@fayz-ai/core 0.9.0 → 0.11.0

package/dist/integrations/runtime.d.ts

@@ -0,0 +1,398 @@
+export type Cursor = {
+    kind: 'delta';
+    token: string | null;
+    restartFrom?: string;
+} | {
+    kind: 'window';
+    from: string;
+    to: string;
+    overlapMs: number;
+} | {
+    kind: 'period';
+    period: string;
+    sealed: boolean;
+};
+/** `authoritative` = absence means deleted. `additive` = absence means nothing. */
+export type Completeness = 'authoritative' | 'additive';
+/**
+ * What a cursor kind can promise about the records it did NOT return.
+ *
+ * Only a delta cursor can promise anything: the server counted the changes and
+ * named the tombstones. A window is computed by the client against a server
+ * with no memory, so the records outside it are not absent — they were never
+ * asked for.
+ */
+export declare function cursorCompleteness(cursor: Cursor): Completeness;
+/**
+ * The header a runtime-data token rides in, on its way to a data plane.
+ *
+ * It lives beside `redeemConnectorCredential` because the two only make sense
+ * together: the function cannot mint a token and must forward the one the
+ * request carried, so the caller and the callee have to agree on a spelling.
+ * Two connectors that each picked their own would fail at exactly the moment a
+ * merchant clicks Sincronizar, and would look like a credential problem.
+ *
+ * Lower-case: an edge function reads `request.headers.get(...)`, which is
+ * case-insensitive, but a CORS `Access-Control-Allow-Headers` list is compared
+ * against the lower-cased name the browser sends.
+ */
+export declare const CONNECTOR_RUNTIME_TOKEN_HEADER = "x-fayz-runtime-token";
+/** What redemption returns. `secrets` is the credential — it goes to the provider and nowhere else. */
+export interface RedeemedConnectorCredential {
+    connectionId: string;
+    connectorSlug: string;
+    tenantKey: string;
+    authKind: string;
+    /**
+     * For `api-key` and `mtls`, the fields the merchant typed. For `oauth`, a
+     * freshly minted access token — `refresh_token` is removed on the platform
+     * side, so the field that could mint further tokens has no route out.
+     */
+    secrets: Record<string, string>;
+    /** Present for `oauth`: when the returned access token stops working. */
+    expiresAt?: string;
+}
+/** The credential could not be read. Never carries the secret, the token or the body. */
+export declare class ConnectorCredentialUnavailableError extends Error {
+    readonly status: number | null;
+    constructor(message: string, status?: number | null);
+}
+export interface RedeemConnectorCredentialOptions {
+    /** Which connector's credential, e.g. 'appmax'. */
+    connectorSlug: string;
+    /**
+     * The runtime-data token that came in with the request being served.
+     *
+     * It is what says which tenant this run is for, and the function has no way
+     * to mint one — so it is required for anything serving a signed-in operator.
+     * The one alternative is {@link tenantKey}; exactly one of the two must be set.
+     */
+    runtimeToken?: string;
+    /**
+     * MACHINE mode: name the tenant instead of proving it with a token.
+     *
+     * For callers a session never reaches — a shopper with no account, a cron job
+     * with no user. The redemption secret alone then stands for "not a browser",
+     * so the platform bounds this path to `MACHINE_REDEEMABLE_CONNECTORS` and
+     * audits every use as `machine`.
+     *
+     * Consequence worth stating plainly: whoever holds the secret can reach any
+     * tenant of that project through this door. That is why it only ever lives in
+     * an edge function's environment, never in anything a browser loads.
+     */
+    tenantKey?: string;
+    /** Defaults to `FAYZ_API_URL` from the environment. */
+    apiUrl?: string;
+    /** Defaults to `FAYZ_PROJECT_ID`. */
+    projectId?: string;
+    /** Defaults to `CONNECTOR_REDEMPTION_SECRET`. */
+    redemptionSecret?: string;
+    /** Defaults to the ambient `fetch`. Injected so the call is provable under node:test. */
+    fetchImpl?: (input: string, init: Record<string, unknown>) => Promise<{
+        ok: boolean;
+        status: number;
+        text(): Promise<string>;
+    }>;
+    /** Defaults to `Deno.env.get`, falling back to `process.env`. */
+    env?: (name: string) => string | undefined;
+}
+/**
+ * The header a data-plane call carries its runtime token in.
+ *
+ * A header and not the body: `Authorization` already belongs to the platform
+ * the function is deployed on (Supabase checks the caller's JWT there), and a
+ * token in a body is a token in whatever logs that body.
+ *
+ * It is declared ONCE, above, in the module that loads under Deno, because both
+ * halves have to name it and only one of them can import the other's: the
+ * browser side gets it through `@fayz-ai/core` and the function side through
+ * `@fayz-ai/core/connector-runtime`. Written down once, or the second caller
+ * spells it differently and neither is wrong at review time — which is exactly
+ * what two branches did here, each adding its own `const` with the same value.
+ */
+/** The three names `provisionConnectorRuntimeEnv` puts into a project's functions. */
+export declare const CONNECTOR_REDEMPTION_ENV_KEYS: readonly ["FAYZ_API_URL", "FAYZ_PROJECT_ID", "CONNECTOR_REDEMPTION_SECRET"];
+/** The host a redemption was addressed to. Never the path — it carries the ids. */
+export declare function redemptionHost(url: string): string;
+/**
+ * What a failed redemption should say. Exported so it can be graded — the value
+ * is entirely in what it names.
+ *
+ * `door` is `'session'` for an operator's token, or the tenant key a machine
+ * call named. Both are safe to print; neither the secret nor the token is.
+ */
+export declare function redemptionFailure(connectorSlug: string, status: number, url: string, door: 'session' | string, said?: string): string;
+/**
+ * Read a tenant's connector credential from the platform, server-side.
+ *
+ * Everything that could leak is deliberately absent from what this can throw:
+ * the response body is never quoted, because the only route that returns a
+ * credential is this one and an error message is the easiest place for it to
+ * end up.
+ */
+export declare function redeemConnectorCredential(options: RedeemConnectorCredentialOptions): Promise<RedeemedConnectorCredential>;
+/**
+ * A provider answered with a status the caller could not use. `body` is carried
+ * because some providers put the real reason there and only there — Google
+ * signals quota exhaustion as 403 with `rateLimitExceeded` in the payload, and a
+ * classifier that only sees the status cannot tell it from a permission denial.
+ */
+export declare class ConnectorHttpError extends Error {
+    readonly status: number;
+    readonly retryAfterMs: number | null;
+    readonly body: string | null;
+    readonly details: unknown;
+    constructor(status: number, message: string, options?: {
+        retryAfterMs?: number | null;
+        body?: string | null;
+        details?: unknown;
+    });
+}
+/**
+ * RFC 7231 `Retry-After`: either delta-seconds or an HTTP-date. Returns
+ * milliseconds, or null when the header is absent or unparseable.
+ */
+export declare function parseRetryAfter(value: string | null | undefined, now?: number): number | null;
+export interface BackoffOptions {
+    baseDelayMs?: number;
+    maxDelayMs?: number;
+    random?: () => number;
+}
+/** Exponential backoff with ±25% jitter, capped. Attempt is 1-based. */
+export declare function backoffDelay(attempt: number, options?: BackoffOptions): number;
+export type Verdict = 
+/** Hand the response back to the caller — success, or a client error it must see. */
+{
+    action: 'return';
+}
+/** Wait, then repeat the same request. */
+ | {
+    action: 'retry';
+    delayMs: number;
+}
+/** The credential is stale: renew it, then repeat the request once. */
+ | {
+    action: 'reauth';
+}
+/** The cursor is gone: discard it and restart the run from scratch. */
+ | {
+    action: 'reset-cursor';
+}
+/** Nothing left to try. */
+ | {
+    action: 'fail';
+    reason: string;
+};
+/** What `classify` is shown about one attempt. */
+export interface AttemptOutcome {
+    /** null when the transport itself failed and there is no response. */
+    status: number | null;
+    headers?: {
+        get(name: string): string | null;
+    } | null;
+    /** Response body, when the caller peeked at it. See {@link ClassifyOptions.needsBody}. */
+    body?: string | null;
+    error?: unknown;
+    /** 1-based. */
+    attempt: number;
+    maxAttempts: number;
+}
+export interface ClassifyOptions extends BackoffOptions {
+    now?: () => number;
+    /** Statuses to retry beyond the defaults (408, 425, 429, 5xx). */
+    retryableStatuses?: number[];
+    /** Statuses meaning "the cursor is stale, start over". Google: 410. */
+    resetCursorStatuses?: number[];
+    /** Statuses meaning "renew the credential and repeat". Default: 401. */
+    reauthStatuses?: number[];
+    /** Where this provider states its wait. Default: `Retry-After` (RFC 7231). */
+    readRetryAfter?(headers: {
+        get(name: string): string | null;
+    } | null | undefined, now: number): number | null;
+    /**
+     * Whether a 403 is quota exhaustion rather than a permission denial.
+     *
+     * This is the defect the extraction fixes. `isRetryableGoogleStatus` returned
+     * false for 403 — and 403 with `rateLimitExceeded` in the body is exactly how
+     * the Google Calendar API reports the quota being blown, the single most
+     * characteristic failure of the provider it was written for.
+     */
+    isQuotaBody?(body: string | null | undefined, status: number): boolean;
+    /** Statuses whose body `classify` needs. Default: [403], for the case above. */
+    needsBody?: number[];
+}
+/** Statuses whose body must be read before `classify` can decide. */
+export declare function statusNeedsBody(status: number | null, options?: ClassifyOptions): boolean;
+/** The one retry policy. See {@link Verdict}. */
+export declare function classify(outcome: AttemptOutcome, options?: ClassifyOptions): Verdict;
+/** The slice of `Response` this module touches. Keeps the module runtime-free. */
+export interface MinimalResponse {
+    status: number;
+    headers: {
+        get(name: string): string | null;
+    };
+    clone?(): {
+        text(): Promise<string>;
+    };
+    text?(): Promise<string>;
+}
+export interface FetchWithRetryOptions extends ClassifyOptions {
+    maxAttempts?: number;
+    sleep?: (ms: number) => Promise<void>;
+    onRetry?(info: {
+        attempt: number;
+        delayMs: number;
+        status: number | null;
+        error: unknown;
+    }): void;
+    /**
+     * Renew the credential and return the init for the repeat. Called at most
+     * once per request — a refresh loop against a provider that rate-limits its
+     * own token endpoint is how an IP gets blocked for an hour.
+     */
+    onReauth?(): Promise<Record<string, unknown> | void> | Record<string, unknown> | void;
+}
+type FetchLike = (input: unknown, init?: unknown) => Promise<MinimalResponse>;
+/**
+ * One request, retried according to {@link classify}. Returns the last response;
+ * it never converts a status into an exception, because which 4xx is fatal is
+ * the caller's domain question, not the transport's.
+ */
+export declare function fetchWithRetry(fetchImpl: FetchLike, input: unknown, init: unknown, options?: FetchWithRetryOptions): Promise<MinimalResponse>;
+/**
+ * Whether something dated expires within the lead time — a watch channel, an
+ * OAuth access token, a refresh token that rotates. Renewing with slack is a
+ * requirement and not a nicety for a provider like Bling, whose token endpoint
+ * blocks the IP for an hour after 20 calls in a minute: the only safe refresh
+ * is the one made days early, never the one made in a loop at the deadline.
+ */
+export declare function isExpiring(expiresAt: string | number | Date | null | undefined, options?: {
+    now?: number;
+    leadMs?: number;
+}): boolean;
+export interface PageResult<TItem, TRequest> {
+    items?: TItem[];
+    /** The request for the next page, or null/undefined when this was the last. */
+    next?: TRequest | null;
+}
+export interface PaginateOptions<TItem, TRequest> {
+    /** The request for page one. */
+    first: TRequest;
+    fetchPage(request: TRequest): Promise<PageResult<TItem, TRequest>>;
+    /** Hard stop, so a provider that always returns a next token cannot spin. */
+    maxPages?: number;
+    /**
+     * Where to restart when a page fails with a `reset-cursor` verdict. Absent =
+     * the reset is not available and the error propagates.
+     */
+    resetTo?(request: TRequest): TRequest | null;
+    /** Classify a thrown page error. Defaults to reading `error.status`. */
+    classifyError?(error: unknown): Verdict;
+    onCursorReset?(): void;
+}
+export interface PaginateResult<TItem> {
+    items: TItem[];
+    pages: number;
+    /** Whether the run restarted after the provider rejected the cursor. */
+    cursorReset: boolean;
+}
+/**
+ * Walk every page. The contract is that `items` is complete when this returns —
+ * a caller that stops at the first page is the FAY-1377 bug, and no connector
+ * should have to re-derive the loop to avoid it.
+ */
+export declare function paginate<TItem, TRequest>(options: PaginateOptions<TItem, TRequest>): Promise<PaginateResult<TItem>>;
+export interface RateLimitBudget {
+    /** Sustained requests per second the provider allows for one account. */
+    perSecond?: number;
+    /** Requests per rolling day for one account, summed across every module. */
+    perDay?: number;
+}
+export interface RateLimiterOptions {
+    now?: () => number;
+    sleep?: (ms: number) => Promise<void>;
+    /** Calls already spent today, read from the run history on resume. */
+    spentToday?: number;
+}
+export declare class RateLimitExceededError extends Error {
+    readonly kind = "daily-budget";
+    constructor(perDay: number);
+}
+export interface RateLimiter {
+    /** Wait until one call fits inside the budget. Throws when the day is spent. */
+    take(): Promise<void>;
+    /** Calls taken since the limiter was created, plus what it resumed with. */
+    readonly spent: number;
+    /** Whether another call fits today at all. */
+    readonly exhausted: boolean;
+}
+/**
+ * A token bucket over the declared budget. The clock is injected, so "3000 SKUs
+ * enter without blowing 3 req/s" is a proof and not an impression.
+ */
+export declare function createRateLimiter(budget: RateLimitBudget, options?: RateLimiterOptions): RateLimiter;
+/**
+ * Split a range into slices no longer than `maxSpanMs`.
+ *
+ * Bling answers a date filter wider than one year with a 400, so the window is
+ * always sliced. Generic because the constraint is not Bling's alone — a
+ * provider that caps a range is the normal case, and a connector that discovers
+ * the cap in production discovers it as a failed backfill.
+ */
+export declare function sliceWindow(from: string, to: string, maxSpanMs: number): Array<{
+    from: string;
+    to: string;
+}>;
+/**
+ * The next window to ask for, overlapping the one just finished.
+ *
+ * The overlap is not belt-and-braces: a provider that stamps `updatedAt` at
+ * second precision, or writes it a moment before the row is visible, drops
+ * whatever landed on the boundary. Re-reading it costs an idempotent upsert.
+ */
+export declare function advanceWindow(cursor: Extract<Cursor, {
+    kind: 'window';
+}>, now?: number): Extract<Cursor, {
+    kind: 'window';
+}>;
+/** Serialise a cursor for `plg_sync_runs.cursor`, which is one text column. */
+export declare function serializeCursor(cursor: Cursor | null | undefined): string | null;
+export interface MirrorRecord {
+    /** The local row's id. */
+    id: string;
+    /** The provider's id it is linked to. */
+    externalId: string;
+}
+export interface ReconcileInput {
+    completeness: Completeness;
+    /** Provider ids this run actually saw. */
+    observed: Iterable<string>;
+    /** Local rows currently linked to this stream. */
+    linked: Iterable<MirrorRecord>;
+    /** Provider ids the provider explicitly reported as gone. Always honoured. */
+    tombstones?: Iterable<string>;
+}
+export interface ReconcileResult {
+    /** Local ids to cancel. */
+    cancel: string[];
+    /** Local ids absent from this run that must NOT be touched. */
+    keptOutOfRange: string[];
+    reason: 'absence-is-deletion' | 'absence-means-nothing';
+}
+/**
+ * Decide what a run's silence means.
+ *
+ * Under `authoritative` the provider counted the changes and named the
+ * tombstones, so a linked row that did not appear was deleted. Under `additive`
+ * the run only ever asked about part of the world — a window, a statement
+ * period — and a row that did not appear was simply not asked about. Cancelling
+ * it is silent data loss, and it is the failure this whole cursor design exists
+ * to make impossible.
+ *
+ * Explicit tombstones are obeyed under both: a provider that bothers to say
+ * "this one is gone" is authoritative about that one record regardless of how
+ * the run was scoped.
+ */
+export declare function reconcileMirror(input: ReconcileInput): ReconcileResult;
+export {};
+//# sourceMappingURL=runtime.d.ts.map

package/dist/integrations/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/integrations/runtime.ts"],"names":[],"mappings":"AA8BA,MAAM,MAAM,MAAM,GACd;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7D;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAA;AAEvD,mFAAmF;AACnF,MAAM,MAAM,YAAY,GAAG,eAAe,GAAG,UAAU,CAAA;AAEvD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CAE/D;AA4BD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,8BAA8B,yBAAyB,CAAA;AAEpE,uGAAuG;AACvG,MAAM,WAAW,2BAA2B;IAC1C,YAAY,EAAE,MAAM,CAAA;IACpB,aAAa,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB;;;;OAIG;IACH,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,yFAAyF;AACzF,qBAAa,mCAAoC,SAAQ,KAAK;IAC5D,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;gBAClB,OAAO,EAAE,MAAM,EAAE,MAAM,GAAE,MAAM,GAAG,IAAW;CAK1D;AAED,MAAM,WAAW,gCAAgC;IAC/C,mDAAmD;IACnD,aAAa,EAAE,MAAM,CAAA;IACrB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;;;;;;;;OAWG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,qCAAqC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,iDAAiD;IACjD,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,yFAAyF;IACzF,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC;QACpE,EAAE,EAAE,OAAO,CAAA;QACX,MAAM,EAAE,MAAM,CAAA;QACd,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;KACxB,CAAC,CAAA;IACF,iEAAiE;IACjE,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAA;CAC3C;AAED;;;;;;;;;;;;;GAaG;AAEH,sFAAsF;AACtF,eAAO,MAAM,6BAA6B,6EAIhC,CAAA;AAwDV,mFAAmF;AACnF,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAMlD;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,SAAS,GAAG,MAAM,EACxB,IAAI,SAAK,GACR,MAAM,CAwBR;AAED;;;;;;;GAOG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,gCAAgC,GACxC,OAAO,CAAC,2BAA2B,CAAC,CAkFtC;AAMD;;;;;GAKG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;gBAGvB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;QAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAO;CAS1F;AAMD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,GAAG,GAAE,MAAmB,GAAG,MAAM,GAAG,IAAI,CAMzG;AAED,MAAM,WAAW,cAAc;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,MAAM,MAAM,CAAA;CACtB;AAED,wEAAwE;AACxE,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,MAAM,CAMlF;AAcD,MAAM,MAAM,OAAO;AACjB,qFAAqF;AACnF;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE;AACtB,0CAA0C;GACxC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AACtC,uEAAuE;GACrE;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE;AACtB,uEAAuE;GACrE;IAAE,MAAM,EAAE,cAAc,CAAA;CAAE;AAC5B,2BAA2B;GACzB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAEtC,kDAAkD;AAClD,MAAM,WAAW,cAAc;IAC7B,sEAAsE;IACtE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,OAAO,CAAC,EAAE;QAAE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAA;IACrD,0FAA0F;IAC1F,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,eAAe;IACf,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,eAAgB,SAAQ,cAAc;IACrD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,kEAAkE;IAClE,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC5B,uEAAuE;IACvE,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC9B,wEAAwE;IACxE,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB,8EAA8E;IAC9E,cAAc,CAAC,CAAC,OAAO,EAAE;QAAE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;IAC7G;;;;;;;OAOG;IACH,WAAW,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAA;IACtE,gFAAgF;IAChF,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;CACrB;AAID,qEAAqE;AACrE,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,GAAE,eAAoB,GAAG,OAAO,CAG7F;AAED,iDAAiD;AACjD,wBAAgB,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,GAAE,eAAoB,GAAG,OAAO,CAiCxF;AAMD,kFAAkF;AAClF,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE;QAAE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;KAAE,CAAA;IAC7C,KAAK,CAAC,IAAI;QAAE,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;KAAE,CAAA;IACrC,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;CACzB;AAED,MAAM,WAAW,qBAAsB,SAAQ,eAAe;IAC5D,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,OAAO,CAAC,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAA;IACjG;;;;OAIG;IACH,QAAQ,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CACtF;AAED,KAAK,SAAS,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,eAAe,CAAC,CAAA;AAY7E;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,SAAS,EAAE,SAAS,EACpB,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,OAAO,EACb,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,eAAe,CAAC,CAqD1B;AAMD;;;;;;GAMG;AACH,wBAAgB,UAAU,CACxB,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,IAAI,GAAG,SAAS,EACpD,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAC9C,OAAO,CAOT;AAWD,MAAM,WAAW,UAAU,CAAC,KAAK,EAAE,QAAQ;IACzC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAA;IACf,+EAA+E;IAC/E,IAAI,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAA;CACvB;AAED,MAAM,WAAW,eAAe,CAAC,KAAK,EAAE,QAAQ;IAC9C,gCAAgC;IAChC,KAAK,EAAE,QAAQ,CAAA;IACf,SAAS,CAAC,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAA;IAClE,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB;;;OAGG;IACH,OAAO,CAAC,CAAC,OAAO,EAAE,QAAQ,GAAG,QAAQ,GAAG,IAAI,CAAA;IAC5C,wEAAwE;IACxE,aAAa,CAAC,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAA;IACvC,aAAa,CAAC,IAAI,IAAI,CAAA;CACvB;AAED,MAAM,WAAW,cAAc,CAAC,KAAK;IACnC,KAAK,EAAE,KAAK,EAAE,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,wEAAwE;IACxE,WAAW,EAAE,OAAO,CAAA;CACrB;AAED;;;;GAIG;AACH,wBAAsB,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAC5C,OAAO,EAAE,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,GACxC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAwChC;AAaD,MAAM,WAAW,eAAe;IAC9B,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,IAAI,kBAAiB;gBAClB,MAAM,EAAE,MAAM;CAI3B;AAED,MAAM,WAAW,WAAW;IAC1B,gFAAgF;IAChF,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACrB,4EAA4E;IAC5E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,8CAA8C;IAC9C,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;CAC5B;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,GAAE,kBAAuB,GAAG,WAAW,CA6BxG;AAMD;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAe5G;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC,EAC3C,GAAG,GAAE,MAAmB,GACvB,OAAO,CAAC,MAAM,EAAE;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC,CAKrC;AAED,+EAA+E;AAC/E,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAKhF;AAMD,MAAM,WAAW,YAAY;IAC3B,0BAA0B;IAC1B,EAAE,EAAE,MAAM,CAAA;IACV,yCAAyC;IACzC,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,YAAY,CAAA;IAC1B,0CAA0C;IAC1C,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC1B,kDAAkD;IAClD,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAA;IAC9B,8EAA8E;IAC9E,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAA;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,2BAA2B;IAC3B,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,+DAA+D;IAC/D,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,MAAM,EAAE,qBAAqB,GAAG,uBAAuB,CAAA;CACxD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,cAAc,GAAG,eAAe,CAgBtE"}

package/dist/integrations/settings.d.ts

@@ -0,0 +1,102 @@
+/**
+ * How a setting is asked for.
+ *
+ * Closed, and short on purpose: each member is a control someone has to build,
+ * localize and test. It grew to exactly what the two real cases needed — a
+ * multi-select for payment methods, a constrained text for a postcode — and the
+ * next one is added by whoever has the next real case.
+ */
+export type ConnectorSettingType = 
+/** One line, optionally shaped by `pattern` (a postcode, a CNPJ). */
+'text'
+/** Exactly one of `options`. */
+ | 'select'
+/** Any number of `options`; persisted as a `string[]`. */
+ | 'multi-select'
+/** On/off; persisted as a boolean. */
+ | 'toggle';
+/** One choice of a `select` / `multi-select`. */
+export interface ConnectorSettingOption {
+    value: string;
+    label: string;
+}
+/** A value a setting can hold. Never a secret — see the module header. */
+export type ConnectorSettingValue = string | string[] | boolean;
+/**
+ * One operational setting a connector exposes once it is connected.
+ *
+ * The declaration is what kills the free-text box: "pix, boleto, credit_card"
+ * typed into an input is three chances to misspell a value the storefront then
+ * silently does not offer. A `multi-select` over declared options cannot be
+ * misspelled, and it is the same declaration the store validates writes against.
+ */
+export interface ConnectorSetting {
+    /** Key inside `plg_connections.settings`. Must not collide with a credential field. */
+    key: string;
+    label: string;
+    /** The sentence under the label — the same affordance every settings row has. */
+    description?: string;
+    type: ConnectorSettingType;
+    /** Required for `select` and `multi-select`, meaningless elsewhere. */
+    options?: ConnectorSettingOption[];
+    /** `text` only. */
+    placeholder?: string;
+    /**
+     * `text` only: the shape the value must have, as a RegExp source anchored by
+     * the renderer. A postcode is eight digits or it is not a postcode, and
+     * finding that out at the first quote is finding it out from a buyer.
+     */
+    pattern?: string;
+    /** What the reader is told when `pattern` refuses. Required whenever `pattern` is set. */
+    patternHint?: string;
+    /**
+     * The connector cannot do its job until this is chosen — and is still
+     * connectable without it. See the module header.
+     */
+    requiredToOperate?: boolean;
+    /** Offered when the connection has no value yet. Never written on its own. */
+    defaultValue?: ConnectorSettingValue;
+}
+/**
+ * A setting counts as chosen when it holds something.
+ *
+ * `''` and `[]` are not values: an empty multi-select is a merchant who accepts
+ * no payment method, which is indistinguishable from one who has not decided,
+ * and treating it as decided is what would let a store go live accepting
+ * nothing. `false` IS a value — a toggle turned off was answered.
+ */
+export declare function isSettingSet(value: unknown): boolean;
+/** The declared settings of a connector, or none. */
+export declare function connectorSettings(def: {
+    settings?: ConnectorSetting[];
+}): ConnectorSetting[];
+/**
+ * Which required-to-operate settings this connection has not got.
+ *
+ * Keys, never values — the answer is rendered as copy and persisted into
+ * `status_detail`, and neither is a place for what the tenant typed.
+ */
+export declare function missingRequiredSettings(settings: ConnectorSetting[] | undefined, values: Record<string, unknown> | undefined | null): string[];
+/** What {@link settingsStatus} contributes to a `ConnectorStatus`. */
+export interface SettingsReadiness {
+    /** Connected, and unable to work until something is chosen. */
+    needsSetup: boolean;
+    /** The keys that are missing. Present only when `needsSetup`. */
+    missingSettings?: string[];
+}
+/**
+ * The setup half of a connector's status, derived from the row the list already
+ * read.
+ *
+ * Derived and not merely read back from `status`, because the declaration is the
+ * truth: a connector that gains a required setting in a new version must report
+ * "falta configurar" on connections saved before that version existed, and no
+ * write happened to those rows to say so.
+ */
+export declare function settingsStatus(settings: ConnectorSetting[] | undefined, connection: {
+    active?: boolean;
+    settings?: Record<string, unknown>;
+} | null | undefined): SettingsReadiness;
+/** `status_detail` for a connection waiting on configuration. Keys only. */
+export declare function setupStatusDetail(missing: string[]): string;
+//# sourceMappingURL=settings.d.ts.map

package/dist/integrations/settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../../src/integrations/settings.ts"],"names":[],"mappings":"AA6BA;;;;;;;GAOG;AACH,MAAM,MAAM,oBAAoB;AAC9B,qEAAqE;AACnE,MAAM;AACR,gCAAgC;GAC9B,QAAQ;AACV,0DAA0D;GACxD,cAAc;AAChB,sCAAsC;GACpC,QAAQ,CAAA;AAEZ,iDAAiD;AACjD,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;CACd;AAED,0EAA0E;AAC1E,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,CAAA;AAE/D;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,uFAAuF;IACvF,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,iFAAiF;IACjF,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,oBAAoB,CAAA;IAC1B,uEAAuE;IACvE,OAAO,CAAC,EAAE,sBAAsB,EAAE,CAAA;IAClC,mBAAmB;IACnB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,0FAA0F;IAC1F,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,8EAA8E;IAC9E,YAAY,CAAC,EAAE,qBAAqB,CAAA;CACrC;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAKpD;AAED,qDAAqD;AACrD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE;IAAE,QAAQ,CAAC,EAAE,gBAAgB,EAAE,CAAA;CAAE,GAAG,gBAAgB,EAAE,CAE5F;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,gBAAgB,EAAE,GAAG,SAAS,EACxC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,IAAI,GACjD,MAAM,EAAE,CAIV;AAED,sEAAsE;AACtE,MAAM,WAAW,iBAAiB;IAChC,+DAA+D;IAC/D,UAAU,EAAE,OAAO,CAAA;IACnB,iEAAiE;IACjE,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;CAC3B;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,gBAAgB,EAAE,GAAG,SAAS,EACxC,UAAU,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,GACtF,iBAAiB,CAInB;AAED,4EAA4E;AAC5E,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAE3D"}

package/dist/integrations/store.d.ts

@@ -0,0 +1,145 @@
+import type { ConnectionConfig, ConnectorField, ConnectorStatus, SyncRun } from './index';
+import { type ConnectorSetting, type ConnectorSettingValue } from './settings';
+/**
+ * The one data layer every connector shares. A connector declares a
+ * ConnectorDefinition and writes no SQL: `plg_connections` and `plg_sync_runs`
+ * (migration 029) are read and written from here.
+ *
+ * `recordRun` is deliberately absent. A run is a server-side write — the table
+ * carries no INSERT grant for `authenticated`, because a history the
+ * application can write is not a history.
+ *
+ * Opt-in, not mandatory: a connector whose truth lives entirely at the provider
+ * (Stripe Connect) stores nothing here rather than keeping a second source of
+ * truth that derives from the first.
+ */
+export declare const CONNECTIONS_TABLE = "plg_connections";
+export declare const SYNC_RUNS_TABLE = "plg_sync_runs";
+/** A settings key that is not declared, or is a credential. */
+export declare class ConnectionSettingsError extends Error {
+    constructor(message: string);
+}
+export interface ConnectionStoreOptions {
+    /** The connector's declared fields — the allow-list `save()` checks against. */
+    fields?: ConnectorField[];
+    /**
+     * The connector's declared operational settings. Their keys are allowed, and
+     * the required-to-operate ones decide whether a saved connection reads as
+     * `connected` or as `pending` — see {@link createConnectionStore}.
+     */
+    settings?: ConnectorSetting[];
+    /** Non-credential keys the connector writes itself (a chosen calendar, an import mode). */
+    settingsKeys?: string[];
+    /** Which account at the provider. `''` (default) is the single-account case. */
+    instanceKey?: string;
+    /** Tenant override; defaults to the active tenant. */
+    tenantId?: string;
+    /** Supabase client override; defaults to the globally registered one. */
+    client?: unknown;
+}
+/** The mutable half of a connection. `status` is absent on purpose: it is observed server-side. */
+export interface ConnectionSaveInput {
+    settings?: Record<string, unknown>;
+    displayName?: string | null;
+    active?: boolean;
+    providerAccountKey?: string | null;
+}
+export interface ConnectionStore {
+    readonly connectorId: string;
+    readonly instanceKey: string;
+    get(): Promise<ConnectionConfig | null>;
+    save(input?: ConnectionSaveInput): Promise<ConnectionConfig>;
+    disconnect(): Promise<void>;
+    listRuns(options?: {
+        limit?: number;
+    }): Promise<SyncRun[]>;
+}
+/**
+ * The keys a connector is allowed to put in `settings`: its declared
+ * non-credential fields, plus anything it named in `settingsKeys`.
+ *
+ * Rejecting is the point. Without it, "settings never holds a credential" is a
+ * comment in a migration — three connectors already broke that comment. With
+ * it, a `type: 'password'` field arriving as a settings key is an error with a
+ * name, and the doctor has a rule it can run.
+ */
+export declare function assertSettingsAllowed(settings: Record<string, unknown>, options: Pick<ConnectionStoreOptions, 'fields' | 'settings' | 'settingsKeys'>, connectorId?: string): void;
+/**
+ * The connection store for one connector, on one account.
+ *
+ * @param connectorId Stable connector id, e.g. 'google-calendar'.
+ */
+export declare function createConnectionStore(connectorId: string, options?: ConnectionStoreOptions): ConnectionStore;
+/** Map key for {@link listConnections}. A connection is (connector, account). */
+export declare function connectionKey(connectorId: string, instanceKey?: string): string;
+export interface ListConnectionsOptions {
+    /** Tenant override; defaults to the active tenant. */
+    tenantId?: string;
+    /** Supabase client override; defaults to the globally registered one. */
+    client?: unknown;
+}
+/**
+ * Every named connector's row in ONE read.
+ *
+ * The connectors screen used to cost one `plg_connections` GET per connector,
+ * because each connector asked for its own row through its own store — N round
+ * trips to fill one list. They all share the table, so `connector_id=in.(…)`
+ * answers all of them at once.
+ *
+ * The tenant is part of the QUERY, never of a cache key alone: a caller that
+ * holds this map across a tenant switch is holding the wrong tenant's rows, so
+ * the map is deliberately returned, not stored.
+ */
+export declare function listConnections(connectorIds: readonly string[], options?: ListConnectionsOptions): Promise<Map<string, ConnectionConfig>>;
+/** What {@link connectionStatus} contributes to a ConnectorDefinition. */
+export interface ConnectionBackedStatus {
+    instanceKey: string;
+    statusFromConnection: (connection: ConnectionConfig | null) => ConnectorStatus;
+    getStatus: () => Promise<ConnectorStatus>;
+}
+/**
+ * Wire a connector's status badge to its `plg_connections` row.
+ *
+ * One `derive` answers both doors: `getStatus()` for a screen showing this
+ * connector alone, and `statusFromConnection` for a screen showing a list — the
+ * list hands it a row it already read in a batch, so N connectors cost one
+ * request instead of N. Spread the result into the definition.
+ *
+ * A connector whose truth lives at the provider (Stripe Connect) writes its own
+ * `getStatus` and declares no `statusFromConnection`; the list then reads it
+ * one-by-one, which is correct because there is no shared row to batch.
+ */
+/** What {@link connectionSettings} contributes to a ConnectorDefinition. */
+export interface ConnectionSettingsIO {
+    getSettings: () => Promise<Record<string, unknown>>;
+    saveSettings: (values: Record<string, ConnectorSettingValue>) => Promise<void>;
+}
+/**
+ * Wire a connector's settings form to its `plg_connections.settings` jsonb.
+ *
+ * Spread into the definition, the same way {@link connectionStatus} is. Every
+ * store-backed connector would otherwise write the same four lines, and the one
+ * that wrote them slightly differently would be the one that replaced the jsonb
+ * instead of merging into it.
+ */
+export declare function connectionSettings(store: ConnectionStore): ConnectionSettingsIO;
+/** What {@link connectionRuns} contributes to a ConnectorDefinition. */
+export interface ConnectionRunsIO {
+    listRuns: (options?: {
+        limit?: number;
+    }) => Promise<SyncRun[]>;
+}
+/**
+ * Wire a connector's history to its `plg_sync_runs` rows.
+ *
+ * Spread into the definition, like {@link connectionStatus} and
+ * {@link connectionSettings}. Swallowing is the point: a history is never the
+ * reason a connector's screen fails to render, and "no rows" and "unreadable"
+ * are the same answer to somebody asking what has happened.
+ */
+export declare function connectionRuns(store: ConnectionStore | (() => ConnectionStore)): ConnectionRunsIO;
+export declare function connectionStatus(connectorId: string, derive: (connection: ConnectionConfig | null) => ConnectorStatus, options?: {
+    instanceKey?: string;
+    store?: () => ConnectionStore;
+}): ConnectionBackedStatus;
+//# sourceMappingURL=store.d.ts.map

package/dist/integrations/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/integrations/store.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAU,OAAO,EAAE,MAAM,SAAS,CAAA;AACjG,OAAO,EAGL,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC3B,MAAM,YAAY,CAAA;AAEnB;;;;;;;;;;;;GAYG;AAEH,eAAO,MAAM,iBAAiB,oBAAoB,CAAA;AAClD,eAAO,MAAM,eAAe,kBAAkB,CAAA;AAE9C,+DAA+D;AAC/D,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM;CAI5B;AAED,MAAM,WAAW,sBAAsB;IACrC,gFAAgF;IAChF,MAAM,CAAC,EAAE,cAAc,EAAE,CAAA;IACzB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,gBAAgB,EAAE,CAAA;IAC7B,2FAA2F;IAC3F,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,gFAAgF;IAChF,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,sDAAsD;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,yEAAyE;IACzE,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB;AAED,mGAAmG;AACnG,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAClC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACnC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,GAAG,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAA;IACvC,IAAI,CAAC,KAAK,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC5D,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;CAC3D;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,OAAO,EAAE,IAAI,CAAC,sBAAsB,EAAE,QAAQ,GAAG,UAAU,GAAG,cAAc,CAAC,EAC7E,WAAW,SAAc,GACxB,IAAI,CAqBN;AAqFD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,GAAE,sBAA2B,GAAG,eAAe,CA4HhH;AAID,iFAAiF;AACjF,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,SAAK,GAAG,MAAM,CAE3E;AAED,MAAM,WAAW,sBAAsB;IACrC,sDAAsD;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,yEAAyE;IACzE,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,eAAe,CACnC,YAAY,EAAE,SAAS,MAAM,EAAE,EAC/B,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAmBxC;AAED,0EAA0E;AAC1E,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAA;IACnB,oBAAoB,EAAE,CAAC,UAAU,EAAE,gBAAgB,GAAG,IAAI,KAAK,eAAe,CAAA;IAC9E,SAAS,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,CAAA;CAC1C;AAED;;;;;;;;;;;GAWG;AACH,4EAA4E;AAC5E,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IACnD,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAC/E;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,eAAe,GAAG,oBAAoB,CAS/E;AAED,wEAAwE;AACxE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;CAC/D;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,eAAe,GAAG,CAAC,MAAM,eAAe,CAAC,GAAG,gBAAgB,CAajG;AAED,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,CAAC,UAAU,EAAE,gBAAgB,GAAG,IAAI,KAAK,eAAe,EAChE,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,eAAe,CAAA;CAAO,GACpE,sBAAsB,CAgBxB"}