@cat-factory/worker 0.158.0 → 0.160.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (37) hide show
  1. package/audit-migrations/0001_audit_events.sql +41 -0
  2. package/dist/app.d.ts.map +1 -1
  3. package/dist/app.js +7 -0
  4. package/dist/app.js.map +1 -1
  5. package/dist/infrastructure/config/auth.d.ts.map +1 -1
  6. package/dist/infrastructure/config/auth.js +10 -3
  7. package/dist/infrastructure/config/auth.js.map +1 -1
  8. package/dist/infrastructure/container-assembly.d.ts +8 -1
  9. package/dist/infrastructure/container-assembly.d.ts.map +1 -1
  10. package/dist/infrastructure/container-assembly.js +55 -11
  11. package/dist/infrastructure/container-assembly.js.map +1 -1
  12. package/dist/infrastructure/container-shared-services.d.ts +1 -0
  13. package/dist/infrastructure/container-shared-services.d.ts.map +1 -1
  14. package/dist/infrastructure/container-shared-services.js +5 -1
  15. package/dist/infrastructure/container-shared-services.js.map +1 -1
  16. package/dist/infrastructure/env.d.ts +47 -0
  17. package/dist/infrastructure/env.d.ts.map +1 -1
  18. package/dist/infrastructure/env.js +12 -0
  19. package/dist/infrastructure/env.js.map +1 -1
  20. package/dist/infrastructure/repositories/D1AgentToolCallRepository.d.ts +2 -2
  21. package/dist/infrastructure/repositories/D1AgentToolCallRepository.d.ts.map +1 -1
  22. package/dist/infrastructure/repositories/D1AgentToolCallRepository.js +26 -5
  23. package/dist/infrastructure/repositories/D1AgentToolCallRepository.js.map +1 -1
  24. package/dist/infrastructure/repositories/D1AuditEventRepository.d.ts +15 -0
  25. package/dist/infrastructure/repositories/D1AuditEventRepository.d.ts.map +1 -0
  26. package/dist/infrastructure/repositories/D1AuditEventRepository.js +47 -0
  27. package/dist/infrastructure/repositories/D1AuditEventRepository.js.map +1 -0
  28. package/dist/infrastructure/repositories/D1McpOAuthGrantRepository.d.ts +24 -0
  29. package/dist/infrastructure/repositories/D1McpOAuthGrantRepository.d.ts.map +1 -0
  30. package/dist/infrastructure/repositories/D1McpOAuthGrantRepository.js +78 -0
  31. package/dist/infrastructure/repositories/D1McpOAuthGrantRepository.js.map +1 -0
  32. package/dist/infrastructure/wireCredentialServices.d.ts +12 -1
  33. package/dist/infrastructure/wireCredentialServices.d.ts.map +1 -1
  34. package/dist/infrastructure/wireCredentialServices.js +25 -1
  35. package/dist/infrastructure/wireCredentialServices.js.map +1 -1
  36. package/migrations/0082_mcp_oauth_grants.sql +27 -0
  37. package/package.json +20 -19
@@ -0,0 +1,41 @@
1
+ -- The account audit log: an append-only record of who did what, when, for the privileged and
2
+ -- destructive actions an account admin is answerable for.
3
+ --
4
+ -- Append-only by design: nothing in the platform issues an UPDATE or a DELETE against this
5
+ -- table (the retention sweep is a later slice and is the only writer that ever will). That is
6
+ -- the property that makes the log worth reading, so it is a convention enforced by the absence
7
+ -- of repository methods rather than by a constraint.
8
+ --
9
+ -- `actor_kind` + the two nullable actor columns are a discriminated principal, not a nullable
10
+ -- user id: `system` (the engine acted) and an unresolved user are different facts, and a log
11
+ -- that renders them identically misattributes a human action to automation.
12
+ --
13
+ -- The read index is (account_id, at DESC, id DESC) because the viewer's ONLY read is one
14
+ -- account's newest-first page: `id` breaks the tie so two events recorded in the same
15
+ -- millisecond cannot straddle a page boundary and be served twice or skipped.
16
+ -- This is the FIRST migration of the dedicated `AUDIT_DB` database's own lineage, not of the
17
+ -- main one. The log lives apart because, once the run-lifecycle slice lands, it is the only table
18
+ -- in the platform that grows monotonically with run volume AND wants a multi-year window
19
+ -- (`token_usage` grows with runs but prunes at ~395 days; the telemetry sinks grow far faster but
20
+ -- prune at 3). On a store with a hard 10 GB per-database ceiling that combination is a capacity
21
+ -- question, and keeping it out of `DB` is what stops a years-deep trail from competing with live
22
+ -- transactional state. Measured at ~508 B/row on Postgres, so 1,000 runs/day is ~550 MB/year.
23
+ -- Mirrors the Node Drizzle `auditEvents` table (db/tables/audit.ts); keep in step.
24
+ CREATE TABLE audit_events (
25
+ id TEXT PRIMARY KEY,
26
+ account_id TEXT NOT NULL,
27
+ workspace_id TEXT,
28
+ actor_kind TEXT NOT NULL,
29
+ actor_user_id TEXT,
30
+ actor_api_key_id TEXT,
31
+ action TEXT NOT NULL,
32
+ target_type TEXT NOT NULL,
33
+ target_id TEXT NOT NULL,
34
+ -- WHAT changed, as a JSON object of machine-readable fields (`{"previousRole":"viewer"}`),
35
+ -- never a human-readable sentence: the backend does not localize, and an audit row is
36
+ -- PERSISTED, so English prose written today could never be re-rendered for a reader in another
37
+ -- locale. The viewer interpolates these into translated copy keyed by `action`.
38
+ details TEXT NOT NULL,
39
+ at INTEGER NOT NULL
40
+ );
41
+ CREATE INDEX idx_audit_events_account_at ON audit_events (account_id, at DESC, id DESC);
package/dist/app.d.ts.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAU/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAC7D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAW3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAA;AAEzD,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,SAAS,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACrC,mFAAmF;IACnF,uBAAuB,CAAC,EAAE,OAAO,CAAA;IACjC,gFAAgF;IAChF,aAAa,CAAC,EAAE,qBAAqB,CAAA;IACrC;;;;;;;;;;;;;;;;;;;OAmBG;IACH,wBAAwB,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,kBAAkB,CAAA;IAC3D;;;;;;;;;;;OAWG;IACH,uCAAuC,CAAC,EAAE,OAAO,CAAA;CAClD;AAqBD;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,CAAC,OAAO,GAAE,gBAAqB,GAAG,IAAI,CAAC,MAAM,CAAC,CAiItE"}
1
+ {"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAU/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAC7D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAW3B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,6BAA6B,CAAA;AAEzD,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,SAAS,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACrC,mFAAmF;IACnF,uBAAuB,CAAC,EAAE,OAAO,CAAA;IACjC,gFAAgF;IAChF,aAAa,CAAC,EAAE,qBAAqB,CAAA;IACrC;;;;;;;;;;;;;;;;;;;OAmBG;IACH,wBAAwB,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,kBAAkB,CAAA;IAC3D;;;;;;;;;;;OAWG;IACH,uCAAuC,CAAC,EAAE,OAAO,CAAA;CAClD;AAqBD;;;;;;;;;;GAUG;AACH,wBAAgB,SAAS,CAAC,OAAO,GAAE,gBAAqB,GAAG,IAAI,CAAC,MAAM,CAAC,CAwItE"}
package/dist/app.js CHANGED
@@ -129,6 +129,13 @@ export function createApp(options = {}) {
129
129
  checks.telemetry = env.TELEMETRY_DB
130
130
  ? await probe(() => env.TELEMETRY_DB.prepare('SELECT 1').first())
131
131
  : { ok: false, error: 'TELEMETRY_DB is not bound' };
132
+ // AUDIT_DB is REQUIRED for the same reason and fails the same way: the container build
133
+ // refuses it (`requireAuditDb`), so an unbound binding serves the misconfiguration screen
134
+ // on EVERY request rather than quietly recording nothing. Probed here so a fresh deployment
135
+ // reads which binding is missing off one unauthenticated endpoint.
136
+ checks.audit = env.AUDIT_DB
137
+ ? await probe(() => env.AUDIT_DB.prepare('SELECT 1').first())
138
+ : { ok: false, error: 'AUDIT_DB is not bound' };
132
139
  const ready = Object.values(checks).every((check) => check.ok);
133
140
  return c.json({ status: ready ? 'ready' : 'not_ready', checks }, ready ? 200 : 503);
134
141
  });
package/dist/app.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,0BAA0B,EAC1B,uBAAuB,EACvB,MAAM,EACN,aAAa,EACb,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,qBAAqB,CAAA;AAI5B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAA;AAC9E,OAAO,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAA;AA8ChE,+FAA+F;AAC/F,6FAA6F;AAC7F,6FAA6F;AAC7F,iFAAiF;AACjF,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAA;AAC1C,SAAS,oBAAoB,CAAC,QAAyB;IACrD,MAAM,SAAS,GAAG,QAAQ;SACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;SACjB,IAAI,EAAE;SACN,IAAI,CAAC,GAAG,CAAC,CAAA;IACZ,IAAI,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAM;IAC3C,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IAC/B,MAAM,CAAC,KAAK,CACV,yFAAyF;QACvF,0EAA0E,EAC5E,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CACzC,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,SAAS,CAAC,OAAO,GAAqB,EAAE;IACtD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,+FAA+F;IAC/F,gGAAgG;IAChG,8FAA8F;IAC9F,+FAA+F;IAC/F,oDAAoD;IACpD,IACE,OAAO,CAAC,wBAAwB;QAChC,OAAO,CAAC,uCAAuC,KAAK,SAAS,EAC7D,CAAC;QACD,wBAAwB,CAAC;YACvB,GAAG,CAAC,OAAO,CAAC,wBAAwB;gBAClC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,wBAAwB,EAAE;gBACtD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,OAAO,CAAC,uCAAuC,KAAK,SAAS;gBAC/D,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAAC,uCAAuC,EAAE,CAAC;SAC9E,CAAC,CAAA;IACJ,CAAC;IAED,4FAA4F;IAC5F,6FAA6F;IAC7F,kCAAkC;IAClC,mBAAmB,CAAC,GAAG,CAAC,CAAA;IAExB,6EAA6E;IAC7E,yEAAyE;IACzE,mFAAmF;IACnF,2EAA2E;IAC3E,yFAAyF;IACzF,GAAG,CAAC,GAAG,CACL,GAAG,EACH,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CACpB,iBAAiB,CACf,MAAM,EACN,CAAC,CAAC,GAAG,CAAC,oBAAoB,EAC1B,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CACzC;QACH,iFAAiF;QACjF,mFAAmF;QACnF,kFAAkF;QAClF,wEAAwE;QACxE,YAAY,EAAE,CAAC,GAAG,oBAAoB,CAAC;QACvC,uFAAuF;QACvF,aAAa,EAAE,CAAC,GAAG,oBAAoB,CAAC;KACzC,CAAC,CACH,CAAA;IACD,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC7B,IAAI,CAAC;YACH,CAAC,CAAC,GAAG,CACH,WAAW,EACX,cAAc,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,EAAE;gBACvC,uBAAuB,EAAE,OAAO,CAAC,uBAAuB;gBACxD,aAAa,EAAE,OAAO,CAAC,aAAa;aACrC,CAAC,CACH,CAAA;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,6FAA6F;YAC7F,8FAA8F;YAC9F,+FAA+F;YAC/F,sFAAsF;YACtF,IAAI,uBAAuB,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;gBAClC,MAAM,GAAG,GAAG,0BAA0B,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAA;gBACjF,yEAAyE;gBACzE,0FAA0F;gBAC1F,2FAA2F;gBAC3F,yFAAyF;gBACzF,0FAA0F;gBAC1F,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;gBACrC,IAAI,MAAM;oBAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAA;gBAClE,OAAO,GAAG,CAAA;YACZ,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC;QACD,MAAM,IAAI,EAAE,CAAA;IACd,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAEnD,6FAA6F;IAC7F,4FAA4F;IAC5F,sFAAsF;IACtF,8FAA8F;IAC9F,2FAA2F;IAC3F,sFAAsF;IACtF,EAAE;IACF,4FAA4F;IAC5F,4EAA4E;IAC5E,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5B,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAA;QACjB,MAAM,KAAK,GAAG,KAAK,EAAE,GAA2B,EAA4C,EAAE;YAC5F,IAAI,CAAC;gBACH,MAAM,GAAG,EAAE,CAAA;gBACX,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;YACrB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,uFAAuF;gBACvF,mFAAmF;gBACnF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAA;YAC/E,CAAC;QACH,CAAC,CAAA;QACD,MAAM,MAAM,GAAoD;YAC9D,QAAQ,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC;SAClE,CAAA;QACD,wFAAwF;QACxF,sDAAsD;QACtD,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,YAAY;YACjC,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,YAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC;YAClE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAA;QACrD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC9D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IACrF,CAAC,CAAC,CAAA;IAEF,iFAAiF;IACjF,mFAAmF;IACnF,aAAa,CAAC,GAAG,CAAC,CAAA;IAElB,mFAAmF;IACnF,mFAAmF;IACnF,8EAA8E;IAC9E,gCAAgC;IAChC,uBAAuB,CAAC,GAAG,CAAC,CAAA;IAE5B,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IAExB,OAAO,GAAG,CAAA;AACZ,CAAC"}
1
+ {"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,0BAA0B,EAC1B,uBAAuB,EACvB,MAAM,EACN,aAAa,EACb,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,qBAAqB,CAAA;AAI5B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAA;AAC9E,OAAO,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAA;AA8ChE,+FAA+F;AAC/F,6FAA6F;AAC7F,6FAA6F;AAC7F,iFAAiF;AACjF,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAA;AAC1C,SAAS,oBAAoB,CAAC,QAAyB;IACrD,MAAM,SAAS,GAAG,QAAQ;SACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;SACjB,IAAI,EAAE;SACN,IAAI,CAAC,GAAG,CAAC,CAAA;IACZ,IAAI,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAM;IAC3C,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IAC/B,MAAM,CAAC,KAAK,CACV,yFAAyF;QACvF,0EAA0E,EAC5E,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CACzC,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,SAAS,CAAC,OAAO,GAAqB,EAAE;IACtD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,+FAA+F;IAC/F,gGAAgG;IAChG,8FAA8F;IAC9F,+FAA+F;IAC/F,oDAAoD;IACpD,IACE,OAAO,CAAC,wBAAwB;QAChC,OAAO,CAAC,uCAAuC,KAAK,SAAS,EAC7D,CAAC;QACD,wBAAwB,CAAC;YACvB,GAAG,CAAC,OAAO,CAAC,wBAAwB;gBAClC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,wBAAwB,EAAE;gBACtD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,OAAO,CAAC,uCAAuC,KAAK,SAAS;gBAC/D,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAAC,uCAAuC,EAAE,CAAC;SAC9E,CAAC,CAAA;IACJ,CAAC;IAED,4FAA4F;IAC5F,6FAA6F;IAC7F,kCAAkC;IAClC,mBAAmB,CAAC,GAAG,CAAC,CAAA;IAExB,6EAA6E;IAC7E,yEAAyE;IACzE,mFAAmF;IACnF,2EAA2E;IAC3E,yFAAyF;IACzF,GAAG,CAAC,GAAG,CACL,GAAG,EACH,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CACpB,iBAAiB,CACf,MAAM,EACN,CAAC,CAAC,GAAG,CAAC,oBAAoB,EAC1B,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CACzC;QACH,iFAAiF;QACjF,mFAAmF;QACnF,kFAAkF;QAClF,wEAAwE;QACxE,YAAY,EAAE,CAAC,GAAG,oBAAoB,CAAC;QACvC,uFAAuF;QACvF,aAAa,EAAE,CAAC,GAAG,oBAAoB,CAAC;KACzC,CAAC,CACH,CAAA;IACD,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC7B,IAAI,CAAC;YACH,CAAC,CAAC,GAAG,CACH,WAAW,EACX,cAAc,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,EAAE;gBACvC,uBAAuB,EAAE,OAAO,CAAC,uBAAuB;gBACxD,aAAa,EAAE,OAAO,CAAC,aAAa;aACrC,CAAC,CACH,CAAA;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,6FAA6F;YAC7F,8FAA8F;YAC9F,+FAA+F;YAC/F,sFAAsF;YACtF,IAAI,uBAAuB,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;gBAClC,MAAM,GAAG,GAAG,0BAA0B,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAA;gBACjF,yEAAyE;gBACzE,0FAA0F;gBAC1F,2FAA2F;gBAC3F,yFAAyF;gBACzF,0FAA0F;gBAC1F,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;gBACrC,IAAI,MAAM;oBAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAA;gBAClE,OAAO,GAAG,CAAA;YACZ,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC;QACD,MAAM,IAAI,EAAE,CAAA;IACd,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAEnD,6FAA6F;IAC7F,4FAA4F;IAC5F,sFAAsF;IACtF,8FAA8F;IAC9F,2FAA2F;IAC3F,sFAAsF;IACtF,EAAE;IACF,4FAA4F;IAC5F,4EAA4E;IAC5E,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5B,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAA;QACjB,MAAM,KAAK,GAAG,KAAK,EAAE,GAA2B,EAA4C,EAAE;YAC5F,IAAI,CAAC;gBACH,MAAM,GAAG,EAAE,CAAA;gBACX,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;YACrB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,uFAAuF;gBACvF,mFAAmF;gBACnF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAA;YAC/E,CAAC;QACH,CAAC,CAAA;QACD,MAAM,MAAM,GAAoD;YAC9D,QAAQ,EAAE,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC;SAClE,CAAA;QACD,wFAAwF;QACxF,sDAAsD;QACtD,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,YAAY;YACjC,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,YAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC;YAClE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAA;QACrD,uFAAuF;QACvF,0FAA0F;QAC1F,4FAA4F;QAC5F,mEAAmE;QACnE,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,QAAQ;YACzB,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,QAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC;YAC9D,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAA;QACjD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC9D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IACrF,CAAC,CAAC,CAAA;IAEF,iFAAiF;IACjF,mFAAmF;IACnF,aAAa,CAAC,GAAG,CAAC,CAAA;IAElB,mFAAmF;IACnF,mFAAmF;IACnF,8EAA8E;IAC9E,gCAAgC;IAChC,uBAAuB,CAAC,GAAG,CAAC,CAAA;IAE5B,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IAExB,OAAO,GAAG,CAAA;AACZ,CAAC"}
@@ -1 +1 @@
1
- {"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/config/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAErD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAA;AAGjC,YAAY,EAAE,UAAU,EAAE,CAAA;AAsE1B,wBAAgB,cAAc,CAAC,GAAG,EAAE,GAAG,GAAG,UAAU,CAuEnD"}
1
+ {"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/config/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAa,MAAM,qBAAqB,CAAA;AAEhE,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAA;AAGjC,YAAY,EAAE,UAAU,EAAE,CAAA;AA6E1B,wBAAgB,cAAc,CAAC,GAAG,EAAE,GAAG,GAAG,UAAU,CAyEnD"}
@@ -1,4 +1,4 @@
1
- import { resolveMachineTokenTtlMs } from '@cat-factory/server';
1
+ import { resolveMachineTokenTtlMs, resolveSsoConfig } from '@cat-factory/server';
2
2
  import { num } from './utils';
3
3
  /**
4
4
  * Minimum length for AUTH_SESSION_SECRET. The same secret keys the HMAC over
@@ -39,6 +39,11 @@ function resolveAuthEnablement(env) {
39
39
  const googleClientSecret = env.GOOGLE_OAUTH_CLIENT_SECRET?.trim() ?? '';
40
40
  const googleEnabled = googleClientId !== '' && googleClientSecret !== '' && strongSecret;
41
41
  const passwordEnabled = env.AUTH_PASSWORD_ENABLED?.trim() === 'true' && strongSecret;
42
+ // Enterprise SSO: parsed by the SHARED resolver both facades call, so its nine variables and
43
+ // four boot refusals cannot drift between runtimes. It THROWS on a partial/unsafe combination
44
+ // (including AUTH_DEV_OPEN alongside SSO) rather than resolving to disabled, and the Worker's
45
+ // boot turns that into the misconfiguration screen naming the variable.
46
+ const sso = resolveSsoConfig(env, { strongSessionSecret: strongSecret, devOpen });
42
47
  return {
43
48
  clientId,
44
49
  clientSecret,
@@ -51,13 +56,14 @@ function resolveAuthEnablement(env) {
51
56
  googleClientSecret,
52
57
  googleEnabled,
53
58
  passwordEnabled,
59
+ sso,
54
60
  };
55
61
  }
56
62
  export function loadAuthConfig(env) {
57
- const { clientId, clientSecret, sessionSecret, ttlHours, devOpen, testingNoAuth, githubEnabled, googleClientId, googleClientSecret, googleEnabled, passwordEnabled, } = resolveAuthEnablement(env);
63
+ const { clientId, clientSecret, sessionSecret, ttlHours, devOpen, testingNoAuth, githubEnabled, googleClientId, googleClientSecret, googleEnabled, passwordEnabled, sso, } = resolveAuthEnablement(env);
58
64
  return {
59
65
  // Enabled when ANY provider is configured (with a strong session secret).
60
- enabled: githubEnabled || googleEnabled || passwordEnabled,
66
+ enabled: githubEnabled || googleEnabled || passwordEnabled || !!sso,
61
67
  devOpen,
62
68
  testingNoAuth,
63
69
  githubEnabled,
@@ -88,6 +94,7 @@ export function loadAuthConfig(env) {
88
94
  },
89
95
  }
90
96
  : {}),
97
+ ...(sso ? { sso } : {}),
91
98
  allowedEmailDomains: (env.AUTH_ALLOWED_EMAIL_DOMAINS ?? '')
92
99
  .split(',')
93
100
  .map((d) => d.trim().toLowerCase())
@@ -1 +1 @@
1
- {"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/infrastructure/config/auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAA;AAE9D,OAAO,EAAE,GAAG,EAAE,MAAM,SAAS,CAAA;AAI7B;;;;;;GAMG;AACH,MAAM,yBAAyB,GAAG,EAAE,CAAA;AAEpC,+EAA+E;AAC/E,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAA;AAE1E;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,GAAQ;IAarC,8EAA8E;IAC9E,4EAA4E;IAC5E,MAAM,QAAQ,GAAG,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IACzD,MAAM,YAAY,GAAG,GAAG,CAAC,0BAA0B,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IACjE,MAAM,aAAa,GAAG,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,wBAAwB,EAAE,GAAG,CAAC,sBAAsB,CAAC,CAAA;IAC1E,wEAAwE;IACxE,4EAA4E;IAC5E,gFAAgF;IAChF,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAA;IAC/D,MAAM,OAAO,GAAG,CAAC,uBAAuB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACzD,6FAA6F;IAC7F,0FAA0F;IAC1F,uDAAuD;IACvD,MAAM,aAAa,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,KAAK,MAAM,IAAI,OAAO,CAAA;IACvE,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,MAAM,IAAI,aAAa,CAAC,IAAI,OAAO,CAAA;IAClF,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,IAAI,yBAAyB,CAAA;IACtE,MAAM,aAAa,GAAG,QAAQ,KAAK,EAAE,IAAI,YAAY,KAAK,EAAE,IAAI,YAAY,CAAA;IAC5E,2EAA2E;IAC3E,MAAM,cAAc,GAAG,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IAC/D,MAAM,kBAAkB,GAAG,GAAG,CAAC,0BAA0B,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IACvE,MAAM,aAAa,GAAG,cAAc,KAAK,EAAE,IAAI,kBAAkB,KAAK,EAAE,IAAI,YAAY,CAAA;IACxF,MAAM,eAAe,GAAG,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,KAAK,MAAM,IAAI,YAAY,CAAA;IACpF,OAAO;QACL,QAAQ;QACR,YAAY;QACZ,aAAa;QACb,QAAQ;QACR,OAAO;QACP,aAAa;QACb,aAAa;QACb,cAAc;QACd,kBAAkB;QAClB,aAAa;QACb,eAAe;KAChB,CAAA;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAQ;IACrC,MAAM,EACJ,QAAQ,EACR,YAAY,EACZ,aAAa,EACb,QAAQ,EACR,OAAO,EACP,aAAa,EACb,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,eAAe,GAChB,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAA;IAC9B,OAAO;QACL,0EAA0E;QAC1E,OAAO,EAAE,aAAa,IAAI,aAAa,IAAI,eAAe;QAC1D,OAAO;QACP,aAAa;QACb,aAAa;QACb,QAAQ;QACR,YAAY;QACZ,aAAa;QACb,OAAO,EAAE,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,wBAAwB;QAChE,SAAS,EAAE,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,oBAAoB;QAChE,YAAY,EAAE,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;QACxF,iBAAiB,EAAE,wBAAwB,CAAC,GAAG,CAAC,yBAAyB,CAAC;QAC1E,kBAAkB,EAAE,GAAG,CAAC,yBAAyB,EAAE,IAAI,EAAE,IAAI,EAAE;QAC/D,WAAW,EAAE,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE;QAChD,eAAe;QACf,4FAA4F;QAC5F,UAAU,EAAE,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,KAAK,MAAM;QACnD,oFAAoF;QACpF,uFAAuF;QACvF,yFAAyF;QACzF,gEAAgE;QAChE,iBAAiB,EAAE,IAAI;QACvB,gBAAgB,EAAE,CAAC;QACnB,GAAG,CAAC,aAAa;YACf,CAAC,CAAC;gBACE,MAAM,EAAE;oBACN,QAAQ,EAAE,cAAc;oBACxB,YAAY,EAAE,kBAAkB;oBAChC,WAAW,EAAE,GAAG,CAAC,yBAAyB,EAAE,IAAI,EAAE,IAAI,EAAE;iBACzD;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,mBAAmB,EAAE,CAAC,GAAG,CAAC,0BAA0B,IAAI,EAAE,CAAC;aACxD,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;aAClC,MAAM,CAAC,OAAO,CAAC;QAClB,aAAa,EAAE,CAAC,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAC;aAC3C,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;aAC1C,MAAM,CAAC,OAAO,CAAC;QAClB,WAAW,EAAE,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC;aACvC,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;aACtC,MAAM,CAAC,OAAO,CAAC;QAClB,sBAAsB,EAAE,CAAC,GAAG,CAAC,6BAA6B,IAAI,EAAE,CAAC;aAC9D,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;aAC9B,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACd,IAAI,CAAC;gBACH,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAA;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,MAAM,CAAA;YACf,CAAC;QACH,CAAC,CAAC;KACL,CAAA;AACH,CAAC"}
1
+ {"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/infrastructure/config/auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAEhF,OAAO,EAAE,GAAG,EAAE,MAAM,SAAS,CAAA;AAI7B;;;;;;GAMG;AACH,MAAM,yBAAyB,GAAG,EAAE,CAAA;AAEpC,+EAA+E;AAC/E,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAA;AAE1E;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,GAAQ;IAcrC,8EAA8E;IAC9E,4EAA4E;IAC5E,MAAM,QAAQ,GAAG,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IACzD,MAAM,YAAY,GAAG,GAAG,CAAC,0BAA0B,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IACjE,MAAM,aAAa,GAAG,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,wBAAwB,EAAE,GAAG,CAAC,sBAAsB,CAAC,CAAA;IAC1E,wEAAwE;IACxE,4EAA4E;IAC5E,gFAAgF;IAChF,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAA;IAC/D,MAAM,OAAO,GAAG,CAAC,uBAAuB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACzD,6FAA6F;IAC7F,0FAA0F;IAC1F,uDAAuD;IACvD,MAAM,aAAa,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,KAAK,MAAM,IAAI,OAAO,CAAA;IACvE,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,MAAM,IAAI,aAAa,CAAC,IAAI,OAAO,CAAA;IAClF,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,IAAI,yBAAyB,CAAA;IACtE,MAAM,aAAa,GAAG,QAAQ,KAAK,EAAE,IAAI,YAAY,KAAK,EAAE,IAAI,YAAY,CAAA;IAC5E,2EAA2E;IAC3E,MAAM,cAAc,GAAG,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IAC/D,MAAM,kBAAkB,GAAG,GAAG,CAAC,0BAA0B,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IACvE,MAAM,aAAa,GAAG,cAAc,KAAK,EAAE,IAAI,kBAAkB,KAAK,EAAE,IAAI,YAAY,CAAA;IACxF,MAAM,eAAe,GAAG,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,KAAK,MAAM,IAAI,YAAY,CAAA;IACpF,6FAA6F;IAC7F,8FAA8F;IAC9F,8FAA8F;IAC9F,wEAAwE;IACxE,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,EAAE,EAAE,mBAAmB,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAA;IACjF,OAAO;QACL,QAAQ;QACR,YAAY;QACZ,aAAa;QACb,QAAQ;QACR,OAAO;QACP,aAAa;QACb,aAAa;QACb,cAAc;QACd,kBAAkB;QAClB,aAAa;QACb,eAAe;QACf,GAAG;KACJ,CAAA;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAQ;IACrC,MAAM,EACJ,QAAQ,EACR,YAAY,EACZ,aAAa,EACb,QAAQ,EACR,OAAO,EACP,aAAa,EACb,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,GAAG,GACJ,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAA;IAC9B,OAAO;QACL,0EAA0E;QAC1E,OAAO,EAAE,aAAa,IAAI,aAAa,IAAI,eAAe,IAAI,CAAC,CAAC,GAAG;QACnE,OAAO;QACP,aAAa;QACb,aAAa;QACb,QAAQ;QACR,YAAY;QACZ,aAAa;QACb,OAAO,EAAE,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,wBAAwB;QAChE,SAAS,EAAE,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,oBAAoB;QAChE,YAAY,EAAE,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;QACxF,iBAAiB,EAAE,wBAAwB,CAAC,GAAG,CAAC,yBAAyB,CAAC;QAC1E,kBAAkB,EAAE,GAAG,CAAC,yBAAyB,EAAE,IAAI,EAAE,IAAI,EAAE;QAC/D,WAAW,EAAE,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE;QAChD,eAAe;QACf,4FAA4F;QAC5F,UAAU,EAAE,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,KAAK,MAAM;QACnD,oFAAoF;QACpF,uFAAuF;QACvF,yFAAyF;QACzF,gEAAgE;QAChE,iBAAiB,EAAE,IAAI;QACvB,gBAAgB,EAAE,CAAC;QACnB,GAAG,CAAC,aAAa;YACf,CAAC,CAAC;gBACE,MAAM,EAAE;oBACN,QAAQ,EAAE,cAAc;oBACxB,YAAY,EAAE,kBAAkB;oBAChC,WAAW,EAAE,GAAG,CAAC,yBAAyB,EAAE,IAAI,EAAE,IAAI,EAAE;iBACzD;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvB,mBAAmB,EAAE,CAAC,GAAG,CAAC,0BAA0B,IAAI,EAAE,CAAC;aACxD,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;aAClC,MAAM,CAAC,OAAO,CAAC;QAClB,aAAa,EAAE,CAAC,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAC;aAC3C,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;aAC1C,MAAM,CAAC,OAAO,CAAC;QAClB,WAAW,EAAE,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC;aACvC,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;aACtC,MAAM,CAAC,OAAO,CAAC;QAClB,sBAAsB,EAAE,CAAC,GAAG,CAAC,6BAA6B,IAAI,EAAE,CAAC;aAC9D,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;aAC9B,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACd,IAAI,CAAC;gBACH,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAA;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,MAAM,CAAA;YACf,CAAC;QACH,CAAC,CAAC;KACL,CAAA;AACH,CAAC"}
@@ -1,6 +1,6 @@
1
1
  import { type AppCaches, type Clock, type ExecutionEventPublisher, type IdGenerator, type ResolveBinaryArtifactStore } from '@cat-factory/kernel';
2
2
  import { type CoreDependencies, AgentContextObservabilityService, SearchQueryObservabilityService } from '@cat-factory/orchestration';
3
- import type { AccountSettingsService, ApiKeyService, LocalModelEndpointService, NotificationWebhookService, OpenRouterCatalogService, PersonalSubscriptionService, ProviderSubscriptionService, PublicApiKeyService, TestSecretsService, CapabilityCredentialsService, ValidationConfigService, UserSecretService } from '@cat-factory/integrations';
3
+ import type { AccountSettingsService, ApiKeyService, LocalModelEndpointService, NotificationWebhookService, OpenRouterCatalogService, PersonalSubscriptionService, ProviderSubscriptionService, PublicApiKeyService, TestSecretsService, CapabilityCredentialsService, McpOAuthService, ValidationConfigService, UserSecretService } from '@cat-factory/integrations';
4
4
  import { type ServerContainer, type ToolSecretChain, type WebSearchUpstream } from '@cat-factory/server';
5
5
  import { type GateProviderOverrides } from '@cat-factory/gates';
6
6
  import type { NotificationChannel, PlatformAlertSink, RunLifecycleSink } from '@cat-factory/kernel';
@@ -37,6 +37,13 @@ export interface WorkerContainerAssemblyInput {
37
37
  subscriptions: ProviderSubscriptionService | undefined;
38
38
  testSecretsService: TestSecretsService | undefined;
39
39
  capabilityCredentialsService: CapabilityCredentialsService | undefined;
40
+ /**
41
+ * The per-workspace OAuth grant store for remote MCP tool servers, or undefined when the Worker
42
+ * has no ENCRYPTION_KEY. Feeds the connect/disconnect routes, the inventory's connection state
43
+ * and the executor's token source — absent, an OAuth server is stated as `oauth_not_connected`
44
+ * rather than dispatched without its token.
45
+ */
46
+ mcpOAuthService: McpOAuthService | undefined;
40
47
  validationConfigService: ValidationConfigService;
41
48
  personalSubscriptions: PersonalSubscriptionService | undefined;
42
49
  apiKeys: ApiKeyService | undefined;
@@ -1 +1 @@
1
- {"version":3,"file":"container-assembly.d.ts","sourceRoot":"","sources":["../../src/infrastructure/container-assembly.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,SAAS,EACd,KAAK,KAAK,EAEV,KAAK,uBAAuB,EAC5B,KAAK,WAAW,EAChB,KAAK,0BAA0B,EAChC,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,KAAK,gBAAgB,EACrB,gCAAgC,EAChC,+BAA+B,EAEhC,MAAM,4BAA4B,CAAA;AACnC,OAAO,KAAK,EACV,sBAAsB,EACtB,aAAa,EACb,yBAAyB,EACzB,0BAA0B,EAC1B,wBAAwB,EACxB,2BAA2B,EAC3B,2BAA2B,EAC3B,mBAAmB,EACnB,kBAAkB,EAClB,4BAA4B,EAC5B,uBAAuB,EACvB,iBAAiB,EAClB,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAQL,KAAK,eAAe,EACpB,KAAK,eAAe,EAEpB,KAAK,iBAAiB,EACvB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,KAAK,qBAAqB,EAG3B,MAAM,oBAAoB,CAAA;AAC3B,OAAO,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AACnG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA;AAChC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAIjE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AAEzE,OAAO,EACL,qBAAqB,EAGtB,MAAM,2BAA2B,CAAA;AA2BlC,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAA;AAexF,OAAO,EAML,KAAK,kBAAkB,EAkBxB,MAAM,gBAAgB,CAAA;AAGvB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAG3D;;;;;;;GAOG;AACH,MAAM,WAAW,4BAA4B;IAC3C,GAAG,EAAE,GAAG,CAAA;IACR,MAAM,EAAE,SAAS,CAAA;IACjB,EAAE,EAAE,UAAU,CAAA;IACd,WAAW,EAAE,UAAU,CAAA;IACvB,KAAK,EAAE,KAAK,CAAA;IACZ,WAAW,EAAE,WAAW,CAAA;IACxB,MAAM,EAAE,SAAS,CAAA;IACjB,SAAS,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACpC,aAAa,CAAC,EAAE,qBAAqB,CAAA;IACrC,uBAAuB,EAAE,OAAO,CAAA;IAChC,UAAU,EAAE,gBAAgB,CAAA;IAC5B,yBAAyB,EAAE,2BAA2B,GAAG,SAAS,CAAA;IAClE,gBAAgB,EAAE,sBAAsB,GAAG,IAAI,CAAA;IAC/C,aAAa,EAAE,2BAA2B,GAAG,SAAS,CAAA;IACtD,kBAAkB,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAClD,4BAA4B,EAAE,4BAA4B,GAAG,SAAS,CAAA;IACtE,uBAAuB,EAAE,uBAAuB,CAAA;IAChD,qBAAqB,EAAE,2BAA2B,GAAG,SAAS,CAAA;IAC9D,OAAO,EAAE,aAAa,GAAG,SAAS,CAAA;IAClC,aAAa,EAAE,mBAAmB,GAAG,SAAS,CAAA;IAC9C;;;;OAIG;IACH,0BAA0B,EAAE;QAC1B,OAAO,EAAE,0BAA0B,CAAA;QACnC,OAAO,EAAE,mBAAmB,CAAA;QAC5B,uEAAuE;QACvE,gBAAgB,EAAE,gBAAgB,CAAA;QAClC;;;;WAIG;QACH,iBAAiB,EAAE,iBAAiB,CAAA;KACrC,GAAG,IAAI,CAAA;IACR,mBAAmB,EAAE,yBAAyB,GAAG,SAAS,CAAA;IAC1D,WAAW,EAAE,iBAAiB,GAAG,SAAS,CAAA;IAC1C,iBAAiB,EAAE,wBAAwB,GAAG,SAAS,CAAA;IACvD,cAAc,EAAE,uBAAuB,GAAG,SAAS,CAAA;IACnD,yBAAyB,EAAE,gCAAgC,CAAA;IAC3D,wBAAwB,EAAE,+BAA+B,CAAA;IACzD,eAAe,EAAE,sBAAsB,GAAG,SAAS,CAAA;IACnD,2FAA2F;IAC3F,yBAAyB,EAAE,kBAAkB,CAAC,0BAA0B,CAAC,CAAA;IACzE,6GAA6G;IAC7G,wBAAwB,EAAE,sBAAsB,GAAG,SAAS,CAAA;IAC5D;;;;;;;;OAQG;IACH,eAAe,EAAE,eAAe,CAAA;IAChC,wBAAwB,EAAE,iBAAiB,GAAG,SAAS,CAAA;IACvD,0BAA0B,EAAE,0BAA0B,CAAA;IACtD,mBAAmB,EAAE,qBAAqB,CAAA;CAC3C;AA6bD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,4BAA4B,GAAG,eAAe,CAuP5F"}
1
+ {"version":3,"file":"container-assembly.d.ts","sourceRoot":"","sources":["../../src/infrastructure/container-assembly.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,SAAS,EACd,KAAK,KAAK,EAEV,KAAK,uBAAuB,EAC5B,KAAK,WAAW,EAChB,KAAK,0BAA0B,EAChC,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,KAAK,gBAAgB,EACrB,gCAAgC,EAChC,+BAA+B,EAEhC,MAAM,4BAA4B,CAAA;AACnC,OAAO,KAAK,EACV,sBAAsB,EACtB,aAAa,EACb,yBAAyB,EACzB,0BAA0B,EAC1B,wBAAwB,EACxB,2BAA2B,EAC3B,2BAA2B,EAC3B,mBAAmB,EACnB,kBAAkB,EAClB,4BAA4B,EAC5B,eAAe,EACf,uBAAuB,EACvB,iBAAiB,EAClB,MAAM,2BAA2B,CAAA;AAElC,OAAO,EAUL,KAAK,eAAe,EACpB,KAAK,eAAe,EAEpB,KAAK,iBAAiB,EACvB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,KAAK,qBAAqB,EAG3B,MAAM,oBAAoB,CAAA;AAC3B,OAAO,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AACnG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AAEzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA;AAEhC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAIjE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AAEzE,OAAO,EACL,qBAAqB,EAGtB,MAAM,2BAA2B,CAAA;AA4BlC,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAA;AAexF,OAAO,EAML,KAAK,kBAAkB,EAkBxB,MAAM,gBAAgB,CAAA;AAGvB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAG3D;;;;;;;GAOG;AACH,MAAM,WAAW,4BAA4B;IAC3C,GAAG,EAAE,GAAG,CAAA;IACR,MAAM,EAAE,SAAS,CAAA;IACjB,EAAE,EAAE,UAAU,CAAA;IACd,WAAW,EAAE,UAAU,CAAA;IACvB,KAAK,EAAE,KAAK,CAAA;IACZ,WAAW,EAAE,WAAW,CAAA;IACxB,MAAM,EAAE,SAAS,CAAA;IACjB,SAAS,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACpC,aAAa,CAAC,EAAE,qBAAqB,CAAA;IACrC,uBAAuB,EAAE,OAAO,CAAA;IAChC,UAAU,EAAE,gBAAgB,CAAA;IAC5B,yBAAyB,EAAE,2BAA2B,GAAG,SAAS,CAAA;IAClE,gBAAgB,EAAE,sBAAsB,GAAG,IAAI,CAAA;IAC/C,aAAa,EAAE,2BAA2B,GAAG,SAAS,CAAA;IACtD,kBAAkB,EAAE,kBAAkB,GAAG,SAAS,CAAA;IAClD,4BAA4B,EAAE,4BAA4B,GAAG,SAAS,CAAA;IACtE;;;;;OAKG;IACH,eAAe,EAAE,eAAe,GAAG,SAAS,CAAA;IAC5C,uBAAuB,EAAE,uBAAuB,CAAA;IAChD,qBAAqB,EAAE,2BAA2B,GAAG,SAAS,CAAA;IAC9D,OAAO,EAAE,aAAa,GAAG,SAAS,CAAA;IAClC,aAAa,EAAE,mBAAmB,GAAG,SAAS,CAAA;IAC9C;;;;OAIG;IACH,0BAA0B,EAAE;QAC1B,OAAO,EAAE,0BAA0B,CAAA;QACnC,OAAO,EAAE,mBAAmB,CAAA;QAC5B,uEAAuE;QACvE,gBAAgB,EAAE,gBAAgB,CAAA;QAClC;;;;WAIG;QACH,iBAAiB,EAAE,iBAAiB,CAAA;KACrC,GAAG,IAAI,CAAA;IACR,mBAAmB,EAAE,yBAAyB,GAAG,SAAS,CAAA;IAC1D,WAAW,EAAE,iBAAiB,GAAG,SAAS,CAAA;IAC1C,iBAAiB,EAAE,wBAAwB,GAAG,SAAS,CAAA;IACvD,cAAc,EAAE,uBAAuB,GAAG,SAAS,CAAA;IACnD,yBAAyB,EAAE,gCAAgC,CAAA;IAC3D,wBAAwB,EAAE,+BAA+B,CAAA;IACzD,eAAe,EAAE,sBAAsB,GAAG,SAAS,CAAA;IACnD,2FAA2F;IAC3F,yBAAyB,EAAE,kBAAkB,CAAC,0BAA0B,CAAC,CAAA;IACzE,6GAA6G;IAC7G,wBAAwB,EAAE,sBAAsB,GAAG,SAAS,CAAA;IAC5D;;;;;;;;OAQG;IACH,eAAe,EAAE,eAAe,CAAA;IAChC,wBAAwB,EAAE,iBAAiB,GAAG,SAAS,CAAA;IACvD,0BAA0B,EAAE,0BAA0B,CAAA;IACtD,mBAAmB,EAAE,qBAAqB,CAAA;CAC3C;AAgdD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,4BAA4B,GAAG,eAAe,CAsP5F"}
@@ -1,8 +1,10 @@
1
1
  import { DEFAULT_MODEL_PRESET_ID, } from '@cat-factory/kernel';
2
2
  import { AgentContextObservabilityService, SearchQueryObservabilityService, createCore, } from '@cat-factory/orchestration';
3
- import { logger, operationalMetrics, runWithInitiator, resolveWorkspaceCapabilities, testEnvHasZeroConfigDefault, WebCryptoPasswordHasher, toolSecretContainerFields, } from '@cat-factory/server';
3
+ import { AuditService } from '@cat-factory/integrations';
4
+ import { logger, mcpOAuthContainerFields, mcpOAuthExecutorDeps, operationalMetrics, runWithInitiator, resolveWorkspaceCapabilities, testEnvHasZeroConfigDefault, WebCryptoPasswordHasher, toolSecretContainerFields, } from '@cat-factory/server';
4
5
  import { applyGateProviders, warnUnwiredGates, } from '@cat-factory/gates';
5
6
  import { selectEnvConfigRepairer, selectRepoBootstrapper } from './container-dispatchers';
7
+ import { requireAuditDb } from './env';
6
8
  import { baseUrlFor } from './ai/providerEndpoints';
7
9
  import { bedrockModelsCapability } from './ai/registries';
8
10
  import { buildResolvePresetProviderPreference } from './container-model-resolver.js';
@@ -21,6 +23,7 @@ import { D1BootstrapJobRepository } from './repositories/D1BootstrapJobRepositor
21
23
  import { CryptoIdGenerator } from './runtime';
22
24
  import { D1AuthAttemptRepository } from './repositories/D1AuthAttemptRepository';
23
25
  import { D1ConsensusSessionRepository } from './repositories/D1ConsensusSessionRepository';
26
+ import { D1AuditEventRepository } from './repositories/D1AuditEventRepository';
24
27
  import { D1MachineNodeRepository } from './repositories/D1MachineNodeRepository';
25
28
  import { D1EnvConfigRepairJobRepository } from './repositories/D1EnvConfigRepairJobRepository';
26
29
  import { D1EnvironmentTestRunRepository } from './repositories/D1EnvironmentTestRunRepository';
@@ -184,7 +187,7 @@ function selectWorkerObservabilityDeps(args) {
184
187
  };
185
188
  }
186
189
  function buildWorkerCoreDependencies(input) {
187
- const { env, config, db, telemetryDb, clock, idGenerator, caches, overrides, cloudflareModelsEnabled, registries, provisioningLogRepository, resolveTransport, subscriptions, testSecretsService, validationConfigService, personalSubscriptions, apiKeys, notificationWebhookSupport, localModelEndpoints, openRouterCatalog, eventPublisher, agentContextObservability, searchQueryObservability, accountSettings, executorPackageRegistries, webSearchAccountSettings, toolSecretChain, resolveBinaryArtifactStore, githubWebhookIngest, } = input;
190
+ const { env, config, db, telemetryDb, clock, idGenerator, caches, overrides, cloudflareModelsEnabled, registries, provisioningLogRepository, resolveTransport, subscriptions, testSecretsService, mcpOAuthService, validationConfigService, personalSubscriptions, apiKeys, notificationWebhookSupport, localModelEndpoints, openRouterCatalog, eventPublisher, agentContextObservability, searchQueryObservability, accountSettings, executorPackageRegistries, webSearchAccountSettings, toolSecretChain, resolveBinaryArtifactStore, githubWebhookIngest, } = input;
188
191
  const { environmentBackendRegistry, runnerBackendRegistry, customManifestTypeRegistry, agentKindRegistry, gateRegistry, judgeRegistry, stepResolverRegistry, initiativePresetRegistry, providerRegistry, } = registries;
189
192
  // The Bedrock allow-list that gates `bedrock`-flavour selectability, derived from `env` here
190
193
  // (like `baseUrlFor` below) because it is one deployment-level read with nothing
@@ -200,6 +203,17 @@ function buildWorkerCoreDependencies(input) {
200
203
  // an un-wired collector reads as "none of this ever happened". On this runtime it is
201
204
  // per-ISOLATE, which is why the entry points flush it rather than the cron alone.
202
205
  operationalMetrics,
206
+ // The third member of that obligation: where privileged actions are RECORDED for an account
207
+ // admin. Same position, same reason — an un-wired audit log reads as "nobody changed
208
+ // anything", which is the assurance it exists to give.
209
+ auditRecorder: new AuditService({
210
+ // The dedicated AUDIT_DB, not `db`: the log is retained for years and must not compete
211
+ // with live transactional state for the 10 GB per-database ceiling.
212
+ auditEventRepository: new D1AuditEventRepository({ db: requireAuditDb(env) }),
213
+ idGenerator,
214
+ clock,
215
+ logger,
216
+ }),
203
217
  // App-owned backend registries (kind → provider) the connection services resolve through.
204
218
  environmentBackendRegistry,
205
219
  runnerBackendRegistry,
@@ -254,6 +268,13 @@ function buildWorkerCoreDependencies(input) {
254
268
  resolvePackageRegistries: executorPackageRegistries,
255
269
  webSearchAccountSettings,
256
270
  resolveToolSecrets: toolSecretChain.resolver,
271
+ // The OAuth half of the same seam: the sealed grant store plus the chain above, which is
272
+ // what resolves the OAuth client secret.
273
+ ...mcpOAuthExecutorDeps({
274
+ oauth: mcpOAuthService,
275
+ resolveToolSecrets: toolSecretChain.resolver,
276
+ logger,
277
+ }),
257
278
  }),
258
279
  env,
259
280
  config,
@@ -398,7 +419,7 @@ function selectWorkerMachineAuthDeps(db) {
398
419
  }
399
420
  export function assembleWorkerContainer(input) {
400
421
  const { env, config, db, clock, registries, resolveTransport, gateProviders } = input;
401
- const { subscriptions, testSecretsService, capabilityCredentialsService, toolSecretChain, validationConfigService, personalSubscriptions, apiKeys, publicApiKeys, notificationWebhookSupport, localModelEndpoints, userSecrets, openRouterCatalog, cloudflareModelsEnabled, defaultWebSearchUpstream, resolveBinaryArtifactStore, githubWebhookIngest, } = input;
422
+ const { subscriptions, testSecretsService, capabilityCredentialsService, mcpOAuthService, toolSecretChain, validationConfigService, personalSubscriptions, apiKeys, publicApiKeys, notificationWebhookSupport, localModelEndpoints, userSecrets, openRouterCatalog, cloudflareModelsEnabled, defaultWebSearchUpstream, resolveBinaryArtifactStore, githubWebhookIngest, } = input;
402
423
  const { environmentBackendRegistry, runnerBackendRegistry, providerRegistry, vcsRegistry } = registries;
403
424
  const bedrockModels = bedrockModelsCapability(env);
404
425
  // The domain dependency object (built in its own function to stay within the size budget);
@@ -550,14 +571,12 @@ export function assembleWorkerContainer(input) {
550
571
  // The sensitive per-service test-credential store the shared test-secrets controller reads;
551
572
  // present when the shared ENCRYPTION_KEY is configured.
552
573
  ...(testSecretsService ? { testSecrets: testSecretsService } : {}),
553
- ...(capabilityCredentialsService
554
- ? { capabilityCredentials: capabilityCredentialsService }
555
- : {}),
556
- // The composed capability-credential chain: the resolver the tool-server probe resolves through
557
- // (a probe must resolve exactly as a dispatch does, or it reports on the wrong tenant's value)
558
- // and the description the credential checklist renders. Projected by ONE shared helper on both
559
- // facades, since an absent description and a `false` one send an operator opposite ways.
560
- ...toolSecretContainerFields(toolSecretChain),
574
+ ...workerCapabilityCredentialFields({
575
+ env,
576
+ capabilityCredentialsService,
577
+ mcpOAuthService,
578
+ toolSecretChain,
579
+ }),
561
580
  // The per-service pre-PR validation-check store the shared controller reads. Always present
562
581
  // (no secret material), unlike the sealed stores around it.
563
582
  validationConfig: validationConfigService,
@@ -617,4 +636,29 @@ export function assembleWorkerContainer(input) {
617
636
  },
618
637
  };
619
638
  }
639
+ /**
640
+ * Everything a workspace's CAPABILITY CREDENTIALS contribute to the container: the sealed
641
+ * credential store, the sealed MCP OAuth grant store plus its redirect URL, and the composed
642
+ * resolver chain with the description the credential checklist renders.
643
+ *
644
+ * One projection because they are one surface. Both stores are optional on the same condition
645
+ * (`ENCRYPTION_KEY`), the OAuth token source resolves its client secret through the very chain
646
+ * beside it, and the chain's `environmentFallback` is a THREE-state answer the container must
647
+ * carry as ABSENT rather than as `undefined` — an absent description and a `false` one send an
648
+ * operator opposite ways. The Node facade projects the same fields from its own root.
649
+ */
650
+ function workerCapabilityCredentialFields(input) {
651
+ return {
652
+ ...(input.capabilityCredentialsService
653
+ ? { capabilityCredentials: input.capabilityCredentialsService }
654
+ : {}),
655
+ ...mcpOAuthContainerFields({
656
+ oauth: input.mcpOAuthService,
657
+ redirectUrl: input.env.MCP_OAUTH_REDIRECT_URL,
658
+ }),
659
+ // The probe resolves through the SAME chain a dispatch does, or it reports on a tenant's value
660
+ // that is not this board's.
661
+ ...toolSecretContainerFields(input.toolSecretChain),
662
+ };
663
+ }
620
664
  //# sourceMappingURL=container-assembly.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"container-assembly.js","sourceRoot":"","sources":["../../src/infrastructure/container-assembly.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,uBAAuB,GAIxB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAEL,gCAAgC,EAChC,+BAA+B,EAC/B,UAAU,GACX,MAAM,4BAA4B,CAAA;AAenC,OAAO,EACL,MAAM,EACN,kBAAkB,EAClB,gBAAgB,EAChB,4BAA4B,EAC5B,2BAA2B,EAC3B,uBAAuB,EAIvB,yBAAyB,GAE1B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAEL,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,oBAAoB,CAAA;AAG3B,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AAGzF,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAA;AACzD,OAAO,EAAE,oCAAoC,EAAE,MAAM,+BAA+B,CAAA;AAEpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAA;AAChE,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAChE,OAAO,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAA;AACxF,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAA;AAC/E,OAAO,EAAE,8BAA8B,EAAE,MAAM,4CAA4C,CAAA;AAC3F,OAAO,EAAE,8BAA8B,EAAE,MAAM,4CAA4C,CAAA;AAC3F,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAA;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAA;AAC1E,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAA;AAC5F,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAA;AAClF,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAA;AAChF,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAA;AAC1F,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAA;AAChF,OAAO,EAAE,8BAA8B,EAAE,MAAM,+CAA+C,CAAA;AAC9F,OAAO,EAAE,8BAA8B,EAAE,MAAM,+CAA+C,CAAA;AAC9F,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAC5E,OAAO,EAAE,8BAA8B,EAAE,MAAM,+CAA+C,CAAA;AAC9F,OAAO,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAA;AACpF,OAAO,EAAE,gCAAgC,EAAE,MAAM,iDAAiD,CAAA;AAClG,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAA;AAC1F,OAAO,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAA;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAA;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAA;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAA;AACnF,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAA;AACxF,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAA;AACxF,OAAO,EAAE,iCAAiC,EAAE,MAAM,kDAAkD,CAAA;AACpG,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAA;AACtF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAA;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAA;AACxE,OAAO,EAAE,kCAAkC,EAAE,MAAM,iDAAiD,CAAA;AACpG,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAA;AAChF,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAA;AAC1F,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAA;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAA;AAC9E,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAA;AACtF,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AAClE,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAA;AACxF,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAA;AACtF,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAC5E,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,8BAA8B,EAC9B,kBAAkB,EAClB,mBAAmB,EAEnB,gBAAgB,EAChB,mBAAmB,EACnB,yBAAyB,EACzB,sBAAsB,EACtB,yBAAyB,EACzB,4BAA4B,EAC5B,wBAAwB,EACxB,yBAAyB,EACzB,uBAAuB,EACvB,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,6BAA6B,EAC7B,sBAAsB,EACtB,eAAe,EACf,eAAe,EACf,gBAAgB,GACjB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAA;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AAEnD,OAAO,EAAE,gCAAgC,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AA0EjG;;;;;;;;GAQG;AACH;;;;;;;GAOG;AACH;;;;;GAKG;AACH,SAAS,0BAA0B,CAAC,IAOnC;IACC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAA;IACtE,OAAO;QACL,gFAAgF;QAChF,+EAA+E;QAC/E,+BAA+B,EAAE,IAAI,iCAAiC,CAAC,EAAE,EAAE,EAAE,CAAC;QAC9E,sBAAsB,EAAE,IAAI,wBAAwB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC5D,gBAAgB,EAAE,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,CAAC;QAC/F,6EAA6E;QAC7E,6EAA6E;QAC7E,eAAe,EAAE,GAAG,CAAC,kBAAkB;YACrC,CAAC,CAAC,IAAI,wBAAwB,CAAC,GAAG,CAAC,kBAAkB,CAAC;YACtD,CAAC,CAAC,SAAS;QACb,iFAAiF;QACjF,sFAAsF;QACtF,0EAA0E;QAC1E,mFAAmF;QACnF,4BAA4B,EAAE,IAAI,8BAA8B,CAAC,EAAE,EAAE,EAAE,CAAC;QACxE,qBAAqB,EAAE,GAAG,CAAC,0BAA0B;YACnD,CAAC,CAAC,IAAI,8BAA8B,CAAC,GAAG,CAAC,0BAA0B,CAAC;YACpE,CAAC,CAAC,SAAS;QACb,uFAAuF;QACvF,uFAAuF;QACvF,uFAAuF;QACvF,sFAAsF;QACtF,aAAa;QACb,4BAA4B,EAAE,IAAI,8BAA8B,CAAC,EAAE,EAAE,EAAE,CAAC;QACxE,qBAAqB,EAAE,GAAG,CAAC,iBAAiB;YAC1C,CAAC,CAAC,IAAI,8BAA8B,CAAC,GAAG,CAAC,iBAAiB,CAAC;YAC3D,CAAC,CAAC,SAAS;KACd,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,gCAAgC,CACvC,IAa8C;IAE9C,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAA;IAChC,OAAO,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,EAAE,CACjD,4BAA4B,CAC1B;QACE,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;QACjD,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC;QACnD,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,kBAAkB,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,qBAAqB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3E,oBAAoB,EAAE,MAAM,CAAC,cAAc,EAAE,WAAW,EAAE,SAAS,IAAI,KAAK;QAC5E,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,+BAA+B,EAAE,oCAAoC,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC;KACvF,EACD,WAAW,EACX,WAAW,EACX,aAAa,CACd,CAAA;AACL,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,6BAA6B,CAAC,IAOtC;IAKC,MAAM,EACJ,MAAM,EACN,EAAE,EACF,WAAW,EACX,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,GACzB,GAAG,IAAI,CAAA;IACR,OAAO;QACL,0DAA0D;QAC1D,uBAAuB,EAAE,IAAI,yBAAyB,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QAC3E,0FAA0F;QAC1F,0FAA0F;QAC1F,QAAQ;QACR,8BAA8B,EAAE,IAAI,gCAAgC,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QACzF,0BAA0B,EAAE,IAAI,4BAA4B,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QACjF,0FAA0F;QAC1F,0FAA0F;QAC1F,oEAAoE;QACpE,uBAAuB,EAAE,IAAI,yBAAyB,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QAC3E,kGAAkG;QAClG,yBAAyB,EAAE,IAAI,2BAA2B,CAAC,EAAE,EAAE,EAAE,CAAC;QAClE,yFAAyF;QACzF,4FAA4F;QAC5F,oEAAoE;QACpE,qBAAqB,EAAE,IAAI,uBAAuB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC1D,qFAAqF;QACrF,oBAAoB;QACpB,iBAAiB,EAAE,IAAI,mBAAmB,CAAC,EAAE,EAAE,EAAE,CAAC;QAClD,kFAAkF;QAClF,mFAAmF;QACnF,oCAAoC;QACpC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,gBAAgB,EAAE,MAAM,CAAC,aAAa,CAAC,aAAa;QACpD,mFAAmF;QACnF,2DAA2D;QAC3D,yBAAyB;QACzB,mFAAmF;QACnF,sDAAsD;QACtD,wBAAwB;KACzB,CAAA;AACH,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAmC;IACtE,MAAM,EACJ,GAAG,EACH,MAAM,EACN,EAAE,EACF,WAAW,EACX,KAAK,EACL,WAAW,EACX,MAAM,EACN,SAAS,EACT,uBAAuB,EACvB,UAAU,EACV,yBAAyB,EACzB,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,uBAAuB,EACvB,qBAAqB,EACrB,OAAO,EACP,0BAA0B,EAC1B,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,EACd,yBAAyB,EACzB,wBAAwB,EACxB,eAAe,EACf,yBAAyB,EACzB,wBAAwB,EACxB,eAAe,EACf,0BAA0B,EAC1B,mBAAmB,GACpB,GAAG,KAAK,CAAA;IACT,MAAM,EACJ,0BAA0B,EAC1B,qBAAqB,EACrB,0BAA0B,EAC1B,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACb,oBAAoB,EACpB,wBAAwB,EACxB,gBAAgB,GACjB,GAAG,UAAU,CAAA;IACd,6FAA6F;IAC7F,iFAAiF;IACjF,0FAA0F;IAC1F,0FAA0F;IAC1F,MAAM,aAAa,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAA;IAElD,OAAO;QACL,0FAA0F;QAC1F,2FAA2F;QAC3F,4FAA4F;QAC5F,MAAM;QACN,2FAA2F;QAC3F,qFAAqF;QACrF,kFAAkF;QAClF,kBAAkB;QAClB,0FAA0F;QAC1F,0BAA0B;QAC1B,qBAAqB;QACrB,oFAAoF;QACpF,6FAA6F;QAC7F,mCAAmC;QACnC,0BAA0B;QAC1B,uEAAuE;QACvE,yEAAyE;QACzE,0BAA0B;QAC1B,mBAAmB,EAAE,IAAI,qBAAqB,CAAC,EAAE,EAAE,EAAE,CAAC;QACtD,yBAAyB,EAAE,IAAI,2BAA2B,CAAC,EAAE,EAAE,EAAE,CAAC;QAClE,iBAAiB,EAAE,IAAI,mBAAmB,CAAC,EAAE,EAAE,EAAE,CAAC;QAClD,oBAAoB,EAAE,IAAI,sBAAsB,CAAC,EAAE,EAAE,EAAE,CAAC;QACxD,cAAc,EAAE,IAAI,gBAAgB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC5C,cAAc,EAAE,IAAI,uBAAuB,EAAE;QAC7C,eAAe,EAAE,IAAI,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC9C,kBAAkB,EAAE,IAAI,oBAAoB,CAAC,EAAE,EAAE,EAAE,CAAC;QACpD,mBAAmB,EAAE,IAAI,qBAAqB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;QAC7D,8FAA8F;QAC9F,gCAAgC,EAAE,IAAI,kCAAkC,CAAC,EAAE,EAAE,EAAE,CAAC;QAChF,iBAAiB,EAAE,IAAI,mBAAmB,CAAC,EAAE,EAAE,EAAE,CAAC;QAClD,wBAAwB,EAAE,IAAI,0BAA0B,CAAC,EAAE,EAAE,EAAE,CAAC;QAChE,oBAAoB,EAAE,IAAI,sBAAsB,CAAC,EAAE,EAAE,EAAE,CAAC;QACxD,GAAG,6BAA6B,CAAC;YAC/B,MAAM;YACN,EAAE;YACF,WAAW;YACX,yBAAyB;YACzB,yBAAyB;YACzB,wBAAwB;SACzB,CAAC;QACF,WAAW;QACX,KAAK;QACL,+EAA+E;QAC/E,+EAA+E;QAC/E,6EAA6E;QAC7E,6EAA6E;QAC7E,aAAa,EACX,SAAS,CAAC,aAAa;YACvB,kBAAkB,CAAC;gBACjB,QAAQ,EAAE,mBAAmB,CAAC;oBAC5B,GAAG;oBACH,MAAM;oBACN,EAAE;oBACF,KAAK;oBACL,MAAM;oBACN,gBAAgB;oBAChB,iBAAiB;oBACjB,aAAa;oBACb,qBAAqB;oBACrB,yBAAyB;oBACzB,wBAAwB,EAAE,yBAAyB;oBACnD,wBAAwB;oBACxB,kBAAkB,EAAE,eAAe,CAAC,QAAQ;iBAC7C,CAAC;gBACF,GAAG;gBACH,MAAM;gBACN,EAAE;gBACF,cAAc;gBACd,iBAAiB;gBACjB,MAAM;aACP,CAAC;QACJ,iBAAiB;QACjB,4FAA4F;QAC5F,uFAAuF;QACvF,YAAY;QACZ,6FAA6F;QAC7F,gFAAgF;QAChF,aAAa;QACb,oBAAoB;QACpB,8FAA8F;QAC9F,2DAA2D;QAC3D,gBAAgB;QAChB,wBAAwB;QACxB,UAAU,EAAE,gBAAgB,CAAC,GAAG,CAAC;QACjC,uBAAuB,EAAE,cAAc;QACvC,YAAY,EAAE,MAAM,CAAC,KAAK;QAC1B,gFAAgF;QAChF,sEAAsE;QACtE,qBAAqB,EAAE,iBAAiB;YACtC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,iBAAiB,CAAC,eAAe,CAAC,EAAE,CAAC;YAC/C,CAAC,CAAC,SAAS;QACb,GAAG,0BAA0B,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;QACxF,GAAG,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC;QAC1E,GAAG,wBAAwB,CAAC;YAC1B,GAAG;YACH,MAAM;YACN,EAAE;YACF,KAAK;YACL,WAAW;YACX,gBAAgB;YAChB,cAAc,EAAE,0BAA0B,EAAE,OAAO;SACpD,CAAC;QACF,4FAA4F;QAC5F,yFAAyF;QACzF,GAAG,CAAC,0BAA0B;YAC5B,CAAC,CAAC,EAAE,gBAAgB,EAAE,0BAA0B,CAAC,gBAAgB,EAAE;YACnE,CAAC,CAAC,EAAE,CAAC;QACP,mFAAmF;QACnF,0FAA0F;QAC1F,uFAAuF;QACvF,wFAAwF;QACxF,4FAA4F;QAC5F,4FAA4F;QAC5F,oBAAoB,EAAE,SAAS,CAAC,oBAAoB,IAAI,uBAAuB;QAC/E,GAAG,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,gBAAgB,CAAC;QAC7D,4FAA4F;QAC5F,mEAAmE;QACnE,GAAG,CAAC,kBAAkB;YACpB,CAAC,CAAC;gBACE,qBAAqB,EAAE,CAAC,WAAmB,EAAE,OAAe,EAAE,EAAE,CAC9D,kBAAkB,CAAC,mBAAmB,CAAC,WAAW,EAAE,OAAO,CAAC;aAC/D;YACH,CAAC,CAAC,EAAE,CAAC;QACP,qFAAqF;QACrF,0FAA0F;QAC1F,2FAA2F;QAC3F,4FAA4F;QAC5F,0EAA0E;QAC1E,uBAAuB,EAAE,CAAC,WAAmB,EAAE,OAAe,EAAE,EAAE,CAChE,uBAAuB,CAAC,eAAe,CAAC,WAAW,EAAE,OAAO,CAAC;QAC/D,GAAG,4BAA4B,CAAC,GAAG,EAAE,EAAE,EAAE,gBAAgB,CAAC;QAC1D,GAAG,yBAAyB,CAAC,GAAG,EAAE,EAAE,CAAC;QACrC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,eAAe,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9B,GAAG,yBAAyB,CAAC,MAAM,EAAE,EAAE,CAAC;QACxC,GAAG,eAAe,CAAC,MAAM,CAAC;QAC1B,GAAG,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC;QAC3D,GAAG,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC;QAC3D,GAAG,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC;QACvD,GAAG,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC;QAC1C,GAAG,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC;QACpC,GAAG,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC;QAC1C,GAAG,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC;QAC3C,GAAG,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC;QACrC,GAAG,yBAAyB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC;QAC7C,GAAG,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC;QAC1C,oFAAoF;QACpF,4FAA4F;QAC5F,GAAG,6BAA6B,CAAC,EAAE,CAAC;QACpC,yFAAyF;QACzF,wFAAwF;QACxF,6BAA6B;QAC7B,kBAAkB,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE;YACpD,MAAM,mBAAmB,CAAC,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;QACjE,CAAC;QACD,2DAA2D;QAC3D,yBAAyB,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;YAChD,MAAM,mBAAmB,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAA;QAC7D,CAAC;QACD,0FAA0F;QAC1F,6FAA6F;QAC7F,8EAA8E;QAC9E,MAAM;QACN,6FAA6F;QAC7F,4FAA4F;QAC5F,2BAA2B,EAAE,gCAAgC,CAAC;YAC5D,GAAG;YACH,MAAM;YACN,EAAE;YACF,MAAM;YACN,OAAO;YACP,aAAa;YACb,qBAAqB;YACrB,uBAAuB;YACvB,aAAa;YACb,mBAAmB;YACnB,iBAAiB;YACjB,eAAe;SAChB,CAAC;QACF,qFAAqF;QACrF,yEAAyE;QACzE,iBAAiB,EAAE,gBAAgB;QACnC,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,2BAA2B,CAClC,EAAc;IAKd,OAAO;QACL,qBAAqB,EAAE,IAAI,uBAAuB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC1D,qBAAqB,EAAE,IAAI,uBAAuB,CAAC;YACjD,EAAE;YACF,WAAW,EAAE,IAAI,iBAAiB,EAAE;SACrC,CAAC;QACF,oBAAoB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,SAAS;KAC3E,CAAA;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAmC;IACzE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,aAAa,EAAE,GAAG,KAAK,CAAA;IACrF,MAAM,EACJ,aAAa,EACb,kBAAkB,EAClB,4BAA4B,EAC5B,eAAe,EACf,uBAAuB,EACvB,qBAAqB,EACrB,OAAO,EACP,aAAa,EACb,0BAA0B,EAC1B,mBAAmB,EACnB,WAAW,EACX,iBAAiB,EACjB,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC1B,mBAAmB,GACpB,GAAG,KAAK,CAAA;IACT,MAAM,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,WAAW,EAAE,GACxF,UAAU,CAAA;IACZ,MAAM,aAAa,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAA;IAClD,2FAA2F;IAC3F,yFAAyF;IACzF,MAAM,YAAY,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAA;IAEvD,uFAAuF;IACvF,sFAAsF;IACtF,2FAA2F;IAC3F,uFAAuF;IACvF,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;QAChD,GAAG;QACH,MAAM;QACN,EAAE;QACF,KAAK;QACL,gBAAgB;QAChB,QAAQ,EAAE,YAAY,CAAC,mBAAmB;QAC1C,0BAA0B;KAC3B,CAAC,CAAA;IACF,sFAAsF;IACtF,gFAAgF;IAChF,IAAI,iBAAiB,IAAI,CAAC,YAAY,CAAC,iBAAiB,EAAE,CAAC;QACzD,YAAY,CAAC,iBAAiB,GAAG,iBAAiB,CAAA;IACpD,CAAC;IAED,8FAA8F;IAC9F,4FAA4F;IAC5F,iGAAiG;IACjG,kBAAkB,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAA;IACnD,wFAAwF;IACxF,yFAAyF;IACzF,gBAAgB,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAA;IAE1C,kFAAkF;IAClF,+FAA+F;IAC/F,4EAA4E;IAC5E,MAAM,kBAAkB,GAAG,IAAI,oBAAoB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;IAC3D,6FAA6F;IAC7F,+FAA+F;IAC/F,MAAM,2BAA2B,GAAG,gCAAgC,CAClE,MAAM,EACN,EAAE,EACF,0BAA0B,EAAE,OAAO,CACpC,CAAA;IAED,OAAO;QACL,GAAG,UAAU,CAAC,YAAY,CAAC;QAC3B,MAAM;QACN,+FAA+F;QAC/F,6FAA6F;QAC7F,gGAAgG;QAChG,mDAAmD;QACnD,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,yFAAyF;QACzF,8FAA8F;QAC9F,yFAAyF;QACzF,sFAAsF;QACtF,uFAAuF;QACvF,WAAW,EAAE,8BAA8B,CAAC,MAAM,CAAC;QACnD,0FAA0F;QAC1F,WAAW;QACX,uFAAuF;QACvF,kFAAkF;QAClF,qBAAqB,EAAE,YAAY,CAAC,qBAAqB;QACzD,sFAAsF;QACtF,uFAAuF;QACvF,iBAAiB,EAAE,sBAAsB,CAAC,EAAE,CAAC;QAC7C,kBAAkB;QAClB,2FAA2F;QAC3F,mBAAmB,EAAE,YAAY,CAAC,mBAAmB;QACrD,wFAAwF;QACxF,yFAAyF;QACzF,yFAAyF;QACzF,sFAAsF;QACtF,0CAA0C;QAC1C,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO;YACvB,CAAC,CAAC,EAAE,qBAAqB,EAAE,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE;YACrE,CAAC,CAAC,EAAE,CAAC;QACP,2FAA2F;QAC3F,+FAA+F;QAC/F,8FAA8F;QAC9F,4FAA4F;QAC5F,2FAA2F;QAC3F,iBAAiB;QACjB,GAAG,CAAC,GAAG,CAAC,gBAAgB;YACtB,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,8BAA8B,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE;YACjF,CAAC,CAAC,EAAE,CAAC;QACP,oFAAoF;QACpF,uFAAuF;QACvF,8FAA8F;QAC9F,0FAA0F;QAC1F,4FAA4F;QAC5F,yFAAyF;QACzF,+DAA+D;QAC/D,GAAG,CAAC,2BAA2B;YAC7B,CAAC,CAAC,EAAE,2BAA2B,EAAE,2BAA2B,EAAE;YAC9D,CAAC,CAAC,EAAE,CAAC;QACP,6FAA6F;QAC7F,4FAA4F;QAC5F,0FAA0F;QAC1F,8FAA8F;QAC9F,6FAA6F;QAC7F,6FAA6F;QAC7F,0FAA0F;QAC1F,gFAAgF;QAChF,YAAY,EAAE;YACZ,GAAG,YAAY;YACf,kBAAkB;YAClB,0FAA0F;YAC1F,2FAA2F;YAC3F,6FAA6F;YAC7F,6FAA6F;YAC7F,uCAAuC;YACvC,2BAA2B,EAAE,IAAI,6BAA6B,CAAC,EAAE,EAAE,EAAE,CAAC;YACtE,4FAA4F;YAC5F,iFAAiF;YACjF,0FAA0F;YAC1F,2FAA2F;YAC3F,2FAA2F;YAC3F,eAAe;YACf,qBAAqB,EAAE,IAAI,uBAAuB,CAAC,EAAE,EAAE,EAAE,CAAC;YAC1D,yFAAyF;YACzF,2FAA2F;YAC3F,uFAAuF;YACvF,6EAA6E;YAC7E,0BAA0B,EAAE,IAAI,4BAA4B,CAAC,EAAE,EAAE,EAAE,CAAC;YACpE,6FAA6F;YAC7F,2FAA2F;YAC3F,qFAAqF;YACrF,8FAA8F;YAC9F,6FAA6F;YAC7F,yFAAyF;YACzF,8FAA8F;YAC9F,8FAA8F;YAC9F,8FAA8F;YAC9F,yDAAyD;YACzD,wBAAwB,EAAE,IAAI,0BAA0B,CAAC,EAAE,EAAE,EAAE,CAAC;YAChE,4BAA4B,EAAE,IAAI,8BAA8B,CAAC,EAAE,EAAE,EAAE,CAAC;SACvC;QACnC,uFAAuF;QACvF,GAAG,2BAA2B,CAAC,EAAE,CAAC;QAClC,kFAAkF;QAClF,0FAA0F;QAC1F,0BAA0B;QAC1B,qBAAqB;QACrB,kFAAkF;QAClF,mFAAmF;QACnF,0BAA0B,EAAE,IAAI,4BAA4B,CAAC,EAAE,EAAE,EAAE,CAAC;QACpE,6FAA6F;QAC7F,4FAA4F;QAC5F,0BAA0B,EACxB,YAAY,CAAC,0BAA0B,IAAI,0BAA0B;QACvE,6FAA6F;QAC7F,8FAA8F;QAC9F,8FAA8F;QAC9F,2FAA2F;QAC3F,oCAAoC,EAAE,CAAC,2BAA2B,CAAC,MAAM,CAAC,cAAc,CAAC;QACzF,4FAA4F;QAC5F,wDAAwD;QACxD,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,4BAA4B;YAC9B,CAAC,CAAC,EAAE,qBAAqB,EAAE,4BAA4B,EAAE;YACzD,CAAC,CAAC,EAAE,CAAC;QACP,gGAAgG;QAChG,+FAA+F;QAC/F,+FAA+F;QAC/F,yFAAyF;QACzF,GAAG,yBAAyB,CAAC,eAAe,CAAC;QAC7C,4FAA4F;QAC5F,4DAA4D;QAC5D,gBAAgB,EAAE,uBAAuB;QACzC,gFAAgF;QAChF,+DAA+D;QAC/D,aAAa;QACb,8EAA8E;QAC9E,uCAAuC;QACvC,qBAAqB;QACrB,8EAA8E;QAC9E,uCAAuC;QACvC,OAAO;QACP,0FAA0F;QAC1F,aAAa;QACb,8FAA8F;QAC9F,oBAAoB,EAAE,0BAA0B,EAAE,OAAO;QACzD,mFAAmF;QACnF,iBAAiB,EAAE,0BAA0B,EAAE,iBAAiB;QAChE,8EAA8E;QAC9E,uBAAuB;QACvB,yFAAyF;QACzF,iEAAiE;QACjE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,oFAAoF;QACpF,uFAAuF;QACvF,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC;QACnD,sFAAsF;QACtF,mBAAmB;QACnB,yFAAyF;QACzF,WAAW;QACX,yFAAyF;QACzF,cAAc,EAAE,IAAI,0BAA0B,CAAC,EAAE,EAAE,EAAE,CAAC;QACtD,+FAA+F;QAC/F,gEAAgE;QAChE,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE;YAC5B,CAAC,CAAC,EAAE,qBAAqB,EAAE,IAAI,uBAAuB,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE;YAChE,CAAC,CAAC,EAAE,CAAC;QACP,wFAAwF;QACxF,iBAAiB;QACjB,QAAQ,EAAE;YACR,6EAA6E;YAC7E,4EAA4E;YAC5E,QAAQ,EAAE,IAAI,iBAAiB,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACrD,gFAAgF;YAChF,+EAA+E;YAC/E,cAAc,EAAE,IAAI,0BAA0B,CAAC,GAAG,CAAC,wBAAwB,CAAC;YAC5E,aAAa,EAAE,mBAAmB;YAClC,uFAAuF;YACvF,oEAAoE;YACpE,cAAc,EAAE,IAAI,sBAAsB,CAAC,GAAG,CAAC,kBAAkB,CAAC;YAClE,iFAAiF;YACjF,uDAAuD;YACvD,WAAW,EAAE,IAAI,oBAAoB,CAAC,GAAG,CAAC;YAC1C,gFAAgF;YAChF,+EAA+E;YAC/E,kCAAkC;SACnC;KACF,CAAA;AACH,CAAC"}
1
+ {"version":3,"file":"container-assembly.js","sourceRoot":"","sources":["../../src/infrastructure/container-assembly.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,uBAAuB,GAIxB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAEL,gCAAgC,EAChC,+BAA+B,EAC/B,UAAU,GACX,MAAM,4BAA4B,CAAA;AAgBnC,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AACxD,OAAO,EACL,MAAM,EACN,uBAAuB,EACvB,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,4BAA4B,EAC5B,2BAA2B,EAC3B,uBAAuB,EAIvB,yBAAyB,GAE1B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAEL,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,oBAAoB,CAAA;AAG3B,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AAEzF,OAAO,EAAE,cAAc,EAAE,MAAM,OAAO,CAAA;AAEtC,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAA;AACzD,OAAO,EAAE,oCAAoC,EAAE,MAAM,+BAA+B,CAAA;AAEpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAA;AAChE,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAChE,OAAO,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAA;AACxF,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAA;AAC/E,OAAO,EAAE,8BAA8B,EAAE,MAAM,4CAA4C,CAAA;AAC3F,OAAO,EAAE,8BAA8B,EAAE,MAAM,4CAA4C,CAAA;AAC3F,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAA;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAA;AAC1E,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAA;AAC5F,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AACpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAA;AAClF,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAA;AAChF,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAA;AAC1F,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAA;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAA;AAChF,OAAO,EAAE,8BAA8B,EAAE,MAAM,+CAA+C,CAAA;AAC9F,OAAO,EAAE,8BAA8B,EAAE,MAAM,+CAA+C,CAAA;AAC9F,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAC5E,OAAO,EAAE,8BAA8B,EAAE,MAAM,+CAA+C,CAAA;AAC9F,OAAO,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAA;AACpF,OAAO,EAAE,gCAAgC,EAAE,MAAM,iDAAiD,CAAA;AAClG,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAA;AAC1F,OAAO,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAA;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAA;AAC9E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAA;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAA;AACnF,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAA;AACxF,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAA;AACxF,OAAO,EAAE,iCAAiC,EAAE,MAAM,kDAAkD,CAAA;AACpG,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAA;AACtF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAA;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAA;AACxE,OAAO,EAAE,kCAAkC,EAAE,MAAM,iDAAiD,CAAA;AACpG,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAA;AAChF,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAA;AAC1F,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAA;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAA;AAC9E,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAA;AACtF,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAA;AAClE,OAAO,EAAE,2BAA2B,EAAE,MAAM,4CAA4C,CAAA;AACxF,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAA;AACtF,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAC5E,OAAO,EACL,gBAAgB,EAChB,sBAAsB,EACtB,8BAA8B,EAC9B,kBAAkB,EAClB,mBAAmB,EAEnB,gBAAgB,EAChB,mBAAmB,EACnB,yBAAyB,EACzB,sBAAsB,EACtB,yBAAyB,EACzB,4BAA4B,EAC5B,wBAAwB,EACxB,yBAAyB,EACzB,uBAAuB,EACvB,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,6BAA6B,EAC7B,sBAAsB,EACtB,eAAe,EACf,eAAe,EACf,gBAAgB,GACjB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAA;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AAEnD,OAAO,EAAE,gCAAgC,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAiFjG;;;;;;;;GAQG;AACH;;;;;;;GAOG;AACH;;;;;GAKG;AACH,SAAS,0BAA0B,CAAC,IAOnC;IACC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAA;IACtE,OAAO;QACL,gFAAgF;QAChF,+EAA+E;QAC/E,+BAA+B,EAAE,IAAI,iCAAiC,CAAC,EAAE,EAAE,EAAE,CAAC;QAC9E,sBAAsB,EAAE,IAAI,wBAAwB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC5D,gBAAgB,EAAE,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,CAAC;QAC/F,6EAA6E;QAC7E,6EAA6E;QAC7E,eAAe,EAAE,GAAG,CAAC,kBAAkB;YACrC,CAAC,CAAC,IAAI,wBAAwB,CAAC,GAAG,CAAC,kBAAkB,CAAC;YACtD,CAAC,CAAC,SAAS;QACb,iFAAiF;QACjF,sFAAsF;QACtF,0EAA0E;QAC1E,mFAAmF;QACnF,4BAA4B,EAAE,IAAI,8BAA8B,CAAC,EAAE,EAAE,EAAE,CAAC;QACxE,qBAAqB,EAAE,GAAG,CAAC,0BAA0B;YACnD,CAAC,CAAC,IAAI,8BAA8B,CAAC,GAAG,CAAC,0BAA0B,CAAC;YACpE,CAAC,CAAC,SAAS;QACb,uFAAuF;QACvF,uFAAuF;QACvF,uFAAuF;QACvF,sFAAsF;QACtF,aAAa;QACb,4BAA4B,EAAE,IAAI,8BAA8B,CAAC,EAAE,EAAE,EAAE,CAAC;QACxE,qBAAqB,EAAE,GAAG,CAAC,iBAAiB;YAC1C,CAAC,CAAC,IAAI,8BAA8B,CAAC,GAAG,CAAC,iBAAiB,CAAC;YAC3D,CAAC,CAAC,SAAS;KACd,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,gCAAgC,CACvC,IAa8C;IAE9C,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAA;IAChC,OAAO,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,EAAE,CACjD,4BAA4B,CAC1B;QACE,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;QACjD,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC;QACnD,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,kBAAkB,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,qBAAqB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3E,oBAAoB,EAAE,MAAM,CAAC,cAAc,EAAE,WAAW,EAAE,SAAS,IAAI,KAAK;QAC5E,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,+BAA+B,EAAE,oCAAoC,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC;KACvF,EACD,WAAW,EACX,WAAW,EACX,aAAa,CACd,CAAA;AACL,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,6BAA6B,CAAC,IAOtC;IAKC,MAAM,EACJ,MAAM,EACN,EAAE,EACF,WAAW,EACX,yBAAyB,EACzB,yBAAyB,EACzB,wBAAwB,GACzB,GAAG,IAAI,CAAA;IACR,OAAO;QACL,0DAA0D;QAC1D,uBAAuB,EAAE,IAAI,yBAAyB,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QAC3E,0FAA0F;QAC1F,0FAA0F;QAC1F,QAAQ;QACR,8BAA8B,EAAE,IAAI,gCAAgC,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QACzF,0BAA0B,EAAE,IAAI,4BAA4B,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QACjF,0FAA0F;QAC1F,0FAA0F;QAC1F,oEAAoE;QACpE,uBAAuB,EAAE,IAAI,yBAAyB,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QAC3E,kGAAkG;QAClG,yBAAyB,EAAE,IAAI,2BAA2B,CAAC,EAAE,EAAE,EAAE,CAAC;QAClE,yFAAyF;QACzF,4FAA4F;QAC5F,oEAAoE;QACpE,qBAAqB,EAAE,IAAI,uBAAuB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC1D,qFAAqF;QACrF,oBAAoB;QACpB,iBAAiB,EAAE,IAAI,mBAAmB,CAAC,EAAE,EAAE,EAAE,CAAC;QAClD,kFAAkF;QAClF,mFAAmF;QACnF,oCAAoC;QACpC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,gBAAgB,EAAE,MAAM,CAAC,aAAa,CAAC,aAAa;QACpD,mFAAmF;QACnF,2DAA2D;QAC3D,yBAAyB;QACzB,mFAAmF;QACnF,sDAAsD;QACtD,wBAAwB;KACzB,CAAA;AACH,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAmC;IACtE,MAAM,EACJ,GAAG,EACH,MAAM,EACN,EAAE,EACF,WAAW,EACX,KAAK,EACL,WAAW,EACX,MAAM,EACN,SAAS,EACT,uBAAuB,EACvB,UAAU,EACV,yBAAyB,EACzB,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,uBAAuB,EACvB,qBAAqB,EACrB,OAAO,EACP,0BAA0B,EAC1B,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,EACd,yBAAyB,EACzB,wBAAwB,EACxB,eAAe,EACf,yBAAyB,EACzB,wBAAwB,EACxB,eAAe,EACf,0BAA0B,EAC1B,mBAAmB,GACpB,GAAG,KAAK,CAAA;IACT,MAAM,EACJ,0BAA0B,EAC1B,qBAAqB,EACrB,0BAA0B,EAC1B,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACb,oBAAoB,EACpB,wBAAwB,EACxB,gBAAgB,GACjB,GAAG,UAAU,CAAA;IACd,6FAA6F;IAC7F,iFAAiF;IACjF,0FAA0F;IAC1F,0FAA0F;IAC1F,MAAM,aAAa,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAA;IAElD,OAAO;QACL,0FAA0F;QAC1F,2FAA2F;QAC3F,4FAA4F;QAC5F,MAAM;QACN,2FAA2F;QAC3F,qFAAqF;QACrF,kFAAkF;QAClF,kBAAkB;QAClB,4FAA4F;QAC5F,qFAAqF;QACrF,uDAAuD;QACvD,aAAa,EAAE,IAAI,YAAY,CAAC;YAC9B,uFAAuF;YACvF,oEAAoE;YACpE,oBAAoB,EAAE,IAAI,sBAAsB,CAAC,EAAE,EAAE,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7E,WAAW;YACX,KAAK;YACL,MAAM;SACP,CAAC;QACF,0FAA0F;QAC1F,0BAA0B;QAC1B,qBAAqB;QACrB,oFAAoF;QACpF,6FAA6F;QAC7F,mCAAmC;QACnC,0BAA0B;QAC1B,uEAAuE;QACvE,yEAAyE;QACzE,0BAA0B;QAC1B,mBAAmB,EAAE,IAAI,qBAAqB,CAAC,EAAE,EAAE,EAAE,CAAC;QACtD,yBAAyB,EAAE,IAAI,2BAA2B,CAAC,EAAE,EAAE,EAAE,CAAC;QAClE,iBAAiB,EAAE,IAAI,mBAAmB,CAAC,EAAE,EAAE,EAAE,CAAC;QAClD,oBAAoB,EAAE,IAAI,sBAAsB,CAAC,EAAE,EAAE,EAAE,CAAC;QACxD,cAAc,EAAE,IAAI,gBAAgB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC5C,cAAc,EAAE,IAAI,uBAAuB,EAAE;QAC7C,eAAe,EAAE,IAAI,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC9C,kBAAkB,EAAE,IAAI,oBAAoB,CAAC,EAAE,EAAE,EAAE,CAAC;QACpD,mBAAmB,EAAE,IAAI,qBAAqB,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;QAC7D,8FAA8F;QAC9F,gCAAgC,EAAE,IAAI,kCAAkC,CAAC,EAAE,EAAE,EAAE,CAAC;QAChF,iBAAiB,EAAE,IAAI,mBAAmB,CAAC,EAAE,EAAE,EAAE,CAAC;QAClD,wBAAwB,EAAE,IAAI,0BAA0B,CAAC,EAAE,EAAE,EAAE,CAAC;QAChE,oBAAoB,EAAE,IAAI,sBAAsB,CAAC,EAAE,EAAE,EAAE,CAAC;QACxD,GAAG,6BAA6B,CAAC;YAC/B,MAAM;YACN,EAAE;YACF,WAAW;YACX,yBAAyB;YACzB,yBAAyB;YACzB,wBAAwB;SACzB,CAAC;QACF,WAAW;QACX,KAAK;QACL,+EAA+E;QAC/E,+EAA+E;QAC/E,6EAA6E;QAC7E,6EAA6E;QAC7E,aAAa,EACX,SAAS,CAAC,aAAa;YACvB,kBAAkB,CAAC;gBACjB,QAAQ,EAAE,mBAAmB,CAAC;oBAC5B,GAAG;oBACH,MAAM;oBACN,EAAE;oBACF,KAAK;oBACL,MAAM;oBACN,gBAAgB;oBAChB,iBAAiB;oBACjB,aAAa;oBACb,qBAAqB;oBACrB,yBAAyB;oBACzB,wBAAwB,EAAE,yBAAyB;oBACnD,wBAAwB;oBACxB,kBAAkB,EAAE,eAAe,CAAC,QAAQ;oBAC5C,yFAAyF;oBACzF,yCAAyC;oBACzC,GAAG,oBAAoB,CAAC;wBACtB,KAAK,EAAE,eAAe;wBACtB,kBAAkB,EAAE,eAAe,CAAC,QAAQ;wBAC5C,MAAM;qBACP,CAAC;iBACH,CAAC;gBACF,GAAG;gBACH,MAAM;gBACN,EAAE;gBACF,cAAc;gBACd,iBAAiB;gBACjB,MAAM;aACP,CAAC;QACJ,iBAAiB;QACjB,4FAA4F;QAC5F,uFAAuF;QACvF,YAAY;QACZ,6FAA6F;QAC7F,gFAAgF;QAChF,aAAa;QACb,oBAAoB;QACpB,8FAA8F;QAC9F,2DAA2D;QAC3D,gBAAgB;QAChB,wBAAwB;QACxB,UAAU,EAAE,gBAAgB,CAAC,GAAG,CAAC;QACjC,uBAAuB,EAAE,cAAc;QACvC,YAAY,EAAE,MAAM,CAAC,KAAK;QAC1B,gFAAgF;QAChF,sEAAsE;QACtE,qBAAqB,EAAE,iBAAiB;YACtC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,iBAAiB,CAAC,eAAe,CAAC,EAAE,CAAC;YAC/C,CAAC,CAAC,SAAS;QACb,GAAG,0BAA0B,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;QACxF,GAAG,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC;QAC1E,GAAG,wBAAwB,CAAC;YAC1B,GAAG;YACH,MAAM;YACN,EAAE;YACF,KAAK;YACL,WAAW;YACX,gBAAgB;YAChB,cAAc,EAAE,0BAA0B,EAAE,OAAO;SACpD,CAAC;QACF,4FAA4F;QAC5F,yFAAyF;QACzF,GAAG,CAAC,0BAA0B;YAC5B,CAAC,CAAC,EAAE,gBAAgB,EAAE,0BAA0B,CAAC,gBAAgB,EAAE;YACnE,CAAC,CAAC,EAAE,CAAC;QACP,mFAAmF;QACnF,0FAA0F;QAC1F,uFAAuF;QACvF,wFAAwF;QACxF,4FAA4F;QAC5F,4FAA4F;QAC5F,oBAAoB,EAAE,SAAS,CAAC,oBAAoB,IAAI,uBAAuB;QAC/E,GAAG,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,gBAAgB,CAAC;QAC7D,4FAA4F;QAC5F,mEAAmE;QACnE,GAAG,CAAC,kBAAkB;YACpB,CAAC,CAAC;gBACE,qBAAqB,EAAE,CAAC,WAAmB,EAAE,OAAe,EAAE,EAAE,CAC9D,kBAAkB,CAAC,mBAAmB,CAAC,WAAW,EAAE,OAAO,CAAC;aAC/D;YACH,CAAC,CAAC,EAAE,CAAC;QACP,qFAAqF;QACrF,0FAA0F;QAC1F,2FAA2F;QAC3F,4FAA4F;QAC5F,0EAA0E;QAC1E,uBAAuB,EAAE,CAAC,WAAmB,EAAE,OAAe,EAAE,EAAE,CAChE,uBAAuB,CAAC,eAAe,CAAC,WAAW,EAAE,OAAO,CAAC;QAC/D,GAAG,4BAA4B,CAAC,GAAG,EAAE,EAAE,EAAE,gBAAgB,CAAC;QAC1D,GAAG,yBAAyB,CAAC,GAAG,EAAE,EAAE,CAAC;QACrC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,eAAe,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9B,GAAG,yBAAyB,CAAC,MAAM,EAAE,EAAE,CAAC;QACxC,GAAG,eAAe,CAAC,MAAM,CAAC;QAC1B,GAAG,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC;QAC3D,GAAG,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC;QAC3D,GAAG,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC;QACvD,GAAG,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC;QAC1C,GAAG,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC;QACpC,GAAG,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC;QAC1C,GAAG,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC;QAC3C,GAAG,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC;QACrC,GAAG,yBAAyB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC;QAC7C,GAAG,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC;QAC1C,oFAAoF;QACpF,4FAA4F;QAC5F,GAAG,6BAA6B,CAAC,EAAE,CAAC;QACpC,yFAAyF;QACzF,wFAAwF;QACxF,6BAA6B;QAC7B,kBAAkB,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE;YACpD,MAAM,mBAAmB,CAAC,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;QACjE,CAAC;QACD,2DAA2D;QAC3D,yBAAyB,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;YAChD,MAAM,mBAAmB,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAA;QAC7D,CAAC;QACD,0FAA0F;QAC1F,6FAA6F;QAC7F,8EAA8E;QAC9E,MAAM;QACN,6FAA6F;QAC7F,4FAA4F;QAC5F,2BAA2B,EAAE,gCAAgC,CAAC;YAC5D,GAAG;YACH,MAAM;YACN,EAAE;YACF,MAAM;YACN,OAAO;YACP,aAAa;YACb,qBAAqB;YACrB,uBAAuB;YACvB,aAAa;YACb,mBAAmB;YACnB,iBAAiB;YACjB,eAAe;SAChB,CAAC;QACF,qFAAqF;QACrF,yEAAyE;QACzE,iBAAiB,EAAE,gBAAgB;QACnC,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,2BAA2B,CAClC,EAAc;IAKd,OAAO;QACL,qBAAqB,EAAE,IAAI,uBAAuB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC1D,qBAAqB,EAAE,IAAI,uBAAuB,CAAC;YACjD,EAAE;YACF,WAAW,EAAE,IAAI,iBAAiB,EAAE;SACrC,CAAC;QACF,oBAAoB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,SAAS;KAC3E,CAAA;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAmC;IACzE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,aAAa,EAAE,GAAG,KAAK,CAAA;IACrF,MAAM,EACJ,aAAa,EACb,kBAAkB,EAClB,4BAA4B,EAC5B,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,qBAAqB,EACrB,OAAO,EACP,aAAa,EACb,0BAA0B,EAC1B,mBAAmB,EACnB,WAAW,EACX,iBAAiB,EACjB,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,EAC1B,mBAAmB,GACpB,GAAG,KAAK,CAAA;IACT,MAAM,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,WAAW,EAAE,GACxF,UAAU,CAAA;IACZ,MAAM,aAAa,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAA;IAClD,2FAA2F;IAC3F,yFAAyF;IACzF,MAAM,YAAY,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAA;IAEvD,uFAAuF;IACvF,sFAAsF;IACtF,2FAA2F;IAC3F,uFAAuF;IACvF,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;QAChD,GAAG;QACH,MAAM;QACN,EAAE;QACF,KAAK;QACL,gBAAgB;QAChB,QAAQ,EAAE,YAAY,CAAC,mBAAmB;QAC1C,0BAA0B;KAC3B,CAAC,CAAA;IACF,sFAAsF;IACtF,gFAAgF;IAChF,IAAI,iBAAiB,IAAI,CAAC,YAAY,CAAC,iBAAiB,EAAE,CAAC;QACzD,YAAY,CAAC,iBAAiB,GAAG,iBAAiB,CAAA;IACpD,CAAC;IAED,8FAA8F;IAC9F,4FAA4F;IAC5F,iGAAiG;IACjG,kBAAkB,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAA;IACnD,wFAAwF;IACxF,yFAAyF;IACzF,gBAAgB,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAA;IAE1C,kFAAkF;IAClF,+FAA+F;IAC/F,4EAA4E;IAC5E,MAAM,kBAAkB,GAAG,IAAI,oBAAoB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;IAC3D,6FAA6F;IAC7F,+FAA+F;IAC/F,MAAM,2BAA2B,GAAG,gCAAgC,CAClE,MAAM,EACN,EAAE,EACF,0BAA0B,EAAE,OAAO,CACpC,CAAA;IAED,OAAO;QACL,GAAG,UAAU,CAAC,YAAY,CAAC;QAC3B,MAAM;QACN,+FAA+F;QAC/F,6FAA6F;QAC7F,gGAAgG;QAChG,mDAAmD;QACnD,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,yFAAyF;QACzF,8FAA8F;QAC9F,yFAAyF;QACzF,sFAAsF;QACtF,uFAAuF;QACvF,WAAW,EAAE,8BAA8B,CAAC,MAAM,CAAC;QACnD,0FAA0F;QAC1F,WAAW;QACX,uFAAuF;QACvF,kFAAkF;QAClF,qBAAqB,EAAE,YAAY,CAAC,qBAAqB;QACzD,sFAAsF;QACtF,uFAAuF;QACvF,iBAAiB,EAAE,sBAAsB,CAAC,EAAE,CAAC;QAC7C,kBAAkB;QAClB,2FAA2F;QAC3F,mBAAmB,EAAE,YAAY,CAAC,mBAAmB;QACrD,wFAAwF;QACxF,yFAAyF;QACzF,yFAAyF;QACzF,sFAAsF;QACtF,0CAA0C;QAC1C,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO;YACvB,CAAC,CAAC,EAAE,qBAAqB,EAAE,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE;YACrE,CAAC,CAAC,EAAE,CAAC;QACP,2FAA2F;QAC3F,+FAA+F;QAC/F,8FAA8F;QAC9F,4FAA4F;QAC5F,2FAA2F;QAC3F,iBAAiB;QACjB,GAAG,CAAC,GAAG,CAAC,gBAAgB;YACtB,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,8BAA8B,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE;YACjF,CAAC,CAAC,EAAE,CAAC;QACP,oFAAoF;QACpF,uFAAuF;QACvF,8FAA8F;QAC9F,0FAA0F;QAC1F,4FAA4F;QAC5F,yFAAyF;QACzF,+DAA+D;QAC/D,GAAG,CAAC,2BAA2B;YAC7B,CAAC,CAAC,EAAE,2BAA2B,EAAE,2BAA2B,EAAE;YAC9D,CAAC,CAAC,EAAE,CAAC;QACP,6FAA6F;QAC7F,4FAA4F;QAC5F,0FAA0F;QAC1F,8FAA8F;QAC9F,6FAA6F;QAC7F,6FAA6F;QAC7F,0FAA0F;QAC1F,gFAAgF;QAChF,YAAY,EAAE;YACZ,GAAG,YAAY;YACf,kBAAkB;YAClB,0FAA0F;YAC1F,2FAA2F;YAC3F,6FAA6F;YAC7F,6FAA6F;YAC7F,uCAAuC;YACvC,2BAA2B,EAAE,IAAI,6BAA6B,CAAC,EAAE,EAAE,EAAE,CAAC;YACtE,4FAA4F;YAC5F,iFAAiF;YACjF,0FAA0F;YAC1F,2FAA2F;YAC3F,2FAA2F;YAC3F,eAAe;YACf,qBAAqB,EAAE,IAAI,uBAAuB,CAAC,EAAE,EAAE,EAAE,CAAC;YAC1D,yFAAyF;YACzF,2FAA2F;YAC3F,uFAAuF;YACvF,6EAA6E;YAC7E,0BAA0B,EAAE,IAAI,4BAA4B,CAAC,EAAE,EAAE,EAAE,CAAC;YACpE,6FAA6F;YAC7F,2FAA2F;YAC3F,qFAAqF;YACrF,8FAA8F;YAC9F,6FAA6F;YAC7F,yFAAyF;YACzF,8FAA8F;YAC9F,8FAA8F;YAC9F,8FAA8F;YAC9F,yDAAyD;YACzD,wBAAwB,EAAE,IAAI,0BAA0B,CAAC,EAAE,EAAE,EAAE,CAAC;YAChE,4BAA4B,EAAE,IAAI,8BAA8B,CAAC,EAAE,EAAE,EAAE,CAAC;SACvC;QACnC,uFAAuF;QACvF,GAAG,2BAA2B,CAAC,EAAE,CAAC;QAClC,kFAAkF;QAClF,0FAA0F;QAC1F,0BAA0B;QAC1B,qBAAqB;QACrB,kFAAkF;QAClF,mFAAmF;QACnF,0BAA0B,EAAE,IAAI,4BAA4B,CAAC,EAAE,EAAE,EAAE,CAAC;QACpE,6FAA6F;QAC7F,4FAA4F;QAC5F,0BAA0B,EACxB,YAAY,CAAC,0BAA0B,IAAI,0BAA0B;QACvE,6FAA6F;QAC7F,8FAA8F;QAC9F,8FAA8F;QAC9F,2FAA2F;QAC3F,oCAAoC,EAAE,CAAC,2BAA2B,CAAC,MAAM,CAAC,cAAc,CAAC;QACzF,4FAA4F;QAC5F,wDAAwD;QACxD,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,gCAAgC,CAAC;YAClC,GAAG;YACH,4BAA4B;YAC5B,eAAe;YACf,eAAe;SAChB,CAAC;QACF,4FAA4F;QAC5F,4DAA4D;QAC5D,gBAAgB,EAAE,uBAAuB;QACzC,gFAAgF;QAChF,+DAA+D;QAC/D,aAAa;QACb,8EAA8E;QAC9E,uCAAuC;QACvC,qBAAqB;QACrB,8EAA8E;QAC9E,uCAAuC;QACvC,OAAO;QACP,0FAA0F;QAC1F,aAAa;QACb,8FAA8F;QAC9F,oBAAoB,EAAE,0BAA0B,EAAE,OAAO;QACzD,mFAAmF;QACnF,iBAAiB,EAAE,0BAA0B,EAAE,iBAAiB;QAChE,8EAA8E;QAC9E,uBAAuB;QACvB,yFAAyF;QACzF,iEAAiE;QACjE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,oFAAoF;QACpF,uFAAuF;QACvF,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC;QACnD,sFAAsF;QACtF,mBAAmB;QACnB,yFAAyF;QACzF,WAAW;QACX,yFAAyF;QACzF,cAAc,EAAE,IAAI,0BAA0B,CAAC,EAAE,EAAE,EAAE,CAAC;QACtD,+FAA+F;QAC/F,gEAAgE;QAChE,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE;YAC5B,CAAC,CAAC,EAAE,qBAAqB,EAAE,IAAI,uBAAuB,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE;YAChE,CAAC,CAAC,EAAE,CAAC;QACP,wFAAwF;QACxF,iBAAiB;QACjB,QAAQ,EAAE;YACR,6EAA6E;YAC7E,4EAA4E;YAC5E,QAAQ,EAAE,IAAI,iBAAiB,CAAC,GAAG,CAAC,gBAAgB,CAAC;YACrD,gFAAgF;YAChF,+EAA+E;YAC/E,cAAc,EAAE,IAAI,0BAA0B,CAAC,GAAG,CAAC,wBAAwB,CAAC;YAC5E,aAAa,EAAE,mBAAmB;YAClC,uFAAuF;YACvF,oEAAoE;YACpE,cAAc,EAAE,IAAI,sBAAsB,CAAC,GAAG,CAAC,kBAAkB,CAAC;YAClE,iFAAiF;YACjF,uDAAuD;YACvD,WAAW,EAAE,IAAI,oBAAoB,CAAC,GAAG,CAAC;YAC1C,gFAAgF;YAChF,+EAA+E;YAC/E,kCAAkC;SACnC;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,gCAAgC,CAAC,KAKzC;IAQC,OAAO;QACL,GAAG,CAAC,KAAK,CAAC,4BAA4B;YACpC,CAAC,CAAC,EAAE,qBAAqB,EAAE,KAAK,CAAC,4BAA4B,EAAE;YAC/D,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,uBAAuB,CAAC;YACzB,KAAK,EAAE,KAAK,CAAC,eAAe;YAC5B,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,sBAAsB;SAC9C,CAAC;QACF,+FAA+F;QAC/F,4BAA4B;QAC5B,GAAG,yBAAyB,CAAC,KAAK,CAAC,eAAe,CAAC;KACpD,CAAA;AACH,CAAC"}
@@ -25,6 +25,7 @@ export declare function buildWorkerSharedServices(input: WorkerSharedServicesInp
25
25
  subscriptions: import("@cat-factory/integrations").ProviderSubscriptionService | undefined;
26
26
  testSecretsService: import("@cat-factory/integrations").TestSecretsService | undefined;
27
27
  capabilityCredentialsService: import("@cat-factory/integrations").CapabilityCredentialsService | undefined;
28
+ mcpOAuthService: import("@cat-factory/integrations").McpOAuthService | undefined;
28
29
  validationConfigService: import("@cat-factory/integrations").ValidationConfigService;
29
30
  personalSubscriptions: import("@cat-factory/integrations").PersonalSubscriptionService | undefined;
30
31
  apiKeys: import("@cat-factory/integrations").ApiKeyService | undefined;
@@ -1 +1 @@
1
- {"version":3,"file":"container-shared-services.d.ts","sourceRoot":"","sources":["../../src/infrastructure/container-shared-services.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,EACL,gCAAgC,EAChC,+BAA+B,EAChC,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAEtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AACzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA;AAChC,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAA;AAEnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAA;AAoB1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;AAIjE,MAAM,WAAW,yBAAyB;IACxC,GAAG,EAAE,GAAG,CAAA;IACR,MAAM,EAAE,SAAS,CAAA;IACjB,EAAE,EAAE,UAAU,CAAA;IACd,WAAW,EAAE,UAAU,CAAA;IACvB,KAAK,EAAE,WAAW,CAAA;IAClB,WAAW,EAAE,iBAAiB,CAAA;IAC9B,MAAM,EAAE,UAAU,CAAC,OAAO,eAAe,CAAC,CAAA;IAC1C,sBAAsB,EAAE,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC,wBAAwB,CAAC,CAAA;IAC5F,wBAAwB,EAAE,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC,YAAY,CAAC,CAAA;IACnF,kBAAkB,EAAE,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC,kBAAkB,CAAC,CAAA;IACnF,+BAA+B,EAAE,OAAO,GAAG,SAAS,CAAA;CACrD;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwKzE"}
1
+ {"version":3,"file":"container-shared-services.d.ts","sourceRoot":"","sources":["../../src/infrastructure/container-shared-services.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,EACL,gCAAgC,EAChC,+BAA+B,EAChC,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAEtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AACzC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA;AAChC,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAA;AAEnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAA;AAqB1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;AAIjE,MAAM,WAAW,yBAAyB;IACxC,GAAG,EAAE,GAAG,CAAA;IACR,MAAM,EAAE,SAAS,CAAA;IACjB,EAAE,EAAE,UAAU,CAAA;IACd,WAAW,EAAE,UAAU,CAAA;IACvB,KAAK,EAAE,WAAW,CAAA;IAClB,WAAW,EAAE,iBAAiB,CAAA;IAC9B,MAAM,EAAE,UAAU,CAAC,OAAO,eAAe,CAAC,CAAA;IAC1C,sBAAsB,EAAE,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC,wBAAwB,CAAC,CAAA;IAC5F,wBAAwB,EAAE,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC,YAAY,CAAC,CAAA;IACnF,kBAAkB,EAAE,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC,kBAAkB,CAAC,CAAA;IACnF,+BAA+B,EAAE,OAAO,GAAG,SAAS,CAAA;CACrD;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4KzE"}
@@ -6,7 +6,7 @@ import { resolveWorkerRegistries } from './container-registries.js';
6
6
  import { buildAccountSettings } from './container-account-settings.js';
7
7
  import { cloudflareContentStorage } from './container-artifact-storage.js';
8
8
  import { buildResolvePackageRegistries, selectEventPublisher } from './container.js';
9
- import { buildApiKeyService, buildLocalModelEndpointService, buildOpenRouterCatalogService, buildPersonalSubscriptionService, buildPublicApiKeyService, buildSubscriptionService, buildCapabilityCredentialsService, buildTestSecretsService, buildUserSecretService, buildValidationConfigService, } from './wireCredentialServices';
9
+ import { buildApiKeyService, buildLocalModelEndpointService, buildOpenRouterCatalogService, buildPersonalSubscriptionService, buildPublicApiKeyService, buildSubscriptionService, buildCapabilityCredentialsService, buildMcpOAuthService, buildTestSecretsService, buildUserSecretService, buildValidationConfigService, } from './wireCredentialServices';
10
10
  import { buildDefaultWebSearchUpstream } from './container-executor-deps.js';
11
11
  import { D1AgentContextSnapshotRepository } from './repositories/D1AgentContextSnapshotRepository';
12
12
  import { D1AgentSearchQueryRepository } from './repositories/D1AgentSearchQueryRepository';
@@ -26,6 +26,9 @@ export function buildWorkerSharedServices(input) {
26
26
  // CRUD controller and the engine's prompt refs (the executor builds its own value resolver).
27
27
  const testSecretsService = buildTestSecretsService(env, db, clock);
28
28
  const capabilityCredentialsService = buildCapabilityCredentialsService(env, db, clock);
29
+ // The per-workspace OAuth grants for remote MCP tool servers — shared by the connect/disconnect
30
+ // routes, the inventory's connection state, and the executor's dispatch-time token source.
31
+ const mcpOAuthService = buildMcpOAuthService(env, db, clock);
29
32
  const validationConfigService = buildValidationConfigService(db, clock);
30
33
  // The per-user individual-usage subscription store (Claude) — shared by the
31
34
  // personal-subscription controller and the container executor's personal lease.
@@ -110,6 +113,7 @@ export function buildWorkerSharedServices(input) {
110
113
  subscriptions,
111
114
  testSecretsService,
112
115
  capabilityCredentialsService,
116
+ mcpOAuthService,
113
117
  validationConfigService,
114
118
  personalSubscriptions,
115
119
  apiKeys,
@@ -1 +1 @@
1
- {"version":3,"file":"container-shared-services.js","sourceRoot":"","sources":["../../src/infrastructure/container-shared-services.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,gCAAgC,EAChC,+BAA+B,GAChC,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAA;AAGpE,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAA;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAA;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAA;AAC1E,OAAO,EAAE,6BAA6B,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AACpF,OAAO,EACL,kBAAkB,EAClB,8BAA8B,EAC9B,6BAA6B,EAC7B,gCAAgC,EAChC,wBAAwB,EACxB,wBAAwB,EACxB,iCAAiC,EACjC,uBAAuB,EACvB,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAA;AAC5E,OAAO,EAAE,gCAAgC,EAAE,MAAM,iDAAiD,CAAA;AAClG,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAA;AAC1F,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAA;AAC5F,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAC5E,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAA;AAC5F,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAA;AAC/C,OAAO,EAAE,wCAAwC,EAAE,MAAM,+BAA+B,CAAA;AAgBxF,MAAM,UAAU,yBAAyB,CAAC,KAAgC;IACxE,MAAM,EACJ,GAAG,EACH,MAAM,EACN,EAAE,EACF,WAAW,EACX,KAAK,EACL,WAAW,EACX,MAAM,EACN,sBAAsB,EACtB,wBAAwB,EACxB,kBAAkB,GACnB,GAAG,KAAK,CAAA;IAET,iFAAiF;IACjF,oEAAoE;IACpE,4DAA4D;IAC5D,MAAM,aAAa,GAAG,wBAAwB,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAE9D,wFAAwF;IACxF,6FAA6F;IAC7F,MAAM,kBAAkB,GAAG,uBAAuB,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAClE,MAAM,4BAA4B,GAAG,iCAAiC,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAEtF,MAAM,uBAAuB,GAAG,4BAA4B,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;IAEvE,4EAA4E;IAC5E,gFAAgF;IAChF,MAAM,qBAAqB,GAAG,gCAAgC,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAE9E,4EAA4E;IAC5E,gFAAgF;IAChF,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAElD,2FAA2F;IAC3F,MAAM,aAAa,GAAG,wBAAwB,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAE9D,sFAAsF;IACtF,8EAA8E;IAC9E,MAAM,mBAAmB,GAAG,8BAA8B,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAE1E,qFAAqF;IACrF,sFAAsF;IACtF,MAAM,WAAW,GAAG,sBAAsB,CACxC,GAAG,EACH,EAAE,EACF,KAAK,EACL,sBAAsB,EACtB,MAAM,CAAC,WAAW,CACnB,CAAA;IAED,yFAAyF;IACzF,uFAAuF;IACvF,MAAM,iBAAiB,GAAG,6BAA6B,CACrD,GAAG,EACH,EAAE,EACF,KAAK,EACL,OAAO,EACP,MAAM,CAAC,KAAK,CAAC,QAAQ,CACtB,CAAA;IAED,sFAAsF;IACtF,8EAA8E;IAC9E,gEAAgE;IAChE,MAAM,uBAAuB,GAAG,KAAK,CAAC,+BAA+B,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAA;IAEjF,qFAAqF;IACrF,sEAAsE;IACtE,MAAM,cAAc,GAAG,oBAAoB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IAEpD,oFAAoF;IACpF,qFAAqF;IACrF,oFAAoF;IACpF,sFAAsF;IACtF,0CAA0C;IAC1C,MAAM,yBAAyB,GAAG,IAAI,gCAAgC,CAAC;QACrE,8BAA8B,EAAE,IAAI,gCAAgC,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QACzF,2BAA2B,EAAE,IAAI,6BAA6B,CAAC,EAAE,EAAE,EAAE,CAAC;QACtE,WAAW;QACX,KAAK;QACL,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,aAAa;KAClD,CAAC,CAAA;IAEF,mFAAmF;IACnF,iFAAiF;IACjF,iFAAiF;IACjF,iFAAiF;IACjF,MAAM,wBAAwB,GAAG,IAAI,+BAA+B,CAAC;QACnE,0BAA0B,EAAE,IAAI,4BAA4B,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QACjF,2BAA2B,EAAE,IAAI,6BAA6B,CAAC,EAAE,EAAE,EAAE,CAAC;QACtE,WAAW;QACX,KAAK;QACL,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,aAAa;KAClD,CAAC,CAAA;IAEF,2FAA2F;IAC3F,qFAAqF;IACrF,gFAAgF;IAChF,MAAM,eAAe,GAAG,oBAAoB,CAC1C,GAAG,EACH,EAAE,EACF,KAAK,EACL,wBAAwB,EACxB,MAAM,CAAC,eAAe,CACvB,CAAA;IAED,+FAA+F;IAC/F,6FAA6F;IAC7F,6FAA6F;IAC7F,MAAM,wBAAwB,GAAG,6BAA6B,CAAC,GAAG,CAAC,CAAA;IAEnE,uFAAuF;IACvF,2FAA2F;IAC3F,0FAA0F;IAC1F,wFAAwF;IACxF,oEAAoE;IACpE,MAAM,0BAA0B,GAAG,8BAA8B,CAAC;QAChE,eAAe;QACf,SAAS,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,qBAAqB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC;QACpF,QAAQ,EAAE,IAAI,6BAA6B,CAAC,EAAE,EAAE,EAAE,CAAC;QACnD,WAAW;QACX,KAAK;QACL,gBAAgB,EAAE,kBAAkB;QACpC,cAAc,EAAE,wBAAwB,CAAC,cAAc;QACvD,MAAM;KACP,CAAC,CAAA;IAEF,6FAA6F;IAC7F,4FAA4F;IAC5F,6EAA6E;IAC7E,MAAM,mBAAmB,GAAG,IAAI,qBAAqB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;IAE5E,gGAAgG;IAChG,6FAA6F;IAC7F,kDAAkD;IAClD,MAAM,0BAA0B,GAAG,wCAAwC,CACzE,GAAG,EACH,MAAM,EACN,EAAE,EACF,KAAK,CACN,CAAA;IAED,OAAO;QACL,uBAAuB;QACvB,aAAa;QACb,kBAAkB;QAClB,4BAA4B;QAC5B,uBAAuB;QACvB,qBAAqB;QACrB,OAAO;QACP,aAAa;QACb,mBAAmB;QACnB,WAAW;QACX,iBAAiB;QACjB,cAAc;QACd,yBAAyB;QACzB,wBAAwB;QACxB,eAAe;QACf,uFAAuF;QACvF,4FAA4F;QAC5F,8EAA8E;QAC9E,yBAAyB,EAAE,6BAA6B,CAAC,GAAG,EAAE,EAAE,CAAC;QACjE,wBAAwB,EAAE,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC;QAC9D,wBAAwB;QACxB,0BAA0B;QAC1B,mBAAmB;QACnB,0BAA0B;KAC3B,CAAA;AACH,CAAC"}
1
+ {"version":3,"file":"container-shared-services.js","sourceRoot":"","sources":["../../src/infrastructure/container-shared-services.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,gCAAgC,EAChC,+BAA+B,GAChC,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,8BAA8B,EAAE,MAAM,qBAAqB,CAAA;AAGpE,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAA;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAA;AACtE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAA;AAC1E,OAAO,EAAE,6BAA6B,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AACpF,OAAO,EACL,kBAAkB,EAClB,8BAA8B,EAC9B,6BAA6B,EAC7B,gCAAgC,EAChC,wBAAwB,EACxB,wBAAwB,EACxB,iCAAiC,EACjC,oBAAoB,EACpB,uBAAuB,EACvB,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAA;AAC5E,OAAO,EAAE,gCAAgC,EAAE,MAAM,iDAAiD,CAAA;AAClG,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAA;AAC1F,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAA;AAC5F,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAC5E,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAA;AAC5F,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAA;AAC/C,OAAO,EAAE,wCAAwC,EAAE,MAAM,+BAA+B,CAAA;AAgBxF,MAAM,UAAU,yBAAyB,CAAC,KAAgC;IACxE,MAAM,EACJ,GAAG,EACH,MAAM,EACN,EAAE,EACF,WAAW,EACX,KAAK,EACL,WAAW,EACX,MAAM,EACN,sBAAsB,EACtB,wBAAwB,EACxB,kBAAkB,GACnB,GAAG,KAAK,CAAA;IAET,iFAAiF;IACjF,oEAAoE;IACpE,4DAA4D;IAC5D,MAAM,aAAa,GAAG,wBAAwB,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAE9D,wFAAwF;IACxF,6FAA6F;IAC7F,MAAM,kBAAkB,GAAG,uBAAuB,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAClE,MAAM,4BAA4B,GAAG,iCAAiC,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IACtF,gGAAgG;IAChG,2FAA2F;IAC3F,MAAM,eAAe,GAAG,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAE5D,MAAM,uBAAuB,GAAG,4BAA4B,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;IAEvE,4EAA4E;IAC5E,gFAAgF;IAChF,MAAM,qBAAqB,GAAG,gCAAgC,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAE9E,4EAA4E;IAC5E,gFAAgF;IAChF,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAElD,2FAA2F;IAC3F,MAAM,aAAa,GAAG,wBAAwB,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAE9D,sFAAsF;IACtF,8EAA8E;IAC9E,MAAM,mBAAmB,GAAG,8BAA8B,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAE1E,qFAAqF;IACrF,sFAAsF;IACtF,MAAM,WAAW,GAAG,sBAAsB,CACxC,GAAG,EACH,EAAE,EACF,KAAK,EACL,sBAAsB,EACtB,MAAM,CAAC,WAAW,CACnB,CAAA;IAED,yFAAyF;IACzF,uFAAuF;IACvF,MAAM,iBAAiB,GAAG,6BAA6B,CACrD,GAAG,EACH,EAAE,EACF,KAAK,EACL,OAAO,EACP,MAAM,CAAC,KAAK,CAAC,QAAQ,CACtB,CAAA;IAED,sFAAsF;IACtF,8EAA8E;IAC9E,gEAAgE;IAChE,MAAM,uBAAuB,GAAG,KAAK,CAAC,+BAA+B,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAA;IAEjF,qFAAqF;IACrF,sEAAsE;IACtE,MAAM,cAAc,GAAG,oBAAoB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IAEpD,oFAAoF;IACpF,qFAAqF;IACrF,oFAAoF;IACpF,sFAAsF;IACtF,0CAA0C;IAC1C,MAAM,yBAAyB,GAAG,IAAI,gCAAgC,CAAC;QACrE,8BAA8B,EAAE,IAAI,gCAAgC,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QACzF,2BAA2B,EAAE,IAAI,6BAA6B,CAAC,EAAE,EAAE,EAAE,CAAC;QACtE,WAAW;QACX,KAAK;QACL,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,aAAa;KAClD,CAAC,CAAA;IAEF,mFAAmF;IACnF,iFAAiF;IACjF,iFAAiF;IACjF,iFAAiF;IACjF,MAAM,wBAAwB,GAAG,IAAI,+BAA+B,CAAC;QACnE,0BAA0B,EAAE,IAAI,4BAA4B,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;QACjF,2BAA2B,EAAE,IAAI,6BAA6B,CAAC,EAAE,EAAE,EAAE,CAAC;QACtE,WAAW;QACX,KAAK;QACL,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,aAAa;KAClD,CAAC,CAAA;IAEF,2FAA2F;IAC3F,qFAAqF;IACrF,gFAAgF;IAChF,MAAM,eAAe,GAAG,oBAAoB,CAC1C,GAAG,EACH,EAAE,EACF,KAAK,EACL,wBAAwB,EACxB,MAAM,CAAC,eAAe,CACvB,CAAA;IAED,+FAA+F;IAC/F,6FAA6F;IAC7F,6FAA6F;IAC7F,MAAM,wBAAwB,GAAG,6BAA6B,CAAC,GAAG,CAAC,CAAA;IAEnE,uFAAuF;IACvF,2FAA2F;IAC3F,0FAA0F;IAC1F,wFAAwF;IACxF,oEAAoE;IACpE,MAAM,0BAA0B,GAAG,8BAA8B,CAAC;QAChE,eAAe;QACf,SAAS,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,qBAAqB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC;QACpF,QAAQ,EAAE,IAAI,6BAA6B,CAAC,EAAE,EAAE,EAAE,CAAC;QACnD,WAAW;QACX,KAAK;QACL,gBAAgB,EAAE,kBAAkB;QACpC,cAAc,EAAE,wBAAwB,CAAC,cAAc;QACvD,MAAM;KACP,CAAC,CAAA;IAEF,6FAA6F;IAC7F,4FAA4F;IAC5F,6EAA6E;IAC7E,MAAM,mBAAmB,GAAG,IAAI,qBAAqB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;IAE5E,gGAAgG;IAChG,6FAA6F;IAC7F,kDAAkD;IAClD,MAAM,0BAA0B,GAAG,wCAAwC,CACzE,GAAG,EACH,MAAM,EACN,EAAE,EACF,KAAK,CACN,CAAA;IAED,OAAO;QACL,uBAAuB;QACvB,aAAa;QACb,kBAAkB;QAClB,4BAA4B;QAC5B,eAAe;QACf,uBAAuB;QACvB,qBAAqB;QACrB,OAAO;QACP,aAAa;QACb,mBAAmB;QACnB,WAAW;QACX,iBAAiB;QACjB,cAAc;QACd,yBAAyB;QACzB,wBAAwB;QACxB,eAAe;QACf,uFAAuF;QACvF,4FAA4F;QAC5F,8EAA8E;QAC9E,yBAAyB,EAAE,6BAA6B,CAAC,GAAG,EAAE,EAAE,CAAC;QACjE,wBAAwB,EAAE,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC;QAC9D,wBAAwB;QACxB,0BAA0B;QAC1B,mBAAmB;QACnB,0BAA0B;KAC3B,CAAA;AACH,CAAC"}
@@ -77,6 +77,15 @@ export interface Env {
77
77
  * transports simply don't record). Mirrors the Node facade's separate Postgres schema.
78
78
  */
79
79
  PROVISIONING_DB?: D1Database;
80
+ /**
81
+ * REQUIRED, dedicated D1 database for the account audit log, with its own migrations lineage
82
+ * (`audit-migrations/`). Separate from `DB` for RETENTION rather than write profile: audit is
83
+ * low-volume, but once run-lifecycle events land it is the only table that grows with run
84
+ * volume AND wants a multi-year window, and D1's ceiling is 10 GB PER DATABASE. Required for
85
+ * the same reason `TELEMETRY_DB` is: an unbound binding means no audit trail, which reads
86
+ * exactly like a deployment where nothing privileged ever happened.
87
+ */
88
+ AUDIT_DB: D1Database;
80
89
  /** Cloudflare Workers AI binding (optional; used when provider = workers-ai). */
81
90
  AI?: Ai;
82
91
  /**
@@ -345,6 +354,22 @@ export interface Env {
345
354
  GOOGLE_OAUTH_CLIENT_SECRET?: string;
346
355
  /** Explicit Google redirect_uri; derived from the request origin when unset. */
347
356
  GOOGLE_OAUTH_REDIRECT_URL?: string;
357
+ /** The provider's issuer URL, e.g. `https://acme.okta.com/oauth2/default`. */
358
+ AUTH_SSO_ISSUER_URL?: string;
359
+ AUTH_SSO_CLIENT_ID?: string;
360
+ AUTH_SSO_CLIENT_SECRET?: string;
361
+ /** Sign-in button label; names the operator's IdP, so it is never localized. */
362
+ AUTH_SSO_LABEL?: string;
363
+ /** Space-separated scopes; `openid` is added when absent. Default `openid profile email`. */
364
+ AUTH_SSO_SCOPES?: string;
365
+ /** Explicit redirect_uri; derived from the request origin when unset. */
366
+ AUTH_SSO_REDIRECT_URL?: string;
367
+ /** Optional narrowing: only these email domains may sign in via SSO. */
368
+ AUTH_SSO_ALLOWED_EMAIL_DOMAINS?: string;
369
+ /** The claim group memberships arrive under (`groups` by default). */
370
+ AUTH_SSO_GROUPS_CLAIM?: string;
371
+ /** Optional narrowing: the user must be in at least one of these directory groups. */
372
+ AUTH_SSO_REQUIRED_GROUPS?: string;
348
373
  /** Optional dedicated master key for the per-account email API key (falls back to ENCRYPTION_KEY). */
349
374
  EMAIL_ENCRYPTION_KEY?: string;
350
375
  /** Deployment-level system sender for auth emails (password reset): provider/from/key. */
@@ -377,6 +402,21 @@ export interface Env {
377
402
  * environment/runner integrations need it (plus their enable flag) to assemble.
378
403
  */
379
404
  ENCRYPTION_KEY?: string;
405
+ /**
406
+ * The redirect URL a vendor's authorization server sends an operator's browser back to when they
407
+ * connect a remote (`http`) MCP tool server: this deployment's public app URL followed by
408
+ * `/mcp-oauth-callback`, and the same string registered as the OAuth client's redirect URI at the
409
+ * vendor. It points at the SPA rather than at this Worker on purpose: the page there re-presents
410
+ * the vendor's `code` and `state` over the authenticated API, which is what lets the completion
411
+ * be gated on a session at all (a vendor's redirect carries no bearer token).
412
+ *
413
+ * Operator-set rather than derived from the request, because the vendor has this exact value on
414
+ * file: a `Host`-derived string differs behind every route a Worker is reachable by, and the
415
+ * exchange then fails at the vendor with `redirect_uri_mismatch`. Unset ⇒ the interactive grant
416
+ * refuses with a 503 naming this variable; the client-credentials grant needs no redirect and
417
+ * works without it.
418
+ */
419
+ MCP_OAUTH_REDIRECT_URL?: string;
380
420
  /**
381
421
  * Comma-separated allow-list of sources to register (e.g. `confluence,notion`).
382
422
  * Defaults to all known sources when unset.
@@ -624,6 +664,13 @@ export interface Env {
624
664
  * unbound binding fails the same way instead of NPE-ing deep in a repo on first write.
625
665
  */
626
666
  export declare function requireTelemetryDb(env: Env): D1Database;
667
+ /**
668
+ * Resolve the required audit database, throwing a clear, actionable error when the binding is
669
+ * absent. The account audit log lives in its own D1 database; every entry point that touches it
670
+ * goes through this, so an unbound binding fails the same way with the same message instead of
671
+ * NPE-ing deep in a repository on the first privileged action.
672
+ */
673
+ export declare function requireAuditDb(env: Env): D1Database;
627
674
  /**
628
675
  * Resolve the required primary database, throwing a clear, actionable error when the `DB` binding
629
676
  * is absent/misnamed. `DB` holds ALL transactional state, so an unbound binding otherwise NPEs
@@ -1 +1 @@
1
- {"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/infrastructure/env.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,EAAE,EACF,UAAU,EACV,sBAAsB,EACtB,KAAK,EACL,QAAQ,EACR,QAAQ,EACT,MAAM,2BAA2B,CAAA;AAElC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAA;AACnE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AACzE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAA;AAE9E,4EAA4E;AAC5E,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GACxD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAClE;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACpE;IAAE,IAAI,EAAE,4BAA4B,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAA;AAE5D;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,mBAAmB,CAAA;CAC3B;AAED,6EAA6E;AAC7E,MAAM,WAAW,GAAG;IAClB,EAAE,EAAE,UAAU,CAAA;IAEd;;;;;;OAMG;IACH,YAAY,EAAE,UAAU,CAAA;IAExB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,UAAU,CAAA;IAEvB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,UAAU,CAAA;IAE5B,iFAAiF;IACjF,EAAE,CAAC,EAAE,EAAE,CAAA;IAEP;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,QAAQ,CAAA;IAG1B,gFAAgF;IAChF,kBAAkB,CAAC,EAAE,QAAQ,CAAA;IAC7B,4EAA4E;IAC5E,eAAe,CAAC,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAA;IAC9C;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,QAAQ,CAAA;IAC7B;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,QAAQ,CAAA;IACrC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,QAAQ,CAAA;IAC5B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,sBAAsB,CAAC,kBAAkB,CAAC,CAAA;IAG7D;;;OAGG;IACH,cAAc,CAAC,EAAE,sBAAsB,CAAC,kBAAkB,CAAC,CAAA;IAC3D;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,sBAAsB,CAAC,eAAe,CAAC,CAAA;IAC1D;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAGlC,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,2FAA2F;IAC3F,YAAY,CAAC,EAAE,MAAM,CAAA;IAKrB;;;;OAIG;IACH,8BAA8B,CAAC,EAAE,MAAM,CAAA;IACvC,sFAAsF;IACtF,2BAA2B,CAAC,EAAE,MAAM,CAAA;IAGpC,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,2EAA2E;IAC3E,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,6EAA6E;IAC7E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAIzB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAA;IAGxB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAUzB,gFAAgF;IAChF,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IAMvB,kGAAkG;IAClG,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,iFAAiF;IACjF,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,oFAAoF;IACpF,0BAA0B,CAAC,EAAE,MAAM,CAAA;IAOnC,sFAAsF;IACtF,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC,6EAA6E;IAC7E,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,sFAAsF;IACtF,0BAA0B,CAAC,EAAE,MAAM,CAAA;IAGnC,iEAAiE;IACjE,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,sDAAsD;IACtD,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,gEAAgE;IAChE,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,gEAAgE;IAChE,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,8CAA8C;IAC9C,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,uCAAuC;IACvC,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,6EAA6E;IAC7E,iBAAiB,CAAC,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAA;IAC5C;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAA;IAC9C,0DAA0D;IAC1D,wBAAwB,CAAC,EAAE,QAAQ,CAAA;IAGnC,0FAA0F;IAC1F,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,wFAAwF;IACxF,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,qFAAqF;IACrF,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,oFAAoF;IACpF,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAG9B;;;;;OAKG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC,yDAAyD;IACzD,iCAAiC,CAAC,EAAE,MAAM,CAAA;IAG1C,gFAAgF;IAChF,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,oCAAoC;IACpC,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC,mFAAmF;IACnF,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,gFAAgF;IAChF,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,2DAA2D;IAC3D,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,oFAAoF;IACpF,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,yEAAyE;IACzE,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC;;;;OAIG;IACH,6BAA6B,CAAC,EAAE,MAAM,CAAA;IACtC,mFAAmF;IACnF,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,yFAAyF;IACzF,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,8EAA8E;IAC9E,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC,gFAAgF;IAChF,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC,gFAAgF;IAChF,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,sGAAsG;IACtG,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,0FAA0F;IAC1F,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAE7B;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IAGvB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAMzB;;;;OAIG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAA;IACrC,gFAAgF;IAChF,4BAA4B,CAAC,EAAE,MAAM,CAAA;IACrC;;;;OAIG;IACH,kCAAkC,CAAC,EAAE,MAAM,CAAA;IAG3C;;;;;;OAMG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAG/B;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,8GAA8G;IAC9G,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,yEAAyE;IACzE,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAGhC;;;;;OAKG;IACH,oCAAoC,CAAC,EAAE,MAAM,CAAA;IAC7C,sFAAsF;IACtF,oCAAoC,CAAC,EAAE,MAAM,CAAA;IAG7C;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAG3B;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAG3B;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B;;;OAGG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAGhC;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAG3B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,uCAAuC;IACvC,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,wDAAwD;IACxD,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,4DAA4D;IAC5D,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAG1B;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,yFAAyF;IACzF,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,qFAAqF;IACrF,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC,0EAA0E;IAC1E,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,sGAAsG;IACtG,4BAA4B,CAAC,EAAE,MAAM,CAAA;IACrC,+EAA+E;IAC/E,iCAAiC,CAAC,EAAE,MAAM,CAAA;IAC1C;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,0FAA0F;IAC1F,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC;;;OAGG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAA;IAGpC;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,uFAAuF;IACvF,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,+EAA+E;IAC/E,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,8FAA8F;IAC9F,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC,wFAAwF;IACxF,gCAAgC,CAAC,EAAE,MAAM,CAAA;IACzC,0FAA0F;IAC1F,+BAA+B,CAAC,EAAE,MAAM,CAAA;IACxC,wGAAwG;IACxG,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,+BAA+B,CAAC,EAAE,MAAM,CAAA;IACxC,sCAAsC,CAAC,EAAE,MAAM,CAAA;IAC/C,sCAAsC,CAAC,EAAE,MAAM,CAAA;IAC/C,kCAAkC,CAAC,EAAE,MAAM,CAAA;IAC3C;;;;;OAKG;IACH,kCAAkC,CAAC,EAAE,MAAM,CAAA;IAG3C;;;;;;;OAOG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC;;;;;OAKG;IACH,8BAA8B,CAAC,EAAE,MAAM,CAAA;IACvC,oFAAoF;IACpF,mCAAmC,CAAC,EAAE,MAAM,CAAA;IAG5C;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC;;;OAGG;IACH,gCAAgC,CAAC,EAAE,MAAM,CAAA;IACzC;;;;OAIG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAA;IACrC;;;;OAIG;IACH,+BAA+B,CAAC,EAAE,MAAM,CAAA;IACxC;;;;OAIG;IACH,+BAA+B,CAAC,EAAE,MAAM,CAAA;IACxC;;;;OAIG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,4FAA4F;IAC5F,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,0FAA0F;IAC1F,+BAA+B,CAAC,EAAE,MAAM,CAAA;CACzC;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,GAAG,GAAG,UAAU,CAKvD;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,GAAG,GAAG,UAAU,CAK9C"}
1
+ {"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/infrastructure/env.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,EAAE,EACF,UAAU,EACV,sBAAsB,EACtB,KAAK,EACL,QAAQ,EACR,QAAQ,EACT,MAAM,2BAA2B,CAAA;AAElC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAA;AACnE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAA;AACzE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAA;AAE9E,4EAA4E;AAC5E,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GACxD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAClE;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACpE;IAAE,IAAI,EAAE,4BAA4B,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAA;AAE5D;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,mBAAmB,CAAA;CAC3B;AAED,6EAA6E;AAC7E,MAAM,WAAW,GAAG;IAClB,EAAE,EAAE,UAAU,CAAA;IAEd;;;;;;OAMG;IACH,YAAY,EAAE,UAAU,CAAA;IAExB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,UAAU,CAAA;IAEvB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,UAAU,CAAA;IAE5B;;;;;;;OAOG;IACH,QAAQ,EAAE,UAAU,CAAA;IAEpB,iFAAiF;IACjF,EAAE,CAAC,EAAE,EAAE,CAAA;IAEP;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,QAAQ,CAAA;IAG1B,gFAAgF;IAChF,kBAAkB,CAAC,EAAE,QAAQ,CAAA;IAC7B,4EAA4E;IAC5E,eAAe,CAAC,EAAE,KAAK,CAAC,qBAAqB,CAAC,CAAA;IAC9C;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,QAAQ,CAAA;IAC7B;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,QAAQ,CAAA;IACrC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,QAAQ,CAAA;IAC5B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,sBAAsB,CAAC,kBAAkB,CAAC,CAAA;IAG7D;;;OAGG;IACH,cAAc,CAAC,EAAE,sBAAsB,CAAC,kBAAkB,CAAC,CAAA;IAC3D;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,sBAAsB,CAAC,eAAe,CAAC,CAAA;IAC1D;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAGlC,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,2FAA2F;IAC3F,YAAY,CAAC,EAAE,MAAM,CAAA;IAKrB;;;;OAIG;IACH,8BAA8B,CAAC,EAAE,MAAM,CAAA;IACvC,sFAAsF;IACtF,2BAA2B,CAAC,EAAE,MAAM,CAAA;IAGpC,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,2EAA2E;IAC3E,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,6EAA6E;IAC7E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAIzB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAA;IAGxB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAUzB,gFAAgF;IAChF,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IAMvB,kGAAkG;IAClG,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,iFAAiF;IACjF,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,oFAAoF;IACpF,0BAA0B,CAAC,EAAE,MAAM,CAAA;IAOnC,sFAAsF;IACtF,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC,6EAA6E;IAC7E,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,sFAAsF;IACtF,0BAA0B,CAAC,EAAE,MAAM,CAAA;IAGnC,iEAAiE;IACjE,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,sDAAsD;IACtD,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,gEAAgE;IAChE,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,gEAAgE;IAChE,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,8CAA8C;IAC9C,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,uCAAuC;IACvC,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,6EAA6E;IAC7E,iBAAiB,CAAC,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAA;IAC5C;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAA;IAC9C,0DAA0D;IAC1D,wBAAwB,CAAC,EAAE,QAAQ,CAAA;IAGnC,0FAA0F;IAC1F,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,wFAAwF;IACxF,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,qFAAqF;IACrF,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,oFAAoF;IACpF,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAG9B;;;;;OAKG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC,yDAAyD;IACzD,iCAAiC,CAAC,EAAE,MAAM,CAAA;IAG1C,gFAAgF;IAChF,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,oCAAoC;IACpC,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC,mFAAmF;IACnF,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,gFAAgF;IAChF,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,2DAA2D;IAC3D,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,oFAAoF;IACpF,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,yEAAyE;IACzE,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC;;;;OAIG;IACH,6BAA6B,CAAC,EAAE,MAAM,CAAA;IACtC,mFAAmF;IACnF,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,yFAAyF;IACzF,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,8EAA8E;IAC9E,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC,gFAAgF;IAChF,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC,gFAAgF;IAChF,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAQlC,8EAA8E;IAC9E,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,gFAAgF;IAChF,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,6FAA6F;IAC7F,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,yEAAyE;IACzE,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,wEAAwE;IACxE,8BAA8B,CAAC,EAAE,MAAM,CAAA;IACvC,sEAAsE;IACtE,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,sFAAsF;IACtF,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC,sGAAsG;IACtG,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,0FAA0F;IAC1F,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB;;;;;;OAMG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAE7B;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IAEvB;;;;;;;;;;;;;OAaG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAG/B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAMzB;;;;OAIG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAA;IACrC,gFAAgF;IAChF,4BAA4B,CAAC,EAAE,MAAM,CAAA;IACrC;;;;OAIG;IACH,kCAAkC,CAAC,EAAE,MAAM,CAAA;IAG3C;;;;;;OAMG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAG/B;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,8GAA8G;IAC9G,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,yEAAyE;IACzE,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAGhC;;;;;OAKG;IACH,oCAAoC,CAAC,EAAE,MAAM,CAAA;IAC7C,sFAAsF;IACtF,oCAAoC,CAAC,EAAE,MAAM,CAAA;IAG7C;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAG3B;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAG3B;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B;;;OAGG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAGhC;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAG3B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,uCAAuC;IACvC,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,wDAAwD;IACxD,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,4DAA4D;IAC5D,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAG1B;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,yFAAyF;IACzF,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,qFAAqF;IACrF,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC,0EAA0E;IAC1E,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,sGAAsG;IACtG,4BAA4B,CAAC,EAAE,MAAM,CAAA;IACrC,+EAA+E;IAC/E,iCAAiC,CAAC,EAAE,MAAM,CAAA;IAC1C;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,0FAA0F;IAC1F,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC;;;OAGG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAA;IAGpC;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,uFAAuF;IACvF,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,+EAA+E;IAC/E,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,8FAA8F;IAC9F,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC,wFAAwF;IACxF,gCAAgC,CAAC,EAAE,MAAM,CAAA;IACzC,0FAA0F;IAC1F,+BAA+B,CAAC,EAAE,MAAM,CAAA;IACxC,wGAAwG;IACxG,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,+BAA+B,CAAC,EAAE,MAAM,CAAA;IACxC,sCAAsC,CAAC,EAAE,MAAM,CAAA;IAC/C,sCAAsC,CAAC,EAAE,MAAM,CAAA;IAC/C,kCAAkC,CAAC,EAAE,MAAM,CAAA;IAC3C;;;;;OAKG;IACH,kCAAkC,CAAC,EAAE,MAAM,CAAA;IAG3C;;;;;;;OAOG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC;;;;;OAKG;IACH,8BAA8B,CAAC,EAAE,MAAM,CAAA;IACvC,oFAAoF;IACpF,mCAAmC,CAAC,EAAE,MAAM,CAAA;IAG5C;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAA;IACnC;;;OAGG;IACH,gCAAgC,CAAC,EAAE,MAAM,CAAA;IACzC;;;;OAIG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAA;IACrC;;;;OAIG;IACH,+BAA+B,CAAC,EAAE,MAAM,CAAA;IACxC;;;;OAIG;IACH,+BAA+B,CAAC,EAAE,MAAM,CAAA;IACxC;;;;OAIG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,4FAA4F;IAC5F,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,0FAA0F;IAC1F,+BAA+B,CAAC,EAAE,MAAM,CAAA;CACzC;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,GAAG,GAAG,UAAU,CAKvD;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,GAAG,GAAG,UAAU,CAKnD;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,GAAG,GAAG,UAAU,CAK9C"}
@@ -12,6 +12,18 @@ export function requireTelemetryDb(env) {
12
12
  }
13
13
  return env.TELEMETRY_DB;
14
14
  }
15
+ /**
16
+ * Resolve the required audit database, throwing a clear, actionable error when the binding is
17
+ * absent. The account audit log lives in its own D1 database; every entry point that touches it
18
+ * goes through this, so an unbound binding fails the same way with the same message instead of
19
+ * NPE-ing deep in a repository on the first privileged action.
20
+ */
21
+ export function requireAuditDb(env) {
22
+ if (!env.AUDIT_DB) {
23
+ throw configProblem({ key: 'AUDIT_DB', ...ENV_HELP.AUDIT_DB });
24
+ }
25
+ return env.AUDIT_DB;
26
+ }
15
27
  /**
16
28
  * Resolve the required primary database, throwing a clear, actionable error when the `DB` binding
17
29
  * is absent/misnamed. `DB` holds ALL transactional state, so an unbound binding otherwise NPEs
@@ -1 +1 @@
1
- {"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/infrastructure/env.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAurB7D;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAQ;IACzC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QACtB,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAA;IACxE,CAAC;IACD,OAAO,GAAG,CAAC,YAAY,CAAA;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,GAAQ;IAChC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAA;IACpD,CAAC;IACD,OAAO,GAAG,CAAC,EAAE,CAAA;AACf,CAAC"}
1
+ {"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/infrastructure/env.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAwuB7D;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAQ;IACzC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QACtB,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAA;IACxE,CAAC;IACD,OAAO,GAAG,CAAC,YAAY,CAAA;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,GAAQ;IACrC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAA;IAChE,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,CAAA;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,GAAQ;IAChC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,aAAa,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAA;IACpD,CAAC;IACD,OAAO,GAAG,CAAC,EAAE,CAAA;AACf,CAAC"}
@@ -1,4 +1,4 @@
1
- import type { AgentToolCall, AgentToolCallPageQuery, AgentToolCallRepository, AgentToolCallTrajectoryQuery } from '@cat-factory/kernel';
1
+ import type { AgentToolCall, AgentToolCallPageQuery, AgentToolCallRepository, AgentToolCallSummary, AgentToolCallTrajectoryQuery } from '@cat-factory/kernel';
2
2
  import type { D1Database } from '@cloudflare/workers-types';
3
3
  /**
4
4
  * D1-backed sink for the tool-call trajectory. Lives in the dedicated TELEMETRY_DB database
@@ -14,7 +14,7 @@ export declare class D1AgentToolCallRepository implements AgentToolCallRepositor
14
14
  private insertStatement;
15
15
  listByExecution(workspaceId: string, query: AgentToolCallTrajectoryQuery): Promise<AgentToolCall[]>;
16
16
  listPage(workspaceId: string, query: AgentToolCallPageQuery): Promise<AgentToolCall[]>;
17
- countByExecution(workspaceId: string, executionId: string): Promise<number>;
17
+ summarizeByExecution(workspaceId: string, executionId: string): Promise<AgentToolCallSummary[]>;
18
18
  deleteOlderThan(epochMs: number): Promise<number>;
19
19
  }
20
20
  //# sourceMappingURL=D1AgentToolCallRepository.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"D1AgentToolCallRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1AgentToolCallRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,sBAAsB,EACtB,uBAAuB,EACvB,4BAA4B,EAC7B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAkD3D;;;;GAIG;AACH,qBAAa,yBAA0B,YAAW,uBAAuB;IACvE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,UAAU,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAStD;IAED,OAAO,CAAC,eAAe;IA6BjB,eAAe,CACnB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,4BAA4B,GAClC,OAAO,CAAC,aAAa,EAAE,CAAC,CAsB1B;IAEK,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAyB3F;IAEK,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAQhF;IAEK,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAOtD;CACF"}
1
+ {"version":3,"file":"D1AgentToolCallRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1AgentToolCallRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,EACpB,4BAA4B,EAC7B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAkD3D;;;;GAIG;AACH,qBAAa,yBAA0B,YAAW,uBAAuB;IACvE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,UAAU,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAStD;IAED,OAAO,CAAC,eAAe;IA6BjB,eAAe,CACnB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,4BAA4B,GAClC,OAAO,CAAC,aAAa,EAAE,CAAC,CA0B1B;IAEK,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CA6B3F;IAEK,oBAAoB,CACxB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAqBjC;IAEK,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAOtD;CACF"}
@@ -65,6 +65,10 @@ export class D1AgentToolCallRepository {
65
65
  clauses.push('job_id = ?');
66
66
  binds.push(query.jobId);
67
67
  }
68
+ if (query.ok !== undefined) {
69
+ clauses.push('ok = ?');
70
+ binds.push(query.ok ? 1 : 0);
71
+ }
68
72
  binds.push(query.limit);
69
73
  const { results } = await this.db
70
74
  .prepare(`SELECT * FROM agent_tool_calls
@@ -82,6 +86,10 @@ export class D1AgentToolCallRepository {
82
86
  clauses.push('job_id = ?');
83
87
  binds.push(query.jobId);
84
88
  }
89
+ if (query.ok !== undefined) {
90
+ clauses.push('ok = ?');
91
+ binds.push(query.ok ? 1 : 0);
92
+ }
85
93
  if (query.cursor) {
86
94
  // Composite keyset matching the ORDER BY, so rows sharing a `created_at` millisecond are
87
95
  // not skipped between pages — which on this sink is the COMMON case, not the corner one:
@@ -99,12 +107,25 @@ export class D1AgentToolCallRepository {
99
107
  .all();
100
108
  return (results ?? []).map(rowToCall);
101
109
  }
102
- async countByExecution(workspaceId, executionId) {
103
- const row = await this.db
104
- .prepare('SELECT COUNT(*) AS n FROM agent_tool_calls WHERE workspace_id = ? AND execution_id = ?')
110
+ async summarizeByExecution(workspaceId, executionId) {
111
+ // One GROUP BY over the run's rows on `idx_agent_tool_calls_execution`, reading neither
112
+ // body column. The failures are summed in SQL beside the count rather than counted by a
113
+ // second query or reduced in JS: two aggregates over one population are two chances to
114
+ // disagree about it, and pulling the rows back to count them here is what this method
115
+ // exists to avoid.
116
+ const { results } = await this.db
117
+ .prepare(`SELECT agent_kind, tool, COUNT(*) AS calls, SUM(CASE WHEN ok = 0 THEN 1 ELSE 0 END) AS failures
118
+ FROM agent_tool_calls
119
+ WHERE workspace_id = ? AND execution_id = ?
120
+ GROUP BY agent_kind, tool`)
105
121
  .bind(workspaceId, executionId)
106
- .first();
107
- return row?.n ?? 0;
122
+ .all();
123
+ return (results ?? []).map((row) => ({
124
+ agentKind: row.agent_kind,
125
+ tool: row.tool,
126
+ calls: Number(row.calls),
127
+ failures: Number(row.failures ?? 0),
128
+ }));
108
129
  }
109
130
  async deleteOlderThan(epochMs) {
110
131
  // Range delete on idx_agent_tool_calls_created; bounded by the rows pruned.
@@ -1 +1 @@
1
- {"version":3,"file":"D1AgentToolCallRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1AgentToolCallRepository.ts"],"names":[],"mappings":"AA2BA,SAAS,SAAS,CAAC,GAAgB;IACjC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,KAAK,EAAE,GAAG,CAAC,MAAM;QACjB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,EAAE,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC;QAChB,0FAA0F;QAC1F,yFAAyF;QACzF,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU;QACvD,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,iBAAiB,GAAG,EAAE,CAAA;AAE5B;;;;GAIG;AACH,MAAM,OAAO,yBAAyB;IACnB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAsB;QACrC,0FAA0F;QAC1F,yFAAyF;QACzF,4FAA4F;QAC5F,0DAA0D;QAC1D,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAA;QAClE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,iBAAiB,EAAE,CAAC;YAC9D,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAA;QACjE,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,IAAmB;QACzC,OAAO,IAAI,CAAC,EAAE;aACX,OAAO,CACN;;;;oCAI4B,CAC7B;aACA,IAAI,CACH,IAAI,CAAC,EAAE,EACP,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EACf,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,SAAS,CACf,CAAA;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,WAAmB,EACnB,KAAmC;QAEnC,0FAA0F;QAC1F,0FAA0F;QAC1F,uFAAuF;QACvF,oEAAoE;QACpE,MAAM,OAAO,GAAG,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAA;QACxD,MAAM,KAAK,GAAc,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;QACzD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YAC1B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACzB,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACvB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CACN;iBACS,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;;iBAErB,CACV;aACA,IAAI,CAAC,GAAG,KAAK,CAAC;aACd,GAAG,EAAe,CAAA;QACrB,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACvC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,WAAmB,EAAE,KAA6B;QAC/D,MAAM,OAAO,GAAG,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAA;QACxD,MAAM,KAAK,GAAc,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;QACzD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YAC1B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACzB,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,yFAAyF;YACzF,yFAAyF;YACzF,oFAAoF;YACpF,OAAO,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAA;YAC/D,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC7E,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACvB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CACN;iBACS,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;;iBAErB,CACV;aACA,IAAI,CAAC,GAAG,KAAK,CAAC;aACd,GAAG,EAAe,CAAA;QACrB,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACvC,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,WAAmB,EAAE,WAAmB;QAC7D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CACN,wFAAwF,CACzF;aACA,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC;aAC9B,KAAK,EAAiB,CAAA;QACzB,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;IACpB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAe;QACnC,4EAA4E;QAC5E,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC3B,OAAO,CAAC,mDAAmD,CAAC;aAC5D,IAAI,CAAC,OAAO,CAAC;aACb,GAAG,EAAE,CAAA;QACR,OAAO,IAAI,CAAC,OAAO,IAAI,CAAC,CAAA;IAC1B,CAAC;CACF"}
1
+ {"version":3,"file":"D1AgentToolCallRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1AgentToolCallRepository.ts"],"names":[],"mappings":"AA4BA,SAAS,SAAS,CAAC,GAAgB;IACjC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,KAAK,EAAE,GAAG,CAAC,MAAM;QACjB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,EAAE,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC;QAChB,0FAA0F;QAC1F,yFAAyF;QACzF,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU;QACvD,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,iBAAiB,GAAG,EAAE,CAAA;AAE5B;;;;GAIG;AACH,MAAM,OAAO,yBAAyB;IACnB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAsB;QACrC,0FAA0F;QAC1F,yFAAyF;QACzF,4FAA4F;QAC5F,0DAA0D;QAC1D,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAA;QAClE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,iBAAiB,EAAE,CAAC;YAC9D,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAA;QACjE,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,IAAmB;QACzC,OAAO,IAAI,CAAC,EAAE;aACX,OAAO,CACN;;;;oCAI4B,CAC7B;aACA,IAAI,CACH,IAAI,CAAC,EAAE,EACP,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,GAAG,EACR,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EACf,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,SAAS,CACf,CAAA;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,WAAmB,EACnB,KAAmC;QAEnC,0FAA0F;QAC1F,0FAA0F;QAC1F,uFAAuF;QACvF,oEAAoE;QACpE,MAAM,OAAO,GAAG,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAA;QACxD,MAAM,KAAK,GAAc,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;QACzD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YAC1B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACzB,CAAC;QACD,IAAI,KAAK,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACtB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC9B,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACvB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CACN;iBACS,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;;iBAErB,CACV;aACA,IAAI,CAAC,GAAG,KAAK,CAAC;aACd,GAAG,EAAe,CAAA;QACrB,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACvC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,WAAmB,EAAE,KAA6B;QAC/D,MAAM,OAAO,GAAG,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAA;QACxD,MAAM,KAAK,GAAc,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;QACzD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YAC1B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACzB,CAAC;QACD,IAAI,KAAK,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACtB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC9B,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,yFAAyF;YACzF,yFAAyF;YACzF,oFAAoF;YACpF,OAAO,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAA;YAC/D,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC7E,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACvB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CACN;iBACS,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;;iBAErB,CACV;aACA,IAAI,CAAC,GAAG,KAAK,CAAC;aACd,GAAG,EAAe,CAAA;QACrB,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACvC,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,WAAmB,EACnB,WAAmB;QAEnB,wFAAwF;QACxF,wFAAwF;QACxF,uFAAuF;QACvF,sFAAsF;QACtF,mBAAmB;QACnB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC9B,OAAO,CACN;;;mCAG2B,CAC5B;aACA,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC;aAC9B,GAAG,EAAyE,CAAA;QAC/E,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACnC,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YACxB,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;SACpC,CAAC,CAAC,CAAA;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAe;QACnC,4EAA4E;QAC5E,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE;aAC3B,OAAO,CAAC,mDAAmD,CAAC;aAC5D,IAAI,CAAC,OAAO,CAAC;aACb,GAAG,EAAE,CAAA;QACR,OAAO,IAAI,CAAC,OAAO,IAAI,CAAC,CAAA;IAC1B,CAAC;CACF"}
@@ -0,0 +1,15 @@
1
+ import type { AuditEventPage, AuditEventRecord, AuditEventRepository } from '@cat-factory/kernel';
2
+ import type { D1Database } from '@cloudflare/workers-types';
3
+ /** D1 append-only account audit log. Mirror of the Drizzle repo. */
4
+ export declare class D1AuditEventRepository implements AuditEventRepository {
5
+ private readonly db;
6
+ constructor({ db }: {
7
+ db: D1Database;
8
+ });
9
+ append(event: AuditEventRecord): Promise<void>;
10
+ listByAccount(accountId: string, options?: {
11
+ cursor?: string | null;
12
+ limit?: number;
13
+ }): Promise<AuditEventPage>;
14
+ }
15
+ //# sourceMappingURL=D1AuditEventRepository.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"D1AuditEventRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1AuditEventRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EAErB,MAAM,qBAAqB,CAAA;AAQ5B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAE3D,oEAAoE;AACpE,qBAAa,sBAAuB,YAAW,oBAAoB;IACjE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAyBnD;IAEK,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GACnD,OAAO,CAAC,cAAc,CAAC,CA8BzB;CACF"}
@@ -0,0 +1,47 @@
1
+ import { auditEventColumns, auditPageLimit, decodeAuditCursor, encodeAuditCursor, rowToAuditEventView, } from '@cat-factory/kernel';
2
+ /** D1 append-only account audit log. Mirror of the Drizzle repo. */
3
+ export class D1AuditEventRepository {
4
+ db;
5
+ constructor({ db }) {
6
+ this.db = db;
7
+ }
8
+ async append(event) {
9
+ const row = auditEventColumns(event);
10
+ // No conflict clause: an id collision is an id-generator bug, and quietly folding one append
11
+ // onto another would lose an audited action, the one outcome this table exists to prevent.
12
+ await this.db
13
+ .prepare(`INSERT INTO audit_events
14
+ (id, account_id, workspace_id, actor_kind, actor_user_id, actor_api_key_id,
15
+ action, target_type, target_id, details, at)
16
+ VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`)
17
+ .bind(row.id, row.account_id, row.workspace_id, row.actor_kind, row.actor_user_id, row.actor_api_key_id, row.action, row.target_type, row.target_id, row.details, row.at)
18
+ .run();
19
+ }
20
+ async listByAccount(accountId, options) {
21
+ const limit = auditPageLimit(options?.limit);
22
+ const after = decodeAuditCursor(options?.cursor);
23
+ // One extra row tells us whether another page exists, with no second COUNT query. The keyset
24
+ // predicate is the (at, id) pair, matching the index's ordering exactly: an OFFSET would
25
+ // re-read every earlier row and skip a row that arrived mid-pagination.
26
+ const statement = after
27
+ ? this.db
28
+ .prepare(`SELECT * FROM audit_events
29
+ WHERE account_id = ? AND (at < ? OR (at = ? AND id < ?))
30
+ ORDER BY at DESC, id DESC LIMIT ?`)
31
+ .bind(accountId, after.at, after.at, after.id, limit + 1)
32
+ : this.db
33
+ .prepare(`SELECT * FROM audit_events
34
+ WHERE account_id = ?
35
+ ORDER BY at DESC, id DESC LIMIT ?`)
36
+ .bind(accountId, limit + 1);
37
+ const result = await statement.all();
38
+ const rows = result.results ?? [];
39
+ const page = rows.slice(0, limit).map(rowToAuditEventView);
40
+ const last = page.at(-1);
41
+ return {
42
+ events: page,
43
+ nextCursor: rows.length > limit && last ? encodeAuditCursor(last) : null,
44
+ };
45
+ }
46
+ }
47
+ //# sourceMappingURL=D1AuditEventRepository.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"D1AuditEventRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1AuditEventRepository.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,qBAAqB,CAAA;AAG5B,oEAAoE;AACpE,MAAM,OAAO,sBAAsB;IAChB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAuB;QAClC,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;QACpC,6FAA6F;QAC7F,2FAA2F;QAC3F,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;;;kDAG0C,CAC3C;aACA,IAAI,CACH,GAAG,CAAC,EAAE,EACN,GAAG,CAAC,UAAU,EACd,GAAG,CAAC,YAAY,EAChB,GAAG,CAAC,UAAU,EACd,GAAG,CAAC,aAAa,EACjB,GAAG,CAAC,gBAAgB,EACpB,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,SAAS,EACb,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,EAAE,CACP;aACA,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,SAAiB,EACjB,OAAoD;QAEpD,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAC5C,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAChD,6FAA6F;QAC7F,yFAAyF;QACzF,wEAAwE;QACxE,MAAM,SAAS,GAAG,KAAK;YACrB,CAAC,CAAC,IAAI,CAAC,EAAE;iBACJ,OAAO,CACN;;gDAEoC,CACrC;iBACA,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,GAAG,CAAC,CAAC;YAC7D,CAAC,CAAC,IAAI,CAAC,EAAE;iBACJ,OAAO,CACN;;gDAEoC,CACrC;iBACA,IAAI,CAAC,SAAS,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;QAEjC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,EAAiB,CAAA;QACnD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAA;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QACxB,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,UAAU,EAAE,IAAI,CAAC,MAAM,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;SACzE,CAAA;IACH,CAAC;CACF"}
@@ -0,0 +1,24 @@
1
+ import type { McpOAuthGrantRecord, McpOAuthGrantRepository } from '@cat-factory/kernel';
2
+ import type { D1Database } from '@cloudflare/workers-types';
3
+ /**
4
+ * A workspace's OAuth grants against remote MCP tool servers (migration 0082), one row per
5
+ * (workspace, server). `tokens` is a sealed envelope the service opens; `summary` is the non-secret
6
+ * blob the connection panel renders.
7
+ *
8
+ * The rev-guarded `compareAndSwap` is what the REFRESH path rides (an `UPDATE … WHERE rev = ?`
9
+ * whose changed-row count decides the winner); the blind `upsert` bumps the stored rev in SQL, so a
10
+ * human completing a grant reliably beats a concurrent refresh's stale base. The Drizzle mirror is
11
+ * `DrizzleMcpOAuthGrantRepository`.
12
+ */
13
+ export declare class D1McpOAuthGrantRepository implements McpOAuthGrantRepository {
14
+ private readonly db;
15
+ constructor({ db }: {
16
+ db: D1Database;
17
+ });
18
+ get(workspaceId: string, serverId: string): Promise<McpOAuthGrantRecord | null>;
19
+ listByWorkspace(workspaceId: string): Promise<McpOAuthGrantRecord[]>;
20
+ upsert(record: McpOAuthGrantRecord): Promise<void>;
21
+ compareAndSwap(record: McpOAuthGrantRecord, expectedRev: number | null): Promise<boolean>;
22
+ delete(workspaceId: string, serverId: string): Promise<void>;
23
+ }
24
+ //# sourceMappingURL=D1McpOAuthGrantRepository.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"D1McpOAuthGrantRepository.d.ts","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1McpOAuthGrantRepository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAA;AACvF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAwB3D;;;;;;;;;GASG;AACH,qBAAa,yBAA0B,YAAW,uBAAuB;IACvE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAE,EAAE;QAAE,EAAE,EAAE,UAAU,CAAA;KAAE,EAErC;IAEK,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAMpF;IAEK,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAMzE;IAEK,MAAM,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBvD;IAEK,cAAc,CAAC,MAAM,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAqC9F;IAEK,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKjE;CACF"}
@@ -0,0 +1,78 @@
1
+ function rowToRecord(row) {
2
+ return {
3
+ workspaceId: row.workspace_id,
4
+ serverId: row.server_id,
5
+ tokens: row.tokens,
6
+ summary: row.summary,
7
+ rev: row.rev,
8
+ createdAt: row.created_at,
9
+ updatedAt: row.updated_at,
10
+ };
11
+ }
12
+ /**
13
+ * A workspace's OAuth grants against remote MCP tool servers (migration 0082), one row per
14
+ * (workspace, server). `tokens` is a sealed envelope the service opens; `summary` is the non-secret
15
+ * blob the connection panel renders.
16
+ *
17
+ * The rev-guarded `compareAndSwap` is what the REFRESH path rides (an `UPDATE … WHERE rev = ?`
18
+ * whose changed-row count decides the winner); the blind `upsert` bumps the stored rev in SQL, so a
19
+ * human completing a grant reliably beats a concurrent refresh's stale base. The Drizzle mirror is
20
+ * `DrizzleMcpOAuthGrantRepository`.
21
+ */
22
+ export class D1McpOAuthGrantRepository {
23
+ db;
24
+ constructor({ db }) {
25
+ this.db = db;
26
+ }
27
+ async get(workspaceId, serverId) {
28
+ const row = await this.db
29
+ .prepare(`SELECT * FROM mcp_oauth_grants WHERE workspace_id = ? AND server_id = ?`)
30
+ .bind(workspaceId, serverId)
31
+ .first();
32
+ return row ? rowToRecord(row) : null;
33
+ }
34
+ async listByWorkspace(workspaceId) {
35
+ const result = await this.db
36
+ .prepare(`SELECT * FROM mcp_oauth_grants WHERE workspace_id = ? ORDER BY server_id`)
37
+ .bind(workspaceId)
38
+ .all();
39
+ return (result.results ?? []).map(rowToRecord);
40
+ }
41
+ async upsert(record) {
42
+ await this.db
43
+ .prepare(`INSERT INTO mcp_oauth_grants (workspace_id, server_id, tokens, summary, rev, created_at, updated_at)
44
+ VALUES (?, ?, ?, ?, ?, ?, ?)
45
+ ON CONFLICT (workspace_id, server_id) DO UPDATE SET
46
+ tokens = excluded.tokens,
47
+ summary = excluded.summary,
48
+ rev = mcp_oauth_grants.rev + 1,
49
+ updated_at = excluded.updated_at`)
50
+ .bind(record.workspaceId, record.serverId, record.tokens, record.summary, record.rev, record.createdAt, record.updatedAt)
51
+ .run();
52
+ }
53
+ async compareAndSwap(record, expectedRev) {
54
+ if (expectedRev === null) {
55
+ const result = await this.db
56
+ .prepare(`INSERT INTO mcp_oauth_grants (workspace_id, server_id, tokens, summary, rev, created_at, updated_at)
57
+ VALUES (?, ?, ?, ?, ?, ?, ?)
58
+ ON CONFLICT (workspace_id, server_id) DO NOTHING`)
59
+ .bind(record.workspaceId, record.serverId, record.tokens, record.summary, record.rev, record.createdAt, record.updatedAt)
60
+ .run();
61
+ return (result.meta?.changes ?? 0) > 0;
62
+ }
63
+ const result = await this.db
64
+ .prepare(`UPDATE mcp_oauth_grants
65
+ SET tokens = ?, summary = ?, rev = ?, updated_at = ?
66
+ WHERE workspace_id = ? AND server_id = ? AND rev = ?`)
67
+ .bind(record.tokens, record.summary, record.rev, record.updatedAt, record.workspaceId, record.serverId, expectedRev)
68
+ .run();
69
+ return (result.meta?.changes ?? 0) > 0;
70
+ }
71
+ async delete(workspaceId, serverId) {
72
+ await this.db
73
+ .prepare(`DELETE FROM mcp_oauth_grants WHERE workspace_id = ? AND server_id = ?`)
74
+ .bind(workspaceId, serverId)
75
+ .run();
76
+ }
77
+ }
78
+ //# sourceMappingURL=D1McpOAuthGrantRepository.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"D1McpOAuthGrantRepository.js","sourceRoot":"","sources":["../../../src/infrastructure/repositories/D1McpOAuthGrantRepository.ts"],"names":[],"mappings":"AAaA,SAAS,WAAW,CAAC,GAAqB;IACxC,OAAO;QACL,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,yBAAyB;IACnB,EAAE,CAAY;IAE/B,YAAY,EAAE,EAAE,EAAsB;QACpC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAA;IACd,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,WAAmB,EAAE,QAAgB;QAC7C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE;aACtB,OAAO,CAAC,yEAAyE,CAAC;aAClF,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC;aAC3B,KAAK,EAAoB,CAAA;QAC5B,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IACtC,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,WAAmB;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE;aACzB,OAAO,CAAC,0EAA0E,CAAC;aACnF,IAAI,CAAC,WAAW,CAAC;aACjB,GAAG,EAAoB,CAAA;QAC1B,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IAChD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAA2B;QACtC,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CACN;;;;;;4CAMoC,CACrC;aACA,IAAI,CACH,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,GAAG,EACV,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,CACjB;aACA,GAAG,EAAE,CAAA;IACV,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAA2B,EAAE,WAA0B;QAC1E,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE;iBACzB,OAAO,CACN;;4DAEkD,CACnD;iBACA,IAAI,CACH,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,GAAG,EACV,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,CACjB;iBACA,GAAG,EAAE,CAAA;YACR,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;QACxC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE;aACzB,OAAO,CACN;;8DAEsD,CACvD;aACA,IAAI,CACH,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,GAAG,EACV,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,QAAQ,EACf,WAAW,CACZ;aACA,GAAG,EAAE,CAAA;QACR,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;IACxC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,QAAgB;QAChD,MAAM,IAAI,CAAC,EAAE;aACV,OAAO,CAAC,uEAAuE,CAAC;aAChF,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC;aAC3B,GAAG,EAAE,CAAA;IACV,CAAC;CACF"}
@@ -1,5 +1,5 @@
1
1
  import type { Clock, GitHubRepo, GroupCacheHandle, ResolveUserGitHubToken } from '@cat-factory/kernel';
2
- import { ApiKeyService, LocalModelEndpointService, OpenRouterCatalogService, PersonalSubscriptionService, ProviderSubscriptionService, PublicApiKeyService, TestSecretsService, CapabilityCredentialsService, UserSecretService, ValidationConfigService, type UserSecretKindRegistry } from '@cat-factory/integrations';
2
+ import { ApiKeyService, LocalModelEndpointService, OpenRouterCatalogService, PersonalSubscriptionService, ProviderSubscriptionService, PublicApiKeyService, TestSecretsService, CapabilityCredentialsService, McpOAuthService, UserSecretService, ValidationConfigService, type UserSecretKindRegistry } from '@cat-factory/integrations';
3
3
  import type { D1Database } from '@cloudflare/workers-types';
4
4
  import type { Env } from './env';
5
5
  /**
@@ -73,6 +73,17 @@ export declare function buildTestSecretsService(env: Env, db: D1Database, clock:
73
73
  * executor and the controller each build their own.
74
74
  */
75
75
  export declare function buildCapabilityCredentialsService(env: Env, db: D1Database, clock: Clock): CapabilityCredentialsService | undefined;
76
+ /**
77
+ * Build the PER-WORKSPACE MCP OAUTH GRANT store (sealed), or undefined when the shared encryption
78
+ * key is absent. Backs the tool-server connect/disconnect routes, the inventory's connection
79
+ * state, AND the dispatch-time token source the executor mints an `Authorization` header from.
80
+ *
81
+ * Absent is a real deployment shape rather than a broken one: a Worker with no ENCRYPTION_KEY has
82
+ * nowhere to keep a grant, so every OAuth-declaring server is stated to its agent as
83
+ * `oauth_not_connected` instead of dispatched without a token. Stateless, so building a fresh
84
+ * instance per call site is safe (mirrors the sealed stores above).
85
+ */
86
+ export declare function buildMcpOAuthService(env: Env, db: D1Database, clock: Clock): McpOAuthService | undefined;
76
87
  /**
77
88
  * Build the per-service PRE-PR VALIDATION CHECK store — the commands the executor-harness runs
78
89
  * against the checkout before opening a PR. Backs the validation-check CRUD controller and the
@@ -1 +1 @@
1
- {"version":3,"file":"wireCredentialServices.d.ts","sourceRoot":"","sources":["../../src/infrastructure/wireCredentialServices.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,KAAK,EACL,UAAU,EACV,gBAAgB,EAChB,sBAAsB,EACvB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,aAAa,EACb,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,2BAA2B,EAC3B,mBAAmB,EAEnB,kBAAkB,EAElB,4BAA4B,EAC5B,iBAAiB,EACjB,uBAAuB,EACvB,KAAK,sBAAsB,EAE5B,MAAM,2BAA2B,CAAA;AAElC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA;AA0BhC;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,2BAA2B,GAAG,SAAS,CAazC;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,aAAa,GAAG,SAAS,CAa3B;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,mBAAmB,GAAG,SAAS,CASjC;AAED;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAC9C,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,2BAA2B,GAAG,SAAS,CAczC;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAC5C,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,yBAAyB,GAAG,SAAS,CAevC;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,EAIZ,sBAAsB,CAAC,EAAE,sBAAsB,EAI/C,gBAAgB,CAAC,EAAE,gBAAgB,CAAC,UAAU,EAAE,CAAC,GAChD,iBAAiB,GAAG,SAAS,CAe/B;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,sBAAsB,GAAG,SAAS,CAGpC;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,aAAa,GAAG,SAAS,EAClC,aAAa,EAAE,MAAM,GACpB,wBAAwB,GAAG,SAAS,CAWtC;AACD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,kBAAkB,GAAG,SAAS,CAYhC;AAED;;;;;;;;GAQG;AACH,wBAAgB,iCAAiC,CAC/C,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,4BAA4B,GAAG,SAAS,CAW1C;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAC1C,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,uBAAuB,CAMzB"}
1
+ {"version":3,"file":"wireCredentialServices.d.ts","sourceRoot":"","sources":["../../src/infrastructure/wireCredentialServices.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,KAAK,EACL,UAAU,EACV,gBAAgB,EAChB,sBAAsB,EACvB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,aAAa,EACb,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,2BAA2B,EAC3B,mBAAmB,EAEnB,kBAAkB,EAElB,4BAA4B,EAE5B,eAAe,EACf,iBAAiB,EACjB,uBAAuB,EACvB,KAAK,sBAAsB,EAE5B,MAAM,2BAA2B,CAAA;AAElC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,OAAO,CAAA;AA2BhC;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,2BAA2B,GAAG,SAAS,CAazC;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,aAAa,GAAG,SAAS,CAa3B;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,mBAAmB,GAAG,SAAS,CASjC;AAED;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAC9C,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,2BAA2B,GAAG,SAAS,CAczC;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAC5C,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,yBAAyB,GAAG,SAAS,CAevC;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,EAIZ,sBAAsB,CAAC,EAAE,sBAAsB,EAI/C,gBAAgB,CAAC,EAAE,gBAAgB,CAAC,UAAU,EAAE,CAAC,GAChD,iBAAiB,GAAG,SAAS,CAe/B;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,sBAAsB,GAAG,SAAS,CAGpC;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,aAAa,GAAG,SAAS,EAClC,aAAa,EAAE,MAAM,GACpB,wBAAwB,GAAG,SAAS,CAWtC;AACD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,kBAAkB,GAAG,SAAS,CAYhC;AAED;;;;;;;;GAQG;AACH,wBAAgB,iCAAiC,CAC/C,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,4BAA4B,GAAG,SAAS,CAW1C;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,GAAG,EACR,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,eAAe,GAAG,SAAS,CAW7B;AAED;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAC1C,EAAE,EAAE,UAAU,EACd,KAAK,EAAE,KAAK,GACX,uBAAuB,CAMzB"}
@@ -1,9 +1,10 @@
1
- import { ApiKeyService, LocalModelEndpointService, OpenRouterCatalogService, PersonalSubscriptionService, ProviderSubscriptionService, PublicApiKeyService, TEST_SECRETS_CIPHER_INFO, TestSecretsService, CAPABILITY_CREDENTIALS_CIPHER_INFO, CapabilityCredentialsService, UserSecretService, ValidationConfigService, usdRateForSpendCurrency, } from '@cat-factory/integrations';
1
+ import { ApiKeyService, LocalModelEndpointService, OpenRouterCatalogService, PersonalSubscriptionService, ProviderSubscriptionService, PublicApiKeyService, TEST_SECRETS_CIPHER_INFO, TestSecretsService, CAPABILITY_CREDENTIALS_CIPHER_INFO, CapabilityCredentialsService, MCP_OAUTH_CIPHER_INFO, McpOAuthService, UserSecretService, ValidationConfigService, usdRateForSpendCurrency, } from '@cat-factory/integrations';
2
2
  import { WebCryptoPersonalSecretCipher } from '@cat-factory/server';
3
3
  import { baseUrlFor } from './ai/providerEndpoints';
4
4
  import { WebCryptoSecretCipher } from './environments/WebCryptoSecretCipher';
5
5
  import { D1BlockRepository } from './repositories/D1BlockRepository';
6
6
  import { D1CapabilityCredentialRepository } from './repositories/D1CapabilityCredentialRepository';
7
+ import { D1McpOAuthGrantRepository } from './repositories/D1McpOAuthGrantRepository';
7
8
  import { D1TestSecretsRepository } from './repositories/D1TestSecretsRepository';
8
9
  import { D1ValidationConfigRepository } from './repositories/D1ValidationConfigRepository';
9
10
  import { D1ProviderSubscriptionTokenRepository } from './repositories/D1ProviderSubscriptionTokenRepository';
@@ -223,6 +224,29 @@ export function buildCapabilityCredentialsService(env, db, clock) {
223
224
  clock,
224
225
  });
225
226
  }
227
+ /**
228
+ * Build the PER-WORKSPACE MCP OAUTH GRANT store (sealed), or undefined when the shared encryption
229
+ * key is absent. Backs the tool-server connect/disconnect routes, the inventory's connection
230
+ * state, AND the dispatch-time token source the executor mints an `Authorization` header from.
231
+ *
232
+ * Absent is a real deployment shape rather than a broken one: a Worker with no ENCRYPTION_KEY has
233
+ * nowhere to keep a grant, so every OAuth-declaring server is stated to its agent as
234
+ * `oauth_not_connected` instead of dispatched without a token. Stateless, so building a fresh
235
+ * instance per call site is safe (mirrors the sealed stores above).
236
+ */
237
+ export function buildMcpOAuthService(env, db, clock) {
238
+ const encryptionKey = env.ENCRYPTION_KEY?.trim();
239
+ if (!encryptionKey)
240
+ return undefined;
241
+ return new McpOAuthService({
242
+ mcpOAuthGrantRepository: new D1McpOAuthGrantRepository({ db }),
243
+ secretCipher: new WebCryptoSecretCipher({
244
+ masterKeyBase64: encryptionKey,
245
+ info: MCP_OAUTH_CIPHER_INFO,
246
+ }),
247
+ clock,
248
+ });
249
+ }
226
250
  /**
227
251
  * Build the per-service PRE-PR VALIDATION CHECK store — the commands the executor-harness runs
228
252
  * against the checkout before opening a PR. Backs the validation-check CRUD controller and the
@@ -1 +1 @@
1
- {"version":3,"file":"wireCredentialServices.js","sourceRoot":"","sources":["../../src/infrastructure/wireCredentialServices.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,aAAa,EACb,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,2BAA2B,EAC3B,mBAAmB,EACnB,wBAAwB,EACxB,kBAAkB,EAClB,kCAAkC,EAClC,4BAA4B,EAC5B,iBAAiB,EACjB,uBAAuB,EAEvB,uBAAuB,GACxB,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAA;AAGnE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AACpE,OAAO,EAAE,gCAAgC,EAAE,MAAM,iDAAiD,CAAA;AAClG,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAA;AAChF,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAA;AAC1F,OAAO,EAAE,qCAAqC,EAAE,MAAM,sDAAsD,CAAA;AAC5G,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAA;AACtF,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAA;AAClF,OAAO,EACL,gCAAgC,EAChC,kCAAkC,GACnC,MAAM,iDAAiD,CAAA;AACxD,OAAO,EAAE,8BAA8B,EAAE,MAAM,+CAA+C,CAAA;AAC9F,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAA;AAC9E,OAAO,EAAE,gCAAgC,EAAE,MAAM,iDAAiD,CAAA;AAClG,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAE7C,0FAA0F;AAC1F,+EAA+E;AAC/E,0FAA0F;AAC1F,2FAA2F;AAC3F,sEAAsE;AAEtE;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,eAAe,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAClD,IAAI,CAAC,eAAe;QAAE,OAAO,SAAS,CAAA;IACtC,OAAO,IAAI,2BAA2B,CAAC;QACrC,mCAAmC,EAAE,IAAI,qCAAqC,CAAC,EAAE,EAAE,EAAE,CAAC;QACtF,mBAAmB,EAAE,IAAI,qBAAqB,CAAC,EAAE,EAAE,EAAE,CAAC;QACtD,YAAY,EAAE,IAAI,qBAAqB,CAAC;YACtC,eAAe;YACf,IAAI,EAAE,oCAAoC;SAC3C,CAAC;QACF,WAAW,EAAE,IAAI,iBAAiB,EAAE;QACpC,KAAK;KACN,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,eAAe,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAClD,IAAI,CAAC,eAAe;QAAE,OAAO,SAAS,CAAA;IACtC,OAAO,IAAI,aAAa,CAAC;QACvB,wBAAwB,EAAE,IAAI,0BAA0B,CAAC,EAAE,EAAE,EAAE,CAAC;QAChE,mBAAmB,EAAE,IAAI,qBAAqB,CAAC,EAAE,EAAE,EAAE,CAAC;QACtD,YAAY,EAAE,IAAI,qBAAqB,CAAC;YACtC,eAAe;YACf,IAAI,EAAE,+BAA+B;SACtC,CAAC;QACF,WAAW,EAAE,IAAI,iBAAiB,EAAE;QACpC,KAAK;KACN,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,MAAM,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IACzC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAC7B,OAAO,IAAI,mBAAmB,CAAC;QAC7B,UAAU,EAAE,IAAI,wBAAwB,CAAC,EAAE,EAAE,EAAE,CAAC;QAChD,MAAM;QACN,WAAW,EAAE,IAAI,iBAAiB,EAAE;QACpC,KAAK;KACN,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gCAAgC,CAC9C,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,eAAe,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAClD,IAAI,CAAC,eAAe;QAAE,OAAO,SAAS,CAAA;IACtC,OAAO,IAAI,2BAA2B,CAAC;QACrC,8BAA8B,EAAE,IAAI,gCAAgC,CAAC,EAAE,EAAE,EAAE,CAAC;QAC5E,gCAAgC,EAAE,IAAI,kCAAkC,CAAC,EAAE,EAAE,EAAE,CAAC;QAChF,YAAY,EAAE,IAAI,qBAAqB,CAAC;YACtC,eAAe;YACf,IAAI,EAAE,oCAAoC;SAC3C,CAAC;QACF,cAAc,EAAE,IAAI,6BAA6B,EAAE;QACnD,WAAW,EAAE,IAAI,iBAAiB,EAAE;QACpC,KAAK;KACN,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAC5C,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,eAAe,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAClD,IAAI,CAAC,eAAe;QAAE,OAAO,SAAS,CAAA;IACtC,OAAO,IAAI,yBAAyB,CAAC;QACnC,4BAA4B,EAAE,IAAI,8BAA8B,CAAC,EAAE,EAAE,EAAE,CAAC;QACxE,YAAY,EAAE,IAAI,qBAAqB,CAAC;YACtC,eAAe;YACf,IAAI,EAAE,mCAAmC;SAC1C,CAAC;QACF,KAAK;QACL,4EAA4E;QAC5E,iFAAiF;QACjF,8EAA8E;QAC9E,oBAAoB,EAAE,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,KAAK,MAAM;KACpE,CAAC,CAAA;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAAQ,EACR,EAAc,EACd,KAAY;AACZ,yFAAyF;AACzF,qFAAqF;AACrF,iFAAiF;AACjF,sBAA+C;AAC/C,gGAAgG;AAChG,gGAAgG;AAChG,oFAAoF;AACpF,gBAAiD;IAEjD,MAAM,eAAe,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAClD,IAAI,CAAC,eAAe;QAAE,OAAO,SAAS,CAAA;IACtC,OAAO,IAAI,iBAAiB,CAAC;QAC3B,oBAAoB,EAAE,IAAI,sBAAsB,CAAC,EAAE,EAAE,EAAE,CAAC;QACxD,YAAY,EAAE,IAAI,qBAAqB,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;QAC7F,KAAK;QACL,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,gBAAgB;YAClB,CAAC,CAAC;gBACE,eAAe,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAChC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;aAC/E;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAA;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CACzC,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,WAAW,GAAG,sBAAsB,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAC1D,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AACxF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAC3C,GAAQ,EACR,EAAc,EACd,KAAY,EACZ,OAAkC,EAClC,aAAqB;IAErB,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAA;IAC9B,OAAO,IAAI,wBAAwB,CAAC;QAClC,8BAA8B,EAAE,IAAI,gCAAgC,CAAC,EAAE,EAAE,EAAE,CAAC;QAC5E,OAAO;QACP,KAAK;QACL,OAAO,EAAE,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,SAAS;QACnD,wFAAwF;QACxF,8DAA8D;QAC9D,iBAAiB,EAAE,uBAAuB,CAAC,aAAa,CAAC;KAC1D,CAAC,CAAA;AACJ,CAAC;AACD;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,aAAa,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAChD,IAAI,CAAC,aAAa;QAAE,OAAO,SAAS,CAAA;IACpC,OAAO,IAAI,kBAAkB,CAAC;QAC5B,qBAAqB,EAAE,IAAI,uBAAuB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC1D,YAAY,EAAE,IAAI,qBAAqB,CAAC;YACtC,eAAe,EAAE,aAAa;YAC9B,IAAI,EAAE,wBAAwB;SAC/B,CAAC;QACF,eAAe,EAAE,IAAI,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC9C,KAAK;KACN,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iCAAiC,CAC/C,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,aAAa,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAChD,IAAI,CAAC,aAAa;QAAE,OAAO,SAAS,CAAA;IACpC,OAAO,IAAI,4BAA4B,CAAC;QACtC,8BAA8B,EAAE,IAAI,gCAAgC,CAAC,EAAE,EAAE,EAAE,CAAC;QAC5E,YAAY,EAAE,IAAI,qBAAqB,CAAC;YACtC,eAAe,EAAE,aAAa;YAC9B,IAAI,EAAE,kCAAkC;SACzC,CAAC;QACF,KAAK;KACN,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAC1C,EAAc,EACd,KAAY;IAEZ,OAAO,IAAI,uBAAuB,CAAC;QACjC,0BAA0B,EAAE,IAAI,4BAA4B,CAAC,EAAE,EAAE,EAAE,CAAC;QACpE,eAAe,EAAE,IAAI,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC9C,KAAK;KACN,CAAC,CAAA;AACJ,CAAC"}
1
+ {"version":3,"file":"wireCredentialServices.js","sourceRoot":"","sources":["../../src/infrastructure/wireCredentialServices.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,aAAa,EACb,yBAAyB,EACzB,wBAAwB,EACxB,2BAA2B,EAC3B,2BAA2B,EAC3B,mBAAmB,EACnB,wBAAwB,EACxB,kBAAkB,EAClB,kCAAkC,EAClC,4BAA4B,EAC5B,qBAAqB,EACrB,eAAe,EACf,iBAAiB,EACjB,uBAAuB,EAEvB,uBAAuB,GACxB,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAA;AAGnE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AACpE,OAAO,EAAE,gCAAgC,EAAE,MAAM,iDAAiD,CAAA;AAClG,OAAO,EAAE,yBAAyB,EAAE,MAAM,0CAA0C,CAAA;AACpF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAA;AAChF,OAAO,EAAE,4BAA4B,EAAE,MAAM,6CAA6C,CAAA;AAC1F,OAAO,EAAE,qCAAqC,EAAE,MAAM,sDAAsD,CAAA;AAC5G,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAA;AACtF,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAA;AAClF,OAAO,EACL,gCAAgC,EAChC,kCAAkC,GACnC,MAAM,iDAAiD,CAAA;AACxD,OAAO,EAAE,8BAA8B,EAAE,MAAM,+CAA+C,CAAA;AAC9F,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAA;AAC9E,OAAO,EAAE,gCAAgC,EAAE,MAAM,iDAAiD,CAAA;AAClG,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAA;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAE7C,0FAA0F;AAC1F,+EAA+E;AAC/E,0FAA0F;AAC1F,2FAA2F;AAC3F,sEAAsE;AAEtE;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,eAAe,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAClD,IAAI,CAAC,eAAe;QAAE,OAAO,SAAS,CAAA;IACtC,OAAO,IAAI,2BAA2B,CAAC;QACrC,mCAAmC,EAAE,IAAI,qCAAqC,CAAC,EAAE,EAAE,EAAE,CAAC;QACtF,mBAAmB,EAAE,IAAI,qBAAqB,CAAC,EAAE,EAAE,EAAE,CAAC;QACtD,YAAY,EAAE,IAAI,qBAAqB,CAAC;YACtC,eAAe;YACf,IAAI,EAAE,oCAAoC;SAC3C,CAAC;QACF,WAAW,EAAE,IAAI,iBAAiB,EAAE;QACpC,KAAK;KACN,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,eAAe,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAClD,IAAI,CAAC,eAAe;QAAE,OAAO,SAAS,CAAA;IACtC,OAAO,IAAI,aAAa,CAAC;QACvB,wBAAwB,EAAE,IAAI,0BAA0B,CAAC,EAAE,EAAE,EAAE,CAAC;QAChE,mBAAmB,EAAE,IAAI,qBAAqB,CAAC,EAAE,EAAE,EAAE,CAAC;QACtD,YAAY,EAAE,IAAI,qBAAqB,CAAC;YACtC,eAAe;YACf,IAAI,EAAE,+BAA+B;SACtC,CAAC;QACF,WAAW,EAAE,IAAI,iBAAiB,EAAE;QACpC,KAAK;KACN,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,MAAM,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IACzC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAC7B,OAAO,IAAI,mBAAmB,CAAC;QAC7B,UAAU,EAAE,IAAI,wBAAwB,CAAC,EAAE,EAAE,EAAE,CAAC;QAChD,MAAM;QACN,WAAW,EAAE,IAAI,iBAAiB,EAAE;QACpC,KAAK;KACN,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gCAAgC,CAC9C,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,eAAe,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAClD,IAAI,CAAC,eAAe;QAAE,OAAO,SAAS,CAAA;IACtC,OAAO,IAAI,2BAA2B,CAAC;QACrC,8BAA8B,EAAE,IAAI,gCAAgC,CAAC,EAAE,EAAE,EAAE,CAAC;QAC5E,gCAAgC,EAAE,IAAI,kCAAkC,CAAC,EAAE,EAAE,EAAE,CAAC;QAChF,YAAY,EAAE,IAAI,qBAAqB,CAAC;YACtC,eAAe;YACf,IAAI,EAAE,oCAAoC;SAC3C,CAAC;QACF,cAAc,EAAE,IAAI,6BAA6B,EAAE;QACnD,WAAW,EAAE,IAAI,iBAAiB,EAAE;QACpC,KAAK;KACN,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAC5C,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,eAAe,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAClD,IAAI,CAAC,eAAe;QAAE,OAAO,SAAS,CAAA;IACtC,OAAO,IAAI,yBAAyB,CAAC;QACnC,4BAA4B,EAAE,IAAI,8BAA8B,CAAC,EAAE,EAAE,EAAE,CAAC;QACxE,YAAY,EAAE,IAAI,qBAAqB,CAAC;YACtC,eAAe;YACf,IAAI,EAAE,mCAAmC;SAC1C,CAAC;QACF,KAAK;QACL,4EAA4E;QAC5E,iFAAiF;QACjF,8EAA8E;QAC9E,oBAAoB,EAAE,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,KAAK,MAAM;KACpE,CAAC,CAAA;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAAQ,EACR,EAAc,EACd,KAAY;AACZ,yFAAyF;AACzF,qFAAqF;AACrF,iFAAiF;AACjF,sBAA+C;AAC/C,gGAAgG;AAChG,gGAAgG;AAChG,oFAAoF;AACpF,gBAAiD;IAEjD,MAAM,eAAe,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAClD,IAAI,CAAC,eAAe;QAAE,OAAO,SAAS,CAAA;IACtC,OAAO,IAAI,iBAAiB,CAAC;QAC3B,oBAAoB,EAAE,IAAI,sBAAsB,CAAC,EAAE,EAAE,EAAE,CAAC;QACxD,YAAY,EAAE,IAAI,qBAAqB,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;QAC7F,KAAK;QACL,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,gBAAgB;YAClB,CAAC,CAAC;gBACE,eAAe,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAChC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;aAC/E;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAA;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CACzC,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,WAAW,GAAG,sBAAsB,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,CAAC,CAAA;IAC1D,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AACxF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAC3C,GAAQ,EACR,EAAc,EACd,KAAY,EACZ,OAAkC,EAClC,aAAqB;IAErB,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAA;IAC9B,OAAO,IAAI,wBAAwB,CAAC;QAClC,8BAA8B,EAAE,IAAI,gCAAgC,CAAC,EAAE,EAAE,EAAE,CAAC;QAC5E,OAAO;QACP,KAAK;QACL,OAAO,EAAE,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,SAAS;QACnD,wFAAwF;QACxF,8DAA8D;QAC9D,iBAAiB,EAAE,uBAAuB,CAAC,aAAa,CAAC;KAC1D,CAAC,CAAA;AACJ,CAAC;AACD;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,aAAa,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAChD,IAAI,CAAC,aAAa;QAAE,OAAO,SAAS,CAAA;IACpC,OAAO,IAAI,kBAAkB,CAAC;QAC5B,qBAAqB,EAAE,IAAI,uBAAuB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC1D,YAAY,EAAE,IAAI,qBAAqB,CAAC;YACtC,eAAe,EAAE,aAAa;YAC9B,IAAI,EAAE,wBAAwB;SAC/B,CAAC;QACF,eAAe,EAAE,IAAI,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC9C,KAAK;KACN,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iCAAiC,CAC/C,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,aAAa,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAChD,IAAI,CAAC,aAAa;QAAE,OAAO,SAAS,CAAA;IACpC,OAAO,IAAI,4BAA4B,CAAC;QACtC,8BAA8B,EAAE,IAAI,gCAAgC,CAAC,EAAE,EAAE,EAAE,CAAC;QAC5E,YAAY,EAAE,IAAI,qBAAqB,CAAC;YACtC,eAAe,EAAE,aAAa;YAC9B,IAAI,EAAE,kCAAkC;SACzC,CAAC;QACF,KAAK;KACN,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAQ,EACR,EAAc,EACd,KAAY;IAEZ,MAAM,aAAa,GAAG,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAA;IAChD,IAAI,CAAC,aAAa;QAAE,OAAO,SAAS,CAAA;IACpC,OAAO,IAAI,eAAe,CAAC;QACzB,uBAAuB,EAAE,IAAI,yBAAyB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC9D,YAAY,EAAE,IAAI,qBAAqB,CAAC;YACtC,eAAe,EAAE,aAAa;YAC9B,IAAI,EAAE,qBAAqB;SAC5B,CAAC;QACF,KAAK;KACN,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAC1C,EAAc,EACd,KAAY;IAEZ,OAAO,IAAI,uBAAuB,CAAC;QACjC,0BAA0B,EAAE,IAAI,4BAA4B,CAAC,EAAE,EAAE,EAAE,CAAC;QACpE,eAAe,EAAE,IAAI,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC;QAC9C,KAAK;KACN,CAAC,CAAA;AACJ,CAAC"}
@@ -0,0 +1,27 @@
1
+ -- Per-workspace OAUTH GRANTS for remote (http) MCP tool servers (sealed).
2
+ --
3
+ -- A tool server declares its credentials by NAME and the value is resolved per dispatch through
4
+ -- the capability-credential chain, which is the right answer for a static token and no answer at
5
+ -- all for the OAuth-first vendor ecosystem (Figma, Atlassian, Slack and Linear remote MCP): those
6
+ -- servers issue a token to a CLIENT after a person authorises it, and the token expires. This is
7
+ -- the home for what comes out of that: the access token, the refresh token, and the non-secret
8
+ -- summary the connection panel renders.
9
+ --
10
+ -- Sealed at rest by the SecretCipher (tag 'cat-factory:mcp-oauth'), so the row carries no token in
11
+ -- the clear and can ride the mothership's persistence RPC, exactly like capability_credentials.
12
+ --
13
+ -- ONE ROW PER (workspace, server), unlike the one-blob-per-workspace credential store beside it.
14
+ -- The writes differ: a credential row is edited by a human filling in a checklist, while a grant
15
+ -- row is rewritten by a REFRESH on the dispatch path, and two dispatches refreshing two different
16
+ -- servers at once is the ordinary case. Per-server rows keep those writes off each other, and the
17
+ -- rev then only settles a race between two refreshes of the SAME grant, which is what it is for.
18
+ CREATE TABLE mcp_oauth_grants (
19
+ workspace_id TEXT NOT NULL,
20
+ server_id TEXT NOT NULL, -- McpServerDefinition.id
21
+ tokens TEXT NOT NULL, -- sealed JSON: access/refresh token, expiry, scope
22
+ summary TEXT NOT NULL DEFAULT '{}', -- non-secret JSON the operator surface renders
23
+ rev INTEGER NOT NULL DEFAULT 0, -- optimistic concurrency for the refresh path
24
+ created_at INTEGER NOT NULL,
25
+ updated_at INTEGER NOT NULL,
26
+ PRIMARY KEY (workspace_id, server_id)
27
+ );
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@cat-factory/worker",
3
- "version": "0.158.0",
3
+ "version": "0.160.0",
4
4
  "description": "Reusable Cloudflare Worker library (Hono + D1) exposing the Agent Architecture Board core: the `createApp()` Hono factory, the default fetch/scheduled/queue handler, and the Durable Object + Workflow classes. Deployments (see deploy/backend) supply the wrangler.toml + config and re-export these.",
5
5
  "repository": {
6
6
  "type": "git",
@@ -12,7 +12,8 @@
12
12
  "migrations",
13
13
  "telemetry-migrations",
14
14
  "sandbox-migrations",
15
- "migrations-provisioning"
15
+ "migrations-provisioning",
16
+ "audit-migrations"
16
17
  ],
17
18
  "type": "module",
18
19
  "main": "./dist/index.js",
@@ -42,22 +43,22 @@
42
43
  "pino": "^10.3.1",
43
44
  "valibot": "^1.4.2",
44
45
  "workers-ai-provider": "^4.0.0",
45
- "@cat-factory/agents": "0.112.6",
46
- "@cat-factory/contracts": "0.245.0",
47
- "@cat-factory/caching": "0.14.26",
48
- "@cat-factory/eks": "0.1.236",
49
- "@cat-factory/consensus": "0.14.26",
50
- "@cat-factory/gates": "0.9.5",
51
- "@cat-factory/gitlab": "0.15.41",
52
- "@cat-factory/integrations": "0.130.2",
53
- "@cat-factory/kernel": "0.243.1",
54
- "@cat-factory/observability-langfuse": "0.10.10",
55
- "@cat-factory/observability-otel": "0.13.2",
56
- "@cat-factory/orchestration": "0.212.0",
57
- "@cat-factory/prompt-fragments": "0.15.71",
58
- "@cat-factory/provider-cloudflare": "0.7.388",
59
- "@cat-factory/server": "0.222.2",
60
- "@cat-factory/spend": "0.15.8"
46
+ "@cat-factory/agents": "0.114.0",
47
+ "@cat-factory/caching": "0.15.0",
48
+ "@cat-factory/consensus": "0.14.28",
49
+ "@cat-factory/contracts": "0.247.0",
50
+ "@cat-factory/eks": "0.1.238",
51
+ "@cat-factory/gates": "0.9.7",
52
+ "@cat-factory/gitlab": "0.15.43",
53
+ "@cat-factory/integrations": "0.131.1",
54
+ "@cat-factory/kernel": "0.245.0",
55
+ "@cat-factory/observability-langfuse": "0.10.12",
56
+ "@cat-factory/observability-otel": "0.13.4",
57
+ "@cat-factory/orchestration": "0.214.0",
58
+ "@cat-factory/prompt-fragments": "0.15.73",
59
+ "@cat-factory/provider-cloudflare": "0.7.390",
60
+ "@cat-factory/server": "0.224.0",
61
+ "@cat-factory/spend": "0.15.10"
61
62
  },
62
63
  "devDependencies": {
63
64
  "@cloudflare/vitest-pool-workers": "^0.20.1",
@@ -65,7 +66,7 @@
65
66
  "typescript": "7.0.2",
66
67
  "vitest": "^4.1.10",
67
68
  "wrangler": "^4.118.0",
68
- "@cat-factory/conformance": "0.30.4"
69
+ "@cat-factory/conformance": "0.31.1"
69
70
  },
70
71
  "scripts": {
71
72
  "build": "tsc -b tsconfig.build.json",