@grackle-ai/core 0.133.1 → 0.134.0

package/dist/credential-bundle.d.ts

@@ -15,6 +15,13 @@ export interface TokenItem {
     filePath?: string;
     /** The credential value. */
     value: string;
+    /**
+     * The credential-provider block that materialized this token. Server-internal
+     * source tag used by {@link findUnsatisfiedNeeds} to decide whether a runtime's
+     * advertised needs are met; it is **never delivered** over the wire (the
+     * `authenticate` mapper picks only `name`/`type`/`envVar`/`filePath`/`value`).
+     */
+    provider?: keyof CredentialProviderConfig;
 }
 /** A bundle of tokens — the return shape of {@link buildProviderTokenBundle}. */
 export interface ProviderTokenBundle {
@@ -68,6 +75,61 @@ export interface ProtectedResourceDescriptor {
  * materializes the actual secret values.
  */
 export declare function deriveCredentialNeeds(runtime: string, config: CredentialProviderConfig): ProtectedResourceDescriptor[];
+/**
+ * The expiry state of a credential, as far as is knowable from a purely offline
+ * inspection of a credential file. Only the OAuth-file providers (Claude
+ * subscription, Codex) carry an embedded, parseable expiry; for every other
+ * credential kind (API keys, GitHub/Copilot/Goose tokens) expiry is not knowable
+ * offline and inspection returns `"unknown"`.
+ *
+ * - `valid` — present and not past expiry.
+ * - `expired-recoverable` — past expiry but a refresh token is present, so the
+ *   runtime transparently refreshes it on launch (not a spawn blocker).
+ * - `expired-unrecoverable` — past expiry with no refresh token; re-login required
+ *   (the genuine "will 401 deep in the runtime" case worth failing fast on).
+ * - `unknown` — expiry is not offline-knowable, or the file shape is unexpected
+ *   (fail open: never treated as a blocker).
+ */
+export type CredentialExpiryState = "valid" | "expired-recoverable" | "expired-unrecoverable" | "unknown";
+/**
+ * Determine the offline-knowable {@link CredentialExpiryState} of a materialized
+ * credential {@link TokenItem}. Only OAuth-file tokens (`claude-credentials`,
+ * `codex-auth`) carry a parseable expiry; every other token returns `"unknown"`
+ * because expiry is not derivable without a network call. Pure; fails open.
+ */
+export declare function inspectFileCredentialExpiry(token: TokenItem, now: number): CredentialExpiryState;
+/** A credential need that the materialized bundle does not satisfy, with the reason. */
+export interface UnsatisfiedNeed {
+    /** The advertised need that is not met. */
+    need: ProtectedResourceDescriptor;
+    /** Why the need is unmet: no credential at all, or an expired non-refreshable one. */
+    reason: "missing" | "expired";
+}
+/**
+ * Cross-check a runtime's advertised {@link ProtectedResourceDescriptor needs}
+ * against the credentials a {@link buildProviderTokenBundle} actually materialized,
+ * returning the needs that are not satisfied. A need is unsatisfied when:
+ *
+ * - **missing** — the bundle contains no token tagged for the need's provider, or
+ * - **expired** — the provider materialized credential(s) but **every** one is an
+ *   expired OAuth file with no refresh token (re-login required).
+ *
+ * A token counts as usable unless it is `expired-unrecoverable` — a refreshable
+ * expiry (the runtime refreshes on launch) and an `unknown`-expiry token (e.g. an
+ * API key, whose expiry is not offline-knowable) both satisfy the need. So when a
+ * provider emits more than one credential (e.g. Codex emits both `~/.codex/auth.json`
+ * *and* `OPENAI_API_KEY`), a stale OAuth file does not fail the spawn as long as a
+ * working fallback is present.
+ *
+ * Pure: derives entirely from `needs` + `bundle` + `now`, reads nothing.
+ */
+export declare function findUnsatisfiedNeeds(needs: ProtectedResourceDescriptor[], bundle: ProviderTokenBundle, now: number): UnsatisfiedNeed[];
+/**
+ * Build a human-readable, actionable pre-flight error message for credentials
+ * that are required but missing or expired — surfaced to the CLI and web before
+ * a spawn instead of as an opaque 401 deep inside the runtime.
+ */
+export declare function formatPreflightCredentialError(runtime: string, unsatisfied: UnsatisfiedNeed[]): string;
 /**
  * Resolve a GitHub token from the `gh` CLI's credential store.
  * Returns `undefined` if the CLI is unavailable, not authenticated, or errors.

package/dist/credential-bundle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credential-bundle.d.ts","sourceRoot":"","sources":["../src/credential-bundle.ts"],"names":[],"mappings":"AAaA,OAAO,EAGL,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAG9B;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAC;CACf;AAED,iFAAiF;AACjF,MAAM,WAAW,mBAAmB;IAClC,wEAAwE;IACxE,MAAM,EAAE,SAAS,EAAE,CAAC;CACrB;AAOD;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,MAAM,wBAAwB,CAAC,EAAE,CAUhF,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,aAAa,GAAG,yBAAyB,GAAG,cAAc,CAAC;AAExF;;;;;GAKG;AACH,MAAM,WAAW,2BAA2B;IAC1C,qDAAqD;IACrD,QAAQ,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,mFAAmF;IACnF,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,oEAAoE;IACpE,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B;;;;;OAKG;IACH,eAAe,EAAE,cAAc,EAAE,CAAC;IAClC,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,wBAAwB,CAAC;CAC1C;AAqFD;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,wBAAwB,GAC/B,2BAA2B,EAAE,CAY/B;AAKD;;;;GAIG;AACH,wBAAsB,yBAAyB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAO7E;AAED;;;;;;;;;GASG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,CAAC,EAAE,MAAM,EAChB,QAAQ,CAAC,EAAE,gBAAgB,EAC3B,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,mBAAmB,CAAC,CA2Q9B"}
+{"version":3,"file":"credential-bundle.d.ts","sourceRoot":"","sources":["../src/credential-bundle.ts"],"names":[],"mappings":"AAaA,OAAO,EAGL,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAG9B;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,wBAAwB,CAAC;CAC3C;AAED,iFAAiF;AACjF,MAAM,WAAW,mBAAmB;IAClC,wEAAwE;IACxE,MAAM,EAAE,SAAS,EAAE,CAAC;CACrB;AAOD;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,MAAM,wBAAwB,CAAC,EAAE,CAUhF,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,aAAa,GAAG,yBAAyB,GAAG,cAAc,CAAC;AAExF;;;;;GAKG;AACH,MAAM,WAAW,2BAA2B;IAC1C,qDAAqD;IACrD,QAAQ,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,mFAAmF;IACnF,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,oEAAoE;IACpE,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B;;;;;OAKG;IACH,eAAe,EAAE,cAAc,EAAE,CAAC;IAClC,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,wBAAwB,CAAC;CAC1C;AAqFD;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,wBAAwB,GAC/B,2BAA2B,EAAE,CAY/B;AAOD;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,qBAAqB,GAC7B,OAAO,GACP,qBAAqB,GACrB,uBAAuB,GACvB,SAAS,CAAC;AA8Ed;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,qBAAqB,CAehG;AAED,wFAAwF;AACxF,MAAM,WAAW,eAAe;IAC9B,2CAA2C;IAC3C,IAAI,EAAE,2BAA2B,CAAC;IAClC,sFAAsF;IACtF,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;CAC/B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,2BAA2B,EAAE,EACpC,MAAM,EAAE,mBAAmB,EAC3B,GAAG,EAAE,MAAM,GACV,eAAe,EAAE,CAenB;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,eAAe,EAAE,GAC7B,MAAM,CAYR;AAKD;;;;GAIG;AACH,wBAAsB,yBAAyB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAO7E;AAED;;;;;;;;;GASG;AACH,wBAAsB,wBAAwB,CAC5C,OAAO,CAAC,EAAE,MAAM,EAChB,QAAQ,CAAC,EAAE,gBAAgB,EAC3B,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,mBAAmB,CAAC,CAwR9B"}

package/dist/credential-bundle.js

@@ -133,6 +133,157 @@ export function deriveCredentialNeeds(runtime, config) {
     }
     return needs;
 }
+// ─── Pre-flight credential validation (#1316) ──────────────
+/** Clock-skew buffer: treat a credential expiring within this window as already expired. */
+const CREDENTIAL_EXPIRY_SKEW_MS = 60_000;
+/**
+ * Decode a JWT payload **without verifying its signature**, returning the parsed
+ * claims or `undefined` when the token is not a well-formed three-segment JWT.
+ * Offline only — we trust the locally stored file and only read the `exp` claim.
+ */
+function decodeJwtPayload(token) {
+    const segments = token.split(".");
+    if (segments.length !== 3) {
+        return undefined;
+    }
+    try {
+        const json = Buffer.from(segments[1], "base64url").toString("utf-8");
+        const parsed = JSON.parse(json);
+        return typeof parsed === "object" && parsed !== null
+            ? parsed
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Inspect a Claude subscription credentials file (`~/.claude/.credentials.json`):
+ * the OAuth access token's `expiresAt` is a unix-ms timestamp sibling to a
+ * `refreshToken`. Fails open (`"unknown"`) on any unexpected shape.
+ */
+function inspectClaudeCredentials(value, now) {
+    let oauth;
+    try {
+        // A non-object parse (`null`, a primitive) throws on property access and is
+        // caught below, yielding "unknown" — exactly the fail-open behavior we want.
+        const parsed = JSON.parse(value);
+        oauth = parsed.claudeAiOauth;
+    }
+    catch {
+        return "unknown";
+    }
+    if (!oauth || typeof oauth.accessToken !== "string" || typeof oauth.expiresAt !== "number") {
+        return "unknown";
+    }
+    if (oauth.expiresAt >= now + CREDENTIAL_EXPIRY_SKEW_MS) {
+        return "valid";
+    }
+    return typeof oauth.refreshToken === "string" && oauth.refreshToken.length > 0
+        ? "expired-recoverable"
+        : "expired-unrecoverable";
+}
+/**
+ * Inspect a Codex auth file (`~/.codex/auth.json`): `tokens.access_token` is a
+ * JWT whose `exp` claim (unix seconds) carries the expiry, sibling to a
+ * `refresh_token`. Fails open (`"unknown"`) on any unexpected shape — the token
+ * format is owned by the Codex runtime and may drift.
+ */
+function inspectCodexAuth(value, now) {
+    let tokens;
+    try {
+        const parsed = JSON.parse(value);
+        tokens = parsed.tokens;
+    }
+    catch {
+        return "unknown";
+    }
+    if (!tokens || typeof tokens.access_token !== "string") {
+        return "unknown";
+    }
+    const exp = decodeJwtPayload(tokens.access_token)?.exp;
+    if (typeof exp !== "number") {
+        return "unknown";
+    }
+    if (exp * 1000 >= now + CREDENTIAL_EXPIRY_SKEW_MS) {
+        return "valid";
+    }
+    return typeof tokens.refresh_token === "string" && tokens.refresh_token.length > 0
+        ? "expired-recoverable"
+        : "expired-unrecoverable";
+}
+/**
+ * Determine the offline-knowable {@link CredentialExpiryState} of a materialized
+ * credential {@link TokenItem}. Only OAuth-file tokens (`claude-credentials`,
+ * `codex-auth`) carry a parseable expiry; every other token returns `"unknown"`
+ * because expiry is not derivable without a network call. Pure; fails open.
+ */
+export function inspectFileCredentialExpiry(token, now) {
+    if (token.type !== "file") {
+        return "unknown";
+    }
+    switch (token.name) {
+        case "claude-credentials": {
+            return inspectClaudeCredentials(token.value, now);
+        }
+        case "codex-auth": {
+            return inspectCodexAuth(token.value, now);
+        }
+        default: {
+            return "unknown";
+        }
+    }
+}
+/**
+ * Cross-check a runtime's advertised {@link ProtectedResourceDescriptor needs}
+ * against the credentials a {@link buildProviderTokenBundle} actually materialized,
+ * returning the needs that are not satisfied. A need is unsatisfied when:
+ *
+ * - **missing** — the bundle contains no token tagged for the need's provider, or
+ * - **expired** — the provider materialized credential(s) but **every** one is an
+ *   expired OAuth file with no refresh token (re-login required).
+ *
+ * A token counts as usable unless it is `expired-unrecoverable` — a refreshable
+ * expiry (the runtime refreshes on launch) and an `unknown`-expiry token (e.g. an
+ * API key, whose expiry is not offline-knowable) both satisfy the need. So when a
+ * provider emits more than one credential (e.g. Codex emits both `~/.codex/auth.json`
+ * *and* `OPENAI_API_KEY`), a stale OAuth file does not fail the spawn as long as a
+ * working fallback is present.
+ *
+ * Pure: derives entirely from `needs` + `bundle` + `now`, reads nothing.
+ */
+export function findUnsatisfiedNeeds(needs, bundle, now) {
+    const unsatisfied = [];
+    for (const need of needs) {
+        const tokens = bundle.tokens.filter((t) => t.provider === need.provider);
+        if (tokens.length === 0) {
+            unsatisfied.push({ need, reason: "missing" });
+            continue;
+        }
+        // Report expired only when there is no usable credential — i.e. every token
+        // for the provider is an expired, non-refreshable OAuth file.
+        if (tokens.every((t) => inspectFileCredentialExpiry(t, now) === "expired-unrecoverable")) {
+            unsatisfied.push({ need, reason: "expired" });
+        }
+    }
+    return unsatisfied;
+}
+/**
+ * Build a human-readable, actionable pre-flight error message for credentials
+ * that are required but missing or expired — surfaced to the CLI and web before
+ * a spawn instead of as an opaque 401 deep inside the runtime.
+ */
+export function formatPreflightCredentialError(runtime, unsatisfied) {
+    const lines = unsatisfied.map(({ need, reason }) => {
+        const subject = `${need.resourceName} (provider "${need.provider}")`;
+        return reason === "missing"
+            ? `  • ${subject}: enabled but no credential was found`
+            : `  • ${subject}: login expired and cannot be refreshed — re-login required`;
+    });
+    return (`Cannot start runtime "${runtime}": required credential(s) unavailable.\n` +
+        `${lines.join("\n")}\n` +
+        `Configure or disable the provider with \`grackle credential-provider set <provider> <value>\`, then retry.`);
+}
 /** Timeout for the `gh auth token` subprocess call. */
 const GH_AUTH_TOKEN_TIMEOUT_MS = 5_000;
 /**
@@ -190,6 +341,7 @@ export async function buildProviderTokenBundle(runtime, database, githubAccountI
                     type: "file",
                     filePath: "~/.claude/.credentials.json",
                     value,
+                    provider: "claude",
                 }));
             }
         }
@@ -202,6 +354,7 @@ export async function buildProviderTokenBundle(runtime, database, githubAccountI
                 type: "env_var",
                 envVar: "ANTHROPIC_API_KEY",
                 value: apiKey,
+                provider: "claude",
             }));
         }
     }
@@ -219,6 +372,7 @@ export async function buildProviderTokenBundle(runtime, database, githubAccountI
                 type: "env_var",
                 envVar: "GH_TOKEN",
                 value: storedToken,
+                provider: "github",
             }));
         }
         else {
@@ -233,6 +387,7 @@ export async function buildProviderTokenBundle(runtime, database, githubAccountI
                         type: "env_var",
                         envVar: varName,
                         value,
+                        provider: "github",
                     }));
                 }
             }
@@ -247,6 +402,7 @@ export async function buildProviderTokenBundle(runtime, database, githubAccountI
                         type: "env_var",
                         envVar: "GITHUB_TOKEN",
                         value: cliToken,
+                        provider: "github",
                     }));
                 }
             }
@@ -267,6 +423,7 @@ export async function buildProviderTokenBundle(runtime, database, githubAccountI
                     type: "file",
                     filePath: "~/.copilot/config.json",
                     value,
+                    provider: "copilot",
                 }));
             }
         }
@@ -287,6 +444,7 @@ export async function buildProviderTokenBundle(runtime, database, githubAccountI
                     type: "env_var",
                     envVar: varName,
                     value,
+                    provider: "copilot",
                 }));
             }
         }
@@ -306,6 +464,7 @@ export async function buildProviderTokenBundle(runtime, database, githubAccountI
                         type: "env_var",
                         envVar: envVarName,
                         value: envToken,
+                        provider: "copilot",
                     }));
                 }
             }
@@ -317,6 +476,7 @@ export async function buildProviderTokenBundle(runtime, database, githubAccountI
                         type: "env_var",
                         envVar: "GITHUB_TOKEN",
                         value: cliToken,
+                        provider: "copilot",
                     }));
                 }
             }
@@ -334,6 +494,7 @@ export async function buildProviderTokenBundle(runtime, database, githubAccountI
                     type: "file",
                     filePath: "~/.codex/auth.json",
                     value,
+                    provider: "codex",
                 }));
             }
         }
@@ -344,6 +505,7 @@ export async function buildProviderTokenBundle(runtime, database, githubAccountI
                 type: "env_var",
                 envVar: "OPENAI_API_KEY",
                 value: openaiKey,
+                provider: "codex",
             }));
         }
     }
@@ -365,6 +527,7 @@ export async function buildProviderTokenBundle(runtime, database, githubAccountI
                     type: "file",
                     filePath: gooseConfigFilePath,
                     value,
+                    provider: "goose",
                 }));
             }
         }
@@ -382,6 +545,7 @@ export async function buildProviderTokenBundle(runtime, database, githubAccountI
                     type: "env_var",
                     envVar: varName,
                     value,
+                    provider: "goose",
                 }));
             }
         }

package/dist/credential-bundle.js.map

@@ -1 +1 @@
-{"version":3,"file":"credential-bundle.js","sourceRoot":"","sources":["../src/credential-bundle.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EACL,mBAAmB,EACnB,kBAAkB,GAGnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AA0BvC,mFAAmF;AACnF,SAAS,SAAS,CAAC,IAAe;IAChC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAuD;IACnF,aAAa,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;IACnC,OAAO,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;IAC9B,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;IAC1B,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;IAC1B,IAAI,EAAE,EAAE;IACR,uFAAuF;IACvF,iBAAiB,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;IACvC,WAAW,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;IAChC,aAAa,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;CACrC,CAAC;AAmCF;;;;GAIG;AACH,SAAS,oBAAoB,CAC3B,QAAwC,EACxC,MAAgC;IAEhC,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC5B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,2BAA2B;gBACrC,YAAY,EAAE,eAAe;gBAC7B,oBAAoB,EAAE,EAAE;gBACxB,eAAe,EAAE,EAAE;gBACnB,eAAe,EAAE;oBACf,MAAM,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,aAAa;iBAC7E;gBACD,QAAQ,EAAE,QAAQ;aACnB,CAAC;QACJ,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBAC3B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,wBAAwB;gBAClC,YAAY,EAAE,QAAQ;gBACtB,oBAAoB,EAAE,EAAE;gBACxB,eAAe,EAAE,EAAE;gBACnB,eAAe,EAAE,CAAC,aAAa,CAAC;gBAChC,QAAQ,EAAE,QAAQ;aACnB,CAAC;QACJ,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;gBAC5B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,+BAA+B;gBACzC,YAAY,EAAE,gBAAgB;gBAC9B,oBAAoB,EAAE,EAAE;gBACxB,eAAe,EAAE,EAAE;gBACnB,eAAe,EAAE,CAAC,yBAAyB,EAAE,aAAa,CAAC;gBAC3D,QAAQ,EAAE,SAAS;aACpB,CAAC;QACJ,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC1B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,wBAAwB;gBAClC,YAAY,EAAE,QAAQ;gBACtB,oBAAoB,EAAE,EAAE;gBACxB,eAAe,EAAE,EAAE;gBACnB,eAAe,EAAE,CAAC,yBAAyB,EAAE,aAAa,CAAC;gBAC3D,QAAQ,EAAE,OAAO;aAClB,CAAC;QACJ,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC1B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,+BAA+B;gBACzC,YAAY,EAAE,OAAO;gBACrB,oBAAoB,EAAE,EAAE;gBACxB,eAAe,EAAE,EAAE;gBACnB,eAAe,EAAE,CAAC,yBAAyB,EAAE,aAAa,CAAC;gBAC3D,QAAQ,EAAE,OAAO;aAClB,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAe,EACf,MAAgC;IAEhC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,OAAO,CAAC;QACzD,CAAC,CAAC,iBAAiB,CAAC,OAAsB,CAAC;QAC3C,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,KAAK,GAAkC,EAAE,CAAC;IAChD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,oBAAoB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC1D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,uDAAuD;AACvD,MAAM,wBAAwB,GAAW,KAAK,CAAC;AAE/C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB;IAC7C,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC;QAC9F,OAAO,MAAM,IAAI,SAAS,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAgB,EAChB,QAA2B,EAC3B,eAAwB;IAExB,MAAM,MAAM,GAAG,mBAAmB,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACpE,oGAAoG;IACpG,MAAM,gBAAgB,GACpB,OAAO,KAAK,SAAS;QACnB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,OAAO,CAAC;YACzC,CAAC,CAAC,iBAAiB,CAAC,OAAsB,CAAC;YAC3C,CAAC,CAAC,EAAE;QACN,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,gBAAgB,GAAG,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChG,MAAM,KAAK,GAAgB,EAAE,CAAC;IAE9B,iFAAiF;IACjF,6EAA6E;IAC7E,8EAA8E;IAC9E,IAAI,eAAwD,CAAC;IAC7D,SAAS,WAAW;QAClB,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,eAAe,GAAG,yBAAyB,EAAE,CAAC;QAChD,CAAC;QACD,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,kBAAkB;IAClB,IAAI,CAAC,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QAC9F,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;QACxE,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YACrD,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBACjB,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;oBACR,IAAI,EAAE,oBAAoB;oBAC1B,IAAI,EAAE,MAAM;oBACZ,QAAQ,EAAE,6BAA6B;oBACvC,KAAK;iBACN,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IAAI,CAAC,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChG,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAC7C,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;gBACR,IAAI,EAAE,mBAAmB;gBACzB,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,mBAAmB;gBAC3B,KAAK,EAAE,MAAM;aACd,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,kBAAkB;IAClB,IAAI,CAAC,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACpF,iFAAiF;QACjF,yEAAyE;QACzE,iDAAiD;QACjD,MAAM,WAAW,GACf,eAAe,KAAK,SAAS,IAAI,kBAAkB,CAAC,uBAAuB,EAAE,KAAK,SAAS;YACzF,CAAC,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,eAAe,IAAI,SAAS,CAAC;YAC3E,CAAC,CAAC,SAAS,CAAC;QAEhB,IAAI,WAAW,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;gBACR,IAAI,EAAE,cAAc;gBACpB,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,UAAU;gBAClB,KAAK,EAAE,WAAW;aACnB,CAAC,CACH,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,sEAAsE;YACtE,IAAI,eAAe,GAAG,KAAK,CAAC;YAC5B,KAAK,MAAM,OAAO,IAAI,CAAC,cAAc,EAAE,UAAU,CAAC,EAAE,CAAC;gBACnD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACnC,IAAI,KAAK,EAAE,CAAC;oBACV,eAAe,GAAG,IAAI,CAAC;oBACvB,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;wBACR,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;wBAC9C,IAAI,EAAE,SAAS;wBACf,MAAM,EAAE,OAAO;wBACf,KAAK;qBACN,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,mEAAmE;YACnE,0EAA0E;YAC1E,iEAAiE;YACjE,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;gBACrC,IAAI,QAAQ,EAAE,CAAC;oBACb,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;wBACR,IAAI,EAAE,cAAc;wBACpB,IAAI,EAAE,SAAS;wBACf,MAAM,EAAE,cAAc;wBACtB,KAAK,EAAE,QAAQ;qBAChB,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,2EAA2E;IAC3E,2EAA2E;IAC3E,2EAA2E;IAC3E,wDAAwD;IACxD,IAAI,CAAC,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QACtF,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;QACrE,IAAI,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,YAAY,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;YACvD,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBACjB,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;oBACR,IAAI,EAAE,gBAAgB;oBACtB,IAAI,EAAE,MAAM;oBACZ,QAAQ,EAAE,wBAAwB;oBAClC,KAAK;iBACN,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,KAAK,MAAM,OAAO,IAAI;YACpB,sBAAsB;YACtB,iBAAiB;YACjB,kBAAkB;YAClB,yBAAyB;SAC1B,EAAE,CAAC;YACF,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,OAAO,KAAK,sBAAsB,EAAE,CAAC;oBACvC,cAAc,GAAG,IAAI,CAAC;gBACxB,CAAC;gBACD,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;oBACR,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;oBAC9C,IAAI,EAAE,SAAS;oBACf,MAAM,EAAE,OAAO;oBACf,KAAK;iBACN,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,0EAA0E;QAC1E,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAC1E,4BAA4B;QAC5B,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;YAClE,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC;gBACtE,uEAAuE;gBACvE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,EAAE,CAAC;oBACtD,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;wBACR,IAAI,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;wBACjD,IAAI,EAAE,SAAS;wBACf,MAAM,EAAE,UAAU;wBAClB,KAAK,EAAE,QAAQ;qBAChB,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;gBACrC,IAAI,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,cAAc,CAAC,EAAE,CAAC;oBACtE,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;wBACR,IAAI,EAAE,cAAc;wBACpB,IAAI,EAAE,SAAS;wBACf,MAAM,EAAE,cAAc;wBACtB,KAAK,EAAE,QAAQ;qBAChB,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,6DAA6D;IAC7D,IAAI,CAAC,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAClF,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC7D,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;YACnD,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBACjB,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;oBACR,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,MAAM;oBACZ,QAAQ,EAAE,oBAAoB;oBAC9B,KAAK;iBACN,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QAC7C,IAAI,SAAS,EAAE,CAAC;YACd,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;gBACR,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,gBAAgB;gBACxB,KAAK,EAAE,SAAS;aACjB,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,6EAA6E;IAC7E,IAAI,CAAC,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAClF,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;QAC/C,MAAM,eAAe,GAAG,SAAS;YAC/B,CAAC,CAAC,IAAI,CACF,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,EAC5D,OAAO,EACP,OAAO,EACP,QAAQ,EACR,aAAa,CACd;YACH,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;QACvD,MAAM,mBAAmB,GAAG,SAAS;YACnC,CAAC,CAAC,0CAA0C;YAC5C,CAAC,CAAC,6BAA6B,CAAC;QAClC,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YACrD,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBACjB,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;oBACR,IAAI,EAAE,cAAc;oBACpB,IAAI,EAAE,MAAM;oBACZ,QAAQ,EAAE,mBAAmB;oBAC7B,KAAK;iBACN,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,KAAK,MAAM,OAAO,IAAI;YACpB,gBAAgB;YAChB,aAAa;YACb,mBAAmB;YACnB,gBAAgB;YAChB,gBAAgB;SACjB,EAAE,CAAC;YACF,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;oBACR,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;oBAC9C,IAAI,EAAE,SAAS;oBACf,MAAM,EAAE,OAAO;oBACf,KAAK;iBACN,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC"}
+{"version":3,"file":"credential-bundle.js","sourceRoot":"","sources":["../src/credential-bundle.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EACL,mBAAmB,EACnB,kBAAkB,GAGnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAiCvC,mFAAmF;AACnF,SAAS,SAAS,CAAC,IAAe;IAChC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAuD;IACnF,aAAa,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;IACnC,OAAO,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;IAC9B,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;IAC1B,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;IAC1B,IAAI,EAAE,EAAE;IACR,uFAAuF;IACvF,iBAAiB,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;IACvC,WAAW,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;IAChC,aAAa,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;CACrC,CAAC;AAmCF;;;;GAIG;AACH,SAAS,oBAAoB,CAC3B,QAAwC,EACxC,MAAgC;IAEhC,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC5B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,2BAA2B;gBACrC,YAAY,EAAE,eAAe;gBAC7B,oBAAoB,EAAE,EAAE;gBACxB,eAAe,EAAE,EAAE;gBACnB,eAAe,EAAE;oBACf,MAAM,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,aAAa;iBAC7E;gBACD,QAAQ,EAAE,QAAQ;aACnB,CAAC;QACJ,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBAC3B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,wBAAwB;gBAClC,YAAY,EAAE,QAAQ;gBACtB,oBAAoB,EAAE,EAAE;gBACxB,eAAe,EAAE,EAAE;gBACnB,eAAe,EAAE,CAAC,aAAa,CAAC;gBAChC,QAAQ,EAAE,QAAQ;aACnB,CAAC;QACJ,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;gBAC5B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,+BAA+B;gBACzC,YAAY,EAAE,gBAAgB;gBAC9B,oBAAoB,EAAE,EAAE;gBACxB,eAAe,EAAE,EAAE;gBACnB,eAAe,EAAE,CAAC,yBAAyB,EAAE,aAAa,CAAC;gBAC3D,QAAQ,EAAE,SAAS;aACpB,CAAC;QACJ,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC1B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,wBAAwB;gBAClC,YAAY,EAAE,QAAQ;gBACtB,oBAAoB,EAAE,EAAE;gBACxB,eAAe,EAAE,EAAE;gBACnB,eAAe,EAAE,CAAC,yBAAyB,EAAE,aAAa,CAAC;gBAC3D,QAAQ,EAAE,OAAO;aAClB,CAAC;QACJ,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC1B,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,+BAA+B;gBACzC,YAAY,EAAE,OAAO;gBACrB,oBAAoB,EAAE,EAAE;gBACxB,eAAe,EAAE,EAAE;gBACnB,eAAe,EAAE,CAAC,yBAAyB,EAAE,aAAa,CAAC;gBAC3D,QAAQ,EAAE,OAAO;aAClB,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAe,EACf,MAAgC;IAEhC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,OAAO,CAAC;QACzD,CAAC,CAAC,iBAAiB,CAAC,OAAsB,CAAC;QAC3C,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,KAAK,GAAkC,EAAE,CAAC;IAChD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,oBAAoB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC1D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8DAA8D;AAE9D,4FAA4F;AAC5F,MAAM,yBAAyB,GAAW,MAAM,CAAC;AAuBjD;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QAC3C,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAClD,CAAC,CAAE,MAAkC;YACrC,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,wBAAwB,CAAC,KAAa,EAAE,GAAW;IAC1D,IAAI,KAAyF,CAAC;IAC9F,IAAI,CAAC;QACH,4EAA4E;QAC5E,6EAA6E;QAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAqC,CAAC;QACrE,KAAK,GAAG,MAAM,CAAC,aAAa,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3F,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG,GAAG,yBAAyB,EAAE,CAAC;QACvD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAC5E,CAAC,CAAC,qBAAqB;QACvB,CAAC,CAAC,uBAAuB,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,KAAa,EAAE,GAAW;IAClD,IAAI,MAAuE,CAAC;IAC5E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAA+B,CAAC;QAC/D,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QACvD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,GAAG,GAAG,gBAAgB,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC;IACvD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,GAAG,GAAG,IAAI,IAAI,GAAG,GAAG,yBAAyB,EAAE,CAAC;QAClD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;QAChF,CAAC,CAAC,qBAAqB;QACvB,CAAC,CAAC,uBAAuB,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAAgB,EAAE,GAAW;IACvE,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,oBAAoB,CAAC,CAAC,CAAC;YAC1B,OAAO,wBAAwB,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,OAAO,gBAAgB,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC;AAUD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAoC,EACpC,MAA2B,EAC3B,GAAW;IAEX,MAAM,WAAW,GAAsB,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,4EAA4E;QAC5E,8DAA8D;QAC9D,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,2BAA2B,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,uBAAuB,CAAC,EAAE,CAAC;YACzF,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAC5C,OAAe,EACf,WAA8B;IAE9B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;QACjD,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,YAAY,eAAe,IAAI,CAAC,QAAQ,IAAI,CAAC;QACrE,OAAO,MAAM,KAAK,SAAS;YACzB,CAAC,CAAC,OAAO,OAAO,uCAAuC;YACvD,CAAC,CAAC,OAAO,OAAO,6DAA6D,CAAC;IAClF,CAAC,CAAC,CAAC;IACH,OAAO,CACL,yBAAyB,OAAO,0CAA0C;QAC1E,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QACvB,4GAA4G,CAC7G,CAAC;AACJ,CAAC;AAED,uDAAuD;AACvD,MAAM,wBAAwB,GAAW,KAAK,CAAC;AAE/C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB;IAC7C,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC;QAC9F,OAAO,MAAM,IAAI,SAAS,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAgB,EAChB,QAA2B,EAC3B,eAAwB;IAExB,MAAM,MAAM,GAAG,mBAAmB,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACpE,oGAAoG;IACpG,MAAM,gBAAgB,GACpB,OAAO,KAAK,SAAS;QACnB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,OAAO,CAAC;YACzC,CAAC,CAAC,iBAAiB,CAAC,OAAsB,CAAC;YAC3C,CAAC,CAAC,EAAE;QACN,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,gBAAgB,GAAG,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChG,MAAM,KAAK,GAAgB,EAAE,CAAC;IAE9B,iFAAiF;IACjF,6EAA6E;IAC7E,8EAA8E;IAC9E,IAAI,eAAwD,CAAC;IAC7D,SAAS,WAAW;QAClB,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,eAAe,GAAG,yBAAyB,EAAE,CAAC;QAChD,CAAC;QACD,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,kBAAkB;IAClB,IAAI,CAAC,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QAC9F,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;QACxE,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YACrD,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBACjB,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;oBACR,IAAI,EAAE,oBAAoB;oBAC1B,IAAI,EAAE,MAAM;oBACZ,QAAQ,EAAE,6BAA6B;oBACvC,KAAK;oBACL,QAAQ,EAAE,QAAQ;iBACnB,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IAAI,CAAC,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChG,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAC7C,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;gBACR,IAAI,EAAE,mBAAmB;gBACzB,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,mBAAmB;gBAC3B,KAAK,EAAE,MAAM;gBACb,QAAQ,EAAE,QAAQ;aACnB,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,kBAAkB;IAClB,IAAI,CAAC,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACpF,iFAAiF;QACjF,yEAAyE;QACzE,iDAAiD;QACjD,MAAM,WAAW,GACf,eAAe,KAAK,SAAS,IAAI,kBAAkB,CAAC,uBAAuB,EAAE,KAAK,SAAS;YACzF,CAAC,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,eAAe,IAAI,SAAS,CAAC;YAC3E,CAAC,CAAC,SAAS,CAAC;QAEhB,IAAI,WAAW,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;gBACR,IAAI,EAAE,cAAc;gBACpB,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,UAAU;gBAClB,KAAK,EAAE,WAAW;gBAClB,QAAQ,EAAE,QAAQ;aACnB,CAAC,CACH,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,sEAAsE;YACtE,IAAI,eAAe,GAAG,KAAK,CAAC;YAC5B,KAAK,MAAM,OAAO,IAAI,CAAC,cAAc,EAAE,UAAU,CAAC,EAAE,CAAC;gBACnD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACnC,IAAI,KAAK,EAAE,CAAC;oBACV,eAAe,GAAG,IAAI,CAAC;oBACvB,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;wBACR,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;wBAC9C,IAAI,EAAE,SAAS;wBACf,MAAM,EAAE,OAAO;wBACf,KAAK;wBACL,QAAQ,EAAE,QAAQ;qBACnB,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,mEAAmE;YACnE,0EAA0E;YAC1E,iEAAiE;YACjE,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;gBACrC,IAAI,QAAQ,EAAE,CAAC;oBACb,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;wBACR,IAAI,EAAE,cAAc;wBACpB,IAAI,EAAE,SAAS;wBACf,MAAM,EAAE,cAAc;wBACtB,KAAK,EAAE,QAAQ;wBACf,QAAQ,EAAE,QAAQ;qBACnB,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,2EAA2E;IAC3E,2EAA2E;IAC3E,2EAA2E;IAC3E,wDAAwD;IACxD,IAAI,CAAC,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QACtF,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;QACrE,IAAI,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,YAAY,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;YACvD,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBACjB,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;oBACR,IAAI,EAAE,gBAAgB;oBACtB,IAAI,EAAE,MAAM;oBACZ,QAAQ,EAAE,wBAAwB;oBAClC,KAAK;oBACL,QAAQ,EAAE,SAAS;iBACpB,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,KAAK,MAAM,OAAO,IAAI;YACpB,sBAAsB;YACtB,iBAAiB;YACjB,kBAAkB;YAClB,yBAAyB;SAC1B,EAAE,CAAC;YACF,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,OAAO,KAAK,sBAAsB,EAAE,CAAC;oBACvC,cAAc,GAAG,IAAI,CAAC;gBACxB,CAAC;gBACD,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;oBACR,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;oBAC9C,IAAI,EAAE,SAAS;oBACf,MAAM,EAAE,OAAO;oBACf,KAAK;oBACL,QAAQ,EAAE,SAAS;iBACpB,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,0EAA0E;QAC1E,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAC1E,4BAA4B;QAC5B,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;YAClE,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC;gBACtE,uEAAuE;gBACvE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,EAAE,CAAC;oBACtD,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;wBACR,IAAI,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;wBACjD,IAAI,EAAE,SAAS;wBACf,MAAM,EAAE,UAAU;wBAClB,KAAK,EAAE,QAAQ;wBACf,QAAQ,EAAE,SAAS;qBACpB,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;gBACrC,IAAI,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,cAAc,CAAC,EAAE,CAAC;oBACtE,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;wBACR,IAAI,EAAE,cAAc;wBACpB,IAAI,EAAE,SAAS;wBACf,MAAM,EAAE,cAAc;wBACtB,KAAK,EAAE,QAAQ;wBACf,QAAQ,EAAE,SAAS;qBACpB,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,6DAA6D;IAC7D,IAAI,CAAC,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAClF,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC7D,IAAI,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;YACnD,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBACjB,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;oBACR,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,MAAM;oBACZ,QAAQ,EAAE,oBAAoB;oBAC9B,KAAK;oBACL,QAAQ,EAAE,OAAO;iBAClB,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QAC7C,IAAI,SAAS,EAAE,CAAC;YACd,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;gBACR,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,gBAAgB;gBACxB,KAAK,EAAE,SAAS;gBAChB,QAAQ,EAAE,OAAO;aAClB,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,6EAA6E;IAC7E,IAAI,CAAC,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAClF,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;QAC/C,MAAM,eAAe,GAAG,SAAS;YAC/B,CAAC,CAAC,IAAI,CACF,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,EAC5D,OAAO,EACP,OAAO,EACP,QAAQ,EACR,aAAa,CACd;YACH,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;QACvD,MAAM,mBAAmB,GAAG,SAAS;YACnC,CAAC,CAAC,0CAA0C;YAC5C,CAAC,CAAC,6BAA6B,CAAC;QAClC,IAAI,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YACrD,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBACjB,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;oBACR,IAAI,EAAE,cAAc;oBACpB,IAAI,EAAE,MAAM;oBACZ,QAAQ,EAAE,mBAAmB;oBAC7B,KAAK;oBACL,QAAQ,EAAE,OAAO;iBAClB,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,KAAK,MAAM,OAAO,IAAI;YACpB,gBAAgB;YAChB,aAAa;YACb,mBAAmB;YACnB,gBAAgB;YAChB,gBAAgB;SACjB,EAAE,CAAC;YACF,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,CAAC,IAAI,CACR,SAAS,CAAC;oBACR,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;oBAC9C,IAAI,EAAE,SAAS;oBACf,MAAM,EAAE,OAAO;oBACf,KAAK;oBACL,QAAQ,EAAE,OAAO;iBAClB,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC"}

package/dist/task-session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"task-session.d.ts","sourceRoot":"","sources":["../src/task-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAIL,SAAS,EAIV,MAAM,sBAAsB,CAAC;AAqB9B;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,SAAS,CAAC,OAAO,EACvB,OAAO,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GACvE,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAqL7B"}
+{"version":3,"file":"task-session.d.ts","sourceRoot":"","sources":["../src/task-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAIL,SAAS,EAIV,MAAM,sBAAsB,CAAC;AAsB9B;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,SAAS,CAAC,OAAO,EACvB,OAAO,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GACvE,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAiM7B"}

package/dist/task-session.js

@@ -9,6 +9,7 @@
  * @module
  */
 import { envRegistry, sessionStore, workspaceStore, taskStore, personaStore, settingsStore, grackleHome, } from "@grackle-ai/database";
+import { ConnectError } from "@connectrpc/connect";
 import * as adapterManager from "./adapter-manager.js";
 import * as tokenPush from "./token-push.js";
 import { v4 as uuid } from "uuid";
@@ -112,15 +113,25 @@ export async function startTaskSession(task, options) {
         relatedPriorWork,
         knowledgeGuidance: knowledgeOn,
     }).build();
+    // Supply credentials on demand for this runtime, just before spawn (AHP HR6).
+    // For local envs, skip file tokens — the PowerLine is on the same machine.
+    // Pre-flight (#1316): a required-but-missing/expired credential throws here;
+    // surface it as a returned error string (the function's failure contract) so
+    // the dispatcher keeps the task queued for retry — and crucially before any
+    // session row is created or "task.started" emitted below.
+    try {
+        await tokenPush.authenticateForRuntime(environmentId, runtime, env.adapterType === "local" ? { excludeFileTokens: true } : undefined);
+    }
+    catch (err) {
+        logger.warn({ taskId: freshTask.id, environmentId, runtime }, "startTaskSession failed: pre-flight credential check");
+        return err instanceof ConnectError ? err.rawMessage : err.message;
+    }
     sessionStore.createSession(sessionId, environmentId, runtime, freshTask.title, model, logPath, freshTask.id, resolved.personaId);
     emit("task.started", {
         taskId: freshTask.id,
         sessionId,
         workspaceId: freshTask.workspaceId || "",
     });
-    // Supply credentials on demand for this runtime, just before spawn (AHP HR6).
-    // For local envs, skip file tokens — the PowerLine is on the same machine.
-    await tokenPush.authenticateForRuntime(environmentId, runtime, env.adapterType === "local" ? { excludeFileTokens: true } : undefined);
     const mcpServersJson = personaMcpServersToJson(resolved.mcpServers, resolved.personaId);
     // Build MCP broker URL + scoped token so runtimes can call the MCP server.
     const mcpPort = parseInt(process.env.GRACKLE_MCP_PORT || String(DEFAULT_MCP_PORT), 10);

package/dist/task-session.js.map

@@ -1 +1 @@
-{"version":3,"file":"task-session.js","sourceRoot":"","sources":["../src/task-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,WAAW,EACX,YAAY,EACZ,cAAc,EACd,SAAS,EACT,YAAY,EACZ,aAAa,EACb,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,cAAc,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,EAAE,IAAI,IAAI,EAAE,MAAM,MAAM,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAC;AAC3F,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAEjG;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAuB,EACvB,OAAwE;IAExE,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/F,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,8CAA8C,CAAC,CAAC;QACjF,OAAO,wBAAwB,IAAI,CAAC,WAAW,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,EAAE,aAAa,CAAC;IAC7C,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,qDAAqD,CAAC,CAAC;QACxF,OAAO,oDAAoD,CAAC;IAC9D,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;IACtD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,CAAC,IAAI,CACT,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,aAAa,EAAE,EAClC,gDAAgD,CACjD,CAAC;QACF,OAAO,0BAA0B,aAAa,EAAE,CAAC;IACnD,CAAC;IAED,MAAM,IAAI,GAAG,cAAc,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,SAAS,CAAC;IACtE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,8BAA8B,aAAa,EAAE,CAAC;IACvD,CAAC;IAED,yEAAyE;IACzE,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,cAAc,CACvB,OAAO,CAAC,SAAS,IAAI,EAAE,EACvB,IAAI,CAAC,gBAAgB,EACrB,SAAS,EAAE,gBAAgB,IAAI,EAAE,EACjC,aAAa,CAAC,UAAU,CAAC,oBAAoB,CAAC,IAAI,SAAS,EAC3D,CAAC,EAAE,EAAE,EAAE,CAAC,qBAAqB,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAC3D,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAQ,GAAa,CAAC,OAAO,CAAC;IAChC,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,EAAE,CAAC;IACzB,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,QAAQ,CAAC;IAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAEvD,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;IACrD,0EAA0E;IAC1E,4DAA4D;IAC5D,gEAAgE;IAChE,MAAM,UAAU,GACd,SAAS,CAAC,EAAE,KAAK,YAAY;QAC3B,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;QACrB,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAE7E,MAAM,cAAc,GAAG,SAAS,CAAC,YAAY,IAAI,SAAS,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC;IACjG,MAAM,eAAe,GAAG,cAAc;QACpC,CAAC,CAAC,wBAAwB,CACtB,6BAA6B,CAC3B,SAAS,CAAC,WAAY,EACtB,SAAS;YACP,CAAC,CAAC;gBACE,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,OAAO,EAAE,SAAS,CAAC,OAAO;aAC3B;YACH,CAAC,CAAC,SAAS,CACd,CACF;QACH,CAAC,CAAC,SAAS,CAAC;IAEd,4EAA4E;IAC5E,8EAA8E;IAC9E,mFAAmF;IACnF,MAAM,WAAW,GACf,wBAAwB,EAAE;QAC1B,SAAS,CAAC,eAAe;QACzB,CAAC,CAAC,SAAS,CAAC,WAAW;QACvB,SAAS,CAAC,EAAE,KAAK,YAAY,CAAC;IAChC,MAAM,gBAAgB,GAAG,WAAW;QAClC,CAAC,CAAC,CACE,MAAM,wBAAwB,CAAC;YAC7B,MAAM,EAAE,SAAS,CAAC,EAAE;YACpB,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,WAAW,EAAE,SAAS,CAAC,WAAW,IAAI,EAAE;YACxC,cAAc;YACd,eAAe,EAAE,SAAS,CAAC,eAAe;SAC3C,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,SAAS;QAC7B,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC;QAC5C,IAAI,EAAE;YACJ,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,KAAK,EAAE,SAAS,CAAC,EAAE,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;SAChE;QACD,MAAM,EAAE,SAAS,CAAC,EAAE;QACpB,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,aAAa,EAAE,YAAY;QAC3B,SAAS,EAAE,SAAS,CAAC,KAAK;QAC1B,GAAG,eAAe;QAClB,GAAG,CAAC,eAAe,IAAI,EAAE,WAAW,EAAE,OAAgB,EAAE,CAAC;QACzD,gBAAgB;QAChB,iBAAiB,EAAE,WAAW;KAC/B,CAAC,CAAC,KAAK,EAAE,CAAC;IAEX,YAAY,CAAC,aAAa,CACxB,SAAS,EACT,aAAa,EACb,OAAO,EACP,SAAS,CAAC,KAAK,EACf,KAAK,EACL,OAAO,EACP,SAAS,CAAC,EAAE,EACZ,QAAQ,CAAC,SAAS,CACnB,CAAC;IAEF,IAAI,CAAC,cAAc,EAAE;QACnB,MAAM,EAAE,SAAS,CAAC,EAAE;QACpB,SAAS;QACT,WAAW,EAAE,SAAS,CAAC,WAAW,IAAI,EAAE;KACzC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,2EAA2E;IAC3E,MAAM,SAAS,CAAC,sBAAsB,CACpC,aAAa,EACb,OAAO,EACP,GAAG,CAAC,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CACtE,CAAC;IAEF,MAAM,cAAc,GAAG,uBAAuB,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAExF,2EAA2E;IAC3E,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,MAAM,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC;IACvF,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,WAAW,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,UAAU,WAAW,IAAI,OAAO,MAAM,CAAC;IACtD,MAAM,QAAQ,GAAG,iBAAiB,CAChC;QACE,GAAG,EAAE,SAAS,CAAC,EAAE;QACjB,GAAG,EAAE,SAAS,CAAC,WAAW,IAAI,EAAE;QAChC,GAAG,EAAE,QAAQ,CAAC,SAAS;QACvB,GAAG,EAAE,SAAS;KACf,EACD,kBAAkB,CAAC,WAAW,CAAC,CAChC,CAAC;IAEF,MAAM,YAAY,GAAG,SAAS,EAAE,YAAY,IAAI,KAAK,CAAC;IAEtD,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;QAC9C,SAAS;QACT,OAAO;QACP,MAAM,EAAE,UAAU;QAClB,KAAK;QACL,QAAQ;QACR,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,gBAAgB,EAAE,SAAS,CAAC,MAAM;YAChC,CAAC,CAAC,SAAS,EAAE,gBAAgB;gBAC3B,OAAO,CAAC,GAAG,CAAC,yBAAyB;gBACrC,OAAO,CAAC,GAAG,CAAC,qBAAqB;gBACjC,YAAY;YACd,CAAC,CAAC,EAAE;QACN,YAAY;QACZ,aAAa;QACb,WAAW,EAAE,SAAS,CAAC,WAAW,IAAI,SAAS;QAC/C,MAAM,EAAE,SAAS,CAAC,EAAE;QACpB,cAAc;QACd,MAAM;QACN,QAAQ;KACT,CAAC,CAAC;IAEH,kBAAkB,CAAC,MAAM,EAAE;QACzB,SAAS;QACT,OAAO;QACP,WAAW,EAAE,SAAS,CAAC,WAAW,IAAI,SAAS;QAC/C,MAAM,EAAE,SAAS,CAAC,EAAE;QACpB,aAAa;QACb,MAAM,EAAE,UAAU;KACnB,CAAC,CAAC;IAEH,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"task-session.js","sourceRoot":"","sources":["../src/task-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,WAAW,EACX,YAAY,EACZ,cAAc,EACd,SAAS,EACT,YAAY,EACZ,aAAa,EACb,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,cAAc,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,EAAE,IAAI,IAAI,EAAE,MAAM,MAAM,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAC;AAC3F,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAEjG;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAuB,EACvB,OAAwE;IAExE,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/F,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,8CAA8C,CAAC,CAAC;QACjF,OAAO,wBAAwB,IAAI,CAAC,WAAW,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,EAAE,aAAa,CAAC;IAC7C,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,qDAAqD,CAAC,CAAC;QACxF,OAAO,oDAAoD,CAAC;IAC9D,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;IACtD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,CAAC,IAAI,CACT,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,aAAa,EAAE,EAClC,gDAAgD,CACjD,CAAC;QACF,OAAO,0BAA0B,aAAa,EAAE,CAAC;IACnD,CAAC;IAED,MAAM,IAAI,GAAG,cAAc,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,SAAS,CAAC;IACtE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,8BAA8B,aAAa,EAAE,CAAC;IACvD,CAAC;IAED,yEAAyE;IACzE,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,cAAc,CACvB,OAAO,CAAC,SAAS,IAAI,EAAE,EACvB,IAAI,CAAC,gBAAgB,EACrB,SAAS,EAAE,gBAAgB,IAAI,EAAE,EACjC,aAAa,CAAC,UAAU,CAAC,oBAAoB,CAAC,IAAI,SAAS,EAC3D,CAAC,EAAE,EAAE,EAAE,CAAC,qBAAqB,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAC3D,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAQ,GAAa,CAAC,OAAO,CAAC;IAChC,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,EAAE,CAAC;IACzB,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,QAAQ,CAAC;IAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAEvD,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;IACrD,0EAA0E;IAC1E,4DAA4D;IAC5D,gEAAgE;IAChE,MAAM,UAAU,GACd,SAAS,CAAC,EAAE,KAAK,YAAY;QAC3B,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;QACrB,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAE7E,MAAM,cAAc,GAAG,SAAS,CAAC,YAAY,IAAI,SAAS,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC;IACjG,MAAM,eAAe,GAAG,cAAc;QACpC,CAAC,CAAC,wBAAwB,CACtB,6BAA6B,CAC3B,SAAS,CAAC,WAAY,EACtB,SAAS;YACP,CAAC,CAAC;gBACE,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,WAAW,EAAE,SAAS,CAAC,WAAW;gBAClC,OAAO,EAAE,SAAS,CAAC,OAAO;aAC3B;YACH,CAAC,CAAC,SAAS,CACd,CACF;QACH,CAAC,CAAC,SAAS,CAAC;IAEd,4EAA4E;IAC5E,8EAA8E;IAC9E,mFAAmF;IACnF,MAAM,WAAW,GACf,wBAAwB,EAAE;QAC1B,SAAS,CAAC,eAAe;QACzB,CAAC,CAAC,SAAS,CAAC,WAAW;QACvB,SAAS,CAAC,EAAE,KAAK,YAAY,CAAC;IAChC,MAAM,gBAAgB,GAAG,WAAW;QAClC,CAAC,CAAC,CACE,MAAM,wBAAwB,CAAC;YAC7B,MAAM,EAAE,SAAS,CAAC,EAAE;YACpB,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,WAAW,EAAE,SAAS,CAAC,WAAW,IAAI,EAAE;YACxC,cAAc;YACd,eAAe,EAAE,SAAS,CAAC,eAAe;SAC3C,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,SAAS;QAC7B,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,aAAa,GAAG,IAAI,mBAAmB,CAAC;QAC5C,IAAI,EAAE;YACJ,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,KAAK,EAAE,SAAS,CAAC,EAAE,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;SAChE;QACD,MAAM,EAAE,SAAS,CAAC,EAAE;QACpB,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,aAAa,EAAE,YAAY;QAC3B,SAAS,EAAE,SAAS,CAAC,KAAK;QAC1B,GAAG,eAAe;QAClB,GAAG,CAAC,eAAe,IAAI,EAAE,WAAW,EAAE,OAAgB,EAAE,CAAC;QACzD,gBAAgB;QAChB,iBAAiB,EAAE,WAAW;KAC/B,CAAC,CAAC,KAAK,EAAE,CAAC;IAEX,8EAA8E;IAC9E,2EAA2E;IAC3E,6EAA6E;IAC7E,6EAA6E;IAC7E,4EAA4E;IAC5E,0DAA0D;IAC1D,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,sBAAsB,CACpC,aAAa,EACb,OAAO,EACP,GAAG,CAAC,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CACtE,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CACT,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,aAAa,EAAE,OAAO,EAAE,EAChD,sDAAsD,CACvD,CAAC;QACF,OAAO,GAAG,YAAY,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAE,GAAa,CAAC,OAAO,CAAC;IAC/E,CAAC;IAED,YAAY,CAAC,aAAa,CACxB,SAAS,EACT,aAAa,EACb,OAAO,EACP,SAAS,CAAC,KAAK,EACf,KAAK,EACL,OAAO,EACP,SAAS,CAAC,EAAE,EACZ,QAAQ,CAAC,SAAS,CACnB,CAAC;IAEF,IAAI,CAAC,cAAc,EAAE;QACnB,MAAM,EAAE,SAAS,CAAC,EAAE;QACpB,SAAS;QACT,WAAW,EAAE,SAAS,CAAC,WAAW,IAAI,EAAE;KACzC,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,uBAAuB,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAExF,2EAA2E;IAC3E,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,MAAM,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC;IACvF,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,WAAW,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,UAAU,WAAW,IAAI,OAAO,MAAM,CAAC;IACtD,MAAM,QAAQ,GAAG,iBAAiB,CAChC;QACE,GAAG,EAAE,SAAS,CAAC,EAAE;QACjB,GAAG,EAAE,SAAS,CAAC,WAAW,IAAI,EAAE;QAChC,GAAG,EAAE,QAAQ,CAAC,SAAS;QACvB,GAAG,EAAE,SAAS;KACf,EACD,kBAAkB,CAAC,WAAW,CAAC,CAChC,CAAC;IAEF,MAAM,YAAY,GAAG,SAAS,EAAE,YAAY,IAAI,KAAK,CAAC;IAEtD,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;QAC9C,SAAS;QACT,OAAO;QACP,MAAM,EAAE,UAAU;QAClB,KAAK;QACL,QAAQ;QACR,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,gBAAgB,EAAE,SAAS,CAAC,MAAM;YAChC,CAAC,CAAC,SAAS,EAAE,gBAAgB;gBAC3B,OAAO,CAAC,GAAG,CAAC,yBAAyB;gBACrC,OAAO,CAAC,GAAG,CAAC,qBAAqB;gBACjC,YAAY;YACd,CAAC,CAAC,EAAE;QACN,YAAY;QACZ,aAAa;QACb,WAAW,EAAE,SAAS,CAAC,WAAW,IAAI,SAAS;QAC/C,MAAM,EAAE,SAAS,CAAC,EAAE;QACpB,cAAc;QACd,MAAM;QACN,QAAQ;KACT,CAAC,CAAC;IAEH,kBAAkB,CAAC,MAAM,EAAE;QACzB,SAAS;QACT,OAAO;QACP,WAAW,EAAE,SAAS,CAAC,WAAW,IAAI,SAAS;QAC/C,MAAM,EAAE,SAAS,CAAC,EAAE;QACpB,aAAa;QACb,MAAM,EAAE,UAAU;KACnB,CAAC,CAAC;IAEH,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/token-push.d.ts

@@ -7,8 +7,20 @@ export interface AuthenticateOptions {
  * Supply credentials for a runtime to its environment on demand, just before a
  * spawn. Combines stored user tokens with the runtime-scoped provider bundle
  * (read fresh from env/disk) and delivers them via the host transport's
- * `authenticate` method. Best-effort: failures are logged and do not block the
- * spawn.
+ * `authenticate` method.
+ *
+ * **Fail-fast pre-flight (#1316):** before delivery, this validates that every
+ * credential the runtime advertises a need for (a provider that is *enabled* in
+ * the credential-provider config) is actually present — and, for OAuth-file
+ * credentials, not expired-beyond-refresh. When a required credential is missing
+ * or its login has expired with no refresh token, it throws a
+ * `ConnectError(FailedPrecondition)` with an actionable message rather than
+ * letting the runtime fail with an opaque 401 mid-agent. (Providers that are
+ * *off* are not validated.) Note this changes the function from never-throws to
+ * fail-fast on a required-but-missing credential.
+ *
+ * Once the pre-flight gate passes, *delivery* remains best-effort: a transport
+ * `authenticate` failure is logged and does not block the spawn.
  */
 export declare function authenticateForRuntime(environmentId: string, runtime: string, options?: AuthenticateOptions): Promise<void>;
 //# sourceMappingURL=token-push.d.ts.map

package/dist/token-push.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"token-push.d.ts","sourceRoot":"","sources":["../src/token-push.ts"],"names":[],"mappings":"AAmBA,kDAAkD;AAClD,MAAM,WAAW,mBAAmB;IAClC,2FAA2F;IAC3F,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,wBAAsB,sBAAsB,CAC1C,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAiCf"}
+{"version":3,"file":"token-push.d.ts","sourceRoot":"","sources":["../src/token-push.ts"],"names":[],"mappings":"AAyBA,kDAAkD;AAClD,MAAM,WAAW,mBAAmB;IAClC,2FAA2F;IAC3F,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,sBAAsB,CAC1C,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAmDf"}

package/dist/token-push.js

@@ -1,13 +1,39 @@
+/**
+ * On-demand credential supply (AHP HR6).
+ *
+ * Builds the combined credential bundle for a runtime (stored user tokens +
+ * provider credentials read fresh from env/disk) and authenticates it to the
+ * connected PowerLine just-in-time, immediately before a spawn. This replaces
+ * the proactive `PushTokens` injection (eager push before every spawn / on
+ * token change / on reconnect): credentials are now supplied on demand, scoped
+ * to the runtime being spawned.
+ *
+ * Pure persistence lives in `@grackle-ai/database` (tokenStore); credential
+ * bundle building lives in {@link ./credential-bundle.ts}.
+ */
+import { ConnectError, Code } from "@connectrpc/connect";
 import * as adapterManager from "./adapter-manager.js";
-import { envRegistry, tokenStore } from "@grackle-ai/database";
-import { buildProviderTokenBundle } from "./credential-bundle.js";
+import { credentialProviders, envRegistry, tokenStore } from "@grackle-ai/database";
+import { buildProviderTokenBundle, deriveCredentialNeeds, findUnsatisfiedNeeds, formatPreflightCredentialError, } from "./credential-bundle.js";
 import { logger } from "./logger.js";
 /**
  * Supply credentials for a runtime to its environment on demand, just before a
  * spawn. Combines stored user tokens with the runtime-scoped provider bundle
  * (read fresh from env/disk) and delivers them via the host transport's
- * `authenticate` method. Best-effort: failures are logged and do not block the
- * spawn.
+ * `authenticate` method.
+ *
+ * **Fail-fast pre-flight (#1316):** before delivery, this validates that every
+ * credential the runtime advertises a need for (a provider that is *enabled* in
+ * the credential-provider config) is actually present — and, for OAuth-file
+ * credentials, not expired-beyond-refresh. When a required credential is missing
+ * or its login has expired with no refresh token, it throws a
+ * `ConnectError(FailedPrecondition)` with an actionable message rather than
+ * letting the runtime fail with an opaque 401 mid-agent. (Providers that are
+ * *off* are not validated.) Note this changes the function from never-throws to
+ * fail-fast on a required-but-missing credential.
+ *
+ * Once the pre-flight gate passes, *delivery* remains best-effort: a transport
+ * `authenticate` failure is logged and does not block the spawn.
  */
 export async function authenticateForRuntime(environmentId, runtime, options) {
     const conn = adapterManager.getConnection(environmentId);
@@ -18,6 +44,15 @@ export async function authenticateForRuntime(environmentId, runtime, options) {
     const githubAccountId = env?.githubAccountId || undefined;
     const stored = tokenStore.getBundle();
     const provider = await buildProviderTokenBundle(runtime, undefined, githubAccountId);
+    // Pre-flight credential validation (#1316). Validate the runtime's advertised
+    // needs against the *unfiltered* provider bundle, so the local-env file-token
+    // stripping below cannot mask a credential that is present on disk. Throws
+    // before delivery (and before any session row is created at the call site).
+    const config = credentialProviders.getCredentialProviders();
+    const unsatisfied = findUnsatisfiedNeeds(deriveCredentialNeeds(runtime, config), provider, Date.now());
+    if (unsatisfied.length > 0) {
+        throw new ConnectError(formatPreflightCredentialError(runtime, unsatisfied), Code.FailedPrecondition);
+    }
     // Provider credentials come last so they win over any same-target stored token.
     let combined = [...stored.tokens, ...provider.tokens];
     if (options?.excludeFileTokens) {

package/dist/token-push.js.map

@@ -1 +1 @@
-{"version":3,"file":"token-push.js","sourceRoot":"","sources":["../src/token-push.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,cAAc,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAQrC;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,aAAqB,EACrB,OAAe,EACf,OAA6B;IAE7B,MAAM,IAAI,GAAG,cAAc,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,WAAW,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;IACtD,MAAM,eAAe,GAAG,GAAG,EAAE,eAAe,IAAI,SAAS,CAAC;IAE1D,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IACrF,gFAAgF;IAChF,IAAI,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,OAAO,EAAE,iBAAiB,EAAE,CAAC;QAC/B,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAA4B,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3D,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,KAAK,EAAE,CAAC,CAAC,KAAK;KACf,CAAC,CAAC,CAAC;IAEJ,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,iDAAiD,CAAC,CAAC;IAClG,CAAC;AACH,CAAC"}
+{"version":3,"file":"token-push.js","sourceRoot":"","sources":["../src/token-push.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,KAAK,cAAc,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACpF,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,EACpB,8BAA8B,GAC/B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAQrC;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,aAAqB,EACrB,OAAe,EACf,OAA6B;IAE7B,MAAM,IAAI,GAAG,cAAc,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;IACzD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,WAAW,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;IACtD,MAAM,eAAe,GAAG,GAAG,EAAE,eAAe,IAAI,SAAS,CAAC;IAE1D,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IAErF,8EAA8E;IAC9E,8EAA8E;IAC9E,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,MAAM,GAAG,mBAAmB,CAAC,sBAAsB,EAAE,CAAC;IAC5D,MAAM,WAAW,GAAG,oBAAoB,CACtC,qBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC,EACtC,QAAQ,EACR,IAAI,CAAC,GAAG,EAAE,CACX,CAAC;IACF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,YAAY,CACpB,8BAA8B,CAAC,OAAO,EAAE,WAAW,CAAC,EACpD,IAAI,CAAC,kBAAkB,CACxB,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,IAAI,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,OAAO,EAAE,iBAAiB,EAAE,CAAC;QAC/B,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAA4B,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3D,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,KAAK,EAAE,CAAC,CAAC,KAAK;KACf,CAAC,CAAC,CAAC;IAEJ,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,iDAAiD,CAAC,CAAC;IAClG,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@grackle-ai/core",
-  "version": "0.133.1",
+  "version": "0.134.0",
   "description": "Core gRPC business logic for Grackle - RPC handlers, event system, streaming, session lifecycle",
   "license": "MIT",
   "repository": {
@@ -42,14 +42,14 @@
     "pino": "^10.3.1",
     "ulid": "^2.3.0",
     "uuid": "^11.1.1",
-    "@grackle-ai/adapter-sdk": "0.133.1",
-    "@grackle-ai/ahp": "0.133.1",
-    "@grackle-ai/common": "0.133.1",
-    "@grackle-ai/database": "0.133.1",
-    "@grackle-ai/auth": "0.133.1",
-    "@grackle-ai/plugin-sdk": "0.133.1",
-    "@grackle-ai/knowledge": "0.133.1",
-    "@grackle-ai/prompt": "0.133.1"
+    "@grackle-ai/ahp": "0.134.0",
+    "@grackle-ai/adapter-sdk": "0.134.0",
+    "@grackle-ai/common": "0.134.0",
+    "@grackle-ai/auth": "0.134.0",
+    "@grackle-ai/database": "0.134.0",
+    "@grackle-ai/plugin-sdk": "0.134.0",
+    "@grackle-ai/knowledge": "0.134.0",
+    "@grackle-ai/prompt": "0.134.0"
   },
   "devDependencies": {
     "@rushstack/heft": "1.2.7",