@frontmcp/adapters 1.7.2 → 1.8.1

package/esm/index.mjs

@@ -363,6 +363,7 @@ Solutions:
 // libs/adapters/src/openapi/openapi.tool.ts
 import { z as z2 } from "@frontmcp/lazy-zod";
 import { tool } from "@frontmcp/sdk";
+import { isRedirectResponse } from "@frontmcp/utils";
 
 // libs/adapters/src/openapi/openapi.frontmcp-schema.ts
 import { z } from "@frontmcp/lazy-zod";
@@ -853,7 +854,7 @@ function createOpenApiTool(openapiTool, options, logger) {
         }
       } catch (err) {
         const errorMessage = err instanceof Error ? err.message : String(err);
-        throw new Error(`headersMapper failed for tool '${openapiTool.name}': ${errorMessage}`);
+        throw new Error(`headersMapper failed for tool '${openapiTool.name}': ${errorMessage}`, { cause: err });
       }
     }
     let finalBody = requestBody;
@@ -862,7 +863,7 @@ function createOpenApiTool(openapiTool, options, logger) {
         finalBody = options.bodyMapper(ctx, requestBody);
       } catch (err) {
         const errorMessage = err instanceof Error ? err.message : String(err);
-        throw new Error(`bodyMapper failed for tool '${openapiTool.name}': ${errorMessage}`);
+        throw new Error(`bodyMapper failed for tool '${openapiTool.name}': ${errorMessage}`, { cause: err });
       }
     }
     if (finalBody && !headers.has("content-type")) {
@@ -875,7 +876,8 @@ function createOpenApiTool(openapiTool, options, logger) {
       } catch (err) {
         const errorMessage = err instanceof Error ? err.message : String(err);
         throw new Error(
-          `Failed to serialize request body for tool '${openapiTool.name}': ${errorMessage}. Body may contain circular references, BigInt, or non-serializable values.`
+          `Failed to serialize request body for tool '${openapiTool.name}': ${errorMessage}. Body may contain circular references, BigInt, or non-serializable values.`,
+          { cause: err }
         );
       }
       const maxRequestSize = options.maxRequestSize ?? DEFAULT_MAX_REQUEST_SIZE;
@@ -893,8 +895,35 @@ function createOpenApiTool(openapiTool, options, logger) {
         method: openapiTool.metadata.method.toUpperCase(),
         headers,
         body: serializedBody,
-        signal: controller.signal
+        signal: controller.signal,
+        // SECURITY (GHSA-qh67-4345-cw2q): never auto-follow redirects. `fetch` defaults to
+        // `redirect: 'follow'`, which re-sends the request to a destination the UPSTREAM
+        // chose, not the operator. Only `baseUrl` is validated, and only for its scheme, so
+        // a 3xx is an unvalidated hop — to a cloud metadata address or an RFC1918 host.
+        // undici also strips only `Authorization` and `Cookie` across origins and forwards
+        // custom headers, which is exactly how this adapter injects API keys, so following
+        // hands the backend credential to the redirect target. `manual` makes the 3xx
+        // visible here so it can be refused instead of chased.
+        redirect: "manual"
       });
+      if (isRedirectResponse(response)) {
+        logger.warn(`[${openapiTool.name}] upstream returned a redirect; not followed`, {
+          status: response.status
+        });
+        return {
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify({
+                status: response.status,
+                error: `Upstream returned a redirect (${response.status}); not followed to protect injected credentials.`
+              })
+            }
+          ],
+          isError: true,
+          _meta: { status: response.status, errorCode: "OPENAPI_REDIRECT_NOT_FOLLOWED" }
+        };
+      }
       const apiResponse = await parseResponse(response, { maxResponseSize: options.maxResponseSize });
       let transformedData = apiResponse.data;
       if (postToolTransform) {
@@ -982,7 +1011,7 @@ async function safeInject(transform, ctx, timeoutMs = DEFAULT_TRANSFORM_TIMEOUT_
     return result;
   } catch (err) {
     const errorMessage = err instanceof Error ? err.message : String(err);
-    throw new Error(`Input transform for '${transform.inputKey}' failed: ${errorMessage}`);
+    throw new Error(`Input transform for '${transform.inputKey}' failed: ${errorMessage}`, { cause: err });
   } finally {
     if (timeoutId !== void 0) {
       clearTimeout(timeoutId);

package/esm/openapi/index.mjs

@@ -363,6 +363,7 @@ Solutions:
 // libs/adapters/src/openapi/openapi.tool.ts
 import { z as z2 } from "@frontmcp/lazy-zod";
 import { tool } from "@frontmcp/sdk";
+import { isRedirectResponse } from "@frontmcp/utils";
 
 // libs/adapters/src/openapi/openapi.frontmcp-schema.ts
 import { z } from "@frontmcp/lazy-zod";
@@ -853,7 +854,7 @@ function createOpenApiTool(openapiTool, options, logger) {
         }
       } catch (err) {
         const errorMessage = err instanceof Error ? err.message : String(err);
-        throw new Error(`headersMapper failed for tool '${openapiTool.name}': ${errorMessage}`);
+        throw new Error(`headersMapper failed for tool '${openapiTool.name}': ${errorMessage}`, { cause: err });
       }
     }
     let finalBody = requestBody;
@@ -862,7 +863,7 @@ function createOpenApiTool(openapiTool, options, logger) {
         finalBody = options.bodyMapper(ctx, requestBody);
       } catch (err) {
         const errorMessage = err instanceof Error ? err.message : String(err);
-        throw new Error(`bodyMapper failed for tool '${openapiTool.name}': ${errorMessage}`);
+        throw new Error(`bodyMapper failed for tool '${openapiTool.name}': ${errorMessage}`, { cause: err });
       }
     }
     if (finalBody && !headers.has("content-type")) {
@@ -875,7 +876,8 @@ function createOpenApiTool(openapiTool, options, logger) {
       } catch (err) {
         const errorMessage = err instanceof Error ? err.message : String(err);
         throw new Error(
-          `Failed to serialize request body for tool '${openapiTool.name}': ${errorMessage}. Body may contain circular references, BigInt, or non-serializable values.`
+          `Failed to serialize request body for tool '${openapiTool.name}': ${errorMessage}. Body may contain circular references, BigInt, or non-serializable values.`,
+          { cause: err }
         );
       }
       const maxRequestSize = options.maxRequestSize ?? DEFAULT_MAX_REQUEST_SIZE;
@@ -893,8 +895,35 @@ function createOpenApiTool(openapiTool, options, logger) {
         method: openapiTool.metadata.method.toUpperCase(),
         headers,
         body: serializedBody,
-        signal: controller.signal
+        signal: controller.signal,
+        // SECURITY (GHSA-qh67-4345-cw2q): never auto-follow redirects. `fetch` defaults to
+        // `redirect: 'follow'`, which re-sends the request to a destination the UPSTREAM
+        // chose, not the operator. Only `baseUrl` is validated, and only for its scheme, so
+        // a 3xx is an unvalidated hop — to a cloud metadata address or an RFC1918 host.
+        // undici also strips only `Authorization` and `Cookie` across origins and forwards
+        // custom headers, which is exactly how this adapter injects API keys, so following
+        // hands the backend credential to the redirect target. `manual` makes the 3xx
+        // visible here so it can be refused instead of chased.
+        redirect: "manual"
       });
+      if (isRedirectResponse(response)) {
+        logger.warn(`[${openapiTool.name}] upstream returned a redirect; not followed`, {
+          status: response.status
+        });
+        return {
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify({
+                status: response.status,
+                error: `Upstream returned a redirect (${response.status}); not followed to protect injected credentials.`
+              })
+            }
+          ],
+          isError: true,
+          _meta: { status: response.status, errorCode: "OPENAPI_REDIRECT_NOT_FOLLOWED" }
+        };
+      }
       const apiResponse = await parseResponse(response, { maxResponseSize: options.maxResponseSize });
       let transformedData = apiResponse.data;
       if (postToolTransform) {
@@ -982,7 +1011,7 @@ async function safeInject(transform, ctx, timeoutMs = DEFAULT_TRANSFORM_TIMEOUT_
     return result;
   } catch (err) {
     const errorMessage = err instanceof Error ? err.message : String(err);
-    throw new Error(`Input transform for '${transform.inputKey}' failed: ${errorMessage}`);
+    throw new Error(`Input transform for '${transform.inputKey}' failed: ${errorMessage}`, { cause: err });
   } finally {
     if (timeoutId !== void 0) {
       clearTimeout(timeoutId);

package/esm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/adapters",
-  "version": "1.7.2",
+  "version": "1.8.1",
   "description": "Adapters for the FrontMCP framework",
   "author": "AgentFront <info@agentfront.dev>",
   "homepage": "https://docs.agentfront.dev",
@@ -64,15 +64,15 @@
     "node": ">=24.0.0"
   },
   "dependencies": {
-    "@frontmcp/auth": "1.7.2",
-    "@frontmcp/di": "1.7.2",
-    "@frontmcp/sdk": "1.7.2",
-    "@frontmcp/utils": "1.7.2",
+    "@frontmcp/auth": "1.8.1",
+    "@frontmcp/di": "1.8.1",
+    "@frontmcp/sdk": "1.8.1",
+    "@frontmcp/utils": "1.8.1",
     "js-yaml": "^4.1.0",
-    "mcp-from-openapi": "2.5.1",
+    "mcp-from-openapi": "2.8.0",
     "openapi-types": "^12.1.3"
   },
   "peerDependencies": {
-    "@frontmcp/lazy-zod": "1.7.2"
+    "@frontmcp/lazy-zod": "1.8.1"
   }
 }

package/esm/skills/index.mjs

@@ -769,7 +769,7 @@ var NpmSource = class {
 };
 
 // libs/adapters/src/skills/sources/saas-pull.source.ts
-import { dirname, ensureDir, pathResolve, readFile, writeFile } from "@frontmcp/utils";
+import { dirname, ensureDir, isRedirectResponse, pathResolve, readFile, writeFile } from "@frontmcp/utils";
 var DEFAULT_CACHE_DIR = ".frontmcp/skilled-openapi";
 var DEFAULT_PULL_TIMEOUT_MS = 3e4;
 var SaasPullSource = class {
@@ -807,7 +807,8 @@ var SaasPullSource = class {
         bundle = await this.loadCache();
         if (!bundle) {
           throw new Error(
-            `[saas-source] initial pull failed and no cached bundle is available at ${this.cachePath()}: ${e.message}`
+            `[saas-source] initial pull failed and no cached bundle is available at ${this.cachePath()}: ${e.message}`,
+            { cause: e }
           );
         }
         this.logger.warn(`[saas-source] using cached bundle "${bundle.bundleId}@${bundle.version}"`);
@@ -882,7 +883,10 @@ var SaasPullSource = class {
     const controller = new AbortController();
     const timer = setTimeout(() => controller.abort(), DEFAULT_PULL_TIMEOUT_MS);
     try {
-      const res = await fetch(url, { method: "GET", headers, signal: controller.signal });
+      const res = await fetch(url, { method: "GET", headers, signal: controller.signal, redirect: "manual" });
+      if (isRedirectResponse(res)) {
+        throw new Error(`pull endpoint returned a redirect (${res.status}); not followed to protect the bearer token`);
+      }
       const body = await res.text();
       return { status: res.status, body };
     } finally {

package/index.js

@@ -398,6 +398,7 @@ Solutions:
 // libs/adapters/src/openapi/openapi.tool.ts
 var import_lazy_zod2 = require("@frontmcp/lazy-zod");
 var import_sdk3 = require("@frontmcp/sdk");
+var import_utils3 = require("@frontmcp/utils");
 
 // libs/adapters/src/openapi/openapi.frontmcp-schema.ts
 var import_lazy_zod = require("@frontmcp/lazy-zod");
@@ -888,7 +889,7 @@ function createOpenApiTool(openapiTool, options, logger) {
         }
       } catch (err) {
         const errorMessage = err instanceof Error ? err.message : String(err);
-        throw new Error(`headersMapper failed for tool '${openapiTool.name}': ${errorMessage}`);
+        throw new Error(`headersMapper failed for tool '${openapiTool.name}': ${errorMessage}`, { cause: err });
       }
     }
     let finalBody = requestBody;
@@ -897,7 +898,7 @@ function createOpenApiTool(openapiTool, options, logger) {
         finalBody = options.bodyMapper(ctx, requestBody);
       } catch (err) {
         const errorMessage = err instanceof Error ? err.message : String(err);
-        throw new Error(`bodyMapper failed for tool '${openapiTool.name}': ${errorMessage}`);
+        throw new Error(`bodyMapper failed for tool '${openapiTool.name}': ${errorMessage}`, { cause: err });
       }
     }
     if (finalBody && !headers.has("content-type")) {
@@ -910,7 +911,8 @@ function createOpenApiTool(openapiTool, options, logger) {
       } catch (err) {
         const errorMessage = err instanceof Error ? err.message : String(err);
         throw new Error(
-          `Failed to serialize request body for tool '${openapiTool.name}': ${errorMessage}. Body may contain circular references, BigInt, or non-serializable values.`
+          `Failed to serialize request body for tool '${openapiTool.name}': ${errorMessage}. Body may contain circular references, BigInt, or non-serializable values.`,
+          { cause: err }
         );
       }
       const maxRequestSize = options.maxRequestSize ?? DEFAULT_MAX_REQUEST_SIZE;
@@ -928,8 +930,35 @@ function createOpenApiTool(openapiTool, options, logger) {
         method: openapiTool.metadata.method.toUpperCase(),
         headers,
         body: serializedBody,
-        signal: controller.signal
+        signal: controller.signal,
+        // SECURITY (GHSA-qh67-4345-cw2q): never auto-follow redirects. `fetch` defaults to
+        // `redirect: 'follow'`, which re-sends the request to a destination the UPSTREAM
+        // chose, not the operator. Only `baseUrl` is validated, and only for its scheme, so
+        // a 3xx is an unvalidated hop — to a cloud metadata address or an RFC1918 host.
+        // undici also strips only `Authorization` and `Cookie` across origins and forwards
+        // custom headers, which is exactly how this adapter injects API keys, so following
+        // hands the backend credential to the redirect target. `manual` makes the 3xx
+        // visible here so it can be refused instead of chased.
+        redirect: "manual"
       });
+      if ((0, import_utils3.isRedirectResponse)(response)) {
+        logger.warn(`[${openapiTool.name}] upstream returned a redirect; not followed`, {
+          status: response.status
+        });
+        return {
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify({
+                status: response.status,
+                error: `Upstream returned a redirect (${response.status}); not followed to protect injected credentials.`
+              })
+            }
+          ],
+          isError: true,
+          _meta: { status: response.status, errorCode: "OPENAPI_REDIRECT_NOT_FOLLOWED" }
+        };
+      }
       const apiResponse = await parseResponse(response, { maxResponseSize: options.maxResponseSize });
       let transformedData = apiResponse.data;
       if (postToolTransform) {
@@ -1017,7 +1046,7 @@ async function safeInject(transform, ctx, timeoutMs = DEFAULT_TRANSFORM_TIMEOUT_
     return result;
   } catch (err) {
     const errorMessage = err instanceof Error ? err.message : String(err);
-    throw new Error(`Input transform for '${transform.inputKey}' failed: ${errorMessage}`);
+    throw new Error(`Input transform for '${transform.inputKey}' failed: ${errorMessage}`, { cause: err });
   } finally {
     if (timeoutId !== void 0) {
       clearTimeout(timeoutId);

package/openapi/index.js

@@ -398,6 +398,7 @@ Solutions:
 // libs/adapters/src/openapi/openapi.tool.ts
 var import_lazy_zod2 = require("@frontmcp/lazy-zod");
 var import_sdk3 = require("@frontmcp/sdk");
+var import_utils3 = require("@frontmcp/utils");
 
 // libs/adapters/src/openapi/openapi.frontmcp-schema.ts
 var import_lazy_zod = require("@frontmcp/lazy-zod");
@@ -888,7 +889,7 @@ function createOpenApiTool(openapiTool, options, logger) {
         }
       } catch (err) {
         const errorMessage = err instanceof Error ? err.message : String(err);
-        throw new Error(`headersMapper failed for tool '${openapiTool.name}': ${errorMessage}`);
+        throw new Error(`headersMapper failed for tool '${openapiTool.name}': ${errorMessage}`, { cause: err });
       }
     }
     let finalBody = requestBody;
@@ -897,7 +898,7 @@ function createOpenApiTool(openapiTool, options, logger) {
         finalBody = options.bodyMapper(ctx, requestBody);
       } catch (err) {
         const errorMessage = err instanceof Error ? err.message : String(err);
-        throw new Error(`bodyMapper failed for tool '${openapiTool.name}': ${errorMessage}`);
+        throw new Error(`bodyMapper failed for tool '${openapiTool.name}': ${errorMessage}`, { cause: err });
       }
     }
     if (finalBody && !headers.has("content-type")) {
@@ -910,7 +911,8 @@ function createOpenApiTool(openapiTool, options, logger) {
       } catch (err) {
         const errorMessage = err instanceof Error ? err.message : String(err);
         throw new Error(
-          `Failed to serialize request body for tool '${openapiTool.name}': ${errorMessage}. Body may contain circular references, BigInt, or non-serializable values.`
+          `Failed to serialize request body for tool '${openapiTool.name}': ${errorMessage}. Body may contain circular references, BigInt, or non-serializable values.`,
+          { cause: err }
         );
       }
       const maxRequestSize = options.maxRequestSize ?? DEFAULT_MAX_REQUEST_SIZE;
@@ -928,8 +930,35 @@ function createOpenApiTool(openapiTool, options, logger) {
         method: openapiTool.metadata.method.toUpperCase(),
         headers,
         body: serializedBody,
-        signal: controller.signal
+        signal: controller.signal,
+        // SECURITY (GHSA-qh67-4345-cw2q): never auto-follow redirects. `fetch` defaults to
+        // `redirect: 'follow'`, which re-sends the request to a destination the UPSTREAM
+        // chose, not the operator. Only `baseUrl` is validated, and only for its scheme, so
+        // a 3xx is an unvalidated hop — to a cloud metadata address or an RFC1918 host.
+        // undici also strips only `Authorization` and `Cookie` across origins and forwards
+        // custom headers, which is exactly how this adapter injects API keys, so following
+        // hands the backend credential to the redirect target. `manual` makes the 3xx
+        // visible here so it can be refused instead of chased.
+        redirect: "manual"
       });
+      if ((0, import_utils3.isRedirectResponse)(response)) {
+        logger.warn(`[${openapiTool.name}] upstream returned a redirect; not followed`, {
+          status: response.status
+        });
+        return {
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify({
+                status: response.status,
+                error: `Upstream returned a redirect (${response.status}); not followed to protect injected credentials.`
+              })
+            }
+          ],
+          isError: true,
+          _meta: { status: response.status, errorCode: "OPENAPI_REDIRECT_NOT_FOLLOWED" }
+        };
+      }
       const apiResponse = await parseResponse(response, { maxResponseSize: options.maxResponseSize });
       let transformedData = apiResponse.data;
       if (postToolTransform) {
@@ -1017,7 +1046,7 @@ async function safeInject(transform, ctx, timeoutMs = DEFAULT_TRANSFORM_TIMEOUT_
     return result;
   } catch (err) {
     const errorMessage = err instanceof Error ? err.message : String(err);
-    throw new Error(`Input transform for '${transform.inputKey}' failed: ${errorMessage}`);
+    throw new Error(`Input transform for '${transform.inputKey}' failed: ${errorMessage}`, { cause: err });
   } finally {
     if (timeoutId !== void 0) {
       clearTimeout(timeoutId);

package/openapi/openapi.tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openapi.tool.d.ts","sourceRoot":"","sources":["../../src/openapi/openapi.tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGvD,OAAO,EAAQ,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAI1D,OAAO,KAAK,EAIV,qBAAqB,EAEtB,MAAM,iBAAiB,CAAC;AAMzB;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,cAAc,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,cAAc,cA+QpH"}
+{"version":3,"file":"openapi.tool.d.ts","sourceRoot":"","sources":["../../src/openapi/openapi.tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGvD,OAAO,EAAQ,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAK1D,OAAO,KAAK,EAIV,qBAAqB,EAEtB,MAAM,iBAAiB,CAAC;AAMzB;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,cAAc,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,cAAc,cA8SpH"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frontmcp/adapters",
-  "version": "1.7.2",
+  "version": "1.8.1",
   "description": "Adapters for the FrontMCP framework",
   "author": "AgentFront <info@agentfront.dev>",
   "homepage": "https://docs.agentfront.dev",
@@ -64,15 +64,15 @@
     "node": ">=24.0.0"
   },
   "dependencies": {
-    "@frontmcp/auth": "1.7.2",
-    "@frontmcp/di": "1.7.2",
-    "@frontmcp/sdk": "1.7.2",
-    "@frontmcp/utils": "1.7.2",
+    "@frontmcp/auth": "1.8.1",
+    "@frontmcp/di": "1.8.1",
+    "@frontmcp/sdk": "1.8.1",
+    "@frontmcp/utils": "1.8.1",
     "js-yaml": "^4.1.0",
-    "mcp-from-openapi": "2.5.1",
+    "mcp-from-openapi": "2.8.0",
     "openapi-types": "^12.1.3"
   },
   "peerDependencies": {
-    "@frontmcp/lazy-zod": "1.7.2"
+    "@frontmcp/lazy-zod": "1.8.1"
   }
 }

package/skills/index.js

@@ -905,7 +905,8 @@ var SaasPullSource = class {
         bundle = await this.loadCache();
         if (!bundle) {
           throw new Error(
-            `[saas-source] initial pull failed and no cached bundle is available at ${this.cachePath()}: ${e.message}`
+            `[saas-source] initial pull failed and no cached bundle is available at ${this.cachePath()}: ${e.message}`,
+            { cause: e }
           );
         }
         this.logger.warn(`[saas-source] using cached bundle "${bundle.bundleId}@${bundle.version}"`);
@@ -980,7 +981,10 @@ var SaasPullSource = class {
     const controller = new AbortController();
     const timer = setTimeout(() => controller.abort(), DEFAULT_PULL_TIMEOUT_MS);
     try {
-      const res = await fetch(url, { method: "GET", headers, signal: controller.signal });
+      const res = await fetch(url, { method: "GET", headers, signal: controller.signal, redirect: "manual" });
+      if ((0, import_utils.isRedirectResponse)(res)) {
+        throw new Error(`pull endpoint returned a redirect (${res.status}); not followed to protect the bearer token`);
+      }
       const body = await res.text();
       return { status: res.status, body };
     } finally {

package/skills/sources/saas-pull.source.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"saas-pull.source.d.ts","sourceRoot":"","sources":["../../../src/skills/sources/saas-pull.source.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAGpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAKjH;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,cAAe,YAAW,iBAAiB;IASpD,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAXvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB,OAAO,CAAC,SAAS,CAAmC;IACpD,OAAO,CAAC,UAAU,CAA6B;IAC/C,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,OAAO,CAAS;gBAGL,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,MAAM,EAAE,cAAc,EACtB,IAAI,GAAE,gBAAqB;IAKxC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAoC5B,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,GAAG,MAAM,IAAI;IAO9C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAS3B,OAAO,CAAC,YAAY;IAcpB;;;;;;OAMG;IACG,OAAO,IAAI,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC;YAatC,QAAQ;cAqBN,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;YAgBlG,SAAS;IAiBvB,OAAO,CAAC,SAAS;YAKH,YAAY;YAeZ,SAAS;IAkBvB,OAAO,CAAC,MAAM;CASf"}
+{"version":3,"file":"saas-pull.source.d.ts","sourceRoot":"","sources":["../../../src/skills/sources/saas-pull.source.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAGpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAKjH;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,cAAe,YAAW,iBAAiB;IASpD,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAXvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB,OAAO,CAAC,SAAS,CAAmC;IACpD,OAAO,CAAC,UAAU,CAA6B;IAC/C,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,OAAO,CAAS;gBAGL,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,MAAM,EAAE,cAAc,EACtB,IAAI,GAAE,gBAAqB;IAKxC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAqC5B,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,GAAG,MAAM,IAAI;IAO9C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAS3B,OAAO,CAAC,YAAY;IAcpB;;;;;;OAMG;IACG,OAAO,IAAI,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC;YAatC,QAAQ;cAqBN,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;YAoBlG,SAAS;IAiBvB,OAAO,CAAC,SAAS;YAKH,YAAY;YAeZ,SAAS;IAkBvB,OAAO,CAAC,MAAM;CASf"}