@noodleseed/one 0.109.0 → 0.111.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (299) hide show
  1. package/dist/commands/analytics-ops.d.ts.map +1 -1
  2. package/dist/commands/analytics-ops.js +36 -57
  3. package/dist/commands/analytics-ops.js.map +1 -1
  4. package/dist/commands/apps-ops.d.ts.map +1 -1
  5. package/dist/commands/apps-ops.js +12 -32
  6. package/dist/commands/apps-ops.js.map +1 -1
  7. package/dist/commands/archive-ops.d.ts.map +1 -1
  8. package/dist/commands/archive-ops.js +30 -48
  9. package/dist/commands/archive-ops.js.map +1 -1
  10. package/dist/commands/audit-ops.js +17 -40
  11. package/dist/commands/audit-ops.js.map +1 -1
  12. package/dist/commands/author-loop.d.ts.map +1 -1
  13. package/dist/commands/author-loop.js +27 -51
  14. package/dist/commands/author-loop.js.map +1 -1
  15. package/dist/commands/catalog-data-tenant-admin.d.ts.map +1 -1
  16. package/dist/commands/catalog-data-tenant-admin.js +35 -0
  17. package/dist/commands/catalog-data-tenant-admin.js.map +1 -1
  18. package/dist/commands/config-values.d.ts.map +1 -1
  19. package/dist/commands/config-values.js +24 -59
  20. package/dist/commands/config-values.js.map +1 -1
  21. package/dist/commands/deploy-ops.d.ts +0 -1
  22. package/dist/commands/deploy-ops.d.ts.map +1 -1
  23. package/dist/commands/deploy-ops.js +6 -42
  24. package/dist/commands/deploy-ops.js.map +1 -1
  25. package/dist/commands/deployments-ops.d.ts.map +1 -1
  26. package/dist/commands/deployments-ops.js +11 -39
  27. package/dist/commands/deployments-ops.js.map +1 -1
  28. package/dist/commands/devtools.d.ts.map +1 -1
  29. package/dist/commands/devtools.js +19 -35
  30. package/dist/commands/devtools.js.map +1 -1
  31. package/dist/commands/envs-ops.d.ts.map +1 -1
  32. package/dist/commands/envs-ops.js +10 -35
  33. package/dist/commands/envs-ops.js.map +1 -1
  34. package/dist/commands/github-shared.d.ts +1 -1
  35. package/dist/commands/github-shared.d.ts.map +1 -1
  36. package/dist/commands/github-shared.js +11 -33
  37. package/dist/commands/github-shared.js.map +1 -1
  38. package/dist/commands/logs-ops.d.ts.map +1 -1
  39. package/dist/commands/logs-ops.js +18 -30
  40. package/dist/commands/logs-ops.js.map +1 -1
  41. package/dist/commands/org-admin.d.ts.map +1 -1
  42. package/dist/commands/org-admin.js +13 -47
  43. package/dist/commands/org-admin.js.map +1 -1
  44. package/dist/commands/org-domains.js +5 -36
  45. package/dist/commands/org-domains.js.map +1 -1
  46. package/dist/commands/org-mcp-subdomain.d.ts +9 -0
  47. package/dist/commands/org-mcp-subdomain.d.ts.map +1 -0
  48. package/dist/commands/org-mcp-subdomain.js +144 -0
  49. package/dist/commands/org-mcp-subdomain.js.map +1 -0
  50. package/dist/commands/org-member-args.d.ts.map +1 -1
  51. package/dist/commands/org-member-args.js +22 -57
  52. package/dist/commands/org-member-args.js.map +1 -1
  53. package/dist/commands/org-openai-challenge.js +9 -40
  54. package/dist/commands/org-openai-challenge.js.map +1 -1
  55. package/dist/commands/project-setup.d.ts.map +1 -1
  56. package/dist/commands/project-setup.js +0 -4
  57. package/dist/commands/project-setup.js.map +1 -1
  58. package/dist/commands/resource-shared.d.ts +1 -1
  59. package/dist/commands/resource-shared.d.ts.map +1 -1
  60. package/dist/commands/resource-shared.js +6 -31
  61. package/dist/commands/resource-shared.js.map +1 -1
  62. package/dist/commands/service-ops.js +21 -40
  63. package/dist/commands/service-ops.js.map +1 -1
  64. package/dist/commands/session.d.ts.map +1 -1
  65. package/dist/commands/session.js +21 -52
  66. package/dist/commands/session.js.map +1 -1
  67. package/dist/commands/shared.d.ts +16 -0
  68. package/dist/commands/shared.d.ts.map +1 -1
  69. package/dist/commands/shared.js +45 -33
  70. package/dist/commands/shared.js.map +1 -1
  71. package/dist/first-run.d.ts.map +1 -1
  72. package/dist/first-run.js +0 -3
  73. package/dist/first-run.js.map +1 -1
  74. package/node_modules/@noodle-borg/control-plane/dist/contracts.d.ts +249 -0
  75. package/node_modules/@noodle-borg/control-plane/dist/contracts.d.ts.map +1 -0
  76. package/node_modules/@noodle-borg/control-plane/dist/contracts.js +2 -0
  77. package/node_modules/@noodle-borg/control-plane/dist/contracts.js.map +1 -0
  78. package/node_modules/@noodle-borg/control-plane/dist/in-memory-organization-store.d.ts +116 -0
  79. package/node_modules/@noodle-borg/control-plane/dist/in-memory-organization-store.d.ts.map +1 -0
  80. package/node_modules/@noodle-borg/control-plane/dist/in-memory-organization-store.js +302 -0
  81. package/node_modules/@noodle-borg/control-plane/dist/in-memory-organization-store.js.map +1 -0
  82. package/node_modules/@noodle-borg/control-plane/dist/index.d.ts +10 -0
  83. package/node_modules/@noodle-borg/control-plane/dist/index.d.ts.map +1 -0
  84. package/node_modules/@noodle-borg/control-plane/dist/index.js +8 -0
  85. package/node_modules/@noodle-borg/control-plane/dist/index.js.map +1 -0
  86. package/node_modules/@noodle-borg/control-plane/dist/mcp-subdomain-claims.d.ts +42 -0
  87. package/node_modules/@noodle-borg/control-plane/dist/mcp-subdomain-claims.d.ts.map +1 -0
  88. package/node_modules/@noodle-borg/control-plane/dist/mcp-subdomain-claims.js +181 -0
  89. package/node_modules/@noodle-borg/control-plane/dist/mcp-subdomain-claims.js.map +1 -0
  90. package/node_modules/@noodle-borg/control-plane/dist/organization-helpers.d.ts +13 -0
  91. package/node_modules/@noodle-borg/control-plane/dist/organization-helpers.d.ts.map +1 -0
  92. package/node_modules/@noodle-borg/control-plane/dist/organization-helpers.js +41 -0
  93. package/node_modules/@noodle-borg/control-plane/dist/organization-helpers.js.map +1 -0
  94. package/node_modules/@noodle-borg/control-plane/dist/postgres-contracts.d.ts +11 -0
  95. package/node_modules/@noodle-borg/control-plane/dist/postgres-contracts.d.ts.map +1 -0
  96. package/node_modules/@noodle-borg/control-plane/dist/postgres-contracts.js +2 -0
  97. package/node_modules/@noodle-borg/control-plane/dist/postgres-contracts.js.map +1 -0
  98. package/node_modules/@noodle-borg/control-plane/dist/postgres-mcp-subdomain-claims.d.ts +18 -0
  99. package/node_modules/@noodle-borg/control-plane/dist/postgres-mcp-subdomain-claims.d.ts.map +1 -0
  100. package/node_modules/@noodle-borg/control-plane/dist/postgres-mcp-subdomain-claims.js +173 -0
  101. package/node_modules/@noodle-borg/control-plane/dist/postgres-mcp-subdomain-claims.js.map +1 -0
  102. package/node_modules/@noodle-borg/control-plane/dist/postgres-mcp-subdomain-schema.d.ts +4 -0
  103. package/node_modules/@noodle-borg/control-plane/dist/postgres-mcp-subdomain-schema.d.ts.map +1 -0
  104. package/node_modules/@noodle-borg/control-plane/dist/postgres-mcp-subdomain-schema.js +134 -0
  105. package/node_modules/@noodle-borg/control-plane/dist/postgres-mcp-subdomain-schema.js.map +1 -0
  106. package/node_modules/@noodle-borg/{service/dist/store/postgres-control-plane.d.ts → control-plane/dist/postgres-organization-store.d.ts} +4 -3
  107. package/node_modules/@noodle-borg/control-plane/dist/postgres-organization-store.d.ts.map +1 -0
  108. package/node_modules/@noodle-borg/{service/dist/store/postgres-control-plane.js → control-plane/dist/postgres-organization-store.js} +4 -5
  109. package/node_modules/@noodle-borg/control-plane/dist/postgres-organization-store.js.map +1 -0
  110. package/node_modules/@noodle-borg/control-plane/dist/postgres-schema.d.ts +4 -0
  111. package/node_modules/@noodle-borg/control-plane/dist/postgres-schema.d.ts.map +1 -0
  112. package/node_modules/@noodle-borg/control-plane/dist/postgres-schema.js +90 -0
  113. package/node_modules/@noodle-borg/control-plane/dist/postgres-schema.js.map +1 -0
  114. package/node_modules/@noodle-borg/control-plane/dist/validation.d.ts +18 -0
  115. package/node_modules/@noodle-borg/control-plane/dist/validation.d.ts.map +1 -0
  116. package/node_modules/@noodle-borg/control-plane/dist/validation.js +91 -0
  117. package/node_modules/@noodle-borg/control-plane/dist/validation.js.map +1 -0
  118. package/node_modules/@noodle-borg/control-plane/package.json +30 -0
  119. package/node_modules/@noodle-borg/module/dist/contract.d.ts +11 -3
  120. package/node_modules/@noodle-borg/module/dist/contract.d.ts.map +1 -1
  121. package/node_modules/@noodle-borg/module/dist/contract.js +61 -12
  122. package/node_modules/@noodle-borg/module/dist/contract.js.map +1 -1
  123. package/node_modules/@noodle-borg/service/dist/developer-mcp/control-plane-adapter.d.ts +1 -1
  124. package/node_modules/@noodle-borg/service/dist/developer-mcp/control-plane-adapter.d.ts.map +1 -1
  125. package/node_modules/@noodle-borg/service/dist/developer-mcp/control-plane-adapter.js +6 -4
  126. package/node_modules/@noodle-borg/service/dist/developer-mcp/control-plane-adapter.js.map +1 -1
  127. package/node_modules/@noodle-borg/service/dist/developer-mcp/inspection.d.ts +3 -6
  128. package/node_modules/@noodle-borg/service/dist/developer-mcp/inspection.d.ts.map +1 -1
  129. package/node_modules/@noodle-borg/service/dist/developer-mcp/inspection.js.map +1 -1
  130. package/node_modules/@noodle-borg/service/dist/main.js +1 -1
  131. package/node_modules/@noodle-borg/service/dist/main.js.map +1 -1
  132. package/node_modules/@noodle-borg/service/dist/mcp-public-routing.d.ts +15 -28
  133. package/node_modules/@noodle-borg/service/dist/mcp-public-routing.d.ts.map +1 -1
  134. package/node_modules/@noodle-borg/service/dist/mcp-public-routing.js +15 -51
  135. package/node_modules/@noodle-borg/service/dist/mcp-public-routing.js.map +1 -1
  136. package/node_modules/@noodle-borg/service/dist/oauth/service-bootstrap.d.ts.map +1 -1
  137. package/node_modules/@noodle-borg/service/dist/oauth/service-bootstrap.js +7 -3
  138. package/node_modules/@noodle-borg/service/dist/oauth/service-bootstrap.js.map +1 -1
  139. package/node_modules/@noodle-borg/service/dist/oauth/service-principal-resource.d.ts +2 -1
  140. package/node_modules/@noodle-borg/service/dist/oauth/service-principal-resource.d.ts.map +1 -1
  141. package/node_modules/@noodle-borg/service/dist/oauth/service-principal-resource.js +7 -35
  142. package/node_modules/@noodle-borg/service/dist/oauth/service-principal-resource.js.map +1 -1
  143. package/node_modules/@noodle-borg/service/dist/operations/rollback-deployment.d.ts +2 -1
  144. package/node_modules/@noodle-borg/service/dist/operations/rollback-deployment.d.ts.map +1 -1
  145. package/node_modules/@noodle-borg/service/dist/operations/rollback-deployment.js +1 -1
  146. package/node_modules/@noodle-borg/service/dist/operations/rollback-deployment.js.map +1 -1
  147. package/node_modules/@noodle-borg/service/dist/options.d.ts +3 -3
  148. package/node_modules/@noodle-borg/service/dist/personal-workspace.d.ts +1 -3
  149. package/node_modules/@noodle-borg/service/dist/personal-workspace.d.ts.map +1 -1
  150. package/node_modules/@noodle-borg/service/dist/personal-workspace.js +2 -17
  151. package/node_modules/@noodle-borg/service/dist/personal-workspace.js.map +1 -1
  152. package/node_modules/@noodle-borg/service/dist/platform-auth-operator.d.ts +10 -10
  153. package/node_modules/@noodle-borg/service/dist/registry-helpers.d.ts +4 -2
  154. package/node_modules/@noodle-borg/service/dist/registry-helpers.d.ts.map +1 -1
  155. package/node_modules/@noodle-borg/service/dist/registry-helpers.js +8 -3
  156. package/node_modules/@noodle-borg/service/dist/registry-helpers.js.map +1 -1
  157. package/node_modules/@noodle-borg/service/dist/registry-status.d.ts +2 -3
  158. package/node_modules/@noodle-borg/service/dist/registry-status.d.ts.map +1 -1
  159. package/node_modules/@noodle-borg/service/dist/registry-status.js.map +1 -1
  160. package/node_modules/@noodle-borg/service/dist/registry.d.ts +2 -4
  161. package/node_modules/@noodle-borg/service/dist/registry.d.ts.map +1 -1
  162. package/node_modules/@noodle-borg/service/dist/registry.js.map +1 -1
  163. package/node_modules/@noodle-borg/service/dist/routes/apps.d.ts +3 -3
  164. package/node_modules/@noodle-borg/service/dist/routes/apps.d.ts.map +1 -1
  165. package/node_modules/@noodle-borg/service/dist/routes/apps.js +4 -2
  166. package/node_modules/@noodle-borg/service/dist/routes/apps.js.map +1 -1
  167. package/node_modules/@noodle-borg/service/dist/routes/auth-doctor-dispatch.d.ts +2 -2
  168. package/node_modules/@noodle-borg/service/dist/routes/auth-doctor-dispatch.d.ts.map +1 -1
  169. package/node_modules/@noodle-borg/service/dist/routes/auth-doctor-dispatch.js +1 -1
  170. package/node_modules/@noodle-borg/service/dist/routes/auth-doctor-dispatch.js.map +1 -1
  171. package/node_modules/@noodle-borg/service/dist/routes/auth-doctor-live.d.ts +2 -3
  172. package/node_modules/@noodle-borg/service/dist/routes/auth-doctor-live.d.ts.map +1 -1
  173. package/node_modules/@noodle-borg/service/dist/routes/auth-doctor-live.js +2 -1
  174. package/node_modules/@noodle-borg/service/dist/routes/auth-doctor-live.js.map +1 -1
  175. package/node_modules/@noodle-borg/service/dist/routes/contracts.d.ts +29 -0
  176. package/node_modules/@noodle-borg/service/dist/routes/contracts.d.ts.map +1 -1
  177. package/node_modules/@noodle-borg/service/dist/routes/contracts.js +39 -0
  178. package/node_modules/@noodle-borg/service/dist/routes/contracts.js.map +1 -1
  179. package/node_modules/@noodle-borg/service/dist/routes/control-plane.d.ts.map +1 -1
  180. package/node_modules/@noodle-borg/service/dist/routes/control-plane.js +4 -6
  181. package/node_modules/@noodle-borg/service/dist/routes/control-plane.js.map +1 -1
  182. package/node_modules/@noodle-borg/service/dist/routes/credential-auth-dispatch.d.ts +2 -2
  183. package/node_modules/@noodle-borg/service/dist/routes/credential-auth-dispatch.d.ts.map +1 -1
  184. package/node_modules/@noodle-borg/service/dist/routes/credential-auth-dispatch.js.map +1 -1
  185. package/node_modules/@noodle-borg/service/dist/routes/deployments.d.ts +3 -3
  186. package/node_modules/@noodle-borg/service/dist/routes/deployments.d.ts.map +1 -1
  187. package/node_modules/@noodle-borg/service/dist/routes/deployments.js +4 -2
  188. package/node_modules/@noodle-borg/service/dist/routes/deployments.js.map +1 -1
  189. package/node_modules/@noodle-borg/service/dist/routes/diagnostics.d.ts.map +1 -1
  190. package/node_modules/@noodle-borg/service/dist/routes/diagnostics.js +5 -6
  191. package/node_modules/@noodle-borg/service/dist/routes/diagnostics.js.map +1 -1
  192. package/node_modules/@noodle-borg/service/dist/routes/endpoint-enrichment.d.ts +2 -3
  193. package/node_modules/@noodle-borg/service/dist/routes/endpoint-enrichment.d.ts.map +1 -1
  194. package/node_modules/@noodle-borg/service/dist/routes/endpoint-enrichment.js.map +1 -1
  195. package/node_modules/@noodle-borg/service/dist/routes/envs.d.ts +3 -3
  196. package/node_modules/@noodle-borg/service/dist/routes/envs.d.ts.map +1 -1
  197. package/node_modules/@noodle-borg/service/dist/routes/envs.js +4 -2
  198. package/node_modules/@noodle-borg/service/dist/routes/envs.js.map +1 -1
  199. package/node_modules/@noodle-borg/service/dist/routes/openai-apps-challenge.d.ts.map +1 -1
  200. package/node_modules/@noodle-borg/service/dist/routes/openai-apps-challenge.js +1 -1
  201. package/node_modules/@noodle-borg/service/dist/routes/openai-apps-challenge.js.map +1 -1
  202. package/node_modules/@noodle-borg/service/dist/routes/org-admin-dispatch.d.ts.map +1 -1
  203. package/node_modules/@noodle-borg/service/dist/routes/org-admin-dispatch.js +13 -1
  204. package/node_modules/@noodle-borg/service/dist/routes/org-admin-dispatch.js.map +1 -1
  205. package/node_modules/@noodle-borg/service/dist/routes/org-admin.d.ts.map +1 -1
  206. package/node_modules/@noodle-borg/service/dist/routes/org-admin.js +10 -7
  207. package/node_modules/@noodle-borg/service/dist/routes/org-admin.js.map +1 -1
  208. package/node_modules/@noodle-borg/service/dist/routes/org-mcp-subdomain.d.ts +8 -0
  209. package/node_modules/@noodle-borg/service/dist/routes/org-mcp-subdomain.d.ts.map +1 -0
  210. package/node_modules/@noodle-borg/service/dist/routes/org-mcp-subdomain.js +175 -0
  211. package/node_modules/@noodle-borg/service/dist/routes/org-mcp-subdomain.js.map +1 -0
  212. package/node_modules/@noodle-borg/service/dist/routes/paths.d.ts +3 -0
  213. package/node_modules/@noodle-borg/service/dist/routes/paths.d.ts.map +1 -1
  214. package/node_modules/@noodle-borg/service/dist/routes/paths.js +11 -0
  215. package/node_modules/@noodle-borg/service/dist/routes/paths.js.map +1 -1
  216. package/node_modules/@noodle-borg/service/dist/routes/protected-resource-metadata.d.ts +2 -1
  217. package/node_modules/@noodle-borg/service/dist/routes/protected-resource-metadata.d.ts.map +1 -1
  218. package/node_modules/@noodle-borg/service/dist/routes/protected-resource-metadata.js +2 -2
  219. package/node_modules/@noodle-borg/service/dist/routes/protected-resource-metadata.js.map +1 -1
  220. package/node_modules/@noodle-borg/service/dist/routes/resource-read-dispatch.d.ts +3 -2
  221. package/node_modules/@noodle-borg/service/dist/routes/resource-read-dispatch.d.ts.map +1 -1
  222. package/node_modules/@noodle-borg/service/dist/routes/resource-read-dispatch.js +6 -6
  223. package/node_modules/@noodle-borg/service/dist/routes/resource-read-dispatch.js.map +1 -1
  224. package/node_modules/@noodle-borg/service/dist/routes/rollback.d.ts.map +1 -1
  225. package/node_modules/@noodle-borg/service/dist/routes/rollback.js +3 -3
  226. package/node_modules/@noodle-borg/service/dist/routes/rollback.js.map +1 -1
  227. package/node_modules/@noodle-borg/service/dist/serve-resource-auth.d.ts +3 -5
  228. package/node_modules/@noodle-borg/service/dist/serve-resource-auth.d.ts.map +1 -1
  229. package/node_modules/@noodle-borg/service/dist/serve-resource-auth.js +18 -15
  230. package/node_modules/@noodle-borg/service/dist/serve-resource-auth.js.map +1 -1
  231. package/node_modules/@noodle-borg/service/dist/service.d.ts.map +1 -1
  232. package/node_modules/@noodle-borg/service/dist/service.js +24 -35
  233. package/node_modules/@noodle-borg/service/dist/service.js.map +1 -1
  234. package/node_modules/@noodle-borg/service/dist/store/control-plane.d.ts +4 -94
  235. package/node_modules/@noodle-borg/service/dist/store/control-plane.d.ts.map +1 -1
  236. package/node_modules/@noodle-borg/service/dist/store/control-plane.js +25 -265
  237. package/node_modules/@noodle-borg/service/dist/store/control-plane.js.map +1 -1
  238. package/node_modules/@noodle-borg/service/dist/store/postgres-deploy-records.d.ts +1 -1
  239. package/node_modules/@noodle-borg/service/dist/store/postgres-deploy-records.js +1 -1
  240. package/node_modules/@noodle-borg/service/dist/store/postgres-mcp-subdomain.d.ts +13 -0
  241. package/node_modules/@noodle-borg/service/dist/store/postgres-mcp-subdomain.d.ts.map +1 -0
  242. package/node_modules/@noodle-borg/service/dist/store/postgres-mcp-subdomain.js +40 -0
  243. package/node_modules/@noodle-borg/service/dist/store/postgres-mcp-subdomain.js.map +1 -0
  244. package/node_modules/@noodle-borg/service/dist/store/postgres-schema.d.ts.map +1 -1
  245. package/node_modules/@noodle-borg/service/dist/store/postgres-schema.js +2 -84
  246. package/node_modules/@noodle-borg/service/dist/store/postgres-schema.js.map +1 -1
  247. package/node_modules/@noodle-borg/service/dist/store/postgres-signup.d.ts.map +1 -1
  248. package/node_modules/@noodle-borg/service/dist/store/postgres-signup.js +1 -1
  249. package/node_modules/@noodle-borg/service/dist/store/postgres-signup.js.map +1 -1
  250. package/node_modules/@noodle-borg/service/dist/store/postgres.d.ts +2 -2
  251. package/node_modules/@noodle-borg/service/dist/store/postgres.d.ts.map +1 -1
  252. package/node_modules/@noodle-borg/service/dist/store/postgres.js +5 -4
  253. package/node_modules/@noodle-borg/service/dist/store/postgres.js.map +1 -1
  254. package/node_modules/@noodle-borg/service/dist/store/validate.d.ts +2 -20
  255. package/node_modules/@noodle-borg/service/dist/store/validate.d.ts.map +1 -1
  256. package/node_modules/@noodle-borg/service/dist/store/validate.js +7 -85
  257. package/node_modules/@noodle-borg/service/dist/store/validate.js.map +1 -1
  258. package/node_modules/@noodle-borg/service/dist/store.d.ts +4 -209
  259. package/node_modules/@noodle-borg/service/dist/store.d.ts.map +1 -1
  260. package/node_modules/@noodle-borg/service/dist/store.js +1 -1
  261. package/node_modules/@noodle-borg/service/dist/store.js.map +1 -1
  262. package/node_modules/@noodle-borg/service/package.json +1 -0
  263. package/node_modules/@noodle-borg/transport-http/dist/handler.d.ts +2 -0
  264. package/node_modules/@noodle-borg/transport-http/dist/handler.d.ts.map +1 -1
  265. package/node_modules/@noodle-borg/transport-http/dist/handler.js +14 -8
  266. package/node_modules/@noodle-borg/transport-http/dist/handler.js.map +1 -1
  267. package/node_modules/@noodle-borg/transport-http/dist/identity-authorization.d.ts +1 -1
  268. package/node_modules/@noodle-borg/transport-http/dist/identity-authorization.d.ts.map +1 -1
  269. package/node_modules/@noodle-borg/transport-http/dist/index.d.ts +2 -1
  270. package/node_modules/@noodle-borg/transport-http/dist/index.d.ts.map +1 -1
  271. package/node_modules/@noodle-borg/transport-http/dist/index.js +1 -0
  272. package/node_modules/@noodle-borg/transport-http/dist/index.js.map +1 -1
  273. package/node_modules/@noodle-borg/transport-http/dist/public-routing.d.ts +42 -0
  274. package/node_modules/@noodle-borg/transport-http/dist/public-routing.d.ts.map +1 -1
  275. package/node_modules/@noodle-borg/transport-http/dist/public-routing.js +49 -0
  276. package/node_modules/@noodle-borg/transport-http/dist/public-routing.js.map +1 -1
  277. package/node_modules/@noodle-borg/transport-http/dist/routing.d.ts +3 -2
  278. package/node_modules/@noodle-borg/transport-http/dist/routing.d.ts.map +1 -1
  279. package/node_modules/@noodle-borg/transport-http/dist/routing.js +6 -3
  280. package/node_modules/@noodle-borg/transport-http/dist/routing.js.map +1 -1
  281. package/package.json +2 -1
  282. package/dist/banner.d.ts +0 -11
  283. package/dist/banner.d.ts.map +0 -1
  284. package/dist/banner.js +0 -183
  285. package/dist/banner.js.map +0 -1
  286. package/dist/commands/deploy-fire-progress.d.ts +0 -28
  287. package/dist/commands/deploy-fire-progress.d.ts.map +0 -1
  288. package/dist/commands/deploy-fire-progress.js +0 -64
  289. package/dist/commands/deploy-fire-progress.js.map +0 -1
  290. package/dist/fire.d.ts +0 -108
  291. package/dist/fire.d.ts.map +0 -1
  292. package/dist/fire.js +0 -511
  293. package/dist/fire.js.map +0 -1
  294. package/dist/flavor.d.ts +0 -19
  295. package/dist/flavor.d.ts.map +0 -1
  296. package/dist/flavor.js +0 -105
  297. package/dist/flavor.js.map +0 -1
  298. package/node_modules/@noodle-borg/service/dist/store/postgres-control-plane.d.ts.map +0 -1
  299. package/node_modules/@noodle-borg/service/dist/store/postgres-control-plane.js.map +0 -1
@@ -0,0 +1,302 @@
1
+ import { randomUUID } from 'node:crypto';
2
+ import { InMemoryMcpSubdomainClaimStore } from './mcp-subdomain-claims.js';
3
+ import { domainFromEmail, domainKey, memberKey, normalizeSignupAllowlistValue, signupKey, } from './organization-helpers.js';
4
+ import { validateDomain, validateOpenAIAppsChallenge, validateOrgMembershipDomain, validateOrgRole, validateSignupAllowlistKind, validateSlug, } from './validation.js';
5
+ /** Shared in-memory organization persistence used by service-backed development stores. */
6
+ export class InMemoryOrganizationStore {
7
+ #orgs;
8
+ #members;
9
+ #domains = new Map();
10
+ #openAIAppsChallenges = new Map();
11
+ #signup = new Map();
12
+ #invitations = new Map();
13
+ #mcpSubdomainClaims;
14
+ #now;
15
+ constructor(options = {}) {
16
+ this.#now = options.now ?? (() => new Date());
17
+ this.#orgs = options.orgs ?? new Map();
18
+ this.#members = options.members ?? new Map();
19
+ this.#mcpSubdomainClaims = new InMemoryMcpSubdomainClaimStore(this.#now);
20
+ }
21
+ hasOrg(org) {
22
+ return this.#orgs.has(org);
23
+ }
24
+ isExactOwner(org, subject) {
25
+ return this.#members.get(memberKey(org, subject))?.role === 'owner';
26
+ }
27
+ ensureDefaultMcpSubdomain(org) {
28
+ return this.#mcpSubdomainClaims.ensureDefaultMcpSubdomain(org);
29
+ }
30
+ getActiveMcpSubdomain(org) {
31
+ return this.#mcpSubdomainClaims.getActiveMcpSubdomain(org);
32
+ }
33
+ resolveActiveMcpSubdomain(mcpSubdomain) {
34
+ return this.#mcpSubdomainClaims.resolveActiveMcpSubdomain(mcpSubdomain);
35
+ }
36
+ getMcpSubdomainSetting(org) {
37
+ return this.#mcpSubdomainClaims.getMcpSubdomainSetting(org);
38
+ }
39
+ changeMcpSubdomain(input) {
40
+ return this.#mcpSubdomainClaims.changeMcpSubdomain(input, () => this.isExactOwner(input.org, input.actor.subject));
41
+ }
42
+ createOrg(input) {
43
+ const slug = validateSlug('org', input.slug);
44
+ this.ensureDefaultMcpSubdomain(slug);
45
+ const existing = this.#orgs.get(slug);
46
+ if (existing !== undefined)
47
+ return Promise.resolve(existing);
48
+ const org = {
49
+ slug,
50
+ ...(input.displayName !== undefined ? { displayName: input.displayName } : {}),
51
+ createdAt: this.#now().toISOString(),
52
+ };
53
+ this.#orgs.set(slug, org);
54
+ return Promise.resolve(org);
55
+ }
56
+ updateOrg(input) {
57
+ const slug = validateSlug('org', input.slug);
58
+ const existing = this.#orgs.get(slug);
59
+ if (existing === undefined)
60
+ return Promise.resolve(undefined);
61
+ const updated = { ...existing, displayName: input.displayName };
62
+ this.#orgs.set(slug, updated);
63
+ return Promise.resolve(updated);
64
+ }
65
+ getOrg(org) {
66
+ return Promise.resolve(this.#orgs.get(validateSlug('org', org)));
67
+ }
68
+ listOrgs() {
69
+ return Promise.resolve([...this.#orgs.values()].sort((a, b) => a.slug.localeCompare(b.slug)));
70
+ }
71
+ listOrgsForSubject(subject) {
72
+ const slugs = new Set([...this.#members.values()]
73
+ .filter((member) => member.subject === subject)
74
+ .map((member) => member.orgSlug));
75
+ return Promise.resolve([...this.#orgs.values()]
76
+ .filter((org) => slugs.has(org.slug))
77
+ .sort((a, b) => a.slug.localeCompare(b.slug)));
78
+ }
79
+ async addOrgMember(input) {
80
+ const org = validateSlug('org', input.org);
81
+ await this.createOrg({ slug: org });
82
+ const member = {
83
+ orgSlug: org,
84
+ subject: input.subject,
85
+ email: input.email.toLowerCase(),
86
+ role: validateOrgRole(input.role),
87
+ createdAt: this.#now().toISOString(),
88
+ };
89
+ this.#members.set(memberKey(org, input.subject), member);
90
+ return member;
91
+ }
92
+ removeOrgMember(input) {
93
+ return Promise.resolve(this.#members.delete(memberKey(validateSlug('org', input.org), input.subject)));
94
+ }
95
+ updateOrgMemberRole(input) {
96
+ const org = validateSlug('org', input.org);
97
+ const role = validateOrgRole(input.role);
98
+ const key = memberKey(org, input.subject);
99
+ const existing = this.#members.get(key);
100
+ if (existing === undefined)
101
+ return Promise.resolve(undefined);
102
+ const updated = { ...existing, role };
103
+ this.#members.set(key, updated);
104
+ return Promise.resolve(updated);
105
+ }
106
+ getOrgMember(input) {
107
+ return Promise.resolve(this.#members.get(memberKey(validateSlug('org', input.org), input.subject)));
108
+ }
109
+ listOrgMembers(org) {
110
+ const safe = validateSlug('org', org);
111
+ return Promise.resolve([...this.#members.values()]
112
+ .filter((member) => member.orgSlug === safe)
113
+ .sort((a, b) => a.email.localeCompare(b.email)));
114
+ }
115
+ isOrgMember(input) {
116
+ return Promise.resolve(this.#members.has(memberKey(validateSlug('org', input.org), input.subject)));
117
+ }
118
+ async addOrgDomain(input) {
119
+ const org = validateSlug('org', input.org);
120
+ const domain = validateOrgMembershipDomain(input.domain);
121
+ await this.createOrg({ slug: org });
122
+ const key = domainKey(org, domain);
123
+ const existing = this.#domains.get(key);
124
+ if (existing !== undefined)
125
+ return existing;
126
+ const record = {
127
+ orgSlug: org,
128
+ domain,
129
+ challenge: input.challenge ?? `noodle-${randomUUID()}`,
130
+ createdAt: this.#now().toISOString(),
131
+ };
132
+ this.#domains.set(key, record);
133
+ return record;
134
+ }
135
+ removeOrgDomain(input) {
136
+ const org = validateSlug('org', input.org);
137
+ const domain = validateDomain(input.domain);
138
+ return Promise.resolve(this.#domains.delete(domainKey(org, domain)));
139
+ }
140
+ markOrgDomainVerification(input) {
141
+ const org = validateSlug('org', input.org);
142
+ const domain = validateDomain(input.domain);
143
+ const key = domainKey(org, domain);
144
+ const existing = this.#domains.get(key);
145
+ if (existing === undefined)
146
+ return Promise.resolve(undefined);
147
+ const checked = this.#now().toISOString();
148
+ const { verifiedAt: _oldVerifiedAt, ...withoutVerifiedAt } = existing;
149
+ const updated = {
150
+ ...withoutVerifiedAt,
151
+ lastCheckedAt: checked,
152
+ ...(input.verified ? { verifiedAt: existing.verifiedAt ?? checked } : {}),
153
+ };
154
+ this.#domains.set(key, updated);
155
+ return Promise.resolve(updated);
156
+ }
157
+ listOrgDomains(org) {
158
+ const safe = validateSlug('org', org);
159
+ return Promise.resolve([...this.#domains.values()]
160
+ .filter((record) => record.orgSlug === safe)
161
+ .sort((a, b) => a.domain.localeCompare(b.domain)));
162
+ }
163
+ async setOrgOpenAIAppsChallenge(input) {
164
+ const org = validateSlug('org', input.org);
165
+ await this.createOrg({ slug: org });
166
+ const record = {
167
+ orgSlug: org,
168
+ challenge: validateOpenAIAppsChallenge(input.challenge),
169
+ updatedAt: this.#now().toISOString(),
170
+ ...(input.updatedBySubject !== undefined ? { updatedBySubject: input.updatedBySubject } : {}),
171
+ ...(input.updatedByEmail !== undefined ? { updatedByEmail: input.updatedByEmail } : {}),
172
+ };
173
+ this.#openAIAppsChallenges.set(org, record);
174
+ return record;
175
+ }
176
+ getOrgOpenAIAppsChallenge(org) {
177
+ return Promise.resolve(this.#openAIAppsChallenges.get(validateSlug('org', org)));
178
+ }
179
+ clearOrgOpenAIAppsChallenge(org) {
180
+ return Promise.resolve(this.#openAIAppsChallenges.delete(validateSlug('org', org)));
181
+ }
182
+ async isDataPlaneOrgMember(input) {
183
+ if (await this.isOrgMember({ org: input.org, subject: input.subject }))
184
+ return true;
185
+ if (input.email === undefined)
186
+ return false;
187
+ const domain = domainFromEmail(input.email);
188
+ if (domain === undefined)
189
+ return false;
190
+ const domains = await this.listOrgDomains(input.org);
191
+ return domains.some((record) => record.domain === domain);
192
+ }
193
+ allowSignup(input) {
194
+ const record = {
195
+ kind: validateSignupAllowlistKind(input.kind),
196
+ value: normalizeSignupAllowlistValue(input.kind, input.value),
197
+ createdAt: this.#now().toISOString(),
198
+ ...(input.createdBySubject !== undefined ? { createdBySubject: input.createdBySubject } : {}),
199
+ };
200
+ this.#signup.set(signupKey(record.kind, record.value), record);
201
+ return Promise.resolve(record);
202
+ }
203
+ listSignupAllowlist() {
204
+ return Promise.resolve([...this.#signup.values()].sort((a, b) => `${a.kind}:${a.value}`.localeCompare(`${b.kind}:${b.value}`)));
205
+ }
206
+ isSignupAllowed(input) {
207
+ const subject = input.subject.toLowerCase();
208
+ if (this.#signup.has(signupKey('subject', subject)))
209
+ return Promise.resolve(true);
210
+ const domain = domainFromEmail(input.email);
211
+ return Promise.resolve(domain !== undefined && this.#signup.has(signupKey('domain', domain)));
212
+ }
213
+ async createOrgInvitation(input) {
214
+ const org = validateSlug('org', input.org);
215
+ await this.createOrg({ slug: org });
216
+ const record = {
217
+ orgSlug: org,
218
+ email: input.email.toLowerCase(),
219
+ role: validateOrgRole(input.role),
220
+ tokenHash: input.tokenHash,
221
+ createdAt: this.#now().toISOString(),
222
+ expiresAt: input.expiresAt.toISOString(),
223
+ createdBySubject: input.createdBySubject,
224
+ ...(input.createdByEmail !== undefined ? { createdByEmail: input.createdByEmail } : {}),
225
+ };
226
+ this.#invitations.set(input.tokenHash, record);
227
+ return record;
228
+ }
229
+ getOrgInvitation(input) {
230
+ const record = this.#invitations.get(input.tokenHash);
231
+ if (record === undefined || record.acceptedAt !== undefined)
232
+ return Promise.resolve(undefined);
233
+ if (Date.parse(record.expiresAt) <= this.#now().getTime())
234
+ return Promise.resolve(undefined);
235
+ return Promise.resolve(record);
236
+ }
237
+ consumeOrgInvitation(input) {
238
+ const record = this.#invitations.get(input.tokenHash);
239
+ if (record === undefined || record.acceptedAt !== undefined)
240
+ return Promise.resolve(undefined);
241
+ if (Date.parse(record.expiresAt) <= this.#now().getTime())
242
+ return Promise.resolve(undefined);
243
+ const accepted = { ...record, acceptedAt: this.#now().toISOString() };
244
+ this.#invitations.set(input.tokenHash, accepted);
245
+ return Promise.resolve(accepted);
246
+ }
247
+ listOrgInvitations(org) {
248
+ const safe = validateSlug('org', org);
249
+ return Promise.resolve([...this.#invitations.values()]
250
+ .filter((record) => record.orgSlug === safe)
251
+ .sort((a, b) => Date.parse(b.createdAt) - Date.parse(a.createdAt) || a.email.localeCompare(b.email)));
252
+ }
253
+ revokeOrgInvitation(input) {
254
+ const org = validateSlug('org', input.org);
255
+ const email = input.email.toLowerCase();
256
+ let revoked = 0;
257
+ for (const [tokenHash, record] of this.#invitations) {
258
+ if (record.orgSlug === org && record.email === email && record.acceptedAt === undefined) {
259
+ this.#invitations.delete(tokenHash);
260
+ revoked += 1;
261
+ }
262
+ }
263
+ return Promise.resolve(revoked);
264
+ }
265
+ }
266
+ /** Bind standard organization methods for composition with service-owned billing and outbox state. */
267
+ export function bindInMemoryOrganizationStore(store) {
268
+ return {
269
+ getActiveMcpSubdomain: store.getActiveMcpSubdomain.bind(store),
270
+ resolveActiveMcpSubdomain: store.resolveActiveMcpSubdomain.bind(store),
271
+ getMcpSubdomainSetting: store.getMcpSubdomainSetting.bind(store),
272
+ changeMcpSubdomain: store.changeMcpSubdomain.bind(store),
273
+ createOrg: store.createOrg.bind(store),
274
+ updateOrg: store.updateOrg.bind(store),
275
+ getOrg: store.getOrg.bind(store),
276
+ listOrgs: store.listOrgs.bind(store),
277
+ listOrgsForSubject: store.listOrgsForSubject.bind(store),
278
+ addOrgMember: store.addOrgMember.bind(store),
279
+ removeOrgMember: store.removeOrgMember.bind(store),
280
+ updateOrgMemberRole: store.updateOrgMemberRole.bind(store),
281
+ getOrgMember: store.getOrgMember.bind(store),
282
+ listOrgMembers: store.listOrgMembers.bind(store),
283
+ isOrgMember: store.isOrgMember.bind(store),
284
+ addOrgDomain: store.addOrgDomain.bind(store),
285
+ removeOrgDomain: store.removeOrgDomain.bind(store),
286
+ markOrgDomainVerification: store.markOrgDomainVerification.bind(store),
287
+ listOrgDomains: store.listOrgDomains.bind(store),
288
+ setOrgOpenAIAppsChallenge: store.setOrgOpenAIAppsChallenge.bind(store),
289
+ getOrgOpenAIAppsChallenge: store.getOrgOpenAIAppsChallenge.bind(store),
290
+ clearOrgOpenAIAppsChallenge: store.clearOrgOpenAIAppsChallenge.bind(store),
291
+ isDataPlaneOrgMember: store.isDataPlaneOrgMember.bind(store),
292
+ allowSignup: store.allowSignup.bind(store),
293
+ listSignupAllowlist: store.listSignupAllowlist.bind(store),
294
+ isSignupAllowed: store.isSignupAllowed.bind(store),
295
+ createOrgInvitation: store.createOrgInvitation.bind(store),
296
+ getOrgInvitation: store.getOrgInvitation.bind(store),
297
+ consumeOrgInvitation: store.consumeOrgInvitation.bind(store),
298
+ listOrgInvitations: store.listOrgInvitations.bind(store),
299
+ revokeOrgInvitation: store.revokeOrgInvitation.bind(store),
300
+ };
301
+ }
302
+ //# sourceMappingURL=in-memory-organization-store.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"in-memory-organization-store.js","sourceRoot":"","sources":["../src/in-memory-organization-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAgBzC,OAAO,EAAE,8BAA8B,EAAE,MAAM,2BAA2B,CAAC;AAC3E,OAAO,EACL,eAAe,EACf,SAAS,EACT,SAAS,EACT,6BAA6B,EAC7B,SAAS,GACV,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,cAAc,EACd,2BAA2B,EAC3B,2BAA2B,EAC3B,eAAe,EACf,2BAA2B,EAC3B,YAAY,GACb,MAAM,iBAAiB,CAAC;AAQzB,2FAA2F;AAC3F,MAAM,OAAO,yBAAyB;IAC3B,KAAK,CAAyB;IAC9B,QAAQ,CAA+B;IACvC,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC9C,qBAAqB,GAAG,IAAI,GAAG,EAAwC,CAAC;IACxE,OAAO,GAAG,IAAI,GAAG,EAAiC,CAAC;IACnD,YAAY,GAAG,IAAI,GAAG,EAA+B,CAAC;IACtD,mBAAmB,CAAiC;IACpD,IAAI,CAAa;IAE1B,YAAY,UAA4C,EAAE;QACxD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC;QACvC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,GAAG,EAAE,CAAC;QAC7C,IAAI,CAAC,mBAAmB,GAAG,IAAI,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,YAAY,CAAC,GAAW,EAAE,OAAe;QACvC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,IAAI,KAAK,OAAO,CAAC;IACtE,CAAC;IAED,yBAAyB,CAAC,GAAW;QACnC,OAAO,IAAI,CAAC,mBAAmB,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC;IACjE,CAAC;IAED,qBAAqB,CAAC,GAAW;QAC/B,OAAO,IAAI,CAAC,mBAAmB,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC7D,CAAC;IAED,yBAAyB,CAAC,YAAoB;QAC5C,OAAO,IAAI,CAAC,mBAAmB,CAAC,yBAAyB,CAAC,YAAY,CAAC,CAAC;IAC1E,CAAC;IAED,sBAAsB,CAAC,GAAW;QAChC,OAAO,IAAI,CAAC,mBAAmB,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC9D,CAAC;IAED,kBAAkB,CAAC,KAA8B;QAC/C,OAAO,IAAI,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAG,EAAE,CAC7D,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAClD,CAAC;IACJ,CAAC;IAED,SAAS,CAAC,KAA6C;QACrD,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAc;YACrB,IAAI;YACJ,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9E,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC1B,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED,SAAS,CAAC,KAA4C;QACpD,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAc,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;QAC3E,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9B,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,CAAC,GAAW;QAChB,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,QAAQ;QACN,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChG,CAAC;IAED,kBAAkB,CAAC,OAAe;QAChC,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;aACxB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC;aAC9C,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CACnC,CAAC;QACF,OAAO,OAAO,CAAC,OAAO,CACpB,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;aACrB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;aACpC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAChD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAKlB;QACC,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QACpC,MAAM,MAAM,GAAoB;YAC9B,OAAO,EAAE,GAAG;YACZ,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE;YAChC,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QACzD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,eAAe,CAAC,KAAuC;QACrD,OAAO,OAAO,CAAC,OAAO,CACpB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAC/E,CAAC;IACJ,CAAC;IAED,mBAAmB,CAAC,KAInB;QACC,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAoB,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,CAAC;QACvD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAChC,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED,YAAY,CAAC,KAAuC;QAClD,OAAO,OAAO,CAAC,OAAO,CACpB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAC5E,CAAC;IACJ,CAAC;IAED,cAAc,CAAC,GAAW;QACxB,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACtC,OAAO,OAAO,CAAC,OAAO,CACpB,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;aACxB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC;aAC3C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAClD,CAAC;IACJ,CAAC;IAED,WAAW,CAAC,KAAuC;QACjD,OAAO,OAAO,CAAC,OAAO,CACpB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAC5E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAIlB;QACC,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,2BAA2B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,MAAM,GAAoB;YAC9B,OAAO,EAAE,GAAG;YACZ,MAAM;YACN,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,UAAU,UAAU,EAAE,EAAE;YACtD,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,eAAe,CAAC,KAAsC;QACpD,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5C,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,yBAAyB,CAAC,KAIzB;QACC,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC1C,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,iBAAiB,EAAE,GAAG,QAAQ,CAAC;QACtE,MAAM,OAAO,GAAoB;YAC/B,GAAG,iBAAiB;YACpB,aAAa,EAAE,OAAO;YACtB,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1E,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAChC,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED,cAAc,CAAC,GAAW;QACxB,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACtC,OAAO,OAAO,CAAC,OAAO,CACpB,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;aACxB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC;aAC3C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CACpD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,yBAAyB,CAAC,KAK/B;QACC,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QACpC,MAAM,MAAM,GAAiC;YAC3C,OAAO,EAAE,GAAG;YACZ,SAAS,EAAE,2BAA2B,CAAC,KAAK,CAAC,SAAS,CAAC;YACvD,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7F,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxF,CAAC;QACF,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC5C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,yBAAyB,CAAC,GAAW;QACnC,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACnF,CAAC;IAED,2BAA2B,CAAC,GAAW;QACrC,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACtF,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,KAI1B;QACC,IAAI,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QACpF,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC5C,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IAC5D,CAAC;IAED,WAAW,CAAC,KAIX;QACC,MAAM,MAAM,GAA0B;YACpC,IAAI,EAAE,2BAA2B,CAAC,KAAK,CAAC,IAAI,CAAC;YAC7C,KAAK,EAAE,6BAA6B,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC;YAC7D,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9F,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/D,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAED,mBAAmB;QACjB,OAAO,OAAO,CAAC,OAAO,CACpB,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACvC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAC7D,CACF,CAAC;IACJ,CAAC;IAED,eAAe,CAAC,KAAyC;QACvD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAClF,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5C,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAChG,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,KAQzB;QACC,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QACpC,MAAM,MAAM,GAAwB;YAClC,OAAO,EAAE,GAAG;YACZ,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE;YAChC,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC;YACjC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;YACxC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxF,CAAC;QACF,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,gBAAgB,CAAC,KAA4B;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC/F,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC7F,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAED,oBAAoB,CAAC,KAA4B;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC/F,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC7F,MAAM,QAAQ,GAAG,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACtE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED,kBAAkB,CAAC,GAAW;QAC5B,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACtC,OAAO,OAAO,CAAC,OAAO,CACpB,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;aAC5B,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC;aAC3C,IAAI,CACH,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CACtF,CACJ,CAAC;IACJ,CAAC;IAED,mBAAmB,CAAC,KAAqC;QACvD,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACpD,IAAI,MAAM,CAAC,OAAO,KAAK,GAAG,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBACxF,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACpC,OAAO,IAAI,CAAC,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;CACF;AAYD,sGAAsG;AACtG,MAAM,UAAU,6BAA6B,CAC3C,KAAgC;IAEhC,OAAO;QACL,qBAAqB,EAAE,KAAK,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC;QAC9D,yBAAyB,EAAE,KAAK,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC;QACtE,sBAAsB,EAAE,KAAK,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC;QAChE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QACxD,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QACtC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QACtC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QACpC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QACxD,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;QAC5C,eAAe,EAAE,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAClD,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1D,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;QAC5C,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAChD,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1C,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;QAC5C,eAAe,EAAE,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAClD,yBAAyB,EAAE,KAAK,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC;QACtE,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAChD,yBAAyB,EAAE,KAAK,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC;QACtE,yBAAyB,EAAE,KAAK,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC;QACtE,2BAA2B,EAAE,KAAK,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1E,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;QAC5D,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1C,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1D,eAAe,EAAE,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;QAClD,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1D,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QACpD,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;QAC5D,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QACxD,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;KAC3D,CAAC;AACJ,CAAC"}
@@ -0,0 +1,10 @@
1
+ export type { ActiveMcpSubdomainClaim, ChangeMcpSubdomainInput, CreateOrgWithOwnerInput, McpSubdomainMutationResult, McpSubdomainSetting, OrganizationStore, OrgDomainRecord, OrgInvitationRecord, OrgMemberRecord, OrgOpenAIAppsChallengeRecord, OrgRecord, OrgRole, PersonalWorkspaceProvisionInput, PersonalWorkspaceProvisionResult, SignupAllowlistKind, SignupAllowlistRecord, WelcomeEmailRecord, } from './contracts.js';
2
+ export { bindInMemoryOrganizationStore, type InMemoryOrganizationOperations, InMemoryOrganizationStore, } from './in-memory-organization-store.js';
3
+ export { InMemoryMcpSubdomainClaimStore, McpSubdomainCooldownError, McpSubdomainIdempotencyConflictError, McpSubdomainOwnerRequiredError, type McpSubdomainRouteRef, McpSubdomainUnavailableError, mcpSubdomainEndpointOptions, type ResolvedMcpTenantRef, resolveMcpSubdomainTenant, } from './mcp-subdomain-claims.js';
4
+ export { domainFromEmail, domainKey, memberKey, normalizeSignupAllowlistValue, personalOrgSlug, personalOrgSlugSuffix, signupKey, } from './organization-helpers.js';
5
+ export type { EnsureDefaultOrgBillingTx } from './postgres-contracts.js';
6
+ export { changeMcpSubdomainRow, getActiveMcpSubdomainRow, getMcpSubdomainSettingRow, type PostgresMcpSubdomainMutationOptions, resolveActiveMcpSubdomainRow, } from './postgres-mcp-subdomain-claims.js';
7
+ export { addOrgDomainRow, addOrgMemberRow, allowSignupRow, claimWelcomeEmailRow, clearOrgOpenAIAppsChallengeRow, consumeOrgInvitationRow, createOrgInvitationRow, createOrgRow, createOrgWithOwnerRow, getOrgInvitationRow, getOrgMemberRow, getOrgOpenAIAppsChallengeRow, getOrgRow, getWelcomeEmailRow, hasOrgDomainMembership, isOrgMemberRow, isSignupAllowedByRows, listOrgDomainRows, listOrgInvitationRows, listOrgMemberRows, listOrgRows, listOrgRowsForSubject, listSignupAllowlistRows, markOrgDomainVerificationRow, markWelcomeEmailFailedRow, markWelcomeEmailSentRow, removeOrgDomainRow, removeOrgMemberRow, revokeOrgInvitationRows, setOrgOpenAIAppsChallengeRow, updateOrgMemberRoleRow, updateOrgRow, } from './postgres-organization-store.js';
8
+ export { ensureOrganizationSchema } from './postgres-schema.js';
9
+ export { DOMAIN_PATTERN, isSystemOwnedOrgSlug, OPENAI_APPS_CHALLENGE_MAX_LENGTH, SLUG_PATTERN, validateDomain, validateMcpSubdomain, validateOpenAIAppsChallenge, validateOrgMembershipDomain, validateOrgRole, validateSignupAllowlistKind, validateSlug, validateUserOwnedOrgSlug, } from './validation.js';
10
+ //# sourceMappingURL=index.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,EACvB,0BAA0B,EAC1B,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,eAAe,EACf,4BAA4B,EAC5B,SAAS,EACT,OAAO,EACP,+BAA+B,EAC/B,gCAAgC,EAChC,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,6BAA6B,EAC7B,KAAK,8BAA8B,EACnC,yBAAyB,GAC1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,EACzB,oCAAoC,EACpC,8BAA8B,EAC9B,KAAK,oBAAoB,EACzB,4BAA4B,EAC5B,2BAA2B,EAC3B,KAAK,oBAAoB,EACzB,yBAAyB,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,eAAe,EACf,SAAS,EACT,SAAS,EACT,6BAA6B,EAC7B,eAAe,EACf,qBAAqB,EACrB,SAAS,GACV,MAAM,2BAA2B,CAAC;AACnC,YAAY,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,yBAAyB,EACzB,KAAK,mCAAmC,EACxC,4BAA4B,GAC7B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,eAAe,EACf,eAAe,EACf,cAAc,EACd,oBAAoB,EACpB,8BAA8B,EAC9B,uBAAuB,EACvB,sBAAsB,EACtB,YAAY,EACZ,qBAAqB,EACrB,mBAAmB,EACnB,eAAe,EACf,4BAA4B,EAC5B,SAAS,EACT,kBAAkB,EAClB,sBAAsB,EACtB,cAAc,EACd,qBAAqB,EACrB,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,EACjB,WAAW,EACX,qBAAqB,EACrB,uBAAuB,EACvB,4BAA4B,EAC5B,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,4BAA4B,EAC5B,sBAAsB,EACtB,YAAY,GACb,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,gCAAgC,EAChC,YAAY,EACZ,cAAc,EACd,oBAAoB,EACpB,2BAA2B,EAC3B,2BAA2B,EAC3B,eAAe,EACf,2BAA2B,EAC3B,YAAY,EACZ,wBAAwB,GACzB,MAAM,iBAAiB,CAAC"}
@@ -0,0 +1,8 @@
1
+ export { bindInMemoryOrganizationStore, InMemoryOrganizationStore, } from './in-memory-organization-store.js';
2
+ export { InMemoryMcpSubdomainClaimStore, McpSubdomainCooldownError, McpSubdomainIdempotencyConflictError, McpSubdomainOwnerRequiredError, McpSubdomainUnavailableError, mcpSubdomainEndpointOptions, resolveMcpSubdomainTenant, } from './mcp-subdomain-claims.js';
3
+ export { domainFromEmail, domainKey, memberKey, normalizeSignupAllowlistValue, personalOrgSlug, personalOrgSlugSuffix, signupKey, } from './organization-helpers.js';
4
+ export { changeMcpSubdomainRow, getActiveMcpSubdomainRow, getMcpSubdomainSettingRow, resolveActiveMcpSubdomainRow, } from './postgres-mcp-subdomain-claims.js';
5
+ export { addOrgDomainRow, addOrgMemberRow, allowSignupRow, claimWelcomeEmailRow, clearOrgOpenAIAppsChallengeRow, consumeOrgInvitationRow, createOrgInvitationRow, createOrgRow, createOrgWithOwnerRow, getOrgInvitationRow, getOrgMemberRow, getOrgOpenAIAppsChallengeRow, getOrgRow, getWelcomeEmailRow, hasOrgDomainMembership, isOrgMemberRow, isSignupAllowedByRows, listOrgDomainRows, listOrgInvitationRows, listOrgMemberRows, listOrgRows, listOrgRowsForSubject, listSignupAllowlistRows, markOrgDomainVerificationRow, markWelcomeEmailFailedRow, markWelcomeEmailSentRow, removeOrgDomainRow, removeOrgMemberRow, revokeOrgInvitationRows, setOrgOpenAIAppsChallengeRow, updateOrgMemberRoleRow, updateOrgRow, } from './postgres-organization-store.js';
6
+ export { ensureOrganizationSchema } from './postgres-schema.js';
7
+ export { DOMAIN_PATTERN, isSystemOwnedOrgSlug, OPENAI_APPS_CHALLENGE_MAX_LENGTH, SLUG_PATTERN, validateDomain, validateMcpSubdomain, validateOpenAIAppsChallenge, validateOrgMembershipDomain, validateOrgRole, validateSignupAllowlistKind, validateSlug, validateUserOwnedOrgSlug, } from './validation.js';
8
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAmBA,OAAO,EACL,6BAA6B,EAE7B,yBAAyB,GAC1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,EACzB,oCAAoC,EACpC,8BAA8B,EAE9B,4BAA4B,EAC5B,2BAA2B,EAE3B,yBAAyB,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,eAAe,EACf,SAAS,EACT,SAAS,EACT,6BAA6B,EAC7B,eAAe,EACf,qBAAqB,EACrB,SAAS,GACV,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,yBAAyB,EAEzB,4BAA4B,GAC7B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,eAAe,EACf,eAAe,EACf,cAAc,EACd,oBAAoB,EACpB,8BAA8B,EAC9B,uBAAuB,EACvB,sBAAsB,EACtB,YAAY,EACZ,qBAAqB,EACrB,mBAAmB,EACnB,eAAe,EACf,4BAA4B,EAC5B,SAAS,EACT,kBAAkB,EAClB,sBAAsB,EACtB,cAAc,EACd,qBAAqB,EACrB,iBAAiB,EACjB,qBAAqB,EACrB,iBAAiB,EACjB,WAAW,EACX,qBAAqB,EACrB,uBAAuB,EACvB,4BAA4B,EAC5B,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,EAClB,uBAAuB,EACvB,4BAA4B,EAC5B,sBAAsB,EACtB,YAAY,GACb,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,gCAAgC,EAChC,YAAY,EACZ,cAAc,EACd,oBAAoB,EACpB,2BAA2B,EAC3B,2BAA2B,EAC3B,eAAe,EACf,2BAA2B,EAC3B,YAAY,EACZ,wBAAwB,GACzB,MAAM,iBAAiB,CAAC"}
@@ -0,0 +1,42 @@
1
+ import type { ActiveMcpSubdomainClaim, ChangeMcpSubdomainInput, McpSubdomainMutationResult, McpSubdomainSetting, OrganizationStore } from './contracts.js';
2
+ export declare class McpSubdomainOwnerRequiredError extends Error {
3
+ constructor();
4
+ }
5
+ export declare class McpSubdomainUnavailableError extends Error {
6
+ constructor();
7
+ }
8
+ export declare class McpSubdomainIdempotencyConflictError extends Error {
9
+ constructor();
10
+ }
11
+ export declare class McpSubdomainCooldownError extends Error {
12
+ readonly changeAllowedAt: string;
13
+ constructor(changeAllowedAt: string);
14
+ }
15
+ /** In-memory parity for active claim reads and organization-creation defaults. */
16
+ export declare class InMemoryMcpSubdomainClaimStore {
17
+ #private;
18
+ constructor(now?: () => Date);
19
+ ensureDefaultMcpSubdomain(org: string): ActiveMcpSubdomainClaim | undefined;
20
+ getActiveMcpSubdomain(org: string): Promise<ActiveMcpSubdomainClaim | undefined>;
21
+ resolveActiveMcpSubdomain(mcpSubdomain: string): Promise<ActiveMcpSubdomainClaim | undefined>;
22
+ getMcpSubdomainSetting(org: string): Promise<McpSubdomainSetting | undefined>;
23
+ changeMcpSubdomain(input: ChangeMcpSubdomainInput, isExactOwner: () => boolean | Promise<boolean>): Promise<McpSubdomainMutationResult>;
24
+ }
25
+ export interface McpSubdomainRouteRef {
26
+ readonly mcpSubdomain: string;
27
+ readonly app: string;
28
+ readonly env: string;
29
+ readonly serverVersion?: string;
30
+ }
31
+ export interface ResolvedMcpTenantRef {
32
+ readonly org: string;
33
+ readonly app: string;
34
+ readonly env: string;
35
+ readonly serverVersion?: string;
36
+ }
37
+ export declare function resolveMcpSubdomainTenant(store: Pick<OrganizationStore, 'resolveActiveMcpSubdomain'>, ref: McpSubdomainRouteRef): Promise<ResolvedMcpTenantRef | undefined>;
38
+ export declare function mcpSubdomainEndpointOptions(store: Pick<OrganizationStore, 'getActiveMcpSubdomain'>, org: string, publicBaseDomain: string | undefined): Promise<{
39
+ readonly publicBaseDomain?: string;
40
+ readonly mcpSubdomain?: string;
41
+ }>;
42
+ //# sourceMappingURL=mcp-subdomain-claims.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"mcp-subdomain-claims.d.ts","sourceRoot":"","sources":["../src/mcp-subdomain-claims.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,uBAAuB,EACvB,uBAAuB,EACvB,0BAA0B,EAC1B,mBAAmB,EACnB,iBAAiB,EAClB,MAAM,gBAAgB,CAAC;AAKxB,qBAAa,8BAA+B,SAAQ,KAAK;;CAKxD;AAED,qBAAa,4BAA6B,SAAQ,KAAK;;CAKtD;AAED,qBAAa,oCAAqC,SAAQ,KAAK;;CAK9D;AAED,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;gBAErB,eAAe,EAAE,MAAM;CAKpC;AAOD,kFAAkF;AAClF,qBAAa,8BAA8B;;gBAS7B,GAAG,GAAE,MAAM,IAAuB;IAI9C,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,uBAAuB,GAAG,SAAS;IAoB3E,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC;IAIhF,yBAAyB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC;IAIvF,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC;IAOnF,kBAAkB,CAChB,KAAK,EAAE,uBAAuB,EAC9B,YAAY,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAC7C,OAAO,CAAC,0BAA0B,CAAC;CAuFvC;AAMD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,IAAI,CAAC,iBAAiB,EAAE,2BAA2B,CAAC,EAC3D,GAAG,EAAE,oBAAoB,GACxB,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAS3C;AAED,wBAAsB,2BAA2B,CAC/C,KAAK,EAAE,IAAI,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,EACvD,GAAG,EAAE,MAAM,EACX,gBAAgB,EAAE,MAAM,GAAG,SAAS,GACnC,OAAO,CAAC;IAAE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAOjF"}
@@ -0,0 +1,181 @@
1
+ import { createHash } from 'node:crypto';
2
+ import { isSystemOwnedOrgSlug, validateMcpSubdomain, validateSlug } from './validation.js';
3
+ const MCP_SUBDOMAIN_COOLDOWN_MS = 30 * 24 * 60 * 60 * 1000;
4
+ export class McpSubdomainOwnerRequiredError extends Error {
5
+ constructor() {
6
+ super('organization owner required');
7
+ this.name = 'McpSubdomainOwnerRequiredError';
8
+ }
9
+ }
10
+ export class McpSubdomainUnavailableError extends Error {
11
+ constructor() {
12
+ super('MCP subdomain is unavailable');
13
+ this.name = 'McpSubdomainUnavailableError';
14
+ }
15
+ }
16
+ export class McpSubdomainIdempotencyConflictError extends Error {
17
+ constructor() {
18
+ super('idempotency key was already used for another MCP subdomain request');
19
+ this.name = 'McpSubdomainIdempotencyConflictError';
20
+ }
21
+ }
22
+ export class McpSubdomainCooldownError extends Error {
23
+ changeAllowedAt;
24
+ constructor(changeAllowedAt) {
25
+ super('MCP subdomain change is in cooldown');
26
+ this.name = 'McpSubdomainCooldownError';
27
+ this.changeAllowedAt = changeAllowedAt;
28
+ }
29
+ }
30
+ /** In-memory parity for active claim reads and organization-creation defaults. */
31
+ export class InMemoryMcpSubdomainClaimStore {
32
+ #activeByOrg = new Map();
33
+ #activeBySubdomain = new Map();
34
+ #claimedSubdomains = new Set();
35
+ #lastChangedAtByOrg = new Map();
36
+ #mutations = new Map();
37
+ #now;
38
+ #mutationTail = Promise.resolve();
39
+ constructor(now = () => new Date()) {
40
+ this.#now = now;
41
+ }
42
+ ensureDefaultMcpSubdomain(org) {
43
+ const orgSlug = validateSlug('org', org);
44
+ if (isSystemOwnedOrgSlug(orgSlug))
45
+ return undefined;
46
+ const existing = this.#activeByOrg.get(orgSlug);
47
+ if (existing !== undefined)
48
+ return existing;
49
+ const mcpSubdomain = validateMcpSubdomain(orgSlug);
50
+ if (this.#claimedSubdomains.has(mcpSubdomain)) {
51
+ throw new McpSubdomainUnavailableError();
52
+ }
53
+ const record = {
54
+ mcpSubdomain,
55
+ orgSlug,
56
+ claimedAt: this.#now().toISOString(),
57
+ };
58
+ this.#activeByOrg.set(orgSlug, record);
59
+ this.#activeBySubdomain.set(mcpSubdomain, record);
60
+ this.#claimedSubdomains.add(mcpSubdomain);
61
+ return record;
62
+ }
63
+ getActiveMcpSubdomain(org) {
64
+ return Promise.resolve(this.#activeByOrg.get(validateSlug('org', org)));
65
+ }
66
+ resolveActiveMcpSubdomain(mcpSubdomain) {
67
+ return Promise.resolve(this.#activeBySubdomain.get(validateMcpSubdomain(mcpSubdomain)));
68
+ }
69
+ async getMcpSubdomainSetting(org) {
70
+ const claim = this.#activeByOrg.get(validateSlug('org', org));
71
+ if (claim === undefined)
72
+ return undefined;
73
+ const changeAllowedAt = this.#changeAllowedAt(claim.orgSlug);
74
+ return { ...claim, ...(changeAllowedAt === undefined ? {} : { changeAllowedAt }) };
75
+ }
76
+ changeMcpSubdomain(input, isExactOwner) {
77
+ return this.#serialize(async () => {
78
+ const org = validateSlug('org', input.org);
79
+ if (!(await isExactOwner()))
80
+ throw new McpSubdomainOwnerRequiredError();
81
+ if (input.idempotencyKey.length === 0) {
82
+ throw new Error('idempotency key must not be empty');
83
+ }
84
+ const keyHash = digest(input.idempotencyKey);
85
+ const fingerprint = `v1:${digest(input.mcpSubdomain)}`;
86
+ const recordKey = `${org}\u0000${keyHash}`;
87
+ const replay = this.#mutations.get(recordKey);
88
+ if (replay !== undefined) {
89
+ if (replay.fingerprint !== fingerprint) {
90
+ throw new McpSubdomainIdempotencyConflictError();
91
+ }
92
+ return { ...replay.result, replayed: true };
93
+ }
94
+ const mcpSubdomain = validateMcpSubdomain(input.mcpSubdomain);
95
+ const current = this.#activeByOrg.get(org);
96
+ if (current === undefined) {
97
+ throw new Error(`active MCP subdomain claim missing for organization "${org}"`);
98
+ }
99
+ const changeAllowedAt = this.#changeAllowedAt(org);
100
+ if (mcpSubdomain === current.mcpSubdomain) {
101
+ const result = {
102
+ orgSlug: org,
103
+ previousMcpSubdomain: current.mcpSubdomain,
104
+ mcpSubdomain,
105
+ changed: false,
106
+ replayed: false,
107
+ ...(changeAllowedAt === undefined ? {} : { changeAllowedAt }),
108
+ auditCommitted: false,
109
+ };
110
+ this.#mutations.set(recordKey, { fingerprint, result });
111
+ return result;
112
+ }
113
+ const now = this.#now();
114
+ if (changeAllowedAt !== undefined && now.getTime() < Date.parse(changeAllowedAt)) {
115
+ throw new McpSubdomainCooldownError(changeAllowedAt);
116
+ }
117
+ if (this.#claimedSubdomains.has(mcpSubdomain)) {
118
+ throw new McpSubdomainUnavailableError();
119
+ }
120
+ const changedAt = now.toISOString();
121
+ const nextChangeAllowedAt = new Date(now.getTime() + MCP_SUBDOMAIN_COOLDOWN_MS).toISOString();
122
+ const next = {
123
+ orgSlug: org,
124
+ mcpSubdomain,
125
+ claimedAt: changedAt,
126
+ };
127
+ this.#activeBySubdomain.delete(current.mcpSubdomain);
128
+ this.#activeByOrg.set(org, next);
129
+ this.#activeBySubdomain.set(mcpSubdomain, next);
130
+ this.#claimedSubdomains.add(mcpSubdomain);
131
+ this.#lastChangedAtByOrg.set(org, changedAt);
132
+ const result = {
133
+ orgSlug: org,
134
+ previousMcpSubdomain: current.mcpSubdomain,
135
+ mcpSubdomain,
136
+ changed: true,
137
+ replayed: false,
138
+ changedAt,
139
+ changeAllowedAt: nextChangeAllowedAt,
140
+ auditCommitted: false,
141
+ };
142
+ this.#mutations.set(recordKey, { fingerprint, result });
143
+ return result;
144
+ });
145
+ }
146
+ #changeAllowedAt(org) {
147
+ const changedAt = this.#lastChangedAtByOrg.get(org);
148
+ return changedAt === undefined
149
+ ? undefined
150
+ : new Date(Date.parse(changedAt) + MCP_SUBDOMAIN_COOLDOWN_MS).toISOString();
151
+ }
152
+ #serialize(operation) {
153
+ const result = this.#mutationTail.then(operation, operation);
154
+ this.#mutationTail = result.then(() => undefined, () => undefined);
155
+ return result;
156
+ }
157
+ }
158
+ function digest(value) {
159
+ return createHash('sha256').update(value).digest('hex');
160
+ }
161
+ export async function resolveMcpSubdomainTenant(store, ref) {
162
+ const claim = await store.resolveActiveMcpSubdomain(ref.mcpSubdomain);
163
+ if (claim === undefined)
164
+ return undefined;
165
+ return {
166
+ org: claim.orgSlug,
167
+ app: ref.app,
168
+ env: ref.env,
169
+ ...(ref.serverVersion === undefined ? {} : { serverVersion: ref.serverVersion }),
170
+ };
171
+ }
172
+ export async function mcpSubdomainEndpointOptions(store, org, publicBaseDomain) {
173
+ if (publicBaseDomain === undefined)
174
+ return {};
175
+ const claim = await store.getActiveMcpSubdomain(org);
176
+ if (claim === undefined) {
177
+ throw new Error(`active MCP subdomain claim missing for organization "${org}"`);
178
+ }
179
+ return { publicBaseDomain, mcpSubdomain: claim.mcpSubdomain };
180
+ }
181
+ //# sourceMappingURL=mcp-subdomain-claims.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"mcp-subdomain-claims.js","sourceRoot":"","sources":["../src/mcp-subdomain-claims.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAQzC,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE3F,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE3D,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IACvD;QACE,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;IAC/C,CAAC;CACF;AAED,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACrD;QACE,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AAED,MAAM,OAAO,oCAAqC,SAAQ,KAAK;IAC7D;QACE,KAAK,CAAC,oEAAoE,CAAC,CAAC;QAC5E,IAAI,CAAC,IAAI,GAAG,sCAAsC,CAAC;IACrD,CAAC;CACF;AAED,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACzC,eAAe,CAAS;IAEjC,YAAY,eAAuB;QACjC,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;IACzC,CAAC;CACF;AAOD,kFAAkF;AAClF,MAAM,OAAO,8BAA8B;IAChC,YAAY,GAAG,IAAI,GAAG,EAAmC,CAAC;IAC1D,kBAAkB,GAAG,IAAI,GAAG,EAAmC,CAAC;IAChE,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,mBAAmB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAChD,UAAU,GAAG,IAAI,GAAG,EAAkC,CAAC;IACvD,IAAI,CAAa;IAC1B,aAAa,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAEjD,YAAY,MAAkB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;QAC5C,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;IAClB,CAAC;IAED,yBAAyB,CAAC,GAAW;QACnC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzC,IAAI,oBAAoB,CAAC,OAAO,CAAC;YAAE,OAAO,SAAS,CAAC;QACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,YAAY,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,4BAA4B,EAAE,CAAC;QAC3C,CAAC;QACD,MAAM,MAAM,GAA4B;YACtC,YAAY;YACZ,OAAO;YACP,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;QACF,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,qBAAqB,CAAC,GAAW;QAC/B,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,yBAAyB,CAAC,YAAoB;QAC5C,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC1F,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,GAAW;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QAC9D,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,MAAM,eAAe,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7D,OAAO,EAAE,GAAG,KAAK,EAAE,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC;IAED,kBAAkB,CAChB,KAA8B,EAC9B,YAA8C;QAE9C,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE;YAChC,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,CAAC,CAAC,MAAM,YAAY,EAAE,CAAC;gBAAE,MAAM,IAAI,8BAA8B,EAAE,CAAC;YACxE,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YAC7C,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;YACvD,MAAM,SAAS,GAAG,GAAG,GAAG,SAAS,OAAO,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC9C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,IAAI,MAAM,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;oBACvC,MAAM,IAAI,oCAAoC,EAAE,CAAC;gBACnD,CAAC;gBACD,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YAC9C,CAAC;YAED,MAAM,YAAY,GAAG,oBAAoB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,wDAAwD,GAAG,GAAG,CAAC,CAAC;YAClF,CAAC;YACD,MAAM,eAAe,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACnD,IAAI,YAAY,KAAK,OAAO,CAAC,YAAY,EAAE,CAAC;gBAC1C,MAAM,MAAM,GAA+B;oBACzC,OAAO,EAAE,GAAG;oBACZ,oBAAoB,EAAE,OAAO,CAAC,YAAY;oBAC1C,YAAY;oBACZ,OAAO,EAAE,KAAK;oBACd,QAAQ,EAAE,KAAK;oBACf,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;oBAC7D,cAAc,EAAE,KAAK;iBACtB,CAAC;gBACF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;gBACxD,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YACxB,IAAI,eAAe,KAAK,SAAS,IAAI,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;gBACjF,MAAM,IAAI,yBAAyB,CAAC,eAAe,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,4BAA4B,EAAE,CAAC;YAC3C,CAAC;YAED,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,mBAAmB,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,yBAAyB,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9F,MAAM,IAAI,GAA4B;gBACpC,OAAO,EAAE,GAAG;gBACZ,YAAY;gBACZ,SAAS,EAAE,SAAS;aACrB,CAAC;YACF,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACrD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACjC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YAChD,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC1C,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC7C,MAAM,MAAM,GAA+B;gBACzC,OAAO,EAAE,GAAG;gBACZ,oBAAoB,EAAE,OAAO,CAAC,YAAY;gBAC1C,YAAY;gBACZ,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,KAAK;gBACf,SAAS;gBACT,eAAe,EAAE,mBAAmB;gBACpC,cAAc,EAAE,KAAK;aACtB,CAAC;YACF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;YACxD,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,gBAAgB,CAAC,GAAW;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpD,OAAO,SAAS,KAAK,SAAS;YAC5B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,yBAAyB,CAAC,CAAC,WAAW,EAAE,CAAC;IAChF,CAAC;IAED,UAAU,CAAI,SAA2B;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC7D,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,IAAI,CAC9B,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAgBD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAA2D,EAC3D,GAAyB;IAEzB,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,yBAAyB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACtE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO;QACL,GAAG,EAAE,KAAK,CAAC,OAAO;QAClB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC;KACjF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,KAAuD,EACvD,GAAW,EACX,gBAAoC;IAEpC,IAAI,gBAAgB,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAC9C,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACrD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,wDAAwD,GAAG,GAAG,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;AAChE,CAAC"}
@@ -0,0 +1,13 @@
1
+ import type { SignupAllowlistKind } from './contracts.js';
2
+ export declare function memberKey(org: string, subject: string): string;
3
+ export declare function domainKey(org: string, domain: string): string;
4
+ export declare function domainFromEmail(email: string): string | undefined;
5
+ export declare function normalizeSignupAllowlistValue(kind: SignupAllowlistKind, value: string): string;
6
+ export declare function signupKey(kind: SignupAllowlistKind, value: string): string;
7
+ export declare function personalOrgSlug(identity: {
8
+ readonly subject: string;
9
+ readonly email: string;
10
+ }): string;
11
+ /** Immutable suffix used to discover and bind legacy email-derived personal organization slugs. */
12
+ export declare function personalOrgSlugSuffix(subject: string): string;
13
+ //# sourceMappingURL=organization-helpers.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"organization-helpers.d.ts","sourceRoot":"","sources":["../src/organization-helpers.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAG1D,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAQjE;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE9F;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1E;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,GAAG,MAAM,CAIT;AAED,mGAAmG;AACnG,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE7D"}