@executor-js/plugin-openapi 1.5.21 → 2.0.0

package/dist/chunk-DBA2BHE4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/config.ts","../src/sdk/store.ts","../src/sdk/invoke.ts","../src/sdk/backing.ts","../src/sdk/plugin.ts"],"sourcesContent":["import { Option, Schema } from \"effect\";\nimport {\n  ApiKeyAuthMethod,\n  TOKEN_VARIABLE,\n  renderAuthPlacements,\n  requiredPlacementVariables,\n} from \"@executor-js/sdk/http-auth\";\n\nimport type { Authentication } from \"./types\";\n\n// ---------------------------------------------------------------------------\n// OpenAPI integration config — the opaque blob stored on the catalog\n// `integration.config` column (D1). Core never parses it; the plugin writes it\n// at register time and reads it back in `resolveTools` / `invokeTool`.\n//\n// In v2 there are NO credential bindings, NO per-source secret slots, and NO\n// StoredSource credential config. The config carries only:\n//   - the content hash of the spec blob and/or the source URL to (re)fetch\n//     from,\n//   - the optional base URL override,\n//   - the auth templates a connection's value is rendered through.\n// The resolved spec text itself lives in the plugin blob store, keyed\n// `spec/<specHash>` — it's a build input for resolveTools/refresh, not data\n// any list/invoke path should pay to load. Rows that predate the blob store\n// (inline `spec` text) are rewritten before this schema sees them: cloud by\n// the out-of-band migrate-specs-to-blobs script, the libSQL hosts by the\n// boot-time ledger migration.\n// ---------------------------------------------------------------------------\n\nconst OAuthAuthenticationSchema = Schema.Struct({\n  slug: Schema.String,\n  kind: Schema.Literal(\"oauth2\"),\n  authorizationUrl: Schema.String,\n  tokenUrl: Schema.String,\n  resource: Schema.optional(Schema.NullOr(Schema.String)),\n  scopes: Schema.Array(Schema.String),\n  supportsClientIdMetadataDocument: Schema.optional(Schema.Boolean),\n});\n\nexport const AuthenticationSchema = Schema.Union([OAuthAuthenticationSchema, ApiKeyAuthMethod]);\n\nexport const OpenApiIntegrationConfigSchema = Schema.Struct({\n  /** Hex SHA-256 of the resolved spec text — the content address of the spec\n   *  blob (`spec/<hash>` in the plugin blob store). */\n  specHash: Schema.optional(Schema.String),\n  /** Origin URL the spec was fetched from, when known. Enables refresh. */\n  sourceUrl: Schema.optional(Schema.String),\n  /** Optional base URL override. */\n  baseUrl: Schema.optional(Schema.String),\n  /** Static headers applied to every request (no secret material). */\n  headers: Schema.optional(Schema.Record(Schema.String, Schema.String)),\n  /** Static query params applied to every request (no secret material). */\n  queryParams: Schema.optional(Schema.Record(Schema.String, Schema.String)),\n  /** The auth methods a connection's value can be applied through. */\n  authenticationTemplate: Schema.optional(Schema.Array(AuthenticationSchema)),\n});\n\nexport type OpenApiIntegrationConfig = Omit<\n  typeof OpenApiIntegrationConfigSchema.Type,\n  \"authenticationTemplate\"\n> & {\n  /** Branded over the schema's structural form so the template renderer can\n   *  treat `slug` as an `AuthTemplateSlug`. */\n  readonly authenticationTemplate?: readonly Authentication[];\n};\n\nconst decodeConfig = Schema.decodeUnknownOption(OpenApiIntegrationConfigSchema);\n\n/** Decode the opaque integration config blob into the openapi shape.\n *  Returns null when the blob is missing/incompatible. */\nexport const decodeOpenApiIntegrationConfig = (value: unknown): OpenApiIntegrationConfig | null =>\n  Option.getOrNull(decodeConfig(value)) as OpenApiIntegrationConfig | null;\n\n// ---------------------------------------------------------------------------\n// Template rendering — \"auth state derived into the auth-template format\"\n// (D11). An apiKey method renders through the shared placements renderer; an\n// oauth template (no explicit placement) renders a bearer `authorization`\n// header from the `token` input (the access token).\n// ---------------------------------------------------------------------------\n\nexport interface RenderedAuth {\n  readonly headers: Record<string, string>;\n  readonly queryParams: Record<string, string>;\n}\n\n/** Render an auth template against a connection's resolved input `values`\n *  (`variable → value`). Each placement substitutes from its own entry, so a\n *  method with two distinct inputs (e.g. Datadog) fills each header from a\n *  different value. */\nexport const renderAuthTemplate = (\n  template: Authentication,\n  values: Record<string, string | null>,\n): RenderedAuth => {\n  if (template.kind === \"oauth2\") {\n    return {\n      headers: { authorization: `Bearer ${values[TOKEN_VARIABLE] ?? \"\"}` },\n      queryParams: {},\n    };\n  }\n  return renderAuthPlacements(template.placements, values);\n};\n\n/** The distinct input variables a template references — the inputs a connection\n *  must supply. An oauth template needs `token`; an apiKey method needs every\n *  variable across its placements. */\nexport const requiredTemplateVariables = (template: Authentication): readonly string[] => {\n  if (template.kind === \"oauth2\") return [TOKEN_VARIABLE];\n  return requiredPlacementVariables(template.placements);\n};\n","import { Effect, Option, Predicate, Schema } from \"effect\";\n\nimport {\n  type PluginStorageEntry,\n  type StorageDeps,\n  type StorageFailure,\n} from \"@executor-js/sdk/core\";\n\nimport { OperationBinding } from \"./types\";\n\n// ---------------------------------------------------------------------------\n// OpenAPI plugin store (v2). The catalog row (integration.config) owns the\n// auth templates plus the spec's content hash; the resolved spec text itself\n// lives in the plugin blob store under `spec/<hash>` (it's multi-MB and only\n// a build input). This store keeps the per-operation invocation bindings\n// (method / path / params), keyed by integration slug, so `invokeTool` can map\n// a tool name back to its HTTP operation without re-parsing the spec on every\n// call. There are NO credential bindings, slots, or StoredSource credential\n// config here — those concepts are gone in v2.\n//\n// Operations are spec-derived (identical for every connection on an\n// integration), so they live under the org owner (the integration catalog is\n// tenant-level). The plugin storage facade partitions by owner; \"org\" keeps a\n// single shared copy per integration.\n// ---------------------------------------------------------------------------\n\nconst OPERATION_COLLECTION = \"operation\";\nconst STORE_OWNER = \"org\" as const;\nconst OPERATION_KEY_VERSION = \"op\";\n\nconst encodeBinding = Schema.encodeSync(OperationBinding);\nconst decodeBinding = Schema.decodeUnknownSync(OperationBinding);\nconst decodeBindingJson = Schema.decodeUnknownSync(Schema.fromJsonString(OperationBinding));\n\nconst toJsonRecord = (value: unknown): Record<string, unknown> => value as Record<string, unknown>;\n\nconst OperationStorage = Schema.Struct({\n  integration: Schema.String,\n  toolName: Schema.String,\n  binding: Schema.Unknown,\n  // Resolved tool description (operation description / summary / method+path\n  // fallback), persisted so the serve path can rebuild the tool def without\n  // re-parsing the spec. Optional: legacy rows predate it and resolve via the\n  // parse fallback.\n  description: Schema.optional(Schema.String),\n});\nconst decodeOperationStorage = Schema.decodeUnknownOption(OperationStorage);\n\nexport interface StoredOperation {\n  /** The integration slug this operation belongs to. */\n  readonly integration: string;\n  /** The tool name (the `<tool>` address segment) this operation backs. */\n  readonly toolName: string;\n  readonly binding: OperationBinding;\n  /** Resolved tool description, persisted alongside the binding so the serve\n   *  path can rebuild the tool def without re-parsing the spec. */\n  readonly description?: string;\n}\n\nconst rowToOperation = (row: PluginStorageEntry): StoredOperation | null => {\n  const decoded = decodeOperationStorage(row.data);\n  if (Option.isNone(decoded)) return null;\n  const operation = decoded.value;\n  return {\n    integration: operation.integration,\n    toolName: operation.toolName,\n    binding: decodeBinding(\n      typeof operation.binding === \"string\"\n        ? decodeBindingJson(operation.binding)\n        : operation.binding,\n    ),\n    ...(operation.description !== undefined ? { description: operation.description } : {}),\n  };\n};\n\nconst stableKeyHash = (value: string): string => {\n  let hash = 0xcbf29ce484222325n;\n  const prime = 0x100000001b3n;\n  const mask = 0xffffffffffffffffn;\n  for (let index = 0; index < value.length; index += 1) {\n    hash ^= BigInt(value.charCodeAt(index));\n    hash = (hash * prime) & mask;\n  }\n  return hash.toString(36).padStart(13, \"0\");\n};\n\nconst operationKey = (integration: string, toolName: string): string =>\n  `${OPERATION_KEY_VERSION}.${stableKeyHash(integration)}.${stableKeyHash(toolName)}`;\n\nconst legacyOperationKey = (integration: string, toolName: string): string =>\n  `${integration}.${toolName}`;\n\n/** Blob key for a spec's content hash. Content-addressed so re-puts are\n *  idempotent and identical specs share one blob per partition. */\nexport const specBlobKey = (specHash: string): string => `spec/${specHash}`;\n\n/** Blob key for a spec's compiled `#/$defs/*` schemas, keyed by the same\n *  content hash as the spec. The serve path reads this instead of re-parsing\n *  the (potentially multi-MB) spec to rebuild the shared `definitions`. */\nexport const defsBlobKey = (specHash: string): string => `defs/${specHash}`;\n\nexport interface OpenapiStore {\n  /** Replace all stored operations for an integration. */\n  readonly putOperations: (\n    integration: string,\n    operations: readonly StoredOperation[],\n  ) => Effect.Effect<void, StorageFailure>;\n  /** Append operations without clearing existing ones. The caller is\n   *  responsible for `removeOperations` first when doing a full rebuild. Used\n   *  by the streaming compile path, which persists operations chunk by chunk so\n   *  a huge spec's bindings are never all materialized at once. */\n  readonly appendOperations: (\n    integration: string,\n    operations: readonly StoredOperation[],\n  ) => Effect.Effect<void, StorageFailure>;\n  /** Look up one operation by integration + tool name. */\n  readonly getOperation: (\n    integration: string,\n    toolName: string,\n  ) => Effect.Effect<StoredOperation | null, StorageFailure>;\n  /** List every stored operation for an integration. */\n  readonly listOperations: (\n    integration: string,\n  ) => Effect.Effect<readonly StoredOperation[], StorageFailure>;\n  /** Drop all stored operations for an integration. */\n  readonly removeOperations: (integration: string) => Effect.Effect<void, StorageFailure>;\n  /** Persist resolved spec text under its content hash. Org-owned and\n   *  content-addressed; never removed on integration removal because another\n   *  integration in the tenant may share the hash. */\n  readonly putSpec: (specHash: string, specText: string) => Effect.Effect<void, StorageFailure>;\n  /** Load spec text by content hash; null when no blob exists. */\n  readonly getSpec: (specHash: string) => Effect.Effect<string | null, StorageFailure>;\n  /** Persist the compiled `#/$defs/*` JSON for a spec under its content hash.\n   *  Content-addressed like the spec blob; lets the serve path serve the shared\n   *  `definitions` without re-parsing the spec. */\n  readonly putDefs: (specHash: string, defsJson: string) => Effect.Effect<void, StorageFailure>;\n  /** Load the compiled `#/$defs/*` JSON by content hash; null when no blob\n   *  exists (legacy rows added before the defs blob). */\n  readonly getDefs: (specHash: string) => Effect.Effect<string | null, StorageFailure>;\n}\n\nexport const makeDefaultOpenapiStore = ({ pluginStorage, blobs }: StorageDeps): OpenapiStore => {\n  const operationData = (operation: StoredOperation) => ({\n    integration: operation.integration,\n    toolName: operation.toolName,\n    binding: toJsonRecord(encodeBinding(operation.binding)),\n    ...(operation.description !== undefined ? { description: operation.description } : {}),\n  });\n\n  const listRows = (integration: string) =>\n    pluginStorage\n      .list({ collection: OPERATION_COLLECTION })\n      .pipe(\n        Effect.map((rows: readonly PluginStorageEntry[]) =>\n          rows.filter((row) => rowToOperation(row)?.integration === integration),\n        ),\n      );\n\n  const removeOperations = (integration: string) =>\n    Effect.gen(function* () {\n      const rows = yield* listRows(integration);\n      yield* pluginStorage.removeMany({\n        owner: STORE_OWNER,\n        entries: rows.map((row) => ({ collection: OPERATION_COLLECTION, key: row.key })),\n      });\n    });\n\n  const appendOperations = (integration: string, operations: readonly StoredOperation[]) =>\n    pluginStorage.putMany({\n      owner: STORE_OWNER,\n      entries: operations.map((operation) => ({\n        collection: OPERATION_COLLECTION,\n        key: operationKey(integration, operation.toolName),\n        data: operationData(operation),\n      })),\n    });\n\n  return {\n    putOperations: (integration, operations) =>\n      Effect.gen(function* () {\n        yield* removeOperations(integration);\n        yield* appendOperations(integration, operations);\n      }),\n\n    appendOperations,\n\n    getOperation: (integration, toolName) =>\n      Effect.gen(function* () {\n        const row = yield* pluginStorage.get({\n          collection: OPERATION_COLLECTION,\n          key: operationKey(integration, toolName),\n        });\n        if (row) return rowToOperation(row);\n        const legacyKey = legacyOperationKey(integration, toolName);\n        if (legacyKey.length > 255) return null;\n        const legacyRow = yield* pluginStorage.get({\n          collection: OPERATION_COLLECTION,\n          key: legacyKey,\n        });\n        return legacyRow ? rowToOperation(legacyRow) : null;\n      }),\n\n    listOperations: (integration) =>\n      listRows(integration).pipe(\n        Effect.map((rows) => rows.map(rowToOperation).filter(Predicate.isNotNull)),\n      ),\n\n    removeOperations,\n\n    putSpec: (specHash, specText) =>\n      blobs.put(specBlobKey(specHash), specText, { owner: STORE_OWNER }),\n\n    getSpec: (specHash) => blobs.get(specBlobKey(specHash)),\n\n    putDefs: (specHash, defsJson) =>\n      blobs.put(defsBlobKey(specHash), defsJson, { owner: STORE_OWNER }),\n\n    getDefs: (specHash) => blobs.get(defsBlobKey(specHash)),\n  };\n};\n","import { Effect, Layer, Option } from \"effect\";\nimport { HttpClient, HttpClientRequest } from \"effect/unstable/http\";\nimport type { ToolFileValue } from \"@executor-js/sdk/core\";\n\nimport { OpenApiInvocationError } from \"./errors\";\nimport { resolveServerUrl } from \"./openapi-utils\";\nimport {\n  type EncodingObject,\n  type OperationFileHint,\n  type OperationBinding,\n  InvocationResult,\n  type MediaBinding,\n  type OperationParameter,\n  type ServerInfo,\n} from \"./types\";\n\n// ---------------------------------------------------------------------------\n// Parameter reading\n// ---------------------------------------------------------------------------\n\nconst CONTAINER_KEYS: Record<string, readonly string[]> = {\n  path: [\"path\", \"pathParams\", \"params\"],\n  query: [\"query\", \"queryParams\", \"params\"],\n  header: [\"headers\", \"header\"],\n  cookie: [\"cookies\", \"cookie\"],\n};\n\nconst readParamValue = (args: Record<string, unknown>, param: OperationParameter): unknown => {\n  const direct = args[param.name];\n  if (direct !== undefined) return direct;\n\n  for (const key of CONTAINER_KEYS[param.location] ?? []) {\n    const container = args[key];\n    if (typeof container === \"object\" && container !== null && !Array.isArray(container)) {\n      const nested = (container as Record<string, unknown>)[param.name];\n      if (nested !== undefined) return nested;\n    }\n  }\n\n  return undefined;\n};\n\nconst primitiveToString = (value: unknown): string =>\n  typeof value === \"object\" && value !== null ? JSON.stringify(value) : String(value);\n\n// RFC 3986 §2.2 reserved chars. `allowReserved: true` leaves these\n// unencoded; default OAS behavior encodes everything non-unreserved.\nconst RESERVED_UNENCODED_RE = /[A-Za-z0-9\\-._~:/?#[\\]@!$&'()*+,;=]/;\n\nconst encodeReservedAware = (raw: string, allowReserved: boolean): string => {\n  if (!allowReserved) return encodeURIComponent(raw);\n  // Walk char-by-char so the reserved set passes through as-is.\n  let out = \"\";\n  for (const ch of raw) {\n    out += RESERVED_UNENCODED_RE.test(ch) ? ch : encodeURIComponent(ch);\n  }\n  return out;\n};\n\nconst queryParamValues = (value: unknown, param: OperationParameter): string[] => {\n  if (value === undefined || value === null) return [];\n  if (!Array.isArray(value)) return [primitiveToString(value)];\n\n  const style = Option.getOrUndefined(param.style) ?? \"form\";\n  const explode = Option.getOrElse(param.explode, () => true);\n\n  if (explode) return value.map(primitiveToString);\n\n  const separator = style === \"spaceDelimited\" ? \" \" : style === \"pipeDelimited\" ? \"|\" : \",\";\n  return [value.map(primitiveToString).join(separator)];\n};\n\n// ---------------------------------------------------------------------------\n// Path resolution\n// ---------------------------------------------------------------------------\n\nconst resolvePath = Effect.fn(\"OpenApi.resolvePath\")(function* (\n  pathTemplate: string,\n  args: Record<string, unknown>,\n  parameters: readonly OperationParameter[],\n) {\n  let resolved = pathTemplate;\n\n  for (const param of parameters) {\n    if (param.location !== \"path\") continue;\n    const value = readParamValue(args, param);\n    if (value === undefined || value === null) {\n      if (param.required) {\n        return yield* new OpenApiInvocationError({\n          message: `Missing required path parameter: ${param.name}`,\n          statusCode: Option.none(),\n        });\n      }\n      continue;\n    }\n    const encoded = encodeReservedAware(\n      String(value),\n      Option.getOrElse(param.allowReserved, () => false),\n    );\n    resolved = resolved.replaceAll(`{${param.name}}`, encoded);\n    resolved = resolved.replaceAll(`{+${param.name}}`, encoded);\n  }\n\n  const remaining = [...resolved.matchAll(/\\{([^{}]+)\\}/g)]\n    .map((m) => m[1])\n    .filter((v): v is string => typeof v === \"string\");\n\n  for (const name of remaining) {\n    const value = args[name];\n    if (value !== undefined && value !== null) {\n      resolved = resolved.replaceAll(`{${name}}`, encodeURIComponent(String(value)));\n    }\n  }\n\n  const unresolved = [...resolved.matchAll(/\\{([^{}]+)\\}/g)]\n    .map((m) => m[1])\n    .filter((v): v is string => typeof v === \"string\");\n\n  if (unresolved.length > 0) {\n    return yield* new OpenApiInvocationError({\n      message: `Unresolved path parameters: ${[...new Set(unresolved)].join(\", \")}`,\n      statusCode: Option.none(),\n    });\n  }\n\n  return resolved;\n});\n\n// GitHub (and some other upstreams) reject requests that lack a User-Agent\n// header with a 403 (\"Request forbidden by administrative rules\"), which is\n// indistinguishable from a credential rejection downstream. Send a default so\n// those calls succeed. It is applied before operation header params and\n// resolved auth headers, so a spec- or connection-provided User-Agent wins.\nconst DEFAULT_USER_AGENT = \"executor\";\n\nconst applyHeaders = (\n  request: HttpClientRequest.HttpClientRequest,\n  headers: Record<string, string>,\n): HttpClientRequest.HttpClientRequest => {\n  let req = request;\n  for (const [name, value] of Object.entries(headers)) {\n    req = HttpClientRequest.setHeader(req, name, value);\n  }\n  return req;\n};\n\n// ---------------------------------------------------------------------------\n// Response helpers\n// ---------------------------------------------------------------------------\n\nconst normalizeContentType = (ct: string | null | undefined): string =>\n  ct?.split(\";\")[0]?.trim().toLowerCase() ?? \"\";\n\nconst isJsonContentType = (ct: string | null | undefined): boolean => {\n  const normalized = normalizeContentType(ct);\n  if (!normalized) return false;\n  return (\n    normalized === \"application/json\" || normalized.includes(\"+json\") || normalized.includes(\"json\")\n  );\n};\n\nconst isFormUrlEncoded = (ct: string | null | undefined): boolean =>\n  normalizeContentType(ct) === \"application/x-www-form-urlencoded\";\n\nconst isMultipartFormData = (ct: string | null | undefined): boolean =>\n  normalizeContentType(ct).startsWith(\"multipart/form-data\");\n\nconst isXmlContentType = (ct: string | null | undefined): boolean => {\n  const normalized = normalizeContentType(ct);\n  if (!normalized) return false;\n  return (\n    normalized === \"application/xml\" || normalized === \"text/xml\" || normalized.endsWith(\"+xml\")\n  );\n};\n\nconst isTextContentType = (ct: string | null | undefined): boolean =>\n  normalizeContentType(ct).startsWith(\"text/\");\n\nconst isOctetStream = (ct: string | null | undefined): boolean =>\n  normalizeContentType(ct) === \"application/octet-stream\";\n\nconst bytesToBase64 = (bytes: Uint8Array): string => {\n  let binary = \"\";\n  const chunkSize = 0x8000;\n  for (let i = 0; i < bytes.length; i += chunkSize) {\n    binary += String.fromCharCode(...bytes.subarray(i, i + chunkSize));\n  }\n  return btoa(binary);\n};\n\nconst normalizeBase64 = (value: string, encoding: \"base64\" | \"base64url\"): string => {\n  const compact = value.replace(/\\s/g, \"\");\n  const alphabet =\n    encoding === \"base64url\" ? compact.replace(/-/g, \"+\").replace(/_/g, \"/\") : compact;\n  const remainder = alphabet.length % 4;\n  return remainder === 0 ? alphabet : `${alphabet}${\"=\".repeat(4 - remainder)}`;\n};\n\nconst byteLengthFromBase64 = (base64: string): number => {\n  const compact = base64.replace(/\\s/g, \"\");\n  const padding = compact.endsWith(\"==\") ? 2 : compact.endsWith(\"=\") ? 1 : 0;\n  return Math.max(0, Math.floor((compact.length * 3) / 4) - padding);\n};\n\nconst isGenericMimeType = (mimeType: string): boolean =>\n  normalizeContentType(mimeType) === \"application/octet-stream\";\n\nconst startsWithBytes = (bytes: Uint8Array, prefix: readonly number[]): boolean =>\n  prefix.every((byte, index) => bytes[index] === byte);\n\nconst isLikelyUtf8Text = (bytes: Uint8Array): boolean => {\n  if (bytes.length === 0) return false;\n  let text: string;\n  // oxlint-disable-next-line executor/no-try-catch-or-throw -- boundary: TextDecoder throws while probing arbitrary binary content\n  try {\n    text = new TextDecoder(\"utf-8\", { fatal: true }).decode(bytes);\n  } catch {\n    return false;\n  }\n  let suspicious = 0;\n  for (let index = 0; index < text.length; index += 1) {\n    const code = text.charCodeAt(index);\n    const allowedControl = code === 0x09 || code === 0x0a || code === 0x0c || code === 0x0d;\n    if (code === 0x00) return false;\n    if (code < 0x20 && !allowedControl) suspicious += 1;\n  }\n  return suspicious / Math.max(1, text.length) <= 0.02;\n};\n\nconst sniffMimeType = (bytes: Uint8Array): string | null => {\n  if (startsWithBytes(bytes, [0xff, 0xd8, 0xff])) return \"image/jpeg\";\n  if (startsWithBytes(bytes, [0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a])) {\n    return \"image/png\";\n  }\n  if (\n    startsWithBytes(bytes, [0x47, 0x49, 0x46, 0x38, 0x37, 0x61]) ||\n    startsWithBytes(bytes, [0x47, 0x49, 0x46, 0x38, 0x39, 0x61])\n  ) {\n    return \"image/gif\";\n  }\n  if (\n    startsWithBytes(bytes, [0x52, 0x49, 0x46, 0x46]) &&\n    bytes[8] === 0x57 &&\n    bytes[9] === 0x45 &&\n    bytes[10] === 0x42 &&\n    bytes[11] === 0x50\n  ) {\n    return \"image/webp\";\n  }\n  if (startsWithBytes(bytes, [0x25, 0x50, 0x44, 0x46, 0x2d])) return \"application/pdf\";\n  if (\n    startsWithBytes(bytes, [0x50, 0x4b, 0x03, 0x04]) ||\n    startsWithBytes(bytes, [0x50, 0x4b, 0x05, 0x06]) ||\n    startsWithBytes(bytes, [0x50, 0x4b, 0x07, 0x08])\n  ) {\n    return \"application/zip\";\n  }\n  if (isLikelyUtf8Text(bytes)) return \"text/plain\";\n  return null;\n};\n\nconst bytesFromBase64Prefix = (base64: string): Uint8Array => {\n  const prefix = base64.slice(0, Math.min(base64.length, 64));\n  const binary = atob(prefix);\n  const bytes = new Uint8Array(binary.length);\n  for (let index = 0; index < binary.length; index += 1) {\n    bytes[index] = binary.charCodeAt(index);\n  }\n  return bytes;\n};\n\nconst sniffMimeTypeFromBase64 = (base64: string): string | null =>\n  sniffMimeType(bytesFromBase64Prefix(base64));\n\ntype DecodedBase64Body = { readonly ok: true; readonly bytes: Uint8Array } | { readonly ok: false };\n\nconst base64ToUint8Array = (value: string): Uint8Array | null => {\n  let binary = \"\";\n  // oxlint-disable-next-line executor/no-try-catch-or-throw -- boundary: atob throws for invalid base64; invalid shapes are treated as non-byte input\n  try {\n    binary = atob(normalizeBase64(value, \"base64\"));\n  } catch {\n    return null;\n  }\n  const bytes = new Uint8Array(binary.length);\n  for (let index = 0; index < binary.length; index += 1) {\n    bytes[index] = binary.charCodeAt(index);\n  }\n  return bytes;\n};\n\nconst decodeBase64Body = (value: string): DecodedBase64Body => {\n  const bytes = base64ToUint8Array(value);\n  return bytes ? { ok: true, bytes } : { ok: false };\n};\n\nconst toUint8Array = (value: unknown): Uint8Array | null => {\n  if (value instanceof Uint8Array) return value;\n  if (value instanceof ArrayBuffer) return new Uint8Array(value);\n  if (ArrayBuffer.isView(value)) {\n    const view = value as ArrayBufferView;\n    return new Uint8Array(view.buffer, view.byteOffset, view.byteLength);\n  }\n  if (Array.isArray(value) && value.every((v) => typeof v === \"number\")) {\n    return new Uint8Array(value as readonly number[]);\n  }\n  return null;\n};\n\nconst readNestedBodyBase64 = (value: unknown): unknown =>\n  typeof value === \"object\" &&\n  value !== null &&\n  !Array.isArray(value) &&\n  Object.prototype.hasOwnProperty.call(value, \"bodyBase64\")\n    ? (value as Record<string, unknown>).bodyBase64\n    : undefined;\n\nconst readHintString = (option: OperationFileHint[\"dataField\"], fallback: string): string =>\n  Option.getOrElse(option, () => fallback);\n\nconst readHintMimeType = (hint: OperationFileHint, fallback: string): string =>\n  Option.getOrElse(hint.mimeType, () => fallback);\n\nconst readHintEncoding = (hint: OperationFileHint): \"base64\" | \"base64url\" =>\n  Option.getOrElse(hint.encoding, () => \"base64\");\n\nconst fileFromByteField = (body: unknown, hint: OperationFileHint): ToolFileValue | null => {\n  if (typeof body !== \"object\" || body === null || Array.isArray(body)) return null;\n  const record = body as Record<string, unknown>;\n  const dataField = readHintString(hint.dataField, \"data\");\n  const rawData = record[dataField];\n  if (typeof rawData !== \"string\") return null;\n\n  const data = normalizeBase64(rawData, readHintEncoding(hint));\n  const sizeField = Option.getOrUndefined(hint.sizeField);\n  const byteLength =\n    sizeField && typeof record[sizeField] === \"number\"\n      ? record[sizeField]\n      : byteLengthFromBase64(data);\n  const hintedMimeType = readHintMimeType(hint, \"application/octet-stream\");\n\n  return {\n    _tag: \"ToolFile\",\n    mimeType: isGenericMimeType(hintedMimeType)\n      ? (sniffMimeTypeFromBase64(data) ?? hintedMimeType)\n      : hintedMimeType,\n    encoding: \"base64\",\n    data,\n    byteLength,\n  };\n};\n\nconst fileFromBinaryBytes = (\n  bytes: Uint8Array,\n  hint: OperationFileHint,\n  contentType: string | null | undefined,\n): ToolFileValue => {\n  const hintedMimeType = contentType ?? readHintMimeType(hint, \"application/octet-stream\");\n  return {\n    _tag: \"ToolFile\",\n    mimeType: isGenericMimeType(hintedMimeType)\n      ? (sniffMimeType(bytes) ?? hintedMimeType)\n      : hintedMimeType,\n    encoding: \"base64\",\n    data: bytesToBase64(bytes),\n    byteLength: bytes.byteLength,\n  };\n};\n\ntype FormDataRecord = Parameters<typeof HttpClientRequest.bodyFormDataRecord>[1];\ntype FormDataCoercible = FormDataRecord[string];\n\n// Pull a plain ArrayBuffer out of a Uint8Array — `new Blob([u8])` rejects\n// views whose `.buffer` is `SharedArrayBuffer | ArrayBuffer` under strict\n// lib.dom typings.\nconst toArrayBuffer = (bytes: Uint8Array): ArrayBuffer => {\n  const copy = new ArrayBuffer(bytes.byteLength);\n  new Uint8Array(copy).set(bytes);\n  return copy;\n};\n\n// ---------------------------------------------------------------------------\n// OpenAPI 3.x encoding — per-property style/explode/allowReserved/contentType\n// for multipart/form-data and application/x-www-form-urlencoded bodies.\n// Spec ref: https://spec.openapis.org/oas/v3.1.0#encoding-object\n// ---------------------------------------------------------------------------\n\ntype StyleExplode = {\n  readonly style: string;\n  readonly explode: boolean;\n  readonly allowReserved: boolean;\n};\n\nconst DEFAULT_FORM_STYLE: StyleExplode = {\n  style: \"form\",\n  explode: true,\n  allowReserved: false,\n};\n\nconst resolveStyleExplode = (e: EncodingObject | undefined): StyleExplode => {\n  if (!e) return DEFAULT_FORM_STYLE;\n  return {\n    style: Option.getOrElse(e.style, () => DEFAULT_FORM_STYLE.style),\n    explode: Option.getOrElse(e.explode, () => DEFAULT_FORM_STYLE.explode),\n    allowReserved: Option.getOrElse(e.allowReserved, () => DEFAULT_FORM_STYLE.allowReserved),\n  };\n};\n\nconst encodeFormValue = (v: unknown, allowReserved: boolean): string => {\n  const raw = typeof v === \"object\" && v !== null ? JSON.stringify(v) : String(v);\n  return encodeReservedAware(raw, allowReserved);\n};\n\n/**\n * Serialize a record to application/x-www-form-urlencoded with OAS3 style\n * rules honored per-field. Supports `form` (default), `deepObject`,\n * `pipeDelimited`, `spaceDelimited` styles with `explode` true / false.\n */\nconst serializeFormUrlEncoded = (\n  value: Record<string, unknown>,\n  encoding: Record<string, EncodingObject> | undefined,\n): string => {\n  const parts: string[] = [];\n  for (const [key, raw] of Object.entries(value)) {\n    if (raw === undefined || raw === null) continue;\n    const { style, explode, allowReserved } = resolveStyleExplode(encoding?.[key]);\n    const encKey = encodeURIComponent(key);\n\n    if (Array.isArray(raw)) {\n      if (explode) {\n        for (const v of raw) {\n          parts.push(`${encKey}=${encodeFormValue(v, allowReserved)}`);\n        }\n      } else {\n        const sep = style === \"spaceDelimited\" ? \" \" : style === \"pipeDelimited\" ? \"|\" : \",\";\n        parts.push(\n          `${encKey}=${encodeFormValue(\n            raw.map((v) => (typeof v === \"object\" ? JSON.stringify(v) : String(v))).join(sep),\n            allowReserved,\n          )}`,\n        );\n      }\n      continue;\n    }\n\n    if (typeof raw === \"object\") {\n      const entries = Object.entries(raw as Record<string, unknown>).filter(\n        ([, v]) => v !== undefined && v !== null,\n      );\n      if (style === \"deepObject\") {\n        for (const [subkey, subval] of entries) {\n          // Encode the whole `key[subkey]` fragment so `[` / `]` become\n          // `%5B` / `%5D`. Matches swagger-client's behaviour and remains\n          // accepted by common server-side parsers (qs, Rails, etc.).\n          parts.push(\n            `${encodeURIComponent(`${key}[${subkey}]`)}=${encodeFormValue(subval, allowReserved)}`,\n          );\n        }\n      } else if (explode) {\n        // form + explode=true on object: sub-keys become top-level fields.\n        for (const [subkey, subval] of entries) {\n          parts.push(`${encodeURIComponent(subkey)}=${encodeFormValue(subval, allowReserved)}`);\n        }\n      } else {\n        // form + explode=false on object: flatten to csv key,val,key,val.\n        const flat = entries.flatMap(([k, v]) => [\n          k,\n          typeof v === \"object\" ? JSON.stringify(v) : String(v),\n        ]);\n        parts.push(`${encKey}=${encodeFormValue(flat.join(\",\"), allowReserved)}`);\n      }\n      continue;\n    }\n\n    parts.push(`${encKey}=${encodeFormValue(raw, allowReserved)}`);\n  }\n  return parts.join(\"&\");\n};\n\n/**\n * Best-effort build of a multipart FormData entry record.\n *\n * If `encoding[key].contentType` is declared (OAS3 §4.8.15), wrap the value\n * in a `Blob` with that type so the runtime multipart framer emits the\n * per-part `Content-Type` header (e.g. `application/json` for a metadata\n * part whose server expects parsed JSON).\n *\n * Otherwise: primitives pass through, arrays handle their item types, byte\n * shapes wrap as Blob, nested objects JSON-stringify (never `[object Object]`).\n */\nconst coerceFormDataRecord = (\n  value: Record<string, unknown>,\n  encoding: Record<string, EncodingObject> | undefined,\n): FormDataRecord => {\n  const out: Record<string, FormDataCoercible> = {};\n  for (const [key, raw] of Object.entries(value)) {\n    if (raw === undefined || raw === null) continue;\n\n    const partType = encoding?.[key]\n      ? Option.getOrUndefined(encoding[key]!.contentType)\n      : undefined;\n\n    // Explicit per-part content type: wrap in a typed Blob so the framer\n    // emits `Content-Type: <partType>` on this part. JSON types get the\n    // value JSON-stringified first so the blob body is valid JSON.\n    if (partType) {\n      const isJson = partType.startsWith(\"application/json\") || partType.includes(\"+json\");\n      const serialized =\n        typeof raw === \"string\"\n          ? raw\n          : isJson\n            ? JSON.stringify(raw)\n            : typeof raw === \"object\"\n              ? JSON.stringify(raw)\n              : String(raw);\n      out[key] = new Blob([serialized], { type: partType });\n      continue;\n    }\n\n    if (\n      typeof raw === \"string\" ||\n      typeof raw === \"number\" ||\n      typeof raw === \"boolean\" ||\n      raw instanceof Blob ||\n      (typeof File !== \"undefined\" && raw instanceof File)\n    ) {\n      out[key] = raw as FormDataCoercible;\n      continue;\n    }\n    if (Array.isArray(raw)) {\n      out[key] = raw.map((v) =>\n        typeof v === \"string\" ||\n        typeof v === \"number\" ||\n        typeof v === \"boolean\" ||\n        v instanceof Blob ||\n        (typeof File !== \"undefined\" && v instanceof File)\n          ? (v as FormDataCoercible)\n          : JSON.stringify(v),\n      ) as FormDataCoercible;\n      continue;\n    }\n    const bytes = toUint8Array(raw);\n    if (bytes) {\n      out[key] = new Blob([toArrayBuffer(bytes)]);\n      continue;\n    }\n    out[key] = JSON.stringify(raw);\n  }\n  return out;\n};\n\n// ---------------------------------------------------------------------------\n// Request body dispatch\n//\n// Dispatch is driven by the spec-declared content type first, JS type of\n// the provided body second. Servers that advertise a specific content type\n// almost always reject anything else (e.g. a multipart endpoint will hang\n// waiting for valid framing if it receives `application/json`), so the\n// content type wins.\n//\n// Within each content type we accept both pre-serialized strings (user\n// already produced the wire format) and structured JS values we can\n// serialize ourselves. The last-resort fallback is `JSON.stringify(body)`\n// — never `String(body)` (which produces the useless `[object Object]`).\n// ---------------------------------------------------------------------------\n\nconst applyRequestBody = (\n  request: HttpClientRequest.HttpClientRequest,\n  contentType: string,\n  bodyValue: unknown,\n  encoding: Record<string, EncodingObject> | undefined,\n): HttpClientRequest.HttpClientRequest => {\n  if (isJsonContentType(contentType)) {\n    // Pre-serialized JSON strings pass through with the declared media\n    // type preserved (important for `application/vnd.foo+json` etc.).\n    if (typeof bodyValue === \"string\") {\n      return HttpClientRequest.bodyText(request, bodyValue, contentType);\n    }\n    return HttpClientRequest.bodyJsonUnsafe(request, bodyValue);\n  }\n\n  if (isFormUrlEncoded(contentType)) {\n    if (typeof bodyValue === \"string\") {\n      return HttpClientRequest.bodyText(request, bodyValue, contentType);\n    }\n    if (typeof bodyValue === \"object\" && bodyValue !== null && !Array.isArray(bodyValue)) {\n      // Serialize ourselves so OAS3 encoding (style/explode/deepObject)\n      // is honored. bodyUrlParams doesn't know about per-field style.\n      const serialized = serializeFormUrlEncoded(bodyValue as Record<string, unknown>, encoding);\n      return HttpClientRequest.bodyText(request, serialized, contentType);\n    }\n    // Non-object body — fall back to platform helper (handles URLSearchParams).\n    return HttpClientRequest.bodyUrlParams(\n      request,\n      bodyValue as Parameters<typeof HttpClientRequest.bodyUrlParams>[1],\n    );\n  }\n\n  if (isMultipartFormData(contentType)) {\n    if (bodyValue instanceof FormData) {\n      return HttpClientRequest.bodyFormData(request, bodyValue);\n    }\n    if (typeof bodyValue === \"object\" && bodyValue !== null) {\n      return HttpClientRequest.bodyFormDataRecord(\n        request,\n        coerceFormDataRecord(bodyValue as Record<string, unknown>, encoding),\n      );\n    }\n    // String / primitive under multipart is almost certainly wrong on the\n    // caller's end — send it as text with their declared content type and\n    // let the server produce a useful error.\n    return HttpClientRequest.bodyText(request, String(bodyValue), contentType);\n  }\n\n  if (isOctetStream(contentType)) {\n    const bytes = toUint8Array(bodyValue);\n    if (bytes) return HttpClientRequest.bodyUint8Array(request, bytes, contentType);\n    if (typeof bodyValue === \"string\") {\n      return HttpClientRequest.bodyText(request, bodyValue, contentType);\n    }\n    // Unknown shape — serialize as JSON so at least the payload is visible.\n    return HttpClientRequest.bodyText(request, JSON.stringify(bodyValue), contentType);\n  }\n\n  if (isXmlContentType(contentType) || isTextContentType(contentType)) {\n    if (typeof bodyValue === \"string\") {\n      return HttpClientRequest.bodyText(request, bodyValue, contentType);\n    }\n    const bytes = toUint8Array(bodyValue);\n    if (bytes) return HttpClientRequest.bodyUint8Array(request, bytes, contentType);\n    // Object body under text/xml is unusual — stringify so the caller sees\n    // their own payload instead of `[object Object]`.\n    return HttpClientRequest.bodyText(request, JSON.stringify(bodyValue), contentType);\n  }\n\n  // Unknown content type: respect what the caller supplied.\n  if (typeof bodyValue === \"string\") {\n    return HttpClientRequest.bodyText(request, bodyValue, contentType);\n  }\n  const bytes = toUint8Array(bodyValue);\n  if (bytes) return HttpClientRequest.bodyUint8Array(request, bytes, contentType);\n  return HttpClientRequest.bodyText(request, JSON.stringify(bodyValue), contentType);\n};\n\n// ---------------------------------------------------------------------------\n// Public API — invoke a single operation\n// ---------------------------------------------------------------------------\n\nexport const invoke = Effect.fn(\"OpenApi.invoke\")(function* (\n  operation: OperationBinding,\n  args: Record<string, unknown>,\n  resolvedHeaders: Record<string, string>,\n  sourceQueryParams: Record<string, string> = {},\n) {\n  const client = yield* HttpClient.HttpClient;\n\n  yield* Effect.annotateCurrentSpan({\n    \"http.method\": operation.method.toUpperCase(),\n    \"http.route\": operation.pathTemplate,\n    \"plugin.openapi.method\": operation.method.toUpperCase(),\n    \"plugin.openapi.path_template\": operation.pathTemplate,\n    \"plugin.openapi.headers.resolved_count\": Object.keys(resolvedHeaders).length,\n  });\n\n  const resolvedPath = yield* resolvePath(operation.pathTemplate, args, operation.parameters);\n\n  const path = resolvedPath.startsWith(\"/\") ? resolvedPath : `/${resolvedPath}`;\n\n  let request = HttpClientRequest.make(operation.method.toUpperCase() as \"GET\")(path);\n\n  // Default first so operation header params and resolved auth headers below\n  // can override it; the upstream still gets a User-Agent if nothing else sets one.\n  request = HttpClientRequest.setHeader(request, \"User-Agent\", DEFAULT_USER_AGENT);\n\n  for (const [name, value] of Object.entries(sourceQueryParams)) {\n    request = HttpClientRequest.setUrlParam(request, name, value);\n  }\n\n  for (const param of operation.parameters) {\n    if (param.location !== \"query\") continue;\n    const value = readParamValue(args, param);\n    for (const paramValue of queryParamValues(value, param)) {\n      request = HttpClientRequest.appendUrlParam(request, param.name, paramValue);\n    }\n  }\n\n  for (const param of operation.parameters) {\n    if (param.location !== \"header\") continue;\n    const value = readParamValue(args, param);\n    if (value === undefined || value === null) continue;\n    request = HttpClientRequest.setHeader(request, param.name, String(value));\n  }\n\n  if (Option.isSome(operation.requestBody)) {\n    const rb = operation.requestBody.value;\n    const contentsOpt = Option.getOrUndefined(rb.contents);\n    const requestedCt = typeof args.contentType === \"string\" ? args.contentType : undefined;\n    const octetStreamContent = contentsOpt?.find((c) => isOctetStream(c.contentType));\n    const bodyAcceptsOctetStream = Boolean(octetStreamContent) || isOctetStream(rb.contentType);\n    const hasBodyBase64 = Object.prototype.hasOwnProperty.call(args, \"bodyBase64\");\n    const bodyBase64Raw = args.bodyBase64;\n    const bodyBase64 =\n      typeof bodyBase64Raw === \"string\" ? decodeBase64Body(bodyBase64Raw) : undefined;\n\n    if (hasBodyBase64 && typeof bodyBase64Raw !== \"string\") {\n      return yield* new OpenApiInvocationError({\n        message: \"`bodyBase64` must be a base64 string\",\n        statusCode: Option.none(),\n      });\n    }\n    if (bodyBase64?.ok === false) {\n      return yield* new OpenApiInvocationError({\n        message: \"`bodyBase64` is not valid base64\",\n        statusCode: Option.none(),\n      });\n    }\n    if (bodyBase64?.ok === true && !bodyAcceptsOctetStream) {\n      return yield* new OpenApiInvocationError({\n        message: \"`bodyBase64` requires an application/octet-stream request body\",\n        statusCode: Option.none(),\n      });\n    }\n    if (bodyBase64?.ok === true && requestedCt && !isOctetStream(requestedCt)) {\n      return yield* new OpenApiInvocationError({\n        message: \"`bodyBase64` requires an application/octet-stream contentType\",\n        statusCode: Option.none(),\n      });\n    }\n\n    const rawBodyValue = args.body ?? args.input;\n    const nestedBodyBase64Raw = readNestedBodyBase64(rawBodyValue);\n    const hasNestedBodyBase64 = nestedBodyBase64Raw !== undefined;\n    const nestedBodyBase64 =\n      typeof nestedBodyBase64Raw === \"string\" ? decodeBase64Body(nestedBodyBase64Raw) : undefined;\n\n    if (hasNestedBodyBase64 && typeof nestedBodyBase64Raw !== \"string\") {\n      return yield* new OpenApiInvocationError({\n        message: \"`body.bodyBase64` must be a base64 string\",\n        statusCode: Option.none(),\n      });\n    }\n    if (nestedBodyBase64?.ok === false) {\n      return yield* new OpenApiInvocationError({\n        message: \"`body.bodyBase64` is not valid base64\",\n        statusCode: Option.none(),\n      });\n    }\n    if (nestedBodyBase64?.ok === true && !bodyAcceptsOctetStream) {\n      return yield* new OpenApiInvocationError({\n        message: \"`body.bodyBase64` requires an application/octet-stream request body\",\n        statusCode: Option.none(),\n      });\n    }\n    if (nestedBodyBase64?.ok === true && requestedCt && !isOctetStream(requestedCt)) {\n      return yield* new OpenApiInvocationError({\n        message: \"`body.bodyBase64` requires an application/octet-stream contentType\",\n        statusCode: Option.none(),\n      });\n    }\n\n    const binaryBody = bodyBase64?.ok === true ? bodyBase64 : nestedBodyBase64;\n    const bodyValue = binaryBody?.ok === true ? binaryBody.bytes : rawBodyValue;\n    if (rb.required && bodyValue === undefined) {\n      return yield* new OpenApiInvocationError({\n        message: bodyAcceptsOctetStream\n          ? \"Missing required request body: provide `bodyBase64`\"\n          : \"Missing required request body\",\n        statusCode: Option.none(),\n      });\n    }\n    if (bodyValue !== undefined) {\n      // Resolve which declared media type to use. When the spec declares\n      // multiple, the caller can override via `args.contentType`; otherwise\n      // we use the first-declared (spec author's preferred ordering).\n      const selected: MediaBinding | undefined =\n        binaryBody?.ok === true && octetStreamContent\n          ? octetStreamContent\n          : contentsOpt && requestedCt\n            ? contentsOpt.find((c) => c.contentType === requestedCt)\n            : undefined;\n      const chosenCt =\n        binaryBody?.ok === true && !octetStreamContent && isOctetStream(rb.contentType)\n          ? rb.contentType\n          : (selected?.contentType ?? rb.contentType);\n      if (isOctetStream(chosenCt) && toUint8Array(bodyValue) === null) {\n        return yield* new OpenApiInvocationError({\n          message: \"application/octet-stream request body must be bytes; provide `bodyBase64`\",\n          statusCode: Option.none(),\n        });\n      }\n      const chosenEncoding = selected\n        ? Option.getOrUndefined(selected.encoding)\n        : contentsOpt && contentsOpt[0]\n          ? Option.getOrUndefined(contentsOpt[0].encoding)\n          : undefined;\n      request = applyRequestBody(request, chosenCt, bodyValue, chosenEncoding);\n    }\n  }\n\n  request = applyHeaders(request, resolvedHeaders);\n\n  const response = yield* client.execute(request).pipe(\n    Effect.mapError(\n      (err) =>\n        new OpenApiInvocationError({\n          message: \"HTTP request failed\",\n          statusCode: Option.none(),\n          cause: err,\n        }),\n    ),\n  );\n\n  const status = response.status;\n  yield* Effect.annotateCurrentSpan({\n    \"http.status_code\": status,\n  });\n  const responseHeaders: Record<string, string> = { ...response.headers };\n\n  const contentType = response.headers[\"content-type\"] ?? null;\n  const mapBodyError = Effect.mapError(\n    (err: unknown) =>\n      new OpenApiInvocationError({\n        message: \"Failed to read response body\",\n        statusCode: Option.some(status),\n        cause: err,\n      }),\n  );\n  const responseBodyBinding = Option.getOrUndefined(operation.responseBody);\n  const fileHint = responseBodyBinding\n    ? Option.getOrUndefined(responseBodyBinding.fileHint)\n    : undefined;\n  const ok = status >= 200 && status < 300;\n  const responseBody: unknown =\n    status === 204\n      ? null\n      : ok && fileHint?.kind === \"binaryResponse\"\n        ? fileFromBinaryBytes(\n            new Uint8Array(yield* response.arrayBuffer.pipe(mapBodyError)),\n            fileHint,\n            contentType,\n          )\n        : isJsonContentType(contentType)\n          ? yield* response.json.pipe(\n              Effect.catch(() => response.text),\n              mapBodyError,\n            )\n          : yield* response.text.pipe(mapBodyError);\n\n  const dataBody =\n    ok && fileHint?.kind === \"byteField\"\n      ? (fileFromByteField(responseBody, fileHint) ?? responseBody)\n      : responseBody;\n  return InvocationResult.make({\n    status,\n    headers: responseHeaders,\n    data: ok ? dataBody : null,\n    error: ok ? null : responseBody,\n  });\n});\n\n// Connection `baseUrl` wins; otherwise the call's chosen server (`server.url`, or\n// the first) resolved with its `{variables}` (call values, else spec defaults).\nconst resolveRequestHost = (\n  servers: readonly ServerInfo[],\n  serverArg: unknown,\n  baseUrl: string,\n): string => {\n  if (baseUrl) return baseUrl;\n  if (servers.length === 0) return \"\";\n\n  const arg = (\n    typeof serverArg === \"object\" && serverArg !== null && !Array.isArray(serverArg)\n      ? serverArg\n      : {}\n  ) as { url?: unknown; variables?: unknown };\n  const chosen = servers.find((server) => server.url === arg.url) ?? servers[0]!;\n\n  const overrides: Record<string, string> = {};\n  if (typeof arg.variables === \"object\" && arg.variables !== null) {\n    for (const [name, value] of Object.entries(arg.variables as Record<string, unknown>)) {\n      if (value != null && value !== \"\") overrides[name] = String(value);\n    }\n  }\n  return resolveServerUrl(chosen.url, Option.getOrUndefined(chosen.variables), overrides);\n};\n\n// ---------------------------------------------------------------------------\n// Invoke with a provided HttpClient layer + per-call host resolution\n// ---------------------------------------------------------------------------\n\nexport const invokeWithLayer = (\n  operation: OperationBinding,\n  args: Record<string, unknown>,\n  baseUrl: string,\n  resolvedHeaders: Record<string, string>,\n  sourceQueryParams: Record<string, string>,\n  httpClientLayer: Layer.Layer<HttpClient.HttpClient, never, never>,\n) => {\n  const effectiveBaseUrl = resolveRequestHost(operation.servers ?? [], args.server, baseUrl);\n  const clientWithBaseUrl = effectiveBaseUrl\n    ? Layer.effect(\n        HttpClient.HttpClient,\n        Effect.map(\n          Effect.service(HttpClient.HttpClient),\n          HttpClient.mapRequest(HttpClientRequest.prependUrl(effectiveBaseUrl)),\n        ),\n      ).pipe(Layer.provide(httpClientLayer))\n    : httpClientLayer;\n\n  return invoke(operation, args, resolvedHeaders, sourceQueryParams).pipe(\n    Effect.provide(clientWithBaseUrl),\n    // `invoke` annotates http.status_code on ITS span (`OpenApi.invoke`,\n    // via Effect.fn) — annotateCurrentSpan inside it never reaches this\n    // wrapper span. Stamp the status here too so queries against\n    // `plugin.openapi.invoke` see the upstream outcome directly.\n    Effect.tap((result) => Effect.annotateCurrentSpan({ \"http.status_code\": result.status })),\n    Effect.withSpan(\"plugin.openapi.invoke\", {\n      attributes: {\n        \"plugin.openapi.method\": operation.method.toUpperCase(),\n        \"plugin.openapi.path_template\": operation.pathTemplate,\n        \"plugin.openapi.base_url\": effectiveBaseUrl,\n      },\n    }),\n  );\n};\n\n// ---------------------------------------------------------------------------\n// Derive annotations from HTTP method\n// ---------------------------------------------------------------------------\n\nconst REQUIRE_APPROVAL = new Set([\"post\", \"put\", \"patch\", \"delete\"]);\n\nexport const annotationsForOperation = (\n  method: string,\n  pathTemplate: string,\n): { requiresApproval?: boolean; approvalDescription?: string } => {\n  const m = method.toLowerCase();\n  if (!REQUIRE_APPROVAL.has(m)) return {};\n  return {\n    requiresApproval: true,\n    approvalDescription: `${method.toUpperCase()} ${pathTemplate}`,\n  };\n};\n","import { Effect, Option, Schema } from \"effect\";\nimport type { Layer } from \"effect\";\nimport { HttpClient } from \"effect/unstable/http\";\n\nimport {\n  ToolFileJsonSchema,\n  ToolName,\n  ToolResult,\n  authToolFailure,\n  type PluginCtx,\n  type ResolveToolsResult,\n  type StorageFailure,\n  type ToolDef,\n  type ToolInvocationCredential,\n} from \"@executor-js/sdk/core\";\n\nimport {\n  decodeOpenApiIntegrationConfig,\n  renderAuthTemplate,\n  requiredTemplateVariables,\n  type OpenApiIntegrationConfig,\n} from \"./config\";\nimport { OpenApiExtractionError, OpenApiParseError } from \"./errors\";\nimport {\n  buildInputSchema,\n  extract,\n  streamOperationBindings,\n  streamOperationBindingsFromStructure,\n} from \"./extract\";\nimport { compileToolDefinitions, type ToolDefinition } from \"./definitions\";\nimport { annotationsForOperation, invokeWithLayer } from \"./invoke\";\nimport { parse, type ParsedDocument } from \"./parse\";\nimport { parseEntry, structuralSplit, type KeepPathItem, type SpecStructure } from \"./split\";\nimport { type OpenapiStore, type StoredOperation } from \"./store\";\nimport { OperationBinding } from \"./types\";\n\nconst STRINGIFIED_BODY_CAP = 1024;\nconst UpstreamMessageBody = Schema.Struct({ message: Schema.String });\nconst UpstreamErrorMessageBody = Schema.Struct({ errorMessage: Schema.String });\nconst UpstreamNestedErrorBody = Schema.Struct({ error: UpstreamMessageBody });\nconst UpstreamErrorsArrayBody = Schema.Struct({\n  errors: Schema.Array(\n    Schema.Struct({\n      detail: Schema.optional(Schema.String),\n      message: Schema.optional(Schema.String),\n      title: Schema.optional(Schema.String),\n    }),\n  ),\n});\nconst UpstreamDescriptionBody = Schema.Struct({\n  detail: Schema.optional(Schema.String),\n  title: Schema.optional(Schema.String),\n  description: Schema.optional(Schema.String),\n});\n\nconst decodeUpstreamMessageBody = Schema.decodeUnknownOption(UpstreamMessageBody);\nconst decodeUpstreamErrorMessageBody = Schema.decodeUnknownOption(UpstreamErrorMessageBody);\nconst decodeUpstreamNestedErrorBody = Schema.decodeUnknownOption(UpstreamNestedErrorBody);\nconst decodeUpstreamErrorsArrayBody = Schema.decodeUnknownOption(UpstreamErrorsArrayBody);\nconst decodeUpstreamDescriptionBody = Schema.decodeUnknownOption(UpstreamDescriptionBody);\n\nconst clampedStringify = (value: unknown): string => {\n  let s: string;\n  // oxlint-disable-next-line executor/no-try-catch-or-throw -- boundary: JSON.stringify may throw on cycles; fall back to String() so the upstream body can still be surfaced as ToolError.details fallback text\n  try {\n    s = JSON.stringify(value);\n  } catch {\n    s = String(value);\n  }\n  return s.length > STRINGIFIED_BODY_CAP ? `${s.slice(0, STRINGIFIED_BODY_CAP)}…` : s;\n};\n\nconst firstNonEmpty = (...values: readonly (string | undefined)[]): string | undefined =>\n  values.find((value) => value !== undefined && value.length > 0);\n\nexport const extractOpenApiUpstreamMessage = (body: unknown, status: number): string => {\n  if (typeof body === \"string\") {\n    return body.length > 0 ? body : `Upstream returned HTTP ${status}`;\n  }\n  const nested = Option.getOrUndefined(decodeUpstreamNestedErrorBody(body));\n  const messageBody = Option.getOrUndefined(decodeUpstreamMessageBody(body));\n  const errorMessageBody = Option.getOrUndefined(decodeUpstreamErrorMessageBody(body));\n  const errorsBody = Option.getOrUndefined(decodeUpstreamErrorsArrayBody(body));\n  const descriptionBody = Option.getOrUndefined(decodeUpstreamDescriptionBody(body));\n  const arrayMessage = errorsBody?.errors\n    .map(\n      ({\n        detail,\n        message: upstreamMessage,\n        title,\n      }: {\n        detail?: string;\n        message?: string;\n        title?: string;\n      }) => firstNonEmpty(detail, upstreamMessage, title),\n    )\n    .find((message: string | undefined) => message !== undefined);\n  const message = firstNonEmpty(\n    nested?.error.message,\n    messageBody?.message,\n    errorMessageBody?.errorMessage,\n    arrayMessage,\n    descriptionBody?.detail,\n    descriptionBody?.title,\n    descriptionBody?.description,\n  );\n  if (message !== undefined) return message;\n  if (body !== null && typeof body === \"object\") {\n    return clampedStringify(body);\n  }\n  return `Upstream returned HTTP ${status}`;\n};\n\nconst openApiAuthToolFailure = (failure: {\n  readonly code: string;\n  readonly message: string;\n  readonly owner: \"org\" | \"user\";\n  readonly integration: string;\n  readonly connection: string;\n  readonly credentialKind: \"secret\" | \"oauth\" | \"upstream\";\n  readonly credentialLabel?: string;\n  readonly status?: number;\n  readonly details?: unknown;\n}) =>\n  authToolFailure({\n    code: failure.code as Parameters<typeof authToolFailure>[0][\"code\"],\n    message: failure.message,\n    source: { id: failure.integration, scope: failure.owner },\n    credential: {\n      kind: failure.credentialKind,\n      ...(failure.credentialLabel ? { label: failure.credentialLabel } : {}),\n    },\n    ...(failure.status !== undefined ? { status: failure.status } : {}),\n    ...(failure.details !== undefined\n      ? {\n          upstream: {\n            ...(failure.status !== undefined ? { status: failure.status } : {}),\n            details: failure.details,\n          },\n        }\n      : {}),\n  });\n\n/** Rewrite OpenAPI `#/components/schemas/X` refs to standard `#/$defs/X`. */\nexport const normalizeOpenApiRefs = (node: unknown): unknown => {\n  if (node == null || typeof node !== \"object\") return node;\n  if (Array.isArray(node)) {\n    let changed = false;\n    const out = node.map((item) => {\n      const n = normalizeOpenApiRefs(item);\n      if (n !== item) changed = true;\n      return n;\n    });\n    return changed ? out : node;\n  }\n\n  const obj = node as Record<string, unknown>;\n\n  if (typeof obj.$ref === \"string\") {\n    const match = obj.$ref.match(/^#\\/components\\/schemas\\/(.+)$/);\n    if (match) return { ...obj, $ref: `#/$defs/${match[1]}` };\n    return obj;\n  }\n\n  let changed = false;\n  const result: Record<string, unknown> = {};\n  for (const [k, v] of Object.entries(obj)) {\n    const n = normalizeOpenApiRefs(v);\n    if (n !== v) changed = true;\n    result[k] = n;\n  }\n  return changed ? result : obj;\n};\n\nconst toBinding = (def: ToolDefinition): OperationBinding =>\n  OperationBinding.make({\n    method: def.operation.method,\n    servers: def.operation.servers,\n    pathTemplate: def.operation.pathTemplate,\n    parameters: [...def.operation.parameters],\n    requestBody: def.operation.requestBody,\n    responseBody: def.operation.responseBody,\n  });\n\nconst descriptionFor = (def: ToolDefinition): string => {\n  const op = def.operation;\n  return Option.getOrElse(op.description, () =>\n    Option.getOrElse(op.summary, () => `${op.method.toUpperCase()} ${op.pathTemplate}`),\n  );\n};\n\n/**\n * Copyable contract appended to the stored description of any tool whose\n * output is a ToolFile. Stored descriptions ride both `search` (the step a\n * model always walks) and `describe.tool`, so baking the emit instruction\n * here puts it in front of the agent before the first call, where the\n * output schema alone (dropped from the hot list projection) cannot.\n */\nconst FILE_OUTPUT_HINT =\n  'Returns a ToolFile: the file bytes already decoded into { _tag: \"ToolFile\", mimeType, encoding, data, byteLength }. ' +\n  \"To display or forward it, pass the result's data straight to emit(result.data). \" +\n  \"Do not rebuild the envelope or read upstream fields like size.\";\n\nconst withFileEmitHint = (description: string, returnsFile: boolean): string =>\n  returnsFile ? `${description}\\n\\n${FILE_OUTPUT_HINT}` : description;\n\nexport interface CompiledOpenApiSpec {\n  readonly definitions: readonly ToolDefinition[];\n  readonly hoistedDefs: Record<string, unknown>;\n  readonly title: string | undefined;\n  readonly description: string | undefined;\n}\n\nexport const compileOpenApiDocument = (\n  doc: ParsedDocument,\n): Effect.Effect<CompiledOpenApiSpec, OpenApiExtractionError> =>\n  Effect.gen(function* () {\n    const result = yield* extract(doc);\n    const hoistedDefs: Record<string, unknown> = {};\n    if (doc.components?.schemas) {\n      for (const [k, v] of Object.entries(doc.components.schemas)) {\n        hoistedDefs[k] = normalizeOpenApiRefs(v);\n      }\n    }\n    return {\n      definitions: compileToolDefinitions(result.operations),\n      hoistedDefs,\n      title: Option.getOrUndefined(result.title),\n      description: Option.getOrUndefined(result.description),\n    };\n  });\n\nexport const compileOpenApiSpec = (\n  specText: string,\n): Effect.Effect<CompiledOpenApiSpec, OpenApiParseError | OpenApiExtractionError> =>\n  Effect.gen(function* () {\n    const doc = yield* parse(specText);\n    return yield* compileOpenApiDocument(doc);\n  });\n\nexport const openApiToolDefsFromCompiled = (compiled: CompiledOpenApiSpec): readonly ToolDef[] =>\n  compiled.definitions.map((def): ToolDef => {\n    const returnsFile = Option.match(def.operation.responseBody, {\n      onNone: () => false,\n      onSome: (responseBody) => Option.isSome(responseBody.fileHint),\n    });\n    return {\n      name: ToolName.make(def.toolPath),\n      description: withFileEmitHint(descriptionFor(def), returnsFile),\n      inputSchema: normalizeOpenApiRefs(Option.getOrUndefined(def.operation.inputSchema)),\n      outputSchema: returnsFile\n        ? ToolFileJsonSchema\n        : normalizeOpenApiRefs(Option.getOrUndefined(def.operation.outputSchema)),\n      annotations: annotationsForOperation(def.operation.method, def.operation.pathTemplate),\n    };\n  });\n\nexport const openApiStoredOperationsFromCompiled = (\n  integration: string,\n  compiled: CompiledOpenApiSpec,\n): readonly StoredOperation[] =>\n  compiled.definitions.map((def) => ({\n    integration,\n    toolName: def.toolPath,\n    binding: toBinding(def),\n    description: descriptionFor(def),\n  }));\n\n/**\n * Serialize a document's `components.schemas` into the content-addressed defs\n * blob JSON (`{ \"<Name>\": <normalized schema>, ... }`), one schema at a time.\n * Normalizing + stringifying per entry keeps the whole normalized definition\n * tree from ever being co-resident with the parsed document, so the streaming\n * add path's peak stays near parse level. The serve path JSON-parses this blob\n * to rebuild the shared `definitions` instead of re-parsing the spec.\n */\nexport const buildDefsJson = (doc: ParsedDocument): string => {\n  const schemas = doc.components?.schemas;\n  if (!schemas) return \"{}\";\n  let json = \"{\";\n  let first = true;\n  for (const [name, schema] of Object.entries(schemas)) {\n    const serialized = JSON.stringify(normalizeOpenApiRefs(schema));\n    if (serialized === undefined) continue;\n    json += `${first ? \"\" : \",\"}${JSON.stringify(name)}:${serialized}`;\n    first = false;\n  }\n  return `${json}}`;\n};\n\n/**\n * Streaming twin of `buildDefsJson`: serialize the content-addressed defs blob\n * from a `SpecStructure` by parsing each `components.schemas` entry in isolation\n * (indent-4 range) rather than from a whole-document parse. Used by the fully\n * streaming add path so the 37MB Microsoft Graph spec never builds its\n * ~300MB tree. The blob carries *all* source schemas (it is shared across every\n * tenant/selection on the same spec hash); extra unreferenced `$defs` are\n * harmless. Like `buildDefsJson`, normalizing + stringifying per entry keeps the\n * whole normalized tree from being co-resident with any parsed schema, and the\n * ConsString accumulation avoids the join-doubling of an array build.\n */\nexport const buildDefsJsonStreaming = (structure: SpecStructure): string => {\n  let json = \"{\";\n  let first = true;\n  for (const range of structure.schemas) {\n    const entry = parseEntry(structure.text, range, 4);\n    if (!entry) continue;\n    const [name, schema] = entry;\n    const serialized = JSON.stringify(normalizeOpenApiRefs(schema));\n    if (serialized === undefined) continue;\n    json += `${first ? \"\" : \",\"}${JSON.stringify(name)}:${serialized}`;\n    first = false;\n  }\n  return `${json}}`;\n};\n\nconst DefsJson = Schema.Record(Schema.String, Schema.Unknown);\n/** Decode the content-addressed defs blob back into the shared `definitions`\n *  map. Returns `None` on a corrupt/non-object blob so the serve path falls\n *  back to the spec re-parse rather than failing `tools/list`. */\nconst decodeDefsJson = Schema.decodeUnknownOption(Schema.fromJsonString(DefsJson));\n\n/** Rebuild a tool def from a stored operation binding, no spec parse. Mirrors\n *  `openApiToolDefsFromCompiled` but sources its schemas from the persisted\n *  binding (params/body/response carry `$ref`s into the shared defs blob). The\n *  file-emit hint is applied here, at the same ToolDef projection step the\n *  re-parse path applies it, so a file-returning op carries the contract\n *  whether it is served fast (from the binding) or via the spec fallback. */\nconst toolDefFromStoredOperation = (op: StoredOperation): ToolDef => {\n  const binding = op.binding;\n  const returnsFile = Option.match(binding.responseBody, {\n    onNone: () => false,\n    onSome: (responseBody) => Option.isSome(responseBody.fileHint),\n  });\n  return {\n    name: ToolName.make(op.toolName),\n    description: withFileEmitHint(\n      op.description ?? `${binding.method.toUpperCase()} ${binding.pathTemplate}`,\n      returnsFile,\n    ),\n    inputSchema: normalizeOpenApiRefs(\n      buildInputSchema(\n        binding.parameters,\n        Option.getOrUndefined(binding.requestBody),\n        binding.servers ?? [],\n      ),\n    ),\n    outputSchema: returnsFile\n      ? ToolFileJsonSchema\n      : Option.match(binding.responseBody, {\n          onNone: () => undefined,\n          onSome: (responseBody) =>\n            normalizeOpenApiRefs(Option.getOrUndefined(responseBody.schema)),\n        }),\n    annotations: annotationsForOperation(binding.method, binding.pathTemplate),\n  };\n};\n\nexport interface OpenApiPersistResult {\n  readonly toolCount: number;\n  readonly toolNames: readonly string[];\n}\n\n/**\n * Compile a parsed document straight to persisted operation bindings, streaming\n * in bounded chunks so a huge spec's bindings are never all co-resident with\n * the parsed tree. This is the memory-safe replacement for\n * `compileOpenApiDocument` + `openApiStoredOperationsFromCompiled` + `putOperations`\n * on the add/update path: it skips per-op input/output schema assembly (the\n * serve path rebuilds those on demand from the bindings). Clears existing\n * operations first, then appends each chunk. When `specHash` is given, also\n * stream-serializes the document's `#/$defs/*` into the content-addressed defs\n * blob so the serve path can resolve the shared `definitions` without\n * re-parsing the spec.\n */\nexport const compileAndPersistOpenApiOperations = ({\n  doc,\n  integration,\n  storage,\n  specHash,\n  chunkSize,\n}: {\n  readonly doc: ParsedDocument;\n  readonly integration: string;\n  readonly storage: OpenapiStore;\n  readonly specHash?: string;\n  readonly chunkSize?: number;\n}): Effect.Effect<OpenApiPersistResult, OpenApiExtractionError | StorageFailure> =>\n  Effect.gen(function* () {\n    yield* storage.removeOperations(integration);\n    const result = yield* streamOperationBindings(doc, chunkSize ?? 500, (chunk) =>\n      storage.appendOperations(\n        integration,\n        chunk.map((item) => ({\n          integration,\n          toolName: item.toolName,\n          binding: item.binding,\n          description: item.description,\n        })),\n      ),\n    );\n    if (specHash != null) {\n      yield* storage.putDefs(specHash, buildDefsJson(doc));\n    }\n    return result;\n  });\n\n/** Parse spec text, then stream-compile + persist its bindings (and, when\n *  `specHash` is given, the content-addressed defs blob). */\nexport const compileAndPersistOpenApiSpec = ({\n  specText,\n  integration,\n  storage,\n  specHash,\n  chunkSize,\n}: {\n  readonly specText: string;\n  readonly integration: string;\n  readonly storage: OpenapiStore;\n  readonly specHash?: string;\n  readonly chunkSize?: number;\n}): Effect.Effect<\n  OpenApiPersistResult,\n  OpenApiParseError | OpenApiExtractionError | StorageFailure\n> =>\n  Effect.gen(function* () {\n    const doc = yield* parse(specText);\n    return yield* compileAndPersistOpenApiOperations({\n      doc,\n      integration,\n      storage,\n      specHash,\n      chunkSize,\n    });\n  });\n\n/**\n * Fully streaming add/update path: compile + persist operation bindings (and the\n * content-addressed defs blob) straight from spec *text*, without ever parsing\n * the whole document. The text is structurally split, then each path-item and\n * each schema is parsed in isolation and discarded, so peak memory stays near\n * one item rather than the ~300MB whole-tree parse that OOMs a 128MB Workers\n * isolate on the 37MB Microsoft Graph spec.\n *\n * There is deliberately no whole-parse fallback: a spec that does not present\n * the streamable block-YAML profile (no top-level `paths:` block) is a hard\n * `OpenApiExtractionError`, because the fallback is exactly the OOM this path\n * exists to avoid. `keepPathItem` optionally filters/trims path-items (the\n * Microsoft Graph scope selection), so the same primitive serves a full-spec\n * compile and a selection identically.\n */\nexport const compileAndPersistOpenApiSpecStreaming = ({\n  specText,\n  integration,\n  storage,\n  specHash,\n  chunkSize,\n  keepPathItem,\n}: {\n  readonly specText: string;\n  readonly integration: string;\n  readonly storage: OpenapiStore;\n  readonly specHash?: string;\n  readonly chunkSize?: number;\n  readonly keepPathItem?: KeepPathItem;\n}): Effect.Effect<OpenApiPersistResult, OpenApiExtractionError | StorageFailure> =>\n  Effect.gen(function* () {\n    const structure = structuralSplit(specText);\n    if (!structure) {\n      return yield* new OpenApiExtractionError({\n        message:\n          \"OpenAPI spec is not in the streamable block-YAML profile (no top-level `paths:` block); cannot stream-compile a spec this large in-band.\",\n      });\n    }\n    yield* storage.removeOperations(integration);\n    const result = yield* streamOperationBindingsFromStructure(\n      structure,\n      { chunkSize: chunkSize ?? 500, keepPathItem },\n      (chunk) =>\n        storage.appendOperations(\n          integration,\n          chunk.map((item) => ({\n            integration,\n            toolName: item.toolName,\n            binding: item.binding,\n            description: item.description,\n          })),\n        ),\n    );\n    if (specHash != null) {\n      yield* storage.putDefs(specHash, buildDefsJsonStreaming(structure));\n    }\n    return result;\n  });\n\nexport const loadOpenApiSpecText = (\n  storage: OpenapiStore,\n  config: OpenApiIntegrationConfig,\n): Effect.Effect<string | null, StorageFailure> =>\n  config.specHash != null ? storage.getSpec(config.specHash) : Effect.succeed(null);\n\n/**\n * Resolve the tool defs + shared definitions for a connection refresh\n * (`tools/list`). Fast path: serve from the persisted operation bindings plus\n * the content-addressed defs blob, rebuilding each tool's input/output schema\n * on demand, so a 37MB spec is never re-parsed (the 2nd OOM site). The defs\n * blob is global per `specHash`, so the heavy normalize work is done once at\n * add time and shared across every tenant on the same spec. Falls back to the\n * spec re-parse for legacy rows persisted before the defs blob existed (or if\n * the blob is missing/corrupt).\n */\nexport const resolveOpenApiBackedTools = ({\n  integration,\n  config,\n  storage,\n}: {\n  readonly integration: { readonly slug: string };\n  readonly config: unknown;\n  readonly storage: OpenapiStore;\n}): Effect.Effect<ResolveToolsResult, StorageFailure> =>\n  Effect.gen(function* () {\n    const openApiConfig = decodeOpenApiIntegrationConfig(config);\n    if (!openApiConfig) return { tools: [], definitions: {} };\n    if (openApiConfig.specHash != null) {\n      const defsJson = yield* storage.getDefs(openApiConfig.specHash);\n      if (defsJson != null) {\n        const definitions = Option.getOrNull(decodeDefsJson(defsJson));\n        if (definitions != null) {\n          const ops = yield* storage.listOperations(String(integration.slug));\n          return { tools: ops.map(toolDefFromStoredOperation), definitions };\n        }\n      }\n    }\n    const specText = yield* loadOpenApiSpecText(storage, openApiConfig);\n    if (specText == null) return { tools: [], definitions: {} };\n    const compiled = yield* compileOpenApiSpec(specText).pipe(\n      Effect.catch(() => Effect.succeed(null)),\n    );\n    if (!compiled) return { tools: [], definitions: {} };\n    return {\n      tools: openApiToolDefsFromCompiled(compiled),\n      definitions: compiled.hoistedDefs,\n    };\n  });\n\nexport const invokeOpenApiBackedTool = (input: {\n  readonly ctx: PluginCtx<OpenapiStore>;\n  readonly toolRow: { readonly integration: string; readonly name: string };\n  readonly credential: ToolInvocationCredential;\n  readonly args: unknown;\n  readonly httpClientLayer: Layer.Layer<HttpClient.HttpClient, never, never>;\n}) =>\n  Effect.gen(function* () {\n    const integration = input.toolRow.integration;\n    const config = decodeOpenApiIntegrationConfig(input.credential.config);\n\n    let binding = (yield* input.ctx.storage.getOperation(integration, input.toolRow.name))?.binding;\n    // Only re-parse when the binding is entirely absent (a legacy row predating\n    // persisted bindings). A present binding is authoritative even if it has no\n    // responseBody: the persisted spec is now the *full* source (37MB for\n    // Microsoft Graph), so re-parsing it here to \"enrich\" a binding would OOM\n    // the isolate. A genuinely body-less operation must serve from its binding.\n    if (!binding && config) {\n      const specText = yield* loadOpenApiSpecText(input.ctx.storage, config).pipe(\n        Effect.catch(() => Effect.succeed(null)),\n      );\n      const compiled =\n        specText == null\n          ? null\n          : yield* compileOpenApiSpec(specText).pipe(Effect.catch(() => Effect.succeed(null)));\n      binding = compiled\n        ? openApiStoredOperationsFromCompiled(integration, compiled).find(\n            (op) => op.toolName === input.toolRow.name,\n          )?.binding\n        : undefined;\n    }\n    if (!binding) {\n      return yield* new OpenApiExtractionError({\n        message: `No OpenAPI operation found for tool \"${input.toolRow.name}\" on \"${integration}\"`,\n      });\n    }\n\n    const headers: Record<string, string> = { ...(config?.headers ?? {}) };\n    const queryParams: Record<string, string> = {\n      ...(config?.queryParams ?? {}),\n    };\n\n    const template = (config?.authenticationTemplate ?? []).find(\n      (entry) => String(entry.slug) === String(input.credential.template),\n    );\n    if (template) {\n      const missing = requiredTemplateVariables(template).filter((name) => {\n        const value = input.credential.values[name];\n        return value == null || value === \"\";\n      });\n      if (missing.length > 0) {\n        return openApiAuthToolFailure({\n          code:\n            template.kind === \"oauth2\" ? \"oauth_connection_missing\" : \"connection_value_missing\",\n          message: `Connection \"${input.credential.connection}\" for \"${integration}\" has no resolvable credential value. Re-authenticate or update the connection.`,\n          owner: input.credential.owner,\n          integration,\n          connection: String(input.credential.connection),\n          credentialKind: template.kind === \"oauth2\" ? \"oauth\" : \"secret\",\n        });\n      }\n      const rendered = renderAuthTemplate(template, input.credential.values);\n      Object.assign(headers, rendered.headers);\n      Object.assign(queryParams, rendered.queryParams);\n    }\n\n    const result = yield* invokeWithLayer(\n      binding,\n      (input.args ?? {}) as Record<string, unknown>,\n      config?.baseUrl ?? \"\",\n      headers,\n      queryParams,\n      input.httpClientLayer,\n    );\n\n    const ok = result.status >= 200 && result.status < 300;\n    if (!ok) {\n      if (result.status === 401 || result.status === 403) {\n        return openApiAuthToolFailure({\n          code: \"connection_rejected\",\n          status: result.status,\n          message: `Upstream rejected credentials for \"${integration}\" with HTTP ${result.status}. Re-authenticate or update the connection \"${input.credential.connection}\" before retrying this tool.`,\n          owner: input.credential.owner,\n          integration,\n          connection: String(input.credential.connection),\n          credentialKind: \"upstream\",\n          credentialLabel: \"Upstream authorization\",\n          details: result.error,\n        });\n      }\n      return ToolResult.fail({\n        code: \"upstream_http_error\",\n        status: result.status,\n        message: extractOpenApiUpstreamMessage(result.error, result.status),\n        details: result.error,\n      });\n    }\n    return ToolResult.ok(result.data, {\n      http: { status: result.status, headers: result.headers },\n    });\n  });\n\nexport const resolveOpenApiBackedAnnotations = (input: {\n  readonly ctx: PluginCtx<OpenapiStore>;\n  readonly integration: string;\n  readonly toolRows: readonly { readonly name: string }[];\n}) =>\n  Effect.gen(function* () {\n    const out: Record<string, ReturnType<typeof annotationsForOperation>> = {};\n    for (const row of input.toolRows) {\n      const operation = yield* input.ctx.storage.getOperation(input.integration, row.name);\n      if (!operation) continue;\n      out[row.name] = annotationsForOperation(\n        operation.binding.method,\n        operation.binding.pathTemplate,\n      );\n    }\n    return out;\n  });\n","import { Effect, Option, Schema } from \"effect\";\nimport type { Layer } from \"effect\";\nimport { HttpClient } from \"effect/unstable/http\";\n\nimport {\n  IntegrationAlreadyExistsError,\n  IntegrationDetectionResult,\n  IntegrationNotFoundError,\n  IntegrationSlug,\n  ToolResult,\n  definePlugin,\n  mergeAuthTemplates,\n  sha256Hex,\n  tool,\n  type AuthMethodDescriptor,\n  type Integration,\n  type IntegrationConfig,\n  type IntegrationRecord,\n  type PluginCtx,\n  type StorageFailure,\n} from \"@executor-js/sdk/core\";\n\nimport { decodeOpenApiIntegrationConfig, type OpenApiIntegrationConfig } from \"./config\";\nimport { OpenApiExtractionError, OpenApiOAuthError, OpenApiParseError } from \"./errors\";\nimport { parse, resolveSpecText } from \"./parse\";\nimport { extract } from \"./extract\";\nimport {\n  OAuth2AuthorizationCodeFlow,\n  OAuth2Flows,\n  OAuth2Preset,\n  SecurityScheme,\n  previewSpecText,\n  type SpecPreview,\n} from \"./preview\";\nimport { deriveAuthenticationTemplateFromPreview, firstBaseUrlForPreview } from \"./derive-auth\";\nimport { openApiPresets } from \"./presets\";\nimport { makeDefaultOpenapiStore, type OpenapiStore } from \"./store\";\nimport type { Authentication } from \"./types\";\nimport { normalizeOpenApiAuthInputs, type AuthenticationInput } from \"./types\";\nimport { ApiKeyAuthTemplate, describeApiKeyAuthMethod } from \"@executor-js/sdk/http-auth\";\nimport {\n  compileOpenApiSpec,\n  invokeOpenApiBackedTool,\n  openApiStoredOperationsFromCompiled,\n  resolveOpenApiBackedAnnotations,\n  resolveOpenApiBackedTools,\n} from \"./backing\";\nimport { resolveServerUrl } from \"./openapi-utils\";\n\n// ---------------------------------------------------------------------------\n// Extension input shapes\n// ---------------------------------------------------------------------------\n\nexport type OpenApiSpecInput = typeof OpenApiSpecInputSchema.Type;\n\nexport interface OpenApiPreviewInput {\n  readonly spec: string;\n}\n\n/** Add an OpenAPI integration to the catalog. The integration is the API\n *  surface; connections (the credentials) are attached separately and resolve\n *  their value through the declared `authenticationTemplate`. */\nexport interface OpenApiSpecConfig {\n  readonly spec: OpenApiSpecInput;\n  /** The catalog slug for the new integration (the `<integration>` segment). */\n  readonly slug: string;\n  /** Display name (defaults to the spec title). */\n  readonly name?: string;\n  /** Agent-visible description (defaults to the spec's `info.description`,\n   *  then the title). */\n  readonly description?: string;\n  readonly baseUrl?: string;\n  /** Static headers applied to every request (no secret material). */\n  readonly headers?: Record<string, string>;\n  /** Static query params applied to every request. */\n  readonly queryParams?: Record<string, string>;\n  /** Auth methods a connection's value renders through - canonical\n   *  placements or the request-shaped authoring dialect. */\n  readonly authenticationTemplate?: readonly AuthenticationInput[];\n}\n\nexport interface OpenApiExtensionFailure {\n  readonly _tag: string;\n}\n\n/** Add / merge custom auth methods onto an existing OpenAPI integration's\n *  `authenticationTemplate`. Mirrors the GraphQL plugin's `configure`. */\nexport interface OpenApiConfigureInput {\n  /** The auth methods to add. Each entry is appended to (or, when its `slug`\n   *  already exists, replaces) the integration's existing template array. A\n   *  custom apiKey method with no `slug` is assigned a generated `custom_<id>`\n   *  slug that is collision-checked against the existing template. */\n  readonly authenticationTemplate: readonly AuthenticationInput[];\n  readonly mode?: \"merge\" | \"replace\";\n}\n\n/** What changed in the tool catalog when a spec was updated in place. Tool\n *  names, not addresses - the same diff applies to every connection. */\nexport interface UpdateSpecResult {\n  readonly slug: IntegrationSlug;\n  readonly toolCount: number;\n  readonly addedTools: readonly string[];\n  readonly removedTools: readonly string[];\n}\n\nexport interface OpenApiUpdateSpecInput {\n  /** New spec source. Omit to re-fetch from the integration's stored\n   *  `sourceUrl`. */\n  readonly spec?: OpenApiSpecInput;\n}\n\nexport interface OpenApiPluginExtension {\n  readonly previewSpec: (\n    input: string | OpenApiPreviewInput,\n  ) => Effect.Effect<\n    SpecPreview,\n    OpenApiParseError | OpenApiExtractionError | OpenApiOAuthError | StorageFailure\n  >;\n  readonly addSpec: (\n    config: OpenApiSpecConfig,\n  ) => Effect.Effect<\n    { readonly slug: IntegrationSlug; readonly toolCount: number },\n    | OpenApiParseError\n    | OpenApiExtractionError\n    | OpenApiOAuthError\n    | IntegrationAlreadyExistsError\n    | StorageFailure\n  >;\n  /** Re-resolve the integration's spec (from its stored source URL, or the\n   *  provided input) and rebuild its tools IN PLACE - connections,\n   *  credentials, policies, and the curated description are untouched. */\n  readonly updateSpec: (\n    slug: string,\n    input?: OpenApiUpdateSpecInput,\n  ) => Effect.Effect<\n    UpdateSpecResult,\n    | OpenApiParseError\n    | OpenApiExtractionError\n    | OpenApiOAuthError\n    | IntegrationNotFoundError\n    | StorageFailure\n  >;\n  readonly removeSpec: (slug: string) => Effect.Effect<void, StorageFailure>;\n  readonly getIntegration: (slug: string) => Effect.Effect<Integration | null, StorageFailure>;\n  /** Read the integration's full opaque config, including its\n   *  `authenticationTemplate`. Returns null when the integration is absent. */\n  readonly getConfig: (\n    slug: string,\n  ) => Effect.Effect<OpenApiIntegrationConfig | null, StorageFailure>;\n  /** Add / merge custom auth methods onto the integration's\n   *  `authenticationTemplate`. Returns the resulting template array. */\n  readonly configure: (\n    slug: string,\n    input: OpenApiConfigureInput,\n  ) => Effect.Effect<readonly Authentication[], StorageFailure>;\n}\n\n// ---------------------------------------------------------------------------\n// Control-tool input/output schemas\n// ---------------------------------------------------------------------------\n\nconst PreviewSpecInputSchema = Schema.Struct({\n  spec: Schema.String,\n});\n\nconst StaticPreviewServerVariableSchema = Schema.Struct({\n  default: Schema.String,\n  enum: Schema.NullOr(Schema.Array(Schema.String)),\n  description: Schema.NullOr(Schema.String),\n});\nconst StaticPreviewServerSchema = Schema.Struct({\n  url: Schema.String,\n  description: Schema.NullOr(Schema.String),\n  variables: Schema.NullOr(Schema.Record(Schema.String, StaticPreviewServerVariableSchema)),\n});\nconst StaticPreviewOAuthAuthorizationCodeFlowSchema = Schema.Struct({\n  authorizationUrl: Schema.String,\n  tokenUrl: Schema.String,\n  refreshUrl: Schema.NullOr(Schema.String),\n  scopes: Schema.Record(Schema.String, Schema.String),\n});\nconst StaticPreviewOAuthClientCredentialsFlowSchema = Schema.Struct({\n  tokenUrl: Schema.String,\n  refreshUrl: Schema.NullOr(Schema.String),\n  scopes: Schema.Record(Schema.String, Schema.String),\n});\nconst StaticPreviewOAuthFlowsSchema = Schema.Struct({\n  authorizationCode: Schema.NullOr(StaticPreviewOAuthAuthorizationCodeFlowSchema),\n  clientCredentials: Schema.NullOr(StaticPreviewOAuthClientCredentialsFlowSchema),\n});\nconst StaticPreviewSecuritySchemeSchema = Schema.Struct({\n  name: Schema.String,\n  type: Schema.Literals([\"http\", \"apiKey\", \"oauth2\", \"openIdConnect\"]),\n  scheme: Schema.NullOr(Schema.String),\n  bearerFormat: Schema.NullOr(Schema.String),\n  in: Schema.NullOr(Schema.Literals([\"header\", \"query\", \"cookie\"])),\n  headerName: Schema.NullOr(Schema.String),\n  description: Schema.NullOr(Schema.String),\n  flows: Schema.NullOr(StaticPreviewOAuthFlowsSchema),\n  openIdConnectUrl: Schema.NullOr(Schema.String),\n});\nconst StaticPreviewOAuth2PresetSchema = Schema.Struct({\n  label: Schema.String,\n  securitySchemeName: Schema.String,\n  flow: Schema.Literals([\"authorizationCode\", \"clientCredentials\"]),\n  authorizationUrl: Schema.NullOr(Schema.String),\n  tokenUrl: Schema.String,\n  resource: Schema.NullOr(Schema.String),\n  refreshUrl: Schema.NullOr(Schema.String),\n  scopes: Schema.Record(Schema.String, Schema.String),\n  identityScopes: Schema.Union([\n    Schema.Literal(\"auto\"),\n    Schema.Literal(false),\n    Schema.Array(Schema.String),\n  ]),\n  supportsClientIdMetadataDocument: Schema.optional(Schema.Boolean),\n});\nconst StaticPreviewSpecOutputSchema = Schema.Struct({\n  title: Schema.NullOr(Schema.String),\n  version: Schema.NullOr(Schema.String),\n  servers: Schema.Array(StaticPreviewServerSchema),\n  operationCount: Schema.Number,\n  tags: Schema.Array(Schema.String),\n  securitySchemes: Schema.Array(StaticPreviewSecuritySchemeSchema),\n  authStrategies: Schema.Array(Schema.Struct({ schemes: Schema.Array(Schema.String) })),\n  headerPresets: Schema.Array(\n    Schema.Struct({\n      label: Schema.String,\n      headers: Schema.Record(Schema.String, Schema.NullOr(Schema.String)),\n      secretHeaders: Schema.Array(Schema.String),\n    }),\n  ),\n  oauth2Presets: Schema.Array(StaticPreviewOAuth2PresetSchema),\n});\ntype StaticPreviewSpecOutput = typeof StaticPreviewSpecOutputSchema.Type;\n\nconst OpenApiSpecInputSchema = Schema.Union([\n  Schema.Struct({ kind: Schema.Literal(\"url\"), url: Schema.String }),\n  Schema.Struct({ kind: Schema.Literal(\"blob\"), value: Schema.String }),\n]);\n\nconst AuthenticationSchema = Schema.Union([\n  Schema.Struct({\n    slug: Schema.String,\n    kind: Schema.Literal(\"oauth2\"),\n    authorizationUrl: Schema.String,\n    tokenUrl: Schema.String,\n    resource: Schema.optional(Schema.NullOr(Schema.String)),\n    scopes: Schema.Array(Schema.String),\n    supportsClientIdMetadataDocument: Schema.optional(Schema.Boolean),\n  }),\n  // Credential methods are authored request-shaped - the ONE apikey input\n  // dialect: `{ type: \"apiKey\", headers: { Authorization: [\"Bearer \",\n  // variable(\"token\")] }, queryParams: { … } }`.\n  ApiKeyAuthTemplate,\n]);\n\nconst AddSourceInputSchema = Schema.Struct({\n  spec: OpenApiSpecInputSchema,\n  slug: Schema.String,\n  description: Schema.optional(Schema.String),\n  baseUrl: Schema.optional(Schema.String),\n  headers: Schema.optional(Schema.Record(Schema.String, Schema.String)),\n  queryParams: Schema.optional(Schema.Record(Schema.String, Schema.String)),\n  authenticationTemplate: Schema.optional(Schema.Array(AuthenticationSchema)),\n});\n\nconst AddSourceOutputSchema = Schema.Struct({\n  slug: Schema.String,\n  toolCount: Schema.Number,\n});\n\nconst PreviewSpecInputStandardSchema = Schema.toStandardSchemaV1(\n  Schema.toStandardJSONSchemaV1(PreviewSpecInputSchema),\n);\nconst PreviewSpecOutputStandardSchema = Schema.toStandardSchemaV1(\n  Schema.toStandardJSONSchemaV1(StaticPreviewSpecOutputSchema),\n);\nconst AddSourceInputStandardSchema = Schema.toStandardSchemaV1(\n  Schema.toStandardJSONSchemaV1(AddSourceInputSchema),\n);\nconst AddSourceOutputStandardSchema = Schema.toStandardSchemaV1(\n  Schema.toStandardJSONSchemaV1(AddSourceOutputSchema),\n);\n\nconst openApiToolFailure = (code: string, message: string, details?: unknown) =>\n  ToolResult.fail({\n    code,\n    message,\n    ...(details === undefined ? {} : { details }),\n  });\n\nconst staticPreviewOutput = (preview: SpecPreview): StaticPreviewSpecOutput => ({\n  title: Option.getOrNull(preview.title),\n  version: Option.getOrNull(preview.version),\n  servers: preview.servers.map((server) => ({\n    url: server.url,\n    description: Option.getOrNull(server.description),\n    variables: Option.getOrNull(server.variables)\n      ? Object.fromEntries(\n          Object.entries(Option.getOrNull(server.variables) ?? {}).map(([name, variable]) => [\n            name,\n            {\n              default: variable.default,\n              enum: Option.getOrNull(variable.enum),\n              description: Option.getOrNull(variable.description),\n            },\n          ]),\n        )\n      : null,\n  })),\n  operationCount: preview.operationCount,\n  tags: preview.tags,\n  securitySchemes: preview.securitySchemes.map((scheme) => ({\n    name: scheme.name,\n    type: scheme.type,\n    scheme: Option.getOrNull(scheme.scheme),\n    bearerFormat: Option.getOrNull(scheme.bearerFormat),\n    in: Option.getOrNull(scheme.in),\n    headerName: Option.getOrNull(scheme.headerName),\n    description: Option.getOrNull(scheme.description),\n    flows: Option.isSome(scheme.flows)\n      ? {\n          authorizationCode: Option.isSome(scheme.flows.value.authorizationCode)\n            ? {\n                authorizationUrl: scheme.flows.value.authorizationCode.value.authorizationUrl,\n                tokenUrl: scheme.flows.value.authorizationCode.value.tokenUrl,\n                refreshUrl: Option.getOrNull(scheme.flows.value.authorizationCode.value.refreshUrl),\n                scopes: scheme.flows.value.authorizationCode.value.scopes,\n              }\n            : null,\n          clientCredentials: Option.isSome(scheme.flows.value.clientCredentials)\n            ? {\n                tokenUrl: scheme.flows.value.clientCredentials.value.tokenUrl,\n                refreshUrl: Option.getOrNull(scheme.flows.value.clientCredentials.value.refreshUrl),\n                scopes: scheme.flows.value.clientCredentials.value.scopes,\n              }\n            : null,\n        }\n      : null,\n    openIdConnectUrl: Option.getOrNull(scheme.openIdConnectUrl),\n  })),\n  authStrategies: preview.authStrategies,\n  headerPresets: preview.headerPresets,\n  oauth2Presets: preview.oauth2Presets.map((preset) => ({\n    label: preset.label,\n    securitySchemeName: preset.securitySchemeName,\n    flow: preset.flow,\n    authorizationUrl: Option.getOrNull(preset.authorizationUrl),\n    tokenUrl: preset.tokenUrl,\n    resource: Option.getOrNull(preset.resource),\n    refreshUrl: Option.getOrNull(preset.refreshUrl),\n    scopes: preset.scopes,\n    identityScopes: preset.identityScopes,\n    supportsClientIdMetadataDocument: preset.supportsClientIdMetadataDocument,\n  })),\n});\n\nconst specInputToSourceUrl = (spec: OpenApiSpecInput): string | undefined =>\n  spec.kind === \"url\" ? spec.url : undefined;\n\nconst OAUTH_DISCOVERED_SCHEME_NAME = \"DiscoveredOAuth2\";\nconst OPENAPI_HTTP_METHODS = new Set([\n  \"get\",\n  \"put\",\n  \"post\",\n  \"delete\",\n  \"patch\",\n  \"head\",\n  \"options\",\n  \"trace\",\n]);\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  typeof value === \"object\" && value !== null && !Array.isArray(value);\n\nconst maybeUrl = (value: string): URL | null => {\n  // oxlint-disable-next-line executor/no-try-catch-or-throw -- boundary: URL parsing accepts user-pasted spec/base URLs\n  try {\n    return new URL(value);\n  } catch {\n    return null;\n  }\n};\n\nconst addProbeCandidate = (candidates: string[], value: string | undefined): void => {\n  const trimmed = value?.trim();\n  if (!trimmed) return;\n  const parsed = maybeUrl(trimmed);\n  if (!parsed || (parsed.protocol !== \"https:\" && parsed.protocol !== \"http:\")) return;\n  const normalized = parsed.toString();\n  const origin = parsed.origin;\n  if (!candidates.includes(normalized)) candidates.push(normalized);\n  if (!candidates.includes(origin)) candidates.push(origin);\n};\n\nconst oauthProbeCandidates = (\n  preview: SpecPreview,\n  sourceUrl: string | undefined,\n  baseUrl: string | undefined,\n): readonly string[] => {\n  const candidates: string[] = [];\n  addProbeCandidate(candidates, baseUrl);\n  for (const server of preview.servers) {\n    addProbeCandidate(\n      candidates,\n      resolveServerUrl(server.url, Option.getOrUndefined(server.variables), {}),\n    );\n  }\n  addProbeCandidate(candidates, sourceUrl);\n  return candidates;\n};\n\nconst securityRequirementScopes = (\n  security: unknown,\n  targetSchemes: ReadonlySet<string>,\n): readonly string[] => {\n  if (!Array.isArray(security)) return [];\n  const scopes = new Set<string>();\n  for (const requirement of security) {\n    if (!isRecord(requirement)) continue;\n    for (const [scheme, rawScopes] of Object.entries(requirement)) {\n      if (targetSchemes.size > 0 && !targetSchemes.has(scheme)) continue;\n      if (!Array.isArray(rawScopes)) continue;\n      for (const scope of rawScopes) {\n        if (typeof scope === \"string\" && scope.trim().length > 0) scopes.add(scope.trim());\n      }\n    }\n  }\n  return [...scopes];\n};\n\nconst collectDeclaredSecurityScopes = (doc: unknown, targetSchemes: ReadonlySet<string>) => {\n  const scopes = new Set<string>();\n  if (!isRecord(doc)) return [] as readonly string[];\n\n  for (const scope of securityRequirementScopes(doc.security, targetSchemes)) scopes.add(scope);\n\n  const paths = doc.paths;\n  if (!isRecord(paths)) return [...scopes].sort();\n  for (const pathItem of Object.values(paths)) {\n    if (!isRecord(pathItem)) continue;\n    for (const [method, operation] of Object.entries(pathItem)) {\n      if (!OPENAPI_HTTP_METHODS.has(method.toLowerCase()) || !isRecord(operation)) continue;\n      for (const scope of securityRequirementScopes(operation.security, targetSchemes)) {\n        scopes.add(scope);\n      }\n    }\n  }\n  return [...scopes].sort();\n};\n\nconst nonOAuthSecuritySchemeNames = (preview: SpecPreview): ReadonlySet<string> =>\n  new Set(\n    preview.securitySchemes\n      .filter((scheme) => scheme.type === \"http\" || scheme.type === \"apiKey\")\n      .map((scheme) => scheme.name),\n  );\n\nconst discoveredOAuthPreview = (input: {\n  readonly preview: SpecPreview;\n  readonly authorizationUrl: string;\n  readonly tokenUrl: string;\n  readonly resource?: string | null;\n  readonly scopes: readonly string[];\n  readonly supportsClientIdMetadataDocument?: boolean;\n}): SpecPreview => {\n  const scopes = Object.fromEntries(input.scopes.map((scope) => [scope, \"\"]));\n  const flow = OAuth2AuthorizationCodeFlow.make({\n    authorizationUrl: input.authorizationUrl,\n    tokenUrl: input.tokenUrl,\n    refreshUrl: Option.none(),\n    scopes,\n  });\n  const flows = OAuth2Flows.make({\n    authorizationCode: Option.some(flow),\n    clientCredentials: Option.none(),\n  });\n  return {\n    ...input.preview,\n    securitySchemes: [\n      ...input.preview.securitySchemes,\n      SecurityScheme.make({\n        name: OAUTH_DISCOVERED_SCHEME_NAME,\n        type: \"oauth2\",\n        scheme: Option.none(),\n        bearerFormat: Option.none(),\n        in: Option.none(),\n        headerName: Option.none(),\n        description: Option.some(\"Discovered from OAuth authorization-server metadata\"),\n        flows: Option.some(flows),\n        openIdConnectUrl: Option.none(),\n      }),\n    ],\n    oauth2Presets: [\n      ...input.preview.oauth2Presets,\n      OAuth2Preset.make({\n        label: `OAuth2 Authorization Code · ${OAUTH_DISCOVERED_SCHEME_NAME}`,\n        securitySchemeName: OAUTH_DISCOVERED_SCHEME_NAME,\n        flow: \"authorizationCode\",\n        authorizationUrl: Option.some(input.authorizationUrl),\n        tokenUrl: input.tokenUrl,\n        resource: input.resource ? Option.some(input.resource) : Option.none(),\n        refreshUrl: Option.none(),\n        scopes,\n        identityScopes: \"auto\",\n        ...(input.supportsClientIdMetadataDocument === true\n          ? { supportsClientIdMetadataDocument: true }\n          : {}),\n      }),\n    ],\n  };\n};\n\n// ---------------------------------------------------------------------------\n// Declared auth methods - project the stored `authenticationTemplate` into the\n// catalog's plugin-agnostic `AuthMethodDescriptor[]`. This mirrors the client's\n// `authMethodsFromConfig` (in the React auth-method-config module) on the\n// server so the catalog field is consistent. apikey/none projection comes from\n// the shared model; the oauth method carries the stored endpoints + scopes.\n// ---------------------------------------------------------------------------\n\nexport const describeOpenApiAuthMethods = (\n  record: IntegrationRecord,\n): readonly AuthMethodDescriptor[] => {\n  const config = decodeOpenApiIntegrationConfig(record.config);\n  if (!config) return [];\n  return (config.authenticationTemplate ?? []).map(\n    (template: Authentication): AuthMethodDescriptor => {\n      if (template.kind === \"oauth2\") {\n        return {\n          id: String(template.slug),\n          label: \"OAuth2\",\n          kind: \"oauth\",\n          template: String(template.slug),\n          oauth: {\n            authorizationUrl: template.authorizationUrl,\n            tokenUrl: template.tokenUrl,\n            resource: template.resource ?? null,\n            scopes: template.scopes,\n            supportsClientIdMetadataDocument: template.supportsClientIdMetadataDocument,\n          },\n        };\n      }\n      return describeApiKeyAuthMethod(template);\n    },\n  );\n};\n\nexport const describeOpenApiIntegrationDisplay = (\n  record: IntegrationRecord,\n): { readonly url?: string } => {\n  const config = decodeOpenApiIntegrationConfig(record.config);\n  return { url: config?.baseUrl ?? config?.sourceUrl };\n};\n\n// ---------------------------------------------------------------------------\n// Plugin factory\n// ---------------------------------------------------------------------------\n\nexport interface OpenApiPluginOptions {\n  readonly httpClientLayer?: Layer.Layer<HttpClient.HttpClient, never, never>;\n}\n\nexport const openApiPlugin = definePlugin((options?: OpenApiPluginOptions) => {\n  const resolveSpecForInput = (\n    spec: OpenApiSpecInput,\n    httpClientLayer: Layer.Layer<HttpClient.HttpClient, never, never>,\n  ): Effect.Effect<\n    {\n      readonly specText: string;\n    },\n    OpenApiParseError | OpenApiExtractionError | OpenApiOAuthError\n  > =>\n    Effect.gen(function* () {\n      if (spec.kind === \"url\") {\n        const specText = yield* resolveSpecText(spec.url).pipe(Effect.provide(httpClientLayer));\n        return { specText };\n      }\n      return { specText: spec.value };\n    });\n\n  return {\n    id: \"openapi\" as const,\n    packageName: \"@executor-js/plugin-openapi\",\n    integrationPresets: openApiPresets.map((preset) => ({\n      id: preset.id,\n      name: preset.name,\n      summary: preset.summary,\n      ...(preset.url ? { url: preset.url } : {}),\n      ...(preset.icon ? { icon: preset.icon } : {}),\n      ...(preset.featured ? { featured: preset.featured } : {}),\n    })),\n    storage: (deps): OpenapiStore => makeDefaultOpenapiStore(deps),\n\n    extension: (ctx: PluginCtx<OpenapiStore>) => {\n      const httpClientLayer = options?.httpClientLayer ?? ctx.httpClientLayer;\n\n      const enrichPreviewWithDiscoveredOAuth = (input: {\n        readonly specText: string;\n        readonly preview: SpecPreview;\n        readonly sourceUrl?: string;\n        readonly baseUrl?: string;\n      }): Effect.Effect<SpecPreview, OpenApiParseError | OpenApiExtractionError> =>\n        Effect.gen(function* () {\n          if (input.preview.oauth2Presets.length > 0) return input.preview;\n\n          const candidates = oauthProbeCandidates(input.preview, input.sourceUrl, input.baseUrl);\n          if (candidates.length === 0) return input.preview;\n\n          for (const candidate of candidates) {\n            const oauth = yield* ctx.oauth.probe({ url: candidate }).pipe(\n              Effect.map((result) => ({ ok: true as const, result })),\n              Effect.catch(() => Effect.succeed({ ok: false as const, result: null })),\n            );\n            if (!oauth.ok) continue;\n\n            const doc = yield* parse(input.specText);\n            const declaredScopes = collectDeclaredSecurityScopes(\n              doc,\n              nonOAuthSecuritySchemeNames(input.preview),\n            );\n            const supportedScopes =\n              oauth.result.scopesSupported && oauth.result.scopesSupported.length > 0\n                ? new Set(oauth.result.scopesSupported)\n                : null;\n            const scopes = supportedScopes\n              ? declaredScopes.filter((scope) => supportedScopes.has(scope))\n              : declaredScopes;\n            return discoveredOAuthPreview({\n              preview: input.preview,\n              authorizationUrl: oauth.result.authorizationUrl,\n              tokenUrl: oauth.result.tokenUrl,\n              resource: oauth.result.resource ?? null,\n              scopes,\n              supportsClientIdMetadataDocument:\n                oauth.result.clientIdMetadataDocumentSupported === true,\n            });\n          }\n\n          return input.preview;\n        });\n\n      const addSpec = (config: OpenApiSpecConfig) =>\n        Effect.gen(function* () {\n          // Resolve URL → text and parse BEFORE opening a transaction. Holding\n          // `BEGIN` across a network fetch is the Hyperdrive deadlock path.\n          const resolved = yield* resolveSpecForInput(config.spec, httpClientLayer);\n          const compiled = yield* compileOpenApiSpec(resolved.specText);\n\n          // Defaults the add page derives from its preview, applied here so\n          // headless callers (MCP, API) get the same integration the UI's\n          // add flow would produce - see e2e/scenarios/connect-handoff.test.ts:\n          //   - effectiveBaseUrl: the spec's first server, used to anchor the\n          //     derived auth template's absolute URLs. It is NOT stored as the\n          //     connection baseUrl - the request host is resolved per call from\n          //     the operation's extracted `servers`.\n          //   - authenticationTemplate: the spec's declared security schemes\n          //     (else the Add-connection modal is a dead \"No authentication\"\n          //     end with nowhere to paste a credential)\n          // An explicit input always wins; for auth, an explicit EMPTY array\n          // means \"no auth methods\" and suppresses the derivation.\n          const explicitBaseUrl = config.baseUrl;\n          const needsDerivedBaseUrl = explicitBaseUrl == null;\n          const needsDerivedAuth = config.authenticationTemplate == null;\n          const preview =\n            needsDerivedBaseUrl || needsDerivedAuth\n              ? yield* previewSpecText(resolved.specText).pipe(\n                  Effect.flatMap((rawPreview) =>\n                    enrichPreviewWithDiscoveredOAuth({\n                      specText: resolved.specText,\n                      preview: rawPreview,\n                      sourceUrl: specInputToSourceUrl(config.spec),\n                      baseUrl: config.baseUrl,\n                    }),\n                  ),\n                )\n              : undefined;\n          const derivedBaseUrl =\n            needsDerivedBaseUrl && preview ? firstBaseUrlForPreview(preview) : undefined;\n          const effectiveBaseUrl = explicitBaseUrl ?? (derivedBaseUrl || undefined);\n          const derivedAuthenticationTemplate =\n            needsDerivedAuth && preview\n              ? deriveAuthenticationTemplateFromPreview(preview, effectiveBaseUrl)\n              : undefined;\n\n          const slug = IntegrationSlug.make(config.slug);\n\n          // Block re-adding an existing slug. The core `integrations.register`\n          // primitive upserts (so boot re-registration is idempotent), but an\n          // explicit add must NOT silently clobber an existing integration's\n          // tools, connections, and policies. To add more auth, update the\n          // existing integration instead.\n          const existing = yield* ctx.core.integrations.get(slug);\n          if (existing) {\n            return yield* new IntegrationAlreadyExistsError({ slug });\n          }\n\n          const specHash = yield* sha256Hex(resolved.specText);\n\n          const integrationConfig: OpenApiIntegrationConfig = {\n            specHash,\n            ...(specInputToSourceUrl(config.spec) !== undefined\n              ? { sourceUrl: specInputToSourceUrl(config.spec) }\n              : {}),\n            // baseUrl is an optional override only. The host is otherwise\n            // resolved per call from the operation's `servers` (extracted from\n            // the spec), so we never bake a derived base URL into the config.\n            ...(config.baseUrl ? { baseUrl: config.baseUrl } : {}),\n            ...(config.headers ? { headers: config.headers } : {}),\n            ...(config.queryParams ? { queryParams: config.queryParams } : {}),\n            // Prefer the caller's explicit template; otherwise derive from the\n            // spec's declared security schemes.\n            ...(config.authenticationTemplate\n              ? {\n                  authenticationTemplate: normalizeOpenApiAuthInputs(config.authenticationTemplate),\n                }\n              : derivedAuthenticationTemplate && derivedAuthenticationTemplate.length > 0\n                ? { authenticationTemplate: derivedAuthenticationTemplate }\n                : {}),\n          };\n\n          // The spec blob is written OUTSIDE the transaction: it's\n          // content-addressed (re-puts are idempotent) and an aborted register\n          // leaves only an unreferenced blob behind - while blob backends like\n          // R2 couldn't roll back with the transaction anyway.\n          yield* ctx.storage.putSpec(specHash, resolved.specText);\n          // The content-addressed defs blob lets the serve path resolve the\n          // shared `definitions` without re-parsing the spec. Same idempotent,\n          // outside-the-transaction rationale as the spec blob.\n          yield* ctx.storage.putDefs(specHash, JSON.stringify(compiled.hoistedDefs));\n\n          yield* ctx.transaction(\n            Effect.gen(function* () {\n              yield* ctx.core.integrations.register({\n                slug,\n                name: config.name?.trim() || compiled.title || config.slug,\n                description:\n                  config.description ?? compiled.description ?? compiled.title ?? config.slug,\n                config: integrationConfig satisfies OpenApiIntegrationConfig as IntegrationConfig,\n                canRemove: true,\n                canRefresh: specInputToSourceUrl(config.spec) != null,\n              });\n              yield* ctx.storage.putOperations(\n                config.slug,\n                openApiStoredOperationsFromCompiled(config.slug, compiled),\n              );\n            }),\n          );\n\n          return { slug, toolCount: compiled.definitions.length };\n        });\n\n      // Update the spec IN PLACE: re-resolve (stored source URL / bundle, or a\n      // caller-supplied new input), recompile, swap the stored operations, and\n      // rebuild every connection's tools. Auth templates, base URL, headers,\n      // the curated description, connections, and policies are all untouched -\n      // this is the \"spec changed upstream\" path, not a re-add.\n      const updateSpec = (rawSlug: string, input?: OpenApiUpdateSpecInput) =>\n        Effect.gen(function* () {\n          const slug = IntegrationSlug.make(rawSlug);\n          const record = yield* ctx.core.integrations.get(slug);\n          const current = record ? decodeOpenApiIntegrationConfig(record.config) : null;\n          if (!record || !current) {\n            return yield* new IntegrationNotFoundError({ slug });\n          }\n\n          // The new spec source: explicit input wins; otherwise re-fetch from\n          // where the spec originally came from. A pasted-blob integration has\n          // no origin, so updating it requires a new input.\n          const specInput: OpenApiSpecInput | null =\n            input?.spec ?? (current.sourceUrl ? { kind: \"url\", url: current.sourceUrl } : null);\n          if (specInput === null) {\n            return yield* new OpenApiParseError({\n              message:\n                \"This integration's spec was pasted inline and has no source URL to re-fetch. Provide the updated spec content.\",\n            });\n          }\n\n          // Resolve + compile BEFORE the transaction (same Hyperdrive-deadlock\n          // rule as addSpec: never hold BEGIN across a network fetch).\n          const resolved = yield* resolveSpecForInput(specInput, httpClientLayer);\n          const compiled = yield* compileOpenApiSpec(resolved.specText);\n\n          const previousOperations = yield* ctx.storage.listOperations(rawSlug);\n          const previousNames = new Set(previousOperations.map((op) => op.toolName));\n          const nextNames = new Set(compiled.definitions.map((def) => def.toolPath));\n\n          // The resolved spec text lives in the plugin blob store keyed by its\n          // content hash (`spec/<hash>`); the config carries only the hash. Put\n          // the blob outside the transaction - re-puts are idempotent and an\n          // aborted config update just leaves an unreferenced blob.\n          const specHash = yield* sha256Hex(resolved.specText);\n          yield* ctx.storage.putSpec(specHash, resolved.specText);\n          yield* ctx.storage.putDefs(specHash, JSON.stringify(compiled.hoistedDefs));\n\n          const nextConfig: OpenApiIntegrationConfig = {\n            ...current,\n            specHash,\n            ...(specInputToSourceUrl(specInput) !== undefined\n              ? { sourceUrl: specInputToSourceUrl(specInput) }\n              : {}),\n          };\n\n          yield* ctx.transaction(\n            Effect.gen(function* () {\n              yield* ctx.core.integrations.update(slug, {\n                config: nextConfig satisfies OpenApiIntegrationConfig as IntegrationConfig,\n              });\n              yield* ctx.storage.putOperations(\n                rawSlug,\n                openApiStoredOperationsFromCompiled(rawSlug, compiled),\n              );\n            }),\n          );\n\n          // Rebuild each connection's tool rows from the new spec. Outside the\n          // transaction: refresh opens its own, and a half-refreshed catalog\n          // self-heals on the next refresh anyway.\n          const connections = yield* ctx.connections.list({ integration: slug });\n          yield* Effect.forEach(\n            connections,\n            (connection) =>\n              ctx.connections\n                .refresh({\n                  owner: connection.owner,\n                  integration: connection.integration,\n                  name: connection.name,\n                })\n                .pipe(Effect.catchTag(\"ConnectionNotFoundError\", () => Effect.succeed([]))),\n            { discard: true },\n          ).pipe(\n            Effect.catchTag(\"IntegrationNotFoundError\", () => Effect.void),\n            Effect.withSpan(\"openapi.plugin.update_spec.refresh_connections\", {\n              attributes: { \"openapi.connection_count\": connections.length },\n            }),\n          );\n\n          return {\n            slug,\n            toolCount: compiled.definitions.length,\n            addedTools: [...nextNames].filter((name) => !previousNames.has(name)).sort(),\n            removedTools: [...previousNames].filter((name) => !nextNames.has(name)).sort(),\n          } satisfies UpdateSpecResult;\n        }).pipe(\n          Effect.withSpan(\"openapi.plugin.update_spec\", {\n            attributes: { \"openapi.integration.slug\": rawSlug },\n          }),\n        );\n\n      return {\n        previewSpec: (input: string | OpenApiPreviewInput) =>\n          Effect.gen(function* () {\n            const previewInput = typeof input === \"string\" ? { spec: input } : input;\n            const specText = yield* resolveSpecText(previewInput.spec).pipe(\n              Effect.provide(httpClientLayer),\n            );\n            const preview = yield* previewSpecText(specText);\n            return yield* enrichPreviewWithDiscoveredOAuth({\n              specText,\n              preview,\n              sourceUrl: maybeUrl(previewInput.spec.trim()) ? previewInput.spec.trim() : undefined,\n            });\n          }),\n\n        addSpec,\n\n        updateSpec,\n\n        removeSpec: (slug: string) =>\n          ctx.transaction(\n            Effect.gen(function* () {\n              yield* ctx.storage.removeOperations(slug);\n              yield* ctx.core.integrations\n                .remove(IntegrationSlug.make(slug))\n                .pipe(Effect.catchTag(\"IntegrationRemovalNotAllowedError\", () => Effect.void));\n            }),\n          ),\n\n        getIntegration: (slug: string) =>\n          ctx.core.integrations.get(IntegrationSlug.make(slug)).pipe(\n            Effect.map((record) =>\n              record\n                ? ({\n                    slug: record.slug,\n                    description: record.description,\n                    kind: record.kind,\n                    canRemove: record.canRemove,\n                    canRefresh: record.canRefresh,\n                  } as Integration)\n                : null,\n            ),\n          ),\n\n        getConfig: (slug: string): Effect.Effect<OpenApiIntegrationConfig | null, StorageFailure> =>\n          ctx.core.integrations\n            .get(IntegrationSlug.make(slug))\n            .pipe(\n              Effect.map((record) =>\n                record ? decodeOpenApiIntegrationConfig(record.config) : null,\n              ),\n            ),\n\n        configure: (\n          slug: string,\n          input: OpenApiConfigureInput,\n        ): Effect.Effect<readonly Authentication[], StorageFailure> =>\n          ctx.transaction(\n            Effect.gen(function* () {\n              const record = yield* ctx.core.integrations.get(IntegrationSlug.make(slug));\n              if (!record) return [] as readonly Authentication[];\n              const current = decodeOpenApiIntegrationConfig(record.config);\n              if (!current) return [] as readonly Authentication[];\n\n              const incoming = normalizeOpenApiAuthInputs(input.authenticationTemplate);\n              const merged =\n                input.mode === \"replace\"\n                  ? incoming\n                  : mergeAuthTemplates(current.authenticationTemplate ?? [], incoming);\n\n              const next: OpenApiIntegrationConfig = {\n                ...current,\n                authenticationTemplate: merged,\n              };\n\n              yield* ctx.core.integrations.update(IntegrationSlug.make(slug), {\n                config: next satisfies OpenApiIntegrationConfig as IntegrationConfig,\n              });\n\n              return merged;\n            }),\n          ),\n      };\n    },\n\n    staticSources: (self: OpenApiPluginExtension) => [\n      {\n        id: \"openapi\",\n        kind: \"executor\",\n        name: \"OpenAPI\",\n        tools: [\n          tool({\n            name: \"previewSpec\",\n            description:\n              \"Preview an OpenAPI document before adding it as an integration. Call this first when the user provides a spec URL/blob so you can inspect servers, auth schemes, operation count, and tags before `addSpec`. Do not collect API keys or OAuth client secrets in chat; use the connections tools for those values.\",\n            inputSchema: PreviewSpecInputStandardSchema,\n            outputSchema: PreviewSpecOutputStandardSchema,\n            execute: (input: typeof PreviewSpecInputSchema.Type) =>\n              self.previewSpec(input).pipe(\n                Effect.map((preview) => ToolResult.ok(staticPreviewOutput(preview))),\n                Effect.catchTags({\n                  OpenApiParseError: ({ message }: OpenApiParseError) =>\n                    Effect.succeed(openApiToolFailure(\"openapi_parse_failed\", message)),\n                  OpenApiExtractionError: ({ message }: OpenApiExtractionError) =>\n                    Effect.succeed(openApiToolFailure(\"openapi_extraction_failed\", message)),\n                  OpenApiOAuthError: ({ message }: OpenApiOAuthError) =>\n                    Effect.succeed(openApiToolFailure(\"openapi_oauth_failed\", message)),\n                }),\n              ),\n          }),\n          tool({\n            name: \"addSpec\",\n            description:\n              \"Add an OpenAPI integration to the catalog and persist its operations as tools. Recommended flow: call `previewSpec`, choose a `slug`, then create a connection for that integration with the user's API key or via `oauth.start`. When `baseUrl` is omitted it defaults to the spec's first server; when `authenticationTemplate` is omitted the auth methods are derived from the spec's declared security schemes (pass an explicit template to override how a credential is applied - apiKey header/query, or oauth bearer - or an empty array for no auth methods).\",\n            annotations: {\n              requiresApproval: true,\n              approvalDescription: \"Add an OpenAPI integration\",\n            },\n            inputSchema: AddSourceInputStandardSchema,\n            outputSchema: AddSourceOutputStandardSchema,\n            execute: (input: typeof AddSourceInputSchema.Type) =>\n              self\n                .addSpec({\n                  spec: input.spec,\n                  slug: input.slug,\n                  description: input.description,\n                  baseUrl: input.baseUrl,\n                  headers: input.headers,\n                  queryParams: input.queryParams,\n                  authenticationTemplate: input.authenticationTemplate as\n                    | readonly AuthenticationInput[]\n                    | undefined,\n                })\n                .pipe(\n                  Effect.map((result) =>\n                    ToolResult.ok({\n                      slug: String(result.slug),\n                      toolCount: result.toolCount,\n                    }),\n                  ),\n                  Effect.catchTags({\n                    OpenApiParseError: ({ message }: OpenApiParseError) =>\n                      Effect.succeed(openApiToolFailure(\"openapi_parse_failed\", message)),\n                    OpenApiExtractionError: ({ message }: OpenApiExtractionError) =>\n                      Effect.succeed(openApiToolFailure(\"openapi_extraction_failed\", message)),\n                    OpenApiOAuthError: ({ message }: OpenApiOAuthError) =>\n                      Effect.succeed(openApiToolFailure(\"openapi_oauth_failed\", message)),\n                    IntegrationAlreadyExistsError: ({ slug }: IntegrationAlreadyExistsError) =>\n                      Effect.succeed(\n                        openApiToolFailure(\n                          \"integration_already_exists\",\n                          `Integration ${slug} already exists; update it instead of re-adding.`,\n                        ),\n                      ),\n                  }),\n                ),\n          }),\n        ],\n      },\n    ],\n\n    describeAuthMethods: describeOpenApiAuthMethods,\n    describeIntegrationDisplay: describeOpenApiIntegrationDisplay,\n\n    // Produce one tool per spec operation. Spec-derived, identical for every\n    // connection on the integration - so `getValue` is never called here. The\n    // operation bindings invokeTool needs are persisted at addSpec time; this\n    // hook only shapes the per-connection ToolDefs from the spec blob the\n    // catalog config points at.\n    resolveTools: ({ integration, config, storage }) =>\n      resolveOpenApiBackedTools({ integration, config, storage }),\n\n    invokeTool: ({ ctx: invokeCtx, toolRow, credential, args }) => {\n      const httpClientLayer = options?.httpClientLayer ?? invokeCtx.httpClientLayer;\n      return invokeOpenApiBackedTool({\n        ctx: invokeCtx,\n        toolRow,\n        credential,\n        args,\n        httpClientLayer,\n      });\n    },\n\n    resolveAnnotations: ({ ctx: annotationsCtx, integration, toolRows }) =>\n      resolveOpenApiBackedAnnotations({\n        ctx: annotationsCtx,\n        integration: String(integration),\n        toolRows,\n      }),\n\n    removeConnection: () => Effect.void,\n\n    detect: ({\n      ctx: detectCtx,\n      url,\n    }: {\n      readonly ctx: PluginCtx<OpenapiStore>;\n      readonly url: string;\n    }) =>\n      Effect.gen(function* () {\n        const httpClientLayer = options?.httpClientLayer ?? detectCtx.httpClientLayer;\n        const trimmed = url.trim();\n        if (!trimmed) return null;\n        const parsed = yield* Effect.try({\n          try: () => new URL(trimmed),\n          catch: (error) => error,\n        }).pipe(Effect.option);\n        if (Option.isNone(parsed)) return null;\n        const specText = yield* resolveSpecText(trimmed).pipe(\n          Effect.provide(httpClientLayer),\n          Effect.catch(() => Effect.succeed(null)),\n        );\n        if (specText === null) return null;\n        const doc = yield* parse(specText).pipe(Effect.catch(() => Effect.succeed(null)));\n        if (!doc) return null;\n        const result = yield* extract(doc).pipe(Effect.catch(() => Effect.succeed(null)));\n        if (!result) return null;\n        const slug = Option.getOrElse(result.title, () => \"api\")\n          .toLowerCase()\n          .replace(/[^a-z0-9]+/g, \"_\");\n        const name = Option.getOrElse(result.title, () => slug);\n        return IntegrationDetectionResult.make({\n          kind: \"openapi\",\n          confidence: \"high\",\n          endpoint: trimmed,\n          name,\n          slug,\n        });\n      }),\n  };\n  // HTTP transport (routes/handlers/extensionService) is layered on by\n  // the api-aware factory in `@executor-js/plugin-openapi/api`. Hosts that\n  // want the HTTP surface import the plugin from there; SDK-only consumers\n  // stay on this entry and avoid the server-only deps.\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,QAAQ,cAAc;AAC/B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAuBP,IAAM,4BAA4B,OAAO,OAAO;AAAA,EAC9C,MAAM,OAAO;AAAA,EACb,MAAM,OAAO,QAAQ,QAAQ;AAAA,EAC7B,kBAAkB,OAAO;AAAA,EACzB,UAAU,OAAO;AAAA,EACjB,UAAU,OAAO,SAAS,OAAO,OAAO,OAAO,MAAM,CAAC;AAAA,EACtD,QAAQ,OAAO,MAAM,OAAO,MAAM;AAAA,EAClC,kCAAkC,OAAO,SAAS,OAAO,OAAO;AAClE,CAAC;AAEM,IAAM,uBAAuB,OAAO,MAAM,CAAC,2BAA2B,gBAAgB,CAAC;AAEvF,IAAM,iCAAiC,OAAO,OAAO;AAAA;AAAA;AAAA,EAG1D,UAAU,OAAO,SAAS,OAAO,MAAM;AAAA;AAAA,EAEvC,WAAW,OAAO,SAAS,OAAO,MAAM;AAAA;AAAA,EAExC,SAAS,OAAO,SAAS,OAAO,MAAM;AAAA;AAAA,EAEtC,SAAS,OAAO,SAAS,OAAO,OAAO,OAAO,QAAQ,OAAO,MAAM,CAAC;AAAA;AAAA,EAEpE,aAAa,OAAO,SAAS,OAAO,OAAO,OAAO,QAAQ,OAAO,MAAM,CAAC;AAAA;AAAA,EAExE,wBAAwB,OAAO,SAAS,OAAO,MAAM,oBAAoB,CAAC;AAC5E,CAAC;AAWD,IAAM,eAAe,OAAO,oBAAoB,8BAA8B;AAIvE,IAAM,iCAAiC,CAAC,UAC7C,OAAO,UAAU,aAAa,KAAK,CAAC;AAkB/B,IAAM,qBAAqB,CAChC,UACA,WACiB;AACjB,MAAI,SAAS,SAAS,UAAU;AAC9B,WAAO;AAAA,MACL,SAAS,EAAE,eAAe,UAAU,OAAO,cAAc,KAAK,EAAE,GAAG;AAAA,MACnE,aAAa,CAAC;AAAA,IAChB;AAAA,EACF;AACA,SAAO,qBAAqB,SAAS,YAAY,MAAM;AACzD;AAKO,IAAM,4BAA4B,CAAC,aAAgD;AACxF,MAAI,SAAS,SAAS,SAAU,QAAO,CAAC,cAAc;AACtD,SAAO,2BAA2B,SAAS,UAAU;AACvD;;;AC5GA,SAAS,QAAQ,UAAAA,SAAQ,WAAW,UAAAC,eAAc;AA0BlD,IAAM,uBAAuB;AAC7B,IAAM,cAAc;AACpB,IAAM,wBAAwB;AAE9B,IAAM,gBAAgBC,QAAO,WAAW,gBAAgB;AACxD,IAAM,gBAAgBA,QAAO,kBAAkB,gBAAgB;AAC/D,IAAM,oBAAoBA,QAAO,kBAAkBA,QAAO,eAAe,gBAAgB,CAAC;AAE1F,IAAM,eAAe,CAAC,UAA4C;AAElE,IAAM,mBAAmBA,QAAO,OAAO;AAAA,EACrC,aAAaA,QAAO;AAAA,EACpB,UAAUA,QAAO;AAAA,EACjB,SAASA,QAAO;AAAA;AAAA;AAAA;AAAA;AAAA,EAKhB,aAAaA,QAAO,SAASA,QAAO,MAAM;AAC5C,CAAC;AACD,IAAM,yBAAyBA,QAAO,oBAAoB,gBAAgB;AAa1E,IAAM,iBAAiB,CAAC,QAAoD;AAC1E,QAAM,UAAU,uBAAuB,IAAI,IAAI;AAC/C,MAAIC,QAAO,OAAO,OAAO,EAAG,QAAO;AACnC,QAAM,YAAY,QAAQ;AAC1B,SAAO;AAAA,IACL,aAAa,UAAU;AAAA,IACvB,UAAU,UAAU;AAAA,IACpB,SAAS;AAAA,MACP,OAAO,UAAU,YAAY,WACzB,kBAAkB,UAAU,OAAO,IACnC,UAAU;AAAA,IAChB;AAAA,IACA,GAAI,UAAU,gBAAgB,SAAY,EAAE,aAAa,UAAU,YAAY,IAAI,CAAC;AAAA,EACtF;AACF;AAEA,IAAM,gBAAgB,CAAC,UAA0B;AAC/C,MAAI,OAAO;AACX,QAAM,QAAQ;AACd,QAAM,OAAO;AACb,WAAS,QAAQ,GAAG,QAAQ,MAAM,QAAQ,SAAS,GAAG;AACpD,YAAQ,OAAO,MAAM,WAAW,KAAK,CAAC;AACtC,WAAQ,OAAO,QAAS;AAAA,EAC1B;AACA,SAAO,KAAK,SAAS,EAAE,EAAE,SAAS,IAAI,GAAG;AAC3C;AAEA,IAAM,eAAe,CAAC,aAAqB,aACzC,GAAG,qBAAqB,IAAI,cAAc,WAAW,CAAC,IAAI,cAAc,QAAQ,CAAC;AAEnF,IAAM,qBAAqB,CAAC,aAAqB,aAC/C,GAAG,WAAW,IAAI,QAAQ;AAIrB,IAAM,cAAc,CAAC,aAA6B,QAAQ,QAAQ;AAKlE,IAAM,cAAc,CAAC,aAA6B,QAAQ,QAAQ;AA0ClE,IAAM,0BAA0B,CAAC,EAAE,eAAe,MAAM,MAAiC;AAC9F,QAAM,gBAAgB,CAAC,eAAgC;AAAA,IACrD,aAAa,UAAU;AAAA,IACvB,UAAU,UAAU;AAAA,IACpB,SAAS,aAAa,cAAc,UAAU,OAAO,CAAC;AAAA,IACtD,GAAI,UAAU,gBAAgB,SAAY,EAAE,aAAa,UAAU,YAAY,IAAI,CAAC;AAAA,EACtF;AAEA,QAAM,WAAW,CAAC,gBAChB,cACG,KAAK,EAAE,YAAY,qBAAqB,CAAC,EACzC;AAAA,IACC,OAAO;AAAA,MAAI,CAAC,SACV,KAAK,OAAO,CAAC,QAAQ,eAAe,GAAG,GAAG,gBAAgB,WAAW;AAAA,IACvE;AAAA,EACF;AAEJ,QAAM,mBAAmB,CAAC,gBACxB,OAAO,IAAI,aAAa;AACtB,UAAM,OAAO,OAAO,SAAS,WAAW;AACxC,WAAO,cAAc,WAAW;AAAA,MAC9B,OAAO;AAAA,MACP,SAAS,KAAK,IAAI,CAAC,SAAS,EAAE,YAAY,sBAAsB,KAAK,IAAI,IAAI,EAAE;AAAA,IACjF,CAAC;AAAA,EACH,CAAC;AAEH,QAAM,mBAAmB,CAAC,aAAqB,eAC7C,cAAc,QAAQ;AAAA,IACpB,OAAO;AAAA,IACP,SAAS,WAAW,IAAI,CAAC,eAAe;AAAA,MACtC,YAAY;AAAA,MACZ,KAAK,aAAa,aAAa,UAAU,QAAQ;AAAA,MACjD,MAAM,cAAc,SAAS;AAAA,IAC/B,EAAE;AAAA,EACJ,CAAC;AAEH,SAAO;AAAA,IACL,eAAe,CAAC,aAAa,eAC3B,OAAO,IAAI,aAAa;AACtB,aAAO,iBAAiB,WAAW;AACnC,aAAO,iBAAiB,aAAa,UAAU;AAAA,IACjD,CAAC;AAAA,IAEH;AAAA,IAEA,cAAc,CAAC,aAAa,aAC1B,OAAO,IAAI,aAAa;AACtB,YAAM,MAAM,OAAO,cAAc,IAAI;AAAA,QACnC,YAAY;AAAA,QACZ,KAAK,aAAa,aAAa,QAAQ;AAAA,MACzC,CAAC;AACD,UAAI,IAAK,QAAO,eAAe,GAAG;AAClC,YAAM,YAAY,mBAAmB,aAAa,QAAQ;AAC1D,UAAI,UAAU,SAAS,IAAK,QAAO;AACnC,YAAM,YAAY,OAAO,cAAc,IAAI;AAAA,QACzC,YAAY;AAAA,QACZ,KAAK;AAAA,MACP,CAAC;AACD,aAAO,YAAY,eAAe,SAAS,IAAI;AAAA,IACjD,CAAC;AAAA,IAEH,gBAAgB,CAAC,gBACf,SAAS,WAAW,EAAE;AAAA,MACpB,OAAO,IAAI,CAAC,SAAS,KAAK,IAAI,cAAc,EAAE,OAAO,UAAU,SAAS,CAAC;AAAA,IAC3E;AAAA,IAEF;AAAA,IAEA,SAAS,CAAC,UAAU,aAClB,MAAM,IAAI,YAAY,QAAQ,GAAG,UAAU,EAAE,OAAO,YAAY,CAAC;AAAA,IAEnE,SAAS,CAAC,aAAa,MAAM,IAAI,YAAY,QAAQ,CAAC;AAAA,IAEtD,SAAS,CAAC,UAAU,aAClB,MAAM,IAAI,YAAY,QAAQ,GAAG,UAAU,EAAE,OAAO,YAAY,CAAC;AAAA,IAEnE,SAAS,CAAC,aAAa,MAAM,IAAI,YAAY,QAAQ,CAAC;AAAA,EACxD;AACF;;;AC3NA,SAAS,UAAAC,SAAQ,OAAO,UAAAC,eAAc;AACtC,SAAS,YAAY,yBAAyB;AAmB9C,IAAM,iBAAoD;AAAA,EACxD,MAAM,CAAC,QAAQ,cAAc,QAAQ;AAAA,EACrC,OAAO,CAAC,SAAS,eAAe,QAAQ;AAAA,EACxC,QAAQ,CAAC,WAAW,QAAQ;AAAA,EAC5B,QAAQ,CAAC,WAAW,QAAQ;AAC9B;AAEA,IAAM,iBAAiB,CAAC,MAA+B,UAAuC;AAC5F,QAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,MAAI,WAAW,OAAW,QAAO;AAEjC,aAAW,OAAO,eAAe,MAAM,QAAQ,KAAK,CAAC,GAAG;AACtD,UAAM,YAAY,KAAK,GAAG;AAC1B,QAAI,OAAO,cAAc,YAAY,cAAc,QAAQ,CAAC,MAAM,QAAQ,SAAS,GAAG;AACpF,YAAM,SAAU,UAAsC,MAAM,IAAI;AAChE,UAAI,WAAW,OAAW,QAAO;AAAA,IACnC;AAAA,EACF;AAEA,SAAO;AACT;AAEA,IAAM,oBAAoB,CAAC,UACzB,OAAO,UAAU,YAAY,UAAU,OAAO,KAAK,UAAU,KAAK,IAAI,OAAO,KAAK;AAIpF,IAAM,wBAAwB;AAE9B,IAAM,sBAAsB,CAAC,KAAa,kBAAmC;AAC3E,MAAI,CAAC,cAAe,QAAO,mBAAmB,GAAG;AAEjD,MAAI,MAAM;AACV,aAAW,MAAM,KAAK;AACpB,WAAO,sBAAsB,KAAK,EAAE,IAAI,KAAK,mBAAmB,EAAE;AAAA,EACpE;AACA,SAAO;AACT;AAEA,IAAM,mBAAmB,CAAC,OAAgB,UAAwC;AAChF,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO,CAAC;AACnD,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO,CAAC,kBAAkB,KAAK,CAAC;AAE3D,QAAM,QAAQC,QAAO,eAAe,MAAM,KAAK,KAAK;AACpD,QAAM,UAAUA,QAAO,UAAU,MAAM,SAAS,MAAM,IAAI;AAE1D,MAAI,QAAS,QAAO,MAAM,IAAI,iBAAiB;AAE/C,QAAM,YAAY,UAAU,mBAAmB,MAAM,UAAU,kBAAkB,MAAM;AACvF,SAAO,CAAC,MAAM,IAAI,iBAAiB,EAAE,KAAK,SAAS,CAAC;AACtD;AAMA,IAAM,cAAcC,QAAO,GAAG,qBAAqB,EAAE,WACnD,cACA,MACA,YACA;AACA,MAAI,WAAW;AAEf,aAAW,SAAS,YAAY;AAC9B,QAAI,MAAM,aAAa,OAAQ;AAC/B,UAAM,QAAQ,eAAe,MAAM,KAAK;AACxC,QAAI,UAAU,UAAa,UAAU,MAAM;AACzC,UAAI,MAAM,UAAU;AAClB,eAAO,OAAO,IAAI,uBAAuB;AAAA,UACvC,SAAS,oCAAoC,MAAM,IAAI;AAAA,UACvD,YAAYD,QAAO,KAAK;AAAA,QAC1B,CAAC;AAAA,MACH;AACA;AAAA,IACF;AACA,UAAM,UAAU;AAAA,MACd,OAAO,KAAK;AAAA,MACZA,QAAO,UAAU,MAAM,eAAe,MAAM,KAAK;AAAA,IACnD;AACA,eAAW,SAAS,WAAW,IAAI,MAAM,IAAI,KAAK,OAAO;AACzD,eAAW,SAAS,WAAW,KAAK,MAAM,IAAI,KAAK,OAAO;AAAA,EAC5D;AAEA,QAAM,YAAY,CAAC,GAAG,SAAS,SAAS,eAAe,CAAC,EACrD,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,EACf,OAAO,CAAC,MAAmB,OAAO,MAAM,QAAQ;AAEnD,aAAW,QAAQ,WAAW;AAC5B,UAAM,QAAQ,KAAK,IAAI;AACvB,QAAI,UAAU,UAAa,UAAU,MAAM;AACzC,iBAAW,SAAS,WAAW,IAAI,IAAI,KAAK,mBAAmB,OAAO,KAAK,CAAC,CAAC;AAAA,IAC/E;AAAA,EACF;AAEA,QAAM,aAAa,CAAC,GAAG,SAAS,SAAS,eAAe,CAAC,EACtD,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,EACf,OAAO,CAAC,MAAmB,OAAO,MAAM,QAAQ;AAEnD,MAAI,WAAW,SAAS,GAAG;AACzB,WAAO,OAAO,IAAI,uBAAuB;AAAA,MACvC,SAAS,+BAA+B,CAAC,GAAG,IAAI,IAAI,UAAU,CAAC,EAAE,KAAK,IAAI,CAAC;AAAA,MAC3E,YAAYA,QAAO,KAAK;AAAA,IAC1B,CAAC;AAAA,EACH;AAEA,SAAO;AACT,CAAC;AAOD,IAAM,qBAAqB;AAE3B,IAAM,eAAe,CACnB,SACA,YACwC;AACxC,MAAI,MAAM;AACV,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AACnD,UAAM,kBAAkB,UAAU,KAAK,MAAM,KAAK;AAAA,EACpD;AACA,SAAO;AACT;AAMA,IAAM,uBAAuB,CAAC,OAC5B,IAAI,MAAM,GAAG,EAAE,CAAC,GAAG,KAAK,EAAE,YAAY,KAAK;AAE7C,IAAM,oBAAoB,CAAC,OAA2C;AACpE,QAAM,aAAa,qBAAqB,EAAE;AAC1C,MAAI,CAAC,WAAY,QAAO;AACxB,SACE,eAAe,sBAAsB,WAAW,SAAS,OAAO,KAAK,WAAW,SAAS,MAAM;AAEnG;AAEA,IAAM,mBAAmB,CAAC,OACxB,qBAAqB,EAAE,MAAM;AAE/B,IAAM,sBAAsB,CAAC,OAC3B,qBAAqB,EAAE,EAAE,WAAW,qBAAqB;AAE3D,IAAM,mBAAmB,CAAC,OAA2C;AACnE,QAAM,aAAa,qBAAqB,EAAE;AAC1C,MAAI,CAAC,WAAY,QAAO;AACxB,SACE,eAAe,qBAAqB,eAAe,cAAc,WAAW,SAAS,MAAM;AAE/F;AAEA,IAAM,oBAAoB,CAAC,OACzB,qBAAqB,EAAE,EAAE,WAAW,OAAO;AAE7C,IAAM,gBAAgB,CAAC,OACrB,qBAAqB,EAAE,MAAM;AAE/B,IAAM,gBAAgB,CAAC,UAA8B;AACnD,MAAI,SAAS;AACb,QAAM,YAAY;AAClB,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK,WAAW;AAChD,cAAU,OAAO,aAAa,GAAG,MAAM,SAAS,GAAG,IAAI,SAAS,CAAC;AAAA,EACnE;AACA,SAAO,KAAK,MAAM;AACpB;AAEA,IAAM,kBAAkB,CAAC,OAAe,aAA6C;AACnF,QAAM,UAAU,MAAM,QAAQ,OAAO,EAAE;AACvC,QAAM,WACJ,aAAa,cAAc,QAAQ,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,IAAI;AAC7E,QAAM,YAAY,SAAS,SAAS;AACpC,SAAO,cAAc,IAAI,WAAW,GAAG,QAAQ,GAAG,IAAI,OAAO,IAAI,SAAS,CAAC;AAC7E;AAEA,IAAM,uBAAuB,CAAC,WAA2B;AACvD,QAAM,UAAU,OAAO,QAAQ,OAAO,EAAE;AACxC,QAAM,UAAU,QAAQ,SAAS,IAAI,IAAI,IAAI,QAAQ,SAAS,GAAG,IAAI,IAAI;AACzE,SAAO,KAAK,IAAI,GAAG,KAAK,MAAO,QAAQ,SAAS,IAAK,CAAC,IAAI,OAAO;AACnE;AAEA,IAAM,oBAAoB,CAAC,aACzB,qBAAqB,QAAQ,MAAM;AAErC,IAAM,kBAAkB,CAAC,OAAmB,WAC1C,OAAO,MAAM,CAAC,MAAM,UAAU,MAAM,KAAK,MAAM,IAAI;AAErD,IAAM,mBAAmB,CAAC,UAA+B;AACvD,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,MAAI;AAEJ,MAAI;AACF,WAAO,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,EAAE,OAAO,KAAK;AAAA,EAC/D,QAAQ;AACN,WAAO;AAAA,EACT;AACA,MAAI,aAAa;AACjB,WAAS,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS,GAAG;AACnD,UAAM,OAAO,KAAK,WAAW,KAAK;AAClC,UAAM,iBAAiB,SAAS,KAAQ,SAAS,MAAQ,SAAS,MAAQ,SAAS;AACnF,QAAI,SAAS,EAAM,QAAO;AAC1B,QAAI,OAAO,MAAQ,CAAC,eAAgB,eAAc;AAAA,EACpD;AACA,SAAO,aAAa,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK;AAClD;AAEA,IAAM,gBAAgB,CAAC,UAAqC;AAC1D,MAAI,gBAAgB,OAAO,CAAC,KAAM,KAAM,GAAI,CAAC,EAAG,QAAO;AACvD,MAAI,gBAAgB,OAAO,CAAC,KAAM,IAAM,IAAM,IAAM,IAAM,IAAM,IAAM,EAAI,CAAC,GAAG;AAC5E,WAAO;AAAA,EACT;AACA,MACE,gBAAgB,OAAO,CAAC,IAAM,IAAM,IAAM,IAAM,IAAM,EAAI,CAAC,KAC3D,gBAAgB,OAAO,CAAC,IAAM,IAAM,IAAM,IAAM,IAAM,EAAI,CAAC,GAC3D;AACA,WAAO;AAAA,EACT;AACA,MACE,gBAAgB,OAAO,CAAC,IAAM,IAAM,IAAM,EAAI,CAAC,KAC/C,MAAM,CAAC,MAAM,MACb,MAAM,CAAC,MAAM,MACb,MAAM,EAAE,MAAM,MACd,MAAM,EAAE,MAAM,IACd;AACA,WAAO;AAAA,EACT;AACA,MAAI,gBAAgB,OAAO,CAAC,IAAM,IAAM,IAAM,IAAM,EAAI,CAAC,EAAG,QAAO;AACnE,MACE,gBAAgB,OAAO,CAAC,IAAM,IAAM,GAAM,CAAI,CAAC,KAC/C,gBAAgB,OAAO,CAAC,IAAM,IAAM,GAAM,CAAI,CAAC,KAC/C,gBAAgB,OAAO,CAAC,IAAM,IAAM,GAAM,CAAI,CAAC,GAC/C;AACA,WAAO;AAAA,EACT;AACA,MAAI,iBAAiB,KAAK,EAAG,QAAO;AACpC,SAAO;AACT;AAEA,IAAM,wBAAwB,CAAC,WAA+B;AAC5D,QAAM,SAAS,OAAO,MAAM,GAAG,KAAK,IAAI,OAAO,QAAQ,EAAE,CAAC;AAC1D,QAAM,SAAS,KAAK,MAAM;AAC1B,QAAM,QAAQ,IAAI,WAAW,OAAO,MAAM;AAC1C,WAAS,QAAQ,GAAG,QAAQ,OAAO,QAAQ,SAAS,GAAG;AACrD,UAAM,KAAK,IAAI,OAAO,WAAW,KAAK;AAAA,EACxC;AACA,SAAO;AACT;AAEA,IAAM,0BAA0B,CAAC,WAC/B,cAAc,sBAAsB,MAAM,CAAC;AAI7C,IAAM,qBAAqB,CAAC,UAAqC;AAC/D,MAAI,SAAS;AAEb,MAAI;AACF,aAAS,KAAK,gBAAgB,OAAO,QAAQ,CAAC;AAAA,EAChD,QAAQ;AACN,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,IAAI,WAAW,OAAO,MAAM;AAC1C,WAAS,QAAQ,GAAG,QAAQ,OAAO,QAAQ,SAAS,GAAG;AACrD,UAAM,KAAK,IAAI,OAAO,WAAW,KAAK;AAAA,EACxC;AACA,SAAO;AACT;AAEA,IAAM,mBAAmB,CAAC,UAAqC;AAC7D,QAAM,QAAQ,mBAAmB,KAAK;AACtC,SAAO,QAAQ,EAAE,IAAI,MAAM,MAAM,IAAI,EAAE,IAAI,MAAM;AACnD;AAEA,IAAM,eAAe,CAAC,UAAsC;AAC1D,MAAI,iBAAiB,WAAY,QAAO;AACxC,MAAI,iBAAiB,YAAa,QAAO,IAAI,WAAW,KAAK;AAC7D,MAAI,YAAY,OAAO,KAAK,GAAG;AAC7B,UAAM,OAAO;AACb,WAAO,IAAI,WAAW,KAAK,QAAQ,KAAK,YAAY,KAAK,UAAU;AAAA,EACrE;AACA,MAAI,MAAM,QAAQ,KAAK,KAAK,MAAM,MAAM,CAAC,MAAM,OAAO,MAAM,QAAQ,GAAG;AACrE,WAAO,IAAI,WAAW,KAA0B;AAAA,EAClD;AACA,SAAO;AACT;AAEA,IAAM,uBAAuB,CAAC,UAC5B,OAAO,UAAU,YACjB,UAAU,QACV,CAAC,MAAM,QAAQ,KAAK,KACpB,OAAO,UAAU,eAAe,KAAK,OAAO,YAAY,IACnD,MAAkC,aACnC;AAEN,IAAM,iBAAiB,CAAC,QAAwC,aAC9DA,QAAO,UAAU,QAAQ,MAAM,QAAQ;AAEzC,IAAM,mBAAmB,CAAC,MAAyB,aACjDA,QAAO,UAAU,KAAK,UAAU,MAAM,QAAQ;AAEhD,IAAM,mBAAmB,CAAC,SACxBA,QAAO,UAAU,KAAK,UAAU,MAAM,QAAQ;AAEhD,IAAM,oBAAoB,CAAC,MAAe,SAAkD;AAC1F,MAAI,OAAO,SAAS,YAAY,SAAS,QAAQ,MAAM,QAAQ,IAAI,EAAG,QAAO;AAC7E,QAAM,SAAS;AACf,QAAM,YAAY,eAAe,KAAK,WAAW,MAAM;AACvD,QAAM,UAAU,OAAO,SAAS;AAChC,MAAI,OAAO,YAAY,SAAU,QAAO;AAExC,QAAM,OAAO,gBAAgB,SAAS,iBAAiB,IAAI,CAAC;AAC5D,QAAM,YAAYA,QAAO,eAAe,KAAK,SAAS;AACtD,QAAM,aACJ,aAAa,OAAO,OAAO,SAAS,MAAM,WACtC,OAAO,SAAS,IAChB,qBAAqB,IAAI;AAC/B,QAAM,iBAAiB,iBAAiB,MAAM,0BAA0B;AAExE,SAAO;AAAA,IACL,MAAM;AAAA,IACN,UAAU,kBAAkB,cAAc,IACrC,wBAAwB,IAAI,KAAK,iBAClC;AAAA,IACJ,UAAU;AAAA,IACV;AAAA,IACA;AAAA,EACF;AACF;AAEA,IAAM,sBAAsB,CAC1B,OACA,MACA,gBACkB;AAClB,QAAM,iBAAiB,eAAe,iBAAiB,MAAM,0BAA0B;AACvF,SAAO;AAAA,IACL,MAAM;AAAA,IACN,UAAU,kBAAkB,cAAc,IACrC,cAAc,KAAK,KAAK,iBACzB;AAAA,IACJ,UAAU;AAAA,IACV,MAAM,cAAc,KAAK;AAAA,IACzB,YAAY,MAAM;AAAA,EACpB;AACF;AAQA,IAAM,gBAAgB,CAAC,UAAmC;AACxD,QAAM,OAAO,IAAI,YAAY,MAAM,UAAU;AAC7C,MAAI,WAAW,IAAI,EAAE,IAAI,KAAK;AAC9B,SAAO;AACT;AAcA,IAAM,qBAAmC;AAAA,EACvC,OAAO;AAAA,EACP,SAAS;AAAA,EACT,eAAe;AACjB;AAEA,IAAM,sBAAsB,CAAC,MAAgD;AAC3E,MAAI,CAAC,EAAG,QAAO;AACf,SAAO;AAAA,IACL,OAAOA,QAAO,UAAU,EAAE,OAAO,MAAM,mBAAmB,KAAK;AAAA,IAC/D,SAASA,QAAO,UAAU,EAAE,SAAS,MAAM,mBAAmB,OAAO;AAAA,IACrE,eAAeA,QAAO,UAAU,EAAE,eAAe,MAAM,mBAAmB,aAAa;AAAA,EACzF;AACF;AAEA,IAAM,kBAAkB,CAAC,GAAY,kBAAmC;AACtE,QAAM,MAAM,OAAO,MAAM,YAAY,MAAM,OAAO,KAAK,UAAU,CAAC,IAAI,OAAO,CAAC;AAC9E,SAAO,oBAAoB,KAAK,aAAa;AAC/C;AAOA,IAAM,0BAA0B,CAC9B,OACA,aACW;AACX,QAAM,QAAkB,CAAC;AACzB,aAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,KAAK,GAAG;AAC9C,QAAI,QAAQ,UAAa,QAAQ,KAAM;AACvC,UAAM,EAAE,OAAO,SAAS,cAAc,IAAI,oBAAoB,WAAW,GAAG,CAAC;AAC7E,UAAM,SAAS,mBAAmB,GAAG;AAErC,QAAI,MAAM,QAAQ,GAAG,GAAG;AACtB,UAAI,SAAS;AACX,mBAAW,KAAK,KAAK;AACnB,gBAAM,KAAK,GAAG,MAAM,IAAI,gBAAgB,GAAG,aAAa,CAAC,EAAE;AAAA,QAC7D;AAAA,MACF,OAAO;AACL,cAAM,MAAM,UAAU,mBAAmB,MAAM,UAAU,kBAAkB,MAAM;AACjF,cAAM;AAAA,UACJ,GAAG,MAAM,IAAI;AAAA,YACX,IAAI,IAAI,CAAC,MAAO,OAAO,MAAM,WAAW,KAAK,UAAU,CAAC,IAAI,OAAO,CAAC,CAAE,EAAE,KAAK,GAAG;AAAA,YAChF;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AACA;AAAA,IACF;AAEA,QAAI,OAAO,QAAQ,UAAU;AAC3B,YAAM,UAAU,OAAO,QAAQ,GAA8B,EAAE;AAAA,QAC7D,CAAC,CAAC,EAAE,CAAC,MAAM,MAAM,UAAa,MAAM;AAAA,MACtC;AACA,UAAI,UAAU,cAAc;AAC1B,mBAAW,CAAC,QAAQ,MAAM,KAAK,SAAS;AAItC,gBAAM;AAAA,YACJ,GAAG,mBAAmB,GAAG,GAAG,IAAI,MAAM,GAAG,CAAC,IAAI,gBAAgB,QAAQ,aAAa,CAAC;AAAA,UACtF;AAAA,QACF;AAAA,MACF,WAAW,SAAS;AAElB,mBAAW,CAAC,QAAQ,MAAM,KAAK,SAAS;AACtC,gBAAM,KAAK,GAAG,mBAAmB,MAAM,CAAC,IAAI,gBAAgB,QAAQ,aAAa,CAAC,EAAE;AAAA,QACtF;AAAA,MACF,OAAO;AAEL,cAAM,OAAO,QAAQ,QAAQ,CAAC,CAAC,GAAG,CAAC,MAAM;AAAA,UACvC;AAAA,UACA,OAAO,MAAM,WAAW,KAAK,UAAU,CAAC,IAAI,OAAO,CAAC;AAAA,QACtD,CAAC;AACD,cAAM,KAAK,GAAG,MAAM,IAAI,gBAAgB,KAAK,KAAK,GAAG,GAAG,aAAa,CAAC,EAAE;AAAA,MAC1E;AACA;AAAA,IACF;AAEA,UAAM,KAAK,GAAG,MAAM,IAAI,gBAAgB,KAAK,aAAa,CAAC,EAAE;AAAA,EAC/D;AACA,SAAO,MAAM,KAAK,GAAG;AACvB;AAaA,IAAM,uBAAuB,CAC3B,OACA,aACmB;AACnB,QAAM,MAAyC,CAAC;AAChD,aAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,KAAK,GAAG;AAC9C,QAAI,QAAQ,UAAa,QAAQ,KAAM;AAEvC,UAAM,WAAW,WAAW,GAAG,IAC3BA,QAAO,eAAe,SAAS,GAAG,EAAG,WAAW,IAChD;AAKJ,QAAI,UAAU;AACZ,YAAM,SAAS,SAAS,WAAW,kBAAkB,KAAK,SAAS,SAAS,OAAO;AACnF,YAAM,aACJ,OAAO,QAAQ,WACX,MACA,SACE,KAAK,UAAU,GAAG,IAClB,OAAO,QAAQ,WACb,KAAK,UAAU,GAAG,IAClB,OAAO,GAAG;AACpB,UAAI,GAAG,IAAI,IAAI,KAAK,CAAC,UAAU,GAAG,EAAE,MAAM,SAAS,CAAC;AACpD;AAAA,IACF;AAEA,QACE,OAAO,QAAQ,YACf,OAAO,QAAQ,YACf,OAAO,QAAQ,aACf,eAAe,QACd,OAAO,SAAS,eAAe,eAAe,MAC/C;AACA,UAAI,GAAG,IAAI;AACX;AAAA,IACF;AACA,QAAI,MAAM,QAAQ,GAAG,GAAG;AACtB,UAAI,GAAG,IAAI,IAAI;AAAA,QAAI,CAAC,MAClB,OAAO,MAAM,YACb,OAAO,MAAM,YACb,OAAO,MAAM,aACb,aAAa,QACZ,OAAO,SAAS,eAAe,aAAa,OACxC,IACD,KAAK,UAAU,CAAC;AAAA,MACtB;AACA;AAAA,IACF;AACA,UAAM,QAAQ,aAAa,GAAG;AAC9B,QAAI,OAAO;AACT,UAAI,GAAG,IAAI,IAAI,KAAK,CAAC,cAAc,KAAK,CAAC,CAAC;AAC1C;AAAA,IACF;AACA,QAAI,GAAG,IAAI,KAAK,UAAU,GAAG;AAAA,EAC/B;AACA,SAAO;AACT;AAiBA,IAAM,mBAAmB,CACvB,SACA,aACA,WACA,aACwC;AACxC,MAAI,kBAAkB,WAAW,GAAG;AAGlC,QAAI,OAAO,cAAc,UAAU;AACjC,aAAO,kBAAkB,SAAS,SAAS,WAAW,WAAW;AAAA,IACnE;AACA,WAAO,kBAAkB,eAAe,SAAS,SAAS;AAAA,EAC5D;AAEA,MAAI,iBAAiB,WAAW,GAAG;AACjC,QAAI,OAAO,cAAc,UAAU;AACjC,aAAO,kBAAkB,SAAS,SAAS,WAAW,WAAW;AAAA,IACnE;AACA,QAAI,OAAO,cAAc,YAAY,cAAc,QAAQ,CAAC,MAAM,QAAQ,SAAS,GAAG;AAGpF,YAAM,aAAa,wBAAwB,WAAsC,QAAQ;AACzF,aAAO,kBAAkB,SAAS,SAAS,YAAY,WAAW;AAAA,IACpE;AAEA,WAAO,kBAAkB;AAAA,MACvB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,MAAI,oBAAoB,WAAW,GAAG;AACpC,QAAI,qBAAqB,UAAU;AACjC,aAAO,kBAAkB,aAAa,SAAS,SAAS;AAAA,IAC1D;AACA,QAAI,OAAO,cAAc,YAAY,cAAc,MAAM;AACvD,aAAO,kBAAkB;AAAA,QACvB;AAAA,QACA,qBAAqB,WAAsC,QAAQ;AAAA,MACrE;AAAA,IACF;AAIA,WAAO,kBAAkB,SAAS,SAAS,OAAO,SAAS,GAAG,WAAW;AAAA,EAC3E;AAEA,MAAI,cAAc,WAAW,GAAG;AAC9B,UAAME,SAAQ,aAAa,SAAS;AACpC,QAAIA,OAAO,QAAO,kBAAkB,eAAe,SAASA,QAAO,WAAW;AAC9E,QAAI,OAAO,cAAc,UAAU;AACjC,aAAO,kBAAkB,SAAS,SAAS,WAAW,WAAW;AAAA,IACnE;AAEA,WAAO,kBAAkB,SAAS,SAAS,KAAK,UAAU,SAAS,GAAG,WAAW;AAAA,EACnF;AAEA,MAAI,iBAAiB,WAAW,KAAK,kBAAkB,WAAW,GAAG;AACnE,QAAI,OAAO,cAAc,UAAU;AACjC,aAAO,kBAAkB,SAAS,SAAS,WAAW,WAAW;AAAA,IACnE;AACA,UAAMA,SAAQ,aAAa,SAAS;AACpC,QAAIA,OAAO,QAAO,kBAAkB,eAAe,SAASA,QAAO,WAAW;AAG9E,WAAO,kBAAkB,SAAS,SAAS,KAAK,UAAU,SAAS,GAAG,WAAW;AAAA,EACnF;AAGA,MAAI,OAAO,cAAc,UAAU;AACjC,WAAO,kBAAkB,SAAS,SAAS,WAAW,WAAW;AAAA,EACnE;AACA,QAAM,QAAQ,aAAa,SAAS;AACpC,MAAI,MAAO,QAAO,kBAAkB,eAAe,SAAS,OAAO,WAAW;AAC9E,SAAO,kBAAkB,SAAS,SAAS,KAAK,UAAU,SAAS,GAAG,WAAW;AACnF;AAMO,IAAM,SAASD,QAAO,GAAG,gBAAgB,EAAE,WAChD,WACA,MACA,iBACA,oBAA4C,CAAC,GAC7C;AACA,QAAM,SAAS,OAAO,WAAW;AAEjC,SAAOA,QAAO,oBAAoB;AAAA,IAChC,eAAe,UAAU,OAAO,YAAY;AAAA,IAC5C,cAAc,UAAU;AAAA,IACxB,yBAAyB,UAAU,OAAO,YAAY;AAAA,IACtD,gCAAgC,UAAU;AAAA,IAC1C,yCAAyC,OAAO,KAAK,eAAe,EAAE;AAAA,EACxE,CAAC;AAED,QAAM,eAAe,OAAO,YAAY,UAAU,cAAc,MAAM,UAAU,UAAU;AAE1F,QAAM,OAAO,aAAa,WAAW,GAAG,IAAI,eAAe,IAAI,YAAY;AAE3E,MAAI,UAAU,kBAAkB,KAAK,UAAU,OAAO,YAAY,CAAU,EAAE,IAAI;AAIlF,YAAU,kBAAkB,UAAU,SAAS,cAAc,kBAAkB;AAE/E,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,iBAAiB,GAAG;AAC7D,cAAU,kBAAkB,YAAY,SAAS,MAAM,KAAK;AAAA,EAC9D;AAEA,aAAW,SAAS,UAAU,YAAY;AACxC,QAAI,MAAM,aAAa,QAAS;AAChC,UAAM,QAAQ,eAAe,MAAM,KAAK;AACxC,eAAW,cAAc,iBAAiB,OAAO,KAAK,GAAG;AACvD,gBAAU,kBAAkB,eAAe,SAAS,MAAM,MAAM,UAAU;AAAA,IAC5E;AAAA,EACF;AAEA,aAAW,SAAS,UAAU,YAAY;AACxC,QAAI,MAAM,aAAa,SAAU;AACjC,UAAM,QAAQ,eAAe,MAAM,KAAK;AACxC,QAAI,UAAU,UAAa,UAAU,KAAM;AAC3C,cAAU,kBAAkB,UAAU,SAAS,MAAM,MAAM,OAAO,KAAK,CAAC;AAAA,EAC1E;AAEA,MAAID,QAAO,OAAO,UAAU,WAAW,GAAG;AACxC,UAAM,KAAK,UAAU,YAAY;AACjC,UAAM,cAAcA,QAAO,eAAe,GAAG,QAAQ;AACrD,UAAM,cAAc,OAAO,KAAK,gBAAgB,WAAW,KAAK,cAAc;AAC9E,UAAM,qBAAqB,aAAa,KAAK,CAAC,MAAM,cAAc,EAAE,WAAW,CAAC;AAChF,UAAM,yBAAyB,QAAQ,kBAAkB,KAAK,cAAc,GAAG,WAAW;AAC1F,UAAM,gBAAgB,OAAO,UAAU,eAAe,KAAK,MAAM,YAAY;AAC7E,UAAM,gBAAgB,KAAK;AAC3B,UAAM,aACJ,OAAO,kBAAkB,WAAW,iBAAiB,aAAa,IAAI;AAExE,QAAI,iBAAiB,OAAO,kBAAkB,UAAU;AACtD,aAAO,OAAO,IAAI,uBAAuB;AAAA,QACvC,SAAS;AAAA,QACT,YAAYA,QAAO,KAAK;AAAA,MAC1B,CAAC;AAAA,IACH;AACA,QAAI,YAAY,OAAO,OAAO;AAC5B,aAAO,OAAO,IAAI,uBAAuB;AAAA,QACvC,SAAS;AAAA,QACT,YAAYA,QAAO,KAAK;AAAA,MAC1B,CAAC;AAAA,IACH;AACA,QAAI,YAAY,OAAO,QAAQ,CAAC,wBAAwB;AACtD,aAAO,OAAO,IAAI,uBAAuB;AAAA,QACvC,SAAS;AAAA,QACT,YAAYA,QAAO,KAAK;AAAA,MAC1B,CAAC;AAAA,IACH;AACA,QAAI,YAAY,OAAO,QAAQ,eAAe,CAAC,cAAc,WAAW,GAAG;AACzE,aAAO,OAAO,IAAI,uBAAuB;AAAA,QACvC,SAAS;AAAA,QACT,YAAYA,QAAO,KAAK;AAAA,MAC1B,CAAC;AAAA,IACH;AAEA,UAAM,eAAe,KAAK,QAAQ,KAAK;AACvC,UAAM,sBAAsB,qBAAqB,YAAY;AAC7D,UAAM,sBAAsB,wBAAwB;AACpD,UAAM,mBACJ,OAAO,wBAAwB,WAAW,iBAAiB,mBAAmB,IAAI;AAEpF,QAAI,uBAAuB,OAAO,wBAAwB,UAAU;AAClE,aAAO,OAAO,IAAI,uBAAuB;AAAA,QACvC,SAAS;AAAA,QACT,YAAYA,QAAO,KAAK;AAAA,MAC1B,CAAC;AAAA,IACH;AACA,QAAI,kBAAkB,OAAO,OAAO;AAClC,aAAO,OAAO,IAAI,uBAAuB;AAAA,QACvC,SAAS;AAAA,QACT,YAAYA,QAAO,KAAK;AAAA,MAC1B,CAAC;AAAA,IACH;AACA,QAAI,kBAAkB,OAAO,QAAQ,CAAC,wBAAwB;AAC5D,aAAO,OAAO,IAAI,uBAAuB;AAAA,QACvC,SAAS;AAAA,QACT,YAAYA,QAAO,KAAK;AAAA,MAC1B,CAAC;AAAA,IACH;AACA,QAAI,kBAAkB,OAAO,QAAQ,eAAe,CAAC,cAAc,WAAW,GAAG;AAC/E,aAAO,OAAO,IAAI,uBAAuB;AAAA,QACvC,SAAS;AAAA,QACT,YAAYA,QAAO,KAAK;AAAA,MAC1B,CAAC;AAAA,IACH;AAEA,UAAM,aAAa,YAAY,OAAO,OAAO,aAAa;AAC1D,UAAM,YAAY,YAAY,OAAO,OAAO,WAAW,QAAQ;AAC/D,QAAI,GAAG,YAAY,cAAc,QAAW;AAC1C,aAAO,OAAO,IAAI,uBAAuB;AAAA,QACvC,SAAS,yBACL,wDACA;AAAA,QACJ,YAAYA,QAAO,KAAK;AAAA,MAC1B,CAAC;AAAA,IACH;AACA,QAAI,cAAc,QAAW;AAI3B,YAAM,WACJ,YAAY,OAAO,QAAQ,qBACvB,qBACA,eAAe,cACb,YAAY,KAAK,CAAC,MAAM,EAAE,gBAAgB,WAAW,IACrD;AACR,YAAM,WACJ,YAAY,OAAO,QAAQ,CAAC,sBAAsB,cAAc,GAAG,WAAW,IAC1E,GAAG,cACF,UAAU,eAAe,GAAG;AACnC,UAAI,cAAc,QAAQ,KAAK,aAAa,SAAS,MAAM,MAAM;AAC/D,eAAO,OAAO,IAAI,uBAAuB;AAAA,UACvC,SAAS;AAAA,UACT,YAAYA,QAAO,KAAK;AAAA,QAC1B,CAAC;AAAA,MACH;AACA,YAAM,iBAAiB,WACnBA,QAAO,eAAe,SAAS,QAAQ,IACvC,eAAe,YAAY,CAAC,IAC1BA,QAAO,eAAe,YAAY,CAAC,EAAE,QAAQ,IAC7C;AACN,gBAAU,iBAAiB,SAAS,UAAU,WAAW,cAAc;AAAA,IACzE;AAAA,EACF;AAEA,YAAU,aAAa,SAAS,eAAe;AAE/C,QAAM,WAAW,OAAO,OAAO,QAAQ,OAAO,EAAE;AAAA,IAC9CC,QAAO;AAAA,MACL,CAAC,QACC,IAAI,uBAAuB;AAAA,QACzB,SAAS;AAAA,QACT,YAAYD,QAAO,KAAK;AAAA,QACxB,OAAO;AAAA,MACT,CAAC;AAAA,IACL;AAAA,EACF;AAEA,QAAM,SAAS,SAAS;AACxB,SAAOC,QAAO,oBAAoB;AAAA,IAChC,oBAAoB;AAAA,EACtB,CAAC;AACD,QAAM,kBAA0C,EAAE,GAAG,SAAS,QAAQ;AAEtE,QAAM,cAAc,SAAS,QAAQ,cAAc,KAAK;AACxD,QAAM,eAAeA,QAAO;AAAA,IAC1B,CAAC,QACC,IAAI,uBAAuB;AAAA,MACzB,SAAS;AAAA,MACT,YAAYD,QAAO,KAAK,MAAM;AAAA,MAC9B,OAAO;AAAA,IACT,CAAC;AAAA,EACL;AACA,QAAM,sBAAsBA,QAAO,eAAe,UAAU,YAAY;AACxE,QAAM,WAAW,sBACbA,QAAO,eAAe,oBAAoB,QAAQ,IAClD;AACJ,QAAM,KAAK,UAAU,OAAO,SAAS;AACrC,QAAM,eACJ,WAAW,MACP,OACA,MAAM,UAAU,SAAS,mBACvB;AAAA,IACE,IAAI,WAAW,OAAO,SAAS,YAAY,KAAK,YAAY,CAAC;AAAA,IAC7D;AAAA,IACA;AAAA,EACF,IACA,kBAAkB,WAAW,IAC3B,OAAO,SAAS,KAAK;AAAA,IACnBC,QAAO,MAAM,MAAM,SAAS,IAAI;AAAA,IAChC;AAAA,EACF,IACA,OAAO,SAAS,KAAK,KAAK,YAAY;AAEhD,QAAM,WACJ,MAAM,UAAU,SAAS,cACpB,kBAAkB,cAAc,QAAQ,KAAK,eAC9C;AACN,SAAO,iBAAiB,KAAK;AAAA,IAC3B;AAAA,IACA,SAAS;AAAA,IACT,MAAM,KAAK,WAAW;AAAA,IACtB,OAAO,KAAK,OAAO;AAAA,EACrB,CAAC;AACH,CAAC;AAID,IAAM,qBAAqB,CACzB,SACA,WACA,YACW;AACX,MAAI,QAAS,QAAO;AACpB,MAAI,QAAQ,WAAW,EAAG,QAAO;AAEjC,QAAM,MACJ,OAAO,cAAc,YAAY,cAAc,QAAQ,CAAC,MAAM,QAAQ,SAAS,IAC3E,YACA,CAAC;AAEP,QAAM,SAAS,QAAQ,KAAK,CAAC,WAAW,OAAO,QAAQ,IAAI,GAAG,KAAK,QAAQ,CAAC;AAE5E,QAAM,YAAoC,CAAC;AAC3C,MAAI,OAAO,IAAI,cAAc,YAAY,IAAI,cAAc,MAAM;AAC/D,eAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,IAAI,SAAoC,GAAG;AACpF,UAAI,SAAS,QAAQ,UAAU,GAAI,WAAU,IAAI,IAAI,OAAO,KAAK;AAAA,IACnE;AAAA,EACF;AACA,SAAO,iBAAiB,OAAO,KAAKD,QAAO,eAAe,OAAO,SAAS,GAAG,SAAS;AACxF;AAMO,IAAM,kBAAkB,CAC7B,WACA,MACA,SACA,iBACA,mBACA,oBACG;AACH,QAAM,mBAAmB,mBAAmB,UAAU,WAAW,CAAC,GAAG,KAAK,QAAQ,OAAO;AACzF,QAAM,oBAAoB,mBACtB,MAAM;AAAA,IACJ,WAAW;AAAA,IACXC,QAAO;AAAA,MACLA,QAAO,QAAQ,WAAW,UAAU;AAAA,MACpC,WAAW,WAAW,kBAAkB,WAAW,gBAAgB,CAAC;AAAA,IACtE;AAAA,EACF,EAAE,KAAK,MAAM,QAAQ,eAAe,CAAC,IACrC;AAEJ,SAAO,OAAO,WAAW,MAAM,iBAAiB,iBAAiB,EAAE;AAAA,IACjEA,QAAO,QAAQ,iBAAiB;AAAA;AAAA;AAAA;AAAA;AAAA,IAKhCA,QAAO,IAAI,CAAC,WAAWA,QAAO,oBAAoB,EAAE,oBAAoB,OAAO,OAAO,CAAC,CAAC;AAAA,IACxFA,QAAO,SAAS,yBAAyB;AAAA,MACvC,YAAY;AAAA,QACV,yBAAyB,UAAU,OAAO,YAAY;AAAA,QACtD,gCAAgC,UAAU;AAAA,QAC1C,2BAA2B;AAAA,MAC7B;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAMA,IAAM,mBAAmB,oBAAI,IAAI,CAAC,QAAQ,OAAO,SAAS,QAAQ,CAAC;AAE5D,IAAM,0BAA0B,CACrC,QACA,iBACiE;AACjE,QAAM,IAAI,OAAO,YAAY;AAC7B,MAAI,CAAC,iBAAiB,IAAI,CAAC,EAAG,QAAO,CAAC;AACtC,SAAO;AAAA,IACL,kBAAkB;AAAA,IAClB,qBAAqB,GAAG,OAAO,YAAY,CAAC,IAAI,YAAY;AAAA,EAC9D;AACF;;;AC96BA,SAAS,UAAAE,SAAQ,UAAAC,SAAQ,UAAAC,eAAc;AAIvC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAMK;AAsBP,IAAM,uBAAuB;AAC7B,IAAM,sBAAsBC,QAAO,OAAO,EAAE,SAASA,QAAO,OAAO,CAAC;AACpE,IAAM,2BAA2BA,QAAO,OAAO,EAAE,cAAcA,QAAO,OAAO,CAAC;AAC9E,IAAM,0BAA0BA,QAAO,OAAO,EAAE,OAAO,oBAAoB,CAAC;AAC5E,IAAM,0BAA0BA,QAAO,OAAO;AAAA,EAC5C,QAAQA,QAAO;AAAA,IACbA,QAAO,OAAO;AAAA,MACZ,QAAQA,QAAO,SAASA,QAAO,MAAM;AAAA,MACrC,SAASA,QAAO,SAASA,QAAO,MAAM;AAAA,MACtC,OAAOA,QAAO,SAASA,QAAO,MAAM;AAAA,IACtC,CAAC;AAAA,EACH;AACF,CAAC;AACD,IAAM,0BAA0BA,QAAO,OAAO;AAAA,EAC5C,QAAQA,QAAO,SAASA,QAAO,MAAM;AAAA,EACrC,OAAOA,QAAO,SAASA,QAAO,MAAM;AAAA,EACpC,aAAaA,QAAO,SAASA,QAAO,MAAM;AAC5C,CAAC;AAED,IAAM,4BAA4BA,QAAO,oBAAoB,mBAAmB;AAChF,IAAM,iCAAiCA,QAAO,oBAAoB,wBAAwB;AAC1F,IAAM,gCAAgCA,QAAO,oBAAoB,uBAAuB;AACxF,IAAM,gCAAgCA,QAAO,oBAAoB,uBAAuB;AACxF,IAAM,gCAAgCA,QAAO,oBAAoB,uBAAuB;AAExF,IAAM,mBAAmB,CAAC,UAA2B;AACnD,MAAI;AAEJ,MAAI;AACF,QAAI,KAAK,UAAU,KAAK;AAAA,EAC1B,QAAQ;AACN,QAAI,OAAO,KAAK;AAAA,EAClB;AACA,SAAO,EAAE,SAAS,uBAAuB,GAAG,EAAE,MAAM,GAAG,oBAAoB,CAAC,WAAM;AACpF;AAEA,IAAM,gBAAgB,IAAI,WACxB,OAAO,KAAK,CAAC,UAAU,UAAU,UAAa,MAAM,SAAS,CAAC;AAEzD,IAAM,gCAAgC,CAAC,MAAe,WAA2B;AACtF,MAAI,OAAO,SAAS,UAAU;AAC5B,WAAO,KAAK,SAAS,IAAI,OAAO,0BAA0B,MAAM;AAAA,EAClE;AACA,QAAM,SAASC,QAAO,eAAe,8BAA8B,IAAI,CAAC;AACxE,QAAM,cAAcA,QAAO,eAAe,0BAA0B,IAAI,CAAC;AACzE,QAAM,mBAAmBA,QAAO,eAAe,+BAA+B,IAAI,CAAC;AACnF,QAAM,aAAaA,QAAO,eAAe,8BAA8B,IAAI,CAAC;AAC5E,QAAM,kBAAkBA,QAAO,eAAe,8BAA8B,IAAI,CAAC;AACjF,QAAM,eAAe,YAAY,OAC9B;AAAA,IACC,CAAC;AAAA,MACC;AAAA,MACA,SAAS;AAAA,MACT;AAAA,IACF,MAIM,cAAc,QAAQ,iBAAiB,KAAK;AAAA,EACpD,EACC,KAAK,CAACC,aAAgCA,aAAY,MAAS;AAC9D,QAAM,UAAU;AAAA,IACd,QAAQ,MAAM;AAAA,IACd,aAAa;AAAA,IACb,kBAAkB;AAAA,IAClB;AAAA,IACA,iBAAiB;AAAA,IACjB,iBAAiB;AAAA,IACjB,iBAAiB;AAAA,EACnB;AACA,MAAI,YAAY,OAAW,QAAO;AAClC,MAAI,SAAS,QAAQ,OAAO,SAAS,UAAU;AAC7C,WAAO,iBAAiB,IAAI;AAAA,EAC9B;AACA,SAAO,0BAA0B,MAAM;AACzC;AAEA,IAAM,yBAAyB,CAAC,YAW9B,gBAAgB;AAAA,EACd,MAAM,QAAQ;AAAA,EACd,SAAS,QAAQ;AAAA,EACjB,QAAQ,EAAE,IAAI,QAAQ,aAAa,OAAO,QAAQ,MAAM;AAAA,EACxD,YAAY;AAAA,IACV,MAAM,QAAQ;AAAA,IACd,GAAI,QAAQ,kBAAkB,EAAE,OAAO,QAAQ,gBAAgB,IAAI,CAAC;AAAA,EACtE;AAAA,EACA,GAAI,QAAQ,WAAW,SAAY,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,EACjE,GAAI,QAAQ,YAAY,SACpB;AAAA,IACE,UAAU;AAAA,MACR,GAAI,QAAQ,WAAW,SAAY,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,MACjE,SAAS,QAAQ;AAAA,IACnB;AAAA,EACF,IACA,CAAC;AACP,CAAC;AAGI,IAAM,uBAAuB,CAAC,SAA2B;AAC9D,MAAI,QAAQ,QAAQ,OAAO,SAAS,SAAU,QAAO;AACrD,MAAI,MAAM,QAAQ,IAAI,GAAG;AACvB,QAAIC,WAAU;AACd,UAAM,MAAM,KAAK,IAAI,CAAC,SAAS;AAC7B,YAAM,IAAI,qBAAqB,IAAI;AACnC,UAAI,MAAM,KAAM,CAAAA,WAAU;AAC1B,aAAO;AAAA,IACT,CAAC;AACD,WAAOA,WAAU,MAAM;AAAA,EACzB;AAEA,QAAM,MAAM;AAEZ,MAAI,OAAO,IAAI,SAAS,UAAU;AAChC,UAAM,QAAQ,IAAI,KAAK,MAAM,gCAAgC;AAC7D,QAAI,MAAO,QAAO,EAAE,GAAG,KAAK,MAAM,WAAW,MAAM,CAAC,CAAC,GAAG;AACxD,WAAO;AAAA,EACT;AAEA,MAAI,UAAU;AACd,QAAM,SAAkC,CAAC;AACzC,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,GAAG,GAAG;AACxC,UAAM,IAAI,qBAAqB,CAAC;AAChC,QAAI,MAAM,EAAG,WAAU;AACvB,WAAO,CAAC,IAAI;AAAA,EACd;AACA,SAAO,UAAU,SAAS;AAC5B;AAEA,IAAM,YAAY,CAAC,QACjB,iBAAiB,KAAK;AAAA,EACpB,QAAQ,IAAI,UAAU;AAAA,EACtB,SAAS,IAAI,UAAU;AAAA,EACvB,cAAc,IAAI,UAAU;AAAA,EAC5B,YAAY,CAAC,GAAG,IAAI,UAAU,UAAU;AAAA,EACxC,aAAa,IAAI,UAAU;AAAA,EAC3B,cAAc,IAAI,UAAU;AAC9B,CAAC;AAEH,IAAM,iBAAiB,CAAC,QAAgC;AACtD,QAAM,KAAK,IAAI;AACf,SAAOF,QAAO;AAAA,IAAU,GAAG;AAAA,IAAa,MACtCA,QAAO,UAAU,GAAG,SAAS,MAAM,GAAG,GAAG,OAAO,YAAY,CAAC,IAAI,GAAG,YAAY,EAAE;AAAA,EACpF;AACF;AASA,IAAM,mBACJ;AAIF,IAAM,mBAAmB,CAAC,aAAqB,gBAC7C,cAAc,GAAG,WAAW;AAAA;AAAA,EAAO,gBAAgB,KAAK;AASnD,IAAM,yBAAyB,CACpC,QAEAG,QAAO,IAAI,aAAa;AACtB,QAAM,SAAS,OAAO,QAAQ,GAAG;AACjC,QAAM,cAAuC,CAAC;AAC9C,MAAI,IAAI,YAAY,SAAS;AAC3B,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,IAAI,WAAW,OAAO,GAAG;AAC3D,kBAAY,CAAC,IAAI,qBAAqB,CAAC;AAAA,IACzC;AAAA,EACF;AACA,SAAO;AAAA,IACL,aAAa,uBAAuB,OAAO,UAAU;AAAA,IACrD;AAAA,IACA,OAAOH,QAAO,eAAe,OAAO,KAAK;AAAA,IACzC,aAAaA,QAAO,eAAe,OAAO,WAAW;AAAA,EACvD;AACF,CAAC;AAEI,IAAM,qBAAqB,CAChC,aAEAG,QAAO,IAAI,aAAa;AACtB,QAAM,MAAM,OAAO,MAAM,QAAQ;AACjC,SAAO,OAAO,uBAAuB,GAAG;AAC1C,CAAC;AAEI,IAAM,8BAA8B,CAAC,aAC1C,SAAS,YAAY,IAAI,CAAC,QAAiB;AACzC,QAAM,cAAcH,QAAO,MAAM,IAAI,UAAU,cAAc;AAAA,IAC3D,QAAQ,MAAM;AAAA,IACd,QAAQ,CAAC,iBAAiBA,QAAO,OAAO,aAAa,QAAQ;AAAA,EAC/D,CAAC;AACD,SAAO;AAAA,IACL,MAAM,SAAS,KAAK,IAAI,QAAQ;AAAA,IAChC,aAAa,iBAAiB,eAAe,GAAG,GAAG,WAAW;AAAA,IAC9D,aAAa,qBAAqBA,QAAO,eAAe,IAAI,UAAU,WAAW,CAAC;AAAA,IAClF,cAAc,cACV,qBACA,qBAAqBA,QAAO,eAAe,IAAI,UAAU,YAAY,CAAC;AAAA,IAC1E,aAAa,wBAAwB,IAAI,UAAU,QAAQ,IAAI,UAAU,YAAY;AAAA,EACvF;AACF,CAAC;AAEI,IAAM,sCAAsC,CACjD,aACA,aAEA,SAAS,YAAY,IAAI,CAAC,SAAS;AAAA,EACjC;AAAA,EACA,UAAU,IAAI;AAAA,EACd,SAAS,UAAU,GAAG;AAAA,EACtB,aAAa,eAAe,GAAG;AACjC,EAAE;AAUG,IAAM,gBAAgB,CAAC,QAAgC;AAC5D,QAAM,UAAU,IAAI,YAAY;AAChC,MAAI,CAAC,QAAS,QAAO;AACrB,MAAI,OAAO;AACX,MAAI,QAAQ;AACZ,aAAW,CAAC,MAAM,MAAM,KAAK,OAAO,QAAQ,OAAO,GAAG;AACpD,UAAM,aAAa,KAAK,UAAU,qBAAqB,MAAM,CAAC;AAC9D,QAAI,eAAe,OAAW;AAC9B,YAAQ,GAAG,QAAQ,KAAK,GAAG,GAAG,KAAK,UAAU,IAAI,CAAC,IAAI,UAAU;AAChE,YAAQ;AAAA,EACV;AACA,SAAO,GAAG,IAAI;AAChB;AAaO,IAAM,yBAAyB,CAAC,cAAqC;AAC1E,MAAI,OAAO;AACX,MAAI,QAAQ;AACZ,aAAW,SAAS,UAAU,SAAS;AACrC,UAAM,QAAQ,WAAW,UAAU,MAAM,OAAO,CAAC;AACjD,QAAI,CAAC,MAAO;AACZ,UAAM,CAAC,MAAM,MAAM,IAAI;AACvB,UAAM,aAAa,KAAK,UAAU,qBAAqB,MAAM,CAAC;AAC9D,QAAI,eAAe,OAAW;AAC9B,YAAQ,GAAG,QAAQ,KAAK,GAAG,GAAG,KAAK,UAAU,IAAI,CAAC,IAAI,UAAU;AAChE,YAAQ;AAAA,EACV;AACA,SAAO,GAAG,IAAI;AAChB;AAEA,IAAM,WAAWD,QAAO,OAAOA,QAAO,QAAQA,QAAO,OAAO;AAI5D,IAAM,iBAAiBA,QAAO,oBAAoBA,QAAO,eAAe,QAAQ,CAAC;AAQjF,IAAM,6BAA6B,CAAC,OAAiC;AACnE,QAAM,UAAU,GAAG;AACnB,QAAM,cAAcC,QAAO,MAAM,QAAQ,cAAc;AAAA,IACrD,QAAQ,MAAM;AAAA,IACd,QAAQ,CAAC,iBAAiBA,QAAO,OAAO,aAAa,QAAQ;AAAA,EAC/D,CAAC;AACD,SAAO;AAAA,IACL,MAAM,SAAS,KAAK,GAAG,QAAQ;AAAA,IAC/B,aAAa;AAAA,MACX,GAAG,eAAe,GAAG,QAAQ,OAAO,YAAY,CAAC,IAAI,QAAQ,YAAY;AAAA,MACzE;AAAA,IACF;AAAA,IACA,aAAa;AAAA,MACX;AAAA,QACE,QAAQ;AAAA,QACRA,QAAO,eAAe,QAAQ,WAAW;AAAA,QACzC,QAAQ,WAAW,CAAC;AAAA,MACtB;AAAA,IACF;AAAA,IACA,cAAc,cACV,qBACAA,QAAO,MAAM,QAAQ,cAAc;AAAA,MACjC,QAAQ,MAAM;AAAA,MACd,QAAQ,CAAC,iBACP,qBAAqBA,QAAO,eAAe,aAAa,MAAM,CAAC;AAAA,IACnE,CAAC;AAAA,IACL,aAAa,wBAAwB,QAAQ,QAAQ,QAAQ,YAAY;AAAA,EAC3E;AACF;AAmBO,IAAM,qCAAqC,CAAC;AAAA,EACjD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAOEG,QAAO,IAAI,aAAa;AACtB,SAAO,QAAQ,iBAAiB,WAAW;AAC3C,QAAM,SAAS,OAAO;AAAA,IAAwB;AAAA,IAAK,aAAa;AAAA,IAAK,CAAC,UACpE,QAAQ;AAAA,MACN;AAAA,MACA,MAAM,IAAI,CAAC,UAAU;AAAA,QACnB;AAAA,QACA,UAAU,KAAK;AAAA,QACf,SAAS,KAAK;AAAA,QACd,aAAa,KAAK;AAAA,MACpB,EAAE;AAAA,IACJ;AAAA,EACF;AACA,MAAI,YAAY,MAAM;AACpB,WAAO,QAAQ,QAAQ,UAAU,cAAc,GAAG,CAAC;AAAA,EACrD;AACA,SAAO;AACT,CAAC;AAII,IAAM,+BAA+B,CAAC;AAAA,EAC3C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAUEA,QAAO,IAAI,aAAa;AACtB,QAAM,MAAM,OAAO,MAAM,QAAQ;AACjC,SAAO,OAAO,mCAAmC;AAAA,IAC/C;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACH,CAAC;AAiBI,IAAM,wCAAwC,CAAC;AAAA,EACpD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,MAQEA,QAAO,IAAI,aAAa;AACtB,QAAM,YAAY,gBAAgB,QAAQ;AAC1C,MAAI,CAAC,WAAW;AACd,WAAO,OAAO,IAAI,uBAAuB;AAAA,MACvC,SACE;AAAA,IACJ,CAAC;AAAA,EACH;AACA,SAAO,QAAQ,iBAAiB,WAAW;AAC3C,QAAM,SAAS,OAAO;AAAA,IACpB;AAAA,IACA,EAAE,WAAW,aAAa,KAAK,aAAa;AAAA,IAC5C,CAAC,UACC,QAAQ;AAAA,MACN;AAAA,MACA,MAAM,IAAI,CAAC,UAAU;AAAA,QACnB;AAAA,QACA,UAAU,KAAK;AAAA,QACf,SAAS,KAAK;AAAA,QACd,aAAa,KAAK;AAAA,MACpB,EAAE;AAAA,IACJ;AAAA,EACJ;AACA,MAAI,YAAY,MAAM;AACpB,WAAO,QAAQ,QAAQ,UAAU,uBAAuB,SAAS,CAAC;AAAA,EACpE;AACA,SAAO;AACT,CAAC;AAEI,IAAM,sBAAsB,CACjC,SACA,WAEA,OAAO,YAAY,OAAO,QAAQ,QAAQ,OAAO,QAAQ,IAAIA,QAAO,QAAQ,IAAI;AAY3E,IAAM,4BAA4B,CAAC;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AACF,MAKEA,QAAO,IAAI,aAAa;AACtB,QAAM,gBAAgB,+BAA+B,MAAM;AAC3D,MAAI,CAAC,cAAe,QAAO,EAAE,OAAO,CAAC,GAAG,aAAa,CAAC,EAAE;AACxD,MAAI,cAAc,YAAY,MAAM;AAClC,UAAM,WAAW,OAAO,QAAQ,QAAQ,cAAc,QAAQ;AAC9D,QAAI,YAAY,MAAM;AACpB,YAAM,cAAcH,QAAO,UAAU,eAAe,QAAQ,CAAC;AAC7D,UAAI,eAAe,MAAM;AACvB,cAAM,MAAM,OAAO,QAAQ,eAAe,OAAO,YAAY,IAAI,CAAC;AAClE,eAAO,EAAE,OAAO,IAAI,IAAI,0BAA0B,GAAG,YAAY;AAAA,MACnE;AAAA,IACF;AAAA,EACF;AACA,QAAM,WAAW,OAAO,oBAAoB,SAAS,aAAa;AAClE,MAAI,YAAY,KAAM,QAAO,EAAE,OAAO,CAAC,GAAG,aAAa,CAAC,EAAE;AAC1D,QAAM,WAAW,OAAO,mBAAmB,QAAQ,EAAE;AAAA,IACnDG,QAAO,MAAM,MAAMA,QAAO,QAAQ,IAAI,CAAC;AAAA,EACzC;AACA,MAAI,CAAC,SAAU,QAAO,EAAE,OAAO,CAAC,GAAG,aAAa,CAAC,EAAE;AACnD,SAAO;AAAA,IACL,OAAO,4BAA4B,QAAQ;AAAA,IAC3C,aAAa,SAAS;AAAA,EACxB;AACF,CAAC;AAEI,IAAM,0BAA0B,CAAC,UAOtCA,QAAO,IAAI,aAAa;AACtB,QAAM,cAAc,MAAM,QAAQ;AAClC,QAAM,SAAS,+BAA+B,MAAM,WAAW,MAAM;AAErE,MAAI,WAAW,OAAO,MAAM,IAAI,QAAQ,aAAa,aAAa,MAAM,QAAQ,IAAI,IAAI;AAMxF,MAAI,CAAC,WAAW,QAAQ;AACtB,UAAM,WAAW,OAAO,oBAAoB,MAAM,IAAI,SAAS,MAAM,EAAE;AAAA,MACrEA,QAAO,MAAM,MAAMA,QAAO,QAAQ,IAAI,CAAC;AAAA,IACzC;AACA,UAAM,WACJ,YAAY,OACR,OACA,OAAO,mBAAmB,QAAQ,EAAE,KAAKA,QAAO,MAAM,MAAMA,QAAO,QAAQ,IAAI,CAAC,CAAC;AACvF,cAAU,WACN,oCAAoC,aAAa,QAAQ,EAAE;AAAA,MACzD,CAAC,OAAO,GAAG,aAAa,MAAM,QAAQ;AAAA,IACxC,GAAG,UACH;AAAA,EACN;AACA,MAAI,CAAC,SAAS;AACZ,WAAO,OAAO,IAAI,uBAAuB;AAAA,MACvC,SAAS,wCAAwC,MAAM,QAAQ,IAAI,SAAS,WAAW;AAAA,IACzF,CAAC;AAAA,EACH;AAEA,QAAM,UAAkC,EAAE,GAAI,QAAQ,WAAW,CAAC,EAAG;AACrE,QAAM,cAAsC;AAAA,IAC1C,GAAI,QAAQ,eAAe,CAAC;AAAA,EAC9B;AAEA,QAAM,YAAY,QAAQ,0BAA0B,CAAC,GAAG;AAAA,IACtD,CAAC,UAAU,OAAO,MAAM,IAAI,MAAM,OAAO,MAAM,WAAW,QAAQ;AAAA,EACpE;AACA,MAAI,UAAU;AACZ,UAAM,UAAU,0BAA0B,QAAQ,EAAE,OAAO,CAAC,SAAS;AACnE,YAAM,QAAQ,MAAM,WAAW,OAAO,IAAI;AAC1C,aAAO,SAAS,QAAQ,UAAU;AAAA,IACpC,CAAC;AACD,QAAI,QAAQ,SAAS,GAAG;AACtB,aAAO,uBAAuB;AAAA,QAC5B,MACE,SAAS,SAAS,WAAW,6BAA6B;AAAA,QAC5D,SAAS,eAAe,MAAM,WAAW,UAAU,UAAU,WAAW;AAAA,QACxE,OAAO,MAAM,WAAW;AAAA,QACxB;AAAA,QACA,YAAY,OAAO,MAAM,WAAW,UAAU;AAAA,QAC9C,gBAAgB,SAAS,SAAS,WAAW,UAAU;AAAA,MACzD,CAAC;AAAA,IACH;AACA,UAAM,WAAW,mBAAmB,UAAU,MAAM,WAAW,MAAM;AACrE,WAAO,OAAO,SAAS,SAAS,OAAO;AACvC,WAAO,OAAO,aAAa,SAAS,WAAW;AAAA,EACjD;AAEA,QAAM,SAAS,OAAO;AAAA,IACpB;AAAA,IACC,MAAM,QAAQ,CAAC;AAAA,IAChB,QAAQ,WAAW;AAAA,IACnB;AAAA,IACA;AAAA,IACA,MAAM;AAAA,EACR;AAEA,QAAM,KAAK,OAAO,UAAU,OAAO,OAAO,SAAS;AACnD,MAAI,CAAC,IAAI;AACP,QAAI,OAAO,WAAW,OAAO,OAAO,WAAW,KAAK;AAClD,aAAO,uBAAuB;AAAA,QAC5B,MAAM;AAAA,QACN,QAAQ,OAAO;AAAA,QACf,SAAS,sCAAsC,WAAW,eAAe,OAAO,MAAM,+CAA+C,MAAM,WAAW,UAAU;AAAA,QAChK,OAAO,MAAM,WAAW;AAAA,QACxB;AAAA,QACA,YAAY,OAAO,MAAM,WAAW,UAAU;AAAA,QAC9C,gBAAgB;AAAA,QAChB,iBAAiB;AAAA,QACjB,SAAS,OAAO;AAAA,MAClB,CAAC;AAAA,IACH;AACA,WAAO,WAAW,KAAK;AAAA,MACrB,MAAM;AAAA,MACN,QAAQ,OAAO;AAAA,MACf,SAAS,8BAA8B,OAAO,OAAO,OAAO,MAAM;AAAA,MAClE,SAAS,OAAO;AAAA,IAClB,CAAC;AAAA,EACH;AACA,SAAO,WAAW,GAAG,OAAO,MAAM;AAAA,IAChC,MAAM,EAAE,QAAQ,OAAO,QAAQ,SAAS,OAAO,QAAQ;AAAA,EACzD,CAAC;AACH,CAAC;AAEI,IAAM,kCAAkC,CAAC,UAK9CA,QAAO,IAAI,aAAa;AACtB,QAAM,MAAkE,CAAC;AACzE,aAAW,OAAO,MAAM,UAAU;AAChC,UAAM,YAAY,OAAO,MAAM,IAAI,QAAQ,aAAa,MAAM,aAAa,IAAI,IAAI;AACnF,QAAI,CAAC,UAAW;AAChB,QAAI,IAAI,IAAI,IAAI;AAAA,MACd,UAAU,QAAQ;AAAA,MAClB,UAAU,QAAQ;AAAA,IACpB;AAAA,EACF;AACA,SAAO;AACT,CAAC;;;ACvpBH,SAAS,UAAAC,SAAQ,UAAAC,SAAQ,UAAAC,eAAc;AAIvC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,cAAAC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAOK;AAmBP,SAAS,oBAAoB,gCAAgC;AA0H7D,IAAM,yBAAyBC,QAAO,OAAO;AAAA,EAC3C,MAAMA,QAAO;AACf,CAAC;AAED,IAAM,oCAAoCA,QAAO,OAAO;AAAA,EACtD,SAASA,QAAO;AAAA,EAChB,MAAMA,QAAO,OAAOA,QAAO,MAAMA,QAAO,MAAM,CAAC;AAAA,EAC/C,aAAaA,QAAO,OAAOA,QAAO,MAAM;AAC1C,CAAC;AACD,IAAM,4BAA4BA,QAAO,OAAO;AAAA,EAC9C,KAAKA,QAAO;AAAA,EACZ,aAAaA,QAAO,OAAOA,QAAO,MAAM;AAAA,EACxC,WAAWA,QAAO,OAAOA,QAAO,OAAOA,QAAO,QAAQ,iCAAiC,CAAC;AAC1F,CAAC;AACD,IAAM,gDAAgDA,QAAO,OAAO;AAAA,EAClE,kBAAkBA,QAAO;AAAA,EACzB,UAAUA,QAAO;AAAA,EACjB,YAAYA,QAAO,OAAOA,QAAO,MAAM;AAAA,EACvC,QAAQA,QAAO,OAAOA,QAAO,QAAQA,QAAO,MAAM;AACpD,CAAC;AACD,IAAM,gDAAgDA,QAAO,OAAO;AAAA,EAClE,UAAUA,QAAO;AAAA,EACjB,YAAYA,QAAO,OAAOA,QAAO,MAAM;AAAA,EACvC,QAAQA,QAAO,OAAOA,QAAO,QAAQA,QAAO,MAAM;AACpD,CAAC;AACD,IAAM,gCAAgCA,QAAO,OAAO;AAAA,EAClD,mBAAmBA,QAAO,OAAO,6CAA6C;AAAA,EAC9E,mBAAmBA,QAAO,OAAO,6CAA6C;AAChF,CAAC;AACD,IAAM,oCAAoCA,QAAO,OAAO;AAAA,EACtD,MAAMA,QAAO;AAAA,EACb,MAAMA,QAAO,SAAS,CAAC,QAAQ,UAAU,UAAU,eAAe,CAAC;AAAA,EACnE,QAAQA,QAAO,OAAOA,QAAO,MAAM;AAAA,EACnC,cAAcA,QAAO,OAAOA,QAAO,MAAM;AAAA,EACzC,IAAIA,QAAO,OAAOA,QAAO,SAAS,CAAC,UAAU,SAAS,QAAQ,CAAC,CAAC;AAAA,EAChE,YAAYA,QAAO,OAAOA,QAAO,MAAM;AAAA,EACvC,aAAaA,QAAO,OAAOA,QAAO,MAAM;AAAA,EACxC,OAAOA,QAAO,OAAO,6BAA6B;AAAA,EAClD,kBAAkBA,QAAO,OAAOA,QAAO,MAAM;AAC/C,CAAC;AACD,IAAM,kCAAkCA,QAAO,OAAO;AAAA,EACpD,OAAOA,QAAO;AAAA,EACd,oBAAoBA,QAAO;AAAA,EAC3B,MAAMA,QAAO,SAAS,CAAC,qBAAqB,mBAAmB,CAAC;AAAA,EAChE,kBAAkBA,QAAO,OAAOA,QAAO,MAAM;AAAA,EAC7C,UAAUA,QAAO;AAAA,EACjB,UAAUA,QAAO,OAAOA,QAAO,MAAM;AAAA,EACrC,YAAYA,QAAO,OAAOA,QAAO,MAAM;AAAA,EACvC,QAAQA,QAAO,OAAOA,QAAO,QAAQA,QAAO,MAAM;AAAA,EAClD,gBAAgBA,QAAO,MAAM;AAAA,IAC3BA,QAAO,QAAQ,MAAM;AAAA,IACrBA,QAAO,QAAQ,KAAK;AAAA,IACpBA,QAAO,MAAMA,QAAO,MAAM;AAAA,EAC5B,CAAC;AAAA,EACD,kCAAkCA,QAAO,SAASA,QAAO,OAAO;AAClE,CAAC;AACD,IAAM,gCAAgCA,QAAO,OAAO;AAAA,EAClD,OAAOA,QAAO,OAAOA,QAAO,MAAM;AAAA,EAClC,SAASA,QAAO,OAAOA,QAAO,MAAM;AAAA,EACpC,SAASA,QAAO,MAAM,yBAAyB;AAAA,EAC/C,gBAAgBA,QAAO;AAAA,EACvB,MAAMA,QAAO,MAAMA,QAAO,MAAM;AAAA,EAChC,iBAAiBA,QAAO,MAAM,iCAAiC;AAAA,EAC/D,gBAAgBA,QAAO,MAAMA,QAAO,OAAO,EAAE,SAASA,QAAO,MAAMA,QAAO,MAAM,EAAE,CAAC,CAAC;AAAA,EACpF,eAAeA,QAAO;AAAA,IACpBA,QAAO,OAAO;AAAA,MACZ,OAAOA,QAAO;AAAA,MACd,SAASA,QAAO,OAAOA,QAAO,QAAQA,QAAO,OAAOA,QAAO,MAAM,CAAC;AAAA,MAClE,eAAeA,QAAO,MAAMA,QAAO,MAAM;AAAA,IAC3C,CAAC;AAAA,EACH;AAAA,EACA,eAAeA,QAAO,MAAM,+BAA+B;AAC7D,CAAC;AAGD,IAAM,yBAAyBA,QAAO,MAAM;AAAA,EAC1CA,QAAO,OAAO,EAAE,MAAMA,QAAO,QAAQ,KAAK,GAAG,KAAKA,QAAO,OAAO,CAAC;AAAA,EACjEA,QAAO,OAAO,EAAE,MAAMA,QAAO,QAAQ,MAAM,GAAG,OAAOA,QAAO,OAAO,CAAC;AACtE,CAAC;AAED,IAAMC,wBAAuBD,QAAO,MAAM;AAAA,EACxCA,QAAO,OAAO;AAAA,IACZ,MAAMA,QAAO;AAAA,IACb,MAAMA,QAAO,QAAQ,QAAQ;AAAA,IAC7B,kBAAkBA,QAAO;AAAA,IACzB,UAAUA,QAAO;AAAA,IACjB,UAAUA,QAAO,SAASA,QAAO,OAAOA,QAAO,MAAM,CAAC;AAAA,IACtD,QAAQA,QAAO,MAAMA,QAAO,MAAM;AAAA,IAClC,kCAAkCA,QAAO,SAASA,QAAO,OAAO;AAAA,EAClE,CAAC;AAAA;AAAA;AAAA;AAAA,EAID;AACF,CAAC;AAED,IAAM,uBAAuBA,QAAO,OAAO;AAAA,EACzC,MAAM;AAAA,EACN,MAAMA,QAAO;AAAA,EACb,aAAaA,QAAO,SAASA,QAAO,MAAM;AAAA,EAC1C,SAASA,QAAO,SAASA,QAAO,MAAM;AAAA,EACtC,SAASA,QAAO,SAASA,QAAO,OAAOA,QAAO,QAAQA,QAAO,MAAM,CAAC;AAAA,EACpE,aAAaA,QAAO,SAASA,QAAO,OAAOA,QAAO,QAAQA,QAAO,MAAM,CAAC;AAAA,EACxE,wBAAwBA,QAAO,SAASA,QAAO,MAAMC,qBAAoB,CAAC;AAC5E,CAAC;AAED,IAAM,wBAAwBD,QAAO,OAAO;AAAA,EAC1C,MAAMA,QAAO;AAAA,EACb,WAAWA,QAAO;AACpB,CAAC;AAED,IAAM,iCAAiCA,QAAO;AAAA,EAC5CA,QAAO,uBAAuB,sBAAsB;AACtD;AACA,IAAM,kCAAkCA,QAAO;AAAA,EAC7CA,QAAO,uBAAuB,6BAA6B;AAC7D;AACA,IAAM,+BAA+BA,QAAO;AAAA,EAC1CA,QAAO,uBAAuB,oBAAoB;AACpD;AACA,IAAM,gCAAgCA,QAAO;AAAA,EAC3CA,QAAO,uBAAuB,qBAAqB;AACrD;AAEA,IAAM,qBAAqB,CAAC,MAAc,SAAiB,YACzDE,YAAW,KAAK;AAAA,EACd;AAAA,EACA;AAAA,EACA,GAAI,YAAY,SAAY,CAAC,IAAI,EAAE,QAAQ;AAC7C,CAAC;AAEH,IAAM,sBAAsB,CAAC,aAAmD;AAAA,EAC9E,OAAOC,QAAO,UAAU,QAAQ,KAAK;AAAA,EACrC,SAASA,QAAO,UAAU,QAAQ,OAAO;AAAA,EACzC,SAAS,QAAQ,QAAQ,IAAI,CAAC,YAAY;AAAA,IACxC,KAAK,OAAO;AAAA,IACZ,aAAaA,QAAO,UAAU,OAAO,WAAW;AAAA,IAChD,WAAWA,QAAO,UAAU,OAAO,SAAS,IACxC,OAAO;AAAA,MACL,OAAO,QAAQA,QAAO,UAAU,OAAO,SAAS,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,QAAQ,MAAM;AAAA,QACjF;AAAA,QACA;AAAA,UACE,SAAS,SAAS;AAAA,UAClB,MAAMA,QAAO,UAAU,SAAS,IAAI;AAAA,UACpC,aAAaA,QAAO,UAAU,SAAS,WAAW;AAAA,QACpD;AAAA,MACF,CAAC;AAAA,IACH,IACA;AAAA,EACN,EAAE;AAAA,EACF,gBAAgB,QAAQ;AAAA,EACxB,MAAM,QAAQ;AAAA,EACd,iBAAiB,QAAQ,gBAAgB,IAAI,CAAC,YAAY;AAAA,IACxD,MAAM,OAAO;AAAA,IACb,MAAM,OAAO;AAAA,IACb,QAAQA,QAAO,UAAU,OAAO,MAAM;AAAA,IACtC,cAAcA,QAAO,UAAU,OAAO,YAAY;AAAA,IAClD,IAAIA,QAAO,UAAU,OAAO,EAAE;AAAA,IAC9B,YAAYA,QAAO,UAAU,OAAO,UAAU;AAAA,IAC9C,aAAaA,QAAO,UAAU,OAAO,WAAW;AAAA,IAChD,OAAOA,QAAO,OAAO,OAAO,KAAK,IAC7B;AAAA,MACE,mBAAmBA,QAAO,OAAO,OAAO,MAAM,MAAM,iBAAiB,IACjE;AAAA,QACE,kBAAkB,OAAO,MAAM,MAAM,kBAAkB,MAAM;AAAA,QAC7D,UAAU,OAAO,MAAM,MAAM,kBAAkB,MAAM;AAAA,QACrD,YAAYA,QAAO,UAAU,OAAO,MAAM,MAAM,kBAAkB,MAAM,UAAU;AAAA,QAClF,QAAQ,OAAO,MAAM,MAAM,kBAAkB,MAAM;AAAA,MACrD,IACA;AAAA,MACJ,mBAAmBA,QAAO,OAAO,OAAO,MAAM,MAAM,iBAAiB,IACjE;AAAA,QACE,UAAU,OAAO,MAAM,MAAM,kBAAkB,MAAM;AAAA,QACrD,YAAYA,QAAO,UAAU,OAAO,MAAM,MAAM,kBAAkB,MAAM,UAAU;AAAA,QAClF,QAAQ,OAAO,MAAM,MAAM,kBAAkB,MAAM;AAAA,MACrD,IACA;AAAA,IACN,IACA;AAAA,IACJ,kBAAkBA,QAAO,UAAU,OAAO,gBAAgB;AAAA,EAC5D,EAAE;AAAA,EACF,gBAAgB,QAAQ;AAAA,EACxB,eAAe,QAAQ;AAAA,EACvB,eAAe,QAAQ,cAAc,IAAI,CAAC,YAAY;AAAA,IACpD,OAAO,OAAO;AAAA,IACd,oBAAoB,OAAO;AAAA,IAC3B,MAAM,OAAO;AAAA,IACb,kBAAkBA,QAAO,UAAU,OAAO,gBAAgB;AAAA,IAC1D,UAAU,OAAO;AAAA,IACjB,UAAUA,QAAO,UAAU,OAAO,QAAQ;AAAA,IAC1C,YAAYA,QAAO,UAAU,OAAO,UAAU;AAAA,IAC9C,QAAQ,OAAO;AAAA,IACf,gBAAgB,OAAO;AAAA,IACvB,kCAAkC,OAAO;AAAA,EAC3C,EAAE;AACJ;AAEA,IAAM,uBAAuB,CAAC,SAC5B,KAAK,SAAS,QAAQ,KAAK,MAAM;AAEnC,IAAM,+BAA+B;AACrC,IAAM,uBAAuB,oBAAI,IAAI;AAAA,EACnC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,IAAM,WAAW,CAAC,UAChB,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAErE,IAAM,WAAW,CAAC,UAA8B;AAE9C,MAAI;AACF,WAAO,IAAI,IAAI,KAAK;AAAA,EACtB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,IAAM,oBAAoB,CAAC,YAAsB,UAAoC;AACnF,QAAM,UAAU,OAAO,KAAK;AAC5B,MAAI,CAAC,QAAS;AACd,QAAM,SAAS,SAAS,OAAO;AAC/B,MAAI,CAAC,UAAW,OAAO,aAAa,YAAY,OAAO,aAAa,QAAU;AAC9E,QAAM,aAAa,OAAO,SAAS;AACnC,QAAM,SAAS,OAAO;AACtB,MAAI,CAAC,WAAW,SAAS,UAAU,EAAG,YAAW,KAAK,UAAU;AAChE,MAAI,CAAC,WAAW,SAAS,MAAM,EAAG,YAAW,KAAK,MAAM;AAC1D;AAEA,IAAM,uBAAuB,CAC3B,SACA,WACA,YACsB;AACtB,QAAM,aAAuB,CAAC;AAC9B,oBAAkB,YAAY,OAAO;AACrC,aAAW,UAAU,QAAQ,SAAS;AACpC;AAAA,MACE;AAAA,MACA,iBAAiB,OAAO,KAAKA,QAAO,eAAe,OAAO,SAAS,GAAG,CAAC,CAAC;AAAA,IAC1E;AAAA,EACF;AACA,oBAAkB,YAAY,SAAS;AACvC,SAAO;AACT;AAEA,IAAM,4BAA4B,CAChC,UACA,kBACsB;AACtB,MAAI,CAAC,MAAM,QAAQ,QAAQ,EAAG,QAAO,CAAC;AACtC,QAAM,SAAS,oBAAI,IAAY;AAC/B,aAAW,eAAe,UAAU;AAClC,QAAI,CAAC,SAAS,WAAW,EAAG;AAC5B,eAAW,CAAC,QAAQ,SAAS,KAAK,OAAO,QAAQ,WAAW,GAAG;AAC7D,UAAI,cAAc,OAAO,KAAK,CAAC,cAAc,IAAI,MAAM,EAAG;AAC1D,UAAI,CAAC,MAAM,QAAQ,SAAS,EAAG;AAC/B,iBAAW,SAAS,WAAW;AAC7B,YAAI,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,EAAG,QAAO,IAAI,MAAM,KAAK,CAAC;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACA,SAAO,CAAC,GAAG,MAAM;AACnB;AAEA,IAAM,gCAAgC,CAAC,KAAc,kBAAuC;AAC1F,QAAM,SAAS,oBAAI,IAAY;AAC/B,MAAI,CAAC,SAAS,GAAG,EAAG,QAAO,CAAC;AAE5B,aAAW,SAAS,0BAA0B,IAAI,UAAU,aAAa,EAAG,QAAO,IAAI,KAAK;AAE5F,QAAM,QAAQ,IAAI;AAClB,MAAI,CAAC,SAAS,KAAK,EAAG,QAAO,CAAC,GAAG,MAAM,EAAE,KAAK;AAC9C,aAAW,YAAY,OAAO,OAAO,KAAK,GAAG;AAC3C,QAAI,CAAC,SAAS,QAAQ,EAAG;AACzB,eAAW,CAAC,QAAQ,SAAS,KAAK,OAAO,QAAQ,QAAQ,GAAG;AAC1D,UAAI,CAAC,qBAAqB,IAAI,OAAO,YAAY,CAAC,KAAK,CAAC,SAAS,SAAS,EAAG;AAC7E,iBAAW,SAAS,0BAA0B,UAAU,UAAU,aAAa,GAAG;AAChF,eAAO,IAAI,KAAK;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AACA,SAAO,CAAC,GAAG,MAAM,EAAE,KAAK;AAC1B;AAEA,IAAM,8BAA8B,CAAC,YACnC,IAAI;AAAA,EACF,QAAQ,gBACL,OAAO,CAAC,WAAW,OAAO,SAAS,UAAU,OAAO,SAAS,QAAQ,EACrE,IAAI,CAAC,WAAW,OAAO,IAAI;AAChC;AAEF,IAAM,yBAAyB,CAAC,UAOb;AACjB,QAAM,SAAS,OAAO,YAAY,MAAM,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;AAC1E,QAAM,OAAO,4BAA4B,KAAK;AAAA,IAC5C,kBAAkB,MAAM;AAAA,IACxB,UAAU,MAAM;AAAA,IAChB,YAAYA,QAAO,KAAK;AAAA,IACxB;AAAA,EACF,CAAC;AACD,QAAM,QAAQ,YAAY,KAAK;AAAA,IAC7B,mBAAmBA,QAAO,KAAK,IAAI;AAAA,IACnC,mBAAmBA,QAAO,KAAK;AAAA,EACjC,CAAC;AACD,SAAO;AAAA,IACL,GAAG,MAAM;AAAA,IACT,iBAAiB;AAAA,MACf,GAAG,MAAM,QAAQ;AAAA,MACjB,eAAe,KAAK;AAAA,QAClB,MAAM;AAAA,QACN,MAAM;AAAA,QACN,QAAQA,QAAO,KAAK;AAAA,QACpB,cAAcA,QAAO,KAAK;AAAA,QAC1B,IAAIA,QAAO,KAAK;AAAA,QAChB,YAAYA,QAAO,KAAK;AAAA,QACxB,aAAaA,QAAO,KAAK,qDAAqD;AAAA,QAC9E,OAAOA,QAAO,KAAK,KAAK;AAAA,QACxB,kBAAkBA,QAAO,KAAK;AAAA,MAChC,CAAC;AAAA,IACH;AAAA,IACA,eAAe;AAAA,MACb,GAAG,MAAM,QAAQ;AAAA,MACjB,aAAa,KAAK;AAAA,QAChB,OAAO,kCAA+B,4BAA4B;AAAA,QAClE,oBAAoB;AAAA,QACpB,MAAM;AAAA,QACN,kBAAkBA,QAAO,KAAK,MAAM,gBAAgB;AAAA,QACpD,UAAU,MAAM;AAAA,QAChB,UAAU,MAAM,WAAWA,QAAO,KAAK,MAAM,QAAQ,IAAIA,QAAO,KAAK;AAAA,QACrE,YAAYA,QAAO,KAAK;AAAA,QACxB;AAAA,QACA,gBAAgB;AAAA,QAChB,GAAI,MAAM,qCAAqC,OAC3C,EAAE,kCAAkC,KAAK,IACzC,CAAC;AAAA,MACP,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAUO,IAAM,6BAA6B,CACxC,WACoC;AACpC,QAAM,SAAS,+BAA+B,OAAO,MAAM;AAC3D,MAAI,CAAC,OAAQ,QAAO,CAAC;AACrB,UAAQ,OAAO,0BAA0B,CAAC,GAAG;AAAA,IAC3C,CAAC,aAAmD;AAClD,UAAI,SAAS,SAAS,UAAU;AAC9B,eAAO;AAAA,UACL,IAAI,OAAO,SAAS,IAAI;AAAA,UACxB,OAAO;AAAA,UACP,MAAM;AAAA,UACN,UAAU,OAAO,SAAS,IAAI;AAAA,UAC9B,OAAO;AAAA,YACL,kBAAkB,SAAS;AAAA,YAC3B,UAAU,SAAS;AAAA,YACnB,UAAU,SAAS,YAAY;AAAA,YAC/B,QAAQ,SAAS;AAAA,YACjB,kCAAkC,SAAS;AAAA,UAC7C;AAAA,QACF;AAAA,MACF;AACA,aAAO,yBAAyB,QAAQ;AAAA,IAC1C;AAAA,EACF;AACF;AAEO,IAAM,oCAAoC,CAC/C,WAC8B;AAC9B,QAAM,SAAS,+BAA+B,OAAO,MAAM;AAC3D,SAAO,EAAE,KAAK,QAAQ,WAAW,QAAQ,UAAU;AACrD;AAUO,IAAM,gBAAgB,aAAa,CAAC,YAAmC;AAC5E,QAAM,sBAAsB,CAC1B,MACA,oBAOAC,QAAO,IAAI,aAAa;AACtB,QAAI,KAAK,SAAS,OAAO;AACvB,YAAM,WAAW,OAAO,gBAAgB,KAAK,GAAG,EAAE,KAAKA,QAAO,QAAQ,eAAe,CAAC;AACtF,aAAO,EAAE,SAAS;AAAA,IACpB;AACA,WAAO,EAAE,UAAU,KAAK,MAAM;AAAA,EAChC,CAAC;AAEH,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,aAAa;AAAA,IACb,oBAAoB,eAAe,IAAI,CAAC,YAAY;AAAA,MAClD,IAAI,OAAO;AAAA,MACX,MAAM,OAAO;AAAA,MACb,SAAS,OAAO;AAAA,MAChB,GAAI,OAAO,MAAM,EAAE,KAAK,OAAO,IAAI,IAAI,CAAC;AAAA,MACxC,GAAI,OAAO,OAAO,EAAE,MAAM,OAAO,KAAK,IAAI,CAAC;AAAA,MAC3C,GAAI,OAAO,WAAW,EAAE,UAAU,OAAO,SAAS,IAAI,CAAC;AAAA,IACzD,EAAE;AAAA,IACF,SAAS,CAAC,SAAuB,wBAAwB,IAAI;AAAA,IAE7D,WAAW,CAAC,QAAiC;AAC3C,YAAM,kBAAkB,SAAS,mBAAmB,IAAI;AAExD,YAAM,mCAAmC,CAAC,UAMxCA,QAAO,IAAI,aAAa;AACtB,YAAI,MAAM,QAAQ,cAAc,SAAS,EAAG,QAAO,MAAM;AAEzD,cAAM,aAAa,qBAAqB,MAAM,SAAS,MAAM,WAAW,MAAM,OAAO;AACrF,YAAI,WAAW,WAAW,EAAG,QAAO,MAAM;AAE1C,mBAAW,aAAa,YAAY;AAClC,gBAAM,QAAQ,OAAO,IAAI,MAAM,MAAM,EAAE,KAAK,UAAU,CAAC,EAAE;AAAA,YACvDA,QAAO,IAAI,CAAC,YAAY,EAAE,IAAI,MAAe,OAAO,EAAE;AAAA,YACtDA,QAAO,MAAM,MAAMA,QAAO,QAAQ,EAAE,IAAI,OAAgB,QAAQ,KAAK,CAAC,CAAC;AAAA,UACzE;AACA,cAAI,CAAC,MAAM,GAAI;AAEf,gBAAM,MAAM,OAAO,MAAM,MAAM,QAAQ;AACvC,gBAAM,iBAAiB;AAAA,YACrB;AAAA,YACA,4BAA4B,MAAM,OAAO;AAAA,UAC3C;AACA,gBAAM,kBACJ,MAAM,OAAO,mBAAmB,MAAM,OAAO,gBAAgB,SAAS,IAClE,IAAI,IAAI,MAAM,OAAO,eAAe,IACpC;AACN,gBAAM,SAAS,kBACX,eAAe,OAAO,CAAC,UAAU,gBAAgB,IAAI,KAAK,CAAC,IAC3D;AACJ,iBAAO,uBAAuB;AAAA,YAC5B,SAAS,MAAM;AAAA,YACf,kBAAkB,MAAM,OAAO;AAAA,YAC/B,UAAU,MAAM,OAAO;AAAA,YACvB,UAAU,MAAM,OAAO,YAAY;AAAA,YACnC;AAAA,YACA,kCACE,MAAM,OAAO,sCAAsC;AAAA,UACvD,CAAC;AAAA,QACH;AAEA,eAAO,MAAM;AAAA,MACf,CAAC;AAEH,YAAM,UAAU,CAAC,WACfA,QAAO,IAAI,aAAa;AAGtB,cAAM,WAAW,OAAO,oBAAoB,OAAO,MAAM,eAAe;AACxE,cAAM,WAAW,OAAO,mBAAmB,SAAS,QAAQ;AAc5D,cAAM,kBAAkB,OAAO;AAC/B,cAAM,sBAAsB,mBAAmB;AAC/C,cAAM,mBAAmB,OAAO,0BAA0B;AAC1D,cAAM,UACJ,uBAAuB,mBACnB,OAAO,gBAAgB,SAAS,QAAQ,EAAE;AAAA,UACxCA,QAAO;AAAA,YAAQ,CAAC,eACd,iCAAiC;AAAA,cAC/B,UAAU,SAAS;AAAA,cACnB,SAAS;AAAA,cACT,WAAW,qBAAqB,OAAO,IAAI;AAAA,cAC3C,SAAS,OAAO;AAAA,YAClB,CAAC;AAAA,UACH;AAAA,QACF,IACA;AACN,cAAM,iBACJ,uBAAuB,UAAU,uBAAuB,OAAO,IAAI;AACrE,cAAM,mBAAmB,oBAAoB,kBAAkB;AAC/D,cAAM,gCACJ,oBAAoB,UAChB,wCAAwC,SAAS,gBAAgB,IACjE;AAEN,cAAM,OAAO,gBAAgB,KAAK,OAAO,IAAI;AAO7C,cAAM,WAAW,OAAO,IAAI,KAAK,aAAa,IAAI,IAAI;AACtD,YAAI,UAAU;AACZ,iBAAO,OAAO,IAAI,8BAA8B,EAAE,KAAK,CAAC;AAAA,QAC1D;AAEA,cAAM,WAAW,OAAO,UAAU,SAAS,QAAQ;AAEnD,cAAM,oBAA8C;AAAA,UAClD;AAAA,UACA,GAAI,qBAAqB,OAAO,IAAI,MAAM,SACtC,EAAE,WAAW,qBAAqB,OAAO,IAAI,EAAE,IAC/C,CAAC;AAAA;AAAA;AAAA;AAAA,UAIL,GAAI,OAAO,UAAU,EAAE,SAAS,OAAO,QAAQ,IAAI,CAAC;AAAA,UACpD,GAAI,OAAO,UAAU,EAAE,SAAS,OAAO,QAAQ,IAAI,CAAC;AAAA,UACpD,GAAI,OAAO,cAAc,EAAE,aAAa,OAAO,YAAY,IAAI,CAAC;AAAA;AAAA;AAAA,UAGhE,GAAI,OAAO,yBACP;AAAA,YACE,wBAAwB,2BAA2B,OAAO,sBAAsB;AAAA,UAClF,IACA,iCAAiC,8BAA8B,SAAS,IACtE,EAAE,wBAAwB,8BAA8B,IACxD,CAAC;AAAA,QACT;AAMA,eAAO,IAAI,QAAQ,QAAQ,UAAU,SAAS,QAAQ;AAItD,eAAO,IAAI,QAAQ,QAAQ,UAAU,KAAK,UAAU,SAAS,WAAW,CAAC;AAEzE,eAAO,IAAI;AAAA,UACTA,QAAO,IAAI,aAAa;AACtB,mBAAO,IAAI,KAAK,aAAa,SAAS;AAAA,cACpC;AAAA,cACA,MAAM,OAAO,MAAM,KAAK,KAAK,SAAS,SAAS,OAAO;AAAA,cACtD,aACE,OAAO,eAAe,SAAS,eAAe,SAAS,SAAS,OAAO;AAAA,cACzE,QAAQ;AAAA,cACR,WAAW;AAAA,cACX,YAAY,qBAAqB,OAAO,IAAI,KAAK;AAAA,YACnD,CAAC;AACD,mBAAO,IAAI,QAAQ;AAAA,cACjB,OAAO;AAAA,cACP,oCAAoC,OAAO,MAAM,QAAQ;AAAA,YAC3D;AAAA,UACF,CAAC;AAAA,QACH;AAEA,eAAO,EAAE,MAAM,WAAW,SAAS,YAAY,OAAO;AAAA,MACxD,CAAC;AAOH,YAAM,aAAa,CAAC,SAAiB,UACnCA,QAAO,IAAI,aAAa;AACtB,cAAM,OAAO,gBAAgB,KAAK,OAAO;AACzC,cAAM,SAAS,OAAO,IAAI,KAAK,aAAa,IAAI,IAAI;AACpD,cAAM,UAAU,SAAS,+BAA+B,OAAO,MAAM,IAAI;AACzE,YAAI,CAAC,UAAU,CAAC,SAAS;AACvB,iBAAO,OAAO,IAAI,yBAAyB,EAAE,KAAK,CAAC;AAAA,QACrD;AAKA,cAAM,YACJ,OAAO,SAAS,QAAQ,YAAY,EAAE,MAAM,OAAO,KAAK,QAAQ,UAAU,IAAI;AAChF,YAAI,cAAc,MAAM;AACtB,iBAAO,OAAO,IAAI,kBAAkB;AAAA,YAClC,SACE;AAAA,UACJ,CAAC;AAAA,QACH;AAIA,cAAM,WAAW,OAAO,oBAAoB,WAAW,eAAe;AACtE,cAAM,WAAW,OAAO,mBAAmB,SAAS,QAAQ;AAE5D,cAAM,qBAAqB,OAAO,IAAI,QAAQ,eAAe,OAAO;AACpE,cAAM,gBAAgB,IAAI,IAAI,mBAAmB,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC;AACzE,cAAM,YAAY,IAAI,IAAI,SAAS,YAAY,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;AAMzE,cAAM,WAAW,OAAO,UAAU,SAAS,QAAQ;AACnD,eAAO,IAAI,QAAQ,QAAQ,UAAU,SAAS,QAAQ;AACtD,eAAO,IAAI,QAAQ,QAAQ,UAAU,KAAK,UAAU,SAAS,WAAW,CAAC;AAEzE,cAAM,aAAuC;AAAA,UAC3C,GAAG;AAAA,UACH;AAAA,UACA,GAAI,qBAAqB,SAAS,MAAM,SACpC,EAAE,WAAW,qBAAqB,SAAS,EAAE,IAC7C,CAAC;AAAA,QACP;AAEA,eAAO,IAAI;AAAA,UACTA,QAAO,IAAI,aAAa;AACtB,mBAAO,IAAI,KAAK,aAAa,OAAO,MAAM;AAAA,cACxC,QAAQ;AAAA,YACV,CAAC;AACD,mBAAO,IAAI,QAAQ;AAAA,cACjB;AAAA,cACA,oCAAoC,SAAS,QAAQ;AAAA,YACvD;AAAA,UACF,CAAC;AAAA,QACH;AAKA,cAAM,cAAc,OAAO,IAAI,YAAY,KAAK,EAAE,aAAa,KAAK,CAAC;AACrE,eAAOA,QAAO;AAAA,UACZ;AAAA,UACA,CAAC,eACC,IAAI,YACD,QAAQ;AAAA,YACP,OAAO,WAAW;AAAA,YAClB,aAAa,WAAW;AAAA,YACxB,MAAM,WAAW;AAAA,UACnB,CAAC,EACA,KAAKA,QAAO,SAAS,2BAA2B,MAAMA,QAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;AAAA,UAC9E,EAAE,SAAS,KAAK;AAAA,QAClB,EAAE;AAAA,UACAA,QAAO,SAAS,4BAA4B,MAAMA,QAAO,IAAI;AAAA,UAC7DA,QAAO,SAAS,kDAAkD;AAAA,YAChE,YAAY,EAAE,4BAA4B,YAAY,OAAO;AAAA,UAC/D,CAAC;AAAA,QACH;AAEA,eAAO;AAAA,UACL;AAAA,UACA,WAAW,SAAS,YAAY;AAAA,UAChC,YAAY,CAAC,GAAG,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,cAAc,IAAI,IAAI,CAAC,EAAE,KAAK;AAAA,UAC3E,cAAc,CAAC,GAAG,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,UAAU,IAAI,IAAI,CAAC,EAAE,KAAK;AAAA,QAC/E;AAAA,MACF,CAAC,EAAE;AAAA,QACDA,QAAO,SAAS,8BAA8B;AAAA,UAC5C,YAAY,EAAE,4BAA4B,QAAQ;AAAA,QACpD,CAAC;AAAA,MACH;AAEF,aAAO;AAAA,QACL,aAAa,CAAC,UACZA,QAAO,IAAI,aAAa;AACtB,gBAAM,eAAe,OAAO,UAAU,WAAW,EAAE,MAAM,MAAM,IAAI;AACnE,gBAAM,WAAW,OAAO,gBAAgB,aAAa,IAAI,EAAE;AAAA,YACzDA,QAAO,QAAQ,eAAe;AAAA,UAChC;AACA,gBAAM,UAAU,OAAO,gBAAgB,QAAQ;AAC/C,iBAAO,OAAO,iCAAiC;AAAA,YAC7C;AAAA,YACA;AAAA,YACA,WAAW,SAAS,aAAa,KAAK,KAAK,CAAC,IAAI,aAAa,KAAK,KAAK,IAAI;AAAA,UAC7E,CAAC;AAAA,QACH,CAAC;AAAA,QAEH;AAAA,QAEA;AAAA,QAEA,YAAY,CAAC,SACX,IAAI;AAAA,UACFA,QAAO,IAAI,aAAa;AACtB,mBAAO,IAAI,QAAQ,iBAAiB,IAAI;AACxC,mBAAO,IAAI,KAAK,aACb,OAAO,gBAAgB,KAAK,IAAI,CAAC,EACjC,KAAKA,QAAO,SAAS,qCAAqC,MAAMA,QAAO,IAAI,CAAC;AAAA,UACjF,CAAC;AAAA,QACH;AAAA,QAEF,gBAAgB,CAAC,SACf,IAAI,KAAK,aAAa,IAAI,gBAAgB,KAAK,IAAI,CAAC,EAAE;AAAA,UACpDA,QAAO;AAAA,YAAI,CAAC,WACV,SACK;AAAA,cACC,MAAM,OAAO;AAAA,cACb,aAAa,OAAO;AAAA,cACpB,MAAM,OAAO;AAAA,cACb,WAAW,OAAO;AAAA,cAClB,YAAY,OAAO;AAAA,YACrB,IACA;AAAA,UACN;AAAA,QACF;AAAA,QAEF,WAAW,CAAC,SACV,IAAI,KAAK,aACN,IAAI,gBAAgB,KAAK,IAAI,CAAC,EAC9B;AAAA,UACCA,QAAO;AAAA,YAAI,CAAC,WACV,SAAS,+BAA+B,OAAO,MAAM,IAAI;AAAA,UAC3D;AAAA,QACF;AAAA,QAEJ,WAAW,CACT,MACA,UAEA,IAAI;AAAA,UACFA,QAAO,IAAI,aAAa;AACtB,kBAAM,SAAS,OAAO,IAAI,KAAK,aAAa,IAAI,gBAAgB,KAAK,IAAI,CAAC;AAC1E,gBAAI,CAAC,OAAQ,QAAO,CAAC;AACrB,kBAAM,UAAU,+BAA+B,OAAO,MAAM;AAC5D,gBAAI,CAAC,QAAS,QAAO,CAAC;AAEtB,kBAAM,WAAW,2BAA2B,MAAM,sBAAsB;AACxE,kBAAM,SACJ,MAAM,SAAS,YACX,WACA,mBAAmB,QAAQ,0BAA0B,CAAC,GAAG,QAAQ;AAEvE,kBAAM,OAAiC;AAAA,cACrC,GAAG;AAAA,cACH,wBAAwB;AAAA,YAC1B;AAEA,mBAAO,IAAI,KAAK,aAAa,OAAO,gBAAgB,KAAK,IAAI,GAAG;AAAA,cAC9D,QAAQ;AAAA,YACV,CAAC;AAED,mBAAO;AAAA,UACT,CAAC;AAAA,QACH;AAAA,MACJ;AAAA,IACF;AAAA,IAEA,eAAe,CAAC,SAAiC;AAAA,MAC/C;AAAA,QACE,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,MAAM;AAAA,QACN,OAAO;AAAA,UACL,KAAK;AAAA,YACH,MAAM;AAAA,YACN,aACE;AAAA,YACF,aAAa;AAAA,YACb,cAAc;AAAA,YACd,SAAS,CAAC,UACR,KAAK,YAAY,KAAK,EAAE;AAAA,cACtBA,QAAO,IAAI,CAAC,YAAYF,YAAW,GAAG,oBAAoB,OAAO,CAAC,CAAC;AAAA,cACnEE,QAAO,UAAU;AAAA,gBACf,mBAAmB,CAAC,EAAE,QAAQ,MAC5BA,QAAO,QAAQ,mBAAmB,wBAAwB,OAAO,CAAC;AAAA,gBACpE,wBAAwB,CAAC,EAAE,QAAQ,MACjCA,QAAO,QAAQ,mBAAmB,6BAA6B,OAAO,CAAC;AAAA,gBACzE,mBAAmB,CAAC,EAAE,QAAQ,MAC5BA,QAAO,QAAQ,mBAAmB,wBAAwB,OAAO,CAAC;AAAA,cACtE,CAAC;AAAA,YACH;AAAA,UACJ,CAAC;AAAA,UACD,KAAK;AAAA,YACH,MAAM;AAAA,YACN,aACE;AAAA,YACF,aAAa;AAAA,cACX,kBAAkB;AAAA,cAClB,qBAAqB;AAAA,YACvB;AAAA,YACA,aAAa;AAAA,YACb,cAAc;AAAA,YACd,SAAS,CAAC,UACR,KACG,QAAQ;AAAA,cACP,MAAM,MAAM;AAAA,cACZ,MAAM,MAAM;AAAA,cACZ,aAAa,MAAM;AAAA,cACnB,SAAS,MAAM;AAAA,cACf,SAAS,MAAM;AAAA,cACf,aAAa,MAAM;AAAA,cACnB,wBAAwB,MAAM;AAAA,YAGhC,CAAC,EACA;AAAA,cACCA,QAAO;AAAA,gBAAI,CAAC,WACVF,YAAW,GAAG;AAAA,kBACZ,MAAM,OAAO,OAAO,IAAI;AAAA,kBACxB,WAAW,OAAO;AAAA,gBACpB,CAAC;AAAA,cACH;AAAA,cACAE,QAAO,UAAU;AAAA,gBACf,mBAAmB,CAAC,EAAE,QAAQ,MAC5BA,QAAO,QAAQ,mBAAmB,wBAAwB,OAAO,CAAC;AAAA,gBACpE,wBAAwB,CAAC,EAAE,QAAQ,MACjCA,QAAO,QAAQ,mBAAmB,6BAA6B,OAAO,CAAC;AAAA,gBACzE,mBAAmB,CAAC,EAAE,QAAQ,MAC5BA,QAAO,QAAQ,mBAAmB,wBAAwB,OAAO,CAAC;AAAA,gBACpE,+BAA+B,CAAC,EAAE,KAAK,MACrCA,QAAO;AAAA,kBACL;AAAA,oBACE;AAAA,oBACA,eAAe,IAAI;AAAA,kBACrB;AAAA,gBACF;AAAA,cACJ,CAAC;AAAA,YACH;AAAA,UACN,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,IAEA,qBAAqB;AAAA,IACrB,4BAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAO5B,cAAc,CAAC,EAAE,aAAa,QAAQ,QAAQ,MAC5C,0BAA0B,EAAE,aAAa,QAAQ,QAAQ,CAAC;AAAA,IAE5D,YAAY,CAAC,EAAE,KAAK,WAAW,SAAS,YAAY,KAAK,MAAM;AAC7D,YAAM,kBAAkB,SAAS,mBAAmB,UAAU;AAC9D,aAAO,wBAAwB;AAAA,QAC7B,KAAK;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAAA,IAEA,oBAAoB,CAAC,EAAE,KAAK,gBAAgB,aAAa,SAAS,MAChE,gCAAgC;AAAA,MAC9B,KAAK;AAAA,MACL,aAAa,OAAO,WAAW;AAAA,MAC/B;AAAA,IACF,CAAC;AAAA,IAEH,kBAAkB,MAAMA,QAAO;AAAA,IAE/B,QAAQ,CAAC;AAAA,MACP,KAAK;AAAA,MACL;AAAA,IACF,MAIEA,QAAO,IAAI,aAAa;AACtB,YAAM,kBAAkB,SAAS,mBAAmB,UAAU;AAC9D,YAAM,UAAU,IAAI,KAAK;AACzB,UAAI,CAAC,QAAS,QAAO;AACrB,YAAM,SAAS,OAAOA,QAAO,IAAI;AAAA,QAC/B,KAAK,MAAM,IAAI,IAAI,OAAO;AAAA,QAC1B,OAAO,CAAC,UAAU;AAAA,MACpB,CAAC,EAAE,KAAKA,QAAO,MAAM;AACrB,UAAID,QAAO,OAAO,MAAM,EAAG,QAAO;AAClC,YAAM,WAAW,OAAO,gBAAgB,OAAO,EAAE;AAAA,QAC/CC,QAAO,QAAQ,eAAe;AAAA,QAC9BA,QAAO,MAAM,MAAMA,QAAO,QAAQ,IAAI,CAAC;AAAA,MACzC;AACA,UAAI,aAAa,KAAM,QAAO;AAC9B,YAAM,MAAM,OAAO,MAAM,QAAQ,EAAE,KAAKA,QAAO,MAAM,MAAMA,QAAO,QAAQ,IAAI,CAAC,CAAC;AAChF,UAAI,CAAC,IAAK,QAAO;AACjB,YAAM,SAAS,OAAO,QAAQ,GAAG,EAAE,KAAKA,QAAO,MAAM,MAAMA,QAAO,QAAQ,IAAI,CAAC,CAAC;AAChF,UAAI,CAAC,OAAQ,QAAO;AACpB,YAAM,OAAOD,QAAO,UAAU,OAAO,OAAO,MAAM,KAAK,EACpD,YAAY,EACZ,QAAQ,eAAe,GAAG;AAC7B,YAAM,OAAOA,QAAO,UAAU,OAAO,OAAO,MAAM,IAAI;AACtD,aAAO,2BAA2B,KAAK;AAAA,QACrC,MAAM;AAAA,QACN,YAAY;AAAA,QACZ,UAAU;AAAA,QACV;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACL;AAKF,CAAC;","names":["Option","Schema","Schema","Option","Effect","Option","Option","Effect","bytes","Effect","Option","Schema","Schema","Option","message","changed","Effect","Effect","Option","Schema","ToolResult","Schema","AuthenticationSchema","ToolResult","Option","Effect"]}

package/dist/{chunk-QQFCICLX.js → chunk-HG5JB2UJ.js}

@@ -56,6 +56,14 @@ var openApiOnlyPresets = [
     icon: "https://svgl.app/library/sentry.svg",
     featured: true
   },
+  {
+    id: "posthog",
+    name: "PostHog",
+    summary: "Product analytics, events, feature flags, and insights.",
+    url: "https://us.posthog.com/api/schema/",
+    icon: "https://svgl.app/library/posthog.svg",
+    featured: true
+  },
   {
     id: "exa",
     name: "Exa",
@@ -134,4 +142,4 @@ var openApiPresets = openApiOnlyPresets;
 export {
   openApiPresets
 };
-//# sourceMappingURL=chunk-QQFCICLX.js.map
+//# sourceMappingURL=chunk-HG5JB2UJ.js.map

package/dist/{chunk-QQFCICLX.js.map → chunk-HG5JB2UJ.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/sdk/presets.ts"],"sourcesContent":["export interface OpenApiPreset {\n  readonly id: string;\n  readonly name: string;\n  readonly summary: string;\n  readonly url?: string;\n  readonly icon?: string;\n  readonly featured?: boolean;\n}\n\nconst openApiOnlyPresets: readonly OpenApiPreset[] = [\n  {\n    id: \"stripe\",\n    name: \"Stripe\",\n    summary: \"Payments, subscriptions, customers, and invoices.\",\n    url: \"https://raw.githubusercontent.com/stripe/openapi/master/openapi/spec3.json\",\n    icon: \"https://stripe.com/favicon.ico\",\n    featured: true,\n  },\n  {\n    id: \"github-rest\",\n    name: \"GitHub REST\",\n    summary: \"Repos, issues, pull requests, actions, and users.\",\n    url: \"https://raw.githubusercontent.com/github/rest-api-description/main/descriptions/api.github.com/api.github.com.json\",\n    icon: \"https://svgl.app/library/github_dark.svg\",\n    featured: true,\n  },\n  {\n    id: \"vercel\",\n    name: \"Vercel\",\n    summary: \"Deployments, domains, projects, and edge config.\",\n    url: \"https://openapi.vercel.sh\",\n    icon: \"https://vercel.com/favicon.ico\",\n    featured: true,\n  },\n  {\n    id: \"cloudflare\",\n    name: \"Cloudflare\",\n    summary: \"DNS, workers, pages, R2, and security rules.\",\n    url: \"https://raw.githubusercontent.com/cloudflare/api-schemas/main/openapi.json\",\n    icon: \"https://cloudflare.com/favicon.ico\",\n    featured: true,\n  },\n  {\n    id: \"neon\",\n    name: \"Neon\",\n    summary: \"Serverless Postgres: projects, branches, and endpoints.\",\n    url: \"https://neon.tech/api_spec/release/v2.json\",\n    icon: \"https://neon.tech/favicon/favicon.ico\",\n    featured: true,\n  },\n  {\n    id: \"openai\",\n    name: \"OpenAI\",\n    summary: \"Models, files, responses, and fine-tuning.\",\n    url: \"https://app.stainless.com/api/spec/documented/openai/openapi.documented.yml\",\n    icon: \"https://svgl.app/library/openai_dark.svg\",\n    featured: true,\n  },\n  {\n    id: \"sentry\",\n    name: \"Sentry\",\n    summary: \"Error tracking, performance monitoring, and releases.\",\n    url: \"https://raw.githubusercontent.com/getsentry/sentry-api-schema/main/openapi-derefed.json\",\n    icon: \"https://svgl.app/library/sentry.svg\",\n    featured: true,\n  },\n  {\n    id: \"exa\",\n    name: \"Exa\",\n    summary: \"Web search, similar links, content retrieval, and answers.\",\n    url: \"https://raw.githubusercontent.com/exa-labs/openapi-spec/refs/heads/master/exa-openapi-spec.yaml\",\n    icon: \"https://exa.ai/images/favicon-32x32.png\",\n    featured: true,\n  },\n  {\n    id: \"exa-websets\",\n    name: \"Exa Websets\",\n    summary: \"Websets, enrichments, webhooks, and monitors.\",\n    url: \"https://raw.githubusercontent.com/exa-labs/openapi-spec/refs/heads/master/exa-websets-spec.yaml\",\n    icon: \"https://exa.ai/images/favicon-32x32.png\",\n    featured: true,\n  },\n  {\n    id: \"axiom\",\n    name: \"Axiom\",\n    summary: \"Log ingestion, querying, datasets, and monitors.\",\n    url: \"https://axiom.co/docs/restapi/versions/v2.json\",\n    icon: \"https://axiom.co/favicon.ico\",\n  },\n  {\n    id: \"asana\",\n    name: \"Asana\",\n    summary: \"Tasks, projects, teams, and workspace management.\",\n    url: \"https://raw.githubusercontent.com/APIs-guru/openapi-directory/main/APIs/asana.com/1.0/openapi.yaml\",\n    icon: \"https://asana.com/favicon.ico\",\n  },\n  {\n    id: \"twilio\",\n    name: \"Twilio\",\n    summary: \"SMS, voice, video, and messaging APIs.\",\n    url: \"https://raw.githubusercontent.com/twilio/twilio-oai/main/spec/json/twilio_api_v2010.json\",\n    icon: \"https://twilio.com/favicon.ico\",\n  },\n  {\n    id: \"digitalocean\",\n    name: \"DigitalOcean\",\n    summary: \"Droplets, Kubernetes, databases, and networking.\",\n    url: \"https://raw.githubusercontent.com/digitalocean/openapi/main/specification/DigitalOcean-public.v2.yaml\",\n    icon: \"https://assets.digitalocean.com/favicon.ico\",\n  },\n  {\n    id: \"petstore\",\n    name: \"Petstore\",\n    summary: \"Classic OpenAPI demo, no auth required.\",\n    url: \"https://petstore3.swagger.io/api/v3/openapi.json\",\n    icon: \"https://petstore3.swagger.io/favicon-32x32.png\",\n  },\n  {\n    id: \"val-town\",\n    name: \"Val Town\",\n    summary: \"Vals, runs, blobs, and email/web endpoints.\",\n    url: \"https://api.val.town/openapi.json\",\n    icon: \"https://www.val.town/favicon.svg\",\n  },\n  {\n    id: \"resend\",\n    name: \"Resend\",\n    summary: \"Transactional email sending and domain management.\",\n    url: \"https://raw.githubusercontent.com/resend/resend-openapi/main/resend.yaml\",\n    icon: \"https://resend.com/static/favicons/favicon.ico\",\n  },\n  {\n    id: \"spotify\",\n    name: \"Spotify\",\n    summary: \"Tracks, albums, playlists, library, and playback.\",\n    url: \"https://raw.githubusercontent.com/sonallux/spotify-web-api/refs/heads/main/official-spotify-open-api.yml\",\n    icon: \"https://svgl.app/library/spotify.svg\",\n  },\n];\n\nexport const openApiPresets: readonly OpenApiPreset[] = openApiOnlyPresets;\n"],"mappings":";AASA,IAAM,qBAA+C;AAAA,EACnD;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,IACN,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,IACN,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,IACN,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,IACN,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,IACN,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,IACN,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,IACN,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,IACN,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,IACN,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AACF;AAEO,IAAM,iBAA2C;","names":[]}
+{"version":3,"sources":["../src/sdk/presets.ts"],"sourcesContent":["export interface OpenApiPreset {\n  readonly id: string;\n  readonly name: string;\n  readonly summary: string;\n  readonly url?: string;\n  readonly icon?: string;\n  readonly featured?: boolean;\n}\n\nconst openApiOnlyPresets: readonly OpenApiPreset[] = [\n  {\n    id: \"stripe\",\n    name: \"Stripe\",\n    summary: \"Payments, subscriptions, customers, and invoices.\",\n    url: \"https://raw.githubusercontent.com/stripe/openapi/master/openapi/spec3.json\",\n    icon: \"https://stripe.com/favicon.ico\",\n    featured: true,\n  },\n  {\n    id: \"github-rest\",\n    name: \"GitHub REST\",\n    summary: \"Repos, issues, pull requests, actions, and users.\",\n    url: \"https://raw.githubusercontent.com/github/rest-api-description/main/descriptions/api.github.com/api.github.com.json\",\n    icon: \"https://svgl.app/library/github_dark.svg\",\n    featured: true,\n  },\n  {\n    id: \"vercel\",\n    name: \"Vercel\",\n    summary: \"Deployments, domains, projects, and edge config.\",\n    url: \"https://openapi.vercel.sh\",\n    icon: \"https://vercel.com/favicon.ico\",\n    featured: true,\n  },\n  {\n    id: \"cloudflare\",\n    name: \"Cloudflare\",\n    summary: \"DNS, workers, pages, R2, and security rules.\",\n    url: \"https://raw.githubusercontent.com/cloudflare/api-schemas/main/openapi.json\",\n    icon: \"https://cloudflare.com/favicon.ico\",\n    featured: true,\n  },\n  {\n    id: \"neon\",\n    name: \"Neon\",\n    summary: \"Serverless Postgres: projects, branches, and endpoints.\",\n    url: \"https://neon.tech/api_spec/release/v2.json\",\n    icon: \"https://neon.tech/favicon/favicon.ico\",\n    featured: true,\n  },\n  {\n    id: \"openai\",\n    name: \"OpenAI\",\n    summary: \"Models, files, responses, and fine-tuning.\",\n    url: \"https://app.stainless.com/api/spec/documented/openai/openapi.documented.yml\",\n    icon: \"https://svgl.app/library/openai_dark.svg\",\n    featured: true,\n  },\n  {\n    id: \"sentry\",\n    name: \"Sentry\",\n    summary: \"Error tracking, performance monitoring, and releases.\",\n    url: \"https://raw.githubusercontent.com/getsentry/sentry-api-schema/main/openapi-derefed.json\",\n    icon: \"https://svgl.app/library/sentry.svg\",\n    featured: true,\n  },\n  {\n    id: \"posthog\",\n    name: \"PostHog\",\n    summary: \"Product analytics, events, feature flags, and insights.\",\n    url: \"https://us.posthog.com/api/schema/\",\n    icon: \"https://svgl.app/library/posthog.svg\",\n    featured: true,\n  },\n  {\n    id: \"exa\",\n    name: \"Exa\",\n    summary: \"Web search, similar links, content retrieval, and answers.\",\n    url: \"https://raw.githubusercontent.com/exa-labs/openapi-spec/refs/heads/master/exa-openapi-spec.yaml\",\n    icon: \"https://exa.ai/images/favicon-32x32.png\",\n    featured: true,\n  },\n  {\n    id: \"exa-websets\",\n    name: \"Exa Websets\",\n    summary: \"Websets, enrichments, webhooks, and monitors.\",\n    url: \"https://raw.githubusercontent.com/exa-labs/openapi-spec/refs/heads/master/exa-websets-spec.yaml\",\n    icon: \"https://exa.ai/images/favicon-32x32.png\",\n    featured: true,\n  },\n  {\n    id: \"axiom\",\n    name: \"Axiom\",\n    summary: \"Log ingestion, querying, datasets, and monitors.\",\n    url: \"https://axiom.co/docs/restapi/versions/v2.json\",\n    icon: \"https://axiom.co/favicon.ico\",\n  },\n  {\n    id: \"asana\",\n    name: \"Asana\",\n    summary: \"Tasks, projects, teams, and workspace management.\",\n    url: \"https://raw.githubusercontent.com/APIs-guru/openapi-directory/main/APIs/asana.com/1.0/openapi.yaml\",\n    icon: \"https://asana.com/favicon.ico\",\n  },\n  {\n    id: \"twilio\",\n    name: \"Twilio\",\n    summary: \"SMS, voice, video, and messaging APIs.\",\n    url: \"https://raw.githubusercontent.com/twilio/twilio-oai/main/spec/json/twilio_api_v2010.json\",\n    icon: \"https://twilio.com/favicon.ico\",\n  },\n  {\n    id: \"digitalocean\",\n    name: \"DigitalOcean\",\n    summary: \"Droplets, Kubernetes, databases, and networking.\",\n    url: \"https://raw.githubusercontent.com/digitalocean/openapi/main/specification/DigitalOcean-public.v2.yaml\",\n    icon: \"https://assets.digitalocean.com/favicon.ico\",\n  },\n  {\n    id: \"petstore\",\n    name: \"Petstore\",\n    summary: \"Classic OpenAPI demo, no auth required.\",\n    url: \"https://petstore3.swagger.io/api/v3/openapi.json\",\n    icon: \"https://petstore3.swagger.io/favicon-32x32.png\",\n  },\n  {\n    id: \"val-town\",\n    name: \"Val Town\",\n    summary: \"Vals, runs, blobs, and email/web endpoints.\",\n    url: \"https://api.val.town/openapi.json\",\n    icon: \"https://www.val.town/favicon.svg\",\n  },\n  {\n    id: \"resend\",\n    name: \"Resend\",\n    summary: \"Transactional email sending and domain management.\",\n    url: \"https://raw.githubusercontent.com/resend/resend-openapi/main/resend.yaml\",\n    icon: \"https://resend.com/static/favicons/favicon.ico\",\n  },\n  {\n    id: \"spotify\",\n    name: \"Spotify\",\n    summary: \"Tracks, albums, playlists, library, and playback.\",\n    url: \"https://raw.githubusercontent.com/sonallux/spotify-web-api/refs/heads/main/official-spotify-open-api.yml\",\n    icon: \"https://svgl.app/library/spotify.svg\",\n  },\n];\n\nexport const openApiPresets: readonly OpenApiPreset[] = openApiOnlyPresets;\n"],"mappings":";AASA,IAAM,qBAA+C;AAAA,EACnD;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,IACN,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,IACN,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,IACN,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,IACN,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,IACN,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,IACN,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,IACN,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,IACN,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,IACN,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,IACN,UAAU;AAAA,EACZ;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,SAAS;AAAA,IACT,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AACF;AAEO,IAAM,iBAA2C;","names":[]}

package/dist/{chunk-MWF55JPY.js → chunk-IVRAOG3T.js}

@@ -1,6 +1,6 @@
 import {
   resolveServerUrl
-} from "./chunk-R3X27XS6.js";
+} from "./chunk-WWZ7B34D.js";
 
 // src/sdk/derive-auth.ts
 import * as Option from "effect/Option";
@@ -78,7 +78,9 @@ var oauthTemplateFromPreset = (preset, baseUrl, slug, scopes) => ({
     baseUrl
   ),
   tokenUrl: resolveOAuthUrl(preset.tokenUrl, baseUrl),
-  scopes: [...scopes]
+  resource: Option.getOrUndefined(preset.resource) ?? null,
+  scopes: [...scopes],
+  ...preset.supportsClientIdMetadataDocument === true ? { supportsClientIdMetadataDocument: true } : {}
 });
 var detectedAuthenticationTemplates = (headerPresets, oauth2Presets, baseUrl) => {
   const templates = [];
@@ -115,4 +117,4 @@ export {
   firstBaseUrlForPreview,
   deriveAuthenticationTemplateFromPreview
 };
-//# sourceMappingURL=chunk-MWF55JPY.js.map
+//# sourceMappingURL=chunk-IVRAOG3T.js.map

package/dist/{chunk-MWF55JPY.js.map → chunk-IVRAOG3T.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/sdk/derive-auth.ts"],"sourcesContent":["// Spec-detected auth → stored `Authentication` templates, shared by every add\n// path. The React add flow derives templates from the preview before calling\n// `addSpec`; `addSpec` itself falls back to the same derivation when the\n// caller omits `authenticationTemplate` (the agentic/API path has no client\n// to do it). One implementation so the web UI and headless callers cannot\n// drift: an integration added over MCP gets the same auth methods the add\n// page would have produced.\nimport * as Option from \"effect/Option\";\n\nimport { AuthTemplateSlug, type OAuthAuthentication } from \"@executor-js/sdk/shared\";\n\nimport type { HeaderPreset, OAuth2Preset, SpecPreview, SpecPreviewSummary } from \"./preview\";\nimport type { APIKeyAuthentication, Authentication } from \"./types\";\nimport { resolveServerUrl } from \"./openapi-utils\";\n\ntype PreviewAuthMetadata = SpecPreview | SpecPreviewSummary;\n\n// ---------------------------------------------------------------------------\n// OpenAPI url helpers — specs sometimes ship relative OAuth endpoints; resolve\n// them against the chosen base URL so the stored auth template is absolute.\n// ---------------------------------------------------------------------------\n\nexport function resolveOAuthUrl(url: string, baseUrl: string): string {\n  if (!url) return url;\n  // oxlint-disable-next-line executor/no-try-catch-or-throw -- boundary: URL constructor normalizes provider metadata URLs\n  try {\n    new URL(url);\n    return url;\n  } catch {\n    if (!baseUrl) return url;\n    // oxlint-disable-next-line executor/no-try-catch-or-throw -- boundary: URL constructor resolves relative provider metadata URLs\n    try {\n      return new URL(url, baseUrl).toString();\n    } catch {\n      return url;\n    }\n  }\n}\n\nconst standardOidcIdentityScopes = [\"openid\", \"email\", \"profile\"] as const;\n\nconst identityScopesForPreset = (\n  identityScopes: OAuth2Preset[\"identityScopes\"],\n): readonly string[] => {\n  if (identityScopes === false) return [];\n  return identityScopes === \"auto\" ? standardOidcIdentityScopes : identityScopes;\n};\n\nexport const resolvedOAuthScopes = (\n  apiScopes: Iterable<string>,\n  identityScopes: OAuth2Preset[\"identityScopes\"],\n): string[] => {\n  const merged = new Set(apiScopes);\n  for (const scope of identityScopesForPreset(identityScopes)) merged.add(scope);\n  return [...merged];\n};\n\n// ---------------------------------------------------------------------------\n// Auth-template builders — turn a preview preset into the integration's stored\n// `Authentication` template (v2). A single-header preset becomes an `apiKey`\n// template whose secret header value renders from the conventional `token`\n// input. A multi-header preset gets one input per header, matching OpenAPI's\n// security-strategy semantics where multiple schemes in one object are required\n// together. The oauth2 preset becomes an `oauth` template carrying the provider\n// endpoints.\n// ---------------------------------------------------------------------------\n\nconst headerPrefix = (preset: HeaderPreset, headerName: string): string | undefined => {\n  const label = preset.label.toLowerCase();\n  if (headerName.toLowerCase() === \"authorization\") {\n    if (label.includes(\"bearer\")) return \"Bearer \";\n    if (label.includes(\"basic\")) return \"Basic \";\n  }\n  return undefined;\n};\n\nconst slugifyVariable = (name: string): string =>\n  name\n    .toLowerCase()\n    .replace(/[^a-z0-9]+/g, \"_\")\n    .replace(/^_+|_+$/g, \"\");\n\nconst variablesForHeaders = (headerNames: readonly string[]): ReadonlyMap<string, string> => {\n  const variables = new Map<string, string>();\n  if (headerNames.length <= 1) return variables;\n\n  const taken = new Set<string>();\n  for (const headerName of headerNames) {\n    const base = slugifyVariable(headerName) || \"input\";\n    let variable = base;\n    for (let suffix = 2; taken.has(variable); suffix += 1) {\n      variable = `${base}_${suffix}`;\n    }\n    taken.add(variable);\n    variables.set(headerName, variable);\n  }\n  return variables;\n};\n\nconst apiKeyTemplateFromHeaderPreset = (\n  preset: HeaderPreset,\n  slug: AuthTemplateSlug,\n): APIKeyAuthentication => {\n  const variables = variablesForHeaders(preset.secretHeaders);\n  return {\n    slug,\n    kind: \"apikey\",\n    placements: preset.secretHeaders.map((headerName) => {\n      const prefix = headerPrefix(preset, headerName);\n      const variable = variables.get(headerName);\n      return {\n        carrier: \"header\" as const,\n        name: headerName,\n        ...(prefix ? { prefix } : {}),\n        ...(variable ? { variable } : {}),\n      };\n    }),\n  };\n};\n\nconst oauthTemplateFromPreset = (\n  preset: OAuth2Preset,\n  baseUrl: string,\n  slug: AuthTemplateSlug,\n  scopes: readonly string[],\n): OAuthAuthentication => ({\n  slug,\n  kind: \"oauth2\",\n  authorizationUrl: resolveOAuthUrl(\n    Option.getOrElse(preset.authorizationUrl, () => \"\"),\n    baseUrl,\n  ),\n  tokenUrl: resolveOAuthUrl(preset.tokenUrl, baseUrl),\n  scopes: [...scopes],\n});\n\n// ---------------------------------------------------------------------------\n// All spec-detected auth methods → the union of stored `Authentication`\n// templates. Header presets become apiKey templates; each oauth2 preset becomes\n// an oauth template (with its declared API scopes plus, for auth-code flows,\n// the standard identity scopes). Slugs stay deterministic per method so the\n// stored template is stable across previews of the same spec.\n// ---------------------------------------------------------------------------\n\nexport const detectedAuthenticationTemplates = (\n  headerPresets: readonly HeaderPreset[],\n  oauth2Presets: readonly OAuth2Preset[],\n  baseUrl: string,\n): readonly Authentication[] => {\n  const templates: Authentication[] = [];\n  headerPresets.forEach((preset, index) => {\n    templates.push(\n      apiKeyTemplateFromHeaderPreset(preset, AuthTemplateSlug.make(`apikey-${index}`)),\n    );\n  });\n  for (const preset of oauth2Presets) {\n    const scopes = resolvedOAuthScopes(Object.keys(preset.scopes), preset.identityScopes);\n    templates.push(\n      oauthTemplateFromPreset(\n        preset,\n        baseUrl,\n        AuthTemplateSlug.make(`oauth-${preset.securitySchemeName}`),\n        scopes,\n      ),\n    );\n  }\n  return templates;\n};\n\nexport const firstBaseUrlForPreview = (preview: PreviewAuthMetadata): string => {\n  const firstServer = preview.servers[0];\n  return firstServer\n    ? resolveServerUrl(firstServer.url, Option.getOrUndefined(firstServer.variables), {})\n    : \"\";\n};\n\n/** The fallback `addSpec` uses when no explicit template was passed: every\n *  spec-detected method, resolved against the integration's base URL. */\nexport const deriveAuthenticationTemplateFromPreview = (\n  preview: PreviewAuthMetadata,\n  baseUrl: string | undefined,\n): readonly Authentication[] =>\n  detectedAuthenticationTemplates(\n    preview.headerPresets,\n    preview.oauth2Presets,\n    baseUrl ?? firstBaseUrlForPreview(preview),\n  );\n"],"mappings":";;;;;AAOA,YAAY,YAAY;AAExB,SAAS,wBAAkD;AAapD,SAAS,gBAAgB,KAAa,SAAyB;AACpE,MAAI,CAAC,IAAK,QAAO;AAEjB,MAAI;AACF,QAAI,IAAI,GAAG;AACX,WAAO;AAAA,EACT,QAAQ;AACN,QAAI,CAAC,QAAS,QAAO;AAErB,QAAI;AACF,aAAO,IAAI,IAAI,KAAK,OAAO,EAAE,SAAS;AAAA,IACxC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEA,IAAM,6BAA6B,CAAC,UAAU,SAAS,SAAS;AAEhE,IAAM,0BAA0B,CAC9B,mBACsB;AACtB,MAAI,mBAAmB,MAAO,QAAO,CAAC;AACtC,SAAO,mBAAmB,SAAS,6BAA6B;AAClE;AAEO,IAAM,sBAAsB,CACjC,WACA,mBACa;AACb,QAAM,SAAS,IAAI,IAAI,SAAS;AAChC,aAAW,SAAS,wBAAwB,cAAc,EAAG,QAAO,IAAI,KAAK;AAC7E,SAAO,CAAC,GAAG,MAAM;AACnB;AAYA,IAAM,eAAe,CAAC,QAAsB,eAA2C;AACrF,QAAM,QAAQ,OAAO,MAAM,YAAY;AACvC,MAAI,WAAW,YAAY,MAAM,iBAAiB;AAChD,QAAI,MAAM,SAAS,QAAQ,EAAG,QAAO;AACrC,QAAI,MAAM,SAAS,OAAO,EAAG,QAAO;AAAA,EACtC;AACA,SAAO;AACT;AAEA,IAAM,kBAAkB,CAAC,SACvB,KACG,YAAY,EACZ,QAAQ,eAAe,GAAG,EAC1B,QAAQ,YAAY,EAAE;AAE3B,IAAM,sBAAsB,CAAC,gBAAgE;AAC3F,QAAM,YAAY,oBAAI,IAAoB;AAC1C,MAAI,YAAY,UAAU,EAAG,QAAO;AAEpC,QAAM,QAAQ,oBAAI,IAAY;AAC9B,aAAW,cAAc,aAAa;AACpC,UAAM,OAAO,gBAAgB,UAAU,KAAK;AAC5C,QAAI,WAAW;AACf,aAAS,SAAS,GAAG,MAAM,IAAI,QAAQ,GAAG,UAAU,GAAG;AACrD,iBAAW,GAAG,IAAI,IAAI,MAAM;AAAA,IAC9B;AACA,UAAM,IAAI,QAAQ;AAClB,cAAU,IAAI,YAAY,QAAQ;AAAA,EACpC;AACA,SAAO;AACT;AAEA,IAAM,iCAAiC,CACrC,QACA,SACyB;AACzB,QAAM,YAAY,oBAAoB,OAAO,aAAa;AAC1D,SAAO;AAAA,IACL;AAAA,IACA,MAAM;AAAA,IACN,YAAY,OAAO,cAAc,IAAI,CAAC,eAAe;AACnD,YAAM,SAAS,aAAa,QAAQ,UAAU;AAC9C,YAAM,WAAW,UAAU,IAAI,UAAU;AACzC,aAAO;AAAA,QACL,SAAS;AAAA,QACT,MAAM;AAAA,QACN,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;AAAA,QAC3B,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;AAAA,MACjC;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAEA,IAAM,0BAA0B,CAC9B,QACA,SACA,MACA,YACyB;AAAA,EACzB;AAAA,EACA,MAAM;AAAA,EACN,kBAAkB;AAAA,IACT,iBAAU,OAAO,kBAAkB,MAAM,EAAE;AAAA,IAClD;AAAA,EACF;AAAA,EACA,UAAU,gBAAgB,OAAO,UAAU,OAAO;AAAA,EAClD,QAAQ,CAAC,GAAG,MAAM;AACpB;AAUO,IAAM,kCAAkC,CAC7C,eACA,eACA,YAC8B;AAC9B,QAAM,YAA8B,CAAC;AACrC,gBAAc,QAAQ,CAAC,QAAQ,UAAU;AACvC,cAAU;AAAA,MACR,+BAA+B,QAAQ,iBAAiB,KAAK,UAAU,KAAK,EAAE,CAAC;AAAA,IACjF;AAAA,EACF,CAAC;AACD,aAAW,UAAU,eAAe;AAClC,UAAM,SAAS,oBAAoB,OAAO,KAAK,OAAO,MAAM,GAAG,OAAO,cAAc;AACpF,cAAU;AAAA,MACR;AAAA,QACE;AAAA,QACA;AAAA,QACA,iBAAiB,KAAK,SAAS,OAAO,kBAAkB,EAAE;AAAA,QAC1D;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEO,IAAM,yBAAyB,CAAC,YAAyC;AAC9E,QAAM,cAAc,QAAQ,QAAQ,CAAC;AACrC,SAAO,cACH,iBAAiB,YAAY,KAAY,sBAAe,YAAY,SAAS,GAAG,CAAC,CAAC,IAClF;AACN;AAIO,IAAM,0CAA0C,CACrD,SACA,YAEA;AAAA,EACE,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,WAAW,uBAAuB,OAAO;AAC3C;","names":[]}
+{"version":3,"sources":["../src/sdk/derive-auth.ts"],"sourcesContent":["// Spec-detected auth → stored `Authentication` templates, shared by every add\n// path. The React add flow derives templates from the preview before calling\n// `addSpec`; `addSpec` itself falls back to the same derivation when the\n// caller omits `authenticationTemplate` (the agentic/API path has no client\n// to do it). One implementation so the web UI and headless callers cannot\n// drift: an integration added over MCP gets the same auth methods the add\n// page would have produced.\nimport * as Option from \"effect/Option\";\n\nimport { AuthTemplateSlug, type OAuthAuthentication } from \"@executor-js/sdk/shared\";\n\nimport type { HeaderPreset, OAuth2Preset, SpecPreview, SpecPreviewSummary } from \"./preview\";\nimport type { APIKeyAuthentication, Authentication } from \"./types\";\nimport { resolveServerUrl } from \"./openapi-utils\";\n\ntype PreviewAuthMetadata = SpecPreview | SpecPreviewSummary;\n\n// ---------------------------------------------------------------------------\n// OpenAPI url helpers — specs sometimes ship relative OAuth endpoints; resolve\n// them against the chosen base URL so the stored auth template is absolute.\n// ---------------------------------------------------------------------------\n\nexport function resolveOAuthUrl(url: string, baseUrl: string): string {\n  if (!url) return url;\n  // oxlint-disable-next-line executor/no-try-catch-or-throw -- boundary: URL constructor normalizes provider metadata URLs\n  try {\n    new URL(url);\n    return url;\n  } catch {\n    if (!baseUrl) return url;\n    // oxlint-disable-next-line executor/no-try-catch-or-throw -- boundary: URL constructor resolves relative provider metadata URLs\n    try {\n      return new URL(url, baseUrl).toString();\n    } catch {\n      return url;\n    }\n  }\n}\n\nconst standardOidcIdentityScopes = [\"openid\", \"email\", \"profile\"] as const;\n\nconst identityScopesForPreset = (\n  identityScopes: OAuth2Preset[\"identityScopes\"],\n): readonly string[] => {\n  if (identityScopes === false) return [];\n  return identityScopes === \"auto\" ? standardOidcIdentityScopes : identityScopes;\n};\n\nexport const resolvedOAuthScopes = (\n  apiScopes: Iterable<string>,\n  identityScopes: OAuth2Preset[\"identityScopes\"],\n): string[] => {\n  const merged = new Set(apiScopes);\n  for (const scope of identityScopesForPreset(identityScopes)) merged.add(scope);\n  return [...merged];\n};\n\n// ---------------------------------------------------------------------------\n// Auth-template builders — turn a preview preset into the integration's stored\n// `Authentication` template (v2). A single-header preset becomes an `apiKey`\n// template whose secret header value renders from the conventional `token`\n// input. A multi-header preset gets one input per header, matching OpenAPI's\n// security-strategy semantics where multiple schemes in one object are required\n// together. The oauth2 preset becomes an `oauth` template carrying the provider\n// endpoints.\n// ---------------------------------------------------------------------------\n\nconst headerPrefix = (preset: HeaderPreset, headerName: string): string | undefined => {\n  const label = preset.label.toLowerCase();\n  if (headerName.toLowerCase() === \"authorization\") {\n    if (label.includes(\"bearer\")) return \"Bearer \";\n    if (label.includes(\"basic\")) return \"Basic \";\n  }\n  return undefined;\n};\n\nconst slugifyVariable = (name: string): string =>\n  name\n    .toLowerCase()\n    .replace(/[^a-z0-9]+/g, \"_\")\n    .replace(/^_+|_+$/g, \"\");\n\nconst variablesForHeaders = (headerNames: readonly string[]): ReadonlyMap<string, string> => {\n  const variables = new Map<string, string>();\n  if (headerNames.length <= 1) return variables;\n\n  const taken = new Set<string>();\n  for (const headerName of headerNames) {\n    const base = slugifyVariable(headerName) || \"input\";\n    let variable = base;\n    for (let suffix = 2; taken.has(variable); suffix += 1) {\n      variable = `${base}_${suffix}`;\n    }\n    taken.add(variable);\n    variables.set(headerName, variable);\n  }\n  return variables;\n};\n\nconst apiKeyTemplateFromHeaderPreset = (\n  preset: HeaderPreset,\n  slug: AuthTemplateSlug,\n): APIKeyAuthentication => {\n  const variables = variablesForHeaders(preset.secretHeaders);\n  return {\n    slug,\n    kind: \"apikey\",\n    placements: preset.secretHeaders.map((headerName) => {\n      const prefix = headerPrefix(preset, headerName);\n      const variable = variables.get(headerName);\n      return {\n        carrier: \"header\" as const,\n        name: headerName,\n        ...(prefix ? { prefix } : {}),\n        ...(variable ? { variable } : {}),\n      };\n    }),\n  };\n};\n\nconst oauthTemplateFromPreset = (\n  preset: OAuth2Preset,\n  baseUrl: string,\n  slug: AuthTemplateSlug,\n  scopes: readonly string[],\n): OAuthAuthentication => ({\n  slug,\n  kind: \"oauth2\",\n  authorizationUrl: resolveOAuthUrl(\n    Option.getOrElse(preset.authorizationUrl, () => \"\"),\n    baseUrl,\n  ),\n  tokenUrl: resolveOAuthUrl(preset.tokenUrl, baseUrl),\n  resource: Option.getOrUndefined(preset.resource) ?? null,\n  scopes: [...scopes],\n  ...(preset.supportsClientIdMetadataDocument === true\n    ? { supportsClientIdMetadataDocument: true }\n    : {}),\n});\n\n// ---------------------------------------------------------------------------\n// All spec-detected auth methods → the union of stored `Authentication`\n// templates. Header presets become apiKey templates; each oauth2 preset becomes\n// an oauth template (with its declared API scopes plus, for auth-code flows,\n// the standard identity scopes). Slugs stay deterministic per method so the\n// stored template is stable across previews of the same spec.\n// ---------------------------------------------------------------------------\n\nexport const detectedAuthenticationTemplates = (\n  headerPresets: readonly HeaderPreset[],\n  oauth2Presets: readonly OAuth2Preset[],\n  baseUrl: string,\n): readonly Authentication[] => {\n  const templates: Authentication[] = [];\n  headerPresets.forEach((preset, index) => {\n    templates.push(\n      apiKeyTemplateFromHeaderPreset(preset, AuthTemplateSlug.make(`apikey-${index}`)),\n    );\n  });\n  for (const preset of oauth2Presets) {\n    const scopes = resolvedOAuthScopes(Object.keys(preset.scopes), preset.identityScopes);\n    templates.push(\n      oauthTemplateFromPreset(\n        preset,\n        baseUrl,\n        AuthTemplateSlug.make(`oauth-${preset.securitySchemeName}`),\n        scopes,\n      ),\n    );\n  }\n  return templates;\n};\n\nexport const firstBaseUrlForPreview = (preview: PreviewAuthMetadata): string => {\n  const firstServer = preview.servers[0];\n  return firstServer\n    ? resolveServerUrl(firstServer.url, Option.getOrUndefined(firstServer.variables), {})\n    : \"\";\n};\n\n/** The fallback `addSpec` uses when no explicit template was passed: every\n *  spec-detected method, resolved against the integration's base URL. */\nexport const deriveAuthenticationTemplateFromPreview = (\n  preview: PreviewAuthMetadata,\n  baseUrl: string | undefined,\n): readonly Authentication[] =>\n  detectedAuthenticationTemplates(\n    preview.headerPresets,\n    preview.oauth2Presets,\n    baseUrl ?? firstBaseUrlForPreview(preview),\n  );\n"],"mappings":";;;;;AAOA,YAAY,YAAY;AAExB,SAAS,wBAAkD;AAapD,SAAS,gBAAgB,KAAa,SAAyB;AACpE,MAAI,CAAC,IAAK,QAAO;AAEjB,MAAI;AACF,QAAI,IAAI,GAAG;AACX,WAAO;AAAA,EACT,QAAQ;AACN,QAAI,CAAC,QAAS,QAAO;AAErB,QAAI;AACF,aAAO,IAAI,IAAI,KAAK,OAAO,EAAE,SAAS;AAAA,IACxC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAEA,IAAM,6BAA6B,CAAC,UAAU,SAAS,SAAS;AAEhE,IAAM,0BAA0B,CAC9B,mBACsB;AACtB,MAAI,mBAAmB,MAAO,QAAO,CAAC;AACtC,SAAO,mBAAmB,SAAS,6BAA6B;AAClE;AAEO,IAAM,sBAAsB,CACjC,WACA,mBACa;AACb,QAAM,SAAS,IAAI,IAAI,SAAS;AAChC,aAAW,SAAS,wBAAwB,cAAc,EAAG,QAAO,IAAI,KAAK;AAC7E,SAAO,CAAC,GAAG,MAAM;AACnB;AAYA,IAAM,eAAe,CAAC,QAAsB,eAA2C;AACrF,QAAM,QAAQ,OAAO,MAAM,YAAY;AACvC,MAAI,WAAW,YAAY,MAAM,iBAAiB;AAChD,QAAI,MAAM,SAAS,QAAQ,EAAG,QAAO;AACrC,QAAI,MAAM,SAAS,OAAO,EAAG,QAAO;AAAA,EACtC;AACA,SAAO;AACT;AAEA,IAAM,kBAAkB,CAAC,SACvB,KACG,YAAY,EACZ,QAAQ,eAAe,GAAG,EAC1B,QAAQ,YAAY,EAAE;AAE3B,IAAM,sBAAsB,CAAC,gBAAgE;AAC3F,QAAM,YAAY,oBAAI,IAAoB;AAC1C,MAAI,YAAY,UAAU,EAAG,QAAO;AAEpC,QAAM,QAAQ,oBAAI,IAAY;AAC9B,aAAW,cAAc,aAAa;AACpC,UAAM,OAAO,gBAAgB,UAAU,KAAK;AAC5C,QAAI,WAAW;AACf,aAAS,SAAS,GAAG,MAAM,IAAI,QAAQ,GAAG,UAAU,GAAG;AACrD,iBAAW,GAAG,IAAI,IAAI,MAAM;AAAA,IAC9B;AACA,UAAM,IAAI,QAAQ;AAClB,cAAU,IAAI,YAAY,QAAQ;AAAA,EACpC;AACA,SAAO;AACT;AAEA,IAAM,iCAAiC,CACrC,QACA,SACyB;AACzB,QAAM,YAAY,oBAAoB,OAAO,aAAa;AAC1D,SAAO;AAAA,IACL;AAAA,IACA,MAAM;AAAA,IACN,YAAY,OAAO,cAAc,IAAI,CAAC,eAAe;AACnD,YAAM,SAAS,aAAa,QAAQ,UAAU;AAC9C,YAAM,WAAW,UAAU,IAAI,UAAU;AACzC,aAAO;AAAA,QACL,SAAS;AAAA,QACT,MAAM;AAAA,QACN,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;AAAA,QAC3B,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;AAAA,MACjC;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAEA,IAAM,0BAA0B,CAC9B,QACA,SACA,MACA,YACyB;AAAA,EACzB;AAAA,EACA,MAAM;AAAA,EACN,kBAAkB;AAAA,IACT,iBAAU,OAAO,kBAAkB,MAAM,EAAE;AAAA,IAClD;AAAA,EACF;AAAA,EACA,UAAU,gBAAgB,OAAO,UAAU,OAAO;AAAA,EAClD,UAAiB,sBAAe,OAAO,QAAQ,KAAK;AAAA,EACpD,QAAQ,CAAC,GAAG,MAAM;AAAA,EAClB,GAAI,OAAO,qCAAqC,OAC5C,EAAE,kCAAkC,KAAK,IACzC,CAAC;AACP;AAUO,IAAM,kCAAkC,CAC7C,eACA,eACA,YAC8B;AAC9B,QAAM,YAA8B,CAAC;AACrC,gBAAc,QAAQ,CAAC,QAAQ,UAAU;AACvC,cAAU;AAAA,MACR,+BAA+B,QAAQ,iBAAiB,KAAK,UAAU,KAAK,EAAE,CAAC;AAAA,IACjF;AAAA,EACF,CAAC;AACD,aAAW,UAAU,eAAe;AAClC,UAAM,SAAS,oBAAoB,OAAO,KAAK,OAAO,MAAM,GAAG,OAAO,cAAc;AACpF,cAAU;AAAA,MACR;AAAA,QACE;AAAA,QACA;AAAA,QACA,iBAAiB,KAAK,SAAS,OAAO,kBAAkB,EAAE;AAAA,QAC1D;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEO,IAAM,yBAAyB,CAAC,YAAyC;AAC9E,QAAM,cAAc,QAAQ,QAAQ,CAAC;AACrC,SAAO,cACH,iBAAiB,YAAY,KAAY,sBAAe,YAAY,SAAS,GAAG,CAAC,CAAC,IAClF;AACN;AAIO,IAAM,0CAA0C,CACrD,SACA,YAEA;AAAA,EACE,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,WAAW,uBAAuB,OAAO;AAC3C;","names":[]}