@dork-labs/connector-providers 0.0.0-stage → 0.98.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 144 Studio, LLC
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,84 @@
-# Temporary Holding Version
+# @dork-labs/connector-providers
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+The connector contract DorkOS speaks, plus the adapter that talks to Composio.
+
+DorkOS lets an agent act in your other apps (Gmail, Slack, Notion and more) through a
+connection you approve. This package holds the parts of that which more than one program needs:
+the DorkOS app uses it on your computer, and DorkOS Cloud uses the same code for hosted
+connections. Publishing it means both sides read one definition instead of two copies that drift.
+
+```bash
+npm install @dork-labs/connector-providers zod
+```
+
+## Entry points
+
+```ts
+// The Composio adapter: catalog reads, managed accounts, events and webhook checks.
+// This entry point and the root one load the Composio SDK.
+import {
+  ComposioSdkClient,
+  ComposioWebhookVerifier,
+} from '@dork-labs/connector-providers/composio';
+
+// Zod schemas and types for connections, operations, events and the provider port.
+// Zod only, so a browser can use them.
+import { ConnectionIdSchema } from '@dork-labs/connector-providers/connector-schemas';
+import { ConnectorEventDefinitionSchema } from '@dork-labs/connector-providers/connector-event-schemas';
+import type { ConnectorProvider } from '@dork-labs/connector-providers/connector-provider';
+import type { ConnectorEventCapability } from '@dork-labs/connector-providers/connector-events';
+import { ConnectorAuthenticationSetupSchema } from '@dork-labs/connector-providers/connector-authentication-setup';
+
+// Key-sorted JSON, the form DorkOS hashes connector material over.
+import { stableStringify } from '@dork-labs/connector-providers/stable-stringify';
+
+// Check an agent's arguments against an operation's JSON Schema, without filling defaults.
+import { checkConnectorArguments } from '@dork-labs/connector-providers/connector-arguments';
+
+// The wire schemas between a linked DorkOS app and DorkOS Cloud for hosted connections.
+import { ManagedConnectorExecutionRequestSchema } from '@dork-labs/connector-providers/connector-managed-schemas';
+import { ManagedConnectorCatalogPageSchema } from '@dork-labs/connector-providers/connector-managed-discovery-schemas';
+import { ManagedConnectorUsageResponseSchema } from '@dork-labs/connector-providers/connector-managed-usage-schemas';
+```
+
+The root entry (`@dork-labs/connector-providers`) re-exports the Composio adapter and the event
+payload protector. Prefer the narrow subpaths when you only need the schemas: they never load the
+Composio SDK.
+
+## Versions
+
+This package carries the same version as each DorkOS release and is published with it, together
+with `@dork-labs/cloud-api`. The two always share a version number.
+
+While the version starts with `0.`, a caret range such as `^0.97.0` holds you on one release.
+Pin an exact version and bump it when you take a new DorkOS release.
+
+## Dependencies
+
+- `zod` is a **peer dependency** (`^4.6.2`), so your app and this package share one copy and
+  their schemas recognise each other.
+- `@composio/core` is a regular dependency at an **exact** version. The adapter is written
+  against that version's exact shapes.
+- This is a Node.js package. If you use TypeScript, install `@types/node` too: the Composio
+  SDK's own type files refer to Node's built-in modules.
+- `@dork-labs/cloud-api` is a regular dependency at the **same exact version** as this package.
+  The hosted-connection schemas use its connection grant shape. npm installs it for you.
+- Nothing else. No other package from the DorkOS monorepo is a dependency.
+  `src/__tests__/packaging.test.ts` checks this from the manifest, the imports and the lockfile.
+
+## Development
+
+```bash
+pnpm --filter @dork-labs/connector-providers build       # ESM + .d.ts into dist/
+pnpm --filter @dork-labs/connector-providers typecheck
+pnpm --filter @dork-labs/connector-providers lint
+pnpm vitest run packages/connector-providers             # from the repo root
+```
+
+Inside the monorepo, `@dorkos/shared` re-exports the schema modules under its old subpaths
+(`@dorkos/shared/connector-schemas` and the rest), so app code keeps one import. The modules
+themselves live here; edit them here.
+
+## License
+
+MIT

package/dist/composio/authentication-config-policy.d.ts

@@ -0,0 +1,11 @@
+/** Supported upstream policy facts; credential values and unknown keys are never retained. */
+export interface ComposioAuthenticationConfigPolicy {
+    type: 'default' | 'custom';
+    scopes: string[];
+    userScopes: string[];
+    credentialsEmpty: boolean;
+    routerEnabled: boolean;
+}
+/** Return only a verified empty/default policy shape; absent means unsuitable for automatic reuse. */
+export declare function projectComposioAuthenticationConfigPolicy(raw: unknown): ComposioAuthenticationConfigPolicy | undefined;
+//# sourceMappingURL=authentication-config-policy.d.ts.map

package/dist/composio/authentication-config-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication-config-policy.d.ts","sourceRoot":"","sources":["../../src/composio/authentication-config-policy.ts"],"names":[],"mappings":"AAGA,8FAA8F;AAC9F,MAAM,WAAW,kCAAkC;IACjD,IAAI,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC3B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,aAAa,EAAE,OAAO,CAAC;CACxB;AAwED,sGAAsG;AACtG,wBAAgB,yCAAyC,CACvD,GAAG,EAAE,OAAO,GACX,kCAAkC,GAAG,SAAS,CAmChD"}

package/dist/composio/authentication-config-policy.js

@@ -0,0 +1,103 @@
+/** Nonsecret projection of mutable automatic-authentication configuration policy. */
+import { z } from 'zod';
+const scopeValue = z.union([z.string().max(16_384), z.array(z.string().max(512)).max(512)]);
+const credentials = z
+    .object({ scopes: scopeValue.optional(), user_scopes: scopeValue.optional() })
+    .strict();
+const managedCredentials = credentials.extend({
+    client_id: z.string().max(16_384).optional(),
+    client_secret: z.string().max(16_384).optional(),
+    oauth_redirect_uri: z
+        .enum([
+        'https://backend.composio.dev/api/v1/auth-apps/add',
+        'https://backend.composio.dev/api/v3/toolkits/auth/callback',
+    ])
+        .optional(),
+});
+/**
+ * Composio's managed Slack app also stores Slack's legacy `verification_token`.
+ * Like `client_secret` it is the provider app's own material, so it is checked
+ * for shape and never retained. Accepted for the `slack` toolkit only: on any
+ * other toolkit an unexpected credential key still means the policy is unknown.
+ */
+const managedSlackCredentials = managedCredentials.extend({
+    verification_token: z.string().max(16_384).optional(),
+});
+const toolAccess = z
+    .object({
+    tools_available_for_execution: z.array(z.string()).max(0).optional(),
+    tools_for_connected_account_creation: z.array(z.string()).max(0).optional(),
+})
+    .strict();
+const policy = z.object({
+    type: z.enum(['default', 'custom']),
+    credentials: credentials.optional(),
+    shared_credentials: z.object({}).strict().optional(),
+    proxy_config: z.null().optional(),
+    restrict_to_following_tools: z.array(z.string()).max(0).optional(),
+    tool_access_config: toolAccess,
+    is_enabled_for_tool_router: z.boolean(),
+    is_connection_revoke_supported: z.boolean().optional(),
+});
+const knownKeys = new Set([
+    'id',
+    'name',
+    'no_of_connections',
+    'status',
+    'tool_access_config',
+    'toolkit',
+    'type',
+    'uuid',
+    'auth_scheme',
+    'created_at',
+    'created_by',
+    'credentials',
+    'expected_input_fields',
+    'is_composio_managed',
+    'is_connection_revoke_supported',
+    'is_enabled_for_tool_router',
+    'last_updated_at',
+    'proxy_config',
+    'restrict_to_following_tools',
+    'shared_credentials',
+]);
+function scopes(value) {
+    return [
+        ...new Set((Array.isArray(value) ? value : (value?.split(/[\s,]+/) ?? []))
+            .map((item) => item.trim())
+            .filter(Boolean)),
+    ].sort();
+}
+/** Return only a verified empty/default policy shape; absent means unsuitable for automatic reuse. */
+export function projectComposioAuthenticationConfigPolicy(raw) {
+    if (!raw ||
+        typeof raw !== 'object' ||
+        Array.isArray(raw) ||
+        Object.keys(raw).some((key) => !knownKeys.has(key)))
+        return undefined;
+    // Managed OAuth app credentials belong to Composio, not the connected account.
+    // Validate only the documented envelope; never retain its client credentials.
+    const envelope = raw;
+    const managed = envelope.type === 'default' &&
+        envelope.is_composio_managed === true &&
+        envelope.auth_scheme === 'OAUTH2';
+    const slack = managed &&
+        typeof envelope.toolkit === 'object' &&
+        envelope.toolkit !== null &&
+        envelope.toolkit.slug === 'slack';
+    const parsed = (managed
+        ? policy.extend({
+            credentials: (slack ? managedSlackCredentials : managedCredentials).optional(),
+        })
+        : policy).safeParse(raw);
+    if (!parsed.success)
+        return undefined;
+    return {
+        type: parsed.data.type,
+        scopes: scopes(parsed.data.credentials?.scopes),
+        userScopes: scopes(parsed.data.credentials?.user_scopes),
+        credentialsEmpty: Object.keys(parsed.data.credentials ?? {}).length === 0,
+        routerEnabled: parsed.data.is_enabled_for_tool_router,
+    };
+}
+//# sourceMappingURL=authentication-config-policy.js.map

package/dist/composio/authentication-config-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication-config-policy.js","sourceRoot":"","sources":["../../src/composio/authentication-config-policy.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC5F,MAAM,WAAW,GAAG,CAAC;KAClB,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC;KAC7E,MAAM,EAAE,CAAC;AACZ,MAAM,kBAAkB,GAAG,WAAW,CAAC,MAAM,CAAC;IAC5C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;IAC5C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;IAChD,kBAAkB,EAAE,CAAC;SAClB,IAAI,CAAC;QACJ,mDAAmD;QACnD,4DAA4D;KAC7D,CAAC;SACD,QAAQ,EAAE;CACd,CAAC,CAAC;AACH;;;;;GAKG;AACH,MAAM,uBAAuB,GAAG,kBAAkB,CAAC,MAAM,CAAC;IACxD,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAC;AACH,MAAM,UAAU,GAAG,CAAC;KACjB,MAAM,CAAC;IACN,6BAA6B,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpE,oCAAoC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC5E,CAAC;KACD,MAAM,EAAE,CAAC;AACZ,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACnC,WAAW,EAAE,WAAW,CAAC,QAAQ,EAAE;IACnC,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpD,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACjC,2BAA2B,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClE,kBAAkB,EAAE,UAAU;IAC9B,0BAA0B,EAAE,CAAC,CAAC,OAAO,EAAE;IACvC,8BAA8B,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC;AACH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,IAAI;IACJ,MAAM;IACN,mBAAmB;IACnB,QAAQ;IACR,oBAAoB;IACpB,SAAS;IACT,MAAM;IACN,MAAM;IACN,aAAa;IACb,YAAY;IACZ,YAAY;IACZ,aAAa;IACb,uBAAuB;IACvB,qBAAqB;IACrB,gCAAgC;IAChC,4BAA4B;IAC5B,iBAAiB;IACjB,cAAc;IACd,6BAA6B;IAC7B,oBAAoB;CACrB,CAAC,CAAC;AACH,SAAS,MAAM,CAAC,KAAoC;IAClD,OAAO;QACL,GAAG,IAAI,GAAG,CACR,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;aAC5D,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,OAAO,CAAC,CACnB;KACF,CAAC,IAAI,EAAE,CAAC;AACX,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,yCAAyC,CACvD,GAAY;IAEZ,IACE,CAAC,GAAG;QACJ,OAAO,GAAG,KAAK,QAAQ;QACvB,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAClB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEnD,OAAO,SAAS,CAAC;IACnB,+EAA+E;IAC/E,8EAA8E;IAC9E,MAAM,QAAQ,GAAG,GAA8B,CAAC;IAChD,MAAM,OAAO,GACX,QAAQ,CAAC,IAAI,KAAK,SAAS;QAC3B,QAAQ,CAAC,mBAAmB,KAAK,IAAI;QACrC,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC;IACpC,MAAM,KAAK,GACT,OAAO;QACP,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ;QACpC,QAAQ,CAAC,OAAO,KAAK,IAAI;QACxB,QAAQ,CAAC,OAAmC,CAAC,IAAI,KAAK,OAAO,CAAC;IACjE,MAAM,MAAM,GAAG,CACb,OAAO;QACL,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YACZ,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE;SAC/E,CAAC;QACJ,CAAC,CAAC,MAAM,CACX,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACjB,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACtC,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;QACtB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC;QAC/C,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC;QACxD,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC;QACzE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,0BAA0B;KACtD,CAAC;AACJ,CAAC"}

package/dist/composio/authentication-configuration.d.ts

@@ -0,0 +1,57 @@
+import { type ComposioAuthenticationConfigPolicy } from './authentication-config-policy.js';
+import { type ComposioAuthenticationDescriptor } from './authentication-contract.js';
+/** Normalized method metadata; contains no provider credentials or defaults. */
+export interface ComposioAuthenticationMethod {
+    scheme: string;
+    needsDeveloperConfiguration: boolean;
+    descriptor?: ComposioAuthenticationDescriptor;
+}
+/** Exact selected-toolkit metadata; never an authority-bearing public DTO. */
+export interface ComposioToolkitAuthentication {
+    toolkit: string;
+    enabled: boolean;
+    managedOAuth2: boolean;
+    managedScopes: string[];
+    managedUserScopes: string[];
+    methods: ComposioAuthenticationMethod[];
+}
+/** Safe configuration identity; vendor credentials and shared secrets are discarded. */
+export interface ComposioAuthenticationConfiguration {
+    id: string;
+    name: string;
+    toolkit: string;
+    scheme: string;
+    enabled: boolean;
+    managed: boolean;
+    policy?: ComposioAuthenticationConfigPolicy;
+}
+declare const metadataIssueLocations: readonly ["auth_config_creation_required", "auth_config_creation_optional", "connected_account_initiation_required", "connected_account_initiation_optional"];
+type MetadataIssueLocation = (typeof metadataIssueLocations)[number];
+declare const metadataMethodKinds: readonly ["oauth2", "supported_account_fields", "other"];
+type MetadataMethodKind = (typeof metadataMethodKinds)[number];
+/** Closed capability refusal with no provider response or credential values. */
+export declare class ComposioAuthenticationSetupError extends Error {
+    /** Stable server-only reason safe for structured diagnostics. */
+    readonly reason: 'disabled' | 'configured_mismatch' | 'unsupported_method' | 'unsupported_metadata';
+    /** Count of strict metadata issue objects, never provider keys or values. */
+    readonly metadataIssueCount?: number;
+    /** Fixed schema regions containing strict metadata issues. */
+    readonly metadataIssueLocations?: readonly MetadataIssueLocation[];
+    /** Closed authentication-method classes containing strict metadata issues. */
+    readonly metadataMethodKinds?: readonly MetadataMethodKind[];
+    constructor(reason: ComposioAuthenticationSetupError['reason'], metadata?: {
+        issueCount: number;
+        issueLocations: readonly string[];
+        methodKinds: readonly string[];
+    });
+}
+/** Normalize only declared fields; unsupported types stay unavailable rather than becoming OAuth. */
+export declare function normalizeComposioToolkitAuthentication(raw: unknown): ComposioToolkitAuthentication;
+/** Drop every provider envelope field except exact configuration identity and status. */
+export declare function normalizeComposioAuthenticationConfiguration(raw: unknown): ComposioAuthenticationConfiguration;
+/** Prefer an explicit configuration, then managed OAuth, then declared account-field methods. */
+export declare function selectComposioAuthentication(toolkit: ComposioToolkitAuthentication, configured?: ComposioAuthenticationConfiguration): ComposioAuthenticationDescriptor;
+/** Check mutable automatic policy without applying that restriction to an explicit custom mapping. */
+export declare function matchesComposioAutomaticAuthenticationPolicy(config: ComposioAuthenticationConfiguration, toolkit: ComposioToolkitAuthentication, descriptor: ComposioAuthenticationDescriptor): boolean;
+export {};
+//# sourceMappingURL=authentication-configuration.d.ts.map

package/dist/composio/authentication-configuration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication-configuration.d.ts","sourceRoot":"","sources":["../../src/composio/authentication-configuration.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,kCAAkC,EACxC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAEL,KAAK,gCAAgC,EACtC,MAAM,8BAA8B,CAAC;AAEtC,gFAAgF;AAChF,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,2BAA2B,EAAE,OAAO,CAAC;IACrC,UAAU,CAAC,EAAE,gCAAgC,CAAC;CAC/C;AAED,8EAA8E;AAC9E,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,OAAO,EAAE,4BAA4B,EAAE,CAAC;CACzC;AAED,wFAAwF;AACxF,MAAM,WAAW,mCAAmC;IAClD,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,kCAAkC,CAAC;CAC7C;AAED,QAAA,MAAM,sBAAsB,+JAKlB,CAAC;AACX,KAAK,qBAAqB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AACrE,QAAA,MAAM,mBAAmB,0DAA2D,CAAC;AACrF,KAAK,kBAAkB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAU/D,gFAAgF;AAChF,qBAAa,gCAAiC,SAAQ,KAAK;IACzD,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EACb,UAAU,GAAG,qBAAqB,GAAG,oBAAoB,GAAG,sBAAsB,CAAC;IACrF,6EAA6E;IAC7E,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,8DAA8D;IAC9D,QAAQ,CAAC,sBAAsB,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACnE,8EAA8E;IAC9E,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;gBAG3D,MAAM,EAAE,gCAAgC,CAAC,QAAQ,CAAC,EAClD,QAAQ,CAAC,EAAE;QACT,UAAU,EAAE,MAAM,CAAC;QACnB,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;QAClC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;KAChC;CA4BJ;AAmHD,qGAAqG;AACrG,wBAAgB,sCAAsC,CACpD,GAAG,EAAE,OAAO,GACX,6BAA6B,CA6E/B;AAED,yFAAyF;AACzF,wBAAgB,4CAA4C,CAC1D,GAAG,EAAE,OAAO,GACX,mCAAmC,CAsBrC;AAED,iGAAiG;AACjG,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,6BAA6B,EACtC,UAAU,CAAC,EAAE,mCAAmC,GAC/C,gCAAgC,CAkClC;AAED,sGAAsG;AACtG,wBAAgB,4CAA4C,CAC1D,MAAM,EAAE,mCAAmC,EAC3C,OAAO,EAAE,6BAA6B,EACtC,UAAU,EAAE,gCAAgC,GAC3C,OAAO,CAST"}

package/dist/composio/authentication-configuration.js

@@ -0,0 +1,299 @@
+/** Closed provider metadata used to select one hosted authentication method. */
+import { z } from 'zod';
+import { projectComposioAuthenticationConfigPolicy, } from './authentication-config-policy.js';
+import { ComposioAuthenticationDescriptorSchema, } from './authentication-contract.js';
+const metadataIssueLocations = [
+    'auth_config_creation_required',
+    'auth_config_creation_optional',
+    'connected_account_initiation_required',
+    'connected_account_initiation_optional',
+];
+const metadataMethodKinds = ['oauth2', 'supported_account_fields', 'other'];
+function isMetadataIssueLocation(value) {
+    return metadataIssueLocations.includes(value);
+}
+function isMetadataMethodKind(value) {
+    return metadataMethodKinds.includes(value);
+}
+/** Closed capability refusal with no provider response or credential values. */
+export class ComposioAuthenticationSetupError extends Error {
+    /** Stable server-only reason safe for structured diagnostics. */
+    reason;
+    /** Count of strict metadata issue objects, never provider keys or values. */
+    metadataIssueCount;
+    /** Fixed schema regions containing strict metadata issues. */
+    metadataIssueLocations;
+    /** Closed authentication-method classes containing strict metadata issues. */
+    metadataMethodKinds;
+    constructor(reason, metadata) {
+        super(reason === 'unsupported_metadata'
+            ? 'This service declares account-field constraints DorkOS does not support yet.'
+            : reason === 'disabled'
+                ? 'This service is currently unavailable.'
+                : reason === 'configured_mismatch'
+                    ? 'The configured account setup does not match this service.'
+                    : 'This service needs advanced account setup or uses account fields DorkOS does not support yet.');
+        this.name = 'ComposioAuthenticationSetupError';
+        this.reason = reason;
+        if (reason === 'unsupported_metadata' &&
+            metadata &&
+            Number.isSafeInteger(metadata.issueCount) &&
+            metadata.issueCount > 0) {
+            this.metadataIssueCount = metadata.issueCount;
+            this.metadataIssueLocations = Object.freeze([...new Set(metadata.issueLocations.filter(isMetadataIssueLocation))].sort());
+            this.metadataMethodKinds = Object.freeze([...new Set(metadata.methodKinds.filter(isMetadataMethodKind))].sort());
+        }
+    }
+}
+const text = z.string().min(1).max(512);
+const rawField = z
+    .object({
+    name: text,
+    displayName: z.string().max(512),
+    description: z.string().max(2048),
+    required: z.boolean(),
+    type: text,
+    is_secret: z.boolean().optional(),
+    user_visible: z.boolean().optional(),
+    default: z.string().nullable().optional(),
+    legacy_template_name: z.string().optional(),
+})
+    .strict();
+const providerOwnedOAuthAppSetupField = rawField.strip();
+const fieldGroup = z.object({
+    required: z.array(rawField).max(64),
+    optional: z.array(rawField).max(64),
+});
+function stripProviderOwnedOAuthAppSetupConstraints(raw) {
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
+        return raw;
+    const method = raw;
+    if (method.mode !== 'OAUTH2' || !method.fields || typeof method.fields !== 'object')
+        return raw;
+    const fields = method.fields;
+    const creation = fields.auth_config_creation;
+    if (!creation || typeof creation !== 'object' || Array.isArray(creation))
+        return raw;
+    const groups = creation;
+    if (!Array.isArray(groups.required) || !Array.isArray(groups.optional))
+        return raw;
+    const strip = (field) => {
+        const parsed = providerOwnedOAuthAppSetupField.safeParse(field);
+        return parsed.success ? parsed.data : field;
+    };
+    return {
+        ...method,
+        fields: {
+            ...fields,
+            auth_config_creation: {
+                ...groups,
+                required: groups.required.map(strip),
+                optional: groups.optional.map(strip),
+            },
+        },
+    };
+}
+const authenticationMethod = z.preprocess(stripProviderOwnedOAuthAppSetupConstraints, z.object({
+    mode: text,
+    fields: z.object({
+        auth_config_creation: fieldGroup,
+        connected_account_initiation: fieldGroup,
+    }),
+}));
+const metadata = z.object({
+    slug: z.string().min(1).max(200),
+    enabled: z.boolean(),
+    composio_managed_auth_schemes: z.array(text).max(64).optional(),
+    composio_managed_auth: z
+        .array(z.object({
+        mode: text,
+        scopes: z.object({ available: z.array(text).max(512) }),
+        user_scopes: z.object({ available: z.array(text).max(512) }).optional(),
+    }))
+        .max(64)
+        .optional(),
+    auth_config_details: z.array(authenticationMethod).max(64).optional(),
+});
+function invalid() {
+    throw new Error('Composio returned invalid authentication metadata.');
+}
+function strictMetadataIssueLocation(path) {
+    if (path.length !== 6 ||
+        path[0] !== 'auth_config_details' ||
+        typeof path[1] !== 'number' ||
+        path[2] !== 'fields' ||
+        !['auth_config_creation', 'connected_account_initiation'].includes(String(path[3])) ||
+        !['required', 'optional'].includes(String(path[4])) ||
+        typeof path[5] !== 'number') {
+        return undefined;
+    }
+    const location = `${String(path[3])}_${String(path[4])}`;
+    return isMetadataIssueLocation(location) ? location : undefined;
+}
+function strictMetadataMethodKind(raw, path) {
+    if (path[0] !== 'auth_config_details' ||
+        typeof path[1] !== 'number' ||
+        !raw ||
+        typeof raw !== 'object') {
+        return 'other';
+    }
+    const details = raw.auth_config_details;
+    const method = Array.isArray(details) ? details[path[1]] : undefined;
+    const mode = method && typeof method === 'object' ? method.mode : undefined;
+    if (mode === 'OAUTH2')
+        return 'oauth2';
+    if (['API_KEY', 'BEARER_TOKEN', 'BASIC', 'NO_AUTH'].includes(String(mode)))
+        return 'supported_account_fields';
+    return 'other';
+}
+/** Normalize only declared fields; unsupported types stay unavailable rather than becoming OAuth. */
+export function normalizeComposioToolkitAuthentication(raw) {
+    const parsed = metadata.safeParse(raw);
+    if (!parsed.success) {
+        const strictIssues = parsed.error.issues.filter((issue) => issue.code === 'unrecognized_keys');
+        if (strictIssues.length > 0)
+            throw new ComposioAuthenticationSetupError('unsupported_metadata', {
+                issueCount: strictIssues.length,
+                issueLocations: strictIssues.flatMap((issue) => {
+                    const location = strictMetadataIssueLocation(issue.path);
+                    return location ? [location] : [];
+                }),
+                methodKinds: strictIssues.map((issue) => strictMetadataMethodKind(raw, issue.path)),
+            });
+        return invalid();
+    }
+    const value = parsed.data;
+    const managed = value.composio_managed_auth?.filter((item) => item.mode === 'OAUTH2') ?? [];
+    if (managed.length > 1)
+        return invalid();
+    const details = value.auth_config_details ?? [];
+    if (new Set(details.map((item) => item.mode)).size !== details.length)
+        return invalid();
+    return {
+        toolkit: value.slug,
+        enabled: value.enabled,
+        managedOAuth2: managed.length === 1 || value.composio_managed_auth_schemes?.includes('OAUTH2') === true,
+        managedScopes: managed[0]?.scopes.available ?? [],
+        managedUserScopes: managed[0]?.user_scopes?.available ?? [],
+        methods: details.map((method) => {
+            const initiation = method.fields.connected_account_initiation;
+            const fields = [
+                ...initiation.required.map((field) => ({ ...field, required: true })),
+                ...initiation.optional,
+            ];
+            // Connect Link collects OAuth context itself; it does not enter our credential POST.
+            const normalized = ComposioAuthenticationDescriptorSchema.safeParse({
+                toolkit: value.slug,
+                scheme: method.mode,
+                kind: method.mode === 'OAUTH2' ? 'oauth' : method.mode === 'NO_AUTH' ? 'none' : 'fields',
+                source: 'account-fields',
+                fields: method.mode === 'OAUTH2'
+                    ? []
+                    : fields.map((field) => ({
+                        name: field.name,
+                        label: field.displayName || field.name,
+                        description: field.description,
+                        type: field.type,
+                        required: field.required,
+                        secret: field.is_secret === true || field.type === 'password',
+                    })),
+            });
+            const requiredWireField = method.mode === 'BEARER_TOKEN' ? 'token' : method.mode === 'BASIC' ? 'username' : undefined;
+            const requiredField = normalized.success && requiredWireField
+                ? normalized.data.fields.find((field) => field.name === requiredWireField && ['string', 'password'].includes(field.type))
+                : undefined;
+            const wireSupported = !requiredWireField || Boolean(requiredField);
+            // Connect Link owns OAuth context. Our credential forms cannot honor hidden
+            // account fields, so keep that method unavailable instead of exposing or
+            // silently dropping them. Other valid methods remain selectable.
+            const visibilitySupported = method.mode === 'OAUTH2' || fields.every((field) => field.user_visible !== false);
+            // The pinned create union requires these fields even if toolkit metadata calls them optional.
+            if (requiredField)
+                requiredField.required = true;
+            return {
+                scheme: method.mode,
+                needsDeveloperConfiguration: method.fields.auth_config_creation.required.length > 0,
+                ...(normalized.success && wireSupported && visibilitySupported
+                    ? { descriptor: normalized.data }
+                    : {}),
+            };
+        }),
+    };
+}
+/** Drop every provider envelope field except exact configuration identity and status. */
+export function normalizeComposioAuthenticationConfiguration(raw) {
+    const parsed = z
+        .object({
+        id: text,
+        name: text,
+        toolkit: z.object({ slug: z.string().min(1).max(200) }),
+        auth_scheme: text,
+        status: z.enum(['ENABLED', 'DISABLED']),
+        is_composio_managed: z.boolean().optional(),
+    })
+        .safeParse(raw);
+    if (!parsed.success)
+        return invalid();
+    const policy = projectComposioAuthenticationConfigPolicy(raw);
+    return {
+        ...(policy ? { policy } : {}),
+        id: parsed.data.id,
+        name: parsed.data.name,
+        toolkit: parsed.data.toolkit.slug,
+        scheme: parsed.data.auth_scheme,
+        enabled: parsed.data.status === 'ENABLED',
+        managed: parsed.data.is_composio_managed === true,
+    };
+}
+/** Prefer an explicit configuration, then managed OAuth, then declared account-field methods. */
+export function selectComposioAuthentication(toolkit, configured) {
+    if (!toolkit.enabled)
+        throw new ComposioAuthenticationSetupError('disabled');
+    if (configured) {
+        if (!configured.enabled || configured.toolkit !== toolkit.toolkit)
+            throw new ComposioAuthenticationSetupError('configured_mismatch');
+        // An exact enabled OAuth2 configuration already supplies developer setup; Connect Link
+        // collects its context even when optional toolkit field metadata is absent.
+        if (configured.scheme === 'OAUTH2') {
+            return {
+                toolkit: toolkit.toolkit,
+                scheme: 'OAUTH2',
+                kind: 'oauth',
+                source: 'configured',
+                fields: [],
+            };
+        }
+        const method = toolkit.methods.find((item) => item.scheme === configured.scheme);
+        if (!method?.descriptor)
+            throw new ComposioAuthenticationSetupError('unsupported_method');
+        return { ...method.descriptor, source: 'configured' };
+    }
+    if (toolkit.managedOAuth2) {
+        return {
+            toolkit: toolkit.toolkit,
+            scheme: 'OAUTH2',
+            kind: 'oauth',
+            source: 'managed',
+            fields: [],
+        };
+    }
+    for (const scheme of ['API_KEY', 'BEARER_TOKEN', 'BASIC', 'NO_AUTH']) {
+        const method = toolkit.methods.find((item) => item.scheme === scheme);
+        if (method?.descriptor && !method.needsDeveloperConfiguration)
+            return method.descriptor;
+    }
+    throw new ComposioAuthenticationSetupError('unsupported_method');
+}
+/** Check mutable automatic policy without applying that restriction to an explicit custom mapping. */
+export function matchesComposioAutomaticAuthenticationPolicy(config, toolkit, descriptor) {
+    const policy = config.policy;
+    if (!policy || policy.routerEnabled || descriptor.source === 'configured')
+        return false;
+    return descriptor.source === 'managed'
+        ? config.managed &&
+            policy.type === 'default' &&
+            policy.scopes.every((scope) => toolkit.managedScopes.includes(scope)) &&
+            policy.userScopes.every((scope) => toolkit.managedUserScopes.includes(scope))
+        : !config.managed && policy.type === 'custom' && policy.credentialsEmpty;
+}
+//# sourceMappingURL=authentication-configuration.js.map

package/dist/composio/authentication-configuration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication-configuration.js","sourceRoot":"","sources":["../../src/composio/authentication-configuration.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,yCAAyC,GAE1C,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,sCAAsC,GAEvC,MAAM,8BAA8B,CAAC;AA8BtC,MAAM,sBAAsB,GAAG;IAC7B,+BAA+B;IAC/B,+BAA+B;IAC/B,uCAAuC;IACvC,uCAAuC;CAC/B,CAAC;AAEX,MAAM,mBAAmB,GAAG,CAAC,QAAQ,EAAE,0BAA0B,EAAE,OAAO,CAAU,CAAC;AAGrF,SAAS,uBAAuB,CAAC,KAAa;IAC5C,OAAQ,sBAA4C,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAQ,mBAAyC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACpE,CAAC;AAED,gFAAgF;AAChF,MAAM,OAAO,gCAAiC,SAAQ,KAAK;IACzD,iEAAiE;IACxD,MAAM,CACsE;IACrF,6EAA6E;IACpE,kBAAkB,CAAU;IACrC,8DAA8D;IACrD,sBAAsB,CAAoC;IACnE,8EAA8E;IACrE,mBAAmB,CAAiC;IAE7D,YACE,MAAkD,EAClD,QAIC;QAED,KAAK,CACH,MAAM,KAAK,sBAAsB;YAC/B,CAAC,CAAC,8EAA8E;YAChF,CAAC,CAAC,MAAM,KAAK,UAAU;gBACrB,CAAC,CAAC,wCAAwC;gBAC1C,CAAC,CAAC,MAAM,KAAK,qBAAqB;oBAChC,CAAC,CAAC,2DAA2D;oBAC7D,CAAC,CAAC,+FAA+F,CACxG,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC;QAC/C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IACE,MAAM,KAAK,sBAAsB;YACjC,QAAQ;YACR,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC;YACzC,QAAQ,CAAC,UAAU,GAAG,CAAC,EACvB,CAAC;YACD,IAAI,CAAC,kBAAkB,GAAG,QAAQ,CAAC,UAAU,CAAC;YAC9C,IAAI,CAAC,sBAAsB,GAAG,MAAM,CAAC,MAAM,CACzC,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAC7E,CAAC;YACF,IAAI,CAAC,mBAAmB,GAAG,MAAM,CAAC,MAAM,CACtC,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CACvE,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACxC,MAAM,QAAQ,GAAG,CAAC;KACf,MAAM,CAAC;IACN,IAAI,EAAE,IAAI;IACV,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;IACjC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,IAAI,EAAE,IAAI;IACV,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzC,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5C,CAAC;KACD,MAAM,EAAE,CAAC;AACZ,MAAM,+BAA+B,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC;AACzD,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACnC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CACpC,CAAC,CAAC;AAEH,SAAS,0CAA0C,CAAC,GAAY;IAC9D,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACtE,MAAM,MAAM,GAAG,GAA8B,CAAC;IAC9C,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAChG,MAAM,MAAM,GAAG,MAAM,CAAC,MAAiC,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAM,CAAC,oBAAoB,CAAC;IAC7C,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,GAAG,CAAC;IACrF,MAAM,MAAM,GAAG,QAAmC,CAAC;IACnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO,GAAG,CAAC;IAEnF,MAAM,KAAK,GAAG,CAAC,KAAc,EAAW,EAAE;QACxC,MAAM,MAAM,GAAG,+BAA+B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAChE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IAC9C,CAAC,CAAC;IACF,OAAO;QACL,GAAG,MAAM;QACT,MAAM,EAAE;YACN,GAAG,MAAM;YACT,oBAAoB,EAAE;gBACpB,GAAG,MAAM;gBACT,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;gBACpC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;aACrC;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,oBAAoB,GAAG,CAAC,CAAC,UAAU,CACvC,0CAA0C,EAC1C,CAAC,CAAC,MAAM,CAAC;IACP,IAAI,EAAE,IAAI;IACV,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,oBAAoB,EAAE,UAAU;QAChC,4BAA4B,EAAE,UAAU;KACzC,CAAC;CACH,CAAC,CACH,CAAC;AACF,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC;IACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,6BAA6B,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC/D,qBAAqB,EAAE,CAAC;SACrB,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;KACxE,CAAC,CACH;SACA,GAAG,CAAC,EAAE,CAAC;SACP,QAAQ,EAAE;IACb,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CACtE,CAAC,CAAC;AAEH,SAAS,OAAO;IACd,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,2BAA2B,CAAC,IAAmB;IACtD,IACE,IAAI,CAAC,MAAM,KAAK,CAAC;QACjB,IAAI,CAAC,CAAC,CAAC,KAAK,qBAAqB;QACjC,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ;QAC3B,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ;QACpB,CAAC,CAAC,sBAAsB,EAAE,8BAA8B,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACnF,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAC3B,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,OAAO,uBAAuB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AAClE,CAAC;AAED,SAAS,wBAAwB,CAAC,GAAY,EAAE,IAAmB;IACjE,IACE,IAAI,CAAC,CAAC,CAAC,KAAK,qBAAqB;QACjC,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ;QAC3B,CAAC,GAAG;QACJ,OAAO,GAAG,KAAK,QAAQ,EACvB,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,OAAO,GAAI,GAA+B,CAAC,mBAAmB,CAAC;IACrE,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,MAAM,IAAI,GACR,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9F,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACvC,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxE,OAAO,0BAA0B,CAAC;IACpC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,sCAAsC,CACpD,GAAY;IAEZ,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC;QAC/F,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;YACzB,MAAM,IAAI,gCAAgC,CAAC,sBAAsB,EAAE;gBACjE,UAAU,EAAE,YAAY,CAAC,MAAM;gBAC/B,cAAc,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;oBAC7C,MAAM,QAAQ,GAAG,2BAA2B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACzD,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpC,CAAC,CAAC;gBACF,WAAW,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,wBAAwB,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;aACpF,CAAC,CAAC;QACL,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC;IAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC5F,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC;IAChD,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM;QAAE,OAAO,OAAO,EAAE,CAAC;IACxF,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,IAAI;QACnB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,aAAa,EACX,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,6BAA6B,EAAE,QAAQ,CAAC,QAAQ,CAAC,KAAK,IAAI;QAC1F,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;QACjD,iBAAiB,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,IAAI,EAAE;QAC3D,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YAC9B,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,4BAA4B,CAAC;YAC9D,MAAM,MAAM,GAAG;gBACb,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrE,GAAG,UAAU,CAAC,QAAQ;aACvB,CAAC;YACF,qFAAqF;YACrF,MAAM,UAAU,GAAG,sCAAsC,CAAC,SAAS,CAAC;gBAClE,OAAO,EAAE,KAAK,CAAC,IAAI;gBACnB,MAAM,EAAE,MAAM,CAAC,IAAI;gBACnB,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;gBACxF,MAAM,EAAE,gBAAgB;gBACxB,MAAM,EACJ,MAAM,CAAC,IAAI,KAAK,QAAQ;oBACtB,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;wBACrB,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,KAAK,EAAE,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI;wBACtC,WAAW,EAAE,KAAK,CAAC,WAAW;wBAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,MAAM,EAAE,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;qBAC9D,CAAC,CAAC;aACV,CAAC,CAAC;YACH,MAAM,iBAAiB,GACrB,MAAM,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,MAAM,aAAa,GACjB,UAAU,CAAC,OAAO,IAAI,iBAAiB;gBACrC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CACzB,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,IAAI,KAAK,iBAAiB,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAClF;gBACH,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,aAAa,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC;YACnE,4EAA4E;YAC5E,yEAAyE;YACzE,iEAAiE;YACjE,MAAM,mBAAmB,GACvB,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC,CAAC;YACpF,8FAA8F;YAC9F,IAAI,aAAa;gBAAE,aAAa,CAAC,QAAQ,GAAG,IAAI,CAAC;YACjD,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,IAAI;gBACnB,2BAA2B,EAAE,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;gBACnF,GAAG,CAAC,UAAU,CAAC,OAAO,IAAI,aAAa,IAAI,mBAAmB;oBAC5D,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE;oBACjC,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,4CAA4C,CAC1D,GAAY;IAEZ,MAAM,MAAM,GAAG,CAAC;SACb,MAAM,CAAC;QACN,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,WAAW,EAAE,IAAI;QACjB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QACvC,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAC5C,CAAC;SACD,SAAS,CAAC,GAAG,CAAC,CAAC;IAClB,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,OAAO,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,yCAAyC,CAAC,GAAG,CAAC,CAAC;IAC9D,OAAO;QACL,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;QAClB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;QACtB,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI;QACjC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;QAC/B,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS;QACzC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,mBAAmB,KAAK,IAAI;KAClD,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,4BAA4B,CAC1C,OAAsC,EACtC,UAAgD;IAEhD,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,MAAM,IAAI,gCAAgC,CAAC,UAAU,CAAC,CAAC;IAC7E,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;YAC/D,MAAM,IAAI,gCAAgC,CAAC,qBAAqB,CAAC,CAAC;QACpE,uFAAuF;QACvF,4EAA4E;QAC5E,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACnC,OAAO;gBACL,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,MAAM,EAAE,QAAQ;gBAChB,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,YAAY;gBACpB,MAAM,EAAE,EAAE;aACX,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,CAAC,CAAC;QACjF,IAAI,CAAC,MAAM,EAAE,UAAU;YAAE,MAAM,IAAI,gCAAgC,CAAC,oBAAoB,CAAC,CAAC;QAC1F,OAAO,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACxD,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,EAAE;SACX,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;QACrE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QACtE,IAAI,MAAM,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,2BAA2B;YAAE,OAAO,MAAM,CAAC,UAAU,CAAC;IAC1F,CAAC;IACD,MAAM,IAAI,gCAAgC,CAAC,oBAAoB,CAAC,CAAC;AACnE,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,4CAA4C,CAC1D,MAA2C,EAC3C,OAAsC,EACtC,UAA4C;IAE5C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,aAAa,IAAI,UAAU,CAAC,MAAM,KAAK,YAAY;QAAE,OAAO,KAAK,CAAC;IACxF,OAAO,UAAU,CAAC,MAAM,KAAK,SAAS;QACpC,CAAC,CAAC,MAAM,CAAC,OAAO;YACZ,MAAM,CAAC,IAAI,KAAK,SAAS;YACzB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACrE,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,gBAAgB,CAAC;AAC7E,CAAC"}