@memberjunction/connector-membersuite 1.0.0

package/dist/MemberSuiteConnector.d.ts

@@ -0,0 +1,184 @@
+import { type UserInfo } from '@memberjunction/core';
+import type { MJCompanyIntegrationEntity } from '@memberjunction/core-entities';
+import { BaseRESTIntegrationConnector, type RESTAuthContext, type RESTResponse, type PaginationState, type PaginationType, type ConnectionTestResult, type FetchContext, type FetchBatchResult, type CreateRecordContext, type UpdateRecordContext, type DeleteRecordContext, type CRUDResult, type RateLimitPolicy, type ExternalObjectSchema, type ExternalFieldSchema } from '@memberjunction/integration-engine';
+/**
+ * Connection configuration parsed from the Credential entity / CompanyIntegration.Configuration JSON.
+ * Every field is per-connection (tenant-scoped) — NONE are baked constants.
+ */
+export interface MemberSuiteConnectionConfig {
+    /** Tenant / association id — the `{tenantId}` path segment on the auth + list endpoints. */
+    TenantID: string;
+    /** 6-part signed-request credential set. */
+    AccessKeyID: string;
+    AssociationID: string;
+    AssociationKey: string;
+    SecretAccessKey: string;
+    /** Signing certificate (PEM/base64) — a POSTed credential VALUE, not a client-side signing key. */
+    SigningCertificate: string;
+    SigningCertificateID: string;
+    /** Optional pre-provisioned access token (test/broker injection) — bypasses the token exchange. */
+    AccessToken?: string;
+    RefreshToken?: string;
+    /** Override for the shared host (defaults to https://rest.membersuite.com). */
+    BaseURL?: string;
+}
+export declare class MemberSuiteConnector extends BaseRESTIntegrationConnector {
+    private tokenCache;
+    private lastRequestTime;
+    get IntegrationName(): string;
+    get SupportsCreate(): boolean;
+    get SupportsUpdate(): boolean;
+    get SupportsDelete(): boolean;
+    /**
+     * NOT authoritative for deactivation (matches the contract). The Declared baseline is seeded from
+     * six independent swagger specs (no single enumerate-all endpoint), and the runtime custom-field /
+     * saved-search surface is per-tenant + partial — absence in any one refresh proves nothing about
+     * the canonical object set, so it must NEVER trigger deactivation of Declared metadata.
+     */
+    get DiscoveryIsAuthoritative(): boolean;
+    /**
+     * MSQL incremental orders by lastModifiedDate and re-fetches `> watermark`, so the watermark is
+     * monotonic per object — the engine may narrow the next incremental window.
+     */
+    get MonotonicWatermark(): boolean;
+    /** Every resource exposes `id`; for no-watermark resume the engine keyset-orders by it. */
+    StableOrderingKey(_objectName: string): string | null;
+    /**
+     * MemberSuite publishes no documented tokens/sec rate limit in the swagger specs. A conservative
+     * sustained rate keeps the connector polite against a shared host; the engine's AIMD bucket adapts
+     * downward on any throttle signal. (Provable-only: this is a safe default, not a documented limit.)
+     */
+    get RateLimitPolicy(): RateLimitPolicy | null;
+    /** Honor a standard `Retry-After` header (seconds) if the vendor sends one on a 429. */
+    ExtractRetryAfterMs(error: unknown): number | undefined;
+    /**
+     * Returns the Declared baseline (the swagger universe seeded into the engine cache by the base
+     * implementation) PLUS — additively, when a credential is present — tenant-specific custom objects
+     * surfaced by the runtime saved-search MECHANISM. The baseline ALWAYS comes back credential-free
+     * (so a credential-free DocStructureSelfCheck re-yields the standard universe); a live credential is
+     * additive only. No catalog of customs is baked here.
+     */
+    DiscoverObjects(companyIntegration: MJCompanyIntegrationEntity, contextUser: UserInfo): Promise<ExternalObjectSchema[]>;
+    /**
+     * Returns the Declared fields (from the engine cache) PLUS — additively, with a credential — the
+     * tenant's custom fields for the object via the runtime custom-field MECHANISM. The Declared set is
+     * always present; customs are an extension, never a replacement, and are never baked.
+     */
+    DiscoverFields(companyIntegration: MJCompanyIntegrationEntity, objectName: string, contextUser: UserInfo): Promise<ExternalFieldSchema[]>;
+    /**
+     * Runtime MECHANISM: fetch a tenant's custom-field definitions for an object and map them to
+     * ExternalFieldSchema. Custom fields are tenant-defined extensions — never declared, never NOT NULL
+     * (provable-only: a custom field's required-ness is not asserted by this endpoint's shape unless
+     * the vendor flags it). This is the discovery mechanism; the actual fields come from the live call.
+     */
+    private DiscoverCustomFields;
+    /** Maps a raw custom-field definition to a field schema. Provable-only on required/type. */
+    private CustomFieldToSchema;
+    private MapCustomFieldType;
+    /**
+     * Runtime MECHANISM: surface a tenant's saved searches as discoverable objects. Saved searches are a
+     * per-tenant query surface (each tenant defines its own) — never a standard object family, so they
+     * are additive-only and the connector stays non-authoritative.
+     */
+    private DiscoverSavedSearchObjects;
+    protected Authenticate(companyIntegration: MJCompanyIntegrationEntity, contextUser: UserInfo): Promise<RESTAuthContext>;
+    private BuildAuthContext;
+    /**
+     * Step 1 of the two-step flow: POST the 6-part signed credential set to msc_authdata → accessToken.
+     *
+     * NO inline crypto. The swagger documents the signing certificate + its id as VALUES posted in the
+     * auth body (the server verifies them); it documents NO client-side HMAC/signature computation. If a
+     * future tenant deployment requires request-signing beyond posting the credential set, that is a
+     * NOTED auth-helpers extension request (RemainingGaps), not a fabricated routine here.
+     */
+    private ObtainToken;
+    /** Step 2 refresh: POST RefreshTokenRequest {idToken, refreshToken} → new accessToken. Best-effort. */
+    private RefreshToken;
+    private ParseConfig;
+    private ParseConfigJSON;
+    private BuildConfig;
+    /** True when a credential or Configuration-carried credential set is present (gates live discovery). */
+    private HasCredential;
+    TestConnection(companyIntegration: MJCompanyIntegrationEntity, contextUser: UserInfo): Promise<ConnectionTestResult>;
+    protected GetBaseURL(_ci: MJCompanyIntegrationEntity, auth: RESTAuthContext): string;
+    /** Substitute the `{tenantId}` segment into a path template (tenant-scoped, never a constant). */
+    private ResolveTenantPath;
+    /**
+     * Strip the response envelope to expose individual records. MemberSuite list responses return either
+     * a bare array, or an envelope with the records under a `results`/`items`/`data` key (the swagger
+     * uses `results` for the paged list shape); a get-one returns a single object.
+     */
+    protected NormalizeResponse(rawBody: unknown, responseDataKey: string | null): Record<string, unknown>[];
+    /**
+     * PageNumber pagination (1-indexed). A page that returns a full page-size implies more may remain;
+     * a short/empty page is the last. The total may be reported under `totalCount`/`count` — when present
+     * we use it for an exact HasMore, otherwise fall back to the page-fill heuristic.
+     */
+    protected ExtractPaginationInfo(rawBody: unknown, _pt: PaginationType, currentPage: number, _co: number, pageSize: number): PaginationState;
+    /**
+     * Reads a MemberSuite object via the list door:
+     *   GET /{service}/v1/{resource}/{tenantId}?msql=<select … where lastModifiedDate > wm>&page=&pageSize=
+     *
+     * The IO's `APIPath` (`/{service}/v1/{resource}`) is the base; we append the `{tenantId}` path segment
+     * (the access path's `entryQuery` carries `/{service}/v1/{resource}/{tenantId}`), the MSQL filter
+     * (watermark-driven incremental), and the 1-indexed page params. This is genuinely idiosyncratic
+     * (tenantId path segment + MSQL query language), so we override the base flat-fetch rather than the
+     * base appending only `page`/`pageSize` to a tenantId-less path.
+     */
+    FetchChanges(ctx: FetchContext): Promise<FetchBatchResult>;
+    /** The list path: `/{service}/v1/{resource}/{tenantId}` (from the access path's entryQuery / APIPath). */
+    private BuildListPath;
+    /** The MSQL `from` target — the vendor object/definition name (resource segment of the API path). */
+    private ResourceNameForMSQL;
+    /**
+     * Build the MSQL query. Incremental uses `> watermark` on lastModifiedDate; a first sync selects all.
+     * `select *` returns the full record so full-record pass-through is preserved.
+     */
+    private BuildMSQL;
+    /** MSQL datetime literals are single-quoted ISO-8601 strings. */
+    private FormatMSQLDateTime;
+    /** Append `msql`, `page` (1-indexed), and `pageSize` to the tenant-scoped list URL. */
+    private BuildMSQLPageURL;
+    /** Parse the per-IO access Configuration (service / version / listPath / accessPath). */
+    private ReadAccessConfig;
+    /** PK field names from the IO's fields (id by convention), sorted by sequence; falls back to `id`. */
+    private FindPKFieldNames;
+    /**
+     * Build an ExternalRecord from a raw vendor record. The FULL source record flows into `Fields`
+     * (custom-column pass-through contract M1–M4) — the only transformation is the transform-preserving
+     * hook (default identity), so no source key is silently dropped. The PK field(s) supply the
+     * ExternalID (joined with '|' for composite keys); lastModifiedDate supplies ModifiedAt.
+     */
+    private RawToExternalRecord;
+    CreateRecord(ctx: CreateRecordContext): Promise<CRUDResult>;
+    UpdateRecord(ctx: UpdateRecordContext): Promise<CRUDResult>;
+    DeleteRecord(ctx: DeleteRecordContext): Promise<CRUDResult>;
+    /**
+     * Returns a refusal CRUDResult when the object is OUTSIDE the writeback allowlist; null when the
+     * write is allowed (Activity / Certification). This enforces the operator-scoped "only Activity +
+     * Certification writebacks" decision in code — not a capability fabrication.
+     */
+    private GuardWriteback;
+    /**
+     * Extract the created-record id from a create response. MemberSuite returns the new record (id in
+     * body) per the contract's CreateIDLocation='body'. We also honor a configured idempotency reference
+     * (e.g. external_activity_id) when the vendor echoes it — so a duplicate writeback re-resolves to the
+     * same record id rather than minting a duplicate.
+     */
+    protected ExtractIDFromResponse(response: RESTResponse, idLocation: string | null): string | undefined;
+    /**
+     * Authorization header carries the RAW accessToken value (NO "Bearer " prefix — the swagger
+     * documents the Authorization parameter as the bare access-token string).
+     */
+    protected BuildHeaders(auth: RESTAuthContext): Record<string, string>;
+    /** Unauthenticated POST used by the token-exchange + refresh steps (no Authorization header). */
+    private RawPost;
+    protected MakeHTTPRequest(_auth: RESTAuthContext, url: string, method: string, headers: Record<string, string>, body?: unknown): Promise<RESTResponse>;
+    private FetchWithTimeout;
+    private ParseBody;
+    private ToRESTResponse;
+    private SafeBody;
+    private Throttle;
+    private Sleep;
+}
+export declare function LoadMemberSuiteConnector(): void;

package/dist/MemberSuiteConnector.js

@@ -0,0 +1,762 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+/**
+ * MemberSuiteConnector — Integration connector for MemberSuite (Association Management System).
+ *
+ * MemberSuite is a multi-service AMS exposed over a REST API v2 (JSON). Member data is reached
+ * across six in-scope services — CRM, Membership, Events, Orders, Certifications, Fundraising —
+ * each versioned independently (`/{service}/v1/{resource}`; the Platform auth service is v2). The
+ * shared host is `https://rest.membersuite.com`; tenancy is resolved by a `{tenantId}` PATH segment
+ * on every list endpoint plus the auth-token context — there is NO per-account hostname variation.
+ *
+ *   READS  — list/get via `GET /{service}/v1/{resource}/{tenantId}?msql=&page=&pageSize=`.
+ *            PageNumber pagination (1-indexed). Filtering + incremental sync use MSQL
+ *            (MemberSuite Query Language) on the uniform `lastModifiedDate` watermark field:
+ *            `msql=select * from {object} where lastModifiedDate > {watermark}`.
+ *   WRITES — SCOPED to Activity + Certification writebacks ONLY (the operator-approved write-back
+ *            use cases per the MemberSuiteContext). The API documents full CRUD on most objects, but
+ *            writing arbitrary member/membership/order records against a live AMS is high-risk, so
+ *            the connector REFUSES writes outside the writeback allowlist even though the per-IO
+ *            write columns exist in metadata. Allowed writes route through the generic per-operation
+ *            BaseRESTIntegrationConnector CRUD path (create POST flat / id-in-body → BuildCreatedResult;
+ *            update PUT path-keyed; delete uses the non-standard infix `/delete/{id}`).
+ *
+ * AUTH (two-step signed request):
+ *   1. POST the 6-part signed credential set (accessKeyId + associationId + associationKey +
+ *      secretAccessKey + signingCertificate + signingCertificateId) to
+ *      `/platform/v2/msc_authdata/{tenantId}` → receive AuthenticationData {accessToken, idToken,
+ *      refreshToken}.
+ *   2. Pass the raw `accessToken` as the `Authorization` header value (NO "Bearer " prefix — the
+ *      swagger documents the Authorization parameter as the bare access-token string) on all
+ *      subsequent data requests. The `/platform/v2/refreshtoken` endpoint refreshes an expired token.
+ *
+ *   The 6-part credential set + tenantId are ALL per-connection Configuration/credential values —
+ *   never baked constants (tenant-agnostic code). The "signing certificate" and its id are POSTed as
+ *   credential VALUES in the auth body per the OpenAPI spec; the public swagger documents NO
+ *   client-side HMAC/signature computation, so this connector performs NO inline crypto. See the
+ *   RemainingGaps note in CODE_REPORT.md if a tenant's deployment requires request-signing beyond
+ *   posting the credential set — that is a live-verification gap, not a fabricated routine here.
+ *
+ * DISCOVERY: DiscoverObjects/DiscoverFields return the Declared baseline (the credential-free swagger
+ * universe, seeded into the engine cache) AND encode the runtime MECHANISM for tenant-specific
+ * custom-field (`/platform/v2/customfields/{tenantId}`) + saved-search (`/platform/v2/savedsearches/
+ * {tenantId}`) discovery — never a baked catalog of a customer's customs/saved searches.
+ * DiscoveryIsAuthoritative stays FALSE: the baseline is multi-swagger (not a single enumerate-all
+ * endpoint) and the custom/saved-search surface is per-tenant + partial, so absence in any one
+ * tenant's refresh must NEVER deactivate the Declared metadata.
+ *
+ * API Documentation (swagger, credential-free):
+ *   - Platform: https://rest.membersuite.com/platform/swagger/docs/v2
+ *   - CRM:      https://rest.membersuite.com/crm/swagger/docs/v1
+ *   - (Membership / Events / Orders / Certifications / Fundraising mirror the CRM shape)
+ *
+ * NO BAKED CATALOG. The object/field universe is Declared (swagger → metadata file → engine cache) +
+ * Discovered (runtime custom-field + saved-search MECHANISM). This file is pure mechanism: auth, HTTP,
+ * discover, fetch, normalize, transform, write.
+ */
+import { RegisterClass } from '@memberjunction/global';
+import { Metadata } from '@memberjunction/core';
+import { BaseIntegrationConnector, BaseRESTIntegrationConnector, } from '@memberjunction/integration-engine';
+// ─── Constants ──────────────────────────────────────────────────────────────
+const DEFAULT_BASE_URL = 'https://rest.membersuite.com';
+const AUTH_PATH_TEMPLATE = '/platform/v2/msc_authdata/{tenantId}';
+const REFRESH_PATH = '/platform/v2/refreshtoken';
+/** Runtime-discovery MECHANISM endpoints (per-tenant, auth-gated, partial — never the baseline). */
+const CUSTOM_FIELDS_PATH_TEMPLATE = '/platform/v2/customfields/{tenantId}';
+const SAVED_SEARCHES_PATH_TEMPLATE = '/platform/v2/savedsearches/{tenantId}';
+/** Uniform vendor watermark field across all six in-scope services. */
+const DEFAULT_WATERMARK_FIELD = 'lastModifiedDate';
+/** Vendor-wide PK convention (id on every resource definition). */
+const PK_FIELD = 'id';
+/** PageNumber pagination is 1-indexed (first page = 1). */
+const FIRST_PAGE = 1;
+const DEFAULT_PAGE_SIZE = 50;
+/**
+ * The ONLY objects this connector will write to — the operator-approved writeback allowlist
+ * (Activity + Certification). Lower-cased IO names. Per-connection, not a vendor constant of the API
+ * surface: it encodes the SCOPE decision, not a catalog. Writes to any other object are refused even
+ * though the API + metadata declare CRUD columns for them.
+ */
+const WRITEBACK_ALLOWLIST = new Set(['activities', 'certifications']);
+const TOKEN_REFRESH_BUFFER_MS = 60_000;
+const TOKEN_LIFETIME_MS = 3_600_000;
+const MAX_RETRIES = 3;
+const REQUEST_TIMEOUT_MS = 30_000;
+const MIN_REQUEST_INTERVAL_MS = 50;
+// ─── Connector ──────────────────────────────────────────────────────────────
+let MemberSuiteConnector = class MemberSuiteConnector extends BaseRESTIntegrationConnector {
+    constructor() {
+        super(...arguments);
+        this.tokenCache = null;
+        this.lastRequestTime = 0;
+    }
+    get IntegrationName() { return 'MemberSuite'; }
+    // Capability getters: the connector CAN write (the writeback path exists), but the per-object
+    // allowlist guard in CreateRecord/UpdateRecord/DeleteRecord enforces that only Activity +
+    // Certification writebacks actually fire. Declaring the capability here lets the engine route
+    // writes to the connector; the guard decides per object.
+    get SupportsCreate() { return true; }
+    get SupportsUpdate() { return true; }
+    get SupportsDelete() { return true; }
+    /**
+     * NOT authoritative for deactivation (matches the contract). The Declared baseline is seeded from
+     * six independent swagger specs (no single enumerate-all endpoint), and the runtime custom-field /
+     * saved-search surface is per-tenant + partial — absence in any one refresh proves nothing about
+     * the canonical object set, so it must NEVER trigger deactivation of Declared metadata.
+     */
+    get DiscoveryIsAuthoritative() { return false; }
+    // ── §7 sync-efficiency hooks ─────────────────────────────────────────────
+    /**
+     * MSQL incremental orders by lastModifiedDate and re-fetches `> watermark`, so the watermark is
+     * monotonic per object — the engine may narrow the next incremental window.
+     */
+    get MonotonicWatermark() { return true; }
+    /** Every resource exposes `id`; for no-watermark resume the engine keyset-orders by it. */
+    StableOrderingKey(_objectName) { return PK_FIELD; }
+    /**
+     * MemberSuite publishes no documented tokens/sec rate limit in the swagger specs. A conservative
+     * sustained rate keeps the connector polite against a shared host; the engine's AIMD bucket adapts
+     * downward on any throttle signal. (Provable-only: this is a safe default, not a documented limit.)
+     */
+    get RateLimitPolicy() {
+        return { TokensPerSec: 10, Burst: 15, ThrottleBackoffFactor: 0.5 };
+    }
+    /** Honor a standard `Retry-After` header (seconds) if the vendor sends one on a 429. */
+    ExtractRetryAfterMs(error) {
+        if (!error || typeof error !== 'object')
+            return undefined;
+        const headers = error.Headers;
+        const ra = headers?.['retry-after'];
+        if (ra) {
+            const secs = Number(ra);
+            if (!isNaN(secs))
+                return secs * 1000;
+        }
+        return undefined;
+    }
+    // ── Discovery (Declared baseline + runtime custom-field / saved-search MECHANISM) ─
+    /**
+     * Returns the Declared baseline (the swagger universe seeded into the engine cache by the base
+     * implementation) PLUS — additively, when a credential is present — tenant-specific custom objects
+     * surfaced by the runtime saved-search MECHANISM. The baseline ALWAYS comes back credential-free
+     * (so a credential-free DocStructureSelfCheck re-yields the standard universe); a live credential is
+     * additive only. No catalog of customs is baked here.
+     */
+    async DiscoverObjects(companyIntegration, contextUser) {
+        // 1) Declared baseline — credential-free, from the engine cache. ALWAYS the standard universe.
+        const baseline = await super.DiscoverObjects(companyIntegration, contextUser);
+        // 2) ADDITIVE runtime discovery (mechanism, never a baked answer): a tenant's saved searches are
+        //    a per-tenant custom query surface. Surface them as extra discoverable objects ONLY when a
+        //    credential is configured — absence never removes baseline objects (DiscoveryIsAuthoritative=false).
+        if (!this.HasCredential(companyIntegration))
+            return baseline;
+        try {
+            const extras = await this.DiscoverSavedSearchObjects(companyIntegration, contextUser);
+            const known = new Set(baseline.map(o => o.Name.toLowerCase()));
+            for (const e of extras)
+                if (!known.has(e.Name.toLowerCase()))
+                    baseline.push(e);
+        }
+        catch (err) {
+            // Runtime discovery is best-effort + additive — a failure must not break the standard universe.
+            console.warn(`[${this.IntegrationName}] saved-search discovery skipped: ${err instanceof Error ? err.message : String(err)}`);
+        }
+        return baseline;
+    }
+    /**
+     * Returns the Declared fields (from the engine cache) PLUS — additively, with a credential — the
+     * tenant's custom fields for the object via the runtime custom-field MECHANISM. The Declared set is
+     * always present; customs are an extension, never a replacement, and are never baked.
+     */
+    async DiscoverFields(companyIntegration, objectName, contextUser) {
+        const declared = await super.DiscoverFields(companyIntegration, objectName, contextUser);
+        if (!this.HasCredential(companyIntegration))
+            return declared;
+        try {
+            const customs = await this.DiscoverCustomFields(companyIntegration, objectName, contextUser);
+            const known = new Set(declared.map(f => f.Name.toLowerCase()));
+            for (const c of customs)
+                if (!known.has(c.Name.toLowerCase()))
+                    declared.push(c);
+        }
+        catch (err) {
+            console.warn(`[${this.IntegrationName}] custom-field discovery skipped for "${objectName}": ${err instanceof Error ? err.message : String(err)}`);
+        }
+        return declared;
+    }
+    /**
+     * Runtime MECHANISM: fetch a tenant's custom-field definitions for an object and map them to
+     * ExternalFieldSchema. Custom fields are tenant-defined extensions — never declared, never NOT NULL
+     * (provable-only: a custom field's required-ness is not asserted by this endpoint's shape unless
+     * the vendor flags it). This is the discovery mechanism; the actual fields come from the live call.
+     */
+    async DiscoverCustomFields(companyIntegration, objectName, contextUser) {
+        const auth = await this.Authenticate(companyIntegration, contextUser);
+        const path = this.ResolveTenantPath(CUSTOM_FIELDS_PATH_TEMPLATE, auth.Config.TenantID);
+        const url = `${this.GetBaseURL(companyIntegration, auth)}${path}?objectType=${encodeURIComponent(objectName)}`;
+        const response = await this.MakeHTTPRequest(auth, url, 'GET', this.BuildHeaders(auth));
+        if (response.Status < 200 || response.Status >= 300)
+            return [];
+        const raw = this.NormalizeResponse(response.Body, null);
+        return raw.map(cf => this.CustomFieldToSchema(cf));
+    }
+    /** Maps a raw custom-field definition to a field schema. Provable-only on required/type. */
+    CustomFieldToSchema(cf) {
+        const name = String(cf['name'] ?? cf['fieldName'] ?? cf['id'] ?? '');
+        const dataType = typeof cf['dataType'] === 'string' ? this.MapCustomFieldType(cf['dataType']) : 'string';
+        const schema = {
+            Name: name,
+            Label: typeof cf['label'] === 'string' ? cf['label'] : name,
+            Description: typeof cf['description'] === 'string' ? cf['description'] : undefined,
+            DataType: dataType,
+            // Provable-only: only mark required when the vendor explicitly flags it.
+            IsRequired: cf['isRequired'] === true,
+            IsUniqueKey: false,
+            IsReadOnly: cf['isReadOnly'] === true,
+        };
+        return schema;
+    }
+    MapCustomFieldType(t) {
+        const map = {
+            string: 'string', text: 'string', textarea: 'string', email: 'string', url: 'string', phone: 'string',
+            boolean: 'boolean', bool: 'boolean', integer: 'number', int: 'number', number: 'number',
+            decimal: 'decimal', currency: 'decimal', money: 'decimal', date: 'datetime', datetime: 'datetime',
+            picklist: 'string', lookup: 'string',
+        };
+        return map[t.toLowerCase()] ?? 'string';
+    }
+    /**
+     * Runtime MECHANISM: surface a tenant's saved searches as discoverable objects. Saved searches are a
+     * per-tenant query surface (each tenant defines its own) — never a standard object family, so they
+     * are additive-only and the connector stays non-authoritative.
+     */
+    async DiscoverSavedSearchObjects(companyIntegration, contextUser) {
+        const auth = await this.Authenticate(companyIntegration, contextUser);
+        const path = this.ResolveTenantPath(SAVED_SEARCHES_PATH_TEMPLATE, auth.Config.TenantID);
+        const url = `${this.GetBaseURL(companyIntegration, auth)}${path}`;
+        const response = await this.MakeHTTPRequest(auth, url, 'GET', this.BuildHeaders(auth));
+        if (response.Status < 200 || response.Status >= 300)
+            return [];
+        const raw = this.NormalizeResponse(response.Body, null);
+        return raw.map(ss => ({
+            Name: `savedsearch:${String(ss['name'] ?? ss['id'] ?? '')}`,
+            Label: typeof ss['name'] === 'string' ? ss['name'] : 'Saved Search',
+            Description: 'Tenant-defined saved search (runtime-discovered query surface).',
+            SupportsIncrementalSync: false,
+            SupportsWrite: false,
+        }));
+    }
+    // ── Auth (two-step signed request → accessToken header) ───────────────────
+    async Authenticate(companyIntegration, contextUser) {
+        const config = await this.ParseConfig(companyIntegration, contextUser);
+        if (this.tokenCache && this.tokenCache.ExpiresAt > Date.now() + TOKEN_REFRESH_BUFFER_MS) {
+            return this.BuildAuthContext(config, this.tokenCache.AccessToken);
+        }
+        const token = await this.ObtainToken(config);
+        this.tokenCache = token;
+        return this.BuildAuthContext(config, token.AccessToken);
+    }
+    BuildAuthContext(config, accessToken) {
+        return {
+            Token: accessToken,
+            AccessToken: accessToken,
+            Config: config,
+            BaseURL: config.BaseURL ?? DEFAULT_BASE_URL,
+        };
+    }
+    /**
+     * Step 1 of the two-step flow: POST the 6-part signed credential set to msc_authdata → accessToken.
+     *
+     * NO inline crypto. The swagger documents the signing certificate + its id as VALUES posted in the
+     * auth body (the server verifies them); it documents NO client-side HMAC/signature computation. If a
+     * future tenant deployment requires request-signing beyond posting the credential set, that is a
+     * NOTED auth-helpers extension request (RemainingGaps), not a fabricated routine here.
+     */
+    async ObtainToken(config) {
+        // Pre-provisioned token (test/broker injection) — use as-is, no exchange.
+        if (config.AccessToken) {
+            return { AccessToken: config.AccessToken, RefreshToken: config.RefreshToken, ExpiresAt: Date.now() + TOKEN_LIFETIME_MS };
+        }
+        const baseURL = config.BaseURL ?? DEFAULT_BASE_URL;
+        // Refresh path: a cached refresh token can re-mint an access token without re-signing.
+        if (this.tokenCache?.RefreshToken) {
+            const refreshed = await this.RefreshToken(baseURL, this.tokenCache.RefreshToken, config);
+            if (refreshed)
+                return refreshed;
+        }
+        const authPath = this.ResolveTenantPath(AUTH_PATH_TEMPLATE, config.TenantID);
+        const body = {
+            accessKeyId: config.AccessKeyID,
+            associationId: config.AssociationID,
+            associationKey: config.AssociationKey,
+            secretAccessKey: config.SecretAccessKey,
+            signingCertificate: config.SigningCertificate,
+            signingCertificateId: config.SigningCertificateID,
+        };
+        const response = await this.RawPost(`${baseURL}${authPath}`, body);
+        if (response.Status < 200 || response.Status >= 300) {
+            throw new Error(`MemberSuite auth failed: HTTP ${response.Status} at ${authPath} — ${this.SafeBody(response)}`);
+        }
+        const data = response.Body;
+        if (!data || typeof data.accessToken !== 'string' || data.accessToken.length === 0) {
+            throw new Error('MemberSuite auth response carried no accessToken.');
+        }
+        return { AccessToken: data.accessToken, RefreshToken: data.refreshToken, ExpiresAt: Date.now() + TOKEN_LIFETIME_MS };
+    }
+    /** Step 2 refresh: POST RefreshTokenRequest {idToken, refreshToken} → new accessToken. Best-effort. */
+    async RefreshToken(baseURL, refreshToken, _config) {
+        try {
+            const response = await this.RawPost(`${baseURL}${REFRESH_PATH}`, { refreshToken });
+            if (response.Status < 200 || response.Status >= 300)
+                return null;
+            const data = response.Body;
+            if (typeof data?.accessToken !== 'string' || data.accessToken.length === 0)
+                return null;
+            return { AccessToken: data.accessToken, RefreshToken: data.refreshToken ?? refreshToken, ExpiresAt: Date.now() + TOKEN_LIFETIME_MS };
+        }
+        catch {
+            return null; // fall back to a full re-auth
+        }
+    }
+    async ParseConfig(companyIntegration, contextUser, provider) {
+        const fromConfigJSON = this.ParseConfigJSON(companyIntegration.Configuration);
+        const credentialID = companyIntegration.CredentialID;
+        if (credentialID) {
+            const md = provider ?? new Metadata();
+            const credential = await md.GetEntityObject('MJ: Credentials', contextUser);
+            const loaded = await credential.Load(credentialID);
+            if (loaded && credential.Values) {
+                const parsed = JSON.parse(credential.Values);
+                return this.BuildConfig(parsed, fromConfigJSON);
+            }
+        }
+        if (fromConfigJSON)
+            return this.BuildConfig(fromConfigJSON, null);
+        throw new Error('No MemberSuite credentials found — set the Credential entity or Configuration JSON.');
+    }
+    ParseConfigJSON(json) {
+        if (!json)
+            return null;
+        try {
+            return JSON.parse(json);
+        }
+        catch {
+            return null;
+        }
+    }
+    BuildConfig(creds, configJSON) {
+        const pick = (...keys) => {
+            for (const k of keys) {
+                if (creds[k])
+                    return creds[k];
+                if (configJSON && configJSON[k])
+                    return configJSON[k];
+            }
+            return undefined;
+        };
+        return {
+            TenantID: pick('TenantID', 'tenantId', 'tenant_id', 'AssociationID', 'associationId') ?? '',
+            AccessKeyID: pick('AccessKeyID', 'accessKeyId', 'access_key_id') ?? '',
+            AssociationID: pick('AssociationID', 'associationId', 'association_id') ?? '',
+            AssociationKey: pick('AssociationKey', 'associationKey', 'association_key') ?? '',
+            SecretAccessKey: pick('SecretAccessKey', 'secretAccessKey', 'secret_access_key') ?? '',
+            SigningCertificate: pick('SigningCertificate', 'signingCertificate', 'signing_certificate') ?? '',
+            SigningCertificateID: pick('SigningCertificateID', 'signingCertificateId', 'signing_certificate_id') ?? '',
+            AccessToken: pick('AccessToken', 'accessToken', 'access_token'),
+            RefreshToken: pick('RefreshToken', 'refreshToken', 'refresh_token'),
+            BaseURL: pick('BaseURL', 'baseUrl', 'base_url'),
+        };
+    }
+    /** True when a credential or Configuration-carried credential set is present (gates live discovery). */
+    HasCredential(companyIntegration) {
+        if (companyIntegration.CredentialID)
+            return true;
+        const cfg = this.ParseConfigJSON(companyIntegration.Configuration);
+        return !!cfg && (!!cfg['AccessToken'] || !!cfg['accessToken'] || !!cfg['SecretAccessKey'] || !!cfg['secretAccessKey']);
+    }
+    // ── TestConnection ───────────────────────────────────────────────────────
+    async TestConnection(companyIntegration, contextUser) {
+        try {
+            const auth = await this.Authenticate(companyIntegration, contextUser);
+            if (!auth.AccessToken)
+                return { Success: false, Message: 'MemberSuite authentication returned no access token.' };
+            // A successful token exchange is the connection proof; confirm the host is reachable for a read.
+            const probePath = this.ResolveTenantPath(CUSTOM_FIELDS_PATH_TEMPLATE, auth.Config.TenantID);
+            const response = await this.MakeHTTPRequest(auth, `${this.GetBaseURL(companyIntegration, auth)}${probePath}`, 'GET', this.BuildHeaders(auth));
+            if (response.Status >= 200 && response.Status < 300)
+                return { Success: true, Message: 'Connected to MemberSuite REST API v2.' };
+            if (response.Status === 401 || response.Status === 403)
+                return { Success: false, Message: `MemberSuite authorization denied: HTTP ${response.Status}.` };
+            // The token exchange already succeeded; a non-2xx on the probe (e.g. 404 for a tenant with no
+            // custom fields) still means we authenticated successfully.
+            return { Success: true, Message: `Authenticated to MemberSuite (probe returned HTTP ${response.Status}).` };
+        }
+        catch (err) {
+            return { Success: false, Message: err instanceof Error ? err.message : String(err) };
+        }
+    }
+    // ── URL / Response / Pagination ──────────────────────────────────────────
+    GetBaseURL(_ci, auth) {
+        return auth.BaseURL;
+    }
+    /** Substitute the `{tenantId}` segment into a path template (tenant-scoped, never a constant). */
+    ResolveTenantPath(template, tenantID) {
+        return template.replace(/\{tenantId\}/g, encodeURIComponent(tenantID));
+    }
+    /**
+     * Strip the response envelope to expose individual records. MemberSuite list responses return either
+     * a bare array, or an envelope with the records under a `results`/`items`/`data` key (the swagger
+     * uses `results` for the paged list shape); a get-one returns a single object.
+     */
+    NormalizeResponse(rawBody, responseDataKey) {
+        if (Array.isArray(rawBody))
+            return rawBody;
+        if (!rawBody || typeof rawBody !== 'object')
+            return [];
+        const body = rawBody;
+        if (responseDataKey && Array.isArray(body[responseDataKey]))
+            return body[responseDataKey];
+        for (const k of ['results', 'items', 'data', 'records', 'Results', 'Items']) {
+            if (Array.isArray(body[k]))
+                return body[k];
+        }
+        // A single non-enveloped record (e.g. get-one) — pass through as one record.
+        return [body];
+    }
+    /**
+     * PageNumber pagination (1-indexed). A page that returns a full page-size implies more may remain;
+     * a short/empty page is the last. The total may be reported under `totalCount`/`count` — when present
+     * we use it for an exact HasMore, otherwise fall back to the page-fill heuristic.
+     */
+    ExtractPaginationInfo(rawBody, _pt, currentPage, _co, pageSize) {
+        const records = this.NormalizeResponse(rawBody, null);
+        let total;
+        if (rawBody && typeof rawBody === 'object' && !Array.isArray(rawBody)) {
+            const body = rawBody;
+            for (const k of ['totalCount', 'count', 'total', 'TotalCount', 'totalRecords']) {
+                if (typeof body[k] === 'number') {
+                    total = body[k];
+                    break;
+                }
+            }
+        }
+        if (typeof total === 'number') {
+            const seen = currentPage * pageSize;
+            return { HasMore: seen < total, NextPage: currentPage + 1, TotalRecords: total };
+        }
+        const hasMore = records.length >= pageSize && records.length > 0;
+        return { HasMore: hasMore, NextPage: currentPage + 1 };
+    }
+    // ── FetchChanges (MSQL list with tenantId path + watermark filter + page paging) ─
+    /**
+     * Reads a MemberSuite object via the list door:
+     *   GET /{service}/v1/{resource}/{tenantId}?msql=<select … where lastModifiedDate > wm>&page=&pageSize=
+     *
+     * The IO's `APIPath` (`/{service}/v1/{resource}`) is the base; we append the `{tenantId}` path segment
+     * (the access path's `entryQuery` carries `/{service}/v1/{resource}/{tenantId}`), the MSQL filter
+     * (watermark-driven incremental), and the 1-indexed page params. This is genuinely idiosyncratic
+     * (tenantId path segment + MSQL query language), so we override the base flat-fetch rather than the
+     * base appending only `page`/`pageSize` to a tenantId-less path.
+     */
+    async FetchChanges(ctx) {
+        const obj = this.GetCachedObject(ctx.CompanyIntegration.IntegrationID, ctx.ObjectName);
+        // Saved-search runtime objects are a query surface, not a standard list door — nothing to pull here.
+        if (ctx.ObjectName.startsWith('savedsearch:')) {
+            return { Records: [], HasMore: false, Warnings: [{ Code: 'NON_STANDARD_OBJECT', Message: `"${ctx.ObjectName}" is a tenant saved search (runtime query surface); it is not synced via the standard list door.` }] };
+        }
+        const fields = this.GetCachedFields(obj.ID);
+        const auth = await this.Authenticate(ctx.CompanyIntegration, ctx.ContextUser);
+        const headers = this.BuildHeaders(auth);
+        const watermarkField = obj.IncrementalWatermarkField ?? DEFAULT_WATERMARK_FIELD;
+        const cfg = this.ReadAccessConfig(obj);
+        const resourceName = this.ResourceNameForMSQL(obj, cfg);
+        const pageSize = obj.DefaultPageSize ?? DEFAULT_PAGE_SIZE;
+        const listBase = `${this.GetBaseURL(ctx.CompanyIntegration, auth)}${this.BuildListPath(obj, cfg, auth.Config.TenantID)}`;
+        const msql = this.BuildMSQL(resourceName, watermarkField, ctx.WatermarkValue ?? null);
+        const allRaw = [];
+        let page = ctx.CurrentPage ?? FIRST_PAGE;
+        const batchLimit = ctx.BatchSize ?? Number.MAX_SAFE_INTEGER;
+        let hasMore = true;
+        let lastPageReached = false;
+        while (hasMore && allRaw.length < batchLimit) {
+            const url = this.BuildMSQLPageURL(listBase, msql, page, pageSize);
+            const response = await this.MakeHTTPRequest(auth, url, 'GET', headers);
+            if (response.Status === 403) {
+                return { Records: [], HasMore: false, Warnings: [{ Code: 'FORBIDDEN', Message: `"${ctx.ObjectName}" requires additional API permissions (HTTP 403); skipping.` }] };
+            }
+            if (response.Status < 200 || response.Status >= 300) {
+                throw new Error(`MemberSuite list error for "${ctx.ObjectName}": HTTP ${response.Status} — ${this.SafeBody(response)}`);
+            }
+            const pageRecords = this.NormalizeResponse(response.Body, obj.ResponseDataKey);
+            if (pageRecords.length === 0) {
+                hasMore = false;
+                lastPageReached = true;
+                break;
+            }
+            allRaw.push(...pageRecords);
+            const pg = this.ExtractPaginationInfo(response.Body, obj.PaginationType, page, 0, pageSize);
+            hasMore = pg.HasMore;
+            page = pg.NextPage ?? page + 1;
+            if (!hasMore)
+                lastPageReached = true;
+        }
+        const pkFieldNames = this.FindPKFieldNames(fields);
+        const records = allRaw.map(r => this.RawToExternalRecord(r, obj, ctx.ObjectName, watermarkField, pkFieldNames));
+        // Watermark advances ONLY when the full batch drained (last page reached, full-batch success),
+        // and only to the max lastModifiedDate seen — partial-failure / mid-batch leaves it unchanged.
+        let newWatermark;
+        if (lastPageReached) {
+            for (const r of allRaw) {
+                const mod = r[watermarkField];
+                if (typeof mod === 'string' && (!newWatermark || mod > newWatermark))
+                    newWatermark = mod;
+            }
+        }
+        return {
+            Records: records,
+            HasMore: !lastPageReached && hasMore,
+            NextPage: !lastPageReached ? page : undefined,
+            NewWatermarkValue: lastPageReached ? newWatermark : undefined,
+        };
+    }
+    /** The list path: `/{service}/v1/{resource}/{tenantId}` (from the access path's entryQuery / APIPath). */
+    BuildListPath(obj, cfg, tenantID) {
+        const entry = cfg.accessPath?.entryQuery ?? cfg.listPath ?? `${obj.APIPath}/{tenantId}`;
+        return entry.replace(/\{tenantId\}/g, encodeURIComponent(tenantID));
+    }
+    /** The MSQL `from` target — the vendor object/definition name (resource segment of the API path). */
+    ResourceNameForMSQL(obj, _cfg) {
+        // The MSQL `from` uses the resource name; the API path's last segment is the resource collection.
+        const segments = obj.APIPath.split('/').filter(Boolean);
+        return segments[segments.length - 1] ?? obj.Name;
+    }
+    /**
+     * Build the MSQL query. Incremental uses `> watermark` on lastModifiedDate; a first sync selects all.
+     * `select *` returns the full record so full-record pass-through is preserved.
+     */
+    BuildMSQL(resourceName, watermarkField, watermarkValue) {
+        let q = `select * from ${resourceName}`;
+        if (watermarkValue)
+            q += ` where ${watermarkField} > ${this.FormatMSQLDateTime(watermarkValue)}`;
+        return q;
+    }
+    /** MSQL datetime literals are single-quoted ISO-8601 strings. */
+    FormatMSQLDateTime(value) {
+        if (/^\d{4}-\d{2}-\d{2}T/.test(value)) {
+            const norm = value.endsWith('Z') || /[+-]\d{2}:\d{2}$/.test(value) ? value : `${value}Z`;
+            return `'${norm}'`;
+        }
+        const d = new Date(value);
+        return `'${isNaN(d.getTime()) ? value : d.toISOString()}'`;
+    }
+    /** Append `msql`, `page` (1-indexed), and `pageSize` to the tenant-scoped list URL. */
+    BuildMSQLPageURL(listBase, msql, page, pageSize) {
+        const sep = listBase.includes('?') ? '&' : '?';
+        return `${listBase}${sep}msql=${encodeURIComponent(msql)}&page=${page}&pageSize=${pageSize}`;
+    }
+    /** Parse the per-IO access Configuration (service / version / listPath / accessPath). */
+    ReadAccessConfig(obj) {
+        const raw = obj.Configuration;
+        if (!raw)
+            return {};
+        try {
+            return JSON.parse(raw);
+        }
+        catch {
+            return {};
+        }
+    }
+    /** PK field names from the IO's fields (id by convention), sorted by sequence; falls back to `id`. */
+    FindPKFieldNames(fields) {
+        const pks = fields.filter(f => f.IsPrimaryKey).sort((a, b) => a.Sequence - b.Sequence).map(f => f.Name);
+        return pks.length > 0 ? pks : [PK_FIELD];
+    }
+    /**
+     * Build an ExternalRecord from a raw vendor record. The FULL source record flows into `Fields`
+     * (custom-column pass-through contract M1–M4) — the only transformation is the transform-preserving
+     * hook (default identity), so no source key is silently dropped. The PK field(s) supply the
+     * ExternalID (joined with '|' for composite keys); lastModifiedDate supplies ModifiedAt.
+     */
+    RawToExternalRecord(raw, obj, objectType, watermarkField, pkFieldNames) {
+        const fields = this.applyTransformPreservingKeys(raw, obj, this.GetCachedFields(obj.ID));
+        const allPkPresent = pkFieldNames.length > 0 && pkFieldNames.every(n => fields[n] != null && String(fields[n]).length > 0);
+        const externalID = allPkPresent ? pkFieldNames.map(n => String(fields[n])).join('|') : '';
+        const modRaw = raw[watermarkField];
+        return {
+            ExternalID: externalID,
+            ObjectType: objectType,
+            Fields: fields,
+            ModifiedAt: typeof modRaw === 'string' ? new Date(modRaw) : undefined,
+            IsDeleted: raw['isDeleted'] === true,
+        };
+    }
+    // ── CRUD (writeback-scoped: Activity + Certification only) ────────────────
+    //
+    // The generic BaseRESTIntegrationConnector CRUD handles the wire shape (POST flat / id-in-body →
+    // BuildCreatedResult; PUT path-keyed update; DELETE via the non-standard `/delete/{id}` infix). We
+    // override only to ENFORCE the operator-approved writeback allowlist: a write to any object outside
+    // {activities, certifications} is REFUSED, even though metadata declares CRUD columns for it.
+    async CreateRecord(ctx) {
+        const guard = this.GuardWriteback(ctx.ObjectName, 'create');
+        if (guard)
+            return guard;
+        return super.CreateRecord(ctx);
+    }
+    async UpdateRecord(ctx) {
+        const guard = this.GuardWriteback(ctx.ObjectName, 'update');
+        if (guard)
+            return guard;
+        return super.UpdateRecord(ctx);
+    }
+    async DeleteRecord(ctx) {
+        const guard = this.GuardWriteback(ctx.ObjectName, 'delete');
+        if (guard)
+            return guard;
+        return super.DeleteRecord(ctx);
+    }
+    /**
+     * Returns a refusal CRUDResult when the object is OUTSIDE the writeback allowlist; null when the
+     * write is allowed (Activity / Certification). This enforces the operator-scoped "only Activity +
+     * Certification writebacks" decision in code — not a capability fabrication.
+     */
+    GuardWriteback(objectName, verb) {
+        if (WRITEBACK_ALLOWLIST.has(objectName.toLowerCase()))
+            return null;
+        return {
+            Success: false,
+            StatusCode: 0,
+            ErrorMessage: `MemberSuite ${verb} refused for "${objectName}": writebacks are scoped to Activity + Certification only (operator-approved write-back use cases). Writing other objects against a live AMS is out of scope.`,
+        };
+    }
+    // ── Idempotency on create (honor the configured idempotency key) ──────────
+    /**
+     * Extract the created-record id from a create response. MemberSuite returns the new record (id in
+     * body) per the contract's CreateIDLocation='body'. We also honor a configured idempotency reference
+     * (e.g. external_activity_id) when the vendor echoes it — so a duplicate writeback re-resolves to the
+     * same record id rather than minting a duplicate.
+     */
+    ExtractIDFromResponse(response, idLocation) {
+        const base = super.ExtractIDFromResponse(response, idLocation);
+        if (base)
+            return base;
+        if (response.Body && typeof response.Body === 'object') {
+            const b = response.Body;
+            for (const k of [PK_FIELD, 'ID', 'Id', 'recordId', 'RecordID']) {
+                if (typeof b[k] === 'string' || typeof b[k] === 'number')
+                    return String(b[k]);
+            }
+        }
+        return undefined;
+    }
+    // ── Headers + HTTP transport ─────────────────────────────────────────────
+    /**
+     * Authorization header carries the RAW accessToken value (NO "Bearer " prefix — the swagger
+     * documents the Authorization parameter as the bare access-token string).
+     */
+    BuildHeaders(auth) {
+        const token = auth.AccessToken ?? auth.Token ?? '';
+        return {
+            Authorization: token,
+            Accept: 'application/json',
+            'User-Agent': 'MemberJunction-Integration/1.0',
+        };
+    }
+    /** Unauthenticated POST used by the token-exchange + refresh steps (no Authorization header). */
+    async RawPost(url, body) {
+        const controller = new AbortController();
+        const tid = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
+        try {
+            const response = await fetch(url, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json', Accept: 'application/json' },
+                body: JSON.stringify(body),
+                signal: controller.signal,
+            });
+            const parsed = await this.ParseBody(response);
+            return this.ToRESTResponse(response, parsed);
+        }
+        catch (err) {
+            if (err instanceof Error && err.name === 'AbortError')
+                throw new Error(`MemberSuite auth request timed out: ${url}`);
+            throw err;
+        }
+        finally {
+            clearTimeout(tid);
+        }
+    }
+    async MakeHTTPRequest(_auth, url, method, headers, body) {
+        await this.Throttle();
+        for (let attempt = 0; attempt <= MAX_RETRIES; attempt++) {
+            const response = await this.FetchWithTimeout(url, method, headers, body);
+            this.lastRequestTime = Date.now();
+            if (response.status === 401 && attempt === 0) {
+                this.tokenCache = null;
+                continue;
+            }
+            if (response.status === 429 && attempt < MAX_RETRIES) {
+                const ra = Number(response.headers.get('retry-after'));
+                const wait = !isNaN(ra) && ra > 0 ? ra * 1000 : Math.min(1000 * Math.pow(2, attempt) + Math.random() * 500, 60_000);
+                await this.Sleep(wait);
+                continue;
+            }
+            if (response.status >= 500 && attempt < MAX_RETRIES) {
+                await this.Sleep(Math.min(1000 * Math.pow(2, attempt), 30_000));
+                continue;
+            }
+            const parsed = await this.ParseBody(response);
+            return this.ToRESTResponse(response, parsed);
+        }
+        throw new Error(`MemberSuite request failed after ${MAX_RETRIES} retries: ${url}`);
+    }
+    async FetchWithTimeout(url, method, headers, body) {
+        const controller = new AbortController();
+        const tid = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
+        try {
+            const opts = { method, headers };
+            opts.signal = controller.signal;
+            if (body !== undefined && (method === 'POST' || method === 'PUT' || method === 'PATCH')) {
+                opts.body = JSON.stringify(body);
+                opts.headers = { ...headers, 'Content-Type': 'application/json' };
+            }
+            return await fetch(url, opts);
+        }
+        catch (err) {
+            if (err instanceof Error && err.name === 'AbortError')
+                throw new Error(`Request timed out: ${url}`);
+            throw err;
+        }
+        finally {
+            clearTimeout(tid);
+        }
+    }
+    async ParseBody(r) {
+        const ct = r.headers.get('content-type') ?? '';
+        return ct.includes('json') ? r.json().catch(() => null) : r.text();
+    }
+    ToRESTResponse(r, body) {
+        const h = {};
+        r.headers.forEach((v, k) => { h[k.toLowerCase()] = v; });
+        return { Status: r.status, Body: body, Headers: h };
+    }
+    SafeBody(r) {
+        const s = typeof r.Body === 'string' ? r.Body : JSON.stringify(r.Body);
+        return (s ?? '').substring(0, 300);
+    }
+    async Throttle() {
+        const elapsed = Date.now() - this.lastRequestTime;
+        if (elapsed < MIN_REQUEST_INTERVAL_MS)
+            await this.Sleep(MIN_REQUEST_INTERVAL_MS - elapsed);
+    }
+    Sleep(ms) { return new Promise(resolve => setTimeout(resolve, ms)); }
+};
+MemberSuiteConnector = __decorate([
+    RegisterClass(BaseIntegrationConnector, '@memberjunction/connector-membersuite')
+], MemberSuiteConnector);
+export { MemberSuiteConnector };
+// Tree-shaking prevention — REQUIRED so @RegisterClass survives bundling.
+export function LoadMemberSuiteConnector() { }
+//# sourceMappingURL=MemberSuiteConnector.js.map

package/dist/MemberSuiteConnector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MemberSuiteConnector.js","sourceRoot":"","sources":["../src/MemberSuiteConnector.ts"],"names":[],"mappings":";;;;;;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAyC,MAAM,sBAAsB,CAAC;AAOvF,OAAO,EACH,wBAAwB,EACxB,4BAA4B,GAgB/B,MAAM,oCAAoC,CAAC;AAoD5C,+EAA+E;AAE/E,MAAM,gBAAgB,GAAG,8BAA8B,CAAC;AACxD,MAAM,kBAAkB,GAAG,sCAAsC,CAAC;AAClE,MAAM,YAAY,GAAG,2BAA2B,CAAC;AACjD,oGAAoG;AACpG,MAAM,2BAA2B,GAAG,sCAAsC,CAAC;AAC3E,MAAM,4BAA4B,GAAG,uCAAuC,CAAC;AAC7E,uEAAuE;AACvE,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AACnD,mEAAmE;AACnE,MAAM,QAAQ,GAAG,IAAI,CAAC;AACtB,2DAA2D;AAC3D,MAAM,UAAU,GAAG,CAAC,CAAC;AACrB,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAS,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAE9E,MAAM,uBAAuB,GAAG,MAAM,CAAC;AACvC,MAAM,iBAAiB,GAAG,SAAS,CAAC;AACpC,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAEnC,+EAA+E;AAGxE,IAAM,oBAAoB,GAA1B,MAAM,oBAAqB,SAAQ,4BAA4B;IAA/D;;QACK,eAAU,GAAuB,IAAI,CAAC;QACtC,oBAAe,GAAG,CAAC,CAAC;IAspBhC,CAAC;IAppBG,IAAoB,eAAe,KAAa,OAAO,aAAa,CAAC,CAAC,CAAC;IAEvE,8FAA8F;IAC9F,0FAA0F;IAC1F,8FAA8F;IAC9F,yDAAyD;IACzD,IAAoB,cAAc,KAAc,OAAO,IAAI,CAAC,CAAC,CAAC;IAC9D,IAAoB,cAAc,KAAc,OAAO,IAAI,CAAC,CAAC,CAAC;IAC9D,IAAoB,cAAc,KAAc,OAAO,IAAI,CAAC,CAAC,CAAC;IAE9D;;;;;OAKG;IACH,IAAoB,wBAAwB,KAAc,OAAO,KAAK,CAAC,CAAC,CAAC;IAEzE,4EAA4E;IAE5E;;;OAGG;IACH,IAAoB,kBAAkB,KAAc,OAAO,IAAI,CAAC,CAAC,CAAC;IAElE,2FAA2F;IAC3E,iBAAiB,CAAC,WAAmB,IAAmB,OAAO,QAAQ,CAAC,CAAC,CAAC;IAE1F;;;;OAIG;IACH,IAAoB,eAAe;QAC/B,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,qBAAqB,EAAE,GAAG,EAAE,CAAC;IACvE,CAAC;IAED,wFAAwF;IACxE,mBAAmB,CAAC,KAAc;QAC9C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC1D,MAAM,OAAO,GAAI,KAA8C,CAAC,OAAO,CAAC;QACxE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC,aAAa,CAAC,CAAC;QACpC,IAAI,EAAE,EAAE,CAAC;YACL,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;YACxB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,GAAG,IAAI,CAAC;QACzC,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,qFAAqF;IAErF;;;;;;OAMG;IACa,KAAK,CAAC,eAAe,CACjC,kBAA8C,EAAE,WAAqB;QAErE,+FAA+F;QAC/F,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAC;QAE9E,iGAAiG;QACjG,+FAA+F;QAC/F,yGAAyG;QACzG,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC;YAAE,OAAO,QAAQ,CAAC;QAC7D,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAC;YACtF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YAC/D,KAAK,MAAM,CAAC,IAAI,MAAM;gBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;oBAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,gGAAgG;YAChG,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,eAAe,qCAAqC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClI,CAAC;QACD,OAAO,QAAQ,CAAC;IACpB,CAAC;IAED;;;;OAIG;IACa,KAAK,CAAC,cAAc,CAChC,kBAA8C,EAAE,UAAkB,EAAE,WAAqB;QAEzF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,kBAAkB,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;QACzF,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC;YAAE,OAAO,QAAQ,CAAC;QAC7D,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,kBAAkB,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;YAC7F,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YAC/D,KAAK,MAAM,CAAC,IAAI,OAAO;gBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;oBAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,eAAe,yCAAyC,UAAU,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtJ,CAAC;QACD,OAAO,QAAQ,CAAC;IACpB,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,oBAAoB,CAC9B,kBAA8C,EAAE,UAAkB,EAAE,WAAqB;QAEzF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,kBAAkB,EAAE,WAAW,CAA2B,CAAC;QAChG,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,2BAA2B,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvF,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,IAAI,CAAC,GAAG,IAAI,eAAe,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/G,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QACvF,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG;YAAE,OAAO,EAAE,CAAC;QAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxD,OAAO,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,4FAA4F;IACpF,mBAAmB,CAAC,EAA2B;QACnD,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,UAAU,CAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACnH,MAAM,MAAM,GAAwB;YAChC,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,EAAE,CAAC,OAAO,CAAY,CAAC,CAAC,CAAC,IAAI;YACvE,WAAW,EAAE,OAAO,EAAE,CAAC,aAAa,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,EAAE,CAAC,aAAa,CAAY,CAAC,CAAC,CAAC,SAAS;YAC9F,QAAQ,EAAE,QAAQ;YAClB,yEAAyE;YACzE,UAAU,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,IAAI;YACrC,WAAW,EAAE,KAAK;YAClB,UAAU,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,IAAI;SACxC,CAAC;QACF,OAAO,MAAM,CAAC;IAClB,CAAC;IAEO,kBAAkB,CAAC,CAAS;QAChC,MAAM,GAAG,GAA2B;YAChC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ;YACrG,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ;YACvF,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU;YACjG,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ;SACvC,CAAC;QACF,OAAO,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,QAAQ,CAAC;IAC5C,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,0BAA0B,CACpC,kBAA8C,EAAE,WAAqB;QAErE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,kBAAkB,EAAE,WAAW,CAA2B,CAAC;QAChG,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,4BAA4B,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxF,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;QAClE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QACvF,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG;YAAE,OAAO,EAAE,CAAC;QAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxD,OAAO,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAClB,IAAI,EAAE,eAAe,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE;YAC3D,KAAK,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,EAAE,CAAC,MAAM,CAAY,CAAC,CAAC,CAAC,cAAc;YAC/E,WAAW,EAAE,iEAAiE;YAC9E,uBAAuB,EAAE,KAAK;YAC9B,aAAa,EAAE,KAAK;SACvB,CAAC,CAAC,CAAC;IACR,CAAC;IAED,6EAA6E;IAEnE,KAAK,CAAC,YAAY,CAAC,kBAA8C,EAAE,WAAqB;QAC9F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAC;QACvE,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,uBAAuB,EAAE,CAAC;YACtF,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;QACxB,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAC5D,CAAC;IAEO,gBAAgB,CAAC,MAAmC,EAAE,WAAmB;QAC7E,OAAO;YACH,KAAK,EAAE,WAAW;YAClB,WAAW,EAAE,WAAW;YACxB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,gBAAgB;SACpB,CAAC;IAChC,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,WAAW,CAAC,MAAmC;QACzD,0EAA0E;QAC1E,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACrB,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,iBAAiB,EAAE,CAAC;QAC7H,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,gBAAgB,CAAC;QACnD,uFAAuF;QACvF,IAAI,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC;YAChC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YACzF,IAAI,SAAS;gBAAE,OAAO,SAAS,CAAC;QACpC,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG;YACT,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;YAC7C,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;SACpD,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,OAAO,GAAG,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,CAAC,MAAM,OAAO,QAAQ,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACpH,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAkC,CAAC;QACzD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjF,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,iBAAiB,EAAE,CAAC;IACzH,CAAC;IAED,uGAAuG;IAC/F,KAAK,CAAC,YAAY,CAAC,OAAe,EAAE,YAAoB,EAAE,OAAoC;QAClG,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,OAAO,GAAG,YAAY,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;YACnF,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG;gBAAE,OAAO,IAAI,CAAC;YACjE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAkC,CAAC;YACzD,IAAI,OAAO,IAAI,EAAE,WAAW,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACxF,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,iBAAiB,EAAE,CAAC;QACzI,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAC,CAAC,8BAA8B;QAC/C,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,kBAA8C,EAAE,WAAsB,EAAE,QAA4B;QAC1H,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;QAC9E,MAAM,YAAY,GAAG,kBAAkB,CAAC,YAAY,CAAC;QACrD,IAAI,YAAY,EAAE,CAAC;YACf,MAAM,EAAE,GAAG,QAAQ,IAAI,IAAI,QAAQ,EAAE,CAAC;YACtC,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,eAAe,CAAqB,iBAAiB,EAAE,WAAW,CAAC,CAAC;YAChG,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACnD,IAAI,MAAM,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAA2B,CAAC;gBACvE,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;YACpD,CAAC;QACL,CAAC;QACD,IAAI,cAAc;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC,CAAC;IAC3G,CAAC;IAEO,eAAe,CAAC,IAA+B;QACnD,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAA2B,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IACrF,CAAC;IAEO,WAAW,CAAC,KAA6B,EAAE,UAAyC;QACxF,MAAM,IAAI,GAAG,CAAC,GAAG,IAAc,EAAsB,EAAE;YACnD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACnB,IAAI,KAAK,CAAC,CAAC,CAAC;oBAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC9B,IAAI,UAAU,IAAI,UAAU,CAAC,CAAC,CAAC;oBAAE,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;YAC1D,CAAC;YACD,OAAO,SAAS,CAAC;QACrB,CAAC,CAAC;QACF,OAAO;YACH,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,eAAe,CAAC,IAAI,EAAE;YAC3F,WAAW,EAAE,IAAI,CAAC,aAAa,EAAE,aAAa,EAAE,eAAe,CAAC,IAAI,EAAE;YACtE,aAAa,EAAE,IAAI,CAAC,eAAe,EAAE,eAAe,EAAE,gBAAgB,CAAC,IAAI,EAAE;YAC7E,cAAc,EAAE,IAAI,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,iBAAiB,CAAC,IAAI,EAAE;YACjF,eAAe,EAAE,IAAI,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,IAAI,EAAE;YACtF,kBAAkB,EAAE,IAAI,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,qBAAqB,CAAC,IAAI,EAAE;YACjG,oBAAoB,EAAE,IAAI,CAAC,sBAAsB,EAAE,sBAAsB,EAAE,wBAAwB,CAAC,IAAI,EAAE;YAC1G,WAAW,EAAE,IAAI,CAAC,aAAa,EAAE,aAAa,EAAE,cAAc,CAAC;YAC/D,YAAY,EAAE,IAAI,CAAC,cAAc,EAAE,cAAc,EAAE,eAAe,CAAC;YACnE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC;SAClD,CAAC;IACN,CAAC;IAED,wGAAwG;IAChG,aAAa,CAAC,kBAA8C;QAChE,IAAI,kBAAkB,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;QACnE,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC3H,CAAC;IAED,4EAA4E;IAErE,KAAK,CAAC,cAAc,CAAC,kBAA8C,EAAE,WAAqB;QAC7F,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,kBAAkB,EAAE,WAAW,CAA2B,CAAC;YAChG,IAAI,CAAC,IAAI,CAAC,WAAW;gBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,sDAAsD,EAAE,CAAC;YAClH,iGAAiG;YACjG,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,2BAA2B,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC5F,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,IAAI,CAAC,GAAG,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9I,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG;gBAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;YAChI,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,0CAA0C,QAAQ,CAAC,MAAM,GAAG,EAAE,CAAC;YACzJ,8FAA8F;YAC9F,4DAA4D;YAC5D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,qDAAqD,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;QAChH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACzF,CAAC;IACL,CAAC;IAED,4EAA4E;IAElE,UAAU,CAAC,GAA+B,EAAE,IAAqB;QACvE,OAAQ,IAA+B,CAAC,OAAO,CAAC;IACpD,CAAC;IAED,kGAAkG;IAC1F,iBAAiB,CAAC,QAAgB,EAAE,QAAgB;QACxD,OAAO,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3E,CAAC;IAED;;;;OAIG;IACO,iBAAiB,CAAC,OAAgB,EAAE,eAA8B;QACxE,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,OAAoC,CAAC;QACxE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,OAAkC,CAAC;QAChD,IAAI,eAAe,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,eAAe,CAA8B,CAAC;QACvH,KAAK,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;YAC1E,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,CAAC,CAA8B,CAAC;QAC5E,CAAC;QACD,6EAA6E;QAC7E,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC;IAED;;;;OAIG;IACO,qBAAqB,CAAC,OAAgB,EAAE,GAAmB,EAAE,WAAmB,EAAE,GAAW,EAAE,QAAgB;QACrH,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACtD,IAAI,KAAyB,CAAC;QAC9B,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,GAAG,OAAkC,CAAC;YAChD,KAAK,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,cAAc,CAAC,EAAE,CAAC;gBAC7E,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;oBAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAW,CAAC;oBAAC,MAAM;gBAAC,CAAC;YAC1E,CAAC;QACL,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,WAAW,GAAG,QAAQ,CAAC;YACpC,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,KAAK,EAAE,QAAQ,EAAE,WAAW,GAAG,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;QACrF,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QACjE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,GAAG,CAAC,EAAE,CAAC;IAC3D,CAAC;IAED,oFAAoF;IAEpF;;;;;;;;;OASG;IACa,KAAK,CAAC,YAAY,CAAC,GAAiB;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,kBAAkB,CAAC,aAAa,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;QACvF,qGAAqG;QACrG,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC5C,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,UAAU,kGAAkG,EAAE,CAAC,EAAE,CAAC;QACvN,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,kBAAkB,EAAE,GAAG,CAAC,WAAW,CAA2B,CAAC;QACxG,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,cAAc,GAAG,GAAG,CAAC,yBAAyB,IAAI,uBAAuB,CAAC;QAChF,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAExD,MAAM,QAAQ,GAAG,GAAG,CAAC,eAAe,IAAI,iBAAiB,CAAC;QAC1D,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,CAAC;QAEtF,MAAM,MAAM,GAA8B,EAAE,CAAC;QAC7C,IAAI,IAAI,GAAG,GAAG,CAAC,WAAW,IAAI,UAAU,CAAC;QACzC,MAAM,UAAU,GAAG,GAAG,CAAC,SAAS,IAAI,MAAM,CAAC,gBAAgB,CAAC;QAC5D,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,IAAI,eAAe,GAAG,KAAK,CAAC;QAE5B,OAAO,OAAO,IAAI,MAAM,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YAClE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YACvE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC1B,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,UAAU,6DAA6D,EAAE,CAAC,EAAE,CAAC;YACxK,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;gBAClD,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,CAAC,UAAU,WAAW,QAAQ,CAAC,MAAM,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC5H,CAAC;YACD,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC;YAC/E,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAAC,OAAO,GAAG,KAAK,CAAC;gBAAC,eAAe,GAAG,IAAI,CAAC;gBAAC,MAAM;YAAC,CAAC;YACjF,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;YAC5B,MAAM,EAAE,GAAG,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;YAC5F,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC;YACrB,IAAI,GAAG,EAAE,CAAC,QAAQ,IAAI,IAAI,GAAG,CAAC,CAAC;YAC/B,IAAI,CAAC,OAAO;gBAAE,eAAe,GAAG,IAAI,CAAC;QACzC,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,UAAU,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC;QAEhH,+FAA+F;QAC/F,+FAA+F;QAC/F,IAAI,YAAgC,CAAC;QACrC,IAAI,eAAe,EAAE,CAAC;YAClB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;gBACrB,MAAM,GAAG,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;gBAC9B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,YAAY,IAAI,GAAG,GAAG,YAAY,CAAC;oBAAE,YAAY,GAAG,GAAG,CAAC;YAC7F,CAAC;QACL,CAAC;QAED,OAAO;YACH,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,CAAC,eAAe,IAAI,OAAO;YACpC,QAAQ,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YAC7C,iBAAiB,EAAE,eAAe,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;SAChE,CAAC;IACN,CAAC;IAED,0GAA0G;IAClG,aAAa,CAAC,GAA8B,EAAE,GAAmB,EAAE,QAAgB;QACvF,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,EAAE,UAAU,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,GAAG,CAAC,OAAO,aAAa,CAAC;QACxF,OAAO,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,qGAAqG;IAC7F,mBAAmB,CAAC,GAA8B,EAAE,IAAoB;QAC5E,kGAAkG;QAClG,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACxD,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC;IACrD,CAAC;IAED;;;OAGG;IACK,SAAS,CAAC,YAAoB,EAAE,cAAsB,EAAE,cAA6B;QACzF,IAAI,CAAC,GAAG,iBAAiB,YAAY,EAAE,CAAC;QACxC,IAAI,cAAc;YAAE,CAAC,IAAI,UAAU,cAAc,MAAM,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,EAAE,CAAC;QACjG,OAAO,CAAC,CAAC;IACb,CAAC;IAED,iEAAiE;IACzD,kBAAkB,CAAC,KAAa;QACpC,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC;YACzF,OAAO,IAAI,IAAI,GAAG,CAAC;QACvB,CAAC;QACD,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC;IAC/D,CAAC;IAED,uFAAuF;IAC/E,gBAAgB,CAAC,QAAgB,EAAE,IAAY,EAAE,IAAY,EAAE,QAAgB;QACnF,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAC/C,OAAO,GAAG,QAAQ,GAAG,GAAG,QAAQ,kBAAkB,CAAC,IAAI,CAAC,SAAS,IAAI,aAAa,QAAQ,EAAE,CAAC;IACjG,CAAC;IAED,yFAAyF;IACjF,gBAAgB,CAAC,GAA8B;QACnD,MAAM,GAAG,GAAI,GAAoD,CAAC,aAAa,CAAC;QAChF,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;QACpB,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IAC1E,CAAC;IAED,sGAAsG;IAC9F,gBAAgB,CAAC,MAAwC;QAC7D,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxG,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;OAKG;IACK,mBAAmB,CAAC,GAA4B,EAAE,GAA8B,EAAE,UAAkB,EAAE,cAAsB,EAAE,YAAsB;QACxJ,MAAM,MAAM,GAAG,IAAI,CAAC,4BAA4B,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACzF,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC3H,MAAM,UAAU,GAAG,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,MAAM,MAAM,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC;QACnC,OAAO;YACH,UAAU,EAAE,UAAU;YACtB,UAAU,EAAE,UAAU;YACtB,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;YACrE,SAAS,EAAE,GAAG,CAAC,WAAW,CAAC,KAAK,IAAI;SACvC,CAAC;IACN,CAAC;IAED,6EAA6E;IAC7E,EAAE;IACF,iGAAiG;IACjG,mGAAmG;IACnG,oGAAoG;IACpG,8FAA8F;IAE9E,KAAK,CAAC,YAAY,CAAC,GAAwB;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC5D,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACxB,OAAO,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAEe,KAAK,CAAC,YAAY,CAAC,GAAwB;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC5D,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACxB,OAAO,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAEe,KAAK,CAAC,YAAY,CAAC,GAAwB;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC5D,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACxB,OAAO,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAED;;;;OAIG;IACK,cAAc,CAAC,UAAkB,EAAE,IAAY;QACnD,IAAI,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QACnE,OAAO;YACH,OAAO,EAAE,KAAK;YACd,UAAU,EAAE,CAAC;YACb,YAAY,EAAE,eAAe,IAAI,iBAAiB,UAAU,+JAA+J;SAC9N,CAAC;IACN,CAAC;IAED,6EAA6E;IAE7E;;;;;OAKG;IACgB,qBAAqB,CAAC,QAAsB,EAAE,UAAyB;QACtF,MAAM,IAAI,GAAG,KAAK,CAAC,qBAAqB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC/D,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QACtB,IAAI,QAAQ,CAAC,IAAI,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAA+B,CAAC;YACnD,KAAK,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,CAAC;gBAC7D,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ;oBAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClF,CAAC;QACL,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,4EAA4E;IAE5E;;;OAGG;IACgB,YAAY,CAAC,IAAqB;QACjD,MAAM,KAAK,GAAI,IAA+B,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/E,OAAO;YACH,aAAa,EAAE,KAAK;YACpB,MAAM,EAAE,kBAAkB;YAC1B,YAAY,EAAE,gCAAgC;SACjD,CAAC;IACN,CAAC;IAED,iGAAiG;IACzF,KAAK,CAAC,OAAO,CAAC,GAAW,EAAE,IAAa;QAC5C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,kBAAkB,CAAC,CAAC;QACrE,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC9B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE;gBAC3E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC5B,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAC9C,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,GAAG,EAAE,CAAC,CAAC;YACrH,MAAM,GAAG,CAAC;QACd,CAAC;gBAAS,CAAC;YACP,YAAY,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;IACL,CAAC;IAES,KAAK,CAAC,eAAe,CAAC,KAAsB,EAAE,GAAW,EAAE,MAAc,EAAE,OAA+B,EAAE,IAAc;QAChI,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;YACtD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;YACzE,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAClC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;gBAAC,SAAS;YAAC,CAAC;YACnF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;gBACnD,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;gBACvD,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,EAAE,MAAM,CAAC,CAAC;gBACpH,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAC,SAAS;YACrC,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;gBAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YACnI,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAC9C,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oCAAoC,WAAW,aAAa,GAAG,EAAE,CAAC,CAAC;IACvF,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,GAAW,EAAE,MAAc,EAAE,OAA+B,EAAE,IAAc;QACvG,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,kBAAkB,CAAC,CAAC;QACrE,IAAI,CAAC;YACD,MAAM,IAAI,GAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAC9C,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;YAChC,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,OAAO,CAAC,EAAE,CAAC;gBACtF,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBACjC,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;YACtE,CAAC;YACD,OAAO,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,GAAG,EAAE,CAAC,CAAC;YACpG,MAAM,GAAG,CAAC;QACd,CAAC;gBAAS,CAAC;YACP,YAAY,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,CAAW;QAC/B,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAC/C,OAAO,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACvE,CAAC;IAEO,cAAc,CAAC,CAAW,EAAE,IAAa;QAC7C,MAAM,CAAC,GAA2B,EAAE,CAAC;QACrC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACxD,CAAC;IAEO,QAAQ,CAAC,CAAe;QAC5B,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACvE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC;IAEO,KAAK,CAAC,QAAQ;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC;QAClD,IAAI,OAAO,GAAG,uBAAuB;YAAE,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,GAAG,OAAO,CAAC,CAAC;IAC/F,CAAC;IAEO,KAAK,CAAC,EAAU,IAAmB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;CACvG,CAAA;AAxpBY,oBAAoB;IADhC,aAAa,CAAC,wBAAwB,EAAE,uCAAuC,CAAC;GACpE,oBAAoB,CAwpBhC;;AAED,0EAA0E;AAC1E,MAAM,UAAU,wBAAwB,KAA+B,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export * from './MemberSuiteConnector.js';
+/** Open App bootstrap entry: importing this module ran the connector's @RegisterClass decorator;
+ *  this no-op satisfies the loader's required startupExport and forces the import at MJAPI boot. */
+export declare function registerConnector(): void;

package/dist/index.js

@@ -0,0 +1,5 @@
+export * from './MemberSuiteConnector.js';
+/** Open App bootstrap entry: importing this module ran the connector's @RegisterClass decorator;
+ *  this no-op satisfies the loader's required startupExport and forces the import at MJAPI boot. */
+export function registerConnector() { }
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,2BAA2B,CAAC;AAE1C;oGACoG;AACpG,MAAM,UAAU,iBAAiB,KAAiD,CAAC"}

package/package.json

@@ -0,0 +1,38 @@
+{
+  "name": "@memberjunction/connector-membersuite",
+  "version": "1.0.0",
+  "description": "MemberJunction MemberSuite connector.",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "/dist"
+  ],
+  "scripts": {
+    "build": "tsc && tsc-alias -f",
+    "test": "vitest run --passWithNoTests"
+  },
+  "author": "MemberJunction.com",
+  "license": "ISC",
+  "peerDependencies": {
+    "@memberjunction/core": ">=5.42.0 <6.0.0",
+    "@memberjunction/core-entities": ">=5.42.0 <6.0.0",
+    "@memberjunction/global": ">=5.42.0 <6.0.0",
+    "@memberjunction/integration-engine": ">=5.42.0 <6.0.0"
+  },
+  "dependencies": {},
+  "devDependencies": {
+    "@types/node": "24.10.11",
+    "tsc-alias": "^1.8.16",
+    "typescript": "^5.9.3",
+    "vitest": "^4.0.18",
+    "@memberjunction/core": "^5.42.0",
+    "@memberjunction/core-entities": "^5.42.0",
+    "@memberjunction/global": "^5.42.0",
+    "@memberjunction/integration-engine": "^5.42.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/MemberJunction/Integrations"
+  }
+}