@executor-js/plugin-openapi 1.4.32 → 1.5.0

package/dist/chunk-OSIFYIQP.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/google-discovery.ts","../src/sdk/google-oauth-scopes.ts"],"sourcesContent":["// Converts Google Discovery documents directly into OpenAPI 3.x. Public\n// Discovery converters currently target Swagger 2.0 or a broad conversion\n// pipeline; this adapter emits the shape Executor parses while preserving\n// Executor-specific tool ids and query semantics.\nimport { Effect, Option, Predicate, Schema, SchemaGetter } from \"effect\";\nimport { HttpClient, HttpClientRequest } from \"effect/unstable/http\";\n\nimport { OpenApiParseError } from \"./errors\";\nimport { compactGoogleOAuthScopes } from \"./google-oauth-scopes\";\nimport type { SpecFetchCredentials } from \"./parse\";\nimport type { Authentication } from \"./types\";\nimport { AuthTemplateSlug } from \"@executor-js/sdk/shared\";\n\nconst DISCOVERY_SERVICE_HOST = \"https://www.googleapis.com/discovery/v1/apis\";\nconst GOOGLE_BUNDLE_BASE_URL = \"https://www.googleapis.com/\";\nconst GOOGLE_OAUTH_AUTHORIZATION_URL = \"https://accounts.google.com/o/oauth2/v2/auth\";\nconst GOOGLE_OAUTH_TOKEN_URL = \"https://oauth2.googleapis.com/token\";\nconst OPENAPI_SCHEMA_TYPES = new Set([\n  \"array\",\n  \"boolean\",\n  \"integer\",\n  \"null\",\n  \"number\",\n  \"object\",\n  \"string\",\n]);\n\ntype JsonPrimitive = string | number | boolean | null;\ntype JsonValue = JsonPrimitive | readonly JsonValue[] | { readonly [key: string]: JsonValue };\n\ntype OpenApiSchemaObject = {\n  readonly $ref?: string;\n  readonly type?: \"array\" | \"boolean\" | \"integer\" | \"null\" | \"number\" | \"object\" | \"string\";\n  readonly description?: string;\n  readonly title?: string;\n  readonly format?: string;\n  readonly readOnly?: boolean;\n  readonly default?: JsonValue;\n  readonly enum?: readonly JsonValue[];\n  readonly items?: OpenApiSchemaObject;\n  readonly properties?: Record<string, OpenApiSchemaObject>;\n  readonly required?: readonly string[];\n  readonly additionalProperties?: boolean | OpenApiSchemaObject;\n};\n\ntype OpenApiParameterObject = {\n  readonly name: string;\n  readonly in: \"path\" | \"query\" | \"header\";\n  readonly required: boolean;\n  readonly description?: string;\n  readonly schema: OpenApiSchemaObject;\n  readonly style?: \"form\";\n  readonly explode?: boolean;\n  readonly allowReserved?: boolean;\n};\n\ntype OpenApiOperationObject = {\n  readonly operationId: string;\n  readonly \"x-executor-toolPath\": string;\n  readonly \"x-executor-pathTemplate\"?: string;\n  readonly tags?: readonly string[];\n  readonly description?: string;\n  readonly servers?: readonly { readonly url: string }[];\n  readonly parameters: readonly OpenApiParameterObject[];\n  readonly requestBody?: {\n    readonly required: false;\n    readonly content: {\n      readonly \"application/json\": {\n        readonly schema: OpenApiSchemaObject;\n      };\n    };\n  };\n  readonly responses: {\n    readonly \"200\": {\n      readonly description: \"Successful response\";\n      readonly content: {\n        readonly \"application/json\": {\n          readonly schema: OpenApiSchemaObject;\n        };\n      };\n    };\n  };\n  readonly security?: readonly Record<string, readonly string[]>[];\n  readonly \"x-google-scopes\": readonly string[];\n};\n\ntype OpenApiDocument = {\n  readonly openapi: \"3.1.0\";\n  readonly info: {\n    readonly title: string;\n    readonly version: string;\n  };\n  readonly servers: readonly { readonly url: string }[];\n  readonly paths: Record<string, Record<string, OpenApiOperationObject>>;\n  readonly components: {\n    readonly schemas: Record<string, OpenApiSchemaObject>;\n    readonly securitySchemes?: Record<\n      string,\n      {\n        readonly type: \"oauth2\";\n        readonly flows: {\n          readonly authorizationCode: {\n            readonly authorizationUrl: string;\n            readonly tokenUrl: string;\n            readonly scopes: Record<string, string>;\n          };\n        };\n      }\n    >;\n  };\n  readonly security?: readonly Record<string, readonly string[]>[];\n  readonly \"x-executor-origin\":\n    | {\n        readonly kind: \"googleDiscovery\";\n        readonly discoveryUrl: string;\n        readonly service: string;\n        readonly version: string;\n      }\n    | {\n        readonly kind: \"googleDiscoveryBundle\";\n        readonly services: readonly {\n          readonly discoveryUrl: string;\n          readonly service: string;\n          readonly version: string;\n        }[];\n      };\n};\n\nconst TextOption = Schema.OptionFromOptional(Schema.Trim).pipe(\n  Schema.decode({\n    decode: SchemaGetter.transform((value) => Option.filter(value, (text) => text.length > 0)),\n    encode: SchemaGetter.transform((value) => value),\n  }),\n  Schema.withDecodingDefaultType(Effect.succeed(Option.none())),\n);\nconst TextArray = Schema.optional(Schema.Array(Schema.String)).pipe(\n  Schema.withDecodingDefaultType(Effect.succeed([] as string[])),\n);\nconst UnknownRecord = Schema.Record(Schema.String, Schema.Unknown);\nconst UnknownRecordWithDefault = Schema.optional(UnknownRecord).pipe(\n  Schema.withDecodingDefaultType(Effect.succeed({})),\n);\n\nconst DiscoveryParameter = Schema.Struct({\n  type: Schema.optional(Schema.String),\n  description: TextOption,\n  properties: UnknownRecordWithDefault,\n  items: Schema.optional(Schema.Unknown),\n  additionalProperties: Schema.optional(Schema.Union([Schema.Boolean, Schema.Unknown])),\n  enum: TextArray,\n  format: Schema.optional(Schema.String),\n  readOnly: Schema.optional(Schema.Boolean),\n  default: Schema.optional(Schema.Union([Schema.String, Schema.Number, Schema.Boolean])),\n  $ref: Schema.optional(Schema.String),\n  location: Schema.optional(Schema.Literals([\"path\", \"query\", \"header\"])),\n  required: Schema.optional(Schema.Boolean),\n  repeated: Schema.optional(Schema.Boolean),\n});\ntype DiscoveryParameter = typeof DiscoveryParameter.Type;\n\nconst DiscoveryRef = Schema.Struct({\n  $ref: Schema.optional(Schema.String),\n});\n\nconst DiscoveryMethod = Schema.Struct({\n  id: TextOption,\n  description: TextOption,\n  httpMethod: Schema.optional(Schema.String),\n  path: TextOption,\n  parameters: UnknownRecordWithDefault,\n  request: Schema.optional(DiscoveryRef),\n  response: Schema.optional(DiscoveryRef),\n  scopes: TextArray,\n});\ntype DiscoveryMethod = typeof DiscoveryMethod.Type;\n\nconst DiscoveryResource = Schema.Struct({\n  methods: UnknownRecordWithDefault,\n  resources: UnknownRecordWithDefault,\n});\n\nconst DiscoveryDocument = Schema.Struct({\n  name: TextOption,\n  version: TextOption,\n  title: TextOption,\n  rootUrl: TextOption,\n  servicePath: Schema.optional(Schema.Trim).pipe(\n    Schema.withDecodingDefaultType(Effect.succeed(\"\")),\n  ),\n  parameters: UnknownRecordWithDefault,\n  methods: UnknownRecordWithDefault,\n  resources: UnknownRecordWithDefault,\n  schemas: UnknownRecordWithDefault,\n  auth: Schema.optional(\n    Schema.Struct({\n      oauth2: Schema.optional(\n        Schema.Struct({\n          scopes: Schema.optional(\n            Schema.Record(\n              Schema.String,\n              Schema.Struct({\n                description: TextOption,\n              }),\n            ),\n          ).pipe(Schema.withDecodingDefaultType(Effect.succeed({}))),\n        }),\n      ),\n    }),\n  ),\n});\ntype DiscoveryDocument = typeof DiscoveryDocument.Type;\n\nexport interface GoogleDiscoveryOpenApiConversion {\n  readonly specText: string;\n  readonly baseUrl: string;\n  readonly title: string;\n  readonly service: string;\n  readonly version: string;\n  readonly discoveryUrls?: readonly string[];\n  /** The v2 oauth auth template the converted integration declares, when the\n   *  Discovery document advertises OAuth2 scopes. */\n  readonly authenticationTemplate?: readonly Authentication[];\n}\n\nconst decodeDiscoveryDocument = Schema.decodeUnknownSync(DiscoveryDocument);\nconst decodeDiscoveryParameter = Schema.decodeUnknownSync(DiscoveryParameter);\nconst decodeDiscoveryMethod = Schema.decodeUnknownSync(DiscoveryMethod);\nconst decodeDiscoveryResource = Schema.decodeUnknownSync(DiscoveryResource);\nconst parseJson = Schema.decodeUnknownEffect(Schema.fromJsonString(Schema.Unknown));\n\nconst normalizeDiscoveryUrl = (discoveryUrl: string): string => {\n  const trimmed = discoveryUrl.trim();\n  if (!URL.canParse(trimmed)) return trimmed;\n  const parsed = new URL(trimmed);\n  if (parsed.pathname !== \"/$discovery/rest\") return trimmed;\n  const version = parsed.searchParams.get(\"version\")?.trim();\n  if (!version) return trimmed;\n  const host = parsed.hostname.toLowerCase();\n  if (!host.endsWith(\".googleapis.com\")) return trimmed;\n  const rawService = host.slice(0, -\".googleapis.com\".length);\n  const service =\n    rawService === \"calendar-json\"\n      ? \"calendar\"\n      : rawService.endsWith(\"-json\")\n        ? rawService.slice(0, -5)\n        : rawService;\n  return service ? `${DISCOVERY_SERVICE_HOST}/${service}/${version}/rest` : trimmed;\n};\n\nexport const isGoogleDiscoveryUrl = (url: string): boolean => {\n  const trimmed = url.trim();\n  if (!URL.canParse(trimmed)) return false;\n  const parsed = new URL(trimmed);\n  const host = parsed.hostname.toLowerCase();\n  if (!host.endsWith(\"googleapis.com\")) return false;\n  return parsed.pathname.includes(\"/discovery/\") || parsed.pathname.includes(\"$discovery\");\n};\n\nexport const fetchGoogleDiscoveryDocument = Effect.fn(\"OpenApi.fetchGoogleDiscoveryDocument\")(\n  function* (discoveryUrl: string, credentials?: SpecFetchCredentials) {\n    const client = yield* HttpClient.HttpClient;\n    const requestUrl = new URL(discoveryUrl);\n    for (const [name, value] of Object.entries(credentials?.queryParams ?? {})) {\n      requestUrl.searchParams.set(name, value);\n    }\n    let request = HttpClientRequest.get(requestUrl.toString()).pipe(\n      HttpClientRequest.setHeader(\"Accept\", \"application/json, */*\"),\n    );\n    for (const [name, value] of Object.entries(credentials?.headers ?? {})) {\n      request = HttpClientRequest.setHeader(request, name, value);\n    }\n    const response = yield* client.execute(request).pipe(\n      Effect.mapError(\n        () =>\n          new OpenApiParseError({\n            message: \"Failed to fetch Google Discovery document\",\n          }),\n      ),\n    );\n    if (response.status < 200 || response.status >= 300) {\n      return yield* new OpenApiParseError({\n        message: `Failed to fetch Google Discovery document: HTTP ${response.status}`,\n      });\n    }\n    return yield* response.text.pipe(\n      Effect.mapError(\n        () =>\n          new OpenApiParseError({\n            message: \"Failed to read Google Discovery document body\",\n          }),\n      ),\n    );\n  },\n);\n\nconst schemaRef = (name: string) => `#/components/schemas/${name}`;\n\nconst identitySchemaName = (name: string): string => name;\n\nconst schemaComponentPart = (value: string): string =>\n  value\n    .trim()\n    .replace(/[^A-Za-z0-9._-]+/g, \"_\")\n    .replace(/^_+|_+$/g, \"\") || \"schema\";\n\nconst normalizeDiscoveryPathTemplate = (pathTemplate: string): string =>\n  pathTemplate.replaceAll(/\\{\\+([^{}]+)\\}/g, \"{$1}\");\n\nconst pathUsesReservedExpansion = (pathTemplate: string, parameterName: string): boolean =>\n  pathTemplate.includes(`{+${parameterName}}`);\n\nconst uniquePathKey = (\n  paths: Record<string, Record<string, OpenApiOperationObject>>,\n  preferredPath: string,\n  method: string,\n  toolPath: string,\n): string => {\n  if (!paths[preferredPath]?.[method]) return preferredPath;\n  const disambiguated = `/${toolPath.replace(/[^A-Za-z0-9._~-]+/g, \"/\")}`;\n  if (!paths[disambiguated]?.[method]) return disambiguated;\n  let index = 2;\n  while (paths[`${disambiguated}/${index}`]?.[method]) index += 1;\n  return `${disambiguated}/${index}`;\n};\n\nconst discoveryDescription = (value: unknown): string | undefined =>\n  typeof value === \"string\"\n    ? value\n    : Option.isOption(value) && Option.isSome(value)\n      ? typeof value.value === \"string\"\n        ? value.value\n        : undefined\n      : undefined;\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  typeof value === \"object\" && value !== null && !Array.isArray(value);\n\nconst jsonValue = (value: unknown): JsonValue | undefined => {\n  if (\n    value === null ||\n    typeof value === \"string\" ||\n    typeof value === \"number\" ||\n    typeof value === \"boolean\"\n  ) {\n    return value;\n  }\n  if (Array.isArray(value)) {\n    const values = value.map(jsonValue);\n    return values.every(Predicate.isNotUndefined) ? values : undefined;\n  }\n  if (!isRecord(value)) return undefined;\n  const entries = Object.entries(value).flatMap(([key, item]) => {\n    const converted = jsonValue(item);\n    return converted === undefined ? [] : [[key, converted] as const];\n  });\n  return Object.fromEntries(entries);\n};\n\nconst stringArray = (value: unknown): readonly string[] | undefined => {\n  if (!Array.isArray(value)) return undefined;\n  const strings = value.filter((item): item is string => typeof item === \"string\");\n  return strings.length === value.length ? strings : undefined;\n};\n\nconst schemaType = (value: unknown): OpenApiSchemaObject[\"type\"] | undefined =>\n  typeof value === \"string\" && OPENAPI_SCHEMA_TYPES.has(value)\n    ? (value as OpenApiSchemaObject[\"type\"])\n    : undefined;\n\nconst discoverySchemaToOpenApiSchema = (\n  raw: unknown,\n  schemaNameForRef: (name: string) => string = identitySchemaName,\n): OpenApiSchemaObject => {\n  if (!isRecord(raw)) return {};\n  const schema = raw;\n  if (typeof schema.$ref === \"string\") return { $ref: schemaRef(schemaNameForRef(schema.$ref)) };\n\n  const description = discoveryDescription(schema.description);\n  const title = discoveryDescription(schema.title);\n  const defaultValue = jsonValue(schema.default);\n  const enumValues = Array.isArray(schema.enum)\n    ? schema.enum.map(jsonValue).filter(Predicate.isNotUndefined)\n    : [];\n  const format = typeof schema.format === \"string\" ? schema.format : undefined;\n  const readOnly = typeof schema.readOnly === \"boolean\" ? schema.readOnly : undefined;\n  const type = schemaType(schema.type);\n\n  const base = {\n    ...(description !== undefined ? { description } : {}),\n    ...(title !== undefined ? { title } : {}),\n    ...(format !== undefined ? { format } : {}),\n    ...(readOnly !== undefined ? { readOnly } : {}),\n    ...(defaultValue !== undefined ? { default: defaultValue } : {}),\n    ...(enumValues.length > 0 ? { enum: enumValues } : {}),\n  } satisfies OpenApiSchemaObject;\n\n  if (type === \"array\") {\n    return {\n      ...base,\n      type: \"array\",\n      items: discoverySchemaToOpenApiSchema(schema.items, schemaNameForRef),\n    };\n  }\n\n  const properties = schema.properties;\n  if (\n    type === \"object\" ||\n    (isRecord(properties) && Object.keys(properties).length > 0) ||\n    schema.additionalProperties !== undefined\n  ) {\n    const convertedProperties = isRecord(properties)\n      ? Object.fromEntries(\n          Object.entries(properties).map(([name, value]) => [\n            name,\n            discoverySchemaToOpenApiSchema(value, schemaNameForRef),\n          ]),\n        )\n      : undefined;\n    const required = stringArray(schema.required);\n    const additionalProperties =\n      schema.additionalProperties === undefined\n        ? undefined\n        : typeof schema.additionalProperties === \"boolean\"\n          ? schema.additionalProperties\n          : discoverySchemaToOpenApiSchema(schema.additionalProperties, schemaNameForRef);\n    return {\n      ...base,\n      type: \"object\",\n      ...(convertedProperties && Object.keys(convertedProperties).length > 0\n        ? { properties: convertedProperties }\n        : {}),\n      ...(required && required.length > 0 ? { required } : {}),\n      ...(additionalProperties !== undefined ? { additionalProperties } : {}),\n    };\n  }\n\n  return type !== undefined ? { ...base, type } : base;\n};\n\nconst parameterSchema = (\n  parameter: DiscoveryParameter,\n  schemaNameForRef: (name: string) => string = identitySchemaName,\n): OpenApiSchemaObject => {\n  const base = discoverySchemaToOpenApiSchema(parameter, schemaNameForRef);\n  return parameter.repeated\n    ? {\n        type: \"array\",\n        items: base,\n      }\n    : base;\n};\n\nconst methodToolPath = (service: string, methodId: string): string =>\n  methodId.startsWith(`${service}.`) ? methodId.slice(service.length + 1) : methodId;\n\nconst collectMethods = (resource: unknown): DiscoveryMethod[] => {\n  const decoded = decodeDiscoveryResource(resource);\n  const direct = Object.values(decoded.methods ?? {}).map((raw) => decodeDiscoveryMethod(raw));\n  const nested = Object.values(decoded.resources ?? {}).flatMap(collectMethods);\n  return [...direct, ...nested];\n};\n\nconst discoveryScopes = (document: DiscoveryDocument): Record<string, string> =>\n  Object.fromEntries(\n    Object.entries(document.auth?.oauth2?.scopes ?? {}).map(([scope, value]) => [\n      scope,\n      Option.getOrElse(value.description, () => \"\"),\n    ]),\n  );\n\n// The scope set the converted integration DECLARES (and that `oauth.start`\n// requests at connect) must match the consent the picker previews. Both run the\n// raw Discovery union through `compactGoogleOAuthScopes`, which drops scopes a\n// user OAuth consent screen can't show (`chat.bot`/`chat.app.*`/`keep`) and\n// collapses sub-scopes under their broad parent (`gmail.*` → `mail.google.com`,\n// `userinfo.email` → `email`). Descriptions are preserved where the raw map had\n// them; compaction-introduced identity scopes (`email`/`profile`) fall back to\n// the broad parent's description. Per-operation `x-google-scopes`/`security`\n// stay RAW — they describe which scope each method needs, not consent.\nconst compactDiscoveryScopeMap = (raw: Record<string, string>): Record<string, string> => {\n  const descriptionFor = (scope: string): string => {\n    if (raw[scope] !== undefined) return raw[scope];\n    if (scope === \"email\") return raw[\"https://www.googleapis.com/auth/userinfo.email\"] ?? \"\";\n    if (scope === \"profile\") return raw[\"https://www.googleapis.com/auth/userinfo.profile\"] ?? \"\";\n    return \"\";\n  };\n  return Object.fromEntries(\n    compactGoogleOAuthScopes(Object.keys(raw)).map((scope) => [scope, descriptionFor(scope)]),\n  );\n};\n\nconst allDiscoveryMethods = (document: DiscoveryDocument): DiscoveryMethod[] => [\n  ...Object.values(document.methods ?? {}).map((raw) => decodeDiscoveryMethod(raw)),\n  ...Object.values(document.resources ?? {}).flatMap(collectMethods),\n];\n\ntype DiscoveryDocumentInfo = {\n  readonly discoveryUrl: string;\n  readonly document: DiscoveryDocument;\n  readonly service: string;\n  readonly version: string;\n  readonly rootUrl: string;\n  readonly baseUrl: string;\n  readonly title: string;\n};\n\nconst discoveryDocumentInfo = (\n  document: DiscoveryDocument,\n  discoveryUrl: string,\n): Effect.Effect<DiscoveryDocumentInfo, OpenApiParseError> =>\n  Effect.gen(function* () {\n    const service = Option.getOrUndefined(document.name);\n    const version = Option.getOrUndefined(document.version);\n    const rootUrl = Option.getOrUndefined(document.rootUrl);\n    if (!service || !version || !rootUrl) {\n      return yield* new OpenApiParseError({\n        message: \"Google Discovery document is missing one of: name, version, rootUrl\",\n      });\n    }\n\n    return {\n      discoveryUrl,\n      document,\n      service,\n      version,\n      rootUrl,\n      baseUrl: new URL(document.servicePath || \"\", rootUrl).toString(),\n      title: Option.getOrElse(document.title, () => `${service} ${version}`),\n    };\n  });\n\nconst buildDiscoveryOperation = (input: {\n  readonly document: DiscoveryDocument;\n  readonly method: DiscoveryMethod;\n  readonly toolPath: string;\n  readonly pathTemplate: string;\n  readonly schemaNameForRef?: (name: string) => string;\n  readonly serverUrl?: string;\n  readonly tags?: readonly string[];\n}): OpenApiOperationObject => {\n  const mergedParameters = new Map<string, DiscoveryParameter>();\n  for (const [name, raw] of Object.entries(input.document.parameters ?? {})) {\n    const parameter = decodeDiscoveryParameter(raw);\n    if (parameter.location) mergedParameters.set(name, parameter);\n  }\n  for (const [name, raw] of Object.entries(input.method.parameters ?? {})) {\n    const parameter = decodeDiscoveryParameter(raw);\n    if (parameter.location) mergedParameters.set(name, parameter);\n  }\n\n  const methodScopes = input.method.scopes ?? [];\n  const methodDescription = Option.getOrUndefined(input.method.description);\n  const schemaNameForRef = input.schemaNameForRef ?? identitySchemaName;\n\n  return {\n    operationId: input.toolPath,\n    \"x-executor-toolPath\": input.toolPath,\n    \"x-executor-pathTemplate\": input.pathTemplate,\n    ...(input.tags && input.tags.length > 0 ? { tags: input.tags } : {}),\n    ...(methodDescription !== undefined ? { description: methodDescription } : {}),\n    ...(input.serverUrl ? { servers: [{ url: input.serverUrl }] } : {}),\n    parameters: [...mergedParameters.entries()].flatMap(([name, parameter]) => {\n      const location = parameter.location;\n      if (!location) return [];\n      const description = Option.getOrUndefined(parameter.description);\n      const allowReserved =\n        location === \"path\" && pathUsesReservedExpansion(input.pathTemplate, name);\n      return [\n        {\n          name,\n          in: location,\n          required: location === \"path\" ? true : parameter.required === true,\n          ...(description !== undefined ? { description } : {}),\n          schema: parameterSchema(parameter, schemaNameForRef),\n          ...(location === \"query\"\n            ? { style: \"form\" as const, explode: parameter.repeated === true }\n            : {}),\n          ...(allowReserved ? { allowReserved: true } : {}),\n        },\n      ];\n    }),\n    ...(input.method.request?.$ref\n      ? {\n          requestBody: {\n            required: false,\n            content: {\n              \"application/json\": {\n                schema: { $ref: schemaRef(schemaNameForRef(input.method.request.$ref)) },\n              },\n            },\n          },\n        }\n      : {}),\n    responses: {\n      \"200\": {\n        description: \"Successful response\",\n        content: {\n          \"application/json\": {\n            schema: input.method.response?.$ref\n              ? { $ref: schemaRef(schemaNameForRef(input.method.response.$ref)) }\n              : {},\n          },\n        },\n      },\n    },\n    ...(methodScopes.length > 0 ? { security: [{ googleOAuth2: methodScopes }] } : {}),\n    \"x-google-scopes\": methodScopes,\n  };\n};\n\nconst GOOGLE_OAUTH_SECURITY_SCHEME = \"googleOAuth2\";\n\n/** The v2 oauth auth template for a Google-discovery integration. The spec\n *  itself carries the matching `securitySchemes.googleOAuth2` entry; this is the\n *  catalog-level template a connection's access token renders through. */\nconst googleOauthTemplate = (scopes: Record<string, string>): readonly Authentication[] =>\n  // A Google-discovery integration is ALWAYS OAuth, so it ALWAYS declares its\n  // oauth method — even when the compacted scope set is empty (e.g. a bundle of\n  // only limited-consent APIs like Google Keep, whose scopes Google won't grant\n  // through standard consent). Without this the integration declares no auth\n  // method and the \"Add account\" / \"Add a connection\" actions are disabled, so\n  // you can't even start the flow. Empty `scopes` just requests no scope.\n  [\n    {\n      slug: AuthTemplateSlug.make(GOOGLE_OAUTH_SECURITY_SCHEME),\n      type: \"oauth\",\n      authorizationUrl: GOOGLE_OAUTH_AUTHORIZATION_URL,\n      tokenUrl: GOOGLE_OAUTH_TOKEN_URL,\n      scopes: Object.keys(scopes),\n    },\n  ];\n\nexport const convertGoogleDiscoveryToOpenApi = Effect.fn(\"OpenApi.convertGoogleDiscovery\")(\n  function* (input: { readonly discoveryUrl: string; readonly documentText: string }) {\n    const parsed = yield* parseJson(input.documentText).pipe(\n      Effect.mapError(\n        () =>\n          new OpenApiParseError({\n            message: \"Failed to parse Google Discovery document\",\n          }),\n      ),\n    );\n    const document = yield* Effect.try({\n      try: () => decodeDiscoveryDocument(parsed),\n      catch: () =>\n        new OpenApiParseError({\n          message: \"Failed to decode Google Discovery document\",\n        }),\n    });\n\n    const info = yield* discoveryDocumentInfo(document, input.discoveryUrl);\n    const { service, version, baseUrl, title } = info;\n    const paths: Record<string, Record<string, OpenApiOperationObject>> = {};\n\n    for (const method of allDiscoveryMethods(document)) {\n      const methodId = Option.getOrUndefined(method.id);\n      const pathTemplate = Option.getOrUndefined(method.path);\n      if (!methodId || !pathTemplate || !method.httpMethod) continue;\n\n      const toolPath = methodToolPath(service, methodId);\n      const path = normalizeDiscoveryPathTemplate(\n        pathTemplate.startsWith(\"/\") ? pathTemplate : `/${pathTemplate}`,\n      );\n      const methodKey = method.httpMethod.toLowerCase();\n      const pathKey = uniquePathKey(paths, path, methodKey, toolPath);\n\n      paths[pathKey] ??= {};\n      paths[pathKey]![methodKey] = buildDiscoveryOperation({\n        document,\n        method,\n        toolPath,\n        pathTemplate: pathTemplate.startsWith(\"/\") ? pathTemplate : `/${pathTemplate}`,\n      });\n    }\n\n    const scopes = compactDiscoveryScopeMap(discoveryScopes(document));\n    const authenticationTemplate = googleOauthTemplate(scopes);\n\n    const spec: OpenApiDocument = {\n      openapi: \"3.1.0\",\n      info: {\n        title,\n        version,\n      },\n      servers: [{ url: baseUrl }],\n      paths,\n      components: {\n        schemas: Object.fromEntries(\n          Object.entries(document.schemas ?? {}).map(([name, schema]) => [\n            name,\n            discoverySchemaToOpenApiSchema(schema),\n          ]),\n        ),\n        ...(authenticationTemplate\n          ? {\n              securitySchemes: {\n                googleOAuth2: {\n                  type: \"oauth2\",\n                  flows: {\n                    authorizationCode: {\n                      authorizationUrl: GOOGLE_OAUTH_AUTHORIZATION_URL,\n                      tokenUrl: GOOGLE_OAUTH_TOKEN_URL,\n                      scopes,\n                    },\n                  },\n                },\n              },\n            }\n          : {}),\n      },\n      ...(authenticationTemplate ? { security: [{ googleOAuth2: Object.keys(scopes) }] } : {}),\n      \"x-executor-origin\": {\n        kind: \"googleDiscovery\",\n        discoveryUrl: normalizeDiscoveryUrl(input.discoveryUrl),\n        service,\n        version,\n      },\n    };\n\n    return {\n      // @effect-diagnostics-next-line preferSchemaOverJson:off\n      specText: JSON.stringify(spec),\n      baseUrl,\n      title,\n      service,\n      version,\n      ...(authenticationTemplate ? { authenticationTemplate } : {}),\n    };\n  },\n);\n\nexport const convertGoogleDiscoveryBundleToOpenApi = Effect.fn(\n  \"OpenApi.convertGoogleDiscoveryBundle\",\n)(function* (input: {\n  readonly documents: readonly { readonly discoveryUrl: string; readonly documentText: string }[];\n}) {\n  if (input.documents.length === 0) {\n    return yield* new OpenApiParseError({\n      message: \"Google Discovery bundle requires at least one document\",\n    });\n  }\n\n  const infos = yield* Effect.forEach(input.documents, ({ discoveryUrl, documentText }) =>\n    Effect.gen(function* () {\n      const parsed = yield* parseJson(documentText).pipe(\n        Effect.mapError(\n          () =>\n            new OpenApiParseError({\n              message: \"Failed to parse Google Discovery document\",\n            }),\n        ),\n      );\n      const document = yield* Effect.try({\n        try: () => decodeDiscoveryDocument(parsed),\n        catch: () =>\n          new OpenApiParseError({\n            message: \"Failed to decode Google Discovery document\",\n          }),\n      });\n      return yield* discoveryDocumentInfo(document, discoveryUrl);\n    }),\n  );\n\n  const paths: Record<string, Record<string, OpenApiOperationObject>> = {};\n  const schemas: Record<string, OpenApiSchemaObject> = {};\n  const rawScopes: Record<string, string> = {};\n\n  for (const info of infos) {\n    const schemaPrefix = schemaComponentPart(`${info.service}_${info.version}`);\n    const schemaNameForRef = (name: string) => `${schemaPrefix}_${schemaComponentPart(name)}`;\n\n    for (const [scope, description] of Object.entries(discoveryScopes(info.document))) {\n      rawScopes[scope] ??= description;\n    }\n\n    for (const [name, schema] of Object.entries(info.document.schemas ?? {})) {\n      schemas[schemaNameForRef(name)] = discoverySchemaToOpenApiSchema(schema, schemaNameForRef);\n    }\n\n    for (const method of allDiscoveryMethods(info.document)) {\n      const methodId = Option.getOrUndefined(method.id);\n      const rawPathTemplate = Option.getOrUndefined(method.path);\n      if (!methodId || !rawPathTemplate || !method.httpMethod) continue;\n\n      const toolPath = methodId;\n      const wirePath = rawPathTemplate.startsWith(\"/\") ? rawPathTemplate : `/${rawPathTemplate}`;\n      const openApiPath = normalizeDiscoveryPathTemplate(wirePath);\n      const methodKey = method.httpMethod.toLowerCase();\n      const pathKey = uniquePathKey(paths, openApiPath, methodKey, toolPath);\n\n      paths[pathKey] ??= {};\n      paths[pathKey]![methodKey] = buildDiscoveryOperation({\n        document: info.document,\n        method,\n        toolPath,\n        pathTemplate: wirePath,\n        schemaNameForRef,\n        serverUrl: info.baseUrl,\n        tags: [info.title],\n      });\n    }\n  }\n\n  const scopes = compactDiscoveryScopeMap(rawScopes);\n  const authenticationTemplate = googleOauthTemplate(scopes);\n  const spec: OpenApiDocument = {\n    openapi: \"3.1.0\",\n    info: {\n      title: \"Google\",\n      version: \"google-discovery-bundle\",\n    },\n    servers: [{ url: GOOGLE_BUNDLE_BASE_URL }],\n    paths,\n    components: {\n      schemas,\n      ...(authenticationTemplate\n        ? {\n            securitySchemes: {\n              googleOAuth2: {\n                type: \"oauth2\",\n                flows: {\n                  authorizationCode: {\n                    authorizationUrl: GOOGLE_OAUTH_AUTHORIZATION_URL,\n                    tokenUrl: GOOGLE_OAUTH_TOKEN_URL,\n                    scopes,\n                  },\n                },\n              },\n            },\n          }\n        : {}),\n    },\n    ...(authenticationTemplate ? { security: [{ googleOAuth2: Object.keys(scopes) }] } : {}),\n    \"x-executor-origin\": {\n      kind: \"googleDiscoveryBundle\",\n      services: infos.map((info) => ({\n        discoveryUrl: normalizeDiscoveryUrl(info.discoveryUrl),\n        service: info.service,\n        version: info.version,\n      })),\n    },\n  };\n\n  return {\n    // @effect-diagnostics-next-line preferSchemaOverJson:off\n    specText: JSON.stringify(spec),\n    baseUrl: GOOGLE_BUNDLE_BASE_URL,\n    title: \"Google\",\n    service: \"google\",\n    version: \"google-discovery-bundle\",\n    discoveryUrls: infos.map((info) => normalizeDiscoveryUrl(info.discoveryUrl)),\n    ...(authenticationTemplate ? { authenticationTemplate } : {}),\n  };\n});\n","const googleUserConsentBlockedScopes = new Set([\n  \"https://www.googleapis.com/auth/chat.bot\",\n  \"https://www.googleapis.com/auth/chat.import\",\n  \"https://www.googleapis.com/auth/keep\",\n  \"https://www.googleapis.com/auth/keep.readonly\",\n]);\n\nconst googleUserConsentBlockedScopePrefixes = [\"https://www.googleapis.com/auth/chat.app.\"];\n\nconst googleBroadScopeGroups: readonly {\n  readonly broad: string;\n  readonly prefixes: readonly string[];\n}[] = [\n  {\n    broad: \"https://mail.google.com/\",\n    prefixes: [\"https://www.googleapis.com/auth/gmail.\"],\n  },\n  {\n    broad: \"https://www.googleapis.com/auth/calendar\",\n    prefixes: [\"https://www.googleapis.com/auth/calendar.\"],\n  },\n  {\n    broad: \"https://www.googleapis.com/auth/drive\",\n    prefixes: [\"https://www.googleapis.com/auth/drive.\"],\n  },\n];\n\nconst normalizeGoogleIdentityScope = (scope: string): string =>\n  scope === \"https://www.googleapis.com/auth/userinfo.email\"\n    ? \"email\"\n    : scope === \"https://www.googleapis.com/auth/userinfo.profile\"\n      ? \"profile\"\n      : scope;\n\nconst orderedUniqueScopes = (scopes: Iterable<string>): string[] => {\n  const ordered: string[] = [];\n  const seen = new Set<string>();\n  for (const scope of scopes) {\n    const trimmed = scope.trim();\n    if (!trimmed || seen.has(trimmed)) continue;\n    seen.add(trimmed);\n    ordered.push(trimmed);\n  }\n  return ordered;\n};\n\nexport const isGoogleUserConsentOAuthScope = (scope: string): boolean =>\n  !googleUserConsentBlockedScopes.has(scope) &&\n  !googleUserConsentBlockedScopePrefixes.some((prefix) => scope.startsWith(prefix));\n\nexport const filterGoogleUserConsentOAuthScopes = (scopes: Iterable<string>): string[] =>\n  orderedUniqueScopes(scopes).filter(isGoogleUserConsentOAuthScope);\n\nexport const compactGoogleOAuthScopes = (scopes: Iterable<string>): string[] => {\n  const ordered = filterGoogleUserConsentOAuthScopes([...scopes].map(normalizeGoogleIdentityScope));\n  const present = new Set(ordered);\n  return ordered.filter(\n    (scope) =>\n      !googleBroadScopeGroups.some(\n        (group) =>\n          scope !== group.broad &&\n          present.has(group.broad) &&\n          group.prefixes.some((prefix) => scope.startsWith(prefix)),\n      ),\n  );\n};\n"],"mappings":";;;;;AAIA,SAAS,QAAQ,QAAQ,WAAW,QAAQ,oBAAoB;AAChE,SAAS,YAAY,yBAAyB;;;ACL9C,IAAM,iCAAiC,oBAAI,IAAI;AAAA,EAC7C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,IAAM,wCAAwC,CAAC,2CAA2C;AAE1F,IAAM,yBAGA;AAAA,EACJ;AAAA,IACE,OAAO;AAAA,IACP,UAAU,CAAC,wCAAwC;AAAA,EACrD;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,UAAU,CAAC,2CAA2C;AAAA,EACxD;AAAA,EACA;AAAA,IACE,OAAO;AAAA,IACP,UAAU,CAAC,wCAAwC;AAAA,EACrD;AACF;AAEA,IAAM,+BAA+B,CAAC,UACpC,UAAU,mDACN,UACA,UAAU,qDACR,YACA;AAER,IAAM,sBAAsB,CAAC,WAAuC;AAClE,QAAM,UAAoB,CAAC;AAC3B,QAAM,OAAO,oBAAI,IAAY;AAC7B,aAAW,SAAS,QAAQ;AAC1B,UAAM,UAAU,MAAM,KAAK;AAC3B,QAAI,CAAC,WAAW,KAAK,IAAI,OAAO,EAAG;AACnC,SAAK,IAAI,OAAO;AAChB,YAAQ,KAAK,OAAO;AAAA,EACtB;AACA,SAAO;AACT;AAEO,IAAM,gCAAgC,CAAC,UAC5C,CAAC,+BAA+B,IAAI,KAAK,KACzC,CAAC,sCAAsC,KAAK,CAAC,WAAW,MAAM,WAAW,MAAM,CAAC;AAE3E,IAAM,qCAAqC,CAAC,WACjD,oBAAoB,MAAM,EAAE,OAAO,6BAA6B;AAE3D,IAAM,2BAA2B,CAAC,WAAuC;AAC9E,QAAM,UAAU,mCAAmC,CAAC,GAAG,MAAM,EAAE,IAAI,4BAA4B,CAAC;AAChG,QAAM,UAAU,IAAI,IAAI,OAAO;AAC/B,SAAO,QAAQ;AAAA,IACb,CAAC,UACC,CAAC,uBAAuB;AAAA,MACtB,CAAC,UACC,UAAU,MAAM,SAChB,QAAQ,IAAI,MAAM,KAAK,KACvB,MAAM,SAAS,KAAK,CAAC,WAAW,MAAM,WAAW,MAAM,CAAC;AAAA,IAC5D;AAAA,EACJ;AACF;;;ADtDA,SAAS,wBAAwB;AAEjC,IAAM,yBAAyB;AAC/B,IAAM,yBAAyB;AAC/B,IAAM,iCAAiC;AACvC,IAAM,yBAAyB;AAC/B,IAAM,uBAAuB,oBAAI,IAAI;AAAA,EACnC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAuGD,IAAM,aAAa,OAAO,mBAAmB,OAAO,IAAI,EAAE;AAAA,EACxD,OAAO,OAAO;AAAA,IACZ,QAAQ,aAAa,UAAU,CAAC,UAAU,OAAO,OAAO,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;AAAA,IACzF,QAAQ,aAAa,UAAU,CAAC,UAAU,KAAK;AAAA,EACjD,CAAC;AAAA,EACD,OAAO,wBAAwB,OAAO,QAAQ,OAAO,KAAK,CAAC,CAAC;AAC9D;AACA,IAAM,YAAY,OAAO,SAAS,OAAO,MAAM,OAAO,MAAM,CAAC,EAAE;AAAA,EAC7D,OAAO,wBAAwB,OAAO,QAAQ,CAAC,CAAa,CAAC;AAC/D;AACA,IAAM,gBAAgB,OAAO,OAAO,OAAO,QAAQ,OAAO,OAAO;AACjE,IAAM,2BAA2B,OAAO,SAAS,aAAa,EAAE;AAAA,EAC9D,OAAO,wBAAwB,OAAO,QAAQ,CAAC,CAAC,CAAC;AACnD;AAEA,IAAM,qBAAqB,OAAO,OAAO;AAAA,EACvC,MAAM,OAAO,SAAS,OAAO,MAAM;AAAA,EACnC,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,OAAO,OAAO,SAAS,OAAO,OAAO;AAAA,EACrC,sBAAsB,OAAO,SAAS,OAAO,MAAM,CAAC,OAAO,SAAS,OAAO,OAAO,CAAC,CAAC;AAAA,EACpF,MAAM;AAAA,EACN,QAAQ,OAAO,SAAS,OAAO,MAAM;AAAA,EACrC,UAAU,OAAO,SAAS,OAAO,OAAO;AAAA,EACxC,SAAS,OAAO,SAAS,OAAO,MAAM,CAAC,OAAO,QAAQ,OAAO,QAAQ,OAAO,OAAO,CAAC,CAAC;AAAA,EACrF,MAAM,OAAO,SAAS,OAAO,MAAM;AAAA,EACnC,UAAU,OAAO,SAAS,OAAO,SAAS,CAAC,QAAQ,SAAS,QAAQ,CAAC,CAAC;AAAA,EACtE,UAAU,OAAO,SAAS,OAAO,OAAO;AAAA,EACxC,UAAU,OAAO,SAAS,OAAO,OAAO;AAC1C,CAAC;AAGD,IAAM,eAAe,OAAO,OAAO;AAAA,EACjC,MAAM,OAAO,SAAS,OAAO,MAAM;AACrC,CAAC;AAED,IAAM,kBAAkB,OAAO,OAAO;AAAA,EACpC,IAAI;AAAA,EACJ,aAAa;AAAA,EACb,YAAY,OAAO,SAAS,OAAO,MAAM;AAAA,EACzC,MAAM;AAAA,EACN,YAAY;AAAA,EACZ,SAAS,OAAO,SAAS,YAAY;AAAA,EACrC,UAAU,OAAO,SAAS,YAAY;AAAA,EACtC,QAAQ;AACV,CAAC;AAGD,IAAM,oBAAoB,OAAO,OAAO;AAAA,EACtC,SAAS;AAAA,EACT,WAAW;AACb,CAAC;AAED,IAAM,oBAAoB,OAAO,OAAO;AAAA,EACtC,MAAM;AAAA,EACN,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS;AAAA,EACT,aAAa,OAAO,SAAS,OAAO,IAAI,EAAE;AAAA,IACxC,OAAO,wBAAwB,OAAO,QAAQ,EAAE,CAAC;AAAA,EACnD;AAAA,EACA,YAAY;AAAA,EACZ,SAAS;AAAA,EACT,WAAW;AAAA,EACX,SAAS;AAAA,EACT,MAAM,OAAO;AAAA,IACX,OAAO,OAAO;AAAA,MACZ,QAAQ,OAAO;AAAA,QACb,OAAO,OAAO;AAAA,UACZ,QAAQ,OAAO;AAAA,YACb,OAAO;AAAA,cACL,OAAO;AAAA,cACP,OAAO,OAAO;AAAA,gBACZ,aAAa;AAAA,cACf,CAAC;AAAA,YACH;AAAA,UACF,EAAE,KAAK,OAAO,wBAAwB,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;AAAA,QAC3D,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAAA,EACH;AACF,CAAC;AAeD,IAAM,0BAA0B,OAAO,kBAAkB,iBAAiB;AAC1E,IAAM,2BAA2B,OAAO,kBAAkB,kBAAkB;AAC5E,IAAM,wBAAwB,OAAO,kBAAkB,eAAe;AACtE,IAAM,0BAA0B,OAAO,kBAAkB,iBAAiB;AAC1E,IAAM,YAAY,OAAO,oBAAoB,OAAO,eAAe,OAAO,OAAO,CAAC;AAElF,IAAM,wBAAwB,CAAC,iBAAiC;AAC9D,QAAM,UAAU,aAAa,KAAK;AAClC,MAAI,CAAC,IAAI,SAAS,OAAO,EAAG,QAAO;AACnC,QAAM,SAAS,IAAI,IAAI,OAAO;AAC9B,MAAI,OAAO,aAAa,mBAAoB,QAAO;AACnD,QAAM,UAAU,OAAO,aAAa,IAAI,SAAS,GAAG,KAAK;AACzD,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,OAAO,OAAO,SAAS,YAAY;AACzC,MAAI,CAAC,KAAK,SAAS,iBAAiB,EAAG,QAAO;AAC9C,QAAM,aAAa,KAAK,MAAM,GAAG,CAAC,kBAAkB,MAAM;AAC1D,QAAM,UACJ,eAAe,kBACX,aACA,WAAW,SAAS,OAAO,IACzB,WAAW,MAAM,GAAG,EAAE,IACtB;AACR,SAAO,UAAU,GAAG,sBAAsB,IAAI,OAAO,IAAI,OAAO,UAAU;AAC5E;AAEO,IAAM,uBAAuB,CAAC,QAAyB;AAC5D,QAAM,UAAU,IAAI,KAAK;AACzB,MAAI,CAAC,IAAI,SAAS,OAAO,EAAG,QAAO;AACnC,QAAM,SAAS,IAAI,IAAI,OAAO;AAC9B,QAAM,OAAO,OAAO,SAAS,YAAY;AACzC,MAAI,CAAC,KAAK,SAAS,gBAAgB,EAAG,QAAO;AAC7C,SAAO,OAAO,SAAS,SAAS,aAAa,KAAK,OAAO,SAAS,SAAS,YAAY;AACzF;AAEO,IAAM,+BAA+B,OAAO,GAAG,sCAAsC;AAAA,EAC1F,WAAW,cAAsB,aAAoC;AACnE,UAAM,SAAS,OAAO,WAAW;AACjC,UAAM,aAAa,IAAI,IAAI,YAAY;AACvC,eAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,aAAa,eAAe,CAAC,CAAC,GAAG;AAC1E,iBAAW,aAAa,IAAI,MAAM,KAAK;AAAA,IACzC;AACA,QAAI,UAAU,kBAAkB,IAAI,WAAW,SAAS,CAAC,EAAE;AAAA,MACzD,kBAAkB,UAAU,UAAU,uBAAuB;AAAA,IAC/D;AACA,eAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,aAAa,WAAW,CAAC,CAAC,GAAG;AACtE,gBAAU,kBAAkB,UAAU,SAAS,MAAM,KAAK;AAAA,IAC5D;AACA,UAAM,WAAW,OAAO,OAAO,QAAQ,OAAO,EAAE;AAAA,MAC9C,OAAO;AAAA,QACL,MACE,IAAI,kBAAkB;AAAA,UACpB,SAAS;AAAA,QACX,CAAC;AAAA,MACL;AAAA,IACF;AACA,QAAI,SAAS,SAAS,OAAO,SAAS,UAAU,KAAK;AACnD,aAAO,OAAO,IAAI,kBAAkB;AAAA,QAClC,SAAS,mDAAmD,SAAS,MAAM;AAAA,MAC7E,CAAC;AAAA,IACH;AACA,WAAO,OAAO,SAAS,KAAK;AAAA,MAC1B,OAAO;AAAA,QACL,MACE,IAAI,kBAAkB;AAAA,UACpB,SAAS;AAAA,QACX,CAAC;AAAA,MACL;AAAA,IACF;AAAA,EACF;AACF;AAEA,IAAM,YAAY,CAAC,SAAiB,wBAAwB,IAAI;AAEhE,IAAM,qBAAqB,CAAC,SAAyB;AAErD,IAAM,sBAAsB,CAAC,UAC3B,MACG,KAAK,EACL,QAAQ,qBAAqB,GAAG,EAChC,QAAQ,YAAY,EAAE,KAAK;AAEhC,IAAM,iCAAiC,CAAC,iBACtC,aAAa,WAAW,mBAAmB,MAAM;AAEnD,IAAM,4BAA4B,CAAC,cAAsB,kBACvD,aAAa,SAAS,KAAK,aAAa,GAAG;AAE7C,IAAM,gBAAgB,CACpB,OACA,eACA,QACA,aACW;AACX,MAAI,CAAC,MAAM,aAAa,IAAI,MAAM,EAAG,QAAO;AAC5C,QAAM,gBAAgB,IAAI,SAAS,QAAQ,sBAAsB,GAAG,CAAC;AACrE,MAAI,CAAC,MAAM,aAAa,IAAI,MAAM,EAAG,QAAO;AAC5C,MAAI,QAAQ;AACZ,SAAO,MAAM,GAAG,aAAa,IAAI,KAAK,EAAE,IAAI,MAAM,EAAG,UAAS;AAC9D,SAAO,GAAG,aAAa,IAAI,KAAK;AAClC;AAEA,IAAM,uBAAuB,CAAC,UAC5B,OAAO,UAAU,WACb,QACA,OAAO,SAAS,KAAK,KAAK,OAAO,OAAO,KAAK,IAC3C,OAAO,MAAM,UAAU,WACrB,MAAM,QACN,SACF;AAER,IAAM,WAAW,CAAC,UAChB,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAErE,IAAM,YAAY,CAAC,UAA0C;AAC3D,MACE,UAAU,QACV,OAAO,UAAU,YACjB,OAAO,UAAU,YACjB,OAAO,UAAU,WACjB;AACA,WAAO;AAAA,EACT;AACA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,UAAM,SAAS,MAAM,IAAI,SAAS;AAClC,WAAO,OAAO,MAAM,UAAU,cAAc,IAAI,SAAS;AAAA,EAC3D;AACA,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO;AAC7B,QAAM,UAAU,OAAO,QAAQ,KAAK,EAAE,QAAQ,CAAC,CAAC,KAAK,IAAI,MAAM;AAC7D,UAAM,YAAY,UAAU,IAAI;AAChC,WAAO,cAAc,SAAY,CAAC,IAAI,CAAC,CAAC,KAAK,SAAS,CAAU;AAAA,EAClE,CAAC;AACD,SAAO,OAAO,YAAY,OAAO;AACnC;AAEA,IAAM,cAAc,CAAC,UAAkD;AACrE,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO;AAClC,QAAM,UAAU,MAAM,OAAO,CAAC,SAAyB,OAAO,SAAS,QAAQ;AAC/E,SAAO,QAAQ,WAAW,MAAM,SAAS,UAAU;AACrD;AAEA,IAAM,aAAa,CAAC,UAClB,OAAO,UAAU,YAAY,qBAAqB,IAAI,KAAK,IACtD,QACD;AAEN,IAAM,iCAAiC,CACrC,KACA,mBAA6C,uBACrB;AACxB,MAAI,CAAC,SAAS,GAAG,EAAG,QAAO,CAAC;AAC5B,QAAM,SAAS;AACf,MAAI,OAAO,OAAO,SAAS,SAAU,QAAO,EAAE,MAAM,UAAU,iBAAiB,OAAO,IAAI,CAAC,EAAE;AAE7F,QAAM,cAAc,qBAAqB,OAAO,WAAW;AAC3D,QAAM,QAAQ,qBAAqB,OAAO,KAAK;AAC/C,QAAM,eAAe,UAAU,OAAO,OAAO;AAC7C,QAAM,aAAa,MAAM,QAAQ,OAAO,IAAI,IACxC,OAAO,KAAK,IAAI,SAAS,EAAE,OAAO,UAAU,cAAc,IAC1D,CAAC;AACL,QAAM,SAAS,OAAO,OAAO,WAAW,WAAW,OAAO,SAAS;AACnE,QAAM,WAAW,OAAO,OAAO,aAAa,YAAY,OAAO,WAAW;AAC1E,QAAM,OAAO,WAAW,OAAO,IAAI;AAEnC,QAAM,OAAO;AAAA,IACX,GAAI,gBAAgB,SAAY,EAAE,YAAY,IAAI,CAAC;AAAA,IACnD,GAAI,UAAU,SAAY,EAAE,MAAM,IAAI,CAAC;AAAA,IACvC,GAAI,WAAW,SAAY,EAAE,OAAO,IAAI,CAAC;AAAA,IACzC,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,IAC7C,GAAI,iBAAiB,SAAY,EAAE,SAAS,aAAa,IAAI,CAAC;AAAA,IAC9D,GAAI,WAAW,SAAS,IAAI,EAAE,MAAM,WAAW,IAAI,CAAC;AAAA,EACtD;AAEA,MAAI,SAAS,SAAS;AACpB,WAAO;AAAA,MACL,GAAG;AAAA,MACH,MAAM;AAAA,MACN,OAAO,+BAA+B,OAAO,OAAO,gBAAgB;AAAA,IACtE;AAAA,EACF;AAEA,QAAM,aAAa,OAAO;AAC1B,MACE,SAAS,YACR,SAAS,UAAU,KAAK,OAAO,KAAK,UAAU,EAAE,SAAS,KAC1D,OAAO,yBAAyB,QAChC;AACA,UAAM,sBAAsB,SAAS,UAAU,IAC3C,OAAO;AAAA,MACL,OAAO,QAAQ,UAAU,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;AAAA,QAChD;AAAA,QACA,+BAA+B,OAAO,gBAAgB;AAAA,MACxD,CAAC;AAAA,IACH,IACA;AACJ,UAAM,WAAW,YAAY,OAAO,QAAQ;AAC5C,UAAM,uBACJ,OAAO,yBAAyB,SAC5B,SACA,OAAO,OAAO,yBAAyB,YACrC,OAAO,uBACP,+BAA+B,OAAO,sBAAsB,gBAAgB;AACpF,WAAO;AAAA,MACL,GAAG;AAAA,MACH,MAAM;AAAA,MACN,GAAI,uBAAuB,OAAO,KAAK,mBAAmB,EAAE,SAAS,IACjE,EAAE,YAAY,oBAAoB,IAClC,CAAC;AAAA,MACL,GAAI,YAAY,SAAS,SAAS,IAAI,EAAE,SAAS,IAAI,CAAC;AAAA,MACtD,GAAI,yBAAyB,SAAY,EAAE,qBAAqB,IAAI,CAAC;AAAA,IACvE;AAAA,EACF;AAEA,SAAO,SAAS,SAAY,EAAE,GAAG,MAAM,KAAK,IAAI;AAClD;AAEA,IAAM,kBAAkB,CACtB,WACA,mBAA6C,uBACrB;AACxB,QAAM,OAAO,+BAA+B,WAAW,gBAAgB;AACvE,SAAO,UAAU,WACb;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,EACT,IACA;AACN;AAEA,IAAM,iBAAiB,CAAC,SAAiB,aACvC,SAAS,WAAW,GAAG,OAAO,GAAG,IAAI,SAAS,MAAM,QAAQ,SAAS,CAAC,IAAI;AAE5E,IAAM,iBAAiB,CAAC,aAAyC;AAC/D,QAAM,UAAU,wBAAwB,QAAQ;AAChD,QAAM,SAAS,OAAO,OAAO,QAAQ,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,sBAAsB,GAAG,CAAC;AAC3F,QAAM,SAAS,OAAO,OAAO,QAAQ,aAAa,CAAC,CAAC,EAAE,QAAQ,cAAc;AAC5E,SAAO,CAAC,GAAG,QAAQ,GAAG,MAAM;AAC9B;AAEA,IAAM,kBAAkB,CAAC,aACvB,OAAO;AAAA,EACL,OAAO,QAAQ,SAAS,MAAM,QAAQ,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM;AAAA,IAC1E;AAAA,IACA,OAAO,UAAU,MAAM,aAAa,MAAM,EAAE;AAAA,EAC9C,CAAC;AACH;AAWF,IAAM,2BAA2B,CAAC,QAAwD;AACxF,QAAM,iBAAiB,CAAC,UAA0B;AAChD,QAAI,IAAI,KAAK,MAAM,OAAW,QAAO,IAAI,KAAK;AAC9C,QAAI,UAAU,QAAS,QAAO,IAAI,gDAAgD,KAAK;AACvF,QAAI,UAAU,UAAW,QAAO,IAAI,kDAAkD,KAAK;AAC3F,WAAO;AAAA,EACT;AACA,SAAO,OAAO;AAAA,IACZ,yBAAyB,OAAO,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,eAAe,KAAK,CAAC,CAAC;AAAA,EAC1F;AACF;AAEA,IAAM,sBAAsB,CAAC,aAAmD;AAAA,EAC9E,GAAG,OAAO,OAAO,SAAS,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,sBAAsB,GAAG,CAAC;AAAA,EAChF,GAAG,OAAO,OAAO,SAAS,aAAa,CAAC,CAAC,EAAE,QAAQ,cAAc;AACnE;AAYA,IAAM,wBAAwB,CAC5B,UACA,iBAEA,OAAO,IAAI,aAAa;AACtB,QAAM,UAAU,OAAO,eAAe,SAAS,IAAI;AACnD,QAAM,UAAU,OAAO,eAAe,SAAS,OAAO;AACtD,QAAM,UAAU,OAAO,eAAe,SAAS,OAAO;AACtD,MAAI,CAAC,WAAW,CAAC,WAAW,CAAC,SAAS;AACpC,WAAO,OAAO,IAAI,kBAAkB;AAAA,MAClC,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS,IAAI,IAAI,SAAS,eAAe,IAAI,OAAO,EAAE,SAAS;AAAA,IAC/D,OAAO,OAAO,UAAU,SAAS,OAAO,MAAM,GAAG,OAAO,IAAI,OAAO,EAAE;AAAA,EACvE;AACF,CAAC;AAEH,IAAM,0BAA0B,CAAC,UAQH;AAC5B,QAAM,mBAAmB,oBAAI,IAAgC;AAC7D,aAAW,CAAC,MAAM,GAAG,KAAK,OAAO,QAAQ,MAAM,SAAS,cAAc,CAAC,CAAC,GAAG;AACzE,UAAM,YAAY,yBAAyB,GAAG;AAC9C,QAAI,UAAU,SAAU,kBAAiB,IAAI,MAAM,SAAS;AAAA,EAC9D;AACA,aAAW,CAAC,MAAM,GAAG,KAAK,OAAO,QAAQ,MAAM,OAAO,cAAc,CAAC,CAAC,GAAG;AACvE,UAAM,YAAY,yBAAyB,GAAG;AAC9C,QAAI,UAAU,SAAU,kBAAiB,IAAI,MAAM,SAAS;AAAA,EAC9D;AAEA,QAAM,eAAe,MAAM,OAAO,UAAU,CAAC;AAC7C,QAAM,oBAAoB,OAAO,eAAe,MAAM,OAAO,WAAW;AACxE,QAAM,mBAAmB,MAAM,oBAAoB;AAEnD,SAAO;AAAA,IACL,aAAa,MAAM;AAAA,IACnB,uBAAuB,MAAM;AAAA,IAC7B,2BAA2B,MAAM;AAAA,IACjC,GAAI,MAAM,QAAQ,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,MAAM,KAAK,IAAI,CAAC;AAAA,IAClE,GAAI,sBAAsB,SAAY,EAAE,aAAa,kBAAkB,IAAI,CAAC;AAAA,IAC5E,GAAI,MAAM,YAAY,EAAE,SAAS,CAAC,EAAE,KAAK,MAAM,UAAU,CAAC,EAAE,IAAI,CAAC;AAAA,IACjE,YAAY,CAAC,GAAG,iBAAiB,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC,MAAM,SAAS,MAAM;AACzE,YAAM,WAAW,UAAU;AAC3B,UAAI,CAAC,SAAU,QAAO,CAAC;AACvB,YAAM,cAAc,OAAO,eAAe,UAAU,WAAW;AAC/D,YAAM,gBACJ,aAAa,UAAU,0BAA0B,MAAM,cAAc,IAAI;AAC3E,aAAO;AAAA,QACL;AAAA,UACE;AAAA,UACA,IAAI;AAAA,UACJ,UAAU,aAAa,SAAS,OAAO,UAAU,aAAa;AAAA,UAC9D,GAAI,gBAAgB,SAAY,EAAE,YAAY,IAAI,CAAC;AAAA,UACnD,QAAQ,gBAAgB,WAAW,gBAAgB;AAAA,UACnD,GAAI,aAAa,UACb,EAAE,OAAO,QAAiB,SAAS,UAAU,aAAa,KAAK,IAC/D,CAAC;AAAA,UACL,GAAI,gBAAgB,EAAE,eAAe,KAAK,IAAI,CAAC;AAAA,QACjD;AAAA,MACF;AAAA,IACF,CAAC;AAAA,IACD,GAAI,MAAM,OAAO,SAAS,OACtB;AAAA,MACE,aAAa;AAAA,QACX,UAAU;AAAA,QACV,SAAS;AAAA,UACP,oBAAoB;AAAA,YAClB,QAAQ,EAAE,MAAM,UAAU,iBAAiB,MAAM,OAAO,QAAQ,IAAI,CAAC,EAAE;AAAA,UACzE;AAAA,QACF;AAAA,MACF;AAAA,IACF,IACA,CAAC;AAAA,IACL,WAAW;AAAA,MACT,OAAO;AAAA,QACL,aAAa;AAAA,QACb,SAAS;AAAA,UACP,oBAAoB;AAAA,YAClB,QAAQ,MAAM,OAAO,UAAU,OAC3B,EAAE,MAAM,UAAU,iBAAiB,MAAM,OAAO,SAAS,IAAI,CAAC,EAAE,IAChE,CAAC;AAAA,UACP;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA,GAAI,aAAa,SAAS,IAAI,EAAE,UAAU,CAAC,EAAE,cAAc,aAAa,CAAC,EAAE,IAAI,CAAC;AAAA,IAChF,mBAAmB;AAAA,EACrB;AACF;AAEA,IAAM,+BAA+B;AAKrC,IAAM,sBAAsB,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO3B;AAAA,IACE;AAAA,MACE,MAAM,iBAAiB,KAAK,4BAA4B;AAAA,MACxD,MAAM;AAAA,MACN,kBAAkB;AAAA,MAClB,UAAU;AAAA,MACV,QAAQ,OAAO,KAAK,MAAM;AAAA,IAC5B;AAAA,EACF;AAAA;AAEK,IAAM,kCAAkC,OAAO,GAAG,gCAAgC;AAAA,EACvF,WAAW,OAAyE;AAClF,UAAM,SAAS,OAAO,UAAU,MAAM,YAAY,EAAE;AAAA,MAClD,OAAO;AAAA,QACL,MACE,IAAI,kBAAkB;AAAA,UACpB,SAAS;AAAA,QACX,CAAC;AAAA,MACL;AAAA,IACF;AACA,UAAM,WAAW,OAAO,OAAO,IAAI;AAAA,MACjC,KAAK,MAAM,wBAAwB,MAAM;AAAA,MACzC,OAAO,MACL,IAAI,kBAAkB;AAAA,QACpB,SAAS;AAAA,MACX,CAAC;AAAA,IACL,CAAC;AAED,UAAM,OAAO,OAAO,sBAAsB,UAAU,MAAM,YAAY;AACtE,UAAM,EAAE,SAAS,SAAS,SAAS,MAAM,IAAI;AAC7C,UAAM,QAAgE,CAAC;AAEvE,eAAW,UAAU,oBAAoB,QAAQ,GAAG;AAClD,YAAM,WAAW,OAAO,eAAe,OAAO,EAAE;AAChD,YAAM,eAAe,OAAO,eAAe,OAAO,IAAI;AACtD,UAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,OAAO,WAAY;AAEtD,YAAM,WAAW,eAAe,SAAS,QAAQ;AACjD,YAAM,OAAO;AAAA,QACX,aAAa,WAAW,GAAG,IAAI,eAAe,IAAI,YAAY;AAAA,MAChE;AACA,YAAM,YAAY,OAAO,WAAW,YAAY;AAChD,YAAM,UAAU,cAAc,OAAO,MAAM,WAAW,QAAQ;AAE9D,YAAM,OAAO,MAAM,CAAC;AACpB,YAAM,OAAO,EAAG,SAAS,IAAI,wBAAwB;AAAA,QACnD;AAAA,QACA;AAAA,QACA;AAAA,QACA,cAAc,aAAa,WAAW,GAAG,IAAI,eAAe,IAAI,YAAY;AAAA,MAC9E,CAAC;AAAA,IACH;AAEA,UAAM,SAAS,yBAAyB,gBAAgB,QAAQ,CAAC;AACjE,UAAM,yBAAyB,oBAAoB,MAAM;AAEzD,UAAM,OAAwB;AAAA,MAC5B,SAAS;AAAA,MACT,MAAM;AAAA,QACJ;AAAA,QACA;AAAA,MACF;AAAA,MACA,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC;AAAA,MAC1B;AAAA,MACA,YAAY;AAAA,QACV,SAAS,OAAO;AAAA,UACd,OAAO,QAAQ,SAAS,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,MAAM,MAAM;AAAA,YAC7D;AAAA,YACA,+BAA+B,MAAM;AAAA,UACvC,CAAC;AAAA,QACH;AAAA,QACA,GAAI,yBACA;AAAA,UACE,iBAAiB;AAAA,YACf,cAAc;AAAA,cACZ,MAAM;AAAA,cACN,OAAO;AAAA,gBACL,mBAAmB;AAAA,kBACjB,kBAAkB;AAAA,kBAClB,UAAU;AAAA,kBACV;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF,IACA,CAAC;AAAA,MACP;AAAA,MACA,GAAI,yBAAyB,EAAE,UAAU,CAAC,EAAE,cAAc,OAAO,KAAK,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC;AAAA,MACtF,qBAAqB;AAAA,QACnB,MAAM;AAAA,QACN,cAAc,sBAAsB,MAAM,YAAY;AAAA,QACtD;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO;AAAA;AAAA,MAEL,UAAU,KAAK,UAAU,IAAI;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAI,yBAAyB,EAAE,uBAAuB,IAAI,CAAC;AAAA,IAC7D;AAAA,EACF;AACF;AAEO,IAAM,wCAAwC,OAAO;AAAA,EAC1D;AACF,EAAE,WAAW,OAEV;AACD,MAAI,MAAM,UAAU,WAAW,GAAG;AAChC,WAAO,OAAO,IAAI,kBAAkB;AAAA,MAClC,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AAEA,QAAM,QAAQ,OAAO,OAAO;AAAA,IAAQ,MAAM;AAAA,IAAW,CAAC,EAAE,cAAc,aAAa,MACjF,OAAO,IAAI,aAAa;AACtB,YAAM,SAAS,OAAO,UAAU,YAAY,EAAE;AAAA,QAC5C,OAAO;AAAA,UACL,MACE,IAAI,kBAAkB;AAAA,YACpB,SAAS;AAAA,UACX,CAAC;AAAA,QACL;AAAA,MACF;AACA,YAAM,WAAW,OAAO,OAAO,IAAI;AAAA,QACjC,KAAK,MAAM,wBAAwB,MAAM;AAAA,QACzC,OAAO,MACL,IAAI,kBAAkB;AAAA,UACpB,SAAS;AAAA,QACX,CAAC;AAAA,MACL,CAAC;AACD,aAAO,OAAO,sBAAsB,UAAU,YAAY;AAAA,IAC5D,CAAC;AAAA,EACH;AAEA,QAAM,QAAgE,CAAC;AACvE,QAAM,UAA+C,CAAC;AACtD,QAAM,YAAoC,CAAC;AAE3C,aAAW,QAAQ,OAAO;AACxB,UAAM,eAAe,oBAAoB,GAAG,KAAK,OAAO,IAAI,KAAK,OAAO,EAAE;AAC1E,UAAM,mBAAmB,CAAC,SAAiB,GAAG,YAAY,IAAI,oBAAoB,IAAI,CAAC;AAEvF,eAAW,CAAC,OAAO,WAAW,KAAK,OAAO,QAAQ,gBAAgB,KAAK,QAAQ,CAAC,GAAG;AACjF,gBAAU,KAAK,MAAM;AAAA,IACvB;AAEA,eAAW,CAAC,MAAM,MAAM,KAAK,OAAO,QAAQ,KAAK,SAAS,WAAW,CAAC,CAAC,GAAG;AACxE,cAAQ,iBAAiB,IAAI,CAAC,IAAI,+BAA+B,QAAQ,gBAAgB;AAAA,IAC3F;AAEA,eAAW,UAAU,oBAAoB,KAAK,QAAQ,GAAG;AACvD,YAAM,WAAW,OAAO,eAAe,OAAO,EAAE;AAChD,YAAM,kBAAkB,OAAO,eAAe,OAAO,IAAI;AACzD,UAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,OAAO,WAAY;AAEzD,YAAM,WAAW;AACjB,YAAM,WAAW,gBAAgB,WAAW,GAAG,IAAI,kBAAkB,IAAI,eAAe;AACxF,YAAM,cAAc,+BAA+B,QAAQ;AAC3D,YAAM,YAAY,OAAO,WAAW,YAAY;AAChD,YAAM,UAAU,cAAc,OAAO,aAAa,WAAW,QAAQ;AAErE,YAAM,OAAO,MAAM,CAAC;AACpB,YAAM,OAAO,EAAG,SAAS,IAAI,wBAAwB;AAAA,QACnD,UAAU,KAAK;AAAA,QACf;AAAA,QACA;AAAA,QACA,cAAc;AAAA,QACd;AAAA,QACA,WAAW,KAAK;AAAA,QAChB,MAAM,CAAC,KAAK,KAAK;AAAA,MACnB,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,SAAS,yBAAyB,SAAS;AACjD,QAAM,yBAAyB,oBAAoB,MAAM;AACzD,QAAM,OAAwB;AAAA,IAC5B,SAAS;AAAA,IACT,MAAM;AAAA,MACJ,OAAO;AAAA,MACP,SAAS;AAAA,IACX;AAAA,IACA,SAAS,CAAC,EAAE,KAAK,uBAAuB,CAAC;AAAA,IACzC;AAAA,IACA,YAAY;AAAA,MACV;AAAA,MACA,GAAI,yBACA;AAAA,QACE,iBAAiB;AAAA,UACf,cAAc;AAAA,YACZ,MAAM;AAAA,YACN,OAAO;AAAA,cACL,mBAAmB;AAAA,gBACjB,kBAAkB;AAAA,gBAClB,UAAU;AAAA,gBACV;AAAA,cACF;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF,IACA,CAAC;AAAA,IACP;AAAA,IACA,GAAI,yBAAyB,EAAE,UAAU,CAAC,EAAE,cAAc,OAAO,KAAK,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC;AAAA,IACtF,qBAAqB;AAAA,MACnB,MAAM;AAAA,MACN,UAAU,MAAM,IAAI,CAAC,UAAU;AAAA,QAC7B,cAAc,sBAAsB,KAAK,YAAY;AAAA,QACrD,SAAS,KAAK;AAAA,QACd,SAAS,KAAK;AAAA,MAChB,EAAE;AAAA,IACJ;AAAA,EACF;AAEA,SAAO;AAAA;AAAA,IAEL,UAAU,KAAK,UAAU,IAAI;AAAA,IAC7B,SAAS;AAAA,IACT,OAAO;AAAA,IACP,SAAS;AAAA,IACT,SAAS;AAAA,IACT,eAAe,MAAM,IAAI,CAAC,SAAS,sBAAsB,KAAK,YAAY,CAAC;AAAA,IAC3E,GAAI,yBAAyB,EAAE,uBAAuB,IAAI,CAAC;AAAA,EAC7D;AACF,CAAC;","names":[]}

package/dist/chunk-QSSRVK6M.js

@@ -0,0 +1,139 @@
+import {
+  TOKEN_VARIABLE,
+  variable
+} from "./chunk-YVRI7KRC.js";
+
+// src/react/auth-method-config.ts
+import { AuthTemplateSlug } from "@executor-js/sdk/shared";
+var isVariablePart = (part) => typeof part !== "string" && part.type === "variable";
+var parseTemplateValue = (value) => {
+  if (typeof value === "string") return { prefix: "", variable: TOKEN_VARIABLE };
+  const parts = [];
+  for (const part of value) {
+    if (isVariablePart(part)) {
+      return { prefix: parts.join(""), variable: part.name };
+    }
+    if (typeof part === "string") parts.push(part);
+  }
+  return { prefix: parts.join(""), variable: TOKEN_VARIABLE };
+};
+var placementsFromApiKey = (template) => {
+  const placements = [];
+  for (const [name, value] of Object.entries(template.headers ?? {})) {
+    const { prefix, variable: variable2 } = parseTemplateValue(value);
+    placements.push({ carrier: "header", name, prefix, variable: variable2 });
+  }
+  for (const [name, value] of Object.entries(template.queryParams ?? {})) {
+    const { prefix, variable: variable2 } = parseTemplateValue(value);
+    placements.push({ carrier: "query", name, prefix, variable: variable2 });
+  }
+  return placements;
+};
+var labelForApiKey = (slug, placements) => {
+  const first = placements[0];
+  if (first) return `API key (${first.name || (first.carrier === "header" ? "header" : "query")})`;
+  return `API key (${slug})`;
+};
+function authMethodsFromConfig(templates) {
+  return templates.map((template) => {
+    const slug = String(template.slug);
+    const source = slug.startsWith("custom_") ? "custom" : "spec";
+    if (template.type === "oauth") {
+      return {
+        id: slug,
+        label: "OAuth2",
+        kind: "oauth",
+        source,
+        template: AuthTemplateSlug.make(slug),
+        placements: [],
+        // Carry the integration's declared endpoints/scopes so the
+        // client-registration form pre-fills them.
+        oauth: {
+          authorizationUrl: template.authorizationUrl,
+          tokenUrl: template.tokenUrl,
+          scopes: template.scopes
+        }
+      };
+    }
+    const placements = placementsFromApiKey(template);
+    return {
+      id: slug,
+      label: labelForApiKey(slug, placements),
+      kind: "apikey",
+      source,
+      template: AuthTemplateSlug.make(slug),
+      placements
+    };
+  });
+}
+var slugifyVariable = (name) => name.toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "");
+var assignVariables = (placements) => {
+  const named = placements.filter((p) => p.name);
+  const out = /* @__PURE__ */ new Map();
+  if (named.length <= 1) {
+    for (const p of named) out.set(p, p.variable ?? TOKEN_VARIABLE);
+    return out;
+  }
+  const taken = /* @__PURE__ */ new Set();
+  for (const p of named) {
+    const base = slugifyVariable(p.name) || "input";
+    let candidate = p.variable ?? base;
+    let n = 2;
+    while (taken.has(candidate)) candidate = `${base}_${n++}`;
+    taken.add(candidate);
+    out.set(p, candidate);
+  }
+  return out;
+};
+var valueFromPlacement = (placement, varName) => placement.prefix ? [placement.prefix, variable(varName)] : [variable(varName)];
+function templateFromPlacements(placements, slug) {
+  const variables = assignVariables(placements);
+  const headers = {};
+  const queryParams = {};
+  for (const placement of placements) {
+    if (!placement.name) continue;
+    const varName = variables.get(placement) ?? TOKEN_VARIABLE;
+    if (placement.carrier === "header") {
+      headers[placement.name] = valueFromPlacement(placement, varName);
+    } else {
+      queryParams[placement.name] = valueFromPlacement(placement, varName);
+    }
+  }
+  return {
+    slug: AuthTemplateSlug.make(slug ?? ""),
+    type: "apiKey",
+    ...Object.keys(headers).length > 0 ? { headers } : {},
+    ...Object.keys(queryParams).length > 0 ? { queryParams } : {}
+  };
+}
+function editorValueFromAuthentication(template) {
+  if (template.type === "oauth") {
+    return {
+      kind: "oauth",
+      authorizationUrl: template.authorizationUrl ?? "",
+      tokenUrl: template.tokenUrl ?? "",
+      scopes: template.scopes ?? []
+    };
+  }
+  return { kind: "apikey", placements: placementsFromApiKey(template) };
+}
+var oauthTemplateFromEditorValue = (value, slug) => ({
+  slug: AuthTemplateSlug.make(slug ?? ""),
+  type: "oauth",
+  authorizationUrl: value.authorizationUrl,
+  tokenUrl: value.tokenUrl,
+  scopes: [...value.scopes]
+});
+function authenticationFromEditorValue(value, slug) {
+  if (value.kind === "none") return null;
+  if (value.kind === "oauth") return oauthTemplateFromEditorValue(value, slug);
+  return templateFromPlacements(value.placements, slug);
+}
+
+export {
+  authMethodsFromConfig,
+  templateFromPlacements,
+  editorValueFromAuthentication,
+  authenticationFromEditorValue
+};
+//# sourceMappingURL=chunk-QSSRVK6M.js.map

package/dist/chunk-QSSRVK6M.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/react/auth-method-config.ts"],"sourcesContent":["// ---------------------------------------------------------------------------\n// OpenAPI ↔ generic auth-method converters.\n//\n// The generic Accounts hub speaks in plugin-agnostic `AuthMethod` /\n// `Placement` values (`@executor-js/react/lib/auth-placements`). The OpenAPI\n// plugin stores auth as the HTTP-transport-specific `APIKeyAuthentication`\n// template (header/query slots templated with `variable(\"token\")`). These two\n// converters bridge the wire template to/from the generic placement model, so\n// they live with the OpenAPI plugin — they touch the openapi sdk\n// `Authentication` types and would pull transport specifics into core.\n// ---------------------------------------------------------------------------\n\nimport { AuthTemplateSlug } from \"@executor-js/sdk/shared\";\nimport type { AuthMethod, Placement } from \"@executor-js/react/lib/auth-placements\";\nimport type { AuthTemplateEditorValue } from \"@executor-js/react/components/auth-template-editor\";\n\nimport {\n  TOKEN_VARIABLE,\n  variable,\n  type APIKeyAuthentication,\n  type Authentication,\n  type AuthenticationTemplateValue,\n} from \"../sdk/types\";\n\n// ---------------------------------------------------------------------------\n// Template value → placement prefix.\n//\n// A header/query slot serializes the credential as `name -> [prefix, token]`,\n// where `prefix` is the leading literal string before the `variable(\"token\")`\n// part. A bare `[token]` (or string-only) value has an empty prefix.\n// ---------------------------------------------------------------------------\n\nconst isVariablePart = (part: string | { readonly type: \"variable\"; readonly name: string }) =>\n  typeof part !== \"string\" && part.type === \"variable\";\n\n/** Extract the literal prefix preceding the credential variable, plus the\n *  variable name that placement renders from (`token` for single-input methods,\n *  a distinct name per input for multi-input ones). */\nconst parseTemplateValue = (\n  value: AuthenticationTemplateValue,\n): { readonly prefix: string; readonly variable: string } => {\n  if (typeof value === \"string\") return { prefix: \"\", variable: TOKEN_VARIABLE };\n  const parts: string[] = [];\n  for (const part of value) {\n    if (isVariablePart(part)) {\n      return { prefix: parts.join(\"\"), variable: (part as { readonly name: string }).name };\n    }\n    if (typeof part === \"string\") parts.push(part);\n  }\n  return { prefix: parts.join(\"\"), variable: TOKEN_VARIABLE };\n};\n\nexport const placementsFromApiKey = (template: APIKeyAuthentication): Placement[] => {\n  const placements: Placement[] = [];\n  for (const [name, value] of Object.entries(template.headers ?? {})) {\n    const { prefix, variable } = parseTemplateValue(value);\n    placements.push({ carrier: \"header\", name, prefix, variable });\n  }\n  for (const [name, value] of Object.entries(template.queryParams ?? {})) {\n    const { prefix, variable } = parseTemplateValue(value);\n    placements.push({ carrier: \"query\", name, prefix, variable });\n  }\n  return placements;\n};\n\n// ---------------------------------------------------------------------------\n// Templates → generic methods.\n// ---------------------------------------------------------------------------\n\nconst labelForApiKey = (slug: string, placements: readonly Placement[]): string => {\n  const first = placements[0];\n  if (first) return `API key (${first.name || (first.carrier === \"header\" ? \"header\" : \"query\")})`;\n  return `API key (${slug})`;\n};\n\n/** Map each stored auth template to a generic `AuthMethod`. */\nexport function authMethodsFromConfig(templates: readonly Authentication[]): AuthMethod[] {\n  return templates.map((template: Authentication): AuthMethod => {\n    const slug = String(template.slug);\n    const source: \"spec\" | \"custom\" = slug.startsWith(\"custom_\") ? \"custom\" : \"spec\";\n    if (template.type === \"oauth\") {\n      return {\n        id: slug,\n        label: \"OAuth2\",\n        kind: \"oauth\",\n        source,\n        template: AuthTemplateSlug.make(slug),\n        placements: [],\n        // Carry the integration's declared endpoints/scopes so the\n        // client-registration form pre-fills them.\n        oauth: {\n          authorizationUrl: template.authorizationUrl,\n          tokenUrl: template.tokenUrl,\n          scopes: template.scopes,\n        },\n      };\n    }\n    const placements = placementsFromApiKey(template);\n    return {\n      id: slug,\n      label: labelForApiKey(slug, placements),\n      kind: \"apikey\",\n      source,\n      template: AuthTemplateSlug.make(slug),\n      placements,\n    };\n  });\n}\n\n// ---------------------------------------------------------------------------\n// Generic placements → apiKey template (inverse).\n//\n// Each placement becomes a header/query slot whose value is\n// `prefix ? [prefix, variable(\"token\")] : [variable(\"token\")]`. A custom method\n// may omit `slug`; the backend backfills `custom_<id>`.\n// ---------------------------------------------------------------------------\n\n/** Slugify a placement name into a variable identifier: `DD-API-KEY` →\n *  `dd_api_key`. */\nconst slugifyVariable = (name: string): string =>\n  name\n    .toLowerCase()\n    .replace(/[^a-z0-9]+/g, \"_\")\n    .replace(/^_+|_+$/g, \"\");\n\n/** Assign an input variable to each (named) placement. A lone input is the\n *  canonical `token`; multiple inputs each get their own distinct variable so a\n *  connection can carry a different value per location. An explicit\n *  `placement.variable` (from a round-trip) is honored. */\nconst assignVariables = (placements: readonly Placement[]): Map<Placement, string> => {\n  const named = placements.filter((p) => p.name);\n  const out = new Map<Placement, string>();\n  if (named.length <= 1) {\n    for (const p of named) out.set(p, p.variable ?? TOKEN_VARIABLE);\n    return out;\n  }\n  const taken = new Set<string>();\n  for (const p of named) {\n    const base = slugifyVariable(p.name) || \"input\";\n    let candidate = p.variable ?? base;\n    let n = 2;\n    while (taken.has(candidate)) candidate = `${base}_${n++}`;\n    taken.add(candidate);\n    out.set(p, candidate);\n  }\n  return out;\n};\n\nconst valueFromPlacement = (placement: Placement, varName: string): AuthenticationTemplateValue =>\n  placement.prefix ? [placement.prefix, variable(varName)] : [variable(varName)];\n\n/** Build an `APIKeyAuthentication` template from generic placements. When\n *  `slug` is omitted the backend assigns a `custom_<id>` slug. */\nexport function templateFromPlacements(\n  placements: readonly Placement[],\n  slug?: string,\n): APIKeyAuthentication {\n  const variables = assignVariables(placements);\n  const headers: Record<string, AuthenticationTemplateValue> = {};\n  const queryParams: Record<string, AuthenticationTemplateValue> = {};\n  for (const placement of placements) {\n    if (!placement.name) continue;\n    const varName = variables.get(placement) ?? TOKEN_VARIABLE;\n    if (placement.carrier === \"header\") {\n      headers[placement.name] = valueFromPlacement(placement, varName);\n    } else {\n      queryParams[placement.name] = valueFromPlacement(placement, varName);\n    }\n  }\n  return {\n    slug: AuthTemplateSlug.make(slug ?? \"\"),\n    type: \"apiKey\",\n    ...(Object.keys(headers).length > 0 ? { headers } : {}),\n    ...(Object.keys(queryParams).length > 0 ? { queryParams } : {}),\n  };\n}\n\n// ---------------------------------------------------------------------------\n// Stored `Authentication` ⇆ generic `AuthTemplateEditorValue`.\n//\n// The shared add-time `AuthTemplateEditor` edits a plugin-agnostic value; these\n// bridge it to/from the OpenAPI wire template so a spec-detected method seeds an\n// editable default and the user's edits round-trip back to `Authentication[]`\n// on submit. apiKey → placements; oauth → endpoints + scopes.\n// ---------------------------------------------------------------------------\n\n/** Convert one stored `Authentication` template into a generic editor value. */\nexport function editorValueFromAuthentication(template: Authentication): AuthTemplateEditorValue {\n  if (template.type === \"oauth\") {\n    return {\n      kind: \"oauth\",\n      authorizationUrl: template.authorizationUrl ?? \"\",\n      tokenUrl: template.tokenUrl ?? \"\",\n      scopes: template.scopes ?? [],\n    };\n  }\n  return { kind: \"apikey\", placements: placementsFromApiKey(template) };\n}\n\n/** Build an `OAuthAuthentication` template from a generic oauth editor value. */\nconst oauthTemplateFromEditorValue = (\n  value: Extract<AuthTemplateEditorValue, { kind: \"oauth\" }>,\n  slug?: string,\n): Authentication => ({\n  slug: AuthTemplateSlug.make(slug ?? \"\"),\n  type: \"oauth\",\n  authorizationUrl: value.authorizationUrl,\n  tokenUrl: value.tokenUrl,\n  scopes: [...value.scopes],\n});\n\n/** Convert one generic editor value back into a stored `Authentication`, or\n *  `null` for `none` (no method to register). The optional `slug` names the\n *  template; when omitted the backend backfills `custom_<id>`. */\nexport function authenticationFromEditorValue(\n  value: AuthTemplateEditorValue,\n  slug?: string,\n): Authentication | null {\n  if (value.kind === \"none\") return null;\n  if (value.kind === \"oauth\") return oauthTemplateFromEditorValue(value, slug);\n  return templateFromPlacements(value.placements, slug);\n}\n"],"mappings":";;;;;;AAYA,SAAS,wBAAwB;AAoBjC,IAAM,iBAAiB,CAAC,SACtB,OAAO,SAAS,YAAY,KAAK,SAAS;AAK5C,IAAM,qBAAqB,CACzB,UAC2D;AAC3D,MAAI,OAAO,UAAU,SAAU,QAAO,EAAE,QAAQ,IAAI,UAAU,eAAe;AAC7E,QAAM,QAAkB,CAAC;AACzB,aAAW,QAAQ,OAAO;AACxB,QAAI,eAAe,IAAI,GAAG;AACxB,aAAO,EAAE,QAAQ,MAAM,KAAK,EAAE,GAAG,UAAW,KAAmC,KAAK;AAAA,IACtF;AACA,QAAI,OAAO,SAAS,SAAU,OAAM,KAAK,IAAI;AAAA,EAC/C;AACA,SAAO,EAAE,QAAQ,MAAM,KAAK,EAAE,GAAG,UAAU,eAAe;AAC5D;AAEO,IAAM,uBAAuB,CAAC,aAAgD;AACnF,QAAM,aAA0B,CAAC;AACjC,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,SAAS,WAAW,CAAC,CAAC,GAAG;AAClE,UAAM,EAAE,QAAQ,UAAAA,UAAS,IAAI,mBAAmB,KAAK;AACrD,eAAW,KAAK,EAAE,SAAS,UAAU,MAAM,QAAQ,UAAAA,UAAS,CAAC;AAAA,EAC/D;AACA,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,SAAS,eAAe,CAAC,CAAC,GAAG;AACtE,UAAM,EAAE,QAAQ,UAAAA,UAAS,IAAI,mBAAmB,KAAK;AACrD,eAAW,KAAK,EAAE,SAAS,SAAS,MAAM,QAAQ,UAAAA,UAAS,CAAC;AAAA,EAC9D;AACA,SAAO;AACT;AAMA,IAAM,iBAAiB,CAAC,MAAc,eAA6C;AACjF,QAAM,QAAQ,WAAW,CAAC;AAC1B,MAAI,MAAO,QAAO,YAAY,MAAM,SAAS,MAAM,YAAY,WAAW,WAAW,QAAQ;AAC7F,SAAO,YAAY,IAAI;AACzB;AAGO,SAAS,sBAAsB,WAAoD;AACxF,SAAO,UAAU,IAAI,CAAC,aAAyC;AAC7D,UAAM,OAAO,OAAO,SAAS,IAAI;AACjC,UAAM,SAA4B,KAAK,WAAW,SAAS,IAAI,WAAW;AAC1E,QAAI,SAAS,SAAS,SAAS;AAC7B,aAAO;AAAA,QACL,IAAI;AAAA,QACJ,OAAO;AAAA,QACP,MAAM;AAAA,QACN;AAAA,QACA,UAAU,iBAAiB,KAAK,IAAI;AAAA,QACpC,YAAY,CAAC;AAAA;AAAA;AAAA,QAGb,OAAO;AAAA,UACL,kBAAkB,SAAS;AAAA,UAC3B,UAAU,SAAS;AAAA,UACnB,QAAQ,SAAS;AAAA,QACnB;AAAA,MACF;AAAA,IACF;AACA,UAAM,aAAa,qBAAqB,QAAQ;AAChD,WAAO;AAAA,MACL,IAAI;AAAA,MACJ,OAAO,eAAe,MAAM,UAAU;AAAA,MACtC,MAAM;AAAA,MACN;AAAA,MACA,UAAU,iBAAiB,KAAK,IAAI;AAAA,MACpC;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAYA,IAAM,kBAAkB,CAAC,SACvB,KACG,YAAY,EACZ,QAAQ,eAAe,GAAG,EAC1B,QAAQ,YAAY,EAAE;AAM3B,IAAM,kBAAkB,CAAC,eAA6D;AACpF,QAAM,QAAQ,WAAW,OAAO,CAAC,MAAM,EAAE,IAAI;AAC7C,QAAM,MAAM,oBAAI,IAAuB;AACvC,MAAI,MAAM,UAAU,GAAG;AACrB,eAAW,KAAK,MAAO,KAAI,IAAI,GAAG,EAAE,YAAY,cAAc;AAC9D,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,oBAAI,IAAY;AAC9B,aAAW,KAAK,OAAO;AACrB,UAAM,OAAO,gBAAgB,EAAE,IAAI,KAAK;AACxC,QAAI,YAAY,EAAE,YAAY;AAC9B,QAAI,IAAI;AACR,WAAO,MAAM,IAAI,SAAS,EAAG,aAAY,GAAG,IAAI,IAAI,GAAG;AACvD,UAAM,IAAI,SAAS;AACnB,QAAI,IAAI,GAAG,SAAS;AAAA,EACtB;AACA,SAAO;AACT;AAEA,IAAM,qBAAqB,CAAC,WAAsB,YAChD,UAAU,SAAS,CAAC,UAAU,QAAQ,SAAS,OAAO,CAAC,IAAI,CAAC,SAAS,OAAO,CAAC;AAIxE,SAAS,uBACd,YACA,MACsB;AACtB,QAAM,YAAY,gBAAgB,UAAU;AAC5C,QAAM,UAAuD,CAAC;AAC9D,QAAM,cAA2D,CAAC;AAClE,aAAW,aAAa,YAAY;AAClC,QAAI,CAAC,UAAU,KAAM;AACrB,UAAM,UAAU,UAAU,IAAI,SAAS,KAAK;AAC5C,QAAI,UAAU,YAAY,UAAU;AAClC,cAAQ,UAAU,IAAI,IAAI,mBAAmB,WAAW,OAAO;AAAA,IACjE,OAAO;AACL,kBAAY,UAAU,IAAI,IAAI,mBAAmB,WAAW,OAAO;AAAA,IACrE;AAAA,EACF;AACA,SAAO;AAAA,IACL,MAAM,iBAAiB,KAAK,QAAQ,EAAE;AAAA,IACtC,MAAM;AAAA,IACN,GAAI,OAAO,KAAK,OAAO,EAAE,SAAS,IAAI,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrD,GAAI,OAAO,KAAK,WAAW,EAAE,SAAS,IAAI,EAAE,YAAY,IAAI,CAAC;AAAA,EAC/D;AACF;AAYO,SAAS,8BAA8B,UAAmD;AAC/F,MAAI,SAAS,SAAS,SAAS;AAC7B,WAAO;AAAA,MACL,MAAM;AAAA,MACN,kBAAkB,SAAS,oBAAoB;AAAA,MAC/C,UAAU,SAAS,YAAY;AAAA,MAC/B,QAAQ,SAAS,UAAU,CAAC;AAAA,IAC9B;AAAA,EACF;AACA,SAAO,EAAE,MAAM,UAAU,YAAY,qBAAqB,QAAQ,EAAE;AACtE;AAGA,IAAM,+BAA+B,CACnC,OACA,UACoB;AAAA,EACpB,MAAM,iBAAiB,KAAK,QAAQ,EAAE;AAAA,EACtC,MAAM;AAAA,EACN,kBAAkB,MAAM;AAAA,EACxB,UAAU,MAAM;AAAA,EAChB,QAAQ,CAAC,GAAG,MAAM,MAAM;AAC1B;AAKO,SAAS,8BACd,OACA,MACuB;AACvB,MAAI,MAAM,SAAS,OAAQ,QAAO;AAClC,MAAI,MAAM,SAAS,QAAS,QAAO,6BAA6B,OAAO,IAAI;AAC3E,SAAO,uBAAuB,MAAM,YAAY,IAAI;AACtD;","names":["variable"]}