D,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QACjC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;QAClD,IAAI,MAAM;YAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QACvC,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,kCAAkC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAA;IAC3E,CAAC;IAEO,IAAI;QACV,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACjD,CAAC;IAEO,GAAG;QACT,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAA;IAChD,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,MAAqB;QACtD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE;YAC3C,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE;SACrE,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;IACrC,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,GAAW,EAAE,IAAa,EAAE,MAAqB;QACtE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE;YAC3C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,kBAAkB;gBAClC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;aAC5B;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAA;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;IACrC,CAAC;IAEO,WAAW,CAAC,MAAqB;QACvC,OAAO,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC7D,CAAC;IAED;;;;;;;;OAQG;IACK,WAAW,CAAC,GAAW,EAAE,IAAiB;QAChD,MAAM,UAAU,GAAG,CAAC,SAAiB,EAAE,EAAE,CACvC,mBAAmB,CAAC,SAAS,EAAE;YAC7B,OAAO,EAAE,WAAW;YACpB,KAAK,EAAE,aAAa;YACpB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtE,CAAC,CAAA;QACJ,OAAO,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAC9F,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,QAAkB,EAAE,GAAW;QACpD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,MAAM,GACV,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;gBAChD,CAAC,CAAC,8BAA8B;gBAChC,CAAC,CAAC,6BAA6B,CAAA;YACnC,yFAAyF;YACzF,wFAAwF;YACxF,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,wCAAwC,EAAE;gBACtD,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC;aAClB,CAAC,CAAA;YACF,MAAM,QAAQ,CACZ,uCAAuC,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC,EAAE,EACrG,MAAM,CACP,CAAA;QACH,CAAC;QACD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAA;QACvD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,QAAQ,CACZ,8DAA8D,EAC9D,6BAA6B,CAC9B,CAAA;QACH,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,SAAS,aAAa,CAAC,QAAkB;IACvC,OAAO,cAAc,CAAC,QAAQ,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,IAAI,CAAC,CAAA;AAC/E,CAAC;AAED,0FAA0F;AAC1F,SAAS,eAAe,CAAC,QAAkB;IACzC,OAAO,cAAc,CAAC,QAAQ,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAA;AAC9E,CAAC;AAED,mFAAmF;AACnF,SAAS,SAAS,CAAC,IAAa;IAC9B,MAAM,KAAK,GAAI,IAA4B,CAAC,KAAK,CAAA;IACjD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;AAC1C,CAAC;AAED,kFAAkF;AAClF,SAAS,cAAc,CAAC,IAAa;IACnC,MAAM,QAAQ,GAAI,IAAgD,CAAC,QAAQ,CAAA;IAC3E,MAAM,MAAM,GAAG,QAAQ,EAAE,UAAU,CAAA;IACnC,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;AAC7D,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,2FAA2F;QAC3F,6EAA6E;QAC7E,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAA;IACrE,IAAI,CAAC,OAAO;QAAE,OAAO,kBAAkB,CAAA;IACvC,OAAO,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAA;AACvE,CAAC;AAED,SAAS,MAAM,CAAC,GAAW;IACzB,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,0FAA0F;QAC1F,sFAAsF;QACtF,OAAO,eAAe,CAAA;IACxB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,QAAQ,CAAC,OAAe,EAAE,MAAc;IAC/C,OAAO,IAAI,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;AAC9C,CAAC;AAED,mGAAmG;AACnG,SAAS,gBAAgB,CAAC,MAAc,EAAE,OAAe;IACvD,OAAO,IAAI,gBAAgB,CACzB,qCAAqC,MAAM,MAAM,OAAO,EAAE,EAC1D,6BAA6B,CAC9B,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,OAAe,EAAE,QAAgB;IAC3D,OAAO,IAAI,gBAAgB,CACzB,iDAAiD,kBAAkB,4JAA4J,EAC/N,oCAAoC,CACrC,CAAA;AACH,CAAC"}

package/dist/modules/serviceCatalog/ServiceCatalogConnectionService.d.ts

@@ -0,0 +1,85 @@
+import type { ConnectServiceCatalogInput, ConnectionTestResult, ServiceCatalogConnection } from '@cat-factory/contracts';
+import type { Clock, Logger, SecretCipher, SecretDelegate, ServiceCatalogClient, ServiceCatalogConnectionRepository, UrlSafetyPolicy } from '@cat-factory/kernel';
+/**
+ * The HKDF domain the service-catalog credential is sealed under.
+ *
+ * Its own domain rather than the documents or environments one, so a key rotation or a compromise
+ * scoped to one integration cannot open another's rows. Declared HERE, once, and imported by both
+ * runtime facades and by `SEALED_SECRET_SOURCES`: the value has to be the same in all three or a
+ * mothership-delegated unseal authenticates against a different derived key, and that drift is
+ * both silent and unrecoverable, which is not a property any copied literal should carry.
+ */
+export declare const SERVICE_CATALOG_CIPHER_INFO = "cat-factory:service-catalog";
+export interface ServiceCatalogConnectionServiceDependencies {
+    serviceCatalogConnectionRepository: ServiceCatalogConnectionRepository;
+    /** The deployment's {@link SERVICE_CATALOG_CIPHER_INFO} cipher. */
+    secretCipher: SecretCipher;
+    /** Present ONLY on a mothership-mode node, where the row was sealed under the org's key. */
+    secretDelegate?: SecretDelegate;
+    clock: Clock;
+    logger?: Logger;
+    /**
+     * The deployment's URL policy for this integration. A self-hosted portal on `.internal` or a
+     * private address is the NORMAL case, so an operator widens this rather than the integration
+     * assuming a public host; the strict default refuses one, which is the right default for a URL
+     * a workspace admin can type.
+     */
+    urlPolicy?: UrlSafetyPolicy;
+    /** Injected for tests. */
+    fetchImpl?: typeof fetch;
+}
+export declare class ServiceCatalogConnectionService {
+    private readonly deps;
+    private readonly log;
+    private readonly orgSecrets;
+    constructor(deps: ServiceCatalogConnectionServiceDependencies);
+    /**
+     * The connection as the management surface sees it, or null when there is none.
+     *
+     * A tombstoned row answers NULL, exactly as `resolveClient` and the importer treat one. The
+     * repository's `get` deliberately still returns it, because a re-connect reads the row to keep
+     * the prior verdict and the original `connectedAt`; the disposal of a tombstone is the caller's,
+     * and every caller but that one wants "there is no connection". Returning it here would render a
+     * disconnected workspace as connected, with an "Import now" button that 404s.
+     */
+    get(workspaceId: string): Promise<ServiceCatalogConnection | null>;
+    /**
+     * Connect or replace the workspace's connection.
+     *
+     * The base URL is validated BEFORE anything is sealed, so a typo or a blocked host is refused
+     * while the operator is still looking at the form rather than becoming a stored connection that
+     * fails on every import.
+     */
+    connect(workspaceId: string, input: ConnectServiceCatalogInput): Promise<ServiceCatalogConnection>;
+    /** Forget the credential. Tombstoning what it imported is the importer's half, called beside. */
+    disconnect(workspaceId: string): Promise<void>;
+    /**
+     * Probe with the SUBMITTED credentials rather than the stored ones.
+     *
+     * Which is the point of the endpoint: an operator testing a connection is testing what they just
+     * typed, and probing the stored row would answer about the credential they are replacing.
+     */
+    probe(input: ConnectServiceCatalogInput): Promise<ConnectionTestResult>;
+    /**
+     * The client for a workspace's stored connection, or null when it has none.
+     *
+     * Wired as the `ResolveServiceCatalogClient` port the importer depends on. It REJECTS when a row
+     * exists whose bag will not open, because that is a deployment fault with its own remedy
+     * (re-enter the credential) and is not the same fact as a workspace that never connected a
+     * portal, which the importer treats as nothing to do.
+     */
+    resolveClient: (workspaceId: string) => Promise<ServiceCatalogClient | null>;
+    private buildClient;
+    private assertBaseUrl;
+    /**
+     * Seal the credential half of the submitted auth.
+     *
+     * `none` seals NOTHING and stores the empty string, rather than an envelope around an empty
+     * object. An unauthenticated portal has no secret, so a deployment whose `ENCRYPTION_KEY`
+     * drifted must keep working against it: sealing a placeholder would make the one mode with no
+     * credential the one that fails on a key problem.
+     */
+    private sealAuth;
+    private openAuth;
+}
+//# sourceMappingURL=ServiceCatalogConnectionService.d.ts.map

package/dist/modules/serviceCatalog/ServiceCatalogConnectionService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ServiceCatalogConnectionService.d.ts","sourceRoot":"","sources":["../../../src/modules/serviceCatalog/ServiceCatalogConnectionService.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,0BAA0B,EAC1B,oBAAoB,EAEpB,wBAAwB,EACzB,MAAM,wBAAwB,CAAA;AAK/B,OAAO,KAAK,EACV,KAAK,EACL,MAAM,EACN,YAAY,EACZ,cAAc,EACd,oBAAoB,EAEpB,kCAAkC,EAClC,eAAe,EAChB,MAAM,qBAAqB,CAAA;AAgB5B;;;;;;;;GAQG;AACH,eAAO,MAAM,2BAA2B,gCAAgC,CAAA;AAExE,MAAM,WAAW,2CAA2C;IAC1D,kCAAkC,EAAE,kCAAkC,CAAA;IACtE,mEAAmE;IACnE,YAAY,EAAE,YAAY,CAAA;IAC1B,4FAA4F;IAC5F,cAAc,CAAC,EAAE,cAAc,CAAA;IAC/B,KAAK,EAAE,KAAK,CAAA;IACZ,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;;OAKG;IACH,SAAS,CAAC,EAAE,eAAe,CAAA;IAC3B,0BAA0B;IAC1B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CACzB;AAED,qBAAa,+BAA+B;IAK9B,OAAO,CAAC,QAAQ,CAAC,IAAI;IAJjC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAQ;IAE5B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0C;IAErE,YAA6B,IAAI,EAAE,2CAA2C,EAM7E;IAED;;;;;;;;OAQG;IACG,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAGvE;IAED;;;;;;OAMG;IACG,OAAO,CACX,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,wBAAwB,CAAC,CA8BnC;IAED,iGAAiG;IAC3F,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMnD;IAED;;;;;OAKG;IACG,KAAK,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAG5E;IAED;;;;;;;OAOG;IACH,aAAa,gBAAuB,MAAM,KAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAKhF;IAED,OAAO,CAAC,WAAW;IAWnB,OAAO,CAAC,aAAa;IAUrB;;;;;;;OAOG;YACW,QAAQ;YAQR,QAAQ;CAQvB"}