@executor-js/plugin-openapi 1.5.6 → 1.5.7

package/dist/chunk-WJQIWTZF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/config.ts","../src/sdk/invoke.ts","../src/sdk/store.ts","../src/sdk/plugin.ts","../src/sdk/definitions.ts"],"sourcesContent":["import { Option, Schema } from \"effect\";\nimport {\n  ApiKeyAuthMethod,\n  TOKEN_VARIABLE,\n  renderAuthPlacements,\n  requiredPlacementVariables,\n} from \"@executor-js/sdk/http-auth\";\n\nimport type { Authentication } from \"./types\";\n\n// ---------------------------------------------------------------------------\n// OpenAPI integration config — the opaque blob stored on the catalog\n// `integration.config` column (D1). Core never parses it; the plugin writes it\n// at register time and reads it back in `resolveTools` / `invokeTool`.\n//\n// In v2 there are NO credential bindings, NO per-source secret slots, and NO\n// StoredSource credential config. The config carries only:\n//   - the content hash of the spec blob and/or the source URL to (re)fetch\n//     from,\n//   - the optional base URL override,\n//   - the auth templates a connection's value is rendered through.\n// The resolved spec text itself lives in the plugin blob store, keyed\n// `spec/<specHash>` — it's a build input for resolveTools/refresh, not data\n// any list/invoke path should pay to load. Rows that predate the blob store\n// (inline `spec` text) are rewritten before this schema sees them: cloud by\n// the out-of-band migrate-specs-to-blobs script, the libSQL hosts by the\n// boot-time ledger migration.\n// ---------------------------------------------------------------------------\n\nconst OAuthAuthenticationSchema = Schema.Struct({\n  slug: Schema.String,\n  kind: Schema.Literal(\"oauth2\"),\n  authorizationUrl: Schema.String,\n  tokenUrl: Schema.String,\n  scopes: Schema.Array(Schema.String),\n});\n\nexport const AuthenticationSchema = Schema.Union([OAuthAuthenticationSchema, ApiKeyAuthMethod]);\n\nexport const OpenApiIntegrationConfigSchema = Schema.Struct({\n  /** Hex SHA-256 of the resolved spec text — the content address of the spec\n   *  blob (`spec/<hash>` in the plugin blob store). */\n  specHash: Schema.optional(Schema.String),\n  /** Origin URL the spec was fetched from, when known. Enables refresh. */\n  sourceUrl: Schema.optional(Schema.String),\n  /** Google Discovery bundle URLs, when the spec came from a Google bundle. */\n  googleDiscoveryUrls: Schema.optional(Schema.Array(Schema.String)),\n  /** Optional base URL override. */\n  baseUrl: Schema.optional(Schema.String),\n  /** Static headers applied to every request (no secret material). */\n  headers: Schema.optional(Schema.Record(Schema.String, Schema.String)),\n  /** Static query params applied to every request (no secret material). */\n  queryParams: Schema.optional(Schema.Record(Schema.String, Schema.String)),\n  /** The auth methods a connection's value can be applied through. */\n  authenticationTemplate: Schema.optional(Schema.Array(AuthenticationSchema)),\n});\n\nexport type OpenApiIntegrationConfig = Omit<\n  typeof OpenApiIntegrationConfigSchema.Type,\n  \"authenticationTemplate\"\n> & {\n  /** Branded over the schema's structural form so the template renderer can\n   *  treat `slug` as an `AuthTemplateSlug`. */\n  readonly authenticationTemplate?: readonly Authentication[];\n};\n\nconst decodeConfig = Schema.decodeUnknownOption(OpenApiIntegrationConfigSchema);\n\n/** Decode the opaque integration config blob into the openapi shape.\n *  Returns null when the blob is missing/incompatible. */\nexport const decodeOpenApiIntegrationConfig = (value: unknown): OpenApiIntegrationConfig | null =>\n  Option.getOrNull(decodeConfig(value)) as OpenApiIntegrationConfig | null;\n\n// ---------------------------------------------------------------------------\n// Template rendering — \"auth state derived into the auth-template format\"\n// (D11). An apiKey method renders through the shared placements renderer; an\n// oauth template (no explicit placement) renders a bearer `authorization`\n// header from the `token` input (the access token).\n// ---------------------------------------------------------------------------\n\nexport interface RenderedAuth {\n  readonly headers: Record<string, string>;\n  readonly queryParams: Record<string, string>;\n}\n\n/** Render an auth template against a connection's resolved input `values`\n *  (`variable → value`). Each placement substitutes from its own entry, so a\n *  method with two distinct inputs (e.g. Datadog) fills each header from a\n *  different value. */\nexport const renderAuthTemplate = (\n  template: Authentication,\n  values: Record<string, string | null>,\n): RenderedAuth => {\n  if (template.kind === \"oauth2\") {\n    return {\n      headers: { authorization: `Bearer ${values[TOKEN_VARIABLE] ?? \"\"}` },\n      queryParams: {},\n    };\n  }\n  return renderAuthPlacements(template.placements, values);\n};\n\n/** The distinct input variables a template references — the inputs a connection\n *  must supply. An oauth template needs `token`; an apiKey method needs every\n *  variable across its placements. */\nexport const requiredTemplateVariables = (template: Authentication): readonly string[] => {\n  if (template.kind === \"oauth2\") return [TOKEN_VARIABLE];\n  return requiredPlacementVariables(template.placements);\n};\n","import { Effect, Layer, Option } from \"effect\";\nimport { HttpClient, HttpClientRequest } from \"effect/unstable/http\";\n\nimport { OpenApiInvocationError } from \"./errors\";\nimport { resolveServerUrl } from \"./openapi-utils\";\nimport {\n  type EncodingObject,\n  type OperationBinding,\n  InvocationResult,\n  type MediaBinding,\n  type OperationParameter,\n  type ServerInfo,\n} from \"./types\";\n\n// ---------------------------------------------------------------------------\n// Parameter reading\n// ---------------------------------------------------------------------------\n\nconst CONTAINER_KEYS: Record<string, readonly string[]> = {\n  path: [\"path\", \"pathParams\", \"params\"],\n  query: [\"query\", \"queryParams\", \"params\"],\n  header: [\"headers\", \"header\"],\n  cookie: [\"cookies\", \"cookie\"],\n};\n\nconst readParamValue = (args: Record<string, unknown>, param: OperationParameter): unknown => {\n  const direct = args[param.name];\n  if (direct !== undefined) return direct;\n\n  for (const key of CONTAINER_KEYS[param.location] ?? []) {\n    const container = args[key];\n    if (typeof container === \"object\" && container !== null && !Array.isArray(container)) {\n      const nested = (container as Record<string, unknown>)[param.name];\n      if (nested !== undefined) return nested;\n    }\n  }\n\n  return undefined;\n};\n\nconst primitiveToString = (value: unknown): string =>\n  typeof value === \"object\" && value !== null ? JSON.stringify(value) : String(value);\n\n// RFC 3986 §2.2 reserved chars. `allowReserved: true` leaves these\n// unencoded; default OAS behavior encodes everything non-unreserved.\nconst RESERVED_UNENCODED_RE = /[A-Za-z0-9\\-._~:/?#[\\]@!$&'()*+,;=]/;\n\nconst encodeReservedAware = (raw: string, allowReserved: boolean): string => {\n  if (!allowReserved) return encodeURIComponent(raw);\n  // Walk char-by-char so the reserved set passes through as-is.\n  let out = \"\";\n  for (const ch of raw) {\n    out += RESERVED_UNENCODED_RE.test(ch) ? ch : encodeURIComponent(ch);\n  }\n  return out;\n};\n\nconst queryParamValues = (value: unknown, param: OperationParameter): string[] => {\n  if (value === undefined || value === null) return [];\n  if (!Array.isArray(value)) return [primitiveToString(value)];\n\n  const style = Option.getOrUndefined(param.style) ?? \"form\";\n  const explode = Option.getOrElse(param.explode, () => true);\n\n  if (explode) return value.map(primitiveToString);\n\n  const separator = style === \"spaceDelimited\" ? \" \" : style === \"pipeDelimited\" ? \"|\" : \",\";\n  return [value.map(primitiveToString).join(separator)];\n};\n\n// ---------------------------------------------------------------------------\n// Path resolution\n// ---------------------------------------------------------------------------\n\nconst resolvePath = Effect.fn(\"OpenApi.resolvePath\")(function* (\n  pathTemplate: string,\n  args: Record<string, unknown>,\n  parameters: readonly OperationParameter[],\n) {\n  let resolved = pathTemplate;\n\n  for (const param of parameters) {\n    if (param.location !== \"path\") continue;\n    const value = readParamValue(args, param);\n    if (value === undefined || value === null) {\n      if (param.required) {\n        return yield* new OpenApiInvocationError({\n          message: `Missing required path parameter: ${param.name}`,\n          statusCode: Option.none(),\n        });\n      }\n      continue;\n    }\n    const encoded = encodeReservedAware(\n      String(value),\n      Option.getOrElse(param.allowReserved, () => false),\n    );\n    resolved = resolved.replaceAll(`{${param.name}}`, encoded);\n    resolved = resolved.replaceAll(`{+${param.name}}`, encoded);\n  }\n\n  const remaining = [...resolved.matchAll(/\\{([^{}]+)\\}/g)]\n    .map((m) => m[1])\n    .filter((v): v is string => typeof v === \"string\");\n\n  for (const name of remaining) {\n    const value = args[name];\n    if (value !== undefined && value !== null) {\n      resolved = resolved.replaceAll(`{${name}}`, encodeURIComponent(String(value)));\n    }\n  }\n\n  const unresolved = [...resolved.matchAll(/\\{([^{}]+)\\}/g)]\n    .map((m) => m[1])\n    .filter((v): v is string => typeof v === \"string\");\n\n  if (unresolved.length > 0) {\n    return yield* new OpenApiInvocationError({\n      message: `Unresolved path parameters: ${[...new Set(unresolved)].join(\", \")}`,\n      statusCode: Option.none(),\n    });\n  }\n\n  return resolved;\n});\n\nconst applyHeaders = (\n  request: HttpClientRequest.HttpClientRequest,\n  headers: Record<string, string>,\n): HttpClientRequest.HttpClientRequest => {\n  let req = request;\n  for (const [name, value] of Object.entries(headers)) {\n    req = HttpClientRequest.setHeader(req, name, value);\n  }\n  return req;\n};\n\n// ---------------------------------------------------------------------------\n// Response helpers\n// ---------------------------------------------------------------------------\n\nconst normalizeContentType = (ct: string | null | undefined): string =>\n  ct?.split(\";\")[0]?.trim().toLowerCase() ?? \"\";\n\nconst isJsonContentType = (ct: string | null | undefined): boolean => {\n  const normalized = normalizeContentType(ct);\n  if (!normalized) return false;\n  return (\n    normalized === \"application/json\" || normalized.includes(\"+json\") || normalized.includes(\"json\")\n  );\n};\n\nconst isFormUrlEncoded = (ct: string | null | undefined): boolean =>\n  normalizeContentType(ct) === \"application/x-www-form-urlencoded\";\n\nconst isMultipartFormData = (ct: string | null | undefined): boolean =>\n  normalizeContentType(ct).startsWith(\"multipart/form-data\");\n\nconst isXmlContentType = (ct: string | null | undefined): boolean => {\n  const normalized = normalizeContentType(ct);\n  if (!normalized) return false;\n  return (\n    normalized === \"application/xml\" || normalized === \"text/xml\" || normalized.endsWith(\"+xml\")\n  );\n};\n\nconst isTextContentType = (ct: string | null | undefined): boolean =>\n  normalizeContentType(ct).startsWith(\"text/\");\n\nconst isOctetStream = (ct: string | null | undefined): boolean =>\n  normalizeContentType(ct) === \"application/octet-stream\";\n\nconst toUint8Array = (value: unknown): Uint8Array | null => {\n  if (value instanceof Uint8Array) return value;\n  if (value instanceof ArrayBuffer) return new Uint8Array(value);\n  if (ArrayBuffer.isView(value)) {\n    const view = value as ArrayBufferView;\n    return new Uint8Array(view.buffer, view.byteOffset, view.byteLength);\n  }\n  if (Array.isArray(value) && value.every((v) => typeof v === \"number\")) {\n    return new Uint8Array(value as readonly number[]);\n  }\n  return null;\n};\n\ntype FormDataRecord = Parameters<typeof HttpClientRequest.bodyFormDataRecord>[1];\ntype FormDataCoercible = FormDataRecord[string];\n\n// Pull a plain ArrayBuffer out of a Uint8Array — `new Blob([u8])` rejects\n// views whose `.buffer` is `SharedArrayBuffer | ArrayBuffer` under strict\n// lib.dom typings.\nconst toArrayBuffer = (bytes: Uint8Array): ArrayBuffer => {\n  const copy = new ArrayBuffer(bytes.byteLength);\n  new Uint8Array(copy).set(bytes);\n  return copy;\n};\n\n// ---------------------------------------------------------------------------\n// OpenAPI 3.x encoding — per-property style/explode/allowReserved/contentType\n// for multipart/form-data and application/x-www-form-urlencoded bodies.\n// Spec ref: https://spec.openapis.org/oas/v3.1.0#encoding-object\n// ---------------------------------------------------------------------------\n\ntype StyleExplode = {\n  readonly style: string;\n  readonly explode: boolean;\n  readonly allowReserved: boolean;\n};\n\nconst DEFAULT_FORM_STYLE: StyleExplode = {\n  style: \"form\",\n  explode: true,\n  allowReserved: false,\n};\n\nconst resolveStyleExplode = (e: EncodingObject | undefined): StyleExplode => {\n  if (!e) return DEFAULT_FORM_STYLE;\n  return {\n    style: Option.getOrElse(e.style, () => DEFAULT_FORM_STYLE.style),\n    explode: Option.getOrElse(e.explode, () => DEFAULT_FORM_STYLE.explode),\n    allowReserved: Option.getOrElse(e.allowReserved, () => DEFAULT_FORM_STYLE.allowReserved),\n  };\n};\n\nconst encodeFormValue = (v: unknown, allowReserved: boolean): string => {\n  const raw = typeof v === \"object\" && v !== null ? JSON.stringify(v) : String(v);\n  return encodeReservedAware(raw, allowReserved);\n};\n\n/**\n * Serialize a record to application/x-www-form-urlencoded with OAS3 style\n * rules honored per-field. Supports `form` (default), `deepObject`,\n * `pipeDelimited`, `spaceDelimited` styles with `explode` true / false.\n */\nconst serializeFormUrlEncoded = (\n  value: Record<string, unknown>,\n  encoding: Record<string, EncodingObject> | undefined,\n): string => {\n  const parts: string[] = [];\n  for (const [key, raw] of Object.entries(value)) {\n    if (raw === undefined || raw === null) continue;\n    const { style, explode, allowReserved } = resolveStyleExplode(encoding?.[key]);\n    const encKey = encodeURIComponent(key);\n\n    if (Array.isArray(raw)) {\n      if (explode) {\n        for (const v of raw) {\n          parts.push(`${encKey}=${encodeFormValue(v, allowReserved)}`);\n        }\n      } else {\n        const sep = style === \"spaceDelimited\" ? \" \" : style === \"pipeDelimited\" ? \"|\" : \",\";\n        parts.push(\n          `${encKey}=${encodeFormValue(\n            raw.map((v) => (typeof v === \"object\" ? JSON.stringify(v) : String(v))).join(sep),\n            allowReserved,\n          )}`,\n        );\n      }\n      continue;\n    }\n\n    if (typeof raw === \"object\") {\n      const entries = Object.entries(raw as Record<string, unknown>).filter(\n        ([, v]) => v !== undefined && v !== null,\n      );\n      if (style === \"deepObject\") {\n        for (const [subkey, subval] of entries) {\n          // Encode the whole `key[subkey]` fragment so `[` / `]` become\n          // `%5B` / `%5D`. Matches swagger-client's behaviour and remains\n          // accepted by common server-side parsers (qs, Rails, etc.).\n          parts.push(\n            `${encodeURIComponent(`${key}[${subkey}]`)}=${encodeFormValue(subval, allowReserved)}`,\n          );\n        }\n      } else if (explode) {\n        // form + explode=true on object: sub-keys become top-level fields.\n        for (const [subkey, subval] of entries) {\n          parts.push(`${encodeURIComponent(subkey)}=${encodeFormValue(subval, allowReserved)}`);\n        }\n      } else {\n        // form + explode=false on object: flatten to csv key,val,key,val.\n        const flat = entries.flatMap(([k, v]) => [\n          k,\n          typeof v === \"object\" ? JSON.stringify(v) : String(v),\n        ]);\n        parts.push(`${encKey}=${encodeFormValue(flat.join(\",\"), allowReserved)}`);\n      }\n      continue;\n    }\n\n    parts.push(`${encKey}=${encodeFormValue(raw, allowReserved)}`);\n  }\n  return parts.join(\"&\");\n};\n\n/**\n * Best-effort build of a multipart FormData entry record.\n *\n * If `encoding[key].contentType` is declared (OAS3 §4.8.15), wrap the value\n * in a `Blob` with that type so the runtime multipart framer emits the\n * per-part `Content-Type` header (e.g. `application/json` for a metadata\n * part whose server expects parsed JSON).\n *\n * Otherwise: primitives pass through, arrays handle their item types, byte\n * shapes wrap as Blob, nested objects JSON-stringify (never `[object Object]`).\n */\nconst coerceFormDataRecord = (\n  value: Record<string, unknown>,\n  encoding: Record<string, EncodingObject> | undefined,\n): FormDataRecord => {\n  const out: Record<string, FormDataCoercible> = {};\n  for (const [key, raw] of Object.entries(value)) {\n    if (raw === undefined || raw === null) continue;\n\n    const partType = encoding?.[key]\n      ? Option.getOrUndefined(encoding[key]!.contentType)\n      : undefined;\n\n    // Explicit per-part content type: wrap in a typed Blob so the framer\n    // emits `Content-Type: <partType>` on this part. JSON types get the\n    // value JSON-stringified first so the blob body is valid JSON.\n    if (partType) {\n      const isJson = partType.startsWith(\"application/json\") || partType.includes(\"+json\");\n      const serialized =\n        typeof raw === \"string\"\n          ? raw\n          : isJson\n            ? JSON.stringify(raw)\n            : typeof raw === \"object\"\n              ? JSON.stringify(raw)\n              : String(raw);\n      out[key] = new Blob([serialized], { type: partType });\n      continue;\n    }\n\n    if (\n      typeof raw === \"string\" ||\n      typeof raw === \"number\" ||\n      typeof raw === \"boolean\" ||\n      raw instanceof Blob ||\n      (typeof File !== \"undefined\" && raw instanceof File)\n    ) {\n      out[key] = raw as FormDataCoercible;\n      continue;\n    }\n    if (Array.isArray(raw)) {\n      out[key] = raw.map((v) =>\n        typeof v === \"string\" ||\n        typeof v === \"number\" ||\n        typeof v === \"boolean\" ||\n        v instanceof Blob ||\n        (typeof File !== \"undefined\" && v instanceof File)\n          ? (v as FormDataCoercible)\n          : JSON.stringify(v),\n      ) as FormDataCoercible;\n      continue;\n    }\n    const bytes = toUint8Array(raw);\n    if (bytes) {\n      out[key] = new Blob([toArrayBuffer(bytes)]);\n      continue;\n    }\n    out[key] = JSON.stringify(raw);\n  }\n  return out;\n};\n\n// ---------------------------------------------------------------------------\n// Request body dispatch\n//\n// Dispatch is driven by the spec-declared content type first, JS type of\n// the provided body second. Servers that advertise a specific content type\n// almost always reject anything else (e.g. a multipart endpoint will hang\n// waiting for valid framing if it receives `application/json`), so the\n// content type wins.\n//\n// Within each content type we accept both pre-serialized strings (user\n// already produced the wire format) and structured JS values we can\n// serialize ourselves. The last-resort fallback is `JSON.stringify(body)`\n// — never `String(body)` (which produces the useless `[object Object]`).\n// ---------------------------------------------------------------------------\n\nconst applyRequestBody = (\n  request: HttpClientRequest.HttpClientRequest,\n  contentType: string,\n  bodyValue: unknown,\n  encoding: Record<string, EncodingObject> | undefined,\n): HttpClientRequest.HttpClientRequest => {\n  if (isJsonContentType(contentType)) {\n    // Pre-serialized JSON strings pass through with the declared media\n    // type preserved (important for `application/vnd.foo+json` etc.).\n    if (typeof bodyValue === \"string\") {\n      return HttpClientRequest.bodyText(request, bodyValue, contentType);\n    }\n    return HttpClientRequest.bodyJsonUnsafe(request, bodyValue);\n  }\n\n  if (isFormUrlEncoded(contentType)) {\n    if (typeof bodyValue === \"string\") {\n      return HttpClientRequest.bodyText(request, bodyValue, contentType);\n    }\n    if (typeof bodyValue === \"object\" && bodyValue !== null && !Array.isArray(bodyValue)) {\n      // Serialize ourselves so OAS3 encoding (style/explode/deepObject)\n      // is honored. bodyUrlParams doesn't know about per-field style.\n      const serialized = serializeFormUrlEncoded(bodyValue as Record<string, unknown>, encoding);\n      return HttpClientRequest.bodyText(request, serialized, contentType);\n    }\n    // Non-object body — fall back to platform helper (handles URLSearchParams).\n    return HttpClientRequest.bodyUrlParams(\n      request,\n      bodyValue as Parameters<typeof HttpClientRequest.bodyUrlParams>[1],\n    );\n  }\n\n  if (isMultipartFormData(contentType)) {\n    if (bodyValue instanceof FormData) {\n      return HttpClientRequest.bodyFormData(request, bodyValue);\n    }\n    if (typeof bodyValue === \"object\" && bodyValue !== null) {\n      return HttpClientRequest.bodyFormDataRecord(\n        request,\n        coerceFormDataRecord(bodyValue as Record<string, unknown>, encoding),\n      );\n    }\n    // String / primitive under multipart is almost certainly wrong on the\n    // caller's end — send it as text with their declared content type and\n    // let the server produce a useful error.\n    return HttpClientRequest.bodyText(request, String(bodyValue), contentType);\n  }\n\n  if (isOctetStream(contentType)) {\n    const bytes = toUint8Array(bodyValue);\n    if (bytes) return HttpClientRequest.bodyUint8Array(request, bytes, contentType);\n    if (typeof bodyValue === \"string\") {\n      return HttpClientRequest.bodyText(request, bodyValue, contentType);\n    }\n    // Unknown shape — serialize as JSON so at least the payload is visible.\n    return HttpClientRequest.bodyText(request, JSON.stringify(bodyValue), contentType);\n  }\n\n  if (isXmlContentType(contentType) || isTextContentType(contentType)) {\n    if (typeof bodyValue === \"string\") {\n      return HttpClientRequest.bodyText(request, bodyValue, contentType);\n    }\n    const bytes = toUint8Array(bodyValue);\n    if (bytes) return HttpClientRequest.bodyUint8Array(request, bytes, contentType);\n    // Object body under text/xml is unusual — stringify so the caller sees\n    // their own payload instead of `[object Object]`.\n    return HttpClientRequest.bodyText(request, JSON.stringify(bodyValue), contentType);\n  }\n\n  // Unknown content type: respect what the caller supplied.\n  if (typeof bodyValue === \"string\") {\n    return HttpClientRequest.bodyText(request, bodyValue, contentType);\n  }\n  const bytes = toUint8Array(bodyValue);\n  if (bytes) return HttpClientRequest.bodyUint8Array(request, bytes, contentType);\n  return HttpClientRequest.bodyText(request, JSON.stringify(bodyValue), contentType);\n};\n\n// ---------------------------------------------------------------------------\n// Public API — invoke a single operation\n// ---------------------------------------------------------------------------\n\nexport const invoke = Effect.fn(\"OpenApi.invoke\")(function* (\n  operation: OperationBinding,\n  args: Record<string, unknown>,\n  resolvedHeaders: Record<string, string>,\n  sourceQueryParams: Record<string, string> = {},\n) {\n  const client = yield* HttpClient.HttpClient;\n\n  yield* Effect.annotateCurrentSpan({\n    \"http.method\": operation.method.toUpperCase(),\n    \"http.route\": operation.pathTemplate,\n    \"plugin.openapi.method\": operation.method.toUpperCase(),\n    \"plugin.openapi.path_template\": operation.pathTemplate,\n    \"plugin.openapi.headers.resolved_count\": Object.keys(resolvedHeaders).length,\n  });\n\n  const resolvedPath = yield* resolvePath(operation.pathTemplate, args, operation.parameters);\n\n  const path = resolvedPath.startsWith(\"/\") ? resolvedPath : `/${resolvedPath}`;\n\n  let request = HttpClientRequest.make(operation.method.toUpperCase() as \"GET\")(path);\n\n  for (const [name, value] of Object.entries(sourceQueryParams)) {\n    request = HttpClientRequest.setUrlParam(request, name, value);\n  }\n\n  for (const param of operation.parameters) {\n    if (param.location !== \"query\") continue;\n    const value = readParamValue(args, param);\n    for (const paramValue of queryParamValues(value, param)) {\n      request = HttpClientRequest.appendUrlParam(request, param.name, paramValue);\n    }\n  }\n\n  for (const param of operation.parameters) {\n    if (param.location !== \"header\") continue;\n    const value = readParamValue(args, param);\n    if (value === undefined || value === null) continue;\n    request = HttpClientRequest.setHeader(request, param.name, String(value));\n  }\n\n  if (Option.isSome(operation.requestBody)) {\n    const rb = operation.requestBody.value;\n    const bodyValue = args.body ?? args.input;\n    if (bodyValue !== undefined) {\n      // Resolve which declared media type to use. When the spec declares\n      // multiple, the caller can override via `args.contentType`; otherwise\n      // we use the first-declared (spec author's preferred ordering).\n      const contentsOpt = Option.getOrUndefined(rb.contents);\n      const requestedCt = typeof args.contentType === \"string\" ? args.contentType : undefined;\n      const selected: MediaBinding | undefined =\n        contentsOpt && requestedCt\n          ? contentsOpt.find((c) => c.contentType === requestedCt)\n          : undefined;\n      const chosenCt = selected?.contentType ?? rb.contentType;\n      const chosenEncoding = selected\n        ? Option.getOrUndefined(selected.encoding)\n        : contentsOpt && contentsOpt[0]\n          ? Option.getOrUndefined(contentsOpt[0].encoding)\n          : undefined;\n      request = applyRequestBody(request, chosenCt, bodyValue, chosenEncoding);\n    }\n  }\n\n  request = applyHeaders(request, resolvedHeaders);\n\n  const response = yield* client.execute(request).pipe(\n    Effect.mapError(\n      (err) =>\n        new OpenApiInvocationError({\n          message: \"HTTP request failed\",\n          statusCode: Option.none(),\n          cause: err,\n        }),\n    ),\n  );\n\n  const status = response.status;\n  yield* Effect.annotateCurrentSpan({\n    \"http.status_code\": status,\n  });\n  const responseHeaders: Record<string, string> = { ...response.headers };\n\n  const contentType = response.headers[\"content-type\"] ?? null;\n  const mapBodyError = Effect.mapError(\n    (err: unknown) =>\n      new OpenApiInvocationError({\n        message: \"Failed to read response body\",\n        statusCode: Option.some(status),\n        cause: err,\n      }),\n  );\n  const responseBody: unknown =\n    status === 204\n      ? null\n      : isJsonContentType(contentType)\n        ? yield* response.json.pipe(\n            Effect.catch(() => response.text),\n            mapBodyError,\n          )\n        : yield* response.text.pipe(mapBodyError);\n\n  const ok = status >= 200 && status < 300;\n\n  return InvocationResult.make({\n    status,\n    headers: responseHeaders,\n    data: ok ? responseBody : null,\n    error: ok ? null : responseBody,\n  });\n});\n\n// Connection `baseUrl` wins; otherwise the call's chosen server (`server.url`, or\n// the first) resolved with its `{variables}` (call values, else spec defaults).\nconst resolveRequestHost = (\n  servers: readonly ServerInfo[],\n  serverArg: unknown,\n  baseUrl: string,\n): string => {\n  if (baseUrl) return baseUrl;\n  if (servers.length === 0) return \"\";\n\n  const arg = (\n    typeof serverArg === \"object\" && serverArg !== null && !Array.isArray(serverArg)\n      ? serverArg\n      : {}\n  ) as { url?: unknown; variables?: unknown };\n  const chosen = servers.find((server) => server.url === arg.url) ?? servers[0]!;\n\n  const overrides: Record<string, string> = {};\n  if (typeof arg.variables === \"object\" && arg.variables !== null) {\n    for (const [name, value] of Object.entries(arg.variables as Record<string, unknown>)) {\n      if (value != null && value !== \"\") overrides[name] = String(value);\n    }\n  }\n  return resolveServerUrl(chosen.url, Option.getOrUndefined(chosen.variables), overrides);\n};\n\n// ---------------------------------------------------------------------------\n// Invoke with a provided HttpClient layer + per-call host resolution\n// ---------------------------------------------------------------------------\n\nexport const invokeWithLayer = (\n  operation: OperationBinding,\n  args: Record<string, unknown>,\n  baseUrl: string,\n  resolvedHeaders: Record<string, string>,\n  sourceQueryParams: Record<string, string>,\n  httpClientLayer: Layer.Layer<HttpClient.HttpClient, never, never>,\n) => {\n  const effectiveBaseUrl = resolveRequestHost(operation.servers ?? [], args.server, baseUrl);\n  const clientWithBaseUrl = effectiveBaseUrl\n    ? Layer.effect(\n        HttpClient.HttpClient,\n        Effect.map(\n          Effect.service(HttpClient.HttpClient),\n          HttpClient.mapRequest(HttpClientRequest.prependUrl(effectiveBaseUrl)),\n        ),\n      ).pipe(Layer.provide(httpClientLayer))\n    : httpClientLayer;\n\n  return invoke(operation, args, resolvedHeaders, sourceQueryParams).pipe(\n    Effect.provide(clientWithBaseUrl),\n    Effect.withSpan(\"plugin.openapi.invoke\", {\n      attributes: {\n        \"plugin.openapi.method\": operation.method.toUpperCase(),\n        \"plugin.openapi.path_template\": operation.pathTemplate,\n        \"plugin.openapi.base_url\": effectiveBaseUrl,\n      },\n    }),\n  );\n};\n\n// ---------------------------------------------------------------------------\n// Derive annotations from HTTP method\n// ---------------------------------------------------------------------------\n\nconst REQUIRE_APPROVAL = new Set([\"post\", \"put\", \"patch\", \"delete\"]);\n\nexport const annotationsForOperation = (\n  method: string,\n  pathTemplate: string,\n): { requiresApproval?: boolean; approvalDescription?: string } => {\n  const m = method.toLowerCase();\n  if (!REQUIRE_APPROVAL.has(m)) return {};\n  return {\n    requiresApproval: true,\n    approvalDescription: `${method.toUpperCase()} ${pathTemplate}`,\n  };\n};\n","import { Effect, Option, Predicate, Schema } from \"effect\";\n\nimport {\n  type PluginStorageEntry,\n  type StorageDeps,\n  type StorageFailure,\n} from \"@executor-js/sdk/core\";\n\nimport { OperationBinding } from \"./types\";\n\n// ---------------------------------------------------------------------------\n// OpenAPI plugin store (v2). The catalog row (integration.config) owns the\n// auth templates plus the spec's content hash; the resolved spec text itself\n// lives in the plugin blob store under `spec/<hash>` (it's multi-MB and only\n// a build input). This store keeps the per-operation invocation bindings\n// (method / path / params), keyed by integration slug, so `invokeTool` can map\n// a tool name back to its HTTP operation without re-parsing the spec on every\n// call. There are NO credential bindings, slots, or StoredSource credential\n// config here — those concepts are gone in v2.\n//\n// Operations are spec-derived (identical for every connection on an\n// integration), so they live under the org owner (the integration catalog is\n// tenant-level). The plugin storage facade partitions by owner; \"org\" keeps a\n// single shared copy per integration.\n// ---------------------------------------------------------------------------\n\nconst OPERATION_COLLECTION = \"operation\";\nconst STORE_OWNER = \"org\" as const;\n\nconst encodeBinding = Schema.encodeSync(OperationBinding);\nconst decodeBinding = Schema.decodeUnknownSync(OperationBinding);\nconst decodeBindingJson = Schema.decodeUnknownSync(Schema.fromJsonString(OperationBinding));\n\nconst toJsonRecord = (value: unknown): Record<string, unknown> => value as Record<string, unknown>;\n\nconst OperationStorage = Schema.Struct({\n  integration: Schema.String,\n  toolName: Schema.String,\n  binding: Schema.Unknown,\n});\nconst decodeOperationStorage = Schema.decodeUnknownOption(OperationStorage);\n\nexport interface StoredOperation {\n  /** The integration slug this operation belongs to. */\n  readonly integration: string;\n  /** The tool name (the `<tool>` address segment) this operation backs. */\n  readonly toolName: string;\n  readonly binding: OperationBinding;\n}\n\nconst rowToOperation = (row: PluginStorageEntry): StoredOperation | null => {\n  const decoded = decodeOperationStorage(row.data);\n  if (Option.isNone(decoded)) return null;\n  const operation = decoded.value;\n  return {\n    integration: operation.integration,\n    toolName: operation.toolName,\n    binding: decodeBinding(\n      typeof operation.binding === \"string\"\n        ? decodeBindingJson(operation.binding)\n        : operation.binding,\n    ),\n  };\n};\n\nconst operationKey = (integration: string, toolName: string): string =>\n  `${integration}.${toolName}`;\n\n/** Blob key for a spec's content hash. Content-addressed so re-puts are\n *  idempotent and identical specs share one blob per partition. */\nexport const specBlobKey = (specHash: string): string => `spec/${specHash}`;\n\nexport interface OpenapiStore {\n  /** Replace all stored operations for an integration. */\n  readonly putOperations: (\n    integration: string,\n    operations: readonly StoredOperation[],\n  ) => Effect.Effect<void, StorageFailure>;\n  /** Look up one operation by integration + tool name. */\n  readonly getOperation: (\n    integration: string,\n    toolName: string,\n  ) => Effect.Effect<StoredOperation | null, StorageFailure>;\n  /** List every stored operation for an integration. */\n  readonly listOperations: (\n    integration: string,\n  ) => Effect.Effect<readonly StoredOperation[], StorageFailure>;\n  /** Drop all stored operations for an integration. */\n  readonly removeOperations: (integration: string) => Effect.Effect<void, StorageFailure>;\n  /** Persist resolved spec text under its content hash. Org-owned and\n   *  content-addressed; never removed on integration removal because another\n   *  integration in the tenant may share the hash. */\n  readonly putSpec: (specHash: string, specText: string) => Effect.Effect<void, StorageFailure>;\n  /** Load spec text by content hash; null when no blob exists. */\n  readonly getSpec: (specHash: string) => Effect.Effect<string | null, StorageFailure>;\n}\n\nexport const makeDefaultOpenapiStore = ({ pluginStorage, blobs }: StorageDeps): OpenapiStore => {\n  const operationData = (operation: StoredOperation) => ({\n    integration: operation.integration,\n    toolName: operation.toolName,\n    binding: toJsonRecord(encodeBinding(operation.binding)),\n  });\n\n  const listRows = (integration: string) =>\n    pluginStorage\n      .list({ collection: OPERATION_COLLECTION, keyPrefix: `${integration}.` })\n      .pipe(\n        Effect.map((rows: readonly PluginStorageEntry[]) =>\n          rows.filter((row) => rowToOperation(row)?.integration === integration),\n        ),\n      );\n\n  const removeOperations = (integration: string) =>\n    Effect.gen(function* () {\n      const rows = yield* listRows(integration);\n      yield* pluginStorage.removeMany({\n        owner: STORE_OWNER,\n        entries: rows.map((row) => ({ collection: OPERATION_COLLECTION, key: row.key })),\n      });\n    });\n\n  return {\n    putOperations: (integration, operations) =>\n      Effect.gen(function* () {\n        yield* removeOperations(integration);\n        yield* pluginStorage.putMany({\n          owner: STORE_OWNER,\n          entries: operations.map((operation) => ({\n            collection: OPERATION_COLLECTION,\n            key: operationKey(integration, operation.toolName),\n            data: operationData(operation),\n          })),\n        });\n      }),\n\n    getOperation: (integration, toolName) =>\n      pluginStorage\n        .get({ collection: OPERATION_COLLECTION, key: operationKey(integration, toolName) })\n        .pipe(Effect.map((row) => (row ? rowToOperation(row) : null))),\n\n    listOperations: (integration) =>\n      listRows(integration).pipe(\n        Effect.map((rows) => rows.map(rowToOperation).filter(Predicate.isNotNull)),\n      ),\n\n    removeOperations,\n\n    putSpec: (specHash, specText) =>\n      blobs.put(specBlobKey(specHash), specText, { owner: STORE_OWNER }),\n\n    getSpec: (specHash) => blobs.get(specBlobKey(specHash)),\n  };\n};\n","import { Effect, Option, Schema } from \"effect\";\nimport type { Layer } from \"effect\";\nimport { HttpClient } from \"effect/unstable/http\";\n\nimport {\n  IntegrationAlreadyExistsError,\n  IntegrationDetectionResult,\n  IntegrationSlug,\n  ToolName,\n  ToolResult,\n  authToolFailure,\n  definePlugin,\n  mergeAuthTemplates,\n  sha256Hex,\n  tool,\n  type AuthMethodDescriptor,\n  type Integration,\n  type IntegrationConfig,\n  type IntegrationRecord,\n  type PluginCtx,\n  type ResolveToolsResult,\n  type StorageFailure,\n  type ToolDef,\n  type ToolInvocationCredential,\n} from \"@executor-js/sdk/core\";\n\nimport {\n  decodeOpenApiIntegrationConfig,\n  renderAuthTemplate,\n  requiredTemplateVariables,\n  type OpenApiIntegrationConfig,\n} from \"./config\";\nimport { OpenApiExtractionError, OpenApiOAuthError, OpenApiParseError } from \"./errors\";\nimport { parse, resolveSpecText } from \"./parse\";\nimport {\n  convertGoogleDiscoveryBundleToOpenApi,\n  convertGoogleDiscoveryToOpenApi,\n  fetchGoogleDiscoveryDocument,\n  isGoogleDiscoveryUrl,\n} from \"./google-discovery\";\nimport { extract } from \"./extract\";\nimport { compileToolDefinitions, type ToolDefinition } from \"./definitions\";\nimport { annotationsForOperation, invokeWithLayer } from \"./invoke\";\nimport { previewSpec, previewSpecText, type SpecPreview } from \"./preview\";\nimport { deriveAuthenticationTemplateFromPreview, firstBaseUrlForPreview } from \"./derive-auth\";\nimport { openApiPresets } from \"./presets\";\nimport { makeDefaultOpenapiStore, type OpenapiStore, type StoredOperation } from \"./store\";\nimport type { Authentication } from \"./types\";\nimport { OperationBinding, normalizeOpenApiAuthInputs, type AuthenticationInput } from \"./types\";\nimport { ApiKeyAuthTemplate, describeApiKeyAuthMethod } from \"@executor-js/sdk/http-auth\";\n\n// ---------------------------------------------------------------------------\n// Plugin config\n// ---------------------------------------------------------------------------\n\nconst STRINGIFIED_BODY_CAP = 1024;\nconst UpstreamMessageBody = Schema.Struct({ message: Schema.String });\nconst UpstreamErrorMessageBody = Schema.Struct({ errorMessage: Schema.String });\nconst UpstreamNestedErrorBody = Schema.Struct({ error: UpstreamMessageBody });\nconst UpstreamErrorsArrayBody = Schema.Struct({\n  errors: Schema.Array(\n    Schema.Struct({\n      detail: Schema.optional(Schema.String),\n      message: Schema.optional(Schema.String),\n      title: Schema.optional(Schema.String),\n    }),\n  ),\n});\nconst UpstreamDescriptionBody = Schema.Struct({\n  detail: Schema.optional(Schema.String),\n  title: Schema.optional(Schema.String),\n  description: Schema.optional(Schema.String),\n});\n\nconst decodeUpstreamMessageBody = Schema.decodeUnknownOption(UpstreamMessageBody);\nconst decodeUpstreamErrorMessageBody = Schema.decodeUnknownOption(UpstreamErrorMessageBody);\nconst decodeUpstreamNestedErrorBody = Schema.decodeUnknownOption(UpstreamNestedErrorBody);\nconst decodeUpstreamErrorsArrayBody = Schema.decodeUnknownOption(UpstreamErrorsArrayBody);\nconst decodeUpstreamDescriptionBody = Schema.decodeUnknownOption(UpstreamDescriptionBody);\n\nconst clampedStringify = (value: unknown): string => {\n  let s: string;\n  // oxlint-disable-next-line executor/no-try-catch-or-throw -- boundary: JSON.stringify may throw on cycles; fall back to String() so the upstream body can still be surfaced as ToolError.details fallback text\n  try {\n    s = JSON.stringify(value);\n  } catch {\n    s = String(value);\n  }\n  return s.length > STRINGIFIED_BODY_CAP ? `${s.slice(0, STRINGIFIED_BODY_CAP)}…` : s;\n};\n\nconst firstNonEmpty = (...values: readonly (string | undefined)[]): string | undefined =>\n  values.find((value) => value !== undefined && value.length > 0);\n\n// Walk known upstream error-body shapes so ToolError.message stays concise\n// while ToolError.details preserves the original body.\nconst extractUpstreamMessage = (body: unknown, status: number): string => {\n  if (typeof body === \"string\") {\n    return body.length > 0 ? body : `Upstream returned HTTP ${status}`;\n  }\n  const nested = Option.getOrUndefined(decodeUpstreamNestedErrorBody(body));\n  const messageBody = Option.getOrUndefined(decodeUpstreamMessageBody(body));\n  const errorMessageBody = Option.getOrUndefined(decodeUpstreamErrorMessageBody(body));\n  const errorsBody = Option.getOrUndefined(decodeUpstreamErrorsArrayBody(body));\n  const descriptionBody = Option.getOrUndefined(decodeUpstreamDescriptionBody(body));\n  const arrayMessage = errorsBody?.errors\n    .map(\n      ({\n        detail,\n        message: upstreamMessage,\n        title,\n      }: {\n        detail?: string;\n        message?: string;\n        title?: string;\n      }) => firstNonEmpty(detail, upstreamMessage, title),\n    )\n    .find((message: string | undefined) => message !== undefined);\n  const message = firstNonEmpty(\n    nested?.error.message,\n    messageBody?.message,\n    errorMessageBody?.errorMessage,\n    arrayMessage,\n    descriptionBody?.detail,\n    descriptionBody?.title,\n    descriptionBody?.description,\n  );\n  if (message !== undefined) return message;\n  if (body !== null && typeof body === \"object\") {\n    return clampedStringify(body);\n  }\n  return `Upstream returned HTTP ${status}`;\n};\n\n// ---------------------------------------------------------------------------\n// Extension input shapes\n// ---------------------------------------------------------------------------\n\nexport type OpenApiSpecInput = typeof OpenApiSpecInputSchema.Type;\n\nexport interface OpenApiPreviewInput {\n  readonly spec: string;\n}\n\n/** Add an OpenAPI integration to the catalog. The integration is the API\n *  surface; connections (the credentials) are attached separately and resolve\n *  their value through the declared `authenticationTemplate`. */\nexport interface OpenApiSpecConfig {\n  readonly spec: OpenApiSpecInput;\n  /** The catalog slug for the new integration (the `<integration>` segment). */\n  readonly slug: string;\n  /** Human description (defaults to the spec title). */\n  readonly description?: string;\n  readonly baseUrl?: string;\n  /** Static headers applied to every request (no secret material). */\n  readonly headers?: Record<string, string>;\n  /** Static query params applied to every request. */\n  readonly queryParams?: Record<string, string>;\n  /** Auth methods a connection's value renders through — canonical\n   *  placements or the request-shaped authoring dialect. */\n  readonly authenticationTemplate?: readonly AuthenticationInput[];\n}\n\nexport interface OpenApiExtensionFailure {\n  readonly _tag: string;\n}\n\n/** Add / merge custom auth methods onto an existing OpenAPI integration's\n *  `authenticationTemplate`. Mirrors the GraphQL plugin's `configure`. */\nexport interface OpenApiConfigureInput {\n  /** The auth methods to add. Each entry is appended to (or, when its `slug`\n   *  already exists, replaces) the integration's existing template array. A\n   *  custom apiKey method with no `slug` is assigned a generated `custom_<id>`\n   *  slug that is collision-checked against the existing template. */\n  readonly authenticationTemplate: readonly AuthenticationInput[];\n  readonly mode?: \"merge\" | \"replace\";\n}\n\nexport interface OpenApiPluginExtension {\n  readonly previewSpec: (\n    input: string | OpenApiPreviewInput,\n  ) => Effect.Effect<\n    SpecPreview,\n    OpenApiParseError | OpenApiExtractionError | OpenApiOAuthError | StorageFailure\n  >;\n  readonly addSpec: (\n    config: OpenApiSpecConfig,\n  ) => Effect.Effect<\n    { readonly slug: IntegrationSlug; readonly toolCount: number },\n    | OpenApiParseError\n    | OpenApiExtractionError\n    | OpenApiOAuthError\n    | IntegrationAlreadyExistsError\n    | StorageFailure\n  >;\n  readonly removeSpec: (slug: string) => Effect.Effect<void, StorageFailure>;\n  readonly getIntegration: (slug: string) => Effect.Effect<Integration | null, StorageFailure>;\n  /** Read the integration's full opaque config, including its\n   *  `authenticationTemplate`. Returns null when the integration is absent. */\n  readonly getConfig: (\n    slug: string,\n  ) => Effect.Effect<OpenApiIntegrationConfig | null, StorageFailure>;\n  /** Add / merge custom auth methods onto the integration's\n   *  `authenticationTemplate`. Returns the resulting template array. */\n  readonly configure: (\n    slug: string,\n    input: OpenApiConfigureInput,\n  ) => Effect.Effect<readonly Authentication[], StorageFailure>;\n}\n\n// ---------------------------------------------------------------------------\n// Control-tool input/output schemas\n// ---------------------------------------------------------------------------\n\nconst PreviewSpecInputSchema = Schema.Struct({\n  spec: Schema.String,\n});\n\nconst StaticPreviewServerVariableSchema = Schema.Struct({\n  default: Schema.String,\n  enum: Schema.NullOr(Schema.Array(Schema.String)),\n  description: Schema.NullOr(Schema.String),\n});\nconst StaticPreviewServerSchema = Schema.Struct({\n  url: Schema.String,\n  description: Schema.NullOr(Schema.String),\n  variables: Schema.NullOr(Schema.Record(Schema.String, StaticPreviewServerVariableSchema)),\n});\nconst StaticPreviewOAuthAuthorizationCodeFlowSchema = Schema.Struct({\n  authorizationUrl: Schema.String,\n  tokenUrl: Schema.String,\n  refreshUrl: Schema.NullOr(Schema.String),\n  scopes: Schema.Record(Schema.String, Schema.String),\n});\nconst StaticPreviewOAuthClientCredentialsFlowSchema = Schema.Struct({\n  tokenUrl: Schema.String,\n  refreshUrl: Schema.NullOr(Schema.String),\n  scopes: Schema.Record(Schema.String, Schema.String),\n});\nconst StaticPreviewOAuthFlowsSchema = Schema.Struct({\n  authorizationCode: Schema.NullOr(StaticPreviewOAuthAuthorizationCodeFlowSchema),\n  clientCredentials: Schema.NullOr(StaticPreviewOAuthClientCredentialsFlowSchema),\n});\nconst StaticPreviewSecuritySchemeSchema = Schema.Struct({\n  name: Schema.String,\n  type: Schema.Literals([\"http\", \"apiKey\", \"oauth2\", \"openIdConnect\"]),\n  scheme: Schema.NullOr(Schema.String),\n  bearerFormat: Schema.NullOr(Schema.String),\n  in: Schema.NullOr(Schema.Literals([\"header\", \"query\", \"cookie\"])),\n  headerName: Schema.NullOr(Schema.String),\n  description: Schema.NullOr(Schema.String),\n  flows: Schema.NullOr(StaticPreviewOAuthFlowsSchema),\n  openIdConnectUrl: Schema.NullOr(Schema.String),\n});\nconst StaticPreviewOAuth2PresetSchema = Schema.Struct({\n  label: Schema.String,\n  securitySchemeName: Schema.String,\n  flow: Schema.Literals([\"authorizationCode\", \"clientCredentials\"]),\n  authorizationUrl: Schema.NullOr(Schema.String),\n  tokenUrl: Schema.String,\n  refreshUrl: Schema.NullOr(Schema.String),\n  scopes: Schema.Record(Schema.String, Schema.String),\n  identityScopes: Schema.Union([\n    Schema.Literal(\"auto\"),\n    Schema.Literal(false),\n    Schema.Array(Schema.String),\n  ]),\n});\nconst StaticPreviewSpecOutputSchema = Schema.Struct({\n  title: Schema.NullOr(Schema.String),\n  version: Schema.NullOr(Schema.String),\n  servers: Schema.Array(StaticPreviewServerSchema),\n  operationCount: Schema.Number,\n  tags: Schema.Array(Schema.String),\n  securitySchemes: Schema.Array(StaticPreviewSecuritySchemeSchema),\n  authStrategies: Schema.Array(Schema.Struct({ schemes: Schema.Array(Schema.String) })),\n  headerPresets: Schema.Array(\n    Schema.Struct({\n      label: Schema.String,\n      headers: Schema.Record(Schema.String, Schema.NullOr(Schema.String)),\n      secretHeaders: Schema.Array(Schema.String),\n    }),\n  ),\n  oauth2Presets: Schema.Array(StaticPreviewOAuth2PresetSchema),\n});\ntype StaticPreviewSpecOutput = typeof StaticPreviewSpecOutputSchema.Type;\n\nconst OpenApiSpecInputSchema = Schema.Union([\n  Schema.Struct({ kind: Schema.Literal(\"url\"), url: Schema.String }),\n  Schema.Struct({ kind: Schema.Literal(\"blob\"), value: Schema.String }),\n  Schema.Struct({\n    kind: Schema.Literal(\"googleDiscovery\"),\n    url: Schema.String,\n  }),\n  Schema.Struct({\n    kind: Schema.Literal(\"googleDiscoveryBundle\"),\n    urls: Schema.Array(Schema.String),\n  }),\n]);\n\nconst AuthenticationSchema = Schema.Union([\n  Schema.Struct({\n    slug: Schema.String,\n    kind: Schema.Literal(\"oauth2\"),\n    authorizationUrl: Schema.String,\n    tokenUrl: Schema.String,\n    scopes: Schema.Array(Schema.String),\n  }),\n  // Credential methods are authored request-shaped — the ONE apikey input\n  // dialect: `{ type: \"apiKey\", headers: { Authorization: [\"Bearer \",\n  // variable(\"token\")] }, queryParams: { … } }`.\n  ApiKeyAuthTemplate,\n]);\n\nconst AddSourceInputSchema = Schema.Struct({\n  spec: OpenApiSpecInputSchema,\n  slug: Schema.String,\n  description: Schema.optional(Schema.String),\n  baseUrl: Schema.optional(Schema.String),\n  headers: Schema.optional(Schema.Record(Schema.String, Schema.String)),\n  queryParams: Schema.optional(Schema.Record(Schema.String, Schema.String)),\n  authenticationTemplate: Schema.optional(Schema.Array(AuthenticationSchema)),\n});\n\nconst AddSourceOutputSchema = Schema.Struct({\n  slug: Schema.String,\n  toolCount: Schema.Number,\n});\n\nconst PreviewSpecInputStandardSchema = Schema.toStandardSchemaV1(\n  Schema.toStandardJSONSchemaV1(PreviewSpecInputSchema),\n);\nconst PreviewSpecOutputStandardSchema = Schema.toStandardSchemaV1(\n  Schema.toStandardJSONSchemaV1(StaticPreviewSpecOutputSchema),\n);\nconst AddSourceInputStandardSchema = Schema.toStandardSchemaV1(\n  Schema.toStandardJSONSchemaV1(AddSourceInputSchema),\n);\nconst AddSourceOutputStandardSchema = Schema.toStandardSchemaV1(\n  Schema.toStandardJSONSchemaV1(AddSourceOutputSchema),\n);\n\nconst openApiToolFailure = (code: string, message: string, details?: unknown) =>\n  ToolResult.fail({\n    code,\n    message,\n    ...(details === undefined ? {} : { details }),\n  });\n\nconst openApiAuthToolFailure = (failure: {\n  readonly code: string;\n  readonly message: string;\n  readonly owner: \"org\" | \"user\";\n  readonly integration: string;\n  readonly connection: string;\n  readonly credentialKind: \"secret\" | \"oauth\" | \"upstream\";\n  readonly credentialLabel?: string;\n  readonly status?: number;\n  readonly details?: unknown;\n}) =>\n  authToolFailure({\n    // The auth-tool-failure helper's code set is shared with v1; keep the\n    // string but reference the connection rather than v1's source/slot.\n    code: failure.code as Parameters<typeof authToolFailure>[0][\"code\"],\n    message: failure.message,\n    source: { id: failure.integration, scope: failure.owner },\n    credential: {\n      kind: failure.credentialKind,\n      ...(failure.credentialLabel ? { label: failure.credentialLabel } : {}),\n    },\n    ...(failure.status !== undefined ? { status: failure.status } : {}),\n    ...(failure.details !== undefined\n      ? {\n          upstream: {\n            ...(failure.status !== undefined ? { status: failure.status } : {}),\n            details: failure.details,\n          },\n        }\n      : {}),\n  });\n\nconst staticPreviewOutput = (preview: SpecPreview): StaticPreviewSpecOutput => ({\n  title: Option.getOrNull(preview.title),\n  version: Option.getOrNull(preview.version),\n  servers: preview.servers.map((server) => ({\n    url: server.url,\n    description: Option.getOrNull(server.description),\n    variables: Option.getOrNull(server.variables)\n      ? Object.fromEntries(\n          Object.entries(Option.getOrNull(server.variables) ?? {}).map(([name, variable]) => [\n            name,\n            {\n              default: variable.default,\n              enum: Option.getOrNull(variable.enum),\n              description: Option.getOrNull(variable.description),\n            },\n          ]),\n        )\n      : null,\n  })),\n  operationCount: preview.operationCount,\n  tags: preview.tags,\n  securitySchemes: preview.securitySchemes.map((scheme) => ({\n    name: scheme.name,\n    type: scheme.type,\n    scheme: Option.getOrNull(scheme.scheme),\n    bearerFormat: Option.getOrNull(scheme.bearerFormat),\n    in: Option.getOrNull(scheme.in),\n    headerName: Option.getOrNull(scheme.headerName),\n    description: Option.getOrNull(scheme.description),\n    flows: Option.isSome(scheme.flows)\n      ? {\n          authorizationCode: Option.isSome(scheme.flows.value.authorizationCode)\n            ? {\n                authorizationUrl: scheme.flows.value.authorizationCode.value.authorizationUrl,\n                tokenUrl: scheme.flows.value.authorizationCode.value.tokenUrl,\n                refreshUrl: Option.getOrNull(scheme.flows.value.authorizationCode.value.refreshUrl),\n                scopes: scheme.flows.value.authorizationCode.value.scopes,\n              }\n            : null,\n          clientCredentials: Option.isSome(scheme.flows.value.clientCredentials)\n            ? {\n                tokenUrl: scheme.flows.value.clientCredentials.value.tokenUrl,\n                refreshUrl: Option.getOrNull(scheme.flows.value.clientCredentials.value.refreshUrl),\n                scopes: scheme.flows.value.clientCredentials.value.scopes,\n              }\n            : null,\n        }\n      : null,\n    openIdConnectUrl: Option.getOrNull(scheme.openIdConnectUrl),\n  })),\n  authStrategies: preview.authStrategies,\n  headerPresets: preview.headerPresets,\n  oauth2Presets: preview.oauth2Presets.map((preset) => ({\n    label: preset.label,\n    securitySchemeName: preset.securitySchemeName,\n    flow: preset.flow,\n    authorizationUrl: Option.getOrNull(preset.authorizationUrl),\n    tokenUrl: preset.tokenUrl,\n    refreshUrl: Option.getOrNull(preset.refreshUrl),\n    scopes: preset.scopes,\n    identityScopes: preset.identityScopes,\n  })),\n});\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/** Rewrite OpenAPI `#/components/schemas/X` refs to standard `#/$defs/X`. */\nconst normalizeOpenApiRefs = (node: unknown): unknown => {\n  if (node == null || typeof node !== \"object\") return node;\n  if (Array.isArray(node)) {\n    let changed = false;\n    const out = node.map((item) => {\n      const n = normalizeOpenApiRefs(item);\n      if (n !== item) changed = true;\n      return n;\n    });\n    return changed ? out : node;\n  }\n\n  const obj = node as Record<string, unknown>;\n\n  if (typeof obj.$ref === \"string\") {\n    const match = obj.$ref.match(/^#\\/components\\/schemas\\/(.+)$/);\n    if (match) return { ...obj, $ref: `#/$defs/${match[1]}` };\n    return obj;\n  }\n\n  let changed = false;\n  const result: Record<string, unknown> = {};\n  for (const [k, v] of Object.entries(obj)) {\n    const n = normalizeOpenApiRefs(v);\n    if (n !== v) changed = true;\n    result[k] = n;\n  }\n  return changed ? result : obj;\n};\n\nconst toBinding = (def: ToolDefinition): OperationBinding =>\n  OperationBinding.make({\n    method: def.operation.method,\n    servers: def.operation.servers,\n    pathTemplate: def.operation.pathTemplate,\n    parameters: [...def.operation.parameters],\n    requestBody: def.operation.requestBody,\n  });\n\nconst descriptionFor = (def: ToolDefinition): string => {\n  const op = def.operation;\n  return Option.getOrElse(op.description, () =>\n    Option.getOrElse(op.summary, () => `${op.method.toUpperCase()} ${op.pathTemplate}`),\n  );\n};\n\nconst specInputToSourceUrl = (spec: OpenApiSpecInput): string | undefined =>\n  spec.kind === \"url\" || spec.kind === \"googleDiscovery\" ? spec.url : undefined;\n\nconst specInputToGoogleBundle = (spec: OpenApiSpecInput): readonly string[] | undefined =>\n  spec.kind === \"googleDiscoveryBundle\" ? spec.urls : undefined;\n\n// ---------------------------------------------------------------------------\n// Declared auth methods — project the stored `authenticationTemplate` into the\n// catalog's plugin-agnostic `AuthMethodDescriptor[]`. This mirrors the client's\n// `authMethodsFromConfig` (in the React auth-method-config module) on the\n// server so the catalog field is consistent. apikey/none projection comes from\n// the shared model; the oauth method carries the stored endpoints + scopes.\n// ---------------------------------------------------------------------------\n\nexport const describeOpenApiAuthMethods = (\n  record: IntegrationRecord,\n): readonly AuthMethodDescriptor[] => {\n  const config = decodeOpenApiIntegrationConfig(record.config);\n  if (!config) return [];\n  return (config.authenticationTemplate ?? []).map(\n    (template: Authentication): AuthMethodDescriptor => {\n      if (template.kind === \"oauth2\") {\n        return {\n          id: String(template.slug),\n          label: \"OAuth2\",\n          kind: \"oauth\",\n          template: String(template.slug),\n          oauth: {\n            authorizationUrl: template.authorizationUrl,\n            tokenUrl: template.tokenUrl,\n            scopes: template.scopes,\n          },\n        };\n      }\n      return describeApiKeyAuthMethod(template);\n    },\n  );\n};\n\nexport const describeOpenApiIntegrationDisplay = (\n  record: IntegrationRecord,\n): { readonly url?: string } => {\n  const config = decodeOpenApiIntegrationConfig(record.config);\n  return { url: config?.baseUrl ?? config?.sourceUrl };\n};\n\n// ---------------------------------------------------------------------------\n// Spec text resolution — the stored config carries the spec's content hash\n// (`specHash` → blob `spec/<hash>`). Pre-blob rows that inlined the text are\n// rewritten by the spec-to-blob migrations before this code reads them.\n// ---------------------------------------------------------------------------\n\nconst loadSpecText = (\n  storage: OpenapiStore,\n  config: OpenApiIntegrationConfig,\n): Effect.Effect<string | null, StorageFailure> =>\n  config.specHash != null ? storage.getSpec(config.specHash) : Effect.succeed(null);\n\n// ---------------------------------------------------------------------------\n// Spec → tool definitions (shared by addSpec, resolveTools, and detect)\n// ---------------------------------------------------------------------------\n\ninterface CompiledSpec {\n  readonly definitions: readonly ToolDefinition[];\n  readonly hoistedDefs: Record<string, unknown>;\n  readonly title: string | undefined;\n}\n\nconst compileSpec = (\n  specText: string,\n): Effect.Effect<CompiledSpec, OpenApiParseError | OpenApiExtractionError> =>\n  Effect.gen(function* () {\n    const doc = yield* parse(specText);\n    const result = yield* extract(doc);\n    const hoistedDefs: Record<string, unknown> = {};\n    if (doc.components?.schemas) {\n      for (const [k, v] of Object.entries(doc.components.schemas)) {\n        hoistedDefs[k] = normalizeOpenApiRefs(v);\n      }\n    }\n    return {\n      definitions: compileToolDefinitions(result.operations),\n      hoistedDefs,\n      title: Option.getOrUndefined(result.title),\n    };\n  });\n\n// A tool's name carries its structured `group.leaf` path verbatim (e.g.\n// `aliases.deleteAlias`). The address grammar\n// `tools.<integration>.<owner>.<connection>.<tool>` treats `<tool>` as the\n// trailing remainder (see parseToolAddress), so the dotted path needs no\n// flattening — it nests naturally as\n// `tools.<integration>.<owner>.<connection>.aliases.deleteAlias`, matching how\n// the sandbox `tools` proxy joins property access.\n\nconst toolDefsFromCompiled = (compiled: CompiledSpec): readonly ToolDef[] =>\n  compiled.definitions.map(\n    (def): ToolDef => ({\n      name: ToolName.make(def.toolPath),\n      description: descriptionFor(def),\n      inputSchema: normalizeOpenApiRefs(Option.getOrUndefined(def.operation.inputSchema)),\n      // The output schema is the upstream response body only — transport\n      // status/headers live in the ToolResult `http` side channel, not the\n      // payload (see the invoke handler).\n      outputSchema: normalizeOpenApiRefs(Option.getOrUndefined(def.operation.outputSchema)),\n      annotations: annotationsForOperation(def.operation.method, def.operation.pathTemplate),\n    }),\n  );\n\nconst storedOperationsFromCompiled = (\n  integration: string,\n  compiled: CompiledSpec,\n): readonly StoredOperation[] =>\n  compiled.definitions.map((def) => ({\n    integration,\n    toolName: def.toolPath,\n    binding: toBinding(def),\n  }));\n\n// ---------------------------------------------------------------------------\n// Plugin factory\n// ---------------------------------------------------------------------------\n\nexport interface OpenApiPluginOptions {\n  readonly httpClientLayer?: Layer.Layer<HttpClient.HttpClient, never, never>;\n}\n\nconst fetchGoogleDiscoveryBundleConversion = (\n  urls: readonly string[],\n  httpClientLayer: Layer.Layer<HttpClient.HttpClient, never, never>,\n) =>\n  Effect.forEach(\n    urls,\n    (url) =>\n      fetchGoogleDiscoveryDocument(url).pipe(\n        Effect.provide(httpClientLayer),\n        Effect.map((documentText) => ({ discoveryUrl: url, documentText })),\n      ),\n    { concurrency: 4 },\n  ).pipe(Effect.flatMap((documents) => convertGoogleDiscoveryBundleToOpenApi({ documents })));\n\nexport const openApiPlugin = definePlugin((options?: OpenApiPluginOptions) => {\n  const resolveSpecForInput = (\n    spec: OpenApiSpecInput,\n    httpClientLayer: Layer.Layer<HttpClient.HttpClient, never, never>,\n  ): Effect.Effect<\n    {\n      readonly specText: string;\n      readonly baseUrl?: string;\n      // The Google Discovery converters derive the `googleOAuth2` oauth template\n      // straight from the spec's declared scopes. `addSpec` adopts it when the\n      // caller didn't pass an explicit `authenticationTemplate` (the bundle add\n      // path has no preview to detect auth from).\n      readonly authenticationTemplate?: readonly Authentication[];\n    },\n    OpenApiParseError | OpenApiExtractionError | OpenApiOAuthError\n  > =>\n    Effect.gen(function* () {\n      if (spec.kind === \"googleDiscovery\") {\n        const conversion = yield* fetchGoogleDiscoveryDocument(spec.url).pipe(\n          Effect.provide(httpClientLayer),\n          Effect.flatMap((documentText) =>\n            convertGoogleDiscoveryToOpenApi({\n              discoveryUrl: spec.url,\n              documentText,\n            }),\n          ),\n        );\n        return {\n          specText: conversion.specText,\n          baseUrl: conversion.baseUrl,\n          ...(conversion.authenticationTemplate\n            ? { authenticationTemplate: conversion.authenticationTemplate }\n            : {}),\n        };\n      }\n      if (spec.kind === \"googleDiscoveryBundle\") {\n        const conversion = yield* fetchGoogleDiscoveryBundleConversion(spec.urls, httpClientLayer);\n        return {\n          specText: conversion.specText,\n          baseUrl: conversion.baseUrl,\n          ...(conversion.authenticationTemplate\n            ? { authenticationTemplate: conversion.authenticationTemplate }\n            : {}),\n        };\n      }\n      if (spec.kind === \"url\") {\n        const specText = yield* resolveSpecText(spec.url).pipe(Effect.provide(httpClientLayer));\n        return { specText };\n      }\n      return { specText: spec.value };\n    });\n\n  return {\n    id: \"openapi\" as const,\n    packageName: \"@executor-js/plugin-openapi\",\n    integrationPresets: openApiPresets.map((preset) => ({\n      id: preset.id,\n      name: preset.name,\n      summary: preset.summary,\n      ...(preset.url ? { url: preset.url } : {}),\n      ...(preset.icon ? { icon: preset.icon } : {}),\n      ...(preset.featured ? { featured: preset.featured } : {}),\n    })),\n    storage: (deps): OpenapiStore => makeDefaultOpenapiStore(deps),\n\n    extension: (ctx: PluginCtx<OpenapiStore>) => {\n      const httpClientLayer = options?.httpClientLayer ?? ctx.httpClientLayer;\n\n      const addSpec = (config: OpenApiSpecConfig) =>\n        Effect.gen(function* () {\n          // Resolve URL → text and parse BEFORE opening a transaction. Holding\n          // `BEGIN` across a network fetch is the Hyperdrive deadlock path.\n          const resolved = yield* resolveSpecForInput(config.spec, httpClientLayer);\n          const compiled = yield* compileSpec(resolved.specText);\n\n          // Defaults the add page derives from its preview, applied here so\n          // headless callers (MCP, API) get the same integration the UI's\n          // add flow would produce — see e2e/scenarios/connect-handoff.test.ts:\n          //   - effectiveBaseUrl: the spec's first server, used to anchor the\n          //     derived auth template's absolute URLs. It is NOT stored as the\n          //     connection baseUrl — the request host is resolved per call from\n          //     the operation's extracted `servers`.\n          //   - authenticationTemplate: the spec's declared security schemes\n          //     (else the Add-connection modal is a dead \"No authentication\"\n          //     end with nowhere to paste a credential)\n          // An explicit input always wins; for auth, an explicit EMPTY array\n          // means \"no auth methods\" and suppresses the derivation.\n          const explicitBaseUrl = config.baseUrl ?? resolved.baseUrl;\n          const needsDerivedBaseUrl = explicitBaseUrl == null;\n          const needsDerivedAuth =\n            config.authenticationTemplate == null && resolved.authenticationTemplate == null;\n          const preview =\n            needsDerivedBaseUrl || needsDerivedAuth\n              ? yield* previewSpecText(resolved.specText)\n              : undefined;\n          const derivedBaseUrl =\n            needsDerivedBaseUrl && preview ? firstBaseUrlForPreview(preview) : undefined;\n          const effectiveBaseUrl = explicitBaseUrl ?? (derivedBaseUrl || undefined);\n          const derivedAuthenticationTemplate =\n            needsDerivedAuth && preview\n              ? deriveAuthenticationTemplateFromPreview(preview, effectiveBaseUrl)\n              : undefined;\n\n          const slug = IntegrationSlug.make(config.slug);\n\n          // Block re-adding an existing slug. The core `integrations.register`\n          // primitive upserts (so boot re-registration is idempotent), but an\n          // explicit add must NOT silently clobber an existing integration's\n          // tools, connections, and policies. To add more auth, update the\n          // existing integration instead.\n          const existing = yield* ctx.core.integrations.get(slug);\n          if (existing) {\n            return yield* new IntegrationAlreadyExistsError({ slug });\n          }\n\n          const specHash = yield* sha256Hex(resolved.specText);\n\n          const integrationConfig: OpenApiIntegrationConfig = {\n            specHash,\n            ...(specInputToSourceUrl(config.spec) !== undefined\n              ? { sourceUrl: specInputToSourceUrl(config.spec) }\n              : {}),\n            ...(specInputToGoogleBundle(config.spec) !== undefined\n              ? { googleDiscoveryUrls: specInputToGoogleBundle(config.spec) }\n              : {}),\n            // baseUrl is an optional override only. The host is otherwise\n            // resolved per call from the operation's `servers` (extracted from\n            // the spec), so we never bake a derived base URL into the config.\n            ...(config.baseUrl ? { baseUrl: config.baseUrl } : {}),\n            ...(config.headers ? { headers: config.headers } : {}),\n            ...(config.queryParams ? { queryParams: config.queryParams } : {}),\n            // Prefer the caller's explicit template; otherwise adopt the one the\n            // Google Discovery converter derived from the spec (the bundle add\n            // path relies on this — it has no preview to detect auth from);\n            // otherwise derive from the spec's declared security schemes.\n            ...(config.authenticationTemplate\n              ? {\n                  authenticationTemplate: normalizeOpenApiAuthInputs(config.authenticationTemplate),\n                }\n              : resolved.authenticationTemplate\n                ? { authenticationTemplate: resolved.authenticationTemplate }\n                : derivedAuthenticationTemplate && derivedAuthenticationTemplate.length > 0\n                  ? { authenticationTemplate: derivedAuthenticationTemplate }\n                  : {}),\n          };\n\n          // The spec blob is written OUTSIDE the transaction: it's\n          // content-addressed (re-puts are idempotent) and an aborted register\n          // leaves only an unreferenced blob behind — while blob backends like\n          // R2 couldn't roll back with the transaction anyway.\n          yield* ctx.storage.putSpec(specHash, resolved.specText);\n\n          yield* ctx.transaction(\n            Effect.gen(function* () {\n              yield* ctx.core.integrations.register({\n                slug,\n                description: config.description ?? compiled.title ?? config.slug,\n                config: integrationConfig satisfies OpenApiIntegrationConfig as IntegrationConfig,\n                canRemove: true,\n                canRefresh:\n                  specInputToSourceUrl(config.spec) != null ||\n                  specInputToGoogleBundle(config.spec) != null,\n              });\n              yield* ctx.storage.putOperations(\n                config.slug,\n                storedOperationsFromCompiled(config.slug, compiled),\n              );\n            }),\n          );\n\n          return { slug, toolCount: compiled.definitions.length };\n        });\n\n      return {\n        previewSpec: (input: string | OpenApiPreviewInput) =>\n          Effect.gen(function* () {\n            const previewInput = typeof input === \"string\" ? { spec: input } : input;\n            const specText = isGoogleDiscoveryUrl(previewInput.spec)\n              ? yield* fetchGoogleDiscoveryDocument(previewInput.spec).pipe(\n                  Effect.provide(httpClientLayer),\n                  Effect.flatMap((documentText) =>\n                    convertGoogleDiscoveryToOpenApi({\n                      discoveryUrl: previewInput.spec,\n                      documentText,\n                    }),\n                  ),\n                  Effect.map((conversion) => conversion.specText),\n                )\n              : yield* resolveSpecText(previewInput.spec).pipe(Effect.provide(httpClientLayer));\n            return yield* previewSpec(specText).pipe(Effect.provide(httpClientLayer));\n          }),\n\n        addSpec,\n\n        removeSpec: (slug: string) =>\n          ctx.transaction(\n            Effect.gen(function* () {\n              yield* ctx.storage.removeOperations(slug);\n              yield* ctx.core.integrations\n                .remove(IntegrationSlug.make(slug))\n                .pipe(Effect.catchTag(\"IntegrationRemovalNotAllowedError\", () => Effect.void));\n            }),\n          ),\n\n        getIntegration: (slug: string) =>\n          ctx.core.integrations.get(IntegrationSlug.make(slug)).pipe(\n            Effect.map((record) =>\n              record\n                ? ({\n                    slug: record.slug,\n                    description: record.description,\n                    kind: record.kind,\n                    canRemove: record.canRemove,\n                    canRefresh: record.canRefresh,\n                  } as Integration)\n                : null,\n            ),\n          ),\n\n        getConfig: (slug: string): Effect.Effect<OpenApiIntegrationConfig | null, StorageFailure> =>\n          ctx.core.integrations\n            .get(IntegrationSlug.make(slug))\n            .pipe(\n              Effect.map((record) =>\n                record ? decodeOpenApiIntegrationConfig(record.config) : null,\n              ),\n            ),\n\n        configure: (\n          slug: string,\n          input: OpenApiConfigureInput,\n        ): Effect.Effect<readonly Authentication[], StorageFailure> =>\n          ctx.transaction(\n            Effect.gen(function* () {\n              const record = yield* ctx.core.integrations.get(IntegrationSlug.make(slug));\n              if (!record) return [] as readonly Authentication[];\n              const current = decodeOpenApiIntegrationConfig(record.config);\n              if (!current) return [] as readonly Authentication[];\n\n              const incoming = normalizeOpenApiAuthInputs(input.authenticationTemplate);\n              const merged =\n                input.mode === \"replace\"\n                  ? incoming\n                  : mergeAuthTemplates(current.authenticationTemplate ?? [], incoming);\n\n              const next: OpenApiIntegrationConfig = {\n                ...current,\n                authenticationTemplate: merged,\n              };\n\n              yield* ctx.core.integrations.update(IntegrationSlug.make(slug), {\n                config: next satisfies OpenApiIntegrationConfig as IntegrationConfig,\n              });\n\n              return merged;\n            }),\n          ),\n      };\n    },\n\n    staticSources: (self: OpenApiPluginExtension) => [\n      {\n        id: \"openapi\",\n        kind: \"executor\",\n        name: \"OpenAPI\",\n        tools: [\n          tool({\n            name: \"previewSpec\",\n            description:\n              \"Preview an OpenAPI document before adding it as an integration. Call this first when the user provides a spec URL/blob so you can inspect servers, auth schemes, operation count, and tags before `addSpec`. Do not collect API keys or OAuth client secrets in chat; use the connections tools for those values.\",\n            inputSchema: PreviewSpecInputStandardSchema,\n            outputSchema: PreviewSpecOutputStandardSchema,\n            execute: (input: typeof PreviewSpecInputSchema.Type) =>\n              self.previewSpec(input).pipe(\n                Effect.map((preview) => ToolResult.ok(staticPreviewOutput(preview))),\n                Effect.catchTags({\n                  OpenApiParseError: ({ message }: OpenApiParseError) =>\n                    Effect.succeed(openApiToolFailure(\"openapi_parse_failed\", message)),\n                  OpenApiExtractionError: ({ message }: OpenApiExtractionError) =>\n                    Effect.succeed(openApiToolFailure(\"openapi_extraction_failed\", message)),\n                  OpenApiOAuthError: ({ message }: OpenApiOAuthError) =>\n                    Effect.succeed(openApiToolFailure(\"openapi_oauth_failed\", message)),\n                }),\n              ),\n          }),\n          tool({\n            name: \"addSpec\",\n            description:\n              \"Add an OpenAPI integration to the catalog and persist its operations as tools. Recommended flow: call `previewSpec`, choose a `slug`, then create a connection for that integration with the user's API key or via `oauth.start`. When `baseUrl` is omitted it defaults to the spec's first server; when `authenticationTemplate` is omitted the auth methods are derived from the spec's declared security schemes (pass an explicit template to override how a credential is applied — apiKey header/query, or oauth bearer — or an empty array for no auth methods).\",\n            annotations: {\n              requiresApproval: true,\n              approvalDescription: \"Add an OpenAPI integration\",\n            },\n            inputSchema: AddSourceInputStandardSchema,\n            outputSchema: AddSourceOutputStandardSchema,\n            execute: (input: typeof AddSourceInputSchema.Type) =>\n              self\n                .addSpec({\n                  spec: input.spec,\n                  slug: input.slug,\n                  description: input.description,\n                  baseUrl: input.baseUrl,\n                  headers: input.headers,\n                  queryParams: input.queryParams,\n                  authenticationTemplate: input.authenticationTemplate as\n                    | readonly AuthenticationInput[]\n                    | undefined,\n                })\n                .pipe(\n                  Effect.map((result) =>\n                    ToolResult.ok({\n                      slug: String(result.slug),\n                      toolCount: result.toolCount,\n                    }),\n                  ),\n                  Effect.catchTags({\n                    OpenApiParseError: ({ message }: OpenApiParseError) =>\n                      Effect.succeed(openApiToolFailure(\"openapi_parse_failed\", message)),\n                    OpenApiExtractionError: ({ message }: OpenApiExtractionError) =>\n                      Effect.succeed(openApiToolFailure(\"openapi_extraction_failed\", message)),\n                    OpenApiOAuthError: ({ message }: OpenApiOAuthError) =>\n                      Effect.succeed(openApiToolFailure(\"openapi_oauth_failed\", message)),\n                    IntegrationAlreadyExistsError: ({ slug }: IntegrationAlreadyExistsError) =>\n                      Effect.succeed(\n                        openApiToolFailure(\n                          \"integration_already_exists\",\n                          `Integration ${slug} already exists; update it instead of re-adding.`,\n                        ),\n                      ),\n                  }),\n                ),\n          }),\n        ],\n      },\n    ],\n\n    describeAuthMethods: describeOpenApiAuthMethods,\n    describeIntegrationDisplay: describeOpenApiIntegrationDisplay,\n\n    // Produce one tool per spec operation. Spec-derived, identical for every\n    // connection on the integration — so `getValue` is never called here. The\n    // operation bindings invokeTool needs are persisted at addSpec time; this\n    // hook only shapes the per-connection ToolDefs from the spec blob the\n    // catalog config points at.\n    resolveTools: ({\n      config,\n      storage,\n    }: {\n      readonly integration: Integration;\n      readonly config: IntegrationConfig;\n      readonly storage: OpenapiStore;\n    }): Effect.Effect<ResolveToolsResult, StorageFailure> =>\n      Effect.gen(function* () {\n        const openApiConfig = decodeOpenApiIntegrationConfig(config);\n        if (!openApiConfig) return { tools: [], definitions: {} };\n        const specText = yield* loadSpecText(storage, openApiConfig);\n        if (specText == null) return { tools: [], definitions: {} };\n        const compiled = yield* compileSpec(specText).pipe(\n          Effect.catch(() => Effect.succeed(null)),\n        );\n        if (!compiled) return { tools: [], definitions: {} };\n        return {\n          tools: toolDefsFromCompiled(compiled),\n          definitions: compiled.hoistedDefs,\n        };\n      }),\n\n    invokeTool: ({\n      ctx: invokeCtx,\n      toolRow,\n      credential,\n      args,\n    }: {\n      readonly ctx: PluginCtx<OpenapiStore>;\n      readonly toolRow: { readonly integration: string; readonly name: string };\n      readonly credential: ToolInvocationCredential;\n      readonly args: unknown;\n    }) =>\n      Effect.gen(function* () {\n        const httpClientLayer = options?.httpClientLayer ?? invokeCtx.httpClientLayer;\n        const integration = toolRow.integration;\n        const config = decodeOpenApiIntegrationConfig(credential.config);\n\n        // Resolve the operation binding from the plugin store; fall back to\n        // re-deriving it from the spec blob when the store has no row (e.g. an\n        // integration registered without going through addSpec). The fallback\n        // is the ONLY invoke-path spec read — the hot path never loads it.\n        let binding = (yield* invokeCtx.storage.getOperation(integration, toolRow.name))?.binding;\n        if (!binding && config) {\n          const specText = yield* loadSpecText(invokeCtx.storage, config).pipe(\n            Effect.catch(() => Effect.succeed(null)),\n          );\n          const compiled =\n            specText == null\n              ? null\n              : yield* compileSpec(specText).pipe(Effect.catch(() => Effect.succeed(null)));\n          binding = compiled\n            ? storedOperationsFromCompiled(integration, compiled).find(\n                (op) => op.toolName === toolRow.name,\n              )?.binding\n            : undefined;\n        }\n        if (!binding) {\n          return yield* new OpenApiExtractionError({\n            message: `No OpenAPI operation found for tool \"${toolRow.name}\" on \"${integration}\"`,\n          });\n        }\n\n        const headers: Record<string, string> = { ...(config?.headers ?? {}) };\n        const queryParams: Record<string, string> = {\n          ...(config?.queryParams ?? {}),\n        };\n\n        // Apply the auth template (D11): render the connection's resolved inputs\n        // into the matching template's header/query slots (apiKey) or as a bearer\n        // Authorization header (oauth). A method with two distinct inputs (e.g.\n        // Datadog) renders each from its own value.\n        const template = (config?.authenticationTemplate ?? []).find(\n          (entry) => String(entry.slug) === String(credential.template),\n        );\n        if (template) {\n          // Fail if ANY input the template requires is unresolved — not just the\n          // primary `token` (a Datadog connection has no `token`, only its keys).\n          const missing = requiredTemplateVariables(template).filter((name) => {\n            const value = credential.values[name];\n            return value == null || value === \"\";\n          });\n          if (missing.length > 0) {\n            return openApiAuthToolFailure({\n              code:\n                template.kind === \"oauth2\"\n                  ? \"oauth_connection_missing\"\n                  : \"connection_value_missing\",\n              message: `Connection \"${credential.connection}\" for \"${integration}\" has no resolvable credential value. Re-authenticate or update the connection.`,\n              owner: credential.owner,\n              integration,\n              connection: String(credential.connection),\n              credentialKind: template.kind === \"oauth2\" ? \"oauth\" : \"secret\",\n            });\n          }\n          const rendered = renderAuthTemplate(template, credential.values);\n          Object.assign(headers, rendered.headers);\n          Object.assign(queryParams, rendered.queryParams);\n        }\n\n        const result = yield* invokeWithLayer(\n          binding,\n          (args ?? {}) as Record<string, unknown>,\n          config?.baseUrl ?? \"\",\n          headers,\n          queryParams,\n          httpClientLayer,\n        );\n\n        const ok = result.status >= 200 && result.status < 300;\n        if (!ok) {\n          if (result.status === 401 || result.status === 403) {\n            return openApiAuthToolFailure({\n              code: \"connection_rejected\",\n              status: result.status,\n              message: `Upstream rejected credentials for \"${integration}\" with HTTP ${result.status}. Re-authenticate or update the connection \"${credential.connection}\" before retrying this tool.`,\n              owner: credential.owner,\n              integration,\n              connection: String(credential.connection),\n              credentialKind: \"upstream\",\n              credentialLabel: \"Upstream authorization\",\n              details: result.error,\n            });\n          }\n          return ToolResult.fail({\n            code: \"upstream_http_error\",\n            status: result.status,\n            message: extractUpstreamMessage(result.error, result.status),\n            details: result.error,\n          });\n        }\n        // Payload-first: `data` is the upstream response body (matching the\n        // graphql/mcp plugins); transport facts ride in the `http` side\n        // channel so pagination/rate-limit headers stay reachable.\n        return ToolResult.ok(result.data, {\n          http: { status: result.status, headers: result.headers },\n        });\n      }),\n\n    resolveAnnotations: ({\n      ctx: annotationsCtx,\n      integration,\n      toolRows,\n    }: {\n      readonly ctx: PluginCtx<OpenapiStore>;\n      readonly integration: string;\n      readonly toolRows: readonly { readonly name: string }[];\n    }) =>\n      Effect.gen(function* () {\n        const ops = yield* annotationsCtx.storage.listOperations(String(integration));\n        const byName = new Map<string, OperationBinding>();\n        for (const op of ops) byName.set(op.toolName, op.binding);\n        const out: Record<string, ReturnType<typeof annotationsForOperation>> = {};\n        for (const row of toolRows) {\n          const binding = byName.get(row.name);\n          if (binding) {\n            out[row.name] = annotationsForOperation(binding.method, binding.pathTemplate);\n          }\n        }\n        return out;\n      }),\n\n    removeConnection: () => Effect.void,\n\n    detect: ({\n      ctx: detectCtx,\n      url,\n    }: {\n      readonly ctx: PluginCtx<OpenapiStore>;\n      readonly url: string;\n    }) =>\n      Effect.gen(function* () {\n        const httpClientLayer = options?.httpClientLayer ?? detectCtx.httpClientLayer;\n        const trimmed = url.trim();\n        if (!trimmed) return null;\n        const parsed = yield* Effect.try({\n          try: () => new URL(trimmed),\n          catch: (error) => error,\n        }).pipe(Effect.option);\n        if (Option.isNone(parsed)) return null;\n        if (isGoogleDiscoveryUrl(trimmed)) {\n          const conversion = yield* fetchGoogleDiscoveryDocument(trimmed).pipe(\n            Effect.provide(httpClientLayer),\n            Effect.flatMap((documentText) =>\n              convertGoogleDiscoveryToOpenApi({\n                discoveryUrl: trimmed,\n                documentText,\n              }),\n            ),\n            Effect.catch(() => Effect.succeed(null)),\n          );\n          if (conversion) {\n            return IntegrationDetectionResult.make({\n              kind: \"openapi\",\n              confidence: \"high\",\n              endpoint: trimmed,\n              name: conversion.title,\n              slug:\n                conversion.title\n                  .toLowerCase()\n                  .replace(/[^a-z0-9]+/g, \"_\")\n                  .replace(/^_+|_+$/g, \"\") || `google_${conversion.service}`,\n            });\n          }\n        }\n        const specText = yield* resolveSpecText(trimmed).pipe(\n          Effect.provide(httpClientLayer),\n          Effect.catch(() => Effect.succeed(null)),\n        );\n        if (specText === null) return null;\n        const doc = yield* parse(specText).pipe(Effect.catch(() => Effect.succeed(null)));\n        if (!doc) return null;\n        const result = yield* extract(doc).pipe(Effect.catch(() => Effect.succeed(null)));\n        if (!result) return null;\n        const slug = Option.getOrElse(result.title, () => \"api\")\n          .toLowerCase()\n          .replace(/[^a-z0-9]+/g, \"_\");\n        const name = Option.getOrElse(result.title, () => slug);\n        return IntegrationDetectionResult.make({\n          kind: \"openapi\",\n          confidence: \"high\",\n          endpoint: trimmed,\n          name,\n          slug,\n        });\n      }),\n  };\n  // HTTP transport (routes/handlers/extensionService) is layered on by\n  // the api-aware factory in `@executor-js/plugin-openapi/api`. Hosts that\n  // want the HTTP surface import the plugin from there; SDK-only consumers\n  // stay on this entry and avoid the server-only deps.\n});\n","/**\n * Derives structured `group.leaf` tool paths from extracted OpenAPI operations.\n *\n * Ported from the v3 executor's `definitions.ts`. Turns flat operation IDs like\n * `zones_listZones` into nested paths like `zones.listZones` that the tree UI\n * can render with proper nesting.\n */\n\nimport { Option } from \"effect\";\n\nimport type { ExtractedOperation } from \"./types\";\n\n// ---------------------------------------------------------------------------\n// Word / case utilities\n// ---------------------------------------------------------------------------\n\nconst splitWords = (value: string): string[] =>\n  value\n    .replace(/([a-z0-9])([A-Z])/g, \"$1 $2\")\n    .replace(/([A-Z]+)([A-Z][a-z0-9]+)/g, \"$1 $2\")\n    .replace(/[^a-zA-Z0-9]+/g, \" \")\n    .trim()\n    .split(/\\s+/)\n    .filter((part) => part.length > 0);\n\nconst normalizeWord = (value: string): string => value.toLowerCase();\n\nconst toCamelCase = (value: string): string => {\n  const words = splitWords(value).map(normalizeWord);\n  if (words.length === 0) return \"tool\";\n  const [first, ...rest] = words;\n  return `${first}${rest.map((p) => `${p[0]?.toUpperCase() ?? \"\"}${p.slice(1)}`).join(\"\")}`;\n};\n\nconst toPascalCase = (value: string): string => {\n  const camel = toCamelCase(value);\n  return `${camel[0]?.toUpperCase() ?? \"\"}${camel.slice(1)}`;\n};\n\n// ---------------------------------------------------------------------------\n// Path utilities\n// ---------------------------------------------------------------------------\n\nconst VERSION_SEGMENT_REGEX = /^v\\d+(?:[._-]\\d+)?$/i;\nconst IGNORED_PATH_SEGMENTS = new Set([\"api\"]);\n\nconst pathSegmentsFromTemplate = (pathTemplate: string): string[] =>\n  pathTemplate\n    .split(\"/\")\n    .map((s) => s.trim())\n    .filter((s) => s.length > 0);\n\nconst isPathParameterSegment = (segment: string): boolean =>\n  segment.startsWith(\"{\") && segment.endsWith(\"}\");\n\nconst normalizeGroupSegment = (value: string | undefined): string | null => {\n  const candidate = value?.trim();\n  if (!candidate) return null;\n  return toCamelCase(candidate);\n};\n\n// ---------------------------------------------------------------------------\n// Derivation\n// ---------------------------------------------------------------------------\n\nconst deriveVersionSegment = (pathTemplate: string): string | undefined =>\n  pathSegmentsFromTemplate(pathTemplate)\n    .map((s) => s.toLowerCase())\n    .find((s) => VERSION_SEGMENT_REGEX.test(s));\n\nconst derivePathGroup = (pathTemplate: string): string => {\n  for (const segment of pathSegmentsFromTemplate(pathTemplate)) {\n    const lower = segment.toLowerCase();\n    if (VERSION_SEGMENT_REGEX.test(lower)) continue;\n    if (IGNORED_PATH_SEGMENTS.has(lower)) continue;\n    if (isPathParameterSegment(segment)) continue;\n    return normalizeGroupSegment(segment) ?? \"root\";\n  }\n  return \"root\";\n};\n\nconst splitOperationIdSegments = (value: string): string[] =>\n  value\n    .split(/[/.]+/)\n    .map((s) => s.trim())\n    .filter((s) => s.length > 0);\n\nconst deriveLeafSeed = (operationId: string, group: string): string => {\n  const segments = splitOperationIdSegments(operationId);\n  if (segments.length > 1) {\n    const [first, ...rest] = segments;\n    if ((normalizeGroupSegment(first) ?? first) === group && rest.length > 0) {\n      return rest.join(\" \");\n    }\n  }\n  return operationId;\n};\n\nconst fallbackLeafSeed = (method: string, pathTemplate: string, group: string): string => {\n  const relevantSegments = pathSegmentsFromTemplate(pathTemplate)\n    .filter((s) => !VERSION_SEGMENT_REGEX.test(s.toLowerCase()))\n    .filter((s) => !IGNORED_PATH_SEGMENTS.has(s.toLowerCase()))\n    .filter((s) => !isPathParameterSegment(s))\n    .map((s) => normalizeGroupSegment(s) ?? s)\n    .filter((s) => s !== group);\n\n  const segmentSuffix = relevantSegments.map((s) => toPascalCase(s)).join(\"\");\n  return `${method}${segmentSuffix || \"Operation\"}`;\n};\n\nconst deriveLeaf = (\n  operationId: string,\n  method: string,\n  pathTemplate: string,\n  group: string,\n): string => {\n  const preferred = toCamelCase(deriveLeafSeed(operationId, group));\n  if (preferred.length > 0 && preferred !== group) return preferred;\n  return toCamelCase(fallbackLeafSeed(method, pathTemplate, group));\n};\n\n// ---------------------------------------------------------------------------\n// Public types\n// ---------------------------------------------------------------------------\n\nexport interface ToolDefinition {\n  /** Dot-separated path like `zones.listZones` */\n  readonly toolPath: string;\n  /** The group segment */\n  readonly group: string;\n  /** The leaf segment */\n  readonly leaf: string;\n  /** Index into the original operations array */\n  readonly operationIndex: number;\n  /** The original operation */\n  readonly operation: ExtractedOperation;\n}\n\n// ---------------------------------------------------------------------------\n// Collision resolution\n// ---------------------------------------------------------------------------\n\nconst resolveCollisions = (\n  definitions: {\n    toolPath: string;\n    group: string;\n    leaf: string;\n    versionSegment: string | undefined;\n    method: string;\n    operationHash: string;\n    operationIndex: number;\n    operation: ExtractedOperation;\n  }[],\n): ToolDefinition[] => {\n  // Mutable — we progressively refine toolPath on collision\n  const staged = definitions.map((d) => ({ ...d }));\n\n  const applyFactory = (items: typeof staged, factory: (d: (typeof staged)[number]) => string) => {\n    const byPath = new Map<string, typeof staged>();\n    for (const item of items) {\n      const bucket = byPath.get(item.toolPath) ?? [];\n      bucket.push(item);\n      byPath.set(item.toolPath, bucket);\n    }\n    for (const bucket of byPath.values()) {\n      if (bucket.length < 2) continue;\n      for (const d of bucket) {\n        d.toolPath = factory(d);\n      }\n    }\n  };\n\n  // Round 1: add version segment\n  applyFactory(staged, (d) =>\n    d.versionSegment ? `${d.group}.${d.versionSegment}.${d.leaf}` : d.toolPath,\n  );\n\n  // Round 2: add method suffix\n  applyFactory(staged, (d) => {\n    const prefix = d.versionSegment ? `${d.group}.${d.versionSegment}` : d.group;\n    return `${prefix}.${d.leaf}${toPascalCase(d.method)}`;\n  });\n\n  // Round 3: add hash suffix\n  applyFactory(staged, (d) => {\n    const prefix = d.versionSegment ? `${d.group}.${d.versionSegment}` : d.group;\n    return `${prefix}.${d.leaf}${toPascalCase(d.method)}${d.operationHash.slice(0, 8)}`;\n  });\n\n  return staged.map((d) => ({\n    toolPath: d.toolPath,\n    group: d.group,\n    leaf: d.leaf,\n    operationIndex: d.operationIndex,\n    operation: d.operation,\n  }));\n};\n\n// ---------------------------------------------------------------------------\n// Stable hash (simple, deterministic)\n// ---------------------------------------------------------------------------\n\nconst stableHash = (value: unknown): string => {\n  const str = JSON.stringify(value, Object.keys(value as Record<string, unknown>).sort());\n  let hash = 0;\n  for (let i = 0; i < str.length; i++) {\n    hash = ((hash << 5) - hash + str.charCodeAt(i)) | 0;\n  }\n  return Math.abs(hash).toString(36).padStart(8, \"0\");\n};\n\n// ---------------------------------------------------------------------------\n// Main entry point\n// ---------------------------------------------------------------------------\n\n/**\n * Compile extracted operations into tool definitions with structured\n * `group.leaf` paths suitable for tree rendering.\n */\nexport const compileToolDefinitions = (\n  operations: readonly ExtractedOperation[],\n): ToolDefinition[] => {\n  const raw = operations.map((op, index) => {\n    const operationId = op.operationId;\n    const explicitToolPath = Option.getOrUndefined(op.toolPath);\n    if (explicitToolPath) {\n      const [group = \"root\", ...leafParts] = explicitToolPath.split(\".\").filter(Boolean);\n      const leaf = leafParts.join(\".\") || group;\n      const versionSegment = deriveVersionSegment(op.pathTemplate);\n      const operationHash = stableHash({\n        method: op.method,\n        path: op.pathTemplate,\n        operationId,\n      });\n\n      return {\n        toolPath: explicitToolPath,\n        group,\n        leaf,\n        versionSegment,\n        method: op.method,\n        operationHash,\n        operationIndex: index,\n        operation: op,\n      };\n    }\n\n    const group = normalizeGroupSegment(op.tags[0]) ?? derivePathGroup(op.pathTemplate);\n    const leaf = deriveLeaf(operationId, op.method, op.pathTemplate, group);\n    const versionSegment = deriveVersionSegment(op.pathTemplate);\n    const operationHash = stableHash({\n      method: op.method,\n      path: op.pathTemplate,\n      operationId,\n    });\n\n    return {\n      toolPath: `${group}.${leaf}`,\n      group,\n      leaf,\n      versionSegment,\n      method: op.method,\n      operationHash,\n      operationIndex: index,\n      operation: op,\n    };\n  });\n\n  return resolveCollisions(raw).sort((a, b) => a.toolPath.localeCompare(b.toolPath));\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,QAAQ,cAAc;AAC/B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAuBP,IAAM,4BAA4B,OAAO,OAAO;AAAA,EAC9C,MAAM,OAAO;AAAA,EACb,MAAM,OAAO,QAAQ,QAAQ;AAAA,EAC7B,kBAAkB,OAAO;AAAA,EACzB,UAAU,OAAO;AAAA,EACjB,QAAQ,OAAO,MAAM,OAAO,MAAM;AACpC,CAAC;AAEM,IAAM,uBAAuB,OAAO,MAAM,CAAC,2BAA2B,gBAAgB,CAAC;AAEvF,IAAM,iCAAiC,OAAO,OAAO;AAAA;AAAA;AAAA,EAG1D,UAAU,OAAO,SAAS,OAAO,MAAM;AAAA;AAAA,EAEvC,WAAW,OAAO,SAAS,OAAO,MAAM;AAAA;AAAA,EAExC,qBAAqB,OAAO,SAAS,OAAO,MAAM,OAAO,MAAM,CAAC;AAAA;AAAA,EAEhE,SAAS,OAAO,SAAS,OAAO,MAAM;AAAA;AAAA,EAEtC,SAAS,OAAO,SAAS,OAAO,OAAO,OAAO,QAAQ,OAAO,MAAM,CAAC;AAAA;AAAA,EAEpE,aAAa,OAAO,SAAS,OAAO,OAAO,OAAO,QAAQ,OAAO,MAAM,CAAC;AAAA;AAAA,EAExE,wBAAwB,OAAO,SAAS,OAAO,MAAM,oBAAoB,CAAC;AAC5E,CAAC;AAWD,IAAM,eAAe,OAAO,oBAAoB,8BAA8B;AAIvE,IAAM,iCAAiC,CAAC,UAC7C,OAAO,UAAU,aAAa,KAAK,CAAC;AAkB/B,IAAM,qBAAqB,CAChC,UACA,WACiB;AACjB,MAAI,SAAS,SAAS,UAAU;AAC9B,WAAO;AAAA,MACL,SAAS,EAAE,eAAe,UAAU,OAAO,cAAc,KAAK,EAAE,GAAG;AAAA,MACnE,aAAa,CAAC;AAAA,IAChB;AAAA,EACF;AACA,SAAO,qBAAqB,SAAS,YAAY,MAAM;AACzD;AAKO,IAAM,4BAA4B,CAAC,aAAgD;AACxF,MAAI,SAAS,SAAS,SAAU,QAAO,CAAC,cAAc;AACtD,SAAO,2BAA2B,SAAS,UAAU;AACvD;;;AC5GA,SAAS,QAAQ,OAAO,UAAAA,eAAc;AACtC,SAAS,YAAY,yBAAyB;AAiB9C,IAAM,iBAAoD;AAAA,EACxD,MAAM,CAAC,QAAQ,cAAc,QAAQ;AAAA,EACrC,OAAO,CAAC,SAAS,eAAe,QAAQ;AAAA,EACxC,QAAQ,CAAC,WAAW,QAAQ;AAAA,EAC5B,QAAQ,CAAC,WAAW,QAAQ;AAC9B;AAEA,IAAM,iBAAiB,CAAC,MAA+B,UAAuC;AAC5F,QAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,MAAI,WAAW,OAAW,QAAO;AAEjC,aAAW,OAAO,eAAe,MAAM,QAAQ,KAAK,CAAC,GAAG;AACtD,UAAM,YAAY,KAAK,GAAG;AAC1B,QAAI,OAAO,cAAc,YAAY,cAAc,QAAQ,CAAC,MAAM,QAAQ,SAAS,GAAG;AACpF,YAAM,SAAU,UAAsC,MAAM,IAAI;AAChE,UAAI,WAAW,OAAW,QAAO;AAAA,IACnC;AAAA,EACF;AAEA,SAAO;AACT;AAEA,IAAM,oBAAoB,CAAC,UACzB,OAAO,UAAU,YAAY,UAAU,OAAO,KAAK,UAAU,KAAK,IAAI,OAAO,KAAK;AAIpF,IAAM,wBAAwB;AAE9B,IAAM,sBAAsB,CAAC,KAAa,kBAAmC;AAC3E,MAAI,CAAC,cAAe,QAAO,mBAAmB,GAAG;AAEjD,MAAI,MAAM;AACV,aAAW,MAAM,KAAK;AACpB,WAAO,sBAAsB,KAAK,EAAE,IAAI,KAAK,mBAAmB,EAAE;AAAA,EACpE;AACA,SAAO;AACT;AAEA,IAAM,mBAAmB,CAAC,OAAgB,UAAwC;AAChF,MAAI,UAAU,UAAa,UAAU,KAAM,QAAO,CAAC;AACnD,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO,CAAC,kBAAkB,KAAK,CAAC;AAE3D,QAAM,QAAQC,QAAO,eAAe,MAAM,KAAK,KAAK;AACpD,QAAM,UAAUA,QAAO,UAAU,MAAM,SAAS,MAAM,IAAI;AAE1D,MAAI,QAAS,QAAO,MAAM,IAAI,iBAAiB;AAE/C,QAAM,YAAY,UAAU,mBAAmB,MAAM,UAAU,kBAAkB,MAAM;AACvF,SAAO,CAAC,MAAM,IAAI,iBAAiB,EAAE,KAAK,SAAS,CAAC;AACtD;AAMA,IAAM,cAAc,OAAO,GAAG,qBAAqB,EAAE,WACnD,cACA,MACA,YACA;AACA,MAAI,WAAW;AAEf,aAAW,SAAS,YAAY;AAC9B,QAAI,MAAM,aAAa,OAAQ;AAC/B,UAAM,QAAQ,eAAe,MAAM,KAAK;AACxC,QAAI,UAAU,UAAa,UAAU,MAAM;AACzC,UAAI,MAAM,UAAU;AAClB,eAAO,OAAO,IAAI,uBAAuB;AAAA,UACvC,SAAS,oCAAoC,MAAM,IAAI;AAAA,UACvD,YAAYA,QAAO,KAAK;AAAA,QAC1B,CAAC;AAAA,MACH;AACA;AAAA,IACF;AACA,UAAM,UAAU;AAAA,MACd,OAAO,KAAK;AAAA,MACZA,QAAO,UAAU,MAAM,eAAe,MAAM,KAAK;AAAA,IACnD;AACA,eAAW,SAAS,WAAW,IAAI,MAAM,IAAI,KAAK,OAAO;AACzD,eAAW,SAAS,WAAW,KAAK,MAAM,IAAI,KAAK,OAAO;AAAA,EAC5D;AAEA,QAAM,YAAY,CAAC,GAAG,SAAS,SAAS,eAAe,CAAC,EACrD,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,EACf,OAAO,CAAC,MAAmB,OAAO,MAAM,QAAQ;AAEnD,aAAW,QAAQ,WAAW;AAC5B,UAAM,QAAQ,KAAK,IAAI;AACvB,QAAI,UAAU,UAAa,UAAU,MAAM;AACzC,iBAAW,SAAS,WAAW,IAAI,IAAI,KAAK,mBAAmB,OAAO,KAAK,CAAC,CAAC;AAAA,IAC/E;AAAA,EACF;AAEA,QAAM,aAAa,CAAC,GAAG,SAAS,SAAS,eAAe,CAAC,EACtD,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,EACf,OAAO,CAAC,MAAmB,OAAO,MAAM,QAAQ;AAEnD,MAAI,WAAW,SAAS,GAAG;AACzB,WAAO,OAAO,IAAI,uBAAuB;AAAA,MACvC,SAAS,+BAA+B,CAAC,GAAG,IAAI,IAAI,UAAU,CAAC,EAAE,KAAK,IAAI,CAAC;AAAA,MAC3E,YAAYA,QAAO,KAAK;AAAA,IAC1B,CAAC;AAAA,EACH;AAEA,SAAO;AACT,CAAC;AAED,IAAM,eAAe,CACnB,SACA,YACwC;AACxC,MAAI,MAAM;AACV,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AACnD,UAAM,kBAAkB,UAAU,KAAK,MAAM,KAAK;AAAA,EACpD;AACA,SAAO;AACT;AAMA,IAAM,uBAAuB,CAAC,OAC5B,IAAI,MAAM,GAAG,EAAE,CAAC,GAAG,KAAK,EAAE,YAAY,KAAK;AAE7C,IAAM,oBAAoB,CAAC,OAA2C;AACpE,QAAM,aAAa,qBAAqB,EAAE;AAC1C,MAAI,CAAC,WAAY,QAAO;AACxB,SACE,eAAe,sBAAsB,WAAW,SAAS,OAAO,KAAK,WAAW,SAAS,MAAM;AAEnG;AAEA,IAAM,mBAAmB,CAAC,OACxB,qBAAqB,EAAE,MAAM;AAE/B,IAAM,sBAAsB,CAAC,OAC3B,qBAAqB,EAAE,EAAE,WAAW,qBAAqB;AAE3D,IAAM,mBAAmB,CAAC,OAA2C;AACnE,QAAM,aAAa,qBAAqB,EAAE;AAC1C,MAAI,CAAC,WAAY,QAAO;AACxB,SACE,eAAe,qBAAqB,eAAe,cAAc,WAAW,SAAS,MAAM;AAE/F;AAEA,IAAM,oBAAoB,CAAC,OACzB,qBAAqB,EAAE,EAAE,WAAW,OAAO;AAE7C,IAAM,gBAAgB,CAAC,OACrB,qBAAqB,EAAE,MAAM;AAE/B,IAAM,eAAe,CAAC,UAAsC;AAC1D,MAAI,iBAAiB,WAAY,QAAO;AACxC,MAAI,iBAAiB,YAAa,QAAO,IAAI,WAAW,KAAK;AAC7D,MAAI,YAAY,OAAO,KAAK,GAAG;AAC7B,UAAM,OAAO;AACb,WAAO,IAAI,WAAW,KAAK,QAAQ,KAAK,YAAY,KAAK,UAAU;AAAA,EACrE;AACA,MAAI,MAAM,QAAQ,KAAK,KAAK,MAAM,MAAM,CAAC,MAAM,OAAO,MAAM,QAAQ,GAAG;AACrE,WAAO,IAAI,WAAW,KAA0B;AAAA,EAClD;AACA,SAAO;AACT;AAQA,IAAM,gBAAgB,CAAC,UAAmC;AACxD,QAAM,OAAO,IAAI,YAAY,MAAM,UAAU;AAC7C,MAAI,WAAW,IAAI,EAAE,IAAI,KAAK;AAC9B,SAAO;AACT;AAcA,IAAM,qBAAmC;AAAA,EACvC,OAAO;AAAA,EACP,SAAS;AAAA,EACT,eAAe;AACjB;AAEA,IAAM,sBAAsB,CAAC,MAAgD;AAC3E,MAAI,CAAC,EAAG,QAAO;AACf,SAAO;AAAA,IACL,OAAOA,QAAO,UAAU,EAAE,OAAO,MAAM,mBAAmB,KAAK;AAAA,IAC/D,SAASA,QAAO,UAAU,EAAE,SAAS,MAAM,mBAAmB,OAAO;AAAA,IACrE,eAAeA,QAAO,UAAU,EAAE,eAAe,MAAM,mBAAmB,aAAa;AAAA,EACzF;AACF;AAEA,IAAM,kBAAkB,CAAC,GAAY,kBAAmC;AACtE,QAAM,MAAM,OAAO,MAAM,YAAY,MAAM,OAAO,KAAK,UAAU,CAAC,IAAI,OAAO,CAAC;AAC9E,SAAO,oBAAoB,KAAK,aAAa;AAC/C;AAOA,IAAM,0BAA0B,CAC9B,OACA,aACW;AACX,QAAM,QAAkB,CAAC;AACzB,aAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,KAAK,GAAG;AAC9C,QAAI,QAAQ,UAAa,QAAQ,KAAM;AACvC,UAAM,EAAE,OAAO,SAAS,cAAc,IAAI,oBAAoB,WAAW,GAAG,CAAC;AAC7E,UAAM,SAAS,mBAAmB,GAAG;AAErC,QAAI,MAAM,QAAQ,GAAG,GAAG;AACtB,UAAI,SAAS;AACX,mBAAW,KAAK,KAAK;AACnB,gBAAM,KAAK,GAAG,MAAM,IAAI,gBAAgB,GAAG,aAAa,CAAC,EAAE;AAAA,QAC7D;AAAA,MACF,OAAO;AACL,cAAM,MAAM,UAAU,mBAAmB,MAAM,UAAU,kBAAkB,MAAM;AACjF,cAAM;AAAA,UACJ,GAAG,MAAM,IAAI;AAAA,YACX,IAAI,IAAI,CAAC,MAAO,OAAO,MAAM,WAAW,KAAK,UAAU,CAAC,IAAI,OAAO,CAAC,CAAE,EAAE,KAAK,GAAG;AAAA,YAChF;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AACA;AAAA,IACF;AAEA,QAAI,OAAO,QAAQ,UAAU;AAC3B,YAAM,UAAU,OAAO,QAAQ,GAA8B,EAAE;AAAA,QAC7D,CAAC,CAAC,EAAE,CAAC,MAAM,MAAM,UAAa,MAAM;AAAA,MACtC;AACA,UAAI,UAAU,cAAc;AAC1B,mBAAW,CAAC,QAAQ,MAAM,KAAK,SAAS;AAItC,gBAAM;AAAA,YACJ,GAAG,mBAAmB,GAAG,GAAG,IAAI,MAAM,GAAG,CAAC,IAAI,gBAAgB,QAAQ,aAAa,CAAC;AAAA,UACtF;AAAA,QACF;AAAA,MACF,WAAW,SAAS;AAElB,mBAAW,CAAC,QAAQ,MAAM,KAAK,SAAS;AACtC,gBAAM,KAAK,GAAG,mBAAmB,MAAM,CAAC,IAAI,gBAAgB,QAAQ,aAAa,CAAC,EAAE;AAAA,QACtF;AAAA,MACF,OAAO;AAEL,cAAM,OAAO,QAAQ,QAAQ,CAAC,CAAC,GAAG,CAAC,MAAM;AAAA,UACvC;AAAA,UACA,OAAO,MAAM,WAAW,KAAK,UAAU,CAAC,IAAI,OAAO,CAAC;AAAA,QACtD,CAAC;AACD,cAAM,KAAK,GAAG,MAAM,IAAI,gBAAgB,KAAK,KAAK,GAAG,GAAG,aAAa,CAAC,EAAE;AAAA,MAC1E;AACA;AAAA,IACF;AAEA,UAAM,KAAK,GAAG,MAAM,IAAI,gBAAgB,KAAK,aAAa,CAAC,EAAE;AAAA,EAC/D;AACA,SAAO,MAAM,KAAK,GAAG;AACvB;AAaA,IAAM,uBAAuB,CAC3B,OACA,aACmB;AACnB,QAAM,MAAyC,CAAC;AAChD,aAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,KAAK,GAAG;AAC9C,QAAI,QAAQ,UAAa,QAAQ,KAAM;AAEvC,UAAM,WAAW,WAAW,GAAG,IAC3BA,QAAO,eAAe,SAAS,GAAG,EAAG,WAAW,IAChD;AAKJ,QAAI,UAAU;AACZ,YAAM,SAAS,SAAS,WAAW,kBAAkB,KAAK,SAAS,SAAS,OAAO;AACnF,YAAM,aACJ,OAAO,QAAQ,WACX,MACA,SACE,KAAK,UAAU,GAAG,IAClB,OAAO,QAAQ,WACb,KAAK,UAAU,GAAG,IAClB,OAAO,GAAG;AACpB,UAAI,GAAG,IAAI,IAAI,KAAK,CAAC,UAAU,GAAG,EAAE,MAAM,SAAS,CAAC;AACpD;AAAA,IACF;AAEA,QACE,OAAO,QAAQ,YACf,OAAO,QAAQ,YACf,OAAO,QAAQ,aACf,eAAe,QACd,OAAO,SAAS,eAAe,eAAe,MAC/C;AACA,UAAI,GAAG,IAAI;AACX;AAAA,IACF;AACA,QAAI,MAAM,QAAQ,GAAG,GAAG;AACtB,UAAI,GAAG,IAAI,IAAI;AAAA,QAAI,CAAC,MAClB,OAAO,MAAM,YACb,OAAO,MAAM,YACb,OAAO,MAAM,aACb,aAAa,QACZ,OAAO,SAAS,eAAe,aAAa,OACxC,IACD,KAAK,UAAU,CAAC;AAAA,MACtB;AACA;AAAA,IACF;AACA,UAAM,QAAQ,aAAa,GAAG;AAC9B,QAAI,OAAO;AACT,UAAI,GAAG,IAAI,IAAI,KAAK,CAAC,cAAc,KAAK,CAAC,CAAC;AAC1C;AAAA,IACF;AACA,QAAI,GAAG,IAAI,KAAK,UAAU,GAAG;AAAA,EAC/B;AACA,SAAO;AACT;AAiBA,IAAM,mBAAmB,CACvB,SACA,aACA,WACA,aACwC;AACxC,MAAI,kBAAkB,WAAW,GAAG;AAGlC,QAAI,OAAO,cAAc,UAAU;AACjC,aAAO,kBAAkB,SAAS,SAAS,WAAW,WAAW;AAAA,IACnE;AACA,WAAO,kBAAkB,eAAe,SAAS,SAAS;AAAA,EAC5D;AAEA,MAAI,iBAAiB,WAAW,GAAG;AACjC,QAAI,OAAO,cAAc,UAAU;AACjC,aAAO,kBAAkB,SAAS,SAAS,WAAW,WAAW;AAAA,IACnE;AACA,QAAI,OAAO,cAAc,YAAY,cAAc,QAAQ,CAAC,MAAM,QAAQ,SAAS,GAAG;AAGpF,YAAM,aAAa,wBAAwB,WAAsC,QAAQ;AACzF,aAAO,kBAAkB,SAAS,SAAS,YAAY,WAAW;AAAA,IACpE;AAEA,WAAO,kBAAkB;AAAA,MACvB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,MAAI,oBAAoB,WAAW,GAAG;AACpC,QAAI,qBAAqB,UAAU;AACjC,aAAO,kBAAkB,aAAa,SAAS,SAAS;AAAA,IAC1D;AACA,QAAI,OAAO,cAAc,YAAY,cAAc,MAAM;AACvD,aAAO,kBAAkB;AAAA,QACvB;AAAA,QACA,qBAAqB,WAAsC,QAAQ;AAAA,MACrE;AAAA,IACF;AAIA,WAAO,kBAAkB,SAAS,SAAS,OAAO,SAAS,GAAG,WAAW;AAAA,EAC3E;AAEA,MAAI,cAAc,WAAW,GAAG;AAC9B,UAAMC,SAAQ,aAAa,SAAS;AACpC,QAAIA,OAAO,QAAO,kBAAkB,eAAe,SAASA,QAAO,WAAW;AAC9E,QAAI,OAAO,cAAc,UAAU;AACjC,aAAO,kBAAkB,SAAS,SAAS,WAAW,WAAW;AAAA,IACnE;AAEA,WAAO,kBAAkB,SAAS,SAAS,KAAK,UAAU,SAAS,GAAG,WAAW;AAAA,EACnF;AAEA,MAAI,iBAAiB,WAAW,KAAK,kBAAkB,WAAW,GAAG;AACnE,QAAI,OAAO,cAAc,UAAU;AACjC,aAAO,kBAAkB,SAAS,SAAS,WAAW,WAAW;AAAA,IACnE;AACA,UAAMA,SAAQ,aAAa,SAAS;AACpC,QAAIA,OAAO,QAAO,kBAAkB,eAAe,SAASA,QAAO,WAAW;AAG9E,WAAO,kBAAkB,SAAS,SAAS,KAAK,UAAU,SAAS,GAAG,WAAW;AAAA,EACnF;AAGA,MAAI,OAAO,cAAc,UAAU;AACjC,WAAO,kBAAkB,SAAS,SAAS,WAAW,WAAW;AAAA,EACnE;AACA,QAAM,QAAQ,aAAa,SAAS;AACpC,MAAI,MAAO,QAAO,kBAAkB,eAAe,SAAS,OAAO,WAAW;AAC9E,SAAO,kBAAkB,SAAS,SAAS,KAAK,UAAU,SAAS,GAAG,WAAW;AACnF;AAMO,IAAM,SAAS,OAAO,GAAG,gBAAgB,EAAE,WAChD,WACA,MACA,iBACA,oBAA4C,CAAC,GAC7C;AACA,QAAM,SAAS,OAAO,WAAW;AAEjC,SAAO,OAAO,oBAAoB;AAAA,IAChC,eAAe,UAAU,OAAO,YAAY;AAAA,IAC5C,cAAc,UAAU;AAAA,IACxB,yBAAyB,UAAU,OAAO,YAAY;AAAA,IACtD,gCAAgC,UAAU;AAAA,IAC1C,yCAAyC,OAAO,KAAK,eAAe,EAAE;AAAA,EACxE,CAAC;AAED,QAAM,eAAe,OAAO,YAAY,UAAU,cAAc,MAAM,UAAU,UAAU;AAE1F,QAAM,OAAO,aAAa,WAAW,GAAG,IAAI,eAAe,IAAI,YAAY;AAE3E,MAAI,UAAU,kBAAkB,KAAK,UAAU,OAAO,YAAY,CAAU,EAAE,IAAI;AAElF,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,iBAAiB,GAAG;AAC7D,cAAU,kBAAkB,YAAY,SAAS,MAAM,KAAK;AAAA,EAC9D;AAEA,aAAW,SAAS,UAAU,YAAY;AACxC,QAAI,MAAM,aAAa,QAAS;AAChC,UAAM,QAAQ,eAAe,MAAM,KAAK;AACxC,eAAW,cAAc,iBAAiB,OAAO,KAAK,GAAG;AACvD,gBAAU,kBAAkB,eAAe,SAAS,MAAM,MAAM,UAAU;AAAA,IAC5E;AAAA,EACF;AAEA,aAAW,SAAS,UAAU,YAAY;AACxC,QAAI,MAAM,aAAa,SAAU;AACjC,UAAM,QAAQ,eAAe,MAAM,KAAK;AACxC,QAAI,UAAU,UAAa,UAAU,KAAM;AAC3C,cAAU,kBAAkB,UAAU,SAAS,MAAM,MAAM,OAAO,KAAK,CAAC;AAAA,EAC1E;AAEA,MAAID,QAAO,OAAO,UAAU,WAAW,GAAG;AACxC,UAAM,KAAK,UAAU,YAAY;AACjC,UAAM,YAAY,KAAK,QAAQ,KAAK;AACpC,QAAI,cAAc,QAAW;AAI3B,YAAM,cAAcA,QAAO,eAAe,GAAG,QAAQ;AACrD,YAAM,cAAc,OAAO,KAAK,gBAAgB,WAAW,KAAK,cAAc;AAC9E,YAAM,WACJ,eAAe,cACX,YAAY,KAAK,CAAC,MAAM,EAAE,gBAAgB,WAAW,IACrD;AACN,YAAM,WAAW,UAAU,eAAe,GAAG;AAC7C,YAAM,iBAAiB,WACnBA,QAAO,eAAe,SAAS,QAAQ,IACvC,eAAe,YAAY,CAAC,IAC1BA,QAAO,eAAe,YAAY,CAAC,EAAE,QAAQ,IAC7C;AACN,gBAAU,iBAAiB,SAAS,UAAU,WAAW,cAAc;AAAA,IACzE;AAAA,EACF;AAEA,YAAU,aAAa,SAAS,eAAe;AAE/C,QAAM,WAAW,OAAO,OAAO,QAAQ,OAAO,EAAE;AAAA,IAC9C,OAAO;AAAA,MACL,CAAC,QACC,IAAI,uBAAuB;AAAA,QACzB,SAAS;AAAA,QACT,YAAYA,QAAO,KAAK;AAAA,QACxB,OAAO;AAAA,MACT,CAAC;AAAA,IACL;AAAA,EACF;AAEA,QAAM,SAAS,SAAS;AACxB,SAAO,OAAO,oBAAoB;AAAA,IAChC,oBAAoB;AAAA,EACtB,CAAC;AACD,QAAM,kBAA0C,EAAE,GAAG,SAAS,QAAQ;AAEtE,QAAM,cAAc,SAAS,QAAQ,cAAc,KAAK;AACxD,QAAM,eAAe,OAAO;AAAA,IAC1B,CAAC,QACC,IAAI,uBAAuB;AAAA,MACzB,SAAS;AAAA,MACT,YAAYA,QAAO,KAAK,MAAM;AAAA,MAC9B,OAAO;AAAA,IACT,CAAC;AAAA,EACL;AACA,QAAM,eACJ,WAAW,MACP,OACA,kBAAkB,WAAW,IAC3B,OAAO,SAAS,KAAK;AAAA,IACnB,OAAO,MAAM,MAAM,SAAS,IAAI;AAAA,IAChC;AAAA,EACF,IACA,OAAO,SAAS,KAAK,KAAK,YAAY;AAE9C,QAAM,KAAK,UAAU,OAAO,SAAS;AAErC,SAAO,iBAAiB,KAAK;AAAA,IAC3B;AAAA,IACA,SAAS;AAAA,IACT,MAAM,KAAK,eAAe;AAAA,IAC1B,OAAO,KAAK,OAAO;AAAA,EACrB,CAAC;AACH,CAAC;AAID,IAAM,qBAAqB,CACzB,SACA,WACA,YACW;AACX,MAAI,QAAS,QAAO;AACpB,MAAI,QAAQ,WAAW,EAAG,QAAO;AAEjC,QAAM,MACJ,OAAO,cAAc,YAAY,cAAc,QAAQ,CAAC,MAAM,QAAQ,SAAS,IAC3E,YACA,CAAC;AAEP,QAAM,SAAS,QAAQ,KAAK,CAAC,WAAW,OAAO,QAAQ,IAAI,GAAG,KAAK,QAAQ,CAAC;AAE5E,QAAM,YAAoC,CAAC;AAC3C,MAAI,OAAO,IAAI,cAAc,YAAY,IAAI,cAAc,MAAM;AAC/D,eAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,IAAI,SAAoC,GAAG;AACpF,UAAI,SAAS,QAAQ,UAAU,GAAI,WAAU,IAAI,IAAI,OAAO,KAAK;AAAA,IACnE;AAAA,EACF;AACA,SAAO,iBAAiB,OAAO,KAAKA,QAAO,eAAe,OAAO,SAAS,GAAG,SAAS;AACxF;AAMO,IAAM,kBAAkB,CAC7B,WACA,MACA,SACA,iBACA,mBACA,oBACG;AACH,QAAM,mBAAmB,mBAAmB,UAAU,WAAW,CAAC,GAAG,KAAK,QAAQ,OAAO;AACzF,QAAM,oBAAoB,mBACtB,MAAM;AAAA,IACJ,WAAW;AAAA,IACX,OAAO;AAAA,MACL,OAAO,QAAQ,WAAW,UAAU;AAAA,MACpC,WAAW,WAAW,kBAAkB,WAAW,gBAAgB,CAAC;AAAA,IACtE;AAAA,EACF,EAAE,KAAK,MAAM,QAAQ,eAAe,CAAC,IACrC;AAEJ,SAAO,OAAO,WAAW,MAAM,iBAAiB,iBAAiB,EAAE;AAAA,IACjE,OAAO,QAAQ,iBAAiB;AAAA,IAChC,OAAO,SAAS,yBAAyB;AAAA,MACvC,YAAY;AAAA,QACV,yBAAyB,UAAU,OAAO,YAAY;AAAA,QACtD,gCAAgC,UAAU;AAAA,QAC1C,2BAA2B;AAAA,MAC7B;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAMA,IAAM,mBAAmB,oBAAI,IAAI,CAAC,QAAQ,OAAO,SAAS,QAAQ,CAAC;AAE5D,IAAM,0BAA0B,CACrC,QACA,iBACiE;AACjE,QAAM,IAAI,OAAO,YAAY;AAC7B,MAAI,CAAC,iBAAiB,IAAI,CAAC,EAAG,QAAO,CAAC;AACtC,SAAO;AAAA,IACL,kBAAkB;AAAA,IAClB,qBAAqB,GAAG,OAAO,YAAY,CAAC,IAAI,YAAY;AAAA,EAC9D;AACF;;;AC7oBA,SAAS,UAAAE,SAAQ,UAAAC,SAAQ,WAAW,UAAAC,eAAc;AA0BlD,IAAM,uBAAuB;AAC7B,IAAM,cAAc;AAEpB,IAAM,gBAAgBC,QAAO,WAAW,gBAAgB;AACxD,IAAM,gBAAgBA,QAAO,kBAAkB,gBAAgB;AAC/D,IAAM,oBAAoBA,QAAO,kBAAkBA,QAAO,eAAe,gBAAgB,CAAC;AAE1F,IAAM,eAAe,CAAC,UAA4C;AAElE,IAAM,mBAAmBA,QAAO,OAAO;AAAA,EACrC,aAAaA,QAAO;AAAA,EACpB,UAAUA,QAAO;AAAA,EACjB,SAASA,QAAO;AAClB,CAAC;AACD,IAAM,yBAAyBA,QAAO,oBAAoB,gBAAgB;AAU1E,IAAM,iBAAiB,CAAC,QAAoD;AAC1E,QAAM,UAAU,uBAAuB,IAAI,IAAI;AAC/C,MAAIC,QAAO,OAAO,OAAO,EAAG,QAAO;AACnC,QAAM,YAAY,QAAQ;AAC1B,SAAO;AAAA,IACL,aAAa,UAAU;AAAA,IACvB,UAAU,UAAU;AAAA,IACpB,SAAS;AAAA,MACP,OAAO,UAAU,YAAY,WACzB,kBAAkB,UAAU,OAAO,IACnC,UAAU;AAAA,IAChB;AAAA,EACF;AACF;AAEA,IAAM,eAAe,CAAC,aAAqB,aACzC,GAAG,WAAW,IAAI,QAAQ;AAIrB,IAAM,cAAc,CAAC,aAA6B,QAAQ,QAAQ;AA2BlE,IAAM,0BAA0B,CAAC,EAAE,eAAe,MAAM,MAAiC;AAC9F,QAAM,gBAAgB,CAAC,eAAgC;AAAA,IACrD,aAAa,UAAU;AAAA,IACvB,UAAU,UAAU;AAAA,IACpB,SAAS,aAAa,cAAc,UAAU,OAAO,CAAC;AAAA,EACxD;AAEA,QAAM,WAAW,CAAC,gBAChB,cACG,KAAK,EAAE,YAAY,sBAAsB,WAAW,GAAG,WAAW,IAAI,CAAC,EACvE;AAAA,IACCC,QAAO;AAAA,MAAI,CAAC,SACV,KAAK,OAAO,CAAC,QAAQ,eAAe,GAAG,GAAG,gBAAgB,WAAW;AAAA,IACvE;AAAA,EACF;AAEJ,QAAM,mBAAmB,CAAC,gBACxBA,QAAO,IAAI,aAAa;AACtB,UAAM,OAAO,OAAO,SAAS,WAAW;AACxC,WAAO,cAAc,WAAW;AAAA,MAC9B,OAAO;AAAA,MACP,SAAS,KAAK,IAAI,CAAC,SAAS,EAAE,YAAY,sBAAsB,KAAK,IAAI,IAAI,EAAE;AAAA,IACjF,CAAC;AAAA,EACH,CAAC;AAEH,SAAO;AAAA,IACL,eAAe,CAAC,aAAa,eAC3BA,QAAO,IAAI,aAAa;AACtB,aAAO,iBAAiB,WAAW;AACnC,aAAO,cAAc,QAAQ;AAAA,QAC3B,OAAO;AAAA,QACP,SAAS,WAAW,IAAI,CAAC,eAAe;AAAA,UACtC,YAAY;AAAA,UACZ,KAAK,aAAa,aAAa,UAAU,QAAQ;AAAA,UACjD,MAAM,cAAc,SAAS;AAAA,QAC/B,EAAE;AAAA,MACJ,CAAC;AAAA,IACH,CAAC;AAAA,IAEH,cAAc,CAAC,aAAa,aAC1B,cACG,IAAI,EAAE,YAAY,sBAAsB,KAAK,aAAa,aAAa,QAAQ,EAAE,CAAC,EAClF,KAAKA,QAAO,IAAI,CAAC,QAAS,MAAM,eAAe,GAAG,IAAI,IAAK,CAAC;AAAA,IAEjE,gBAAgB,CAAC,gBACf,SAAS,WAAW,EAAE;AAAA,MACpBA,QAAO,IAAI,CAAC,SAAS,KAAK,IAAI,cAAc,EAAE,OAAO,UAAU,SAAS,CAAC;AAAA,IAC3E;AAAA,IAEF;AAAA,IAEA,SAAS,CAAC,UAAU,aAClB,MAAM,IAAI,YAAY,QAAQ,GAAG,UAAU,EAAE,OAAO,YAAY,CAAC;AAAA,IAEnE,SAAS,CAAC,aAAa,MAAM,IAAI,YAAY,QAAQ,CAAC;AAAA,EACxD;AACF;;;ACzJA,SAAS,UAAAC,SAAQ,UAAAC,SAAQ,UAAAC,eAAc;AAIvC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAUK;;;AChBP,SAAS,UAAAC,eAAc;AAQvB,IAAM,aAAa,CAAC,UAClB,MACG,QAAQ,sBAAsB,OAAO,EACrC,QAAQ,6BAA6B,OAAO,EAC5C,QAAQ,kBAAkB,GAAG,EAC7B,KAAK,EACL,MAAM,KAAK,EACX,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC;AAErC,IAAM,gBAAgB,CAAC,UAA0B,MAAM,YAAY;AAEnE,IAAM,cAAc,CAAC,UAA0B;AAC7C,QAAM,QAAQ,WAAW,KAAK,EAAE,IAAI,aAAa;AACjD,MAAI,MAAM,WAAW,EAAG,QAAO;AAC/B,QAAM,CAAC,OAAO,GAAG,IAAI,IAAI;AACzB,SAAO,GAAG,KAAK,GAAG,KAAK,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,GAAG,YAAY,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;AACzF;AAEA,IAAM,eAAe,CAAC,UAA0B;AAC9C,QAAM,QAAQ,YAAY,KAAK;AAC/B,SAAO,GAAG,MAAM,CAAC,GAAG,YAAY,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,CAAC;AAC1D;AAMA,IAAM,wBAAwB;AAC9B,IAAM,wBAAwB,oBAAI,IAAI,CAAC,KAAK,CAAC;AAE7C,IAAM,2BAA2B,CAAC,iBAChC,aACG,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC;AAE/B,IAAM,yBAAyB,CAAC,YAC9B,QAAQ,WAAW,GAAG,KAAK,QAAQ,SAAS,GAAG;AAEjD,IAAM,wBAAwB,CAAC,UAA6C;AAC1E,QAAM,YAAY,OAAO,KAAK;AAC9B,MAAI,CAAC,UAAW,QAAO;AACvB,SAAO,YAAY,SAAS;AAC9B;AAMA,IAAM,uBAAuB,CAAC,iBAC5B,yBAAyB,YAAY,EAClC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,EAC1B,KAAK,CAAC,MAAM,sBAAsB,KAAK,CAAC,CAAC;AAE9C,IAAM,kBAAkB,CAAC,iBAAiC;AACxD,aAAW,WAAW,yBAAyB,YAAY,GAAG;AAC5D,UAAM,QAAQ,QAAQ,YAAY;AAClC,QAAI,sBAAsB,KAAK,KAAK,EAAG;AACvC,QAAI,sBAAsB,IAAI,KAAK,EAAG;AACtC,QAAI,uBAAuB,OAAO,EAAG;AACrC,WAAO,sBAAsB,OAAO,KAAK;AAAA,EAC3C;AACA,SAAO;AACT;AAEA,IAAM,2BAA2B,CAAC,UAChC,MACG,MAAM,OAAO,EACb,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC;AAE/B,IAAM,iBAAiB,CAAC,aAAqB,UAA0B;AACrE,QAAM,WAAW,yBAAyB,WAAW;AACrD,MAAI,SAAS,SAAS,GAAG;AACvB,UAAM,CAAC,OAAO,GAAG,IAAI,IAAI;AACzB,SAAK,sBAAsB,KAAK,KAAK,WAAW,SAAS,KAAK,SAAS,GAAG;AACxE,aAAO,KAAK,KAAK,GAAG;AAAA,IACtB;AAAA,EACF;AACA,SAAO;AACT;AAEA,IAAM,mBAAmB,CAAC,QAAgB,cAAsB,UAA0B;AACxF,QAAM,mBAAmB,yBAAyB,YAAY,EAC3D,OAAO,CAAC,MAAM,CAAC,sBAAsB,KAAK,EAAE,YAAY,CAAC,CAAC,EAC1D,OAAO,CAAC,MAAM,CAAC,sBAAsB,IAAI,EAAE,YAAY,CAAC,CAAC,EACzD,OAAO,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,EACxC,IAAI,CAAC,MAAM,sBAAsB,CAAC,KAAK,CAAC,EACxC,OAAO,CAAC,MAAM,MAAM,KAAK;AAE5B,QAAM,gBAAgB,iBAAiB,IAAI,CAAC,MAAM,aAAa,CAAC,CAAC,EAAE,KAAK,EAAE;AAC1E,SAAO,GAAG,MAAM,GAAG,iBAAiB,WAAW;AACjD;AAEA,IAAM,aAAa,CACjB,aACA,QACA,cACA,UACW;AACX,QAAM,YAAY,YAAY,eAAe,aAAa,KAAK,CAAC;AAChE,MAAI,UAAU,SAAS,KAAK,cAAc,MAAO,QAAO;AACxD,SAAO,YAAY,iBAAiB,QAAQ,cAAc,KAAK,CAAC;AAClE;AAuBA,IAAM,oBAAoB,CACxB,gBAUqB;AAErB,QAAM,SAAS,YAAY,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;AAEhD,QAAM,eAAe,CAAC,OAAsB,YAAoD;AAC9F,UAAM,SAAS,oBAAI,IAA2B;AAC9C,eAAW,QAAQ,OAAO;AACxB,YAAM,SAAS,OAAO,IAAI,KAAK,QAAQ,KAAK,CAAC;AAC7C,aAAO,KAAK,IAAI;AAChB,aAAO,IAAI,KAAK,UAAU,MAAM;AAAA,IAClC;AACA,eAAW,UAAU,OAAO,OAAO,GAAG;AACpC,UAAI,OAAO,SAAS,EAAG;AACvB,iBAAW,KAAK,QAAQ;AACtB,UAAE,WAAW,QAAQ,CAAC;AAAA,MACxB;AAAA,IACF;AAAA,EACF;AAGA;AAAA,IAAa;AAAA,IAAQ,CAAC,MACpB,EAAE,iBAAiB,GAAG,EAAE,KAAK,IAAI,EAAE,cAAc,IAAI,EAAE,IAAI,KAAK,EAAE;AAAA,EACpE;AAGA,eAAa,QAAQ,CAAC,MAAM;AAC1B,UAAM,SAAS,EAAE,iBAAiB,GAAG,EAAE,KAAK,IAAI,EAAE,cAAc,KAAK,EAAE;AACvE,WAAO,GAAG,MAAM,IAAI,EAAE,IAAI,GAAG,aAAa,EAAE,MAAM,CAAC;AAAA,EACrD,CAAC;AAGD,eAAa,QAAQ,CAAC,MAAM;AAC1B,UAAM,SAAS,EAAE,iBAAiB,GAAG,EAAE,KAAK,IAAI,EAAE,cAAc,KAAK,EAAE;AACvE,WAAO,GAAG,MAAM,IAAI,EAAE,IAAI,GAAG,aAAa,EAAE,MAAM,CAAC,GAAG,EAAE,cAAc,MAAM,GAAG,CAAC,CAAC;AAAA,EACnF,CAAC;AAED,SAAO,OAAO,IAAI,CAAC,OAAO;AAAA,IACxB,UAAU,EAAE;AAAA,IACZ,OAAO,EAAE;AAAA,IACT,MAAM,EAAE;AAAA,IACR,gBAAgB,EAAE;AAAA,IAClB,WAAW,EAAE;AAAA,EACf,EAAE;AACJ;AAMA,IAAM,aAAa,CAAC,UAA2B;AAC7C,QAAM,MAAM,KAAK,UAAU,OAAO,OAAO,KAAK,KAAgC,EAAE,KAAK,CAAC;AACtF,MAAI,OAAO;AACX,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK;AACnC,YAAS,QAAQ,KAAK,OAAO,IAAI,WAAW,CAAC,IAAK;AAAA,EACpD;AACA,SAAO,KAAK,IAAI,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AACpD;AAUO,IAAM,yBAAyB,CACpC,eACqB;AACrB,QAAM,MAAM,WAAW,IAAI,CAAC,IAAI,UAAU;AACxC,UAAM,cAAc,GAAG;AACvB,UAAM,mBAAmBA,QAAO,eAAe,GAAG,QAAQ;AAC1D,QAAI,kBAAkB;AACpB,YAAM,CAACC,SAAQ,QAAQ,GAAG,SAAS,IAAI,iBAAiB,MAAM,GAAG,EAAE,OAAO,OAAO;AACjF,YAAMC,QAAO,UAAU,KAAK,GAAG,KAAKD;AACpC,YAAME,kBAAiB,qBAAqB,GAAG,YAAY;AAC3D,YAAMC,iBAAgB,WAAW;AAAA,QAC/B,QAAQ,GAAG;AAAA,QACX,MAAM,GAAG;AAAA,QACT;AAAA,MACF,CAAC;AAED,aAAO;AAAA,QACL,UAAU;AAAA,QACV,OAAAH;AAAA,QACA,MAAAC;AAAA,QACA,gBAAAC;AAAA,QACA,QAAQ,GAAG;AAAA,QACX,eAAAC;AAAA,QACA,gBAAgB;AAAA,QAChB,WAAW;AAAA,MACb;AAAA,IACF;AAEA,UAAM,QAAQ,sBAAsB,GAAG,KAAK,CAAC,CAAC,KAAK,gBAAgB,GAAG,YAAY;AAClF,UAAM,OAAO,WAAW,aAAa,GAAG,QAAQ,GAAG,cAAc,KAAK;AACtE,UAAM,iBAAiB,qBAAqB,GAAG,YAAY;AAC3D,UAAM,gBAAgB,WAAW;AAAA,MAC/B,QAAQ,GAAG;AAAA,MACX,MAAM,GAAG;AAAA,MACT;AAAA,IACF,CAAC;AAED,WAAO;AAAA,MACL,UAAU,GAAG,KAAK,IAAI,IAAI;AAAA,MAC1B;AAAA,MACA;AAAA,MACA;AAAA,MACA,QAAQ,GAAG;AAAA,MACX;AAAA,MACA,gBAAgB;AAAA,MAChB,WAAW;AAAA,IACb;AAAA,EACF,CAAC;AAED,SAAO,kBAAkB,GAAG,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,SAAS,cAAc,EAAE,QAAQ,CAAC;AACnF;;;AD5NA,SAAS,oBAAoB,gCAAgC;AAM7D,IAAM,uBAAuB;AAC7B,IAAM,sBAAsBC,QAAO,OAAO,EAAE,SAASA,QAAO,OAAO,CAAC;AACpE,IAAM,2BAA2BA,QAAO,OAAO,EAAE,cAAcA,QAAO,OAAO,CAAC;AAC9E,IAAM,0BAA0BA,QAAO,OAAO,EAAE,OAAO,oBAAoB,CAAC;AAC5E,IAAM,0BAA0BA,QAAO,OAAO;AAAA,EAC5C,QAAQA,QAAO;AAAA,IACbA,QAAO,OAAO;AAAA,MACZ,QAAQA,QAAO,SAASA,QAAO,MAAM;AAAA,MACrC,SAASA,QAAO,SAASA,QAAO,MAAM;AAAA,MACtC,OAAOA,QAAO,SAASA,QAAO,MAAM;AAAA,IACtC,CAAC;AAAA,EACH;AACF,CAAC;AACD,IAAM,0BAA0BA,QAAO,OAAO;AAAA,EAC5C,QAAQA,QAAO,SAASA,QAAO,MAAM;AAAA,EACrC,OAAOA,QAAO,SAASA,QAAO,MAAM;AAAA,EACpC,aAAaA,QAAO,SAASA,QAAO,MAAM;AAC5C,CAAC;AAED,IAAM,4BAA4BA,QAAO,oBAAoB,mBAAmB;AAChF,IAAM,iCAAiCA,QAAO,oBAAoB,wBAAwB;AAC1F,IAAM,gCAAgCA,QAAO,oBAAoB,uBAAuB;AACxF,IAAM,gCAAgCA,QAAO,oBAAoB,uBAAuB;AACxF,IAAM,gCAAgCA,QAAO,oBAAoB,uBAAuB;AAExF,IAAM,mBAAmB,CAAC,UAA2B;AACnD,MAAI;AAEJ,MAAI;AACF,QAAI,KAAK,UAAU,KAAK;AAAA,EAC1B,QAAQ;AACN,QAAI,OAAO,KAAK;AAAA,EAClB;AACA,SAAO,EAAE,SAAS,uBAAuB,GAAG,EAAE,MAAM,GAAG,oBAAoB,CAAC,WAAM;AACpF;AAEA,IAAM,gBAAgB,IAAI,WACxB,OAAO,KAAK,CAAC,UAAU,UAAU,UAAa,MAAM,SAAS,CAAC;AAIhE,IAAM,yBAAyB,CAAC,MAAe,WAA2B;AACxE,MAAI,OAAO,SAAS,UAAU;AAC5B,WAAO,KAAK,SAAS,IAAI,OAAO,0BAA0B,MAAM;AAAA,EAClE;AACA,QAAM,SAASC,QAAO,eAAe,8BAA8B,IAAI,CAAC;AACxE,QAAM,cAAcA,QAAO,eAAe,0BAA0B,IAAI,CAAC;AACzE,QAAM,mBAAmBA,QAAO,eAAe,+BAA+B,IAAI,CAAC;AACnF,QAAM,aAAaA,QAAO,eAAe,8BAA8B,IAAI,CAAC;AAC5E,QAAM,kBAAkBA,QAAO,eAAe,8BAA8B,IAAI,CAAC;AACjF,QAAM,eAAe,YAAY,OAC9B;AAAA,IACC,CAAC;AAAA,MACC;AAAA,MACA,SAAS;AAAA,MACT;AAAA,IACF,MAIM,cAAc,QAAQ,iBAAiB,KAAK;AAAA,EACpD,EACC,KAAK,CAACC,aAAgCA,aAAY,MAAS;AAC9D,QAAM,UAAU;AAAA,IACd,QAAQ,MAAM;AAAA,IACd,aAAa;AAAA,IACb,kBAAkB;AAAA,IAClB;AAAA,IACA,iBAAiB;AAAA,IACjB,iBAAiB;AAAA,IACjB,iBAAiB;AAAA,EACnB;AACA,MAAI,YAAY,OAAW,QAAO;AAClC,MAAI,SAAS,QAAQ,OAAO,SAAS,UAAU;AAC7C,WAAO,iBAAiB,IAAI;AAAA,EAC9B;AACA,SAAO,0BAA0B,MAAM;AACzC;AAkFA,IAAM,yBAAyBF,QAAO,OAAO;AAAA,EAC3C,MAAMA,QAAO;AACf,CAAC;AAED,IAAM,oCAAoCA,QAAO,OAAO;AAAA,EACtD,SAASA,QAAO;AAAA,EAChB,MAAMA,QAAO,OAAOA,QAAO,MAAMA,QAAO,MAAM,CAAC;AAAA,EAC/C,aAAaA,QAAO,OAAOA,QAAO,MAAM;AAC1C,CAAC;AACD,IAAM,4BAA4BA,QAAO,OAAO;AAAA,EAC9C,KAAKA,QAAO;AAAA,EACZ,aAAaA,QAAO,OAAOA,QAAO,MAAM;AAAA,EACxC,WAAWA,QAAO,OAAOA,QAAO,OAAOA,QAAO,QAAQ,iCAAiC,CAAC;AAC1F,CAAC;AACD,IAAM,gDAAgDA,QAAO,OAAO;AAAA,EAClE,kBAAkBA,QAAO;AAAA,EACzB,UAAUA,QAAO;AAAA,EACjB,YAAYA,QAAO,OAAOA,QAAO,MAAM;AAAA,EACvC,QAAQA,QAAO,OAAOA,QAAO,QAAQA,QAAO,MAAM;AACpD,CAAC;AACD,IAAM,gDAAgDA,QAAO,OAAO;AAAA,EAClE,UAAUA,QAAO;AAAA,EACjB,YAAYA,QAAO,OAAOA,QAAO,MAAM;AAAA,EACvC,QAAQA,QAAO,OAAOA,QAAO,QAAQA,QAAO,MAAM;AACpD,CAAC;AACD,IAAM,gCAAgCA,QAAO,OAAO;AAAA,EAClD,mBAAmBA,QAAO,OAAO,6CAA6C;AAAA,EAC9E,mBAAmBA,QAAO,OAAO,6CAA6C;AAChF,CAAC;AACD,IAAM,oCAAoCA,QAAO,OAAO;AAAA,EACtD,MAAMA,QAAO;AAAA,EACb,MAAMA,QAAO,SAAS,CAAC,QAAQ,UAAU,UAAU,eAAe,CAAC;AAAA,EACnE,QAAQA,QAAO,OAAOA,QAAO,MAAM;AAAA,EACnC,cAAcA,QAAO,OAAOA,QAAO,MAAM;AAAA,EACzC,IAAIA,QAAO,OAAOA,QAAO,SAAS,CAAC,UAAU,SAAS,QAAQ,CAAC,CAAC;AAAA,EAChE,YAAYA,QAAO,OAAOA,QAAO,MAAM;AAAA,EACvC,aAAaA,QAAO,OAAOA,QAAO,MAAM;AAAA,EACxC,OAAOA,QAAO,OAAO,6BAA6B;AAAA,EAClD,kBAAkBA,QAAO,OAAOA,QAAO,MAAM;AAC/C,CAAC;AACD,IAAM,kCAAkCA,QAAO,OAAO;AAAA,EACpD,OAAOA,QAAO;AAAA,EACd,oBAAoBA,QAAO;AAAA,EAC3B,MAAMA,QAAO,SAAS,CAAC,qBAAqB,mBAAmB,CAAC;AAAA,EAChE,kBAAkBA,QAAO,OAAOA,QAAO,MAAM;AAAA,EAC7C,UAAUA,QAAO;AAAA,EACjB,YAAYA,QAAO,OAAOA,QAAO,MAAM;AAAA,EACvC,QAAQA,QAAO,OAAOA,QAAO,QAAQA,QAAO,MAAM;AAAA,EAClD,gBAAgBA,QAAO,MAAM;AAAA,IAC3BA,QAAO,QAAQ,MAAM;AAAA,IACrBA,QAAO,QAAQ,KAAK;AAAA,IACpBA,QAAO,MAAMA,QAAO,MAAM;AAAA,EAC5B,CAAC;AACH,CAAC;AACD,IAAM,gCAAgCA,QAAO,OAAO;AAAA,EAClD,OAAOA,QAAO,OAAOA,QAAO,MAAM;AAAA,EAClC,SAASA,QAAO,OAAOA,QAAO,MAAM;AAAA,EACpC,SAASA,QAAO,MAAM,yBAAyB;AAAA,EAC/C,gBAAgBA,QAAO;AAAA,EACvB,MAAMA,QAAO,MAAMA,QAAO,MAAM;AAAA,EAChC,iBAAiBA,QAAO,MAAM,iCAAiC;AAAA,EAC/D,gBAAgBA,QAAO,MAAMA,QAAO,OAAO,EAAE,SAASA,QAAO,MAAMA,QAAO,MAAM,EAAE,CAAC,CAAC;AAAA,EACpF,eAAeA,QAAO;AAAA,IACpBA,QAAO,OAAO;AAAA,MACZ,OAAOA,QAAO;AAAA,MACd,SAASA,QAAO,OAAOA,QAAO,QAAQA,QAAO,OAAOA,QAAO,MAAM,CAAC;AAAA,MAClE,eAAeA,QAAO,MAAMA,QAAO,MAAM;AAAA,IAC3C,CAAC;AAAA,EACH;AAAA,EACA,eAAeA,QAAO,MAAM,+BAA+B;AAC7D,CAAC;AAGD,IAAM,yBAAyBA,QAAO,MAAM;AAAA,EAC1CA,QAAO,OAAO,EAAE,MAAMA,QAAO,QAAQ,KAAK,GAAG,KAAKA,QAAO,OAAO,CAAC;AAAA,EACjEA,QAAO,OAAO,EAAE,MAAMA,QAAO,QAAQ,MAAM,GAAG,OAAOA,QAAO,OAAO,CAAC;AAAA,EACpEA,QAAO,OAAO;AAAA,IACZ,MAAMA,QAAO,QAAQ,iBAAiB;AAAA,IACtC,KAAKA,QAAO;AAAA,EACd,CAAC;AAAA,EACDA,QAAO,OAAO;AAAA,IACZ,MAAMA,QAAO,QAAQ,uBAAuB;AAAA,IAC5C,MAAMA,QAAO,MAAMA,QAAO,MAAM;AAAA,EAClC,CAAC;AACH,CAAC;AAED,IAAMG,wBAAuBH,QAAO,MAAM;AAAA,EACxCA,QAAO,OAAO;AAAA,IACZ,MAAMA,QAAO;AAAA,IACb,MAAMA,QAAO,QAAQ,QAAQ;AAAA,IAC7B,kBAAkBA,QAAO;AAAA,IACzB,UAAUA,QAAO;AAAA,IACjB,QAAQA,QAAO,MAAMA,QAAO,MAAM;AAAA,EACpC,CAAC;AAAA;AAAA;AAAA;AAAA,EAID;AACF,CAAC;AAED,IAAM,uBAAuBA,QAAO,OAAO;AAAA,EACzC,MAAM;AAAA,EACN,MAAMA,QAAO;AAAA,EACb,aAAaA,QAAO,SAASA,QAAO,MAAM;AAAA,EAC1C,SAASA,QAAO,SAASA,QAAO,MAAM;AAAA,EACtC,SAASA,QAAO,SAASA,QAAO,OAAOA,QAAO,QAAQA,QAAO,MAAM,CAAC;AAAA,EACpE,aAAaA,QAAO,SAASA,QAAO,OAAOA,QAAO,QAAQA,QAAO,MAAM,CAAC;AAAA,EACxE,wBAAwBA,QAAO,SAASA,QAAO,MAAMG,qBAAoB,CAAC;AAC5E,CAAC;AAED,IAAM,wBAAwBH,QAAO,OAAO;AAAA,EAC1C,MAAMA,QAAO;AAAA,EACb,WAAWA,QAAO;AACpB,CAAC;AAED,IAAM,iCAAiCA,QAAO;AAAA,EAC5CA,QAAO,uBAAuB,sBAAsB;AACtD;AACA,IAAM,kCAAkCA,QAAO;AAAA,EAC7CA,QAAO,uBAAuB,6BAA6B;AAC7D;AACA,IAAM,+BAA+BA,QAAO;AAAA,EAC1CA,QAAO,uBAAuB,oBAAoB;AACpD;AACA,IAAM,gCAAgCA,QAAO;AAAA,EAC3CA,QAAO,uBAAuB,qBAAqB;AACrD;AAEA,IAAM,qBAAqB,CAAC,MAAc,SAAiB,YACzD,WAAW,KAAK;AAAA,EACd;AAAA,EACA;AAAA,EACA,GAAI,YAAY,SAAY,CAAC,IAAI,EAAE,QAAQ;AAC7C,CAAC;AAEH,IAAM,yBAAyB,CAAC,YAW9B,gBAAgB;AAAA;AAAA;AAAA,EAGd,MAAM,QAAQ;AAAA,EACd,SAAS,QAAQ;AAAA,EACjB,QAAQ,EAAE,IAAI,QAAQ,aAAa,OAAO,QAAQ,MAAM;AAAA,EACxD,YAAY;AAAA,IACV,MAAM,QAAQ;AAAA,IACd,GAAI,QAAQ,kBAAkB,EAAE,OAAO,QAAQ,gBAAgB,IAAI,CAAC;AAAA,EACtE;AAAA,EACA,GAAI,QAAQ,WAAW,SAAY,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,EACjE,GAAI,QAAQ,YAAY,SACpB;AAAA,IACE,UAAU;AAAA,MACR,GAAI,QAAQ,WAAW,SAAY,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,MACjE,SAAS,QAAQ;AAAA,IACnB;AAAA,EACF,IACA,CAAC;AACP,CAAC;AAEH,IAAM,sBAAsB,CAAC,aAAmD;AAAA,EAC9E,OAAOC,QAAO,UAAU,QAAQ,KAAK;AAAA,EACrC,SAASA,QAAO,UAAU,QAAQ,OAAO;AAAA,EACzC,SAAS,QAAQ,QAAQ,IAAI,CAAC,YAAY;AAAA,IACxC,KAAK,OAAO;AAAA,IACZ,aAAaA,QAAO,UAAU,OAAO,WAAW;AAAA,IAChD,WAAWA,QAAO,UAAU,OAAO,SAAS,IACxC,OAAO;AAAA,MACL,OAAO,QAAQA,QAAO,UAAU,OAAO,SAAS,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,QAAQ,MAAM;AAAA,QACjF;AAAA,QACA;AAAA,UACE,SAAS,SAAS;AAAA,UAClB,MAAMA,QAAO,UAAU,SAAS,IAAI;AAAA,UACpC,aAAaA,QAAO,UAAU,SAAS,WAAW;AAAA,QACpD;AAAA,MACF,CAAC;AAAA,IACH,IACA;AAAA,EACN,EAAE;AAAA,EACF,gBAAgB,QAAQ;AAAA,EACxB,MAAM,QAAQ;AAAA,EACd,iBAAiB,QAAQ,gBAAgB,IAAI,CAAC,YAAY;AAAA,IACxD,MAAM,OAAO;AAAA,IACb,MAAM,OAAO;AAAA,IACb,QAAQA,QAAO,UAAU,OAAO,MAAM;AAAA,IACtC,cAAcA,QAAO,UAAU,OAAO,YAAY;AAAA,IAClD,IAAIA,QAAO,UAAU,OAAO,EAAE;AAAA,IAC9B,YAAYA,QAAO,UAAU,OAAO,UAAU;AAAA,IAC9C,aAAaA,QAAO,UAAU,OAAO,WAAW;AAAA,IAChD,OAAOA,QAAO,OAAO,OAAO,KAAK,IAC7B;AAAA,MACE,mBAAmBA,QAAO,OAAO,OAAO,MAAM,MAAM,iBAAiB,IACjE;AAAA,QACE,kBAAkB,OAAO,MAAM,MAAM,kBAAkB,MAAM;AAAA,QAC7D,UAAU,OAAO,MAAM,MAAM,kBAAkB,MAAM;AAAA,QACrD,YAAYA,QAAO,UAAU,OAAO,MAAM,MAAM,kBAAkB,MAAM,UAAU;AAAA,QAClF,QAAQ,OAAO,MAAM,MAAM,kBAAkB,MAAM;AAAA,MACrD,IACA;AAAA,MACJ,mBAAmBA,QAAO,OAAO,OAAO,MAAM,MAAM,iBAAiB,IACjE;AAAA,QACE,UAAU,OAAO,MAAM,MAAM,kBAAkB,MAAM;AAAA,QACrD,YAAYA,QAAO,UAAU,OAAO,MAAM,MAAM,kBAAkB,MAAM,UAAU;AAAA,QAClF,QAAQ,OAAO,MAAM,MAAM,kBAAkB,MAAM;AAAA,MACrD,IACA;AAAA,IACN,IACA;AAAA,IACJ,kBAAkBA,QAAO,UAAU,OAAO,gBAAgB;AAAA,EAC5D,EAAE;AAAA,EACF,gBAAgB,QAAQ;AAAA,EACxB,eAAe,QAAQ;AAAA,EACvB,eAAe,QAAQ,cAAc,IAAI,CAAC,YAAY;AAAA,IACpD,OAAO,OAAO;AAAA,IACd,oBAAoB,OAAO;AAAA,IAC3B,MAAM,OAAO;AAAA,IACb,kBAAkBA,QAAO,UAAU,OAAO,gBAAgB;AAAA,IAC1D,UAAU,OAAO;AAAA,IACjB,YAAYA,QAAO,UAAU,OAAO,UAAU;AAAA,IAC9C,QAAQ,OAAO;AAAA,IACf,gBAAgB,OAAO;AAAA,EACzB,EAAE;AACJ;AAOA,IAAM,uBAAuB,CAAC,SAA2B;AACvD,MAAI,QAAQ,QAAQ,OAAO,SAAS,SAAU,QAAO;AACrD,MAAI,MAAM,QAAQ,IAAI,GAAG;AACvB,QAAIG,WAAU;AACd,UAAM,MAAM,KAAK,IAAI,CAAC,SAAS;AAC7B,YAAM,IAAI,qBAAqB,IAAI;AACnC,UAAI,MAAM,KAAM,CAAAA,WAAU;AAC1B,aAAO;AAAA,IACT,CAAC;AACD,WAAOA,WAAU,MAAM;AAAA,EACzB;AAEA,QAAM,MAAM;AAEZ,MAAI,OAAO,IAAI,SAAS,UAAU;AAChC,UAAM,QAAQ,IAAI,KAAK,MAAM,gCAAgC;AAC7D,QAAI,MAAO,QAAO,EAAE,GAAG,KAAK,MAAM,WAAW,MAAM,CAAC,CAAC,GAAG;AACxD,WAAO;AAAA,EACT;AAEA,MAAI,UAAU;AACd,QAAM,SAAkC,CAAC;AACzC,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,GAAG,GAAG;AACxC,UAAM,IAAI,qBAAqB,CAAC;AAChC,QAAI,MAAM,EAAG,WAAU;AACvB,WAAO,CAAC,IAAI;AAAA,EACd;AACA,SAAO,UAAU,SAAS;AAC5B;AAEA,IAAM,YAAY,CAAC,QACjB,iBAAiB,KAAK;AAAA,EACpB,QAAQ,IAAI,UAAU;AAAA,EACtB,SAAS,IAAI,UAAU;AAAA,EACvB,cAAc,IAAI,UAAU;AAAA,EAC5B,YAAY,CAAC,GAAG,IAAI,UAAU,UAAU;AAAA,EACxC,aAAa,IAAI,UAAU;AAC7B,CAAC;AAEH,IAAM,iBAAiB,CAAC,QAAgC;AACtD,QAAM,KAAK,IAAI;AACf,SAAOH,QAAO;AAAA,IAAU,GAAG;AAAA,IAAa,MACtCA,QAAO,UAAU,GAAG,SAAS,MAAM,GAAG,GAAG,OAAO,YAAY,CAAC,IAAI,GAAG,YAAY,EAAE;AAAA,EACpF;AACF;AAEA,IAAM,uBAAuB,CAAC,SAC5B,KAAK,SAAS,SAAS,KAAK,SAAS,oBAAoB,KAAK,MAAM;AAEtE,IAAM,0BAA0B,CAAC,SAC/B,KAAK,SAAS,0BAA0B,KAAK,OAAO;AAU/C,IAAM,6BAA6B,CACxC,WACoC;AACpC,QAAM,SAAS,+BAA+B,OAAO,MAAM;AAC3D,MAAI,CAAC,OAAQ,QAAO,CAAC;AACrB,UAAQ,OAAO,0BAA0B,CAAC,GAAG;AAAA,IAC3C,CAAC,aAAmD;AAClD,UAAI,SAAS,SAAS,UAAU;AAC9B,eAAO;AAAA,UACL,IAAI,OAAO,SAAS,IAAI;AAAA,UACxB,OAAO;AAAA,UACP,MAAM;AAAA,UACN,UAAU,OAAO,SAAS,IAAI;AAAA,UAC9B,OAAO;AAAA,YACL,kBAAkB,SAAS;AAAA,YAC3B,UAAU,SAAS;AAAA,YACnB,QAAQ,SAAS;AAAA,UACnB;AAAA,QACF;AAAA,MACF;AACA,aAAO,yBAAyB,QAAQ;AAAA,IAC1C;AAAA,EACF;AACF;AAEO,IAAM,oCAAoC,CAC/C,WAC8B;AAC9B,QAAM,SAAS,+BAA+B,OAAO,MAAM;AAC3D,SAAO,EAAE,KAAK,QAAQ,WAAW,QAAQ,UAAU;AACrD;AAQA,IAAM,eAAe,CACnB,SACA,WAEA,OAAO,YAAY,OAAO,QAAQ,QAAQ,OAAO,QAAQ,IAAII,QAAO,QAAQ,IAAI;AAYlF,IAAM,cAAc,CAClB,aAEAA,QAAO,IAAI,aAAa;AACtB,QAAM,MAAM,OAAO,MAAM,QAAQ;AACjC,QAAM,SAAS,OAAO,QAAQ,GAAG;AACjC,QAAM,cAAuC,CAAC;AAC9C,MAAI,IAAI,YAAY,SAAS;AAC3B,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,IAAI,WAAW,OAAO,GAAG;AAC3D,kBAAY,CAAC,IAAI,qBAAqB,CAAC;AAAA,IACzC;AAAA,EACF;AACA,SAAO;AAAA,IACL,aAAa,uBAAuB,OAAO,UAAU;AAAA,IACrD;AAAA,IACA,OAAOJ,QAAO,eAAe,OAAO,KAAK;AAAA,EAC3C;AACF,CAAC;AAUH,IAAM,uBAAuB,CAAC,aAC5B,SAAS,YAAY;AAAA,EACnB,CAAC,SAAkB;AAAA,IACjB,MAAM,SAAS,KAAK,IAAI,QAAQ;AAAA,IAChC,aAAa,eAAe,GAAG;AAAA,IAC/B,aAAa,qBAAqBA,QAAO,eAAe,IAAI,UAAU,WAAW,CAAC;AAAA;AAAA;AAAA;AAAA,IAIlF,cAAc,qBAAqBA,QAAO,eAAe,IAAI,UAAU,YAAY,CAAC;AAAA,IACpF,aAAa,wBAAwB,IAAI,UAAU,QAAQ,IAAI,UAAU,YAAY;AAAA,EACvF;AACF;AAEF,IAAM,+BAA+B,CACnC,aACA,aAEA,SAAS,YAAY,IAAI,CAAC,SAAS;AAAA,EACjC;AAAA,EACA,UAAU,IAAI;AAAA,EACd,SAAS,UAAU,GAAG;AACxB,EAAE;AAUJ,IAAM,uCAAuC,CAC3C,MACA,oBAEAI,QAAO;AAAA,EACL;AAAA,EACA,CAAC,QACC,6BAA6B,GAAG,EAAE;AAAA,IAChCA,QAAO,QAAQ,eAAe;AAAA,IAC9BA,QAAO,IAAI,CAAC,kBAAkB,EAAE,cAAc,KAAK,aAAa,EAAE;AAAA,EACpE;AAAA,EACF,EAAE,aAAa,EAAE;AACnB,EAAE,KAAKA,QAAO,QAAQ,CAAC,cAAc,sCAAsC,EAAE,UAAU,CAAC,CAAC,CAAC;AAErF,IAAM,gBAAgB,aAAa,CAAC,YAAmC;AAC5E,QAAM,sBAAsB,CAC1B,MACA,oBAaAA,QAAO,IAAI,aAAa;AACtB,QAAI,KAAK,SAAS,mBAAmB;AACnC,YAAM,aAAa,OAAO,6BAA6B,KAAK,GAAG,EAAE;AAAA,QAC/DA,QAAO,QAAQ,eAAe;AAAA,QAC9BA,QAAO;AAAA,UAAQ,CAAC,iBACd,gCAAgC;AAAA,YAC9B,cAAc,KAAK;AAAA,YACnB;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AACA,aAAO;AAAA,QACL,UAAU,WAAW;AAAA,QACrB,SAAS,WAAW;AAAA,QACpB,GAAI,WAAW,yBACX,EAAE,wBAAwB,WAAW,uBAAuB,IAC5D,CAAC;AAAA,MACP;AAAA,IACF;AACA,QAAI,KAAK,SAAS,yBAAyB;AACzC,YAAM,aAAa,OAAO,qCAAqC,KAAK,MAAM,eAAe;AACzF,aAAO;AAAA,QACL,UAAU,WAAW;AAAA,QACrB,SAAS,WAAW;AAAA,QACpB,GAAI,WAAW,yBACX,EAAE,wBAAwB,WAAW,uBAAuB,IAC5D,CAAC;AAAA,MACP;AAAA,IACF;AACA,QAAI,KAAK,SAAS,OAAO;AACvB,YAAM,WAAW,OAAO,gBAAgB,KAAK,GAAG,EAAE,KAAKA,QAAO,QAAQ,eAAe,CAAC;AACtF,aAAO,EAAE,SAAS;AAAA,IACpB;AACA,WAAO,EAAE,UAAU,KAAK,MAAM;AAAA,EAChC,CAAC;AAEH,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,aAAa;AAAA,IACb,oBAAoB,eAAe,IAAI,CAAC,YAAY;AAAA,MAClD,IAAI,OAAO;AAAA,MACX,MAAM,OAAO;AAAA,MACb,SAAS,OAAO;AAAA,MAChB,GAAI,OAAO,MAAM,EAAE,KAAK,OAAO,IAAI,IAAI,CAAC;AAAA,MACxC,GAAI,OAAO,OAAO,EAAE,MAAM,OAAO,KAAK,IAAI,CAAC;AAAA,MAC3C,GAAI,OAAO,WAAW,EAAE,UAAU,OAAO,SAAS,IAAI,CAAC;AAAA,IACzD,EAAE;AAAA,IACF,SAAS,CAAC,SAAuB,wBAAwB,IAAI;AAAA,IAE7D,WAAW,CAAC,QAAiC;AAC3C,YAAM,kBAAkB,SAAS,mBAAmB,IAAI;AAExD,YAAM,UAAU,CAAC,WACfA,QAAO,IAAI,aAAa;AAGtB,cAAM,WAAW,OAAO,oBAAoB,OAAO,MAAM,eAAe;AACxE,cAAM,WAAW,OAAO,YAAY,SAAS,QAAQ;AAcrD,cAAM,kBAAkB,OAAO,WAAW,SAAS;AACnD,cAAM,sBAAsB,mBAAmB;AAC/C,cAAM,mBACJ,OAAO,0BAA0B,QAAQ,SAAS,0BAA0B;AAC9E,cAAM,UACJ,uBAAuB,mBACnB,OAAO,gBAAgB,SAAS,QAAQ,IACxC;AACN,cAAM,iBACJ,uBAAuB,UAAU,uBAAuB,OAAO,IAAI;AACrE,cAAM,mBAAmB,oBAAoB,kBAAkB;AAC/D,cAAM,gCACJ,oBAAoB,UAChB,wCAAwC,SAAS,gBAAgB,IACjE;AAEN,cAAM,OAAO,gBAAgB,KAAK,OAAO,IAAI;AAO7C,cAAM,WAAW,OAAO,IAAI,KAAK,aAAa,IAAI,IAAI;AACtD,YAAI,UAAU;AACZ,iBAAO,OAAO,IAAI,8BAA8B,EAAE,KAAK,CAAC;AAAA,QAC1D;AAEA,cAAM,WAAW,OAAO,UAAU,SAAS,QAAQ;AAEnD,cAAM,oBAA8C;AAAA,UAClD;AAAA,UACA,GAAI,qBAAqB,OAAO,IAAI,MAAM,SACtC,EAAE,WAAW,qBAAqB,OAAO,IAAI,EAAE,IAC/C,CAAC;AAAA,UACL,GAAI,wBAAwB,OAAO,IAAI,MAAM,SACzC,EAAE,qBAAqB,wBAAwB,OAAO,IAAI,EAAE,IAC5D,CAAC;AAAA;AAAA;AAAA;AAAA,UAIL,GAAI,OAAO,UAAU,EAAE,SAAS,OAAO,QAAQ,IAAI,CAAC;AAAA,UACpD,GAAI,OAAO,UAAU,EAAE,SAAS,OAAO,QAAQ,IAAI,CAAC;AAAA,UACpD,GAAI,OAAO,cAAc,EAAE,aAAa,OAAO,YAAY,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,UAKhE,GAAI,OAAO,yBACP;AAAA,YACE,wBAAwB,2BAA2B,OAAO,sBAAsB;AAAA,UAClF,IACA,SAAS,yBACP,EAAE,wBAAwB,SAAS,uBAAuB,IAC1D,iCAAiC,8BAA8B,SAAS,IACtE,EAAE,wBAAwB,8BAA8B,IACxD,CAAC;AAAA,QACX;AAMA,eAAO,IAAI,QAAQ,QAAQ,UAAU,SAAS,QAAQ;AAEtD,eAAO,IAAI;AAAA,UACTA,QAAO,IAAI,aAAa;AACtB,mBAAO,IAAI,KAAK,aAAa,SAAS;AAAA,cACpC;AAAA,cACA,aAAa,OAAO,eAAe,SAAS,SAAS,OAAO;AAAA,cAC5D,QAAQ;AAAA,cACR,WAAW;AAAA,cACX,YACE,qBAAqB,OAAO,IAAI,KAAK,QACrC,wBAAwB,OAAO,IAAI,KAAK;AAAA,YAC5C,CAAC;AACD,mBAAO,IAAI,QAAQ;AAAA,cACjB,OAAO;AAAA,cACP,6BAA6B,OAAO,MAAM,QAAQ;AAAA,YACpD;AAAA,UACF,CAAC;AAAA,QACH;AAEA,eAAO,EAAE,MAAM,WAAW,SAAS,YAAY,OAAO;AAAA,MACxD,CAAC;AAEH,aAAO;AAAA,QACL,aAAa,CAAC,UACZA,QAAO,IAAI,aAAa;AACtB,gBAAM,eAAe,OAAO,UAAU,WAAW,EAAE,MAAM,MAAM,IAAI;AACnE,gBAAM,WAAW,qBAAqB,aAAa,IAAI,IACnD,OAAO,6BAA6B,aAAa,IAAI,EAAE;AAAA,YACrDA,QAAO,QAAQ,eAAe;AAAA,YAC9BA,QAAO;AAAA,cAAQ,CAAC,iBACd,gCAAgC;AAAA,gBAC9B,cAAc,aAAa;AAAA,gBAC3B;AAAA,cACF,CAAC;AAAA,YACH;AAAA,YACAA,QAAO,IAAI,CAAC,eAAe,WAAW,QAAQ;AAAA,UAChD,IACA,OAAO,gBAAgB,aAAa,IAAI,EAAE,KAAKA,QAAO,QAAQ,eAAe,CAAC;AAClF,iBAAO,OAAO,YAAY,QAAQ,EAAE,KAAKA,QAAO,QAAQ,eAAe,CAAC;AAAA,QAC1E,CAAC;AAAA,QAEH;AAAA,QAEA,YAAY,CAAC,SACX,IAAI;AAAA,UACFA,QAAO,IAAI,aAAa;AACtB,mBAAO,IAAI,QAAQ,iBAAiB,IAAI;AACxC,mBAAO,IAAI,KAAK,aACb,OAAO,gBAAgB,KAAK,IAAI,CAAC,EACjC,KAAKA,QAAO,SAAS,qCAAqC,MAAMA,QAAO,IAAI,CAAC;AAAA,UACjF,CAAC;AAAA,QACH;AAAA,QAEF,gBAAgB,CAAC,SACf,IAAI,KAAK,aAAa,IAAI,gBAAgB,KAAK,IAAI,CAAC,EAAE;AAAA,UACpDA,QAAO;AAAA,YAAI,CAAC,WACV,SACK;AAAA,cACC,MAAM,OAAO;AAAA,cACb,aAAa,OAAO;AAAA,cACpB,MAAM,OAAO;AAAA,cACb,WAAW,OAAO;AAAA,cAClB,YAAY,OAAO;AAAA,YACrB,IACA;AAAA,UACN;AAAA,QACF;AAAA,QAEF,WAAW,CAAC,SACV,IAAI,KAAK,aACN,IAAI,gBAAgB,KAAK,IAAI,CAAC,EAC9B;AAAA,UACCA,QAAO;AAAA,YAAI,CAAC,WACV,SAAS,+BAA+B,OAAO,MAAM,IAAI;AAAA,UAC3D;AAAA,QACF;AAAA,QAEJ,WAAW,CACT,MACA,UAEA,IAAI;AAAA,UACFA,QAAO,IAAI,aAAa;AACtB,kBAAM,SAAS,OAAO,IAAI,KAAK,aAAa,IAAI,gBAAgB,KAAK,IAAI,CAAC;AAC1E,gBAAI,CAAC,OAAQ,QAAO,CAAC;AACrB,kBAAM,UAAU,+BAA+B,OAAO,MAAM;AAC5D,gBAAI,CAAC,QAAS,QAAO,CAAC;AAEtB,kBAAM,WAAW,2BAA2B,MAAM,sBAAsB;AACxE,kBAAM,SACJ,MAAM,SAAS,YACX,WACA,mBAAmB,QAAQ,0BAA0B,CAAC,GAAG,QAAQ;AAEvE,kBAAM,OAAiC;AAAA,cACrC,GAAG;AAAA,cACH,wBAAwB;AAAA,YAC1B;AAEA,mBAAO,IAAI,KAAK,aAAa,OAAO,gBAAgB,KAAK,IAAI,GAAG;AAAA,cAC9D,QAAQ;AAAA,YACV,CAAC;AAED,mBAAO;AAAA,UACT,CAAC;AAAA,QACH;AAAA,MACJ;AAAA,IACF;AAAA,IAEA,eAAe,CAAC,SAAiC;AAAA,MAC/C;AAAA,QACE,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,MAAM;AAAA,QACN,OAAO;AAAA,UACL,KAAK;AAAA,YACH,MAAM;AAAA,YACN,aACE;AAAA,YACF,aAAa;AAAA,YACb,cAAc;AAAA,YACd,SAAS,CAAC,UACR,KAAK,YAAY,KAAK,EAAE;AAAA,cACtBA,QAAO,IAAI,CAAC,YAAY,WAAW,GAAG,oBAAoB,OAAO,CAAC,CAAC;AAAA,cACnEA,QAAO,UAAU;AAAA,gBACf,mBAAmB,CAAC,EAAE,QAAQ,MAC5BA,QAAO,QAAQ,mBAAmB,wBAAwB,OAAO,CAAC;AAAA,gBACpE,wBAAwB,CAAC,EAAE,QAAQ,MACjCA,QAAO,QAAQ,mBAAmB,6BAA6B,OAAO,CAAC;AAAA,gBACzE,mBAAmB,CAAC,EAAE,QAAQ,MAC5BA,QAAO,QAAQ,mBAAmB,wBAAwB,OAAO,CAAC;AAAA,cACtE,CAAC;AAAA,YACH;AAAA,UACJ,CAAC;AAAA,UACD,KAAK;AAAA,YACH,MAAM;AAAA,YACN,aACE;AAAA,YACF,aAAa;AAAA,cACX,kBAAkB;AAAA,cAClB,qBAAqB;AAAA,YACvB;AAAA,YACA,aAAa;AAAA,YACb,cAAc;AAAA,YACd,SAAS,CAAC,UACR,KACG,QAAQ;AAAA,cACP,MAAM,MAAM;AAAA,cACZ,MAAM,MAAM;AAAA,cACZ,aAAa,MAAM;AAAA,cACnB,SAAS,MAAM;AAAA,cACf,SAAS,MAAM;AAAA,cACf,aAAa,MAAM;AAAA,cACnB,wBAAwB,MAAM;AAAA,YAGhC,CAAC,EACA;AAAA,cACCA,QAAO;AAAA,gBAAI,CAAC,WACV,WAAW,GAAG;AAAA,kBACZ,MAAM,OAAO,OAAO,IAAI;AAAA,kBACxB,WAAW,OAAO;AAAA,gBACpB,CAAC;AAAA,cACH;AAAA,cACAA,QAAO,UAAU;AAAA,gBACf,mBAAmB,CAAC,EAAE,QAAQ,MAC5BA,QAAO,QAAQ,mBAAmB,wBAAwB,OAAO,CAAC;AAAA,gBACpE,wBAAwB,CAAC,EAAE,QAAQ,MACjCA,QAAO,QAAQ,mBAAmB,6BAA6B,OAAO,CAAC;AAAA,gBACzE,mBAAmB,CAAC,EAAE,QAAQ,MAC5BA,QAAO,QAAQ,mBAAmB,wBAAwB,OAAO,CAAC;AAAA,gBACpE,+BAA+B,CAAC,EAAE,KAAK,MACrCA,QAAO;AAAA,kBACL;AAAA,oBACE;AAAA,oBACA,eAAe,IAAI;AAAA,kBACrB;AAAA,gBACF;AAAA,cACJ,CAAC;AAAA,YACH;AAAA,UACN,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,IAEA,qBAAqB;AAAA,IACrB,4BAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAO5B,cAAc,CAAC;AAAA,MACb;AAAA,MACA;AAAA,IACF,MAKEA,QAAO,IAAI,aAAa;AACtB,YAAM,gBAAgB,+BAA+B,MAAM;AAC3D,UAAI,CAAC,cAAe,QAAO,EAAE,OAAO,CAAC,GAAG,aAAa,CAAC,EAAE;AACxD,YAAM,WAAW,OAAO,aAAa,SAAS,aAAa;AAC3D,UAAI,YAAY,KAAM,QAAO,EAAE,OAAO,CAAC,GAAG,aAAa,CAAC,EAAE;AAC1D,YAAM,WAAW,OAAO,YAAY,QAAQ,EAAE;AAAA,QAC5CA,QAAO,MAAM,MAAMA,QAAO,QAAQ,IAAI,CAAC;AAAA,MACzC;AACA,UAAI,CAAC,SAAU,QAAO,EAAE,OAAO,CAAC,GAAG,aAAa,CAAC,EAAE;AACnD,aAAO;AAAA,QACL,OAAO,qBAAqB,QAAQ;AAAA,QACpC,aAAa,SAAS;AAAA,MACxB;AAAA,IACF,CAAC;AAAA,IAEH,YAAY,CAAC;AAAA,MACX,KAAK;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,IACF,MAMEA,QAAO,IAAI,aAAa;AACtB,YAAM,kBAAkB,SAAS,mBAAmB,UAAU;AAC9D,YAAM,cAAc,QAAQ;AAC5B,YAAM,SAAS,+BAA+B,WAAW,MAAM;AAM/D,UAAI,WAAW,OAAO,UAAU,QAAQ,aAAa,aAAa,QAAQ,IAAI,IAAI;AAClF,UAAI,CAAC,WAAW,QAAQ;AACtB,cAAM,WAAW,OAAO,aAAa,UAAU,SAAS,MAAM,EAAE;AAAA,UAC9DA,QAAO,MAAM,MAAMA,QAAO,QAAQ,IAAI,CAAC;AAAA,QACzC;AACA,cAAM,WACJ,YAAY,OACR,OACA,OAAO,YAAY,QAAQ,EAAE,KAAKA,QAAO,MAAM,MAAMA,QAAO,QAAQ,IAAI,CAAC,CAAC;AAChF,kBAAU,WACN,6BAA6B,aAAa,QAAQ,EAAE;AAAA,UAClD,CAAC,OAAO,GAAG,aAAa,QAAQ;AAAA,QAClC,GAAG,UACH;AAAA,MACN;AACA,UAAI,CAAC,SAAS;AACZ,eAAO,OAAO,IAAI,uBAAuB;AAAA,UACvC,SAAS,wCAAwC,QAAQ,IAAI,SAAS,WAAW;AAAA,QACnF,CAAC;AAAA,MACH;AAEA,YAAM,UAAkC,EAAE,GAAI,QAAQ,WAAW,CAAC,EAAG;AACrE,YAAM,cAAsC;AAAA,QAC1C,GAAI,QAAQ,eAAe,CAAC;AAAA,MAC9B;AAMA,YAAM,YAAY,QAAQ,0BAA0B,CAAC,GAAG;AAAA,QACtD,CAAC,UAAU,OAAO,MAAM,IAAI,MAAM,OAAO,WAAW,QAAQ;AAAA,MAC9D;AACA,UAAI,UAAU;AAGZ,cAAM,UAAU,0BAA0B,QAAQ,EAAE,OAAO,CAAC,SAAS;AACnE,gBAAM,QAAQ,WAAW,OAAO,IAAI;AACpC,iBAAO,SAAS,QAAQ,UAAU;AAAA,QACpC,CAAC;AACD,YAAI,QAAQ,SAAS,GAAG;AACtB,iBAAO,uBAAuB;AAAA,YAC5B,MACE,SAAS,SAAS,WACd,6BACA;AAAA,YACN,SAAS,eAAe,WAAW,UAAU,UAAU,WAAW;AAAA,YAClE,OAAO,WAAW;AAAA,YAClB;AAAA,YACA,YAAY,OAAO,WAAW,UAAU;AAAA,YACxC,gBAAgB,SAAS,SAAS,WAAW,UAAU;AAAA,UACzD,CAAC;AAAA,QACH;AACA,cAAM,WAAW,mBAAmB,UAAU,WAAW,MAAM;AAC/D,eAAO,OAAO,SAAS,SAAS,OAAO;AACvC,eAAO,OAAO,aAAa,SAAS,WAAW;AAAA,MACjD;AAEA,YAAM,SAAS,OAAO;AAAA,QACpB;AAAA,QACC,QAAQ,CAAC;AAAA,QACV,QAAQ,WAAW;AAAA,QACnB;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAEA,YAAM,KAAK,OAAO,UAAU,OAAO,OAAO,SAAS;AACnD,UAAI,CAAC,IAAI;AACP,YAAI,OAAO,WAAW,OAAO,OAAO,WAAW,KAAK;AAClD,iBAAO,uBAAuB;AAAA,YAC5B,MAAM;AAAA,YACN,QAAQ,OAAO;AAAA,YACf,SAAS,sCAAsC,WAAW,eAAe,OAAO,MAAM,+CAA+C,WAAW,UAAU;AAAA,YAC1J,OAAO,WAAW;AAAA,YAClB;AAAA,YACA,YAAY,OAAO,WAAW,UAAU;AAAA,YACxC,gBAAgB;AAAA,YAChB,iBAAiB;AAAA,YACjB,SAAS,OAAO;AAAA,UAClB,CAAC;AAAA,QACH;AACA,eAAO,WAAW,KAAK;AAAA,UACrB,MAAM;AAAA,UACN,QAAQ,OAAO;AAAA,UACf,SAAS,uBAAuB,OAAO,OAAO,OAAO,MAAM;AAAA,UAC3D,SAAS,OAAO;AAAA,QAClB,CAAC;AAAA,MACH;AAIA,aAAO,WAAW,GAAG,OAAO,MAAM;AAAA,QAChC,MAAM,EAAE,QAAQ,OAAO,QAAQ,SAAS,OAAO,QAAQ;AAAA,MACzD,CAAC;AAAA,IACH,CAAC;AAAA,IAEH,oBAAoB,CAAC;AAAA,MACnB,KAAK;AAAA,MACL;AAAA,MACA;AAAA,IACF,MAKEA,QAAO,IAAI,aAAa;AACtB,YAAM,MAAM,OAAO,eAAe,QAAQ,eAAe,OAAO,WAAW,CAAC;AAC5E,YAAM,SAAS,oBAAI,IAA8B;AACjD,iBAAW,MAAM,IAAK,QAAO,IAAI,GAAG,UAAU,GAAG,OAAO;AACxD,YAAM,MAAkE,CAAC;AACzE,iBAAW,OAAO,UAAU;AAC1B,cAAM,UAAU,OAAO,IAAI,IAAI,IAAI;AACnC,YAAI,SAAS;AACX,cAAI,IAAI,IAAI,IAAI,wBAAwB,QAAQ,QAAQ,QAAQ,YAAY;AAAA,QAC9E;AAAA,MACF;AACA,aAAO;AAAA,IACT,CAAC;AAAA,IAEH,kBAAkB,MAAMA,QAAO;AAAA,IAE/B,QAAQ,CAAC;AAAA,MACP,KAAK;AAAA,MACL;AAAA,IACF,MAIEA,QAAO,IAAI,aAAa;AACtB,YAAM,kBAAkB,SAAS,mBAAmB,UAAU;AAC9D,YAAM,UAAU,IAAI,KAAK;AACzB,UAAI,CAAC,QAAS,QAAO;AACrB,YAAM,SAAS,OAAOA,QAAO,IAAI;AAAA,QAC/B,KAAK,MAAM,IAAI,IAAI,OAAO;AAAA,QAC1B,OAAO,CAAC,UAAU;AAAA,MACpB,CAAC,EAAE,KAAKA,QAAO,MAAM;AACrB,UAAIJ,QAAO,OAAO,MAAM,EAAG,QAAO;AAClC,UAAI,qBAAqB,OAAO,GAAG;AACjC,cAAM,aAAa,OAAO,6BAA6B,OAAO,EAAE;AAAA,UAC9DI,QAAO,QAAQ,eAAe;AAAA,UAC9BA,QAAO;AAAA,YAAQ,CAAC,iBACd,gCAAgC;AAAA,cAC9B,cAAc;AAAA,cACd;AAAA,YACF,CAAC;AAAA,UACH;AAAA,UACAA,QAAO,MAAM,MAAMA,QAAO,QAAQ,IAAI,CAAC;AAAA,QACzC;AACA,YAAI,YAAY;AACd,iBAAO,2BAA2B,KAAK;AAAA,YACrC,MAAM;AAAA,YACN,YAAY;AAAA,YACZ,UAAU;AAAA,YACV,MAAM,WAAW;AAAA,YACjB,MACE,WAAW,MACR,YAAY,EACZ,QAAQ,eAAe,GAAG,EAC1B,QAAQ,YAAY,EAAE,KAAK,UAAU,WAAW,OAAO;AAAA,UAC9D,CAAC;AAAA,QACH;AAAA,MACF;AACA,YAAM,WAAW,OAAO,gBAAgB,OAAO,EAAE;AAAA,QAC/CA,QAAO,QAAQ,eAAe;AAAA,QAC9BA,QAAO,MAAM,MAAMA,QAAO,QAAQ,IAAI,CAAC;AAAA,MACzC;AACA,UAAI,aAAa,KAAM,QAAO;AAC9B,YAAM,MAAM,OAAO,MAAM,QAAQ,EAAE,KAAKA,QAAO,MAAM,MAAMA,QAAO,QAAQ,IAAI,CAAC,CAAC;AAChF,UAAI,CAAC,IAAK,QAAO;AACjB,YAAM,SAAS,OAAO,QAAQ,GAAG,EAAE,KAAKA,QAAO,MAAM,MAAMA,QAAO,QAAQ,IAAI,CAAC,CAAC;AAChF,UAAI,CAAC,OAAQ,QAAO;AACpB,YAAM,OAAOJ,QAAO,UAAU,OAAO,OAAO,MAAM,KAAK,EACpD,YAAY,EACZ,QAAQ,eAAe,GAAG;AAC7B,YAAM,OAAOA,QAAO,UAAU,OAAO,OAAO,MAAM,IAAI;AACtD,aAAO,2BAA2B,KAAK;AAAA,QACrC,MAAM;AAAA,QACN,YAAY;AAAA,QACZ,UAAU;AAAA,QACV;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACL;AAKF,CAAC;","names":["Option","Option","bytes","Effect","Option","Schema","Schema","Option","Effect","Effect","Option","Schema","Option","group","leaf","versionSegment","operationHash","Schema","Option","message","AuthenticationSchema","changed","Effect"]}

package/dist/client.js

@@ -8,9 +8,9 @@ import { defineClientPlugin } from "@executor-js/sdk/client";
 
 // src/react/source-plugin.ts
 import { lazy } from "react";
-var importAdd = () => import("./AddOpenApiSource-7M52SRUX.js");
-var importEdit = () => import("./EditOpenApiSource-WTAMRJUK.js");
-var importAccounts = () => import("./OpenApiAccountsPanel-3VJJXNQF.js");
+var importAdd = () => import("./AddOpenApiSource-7O4LSD7C.js");
+var importEdit = () => import("./EditOpenApiSource-GIN5RQPL.js");
+var importAccounts = () => import("./OpenApiAccountsPanel-7XT6ZMD5.js");
 var openApiIntegrationPlugin = {
   key: "openapi",
   label: "OpenAPI",

package/dist/core.js

@@ -8,13 +8,13 @@ import {
   makeDefaultOpenapiStore,
   openApiPlugin,
   renderAuthTemplate
-} from "./chunk-V7VCHYOY.js";
+} from "./chunk-WJQIWTZF.js";
 import {
   convertGoogleDiscoveryBundleToOpenApi,
   convertGoogleDiscoveryToOpenApi,
   fetchGoogleDiscoveryDocument,
   isGoogleDiscoveryUrl
-} from "./chunk-OSIFYIQP.js";
+} from "./chunk-C6PH4R7Q.js";
 import "./chunk-AQ7JDDRM.js";
 import "./chunk-MZWZQ24W.js";
 import {
@@ -46,16 +46,135 @@ import {
   ServerInfo,
   ServerVariable,
   SpecPreview,
+  TOKEN_VARIABLE,
   extract,
   fetchSpecText,
+  normalizeOpenApiAuthInputs,
   parse,
   preferredContent,
   previewSpec,
-  resolveBaseUrl,
+  resolveServerUrl,
   resolveSpecText,
-  substituteUrlVariables,
-  variable
-} from "./chunk-YVRI7KRC.js";
+  substituteUrlVariables
+} from "./chunk-C3IJX4AN.js";
+
+// src/sdk/index.ts
+import { variable } from "@executor-js/sdk/http-auth";
+
+// src/sdk/migrate-config.ts
+import { Option } from "effect";
+import {
+  apiKeyMethodFromLegacyTemplate,
+  decodeLegacyApiKeyTemplate
+} from "@executor-js/sdk/http-auth";
+var isCanonicalEntry = (entry) => typeof entry === "object" && entry !== null && "kind" in entry && (entry.kind === "apikey" || entry.kind === "oauth2");
+var isLegacyOAuthEntry = (entry) => typeof entry === "object" && entry !== null && "type" in entry && entry.type === "oauth";
+var migrateEntry = (entry) => {
+  if (isCanonicalEntry(entry)) return entry;
+  if (isLegacyOAuthEntry(entry)) {
+    const { type: _type, ...rest } = entry;
+    return { ...rest, kind: "oauth2" };
+  }
+  const legacy = Option.getOrNull(decodeLegacyApiKeyTemplate(entry));
+  if (legacy !== null) return apiKeyMethodFromLegacyTemplate(legacy);
+  return null;
+};
+var migrateOpenApiAuthConfig = (config) => {
+  if (typeof config !== "object" || config === null) return null;
+  if (!("spec" in config) && !("specHash" in config)) return null;
+  if (!("authenticationTemplate" in config)) return null;
+  const entries = config.authenticationTemplate;
+  if (!Array.isArray(entries)) return null;
+  const migrated = entries.map(migrateEntry);
+  if (migrated.some((entry) => entry === null)) return null;
+  const changed = migrated.some((entry, index) => entry !== entries[index]);
+  if (!changed) return null;
+  const next = { ...config, authenticationTemplate: migrated };
+  return decodeOpenApiIntegrationConfig(next) !== null ? next : null;
+};
+
+// src/sdk/output-schema-migration.ts
+import { Effect, Option as Option2, Schema } from "effect";
+import { DataMigrationError } from "@executor-js/sdk/core";
+var MIGRATION_NAME = "2026-06-11-openapi-output-envelope-unwrap";
+var isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var isEnvelopeStatusSchema = (value) => isRecord(value) && Object.keys(value).length === 1 && value.type === "integer";
+var isEnvelopeHeadersSchema = (value) => isRecord(value) && Object.keys(value).length === 2 && value.type === "object" && isRecord(value.additionalProperties) && Object.keys(value.additionalProperties).length === 1 && value.additionalProperties.type === "string";
+var unwrapOpenApiTransportEnvelope = (schema) => {
+  if (!isRecord(schema)) return void 0;
+  if (schema.type !== "object" || schema.additionalProperties !== false) return void 0;
+  const required = schema.required;
+  if (!Array.isArray(required) || required.length !== 3) return void 0;
+  if (!["status", "headers", "data"].every((key) => required.includes(key))) return void 0;
+  const properties = schema.properties;
+  if (!isRecord(properties) || !("data" in properties)) return void 0;
+  if (!isEnvelopeStatusSchema(properties.status)) return void 0;
+  if (!isEnvelopeHeadersSchema(properties.headers)) return void 0;
+  const data = properties.data;
+  const outputSchema = isRecord(data) && Object.keys(data).length === 0 ? null : data;
+  return { outputSchema };
+};
+var decodeJsonOption = Schema.decodeUnknownOption(Schema.UnknownFromJsonString);
+var execute = (client, stmt) => Effect.tryPromise({
+  try: () => client.execute(stmt),
+  catch: (cause) => new DataMigrationError({ migration: MIGRATION_NAME, cause })
+});
+var runSqliteOpenApiOutputSchemaMigration = (client) => Effect.gen(function* () {
+  const exists = yield* execute(
+    client,
+    "SELECT name FROM sqlite_master WHERE type = 'table' AND name = 'tool'"
+  );
+  if (exists.rows.length === 0) return 0;
+  const result = yield* execute(
+    client,
+    "SELECT row_id, output_schema FROM tool WHERE plugin_id = 'openapi' AND output_schema IS NOT NULL"
+  );
+  const updates = [];
+  for (const row of result.rows) {
+    if (typeof row.row_id !== "string" || typeof row.output_schema !== "string") continue;
+    const schema = decodeJsonOption(row.output_schema);
+    if (Option2.isNone(schema)) continue;
+    const unwrapped = unwrapOpenApiTransportEnvelope(schema.value);
+    if (unwrapped !== void 0) updates.push({ rowId: row.row_id, ...unwrapped });
+  }
+  if (updates.length === 0) return 0;
+  const applyAll = Effect.gen(function* () {
+    for (const update of updates) {
+      yield* execute(client, {
+        sql: "UPDATE tool SET output_schema = ? WHERE row_id = ?",
+        args: [
+          update.outputSchema === null ? null : JSON.stringify(update.outputSchema),
+          update.rowId
+        ]
+      });
+    }
+    yield* execute(client, "COMMIT");
+  });
+  yield* execute(client, "BEGIN");
+  yield* applyAll.pipe(Effect.tapError(() => execute(client, "ROLLBACK").pipe(Effect.ignore)));
+  return updates.length;
+});
+var openApiOutputSchemaDataMigration = {
+  name: MIGRATION_NAME,
+  run: (client) => runSqliteOpenApiOutputSchemaMigration(client).pipe(Effect.asVoid)
+};
+
+// src/sdk/spec-blob-migration.ts
+import { Effect as Effect2 } from "effect";
+import {
+  runSqliteConfigBlobMigration
+} from "@executor-js/sdk/core";
+var MIGRATION_NAME2 = "2026-06-12-openapi-spec-to-blob";
+var openApiSpecBlobDataMigration = {
+  name: MIGRATION_NAME2,
+  run: (client) => runSqliteConfigBlobMigration(client, {
+    migrationName: MIGRATION_NAME2,
+    pluginId: "openapi",
+    inlineField: "spec",
+    hashField: "specHash",
+    blobKeyPrefix: "spec"
+  }).pipe(Effect2.asVoid)
+};
 export {
   AuthStrategy,
   AuthenticationSchema,
@@ -87,6 +206,7 @@ export {
   ServerInfo,
   ServerVariable,
   SpecPreview,
+  TOKEN_VARIABLE,
   annotationsForOperation,
   convertGoogleDiscoveryBundleToOpenApi,
   convertGoogleDiscoveryToOpenApi,
@@ -98,14 +218,20 @@ export {
   invokeWithLayer,
   isGoogleDiscoveryUrl,
   makeDefaultOpenapiStore,
+  migrateOpenApiAuthConfig,
+  normalizeOpenApiAuthInputs,
+  openApiOutputSchemaDataMigration,
   openApiPlugin,
+  openApiSpecBlobDataMigration,
   parse,
   preferredContent,
   previewSpec,
   renderAuthTemplate,
-  resolveBaseUrl,
+  resolveServerUrl,
   resolveSpecText,
+  runSqliteOpenApiOutputSchemaMigration,
   substituteUrlVariables,
+  unwrapOpenApiTransportEnvelope,
   variable
 };
 //# sourceMappingURL=core.js.map

package/dist/core.js.map

@@ -1 +1 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}
+{"version":3,"sources":["../src/sdk/index.ts","../src/sdk/migrate-config.ts","../src/sdk/output-schema-migration.ts","../src/sdk/spec-blob-migration.ts"],"sourcesContent":["export { parse, resolveSpecText, fetchSpecText } from \"./parse\";\nexport {\n  convertGoogleDiscoveryBundleToOpenApi,\n  convertGoogleDiscoveryToOpenApi,\n  fetchGoogleDiscoveryDocument,\n  isGoogleDiscoveryUrl,\n  type GoogleDiscoveryOpenApiConversion,\n} from \"./google-discovery\";\nexport { extract } from \"./extract\";\nexport { invoke, invokeWithLayer, annotationsForOperation } from \"./invoke\";\nexport {\n  openApiPlugin,\n  type OpenApiSpecConfig,\n  type OpenApiConfigureInput,\n  type OpenApiSpecInput,\n  type OpenApiPreviewInput,\n  type OpenApiPluginExtension,\n  type OpenApiPluginOptions,\n} from \"./plugin\";\nexport { type OpenapiStore, type StoredOperation, makeDefaultOpenapiStore } from \"./store\";\nexport {\n  decodeOpenApiIntegrationConfig,\n  renderAuthTemplate,\n  AuthenticationSchema,\n  OpenApiIntegrationConfigSchema,\n  type OpenApiIntegrationConfig,\n  type RenderedAuth,\n} from \"./config\";\nexport {\n  previewSpec,\n  SecurityScheme,\n  AuthStrategy,\n  HeaderPreset,\n  OAuth2Preset,\n  OAuth2Flows,\n  OAuth2AuthorizationCodeFlow,\n  OAuth2ClientCredentialsFlow,\n  PreviewOperation,\n  SpecPreview,\n} from \"./preview\";\nexport {\n  DocResolver,\n  resolveServerUrl,\n  substituteUrlVariables,\n  preferredContent,\n} from \"./openapi-utils\";\n\nexport {\n  OpenApiParseError,\n  OpenApiExtractionError,\n  OpenApiInvocationError,\n  OpenApiOAuthError,\n  OpenApiAuthRequiredError,\n} from \"./errors\";\n\nexport {\n  EncodingObject,\n  ExtractedOperation,\n  ExtractionResult,\n  InvocationResult,\n  MediaBinding,\n  OperationBinding,\n  OperationParameter,\n  OperationRequestBody,\n  ServerInfo,\n  ServerVariable,\n  OperationId,\n  HttpMethod,\n  ParameterLocation,\n  TOKEN_VARIABLE,\n  normalizeOpenApiAuthInputs,\n  type Authentication,\n  type AuthenticationInput,\n  type APIKeyAuthentication,\n} from \"./types\";\n// Request-shaped authoring: `headers: { Authorization: [\"Bearer \", variable(\"token\")] }`.\nexport { variable, type ApiKeyAuthTemplate } from \"@executor-js/sdk/http-auth\";\n\nexport { migrateOpenApiAuthConfig } from \"./migrate-config\";\n\nexport {\n  openApiOutputSchemaDataMigration,\n  runSqliteOpenApiOutputSchemaMigration,\n  unwrapOpenApiTransportEnvelope,\n} from \"./output-schema-migration\";\n\nexport { openApiSpecBlobDataMigration } from \"./spec-blob-migration\";\n","// ---------------------------------------------------------------------------\n// One-off config migration — rewrite pre-canonical OpenAPI integration\n// `config` blobs into the canonical placements model. Runs once per database\n// (boot for local/selfhost, out-of-band script for cloud); runtime code\n// decodes ONLY the canonical shape (`decodeOpenApiIntegrationConfig`).\n//\n// The retired shape is the `variable()`-templated apiKey:\n//   { slug, type: \"apiKey\", headers/queryParams: Record<name,\n//     string | (string | {type:\"variable\", name})[]> }\n// Each entry becomes one placement: prefix = literals before the first\n// variable, the variable name preserved VERBATIM (it keys the connections'\n// stored `item_ids`; the canonical `token` is stored as absent), a\n// literal-only value becomes a `literal` placement. OAuth templates\n// re-key from the retired `type: \"oauth\"` spelling to `kind: \"oauth2\"`.\n// ---------------------------------------------------------------------------\n\nimport { Option } from \"effect\";\nimport {\n  apiKeyMethodFromLegacyTemplate,\n  decodeLegacyApiKeyTemplate,\n} from \"@executor-js/sdk/http-auth\";\n\nimport { decodeOpenApiIntegrationConfig } from \"./config\";\n\nconst isCanonicalEntry = (entry: unknown): boolean =>\n  typeof entry === \"object\" &&\n  entry !== null &&\n  \"kind\" in entry &&\n  ((entry as { kind: unknown }).kind === \"apikey\" ||\n    (entry as { kind: unknown }).kind === \"oauth2\");\n\n/** The retired oauth spelling: `type: \"oauth\"` instead of `kind: \"oauth2\"`. */\nconst isLegacyOAuthEntry = (\n  entry: unknown,\n): entry is { readonly type: \"oauth\" } & Record<string, unknown> =>\n  typeof entry === \"object\" &&\n  entry !== null &&\n  \"type\" in entry &&\n  (entry as { type: unknown }).type === \"oauth\";\n\nconst migrateEntry = (entry: unknown): unknown | null => {\n  if (isCanonicalEntry(entry)) return entry;\n  if (isLegacyOAuthEntry(entry)) {\n    const { type: _type, ...rest } = entry;\n    return { ...rest, kind: \"oauth2\" };\n  }\n  const legacy = Option.getOrNull(decodeLegacyApiKeyTemplate(entry));\n  if (legacy !== null) return apiKeyMethodFromLegacyTemplate(legacy);\n  return null;\n};\n\n/** Rewrite a stored OpenAPI integration config blob into the canonical shape.\n *  Returns the rewritten config, or `null` when no rewrite is needed (already\n *  canonical, no auth templates, or not this plugin's shape). Idempotent. */\nexport const migrateOpenApiAuthConfig = (config: unknown): unknown | null => {\n  if (typeof config !== \"object\" || config === null) return null;\n  if (!(\"spec\" in config) && !(\"specHash\" in config)) return null;\n  if (!(\"authenticationTemplate\" in config)) return null;\n\n  const entries = (config as { authenticationTemplate: unknown }).authenticationTemplate;\n  if (!Array.isArray(entries)) return null;\n\n  const migrated = entries.map(migrateEntry);\n  if (migrated.some((entry) => entry === null)) return null;\n  const changed = migrated.some((entry, index) => entry !== entries[index]);\n  if (!changed) return null;\n\n  const next = { ...config, authenticationTemplate: migrated };\n  return decodeOpenApiIntegrationConfig(next) !== null ? next : null;\n};\n","// ---------------------------------------------------------------------------\n// Data migration: unwrap the retired {status, headers, data} transport\n// envelope from persisted OpenAPI tool output schemas. The runtime returns\n// the upstream payload as `data` (status/headers live in the ToolResult\n// `http` side channel), so persisted schemas must describe the payload\n// only — otherwise describe previews show an envelope invocations no\n// longer return. Mirrors the cloud drizzle migration\n// (apps/cloud/drizzle/0002_unwrap_openapi_output_envelope.sql) for the\n// libSQL-backed apps, where it runs once through the data-migration ledger.\n//\n// Idempotent: payload-shaped rows don't match the envelope signature, so\n// re-running plans zero updates.\n// ---------------------------------------------------------------------------\n\nimport { Effect, Option, Schema } from \"effect\";\nimport { DataMigrationError, type SqliteDataMigrationClient } from \"@executor-js/sdk/core\";\n\nconst MIGRATION_NAME = \"2026-06-11-openapi-output-envelope-unwrap\";\n\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  typeof value === \"object\" && value !== null && !Array.isArray(value);\n\n// `{\"type\": \"integer\"}` — the envelope's `status` property schema, exactly.\nconst isEnvelopeStatusSchema = (value: unknown): boolean =>\n  isRecord(value) && Object.keys(value).length === 1 && value.type === \"integer\";\n\n// `{\"type\": \"object\", \"additionalProperties\": {\"type\": \"string\"}}` — the\n// envelope's `headers` property schema, exactly.\nconst isEnvelopeHeadersSchema = (value: unknown): boolean =>\n  isRecord(value) &&\n  Object.keys(value).length === 2 &&\n  value.type === \"object\" &&\n  isRecord(value.additionalProperties) &&\n  Object.keys(value.additionalProperties).length === 1 &&\n  value.additionalProperties.type === \"string\";\n\n/**\n * If `schema` is the retired transport envelope, return the payload schema\n * to persist instead (`null` when the envelope carried an empty `{}` data\n * schema — the new producer persists no output schema for those). Returns\n * undefined when the schema is not an envelope and the row must be left\n * untouched.\n */\nexport const unwrapOpenApiTransportEnvelope = (\n  schema: unknown,\n): { readonly outputSchema: unknown | null } | undefined => {\n  if (!isRecord(schema)) return undefined;\n  if (schema.type !== \"object\" || schema.additionalProperties !== false) return undefined;\n  const required = schema.required;\n  if (!Array.isArray(required) || required.length !== 3) return undefined;\n  if (![\"status\", \"headers\", \"data\"].every((key) => required.includes(key))) return undefined;\n  const properties = schema.properties;\n  if (!isRecord(properties) || !(\"data\" in properties)) return undefined;\n  if (!isEnvelopeStatusSchema(properties.status)) return undefined;\n  if (!isEnvelopeHeadersSchema(properties.headers)) return undefined;\n  const data = properties.data;\n  const outputSchema = isRecord(data) && Object.keys(data).length === 0 ? null : data;\n  return { outputSchema };\n};\n\nconst decodeJsonOption = Schema.decodeUnknownOption(Schema.UnknownFromJsonString);\n\nconst execute = (\n  client: SqliteDataMigrationClient,\n  stmt: string | { readonly sql: string; readonly args: readonly unknown[] },\n) =>\n  Effect.tryPromise({\n    try: () => client.execute(stmt),\n    catch: (cause) => new DataMigrationError({ migration: MIGRATION_NAME, cause }),\n  });\n\n/** Unwrap envelope-shaped openapi tool output schemas in a SQLite database.\n *  Returns the number of rows rewritten. The `tool` table may not exist yet\n *  on a fresh database — that counts as nothing to migrate. */\nexport const runSqliteOpenApiOutputSchemaMigration = (\n  client: SqliteDataMigrationClient,\n): Effect.Effect<number, DataMigrationError> =>\n  Effect.gen(function* () {\n    const exists = yield* execute(\n      client,\n      \"SELECT name FROM sqlite_master WHERE type = 'table' AND name = 'tool'\",\n    );\n    if (exists.rows.length === 0) return 0;\n\n    const result = yield* execute(\n      client,\n      \"SELECT row_id, output_schema FROM tool WHERE plugin_id = 'openapi' AND output_schema IS NOT NULL\",\n    );\n    const updates: { readonly rowId: string; readonly outputSchema: unknown | null }[] = [];\n    for (const row of result.rows) {\n      if (typeof row.row_id !== \"string\" || typeof row.output_schema !== \"string\") continue;\n      const schema = decodeJsonOption(row.output_schema);\n      if (Option.isNone(schema)) continue;\n      const unwrapped = unwrapOpenApiTransportEnvelope(schema.value);\n      if (unwrapped !== undefined) updates.push({ rowId: row.row_id, ...unwrapped });\n    }\n    if (updates.length === 0) return 0;\n\n    const applyAll = Effect.gen(function* () {\n      for (const update of updates) {\n        yield* execute(client, {\n          sql: \"UPDATE tool SET output_schema = ? WHERE row_id = ?\",\n          args: [\n            update.outputSchema === null ? null : JSON.stringify(update.outputSchema),\n            update.rowId,\n          ],\n        });\n      }\n      yield* execute(client, \"COMMIT\");\n    });\n\n    yield* execute(client, \"BEGIN\");\n    yield* applyAll.pipe(Effect.tapError(() => execute(client, \"ROLLBACK\").pipe(Effect.ignore)));\n    return updates.length;\n  });\n\n/** Registry entry for the boot-time data-migration ledger. */\nexport const openApiOutputSchemaDataMigration = {\n  name: MIGRATION_NAME,\n  run: (client: SqliteDataMigrationClient) =>\n    runSqliteOpenApiOutputSchemaMigration(client).pipe(Effect.asVoid),\n};\n","// ---------------------------------------------------------------------------\n// Data migration: move inline OpenAPI spec text out of `integration.config`\n// into the blob table (`spec/<sha256>`, config keeps `specHash`) — the\n// libSQL-ledger counterpart of cloud's out-of-band migrate-specs-to-blobs\n// script. Runs once per database through the data-migration ledger; the\n// shared body lives in @executor-js/sdk (`runSqliteConfigBlobMigration`).\n// ---------------------------------------------------------------------------\n\nimport { Effect } from \"effect\";\nimport {\n  runSqliteConfigBlobMigration,\n  type SqliteDataMigrationClient,\n} from \"@executor-js/sdk/core\";\n\nconst MIGRATION_NAME = \"2026-06-12-openapi-spec-to-blob\";\n\n/** Registry entry for the boot-time data-migration ledger. */\nexport const openApiSpecBlobDataMigration = {\n  name: MIGRATION_NAME,\n  run: (client: SqliteDataMigrationClient) =>\n    runSqliteConfigBlobMigration(client, {\n      migrationName: MIGRATION_NAME,\n      pluginId: \"openapi\",\n      inlineField: \"spec\",\n      hashField: \"specHash\",\n      blobKeyPrefix: \"spec\",\n    }).pipe(Effect.asVoid),\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4EA,SAAS,gBAAyC;;;AC5DlD,SAAS,cAAc;AACvB;AAAA,EACE;AAAA,EACA;AAAA,OACK;AAIP,IAAM,mBAAmB,CAAC,UACxB,OAAO,UAAU,YACjB,UAAU,QACV,UAAU,UACR,MAA4B,SAAS,YACpC,MAA4B,SAAS;AAG1C,IAAM,qBAAqB,CACzB,UAEA,OAAO,UAAU,YACjB,UAAU,QACV,UAAU,SACT,MAA4B,SAAS;AAExC,IAAM,eAAe,CAAC,UAAmC;AACvD,MAAI,iBAAiB,KAAK,EAAG,QAAO;AACpC,MAAI,mBAAmB,KAAK,GAAG;AAC7B,UAAM,EAAE,MAAM,OAAO,GAAG,KAAK,IAAI;AACjC,WAAO,EAAE,GAAG,MAAM,MAAM,SAAS;AAAA,EACnC;AACA,QAAM,SAAS,OAAO,UAAU,2BAA2B,KAAK,CAAC;AACjE,MAAI,WAAW,KAAM,QAAO,+BAA+B,MAAM;AACjE,SAAO;AACT;AAKO,IAAM,2BAA2B,CAAC,WAAoC;AAC3E,MAAI,OAAO,WAAW,YAAY,WAAW,KAAM,QAAO;AAC1D,MAAI,EAAE,UAAU,WAAW,EAAE,cAAc,QAAS,QAAO;AAC3D,MAAI,EAAE,4BAA4B,QAAS,QAAO;AAElD,QAAM,UAAW,OAA+C;AAChE,MAAI,CAAC,MAAM,QAAQ,OAAO,EAAG,QAAO;AAEpC,QAAM,WAAW,QAAQ,IAAI,YAAY;AACzC,MAAI,SAAS,KAAK,CAAC,UAAU,UAAU,IAAI,EAAG,QAAO;AACrD,QAAM,UAAU,SAAS,KAAK,CAAC,OAAO,UAAU,UAAU,QAAQ,KAAK,CAAC;AACxE,MAAI,CAAC,QAAS,QAAO;AAErB,QAAM,OAAO,EAAE,GAAG,QAAQ,wBAAwB,SAAS;AAC3D,SAAO,+BAA+B,IAAI,MAAM,OAAO,OAAO;AAChE;;;ACvDA,SAAS,QAAQ,UAAAA,SAAQ,cAAc;AACvC,SAAS,0BAA0D;AAEnE,IAAM,iBAAiB;AAEvB,IAAM,WAAW,CAAC,UAChB,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAGrE,IAAM,yBAAyB,CAAC,UAC9B,SAAS,KAAK,KAAK,OAAO,KAAK,KAAK,EAAE,WAAW,KAAK,MAAM,SAAS;AAIvE,IAAM,0BAA0B,CAAC,UAC/B,SAAS,KAAK,KACd,OAAO,KAAK,KAAK,EAAE,WAAW,KAC9B,MAAM,SAAS,YACf,SAAS,MAAM,oBAAoB,KACnC,OAAO,KAAK,MAAM,oBAAoB,EAAE,WAAW,KACnD,MAAM,qBAAqB,SAAS;AAS/B,IAAM,iCAAiC,CAC5C,WAC0D;AAC1D,MAAI,CAAC,SAAS,MAAM,EAAG,QAAO;AAC9B,MAAI,OAAO,SAAS,YAAY,OAAO,yBAAyB,MAAO,QAAO;AAC9E,QAAM,WAAW,OAAO;AACxB,MAAI,CAAC,MAAM,QAAQ,QAAQ,KAAK,SAAS,WAAW,EAAG,QAAO;AAC9D,MAAI,CAAC,CAAC,UAAU,WAAW,MAAM,EAAE,MAAM,CAAC,QAAQ,SAAS,SAAS,GAAG,CAAC,EAAG,QAAO;AAClF,QAAM,aAAa,OAAO;AAC1B,MAAI,CAAC,SAAS,UAAU,KAAK,EAAE,UAAU,YAAa,QAAO;AAC7D,MAAI,CAAC,uBAAuB,WAAW,MAAM,EAAG,QAAO;AACvD,MAAI,CAAC,wBAAwB,WAAW,OAAO,EAAG,QAAO;AACzD,QAAM,OAAO,WAAW;AACxB,QAAM,eAAe,SAAS,IAAI,KAAK,OAAO,KAAK,IAAI,EAAE,WAAW,IAAI,OAAO;AAC/E,SAAO,EAAE,aAAa;AACxB;AAEA,IAAM,mBAAmB,OAAO,oBAAoB,OAAO,qBAAqB;AAEhF,IAAM,UAAU,CACd,QACA,SAEA,OAAO,WAAW;AAAA,EAChB,KAAK,MAAM,OAAO,QAAQ,IAAI;AAAA,EAC9B,OAAO,CAAC,UAAU,IAAI,mBAAmB,EAAE,WAAW,gBAAgB,MAAM,CAAC;AAC/E,CAAC;AAKI,IAAM,wCAAwC,CACnD,WAEA,OAAO,IAAI,aAAa;AACtB,QAAM,SAAS,OAAO;AAAA,IACpB;AAAA,IACA;AAAA,EACF;AACA,MAAI,OAAO,KAAK,WAAW,EAAG,QAAO;AAErC,QAAM,SAAS,OAAO;AAAA,IACpB;AAAA,IACA;AAAA,EACF;AACA,QAAM,UAA+E,CAAC;AACtF,aAAW,OAAO,OAAO,MAAM;AAC7B,QAAI,OAAO,IAAI,WAAW,YAAY,OAAO,IAAI,kBAAkB,SAAU;AAC7E,UAAM,SAAS,iBAAiB,IAAI,aAAa;AACjD,QAAIA,QAAO,OAAO,MAAM,EAAG;AAC3B,UAAM,YAAY,+BAA+B,OAAO,KAAK;AAC7D,QAAI,cAAc,OAAW,SAAQ,KAAK,EAAE,OAAO,IAAI,QAAQ,GAAG,UAAU,CAAC;AAAA,EAC/E;AACA,MAAI,QAAQ,WAAW,EAAG,QAAO;AAEjC,QAAM,WAAW,OAAO,IAAI,aAAa;AACvC,eAAW,UAAU,SAAS;AAC5B,aAAO,QAAQ,QAAQ;AAAA,QACrB,KAAK;AAAA,QACL,MAAM;AAAA,UACJ,OAAO,iBAAiB,OAAO,OAAO,KAAK,UAAU,OAAO,YAAY;AAAA,UACxE,OAAO;AAAA,QACT;AAAA,MACF,CAAC;AAAA,IACH;AACA,WAAO,QAAQ,QAAQ,QAAQ;AAAA,EACjC,CAAC;AAED,SAAO,QAAQ,QAAQ,OAAO;AAC9B,SAAO,SAAS,KAAK,OAAO,SAAS,MAAM,QAAQ,QAAQ,UAAU,EAAE,KAAK,OAAO,MAAM,CAAC,CAAC;AAC3F,SAAO,QAAQ;AACjB,CAAC;AAGI,IAAM,mCAAmC;AAAA,EAC9C,MAAM;AAAA,EACN,KAAK,CAAC,WACJ,sCAAsC,MAAM,EAAE,KAAK,OAAO,MAAM;AACpE;;;ACjHA,SAAS,UAAAC,eAAc;AACvB;AAAA,EACE;AAAA,OAEK;AAEP,IAAMC,kBAAiB;AAGhB,IAAM,+BAA+B;AAAA,EAC1C,MAAMA;AAAA,EACN,KAAK,CAAC,WACJ,6BAA6B,QAAQ;AAAA,IACnC,eAAeA;AAAA,IACf,UAAU;AAAA,IACV,aAAa;AAAA,IACb,WAAW;AAAA,IACX,eAAe;AAAA,EACjB,CAAC,EAAE,KAAKD,QAAO,MAAM;AACzB;","names":["Option","Effect","MIGRATION_NAME"]}

package/dist/index.js

@@ -1,13 +1,15 @@
 import {
   openApiPlugin
-} from "./chunk-V7VCHYOY.js";
-import "./chunk-OSIFYIQP.js";
+} from "./chunk-WJQIWTZF.js";
+import "./chunk-C6PH4R7Q.js";
 import "./chunk-AQ7JDDRM.js";
 import "./chunk-MZWZQ24W.js";
 import {
-  TOKEN_VARIABLE,
-  variable
-} from "./chunk-YVRI7KRC.js";
+  TOKEN_VARIABLE
+} from "./chunk-C3IJX4AN.js";
+
+// src/promise.ts
+import { variable } from "@executor-js/sdk/http-auth";
 export {
   TOKEN_VARIABLE,
   openApiPlugin,

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}
+{"version":3,"sources":["../src/promise.ts"],"sourcesContent":["export { openApiPlugin } from \"./sdk/plugin\";\nexport type {\n  OpenApiPluginOptions,\n  OpenApiPluginExtension,\n  OpenApiSpecConfig,\n  OpenApiSpecInput,\n  OpenApiPreviewInput,\n} from \"./sdk/plugin\";\n\n// Auth-template authoring helpers. Author apikey methods as canonical\n// placements, or request-shaped: `headers: { Authorization: [\"Bearer \",\n// variable(\"token\")] }` — both normalize to the same stored model.\nexport { TOKEN_VARIABLE } from \"./sdk/types\";\nexport type { Authentication, AuthenticationInput, APIKeyAuthentication } from \"./sdk/types\";\nexport { variable, type ApiKeyAuthTemplate } from \"@executor-js/sdk/http-auth\";\n"],"mappings":";;;;;;;;;;;AAcA,SAAS,gBAAyC;","names":[]}

package/dist/react/AddOpenApiSource.d.ts

@@ -1,4 +1,3 @@
-export declare function resolveOAuthUrl(url: string, baseUrl: string): string;
 export default function AddOpenApiSource(props: {
     onComplete: (slug?: string) => void;
     onCancel: () => void;