@polpo-ai/connect 0.15.143 → 0.16.0

package/dist/definitions.js

@@ -0,0 +1,394 @@
+import { ConnectError } from "./errors.js";
+import { connectorHostnameIsUnsafe, normalizeConnectorHttpPolicy } from "./http-policy.js";
+import { normalizeScopes } from "./scopes.js";
+import { normalizeConnectorVerification } from "./verification.js";
+const RESERVED_OAUTH_PARAMS = new Set([
+    "client_id", "client_secret", "redirect_uri", "response_type", "grant_type",
+    "scope", "state", "code", "code_verifier", "code_challenge", "code_challenge_method",
+    "refresh_token", "access_token",
+]);
+function invalid(message) {
+    throw new ConnectError("invalid_provider", message);
+}
+function record(value, name) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        invalid(`${name} must be an object`);
+    return value;
+}
+function knownKeys(input, keys, name) {
+    if (Object.keys(input).some((key) => !keys.includes(key)))
+        invalid(`${name} contains an unsupported field`);
+}
+function jsonDocument(value) {
+    let nodes = 0;
+    const seen = new Set();
+    const visit = (entry, depth) => {
+        if (++nodes > 20_000 || depth > 32)
+            invalid("Connector JSON document exceeds its structural limit");
+        if (entry === null || typeof entry === "string" || typeof entry === "boolean")
+            return;
+        if (typeof entry === "number" && Number.isFinite(entry))
+            return;
+        if (!entry || typeof entry !== "object" || seen.has(entry))
+            invalid("Connector document must contain finite JSON values");
+        if (!Array.isArray(entry) && Object.getPrototypeOf(entry) !== Object.prototype && Object.getPrototypeOf(entry) !== null) {
+            invalid("Connector document must contain plain JSON objects");
+        }
+        seen.add(entry);
+        for (const child of Object.values(entry))
+            visit(child, depth + 1);
+        seen.delete(entry);
+    };
+    visit(value, 0);
+    if (JSON.stringify(value).length > 65_536)
+        invalid("Connector JSON document is too large");
+    return structuredClone(value);
+}
+function text(value, name) {
+    if (typeof value !== "string" || !value.trim() || value.length > 2048)
+        invalid(`${name} is invalid`);
+    return value.trim();
+}
+function identifier(value, name) {
+    const result = text(value, name);
+    if (!/^[a-z0-9][a-z0-9_-]{0,63}$/.test(result))
+        invalid(`${name} is invalid`);
+    return result;
+}
+function scopes(value) {
+    if (value === undefined)
+        return undefined;
+    if (!Array.isArray(value) || value.length > 128 || value.some((v) => typeof v !== "string" || v.length > 2048)) {
+        invalid("Authentication scopes are invalid");
+    }
+    return normalizeScopes(value);
+}
+function endpoint(value, name) {
+    let url;
+    try {
+        url = new URL(text(value, name));
+    }
+    catch {
+        invalid(`${name} must be a public HTTPS URL`);
+    }
+    if (url.protocol !== "https:" || url.username || url.password || url.hash
+        || connectorHostnameIsUnsafe(url.hostname))
+        invalid(`${name} must be a public HTTPS URL`);
+    for (const key of url.searchParams.keys()) {
+        if (RESERVED_OAUTH_PARAMS.has(key.toLowerCase()))
+            invalid(`${name} cannot override OAuth parameters`);
+    }
+    return url.toString();
+}
+function parameters(value, name) {
+    if (value === undefined)
+        return undefined;
+    const input = record(value, name);
+    const result = {};
+    if (Object.keys(input).length > 32)
+        invalid(`${name} has too many parameters`);
+    for (const [key, value] of Object.entries(input)) {
+        if (!/^[a-zA-Z][a-zA-Z0-9_.-]{0,127}$/.test(key) || RESERVED_OAUTH_PARAMS.has(key.toLowerCase())) {
+            invalid(`${name} cannot override reserved OAuth parameters`);
+        }
+        result[key] = text(value, name);
+    }
+    return result;
+}
+function normalizeIdentity(value) {
+    const input = record(value, "OAuth identity policy");
+    knownKeys(input, ["method", "issuer", "url", "requiredScopes", "scopeAliases"], "OAuth identity policy");
+    if (input.method !== "userinfo")
+        invalid("Unsupported OAuth identity method");
+    const issuer = endpoint(input.issuer, "OAuth identity issuer");
+    if (new URL(issuer).search)
+        invalid("OAuth identity issuer cannot contain a query");
+    const requiredScopes = scopes(input.requiredScopes);
+    if (!requiredScopes?.length)
+        invalid("OAuth identity scopes are required");
+    const aliases = Object.create(null);
+    if (input.scopeAliases !== undefined) {
+        for (const [alias, canonical] of Object.entries(record(input.scopeAliases, "OAuth scope aliases"))) {
+            const target = text(canonical, "OAuth scope alias");
+            if (!alias.trim() || alias.length > 2048 || !requiredScopes.includes(target)
+                || requiredScopes.includes(alias) || Object.keys(aliases).length >= 32)
+                invalid("Invalid OAuth scope alias");
+            aliases[alias] = target;
+        }
+    }
+    return { method: "userinfo", issuer: text(input.issuer, "OAuth identity issuer"),
+        url: endpoint(input.url, "OAuth UserInfo endpoint"), requiredScopes,
+        ...(Object.keys(aliases).length ? { scopeAliases: aliases } : {}) };
+}
+/** Immutable, non-secret JSON definitions are safe to persist and expose in catalogs. */
+export function normalizeConnectorDefinition(value) {
+    const input = record(value, "Connector definition");
+    knownKeys(input, ["version", "id", "name", "description", "icon", "source", "protocol", "defaultAuthenticationId",
+        "authentication", "scopes", "actions", "triggers", "allowCustomScopes", "http", "verification"], "Connector definition");
+    if (input.version !== 2)
+        invalid("Unsupported Connector definition version");
+    if (input.protocol !== "http_api" && input.protocol !== "mcp")
+        invalid("Unsupported Connector protocol");
+    if (input.source !== "catalog" && input.source !== "custom")
+        invalid("Unsupported Connector source");
+    if (!Array.isArray(input.authentication) || input.authentication.length === 0 || input.authentication.length > 16) {
+        invalid("Connector must declare between 1 and 16 authentication methods");
+    }
+    const authentication = input.authentication.map((value) => {
+        const auth = record(value, "Connector authentication");
+        for (const key of ["clientId", "clientSecret", "apiKey", "accessToken", "refreshToken", "secretRef", "bearerToken"]) {
+            if (key in auth)
+                invalid("Connector authentication cannot contain client credentials or account secrets");
+        }
+        const common = ["id", "label", "type", "defaultScopes"];
+        knownKeys(auth, [...common, ...(auth.type === "api_key" ? ["injection"] : auth.type === "oauth2"
+                ? input.protocol === "mcp" ? ["discovery"]
+                    : ["authorizationUrl", "tokenUrl", "revokeUrl", "supportsPkce", "extraAuthorizeParams", "extraTokenParams", "identity"] : [])], "Connector authentication");
+        const base = {
+            id: identifier(auth.id, "Authentication id"),
+            ...(auth.label === undefined ? {} : { label: text(auth.label, "Authentication label") }),
+            ...(auth.defaultScopes === undefined ? {} : { defaultScopes: scopes(auth.defaultScopes) }),
+        };
+        if (auth.type === "none")
+            return { ...base, type: "none" };
+        if (auth.type === "api_key") {
+            const injection = record(auth.injection, "API key injection");
+            knownKeys(injection, ["mode", "name"], "API key injection");
+            if (!["bearer", "header", "query"].includes(String(injection.mode))
+                || (input.protocol === "mcp" && injection.mode === "query"))
+                invalid("Unsupported API key injection");
+            const policy = normalizeConnectorHttpPolicy({
+                origins: ["https://policy-validation.example.com"],
+                auth: injection,
+            });
+            return { ...base, type: "api_key", injection: policy.auth };
+        }
+        if (auth.type !== "oauth2")
+            invalid("Unsupported Connector authentication method");
+        if (input.protocol === "mcp") {
+            if (auth.discovery !== true || auth.authorizationUrl !== undefined || auth.tokenUrl !== undefined) {
+                invalid("MCP OAuth requires protocol discovery, not API OAuth endpoint configuration");
+            }
+            return { ...base, type: "oauth2", discovery: true };
+        }
+        if (auth.discovery !== undefined)
+            invalid("HTTP API OAuth requires explicit endpoints");
+        if (auth.supportsPkce !== undefined && typeof auth.supportsPkce !== "boolean")
+            invalid("supportsPkce must be a boolean");
+        return {
+            ...base, type: "oauth2",
+            authorizationUrl: endpoint(auth.authorizationUrl, "authorizationUrl"),
+            tokenUrl: endpoint(auth.tokenUrl, "tokenUrl"),
+            ...(auth.revokeUrl === undefined ? {} : { revokeUrl: endpoint(auth.revokeUrl, "revokeUrl") }),
+            ...(auth.supportsPkce === undefined ? {} : { supportsPkce: auth.supportsPkce }),
+            ...(auth.extraAuthorizeParams === undefined ? {} : { extraAuthorizeParams: parameters(auth.extraAuthorizeParams, "extraAuthorizeParams") }),
+            ...(auth.extraTokenParams === undefined ? {} : { extraTokenParams: parameters(auth.extraTokenParams, "extraTokenParams") }),
+            ...(auth.identity === undefined ? {} : { identity: normalizeIdentity(auth.identity) }),
+        };
+    });
+    const ids = new Set(authentication.map((auth) => auth.id));
+    if (ids.size !== authentication.length)
+        invalid("Duplicate Connector authentication id");
+    const defaultAuthenticationId = identifier(input.defaultAuthenticationId, "Default authentication id");
+    if (!ids.has(defaultAuthenticationId))
+        invalid("Default authentication is not supported");
+    const base = {
+        version: 2, id: identifier(input.id, "Connector id"),
+        name: text(input.name, "Connector name"), source: input.source,
+        defaultAuthenticationId, authentication,
+        ...(input.description === undefined ? {} : { description: text(input.description, "Connector description") }),
+        ...(input.icon === undefined ? {} : { icon: text(input.icon, "Connector icon") }),
+        ...normalizeOperations({ ...input, authentication }),
+    };
+    if (base.id.length < 2)
+        invalid("Connector id must contain at least two characters");
+    if (input.protocol === "mcp") {
+        if (input.http !== undefined)
+            invalid("MCP definitions cannot declare an HTTP API policy");
+        const verification = input.verification === undefined ? undefined : normalizeConnectorVerification(input.verification, "mcp");
+        if (verification && !input.allowCustomScopes && verification.scopes?.some((scope) => !base.scopes?.some((candidate) => candidate.id === scope))) {
+            invalid("Verification references an undeclared scope");
+        }
+        return freezeConnectorValue({ ...base, protocol: "mcp",
+            ...(verification ? { verification } : {}),
+        });
+    }
+    const http = record(input.http, "HTTP API policy");
+    if ("auth" in http)
+        invalid("HTTP authentication belongs to the selected authentication method");
+    const { auth: _auth, ...policy } = normalizeConnectorHttpPolicy({ ...http, auth: { mode: "none" } });
+    const verification = input.verification === undefined ? undefined : normalizeConnectorVerification(input.verification, "http_api", { ...policy, auth: { mode: "none" } });
+    if (verification?.kind === "http" && verification.account && authentication.some((method) => method.type === "none")) {
+        invalid("A public authentication method cannot verify account credentials");
+    }
+    if (verification && !input.allowCustomScopes) {
+        const allowed = new Set((base.scopes ?? []).map((scope) => scope.id));
+        if (verification.scopes?.some((scope) => !allowed.has(scope)))
+            invalid("Verification references an undeclared scope");
+    }
+    return freezeConnectorValue({ ...base, protocol: "http_api", http: policy, ...(verification ? { verification } : {}) });
+}
+function normalizeOperations(input) {
+    const result = {};
+    if (input.allowCustomScopes !== undefined) {
+        if (typeof input.allowCustomScopes !== "boolean")
+            invalid("allowCustomScopes must be a boolean");
+        result.allowCustomScopes = input.allowCustomScopes;
+    }
+    for (const name of ["scopes", "actions", "triggers"]) {
+        if (input[name] === undefined)
+            continue;
+        if (!Array.isArray(input[name]) || input[name].length > 256)
+            invalid(`Connector ${name} must be an array`);
+        const ids = new Set();
+        result[name] = input[name].map((value) => {
+            const entry = record(value, name);
+            knownKeys(entry, name === "scopes" ? ["id", "label", "description", "required", "dangerous"]
+                : name === "actions" ? ["id", "label", "description", "scopes", "risk", "inputSchema", "outputSchema", "metadata"]
+                    : ["id", "label", "description", "scopes", "metadata"], `Connector ${name}`);
+            const id = name === "scopes" ? text(entry.id, "Scope id") : identifier(entry.id, "Operation id");
+            if (ids.has(id))
+                invalid(`Duplicate Connector ${name} id`);
+            ids.add(id);
+            const copy = { id };
+            for (const field of ["label", "description"])
+                if (entry[field] !== undefined)
+                    copy[field] = text(entry[field], field);
+            if (name === "scopes") {
+                for (const field of ["required", "dangerous"]) {
+                    if (entry[field] !== undefined && typeof entry[field] !== "boolean")
+                        invalid(`Scope ${field} must be a boolean`);
+                    if (entry[field] !== undefined)
+                        copy[field] = entry[field];
+                }
+            }
+            else {
+                if (entry.scopes !== undefined)
+                    copy.scopes = scopes(entry.scopes);
+                if (entry.metadata !== undefined)
+                    copy.metadata = jsonDocument(record(entry.metadata, "Operation metadata"));
+                for (const field of ["inputSchema", "outputSchema"])
+                    if (entry[field] !== undefined)
+                        copy[field] = jsonDocument(entry[field]);
+                if (entry.risk !== undefined) {
+                    if (!["read", "write", "admin"].includes(String(entry.risk)))
+                        invalid("Unsupported operation risk");
+                    copy.risk = entry.risk;
+                }
+            }
+            return copy;
+        });
+    }
+    const knownScopes = new Set(result.scopes?.map((entry) => entry.id));
+    if (!input.allowCustomScopes) {
+        const uses = [
+            ...input.authentication.flatMap((auth) => scopes(auth.defaultScopes) ?? []),
+            ...input.authentication.flatMap((auth) => auth.identity?.requiredScopes ?? []),
+            ...([...(result.actions ?? []), ...(result.triggers ?? [])])
+                .flatMap((operation) => operation.scopes ?? []),
+        ];
+        if (uses.some((scope) => !knownScopes.has(scope)))
+            invalid("Connector references an undeclared scope");
+    }
+    return result;
+}
+/** Selects one method for existing execution adapters; the authored definition remains intact. */
+export function compileConnectorDefinition(value, authenticationId) {
+    const definition = normalizeConnectorDefinition(value);
+    const selected = authenticationId ?? definition.defaultAuthenticationId;
+    const method = definition.authentication.find((candidate) => candidate.id === selected);
+    if (!method)
+        throw new ConnectError("unsupported_auth", `Unsupported authentication: ${selected}`);
+    let auth;
+    if (definition.protocol === "mcp") {
+        auth = {
+            type: "mcp", defaultScopes: method.defaultScopes,
+            auth: method.type === "api_key" ? method.injection.mode : method.type,
+            ...(method.type === "api_key" && method.injection.mode === "header" ? { headerName: method.injection.name } : {}),
+        };
+    }
+    else if (method.type === "api_key") {
+        auth = {
+            type: "api_key", defaultScopes: method.defaultScopes,
+            ...(method.injection.mode === "header" ? { headerName: method.injection.name } : {}),
+            ...(method.injection.mode === "query" ? { queryParam: method.injection.name } : {}),
+        };
+    }
+    else if (method.type === "oauth2" && "authorizationUrl" in method) {
+        const { id: _id, label: _label, ...config } = method;
+        auth = config;
+    }
+    else {
+        auth = { type: "none", defaultScopes: method.defaultScopes };
+    }
+    return freezeConnectorValue({
+        id: definition.id, name: definition.name, description: definition.description,
+        icon: definition.icon, source: definition.source, protocol: definition.protocol,
+        scopes: definition.scopes, actions: definition.actions, triggers: definition.triggers,
+        allowCustomScopes: definition.allowCustomScopes, auth, authenticationId: selected,
+        verification: definition.verification,
+        http: definition.protocol === "http_api"
+            ? normalizeConnectorHttpPolicy({
+                ...definition.http,
+                auth: method.type === "api_key" ? method.injection : { mode: method.type === "none" ? "none" : "bearer" },
+            }) : undefined,
+    });
+}
+export function describeConnector(provider) {
+    if ("version" in provider && provider.version === 2) {
+        const { version: _version, ...definition } = normalizeConnectorDefinition(provider);
+        return freezeConnectorValue({ ...definition, kind: "integration" });
+    }
+    const legacy = provider;
+    const id = legacy.authenticationId ?? "default";
+    let authentication;
+    if (legacy.auth.type === "mcp") {
+        authentication = legacy.auth.auth === "oauth2"
+            ? { id, type: "oauth2", discovery: true, defaultScopes: legacy.auth.defaultScopes }
+            : legacy.auth.auth === "none"
+                ? { id, type: "none", defaultScopes: legacy.auth.defaultScopes }
+                : { id, type: "api_key", injection: legacy.auth.auth === "header"
+                        ? { mode: "header", name: legacy.auth.headerName } : { mode: "bearer" }, defaultScopes: legacy.auth.defaultScopes };
+    }
+    else if (legacy.auth.type === "oauth2") {
+        const { clientId: _clientId, clientSecret: _secret, ...auth } = legacy.auth;
+        authentication = { ...auth, id };
+    }
+    else if (legacy.auth.type === "none") {
+        authentication = { ...legacy.auth, id };
+    }
+    else {
+        authentication = { id, type: "api_key", defaultScopes: legacy.auth.defaultScopes,
+            injection: (legacy.http?.auth ?? (legacy.auth.headerName ? { mode: "header", name: legacy.auth.headerName }
+                : legacy.auth.queryParam ? { mode: "query", name: legacy.auth.queryParam } : { mode: "bearer" })) };
+    }
+    const credentialOnly = legacy.auth.type === "api_key" && !legacy.http;
+    const { auth: _httpAuth, ...http } = legacy.http ?? {};
+    return freezeConnectorValue({
+        id: legacy.id, name: legacy.name, description: legacy.description, icon: legacy.icon,
+        scopes: structuredClone(legacy.scopes), actions: structuredClone(legacy.actions), triggers: structuredClone(legacy.triggers),
+        allowCustomScopes: legacy.allowCustomScopes, kind: credentialOnly ? "credential" : "integration",
+        source: legacy.source ?? "legacy", protocol: credentialOnly ? null : legacy.auth.type === "mcp" ? "mcp" : "http_api",
+        defaultAuthenticationId: id, authentication: [authentication],
+        verification: structuredClone(legacy.verification),
+        ...(legacy.http ? { http: http } : {}),
+    });
+}
+/** Compatibility projection for old catalog consumers; never expose OAuth client secrets. */
+export function sanitizeConnectorProvider(provider) {
+    const copy = structuredClone(provider);
+    if (copy.auth.type === "oauth2") {
+        delete copy.auth.clientId;
+        delete copy.auth.clientSecret;
+    }
+    return freezeConnectorValue(copy);
+}
+export function freezeConnectorValue(value) {
+    if (value && typeof value === "object") {
+        for (const child of Object.values(value))
+            freezeConnectorValue(child);
+        Object.freeze(value);
+    }
+    return value;
+}
+//# sourceMappingURL=definitions.js.map

package/dist/definitions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"definitions.js","sourceRoot":"","sources":["../src/definitions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,yBAAyB,EAAE,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,8BAA8B,EAAE,MAAM,mBAAmB,CAAC;AAgEnE,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,WAAW,EAAE,eAAe,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY;IAC3E,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,gBAAgB,EAAE,uBAAuB;IACpF,eAAe,EAAE,cAAc;CAChC,CAAC,CAAC;AAEH,SAAS,OAAO,CAAC,OAAe;IAC9B,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,IAAY;IAC1C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC;IACtG,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,SAAS,CAAC,KAA8B,EAAE,IAAuB,EAAE,IAAY;IACtF,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,CAAC,GAAG,IAAI,gCAAgC,CAAC,CAAC;AAC9G,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,KAAa,EAAQ,EAAE;QACpD,IAAI,EAAE,KAAK,GAAG,MAAM,IAAI,KAAK,GAAG,EAAE;YAAE,OAAO,CAAC,sDAAsD,CAAC,CAAC;QACpG,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;YAAE,OAAO;QACtF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO;QAChE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,oDAAoD,CAAC,CAAC;QAC1H,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YACxH,OAAO,CAAC,oDAAoD,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC,CAAC;IACF,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAChB,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,MAAM;QAAE,OAAO,CAAC,sCAAsC,CAAC,CAAC;IAC3F,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,IAAY;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI;QAAE,OAAO,CAAC,GAAG,IAAI,aAAa,CAAC,CAAC;IACrG,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,IAAY;IAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,GAAG,IAAI,aAAa,CAAC,CAAC;IAC9E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;QAC/G,OAAO,CAAC,mCAAmC,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,eAAe,CAAC,KAAiB,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,IAAY;IAC5C,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,CAAC,GAAG,IAAI,6BAA6B,CAAC,CAAC;IAAC,CAAC;IAClG,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI;WACpE,yBAAyB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,GAAG,IAAI,6BAA6B,CAAC,CAAC;IAC5F,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1C,IAAI,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YAAE,OAAO,CAAC,GAAG,IAAI,mCAAmC,CAAC,CAAC;IACxG,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,IAAY;IAC9C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,CAAC,GAAG,IAAI,0BAA0B,CAAC,CAAC;IAC/E,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,iCAAiC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACjG,OAAO,CAAC,GAAG,IAAI,4CAA4C,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;IACrD,SAAS,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE,cAAc,CAAC,EAAE,uBAAuB,CAAC,CAAC;IACzG,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,CAAC,mCAAmC,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IAC/D,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM;QAAE,OAAO,CAAC,8CAA8C,CAAC,CAAC;IACpF,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACpD,IAAI,CAAC,cAAc,EAAE,MAAM;QAAE,OAAO,CAAC,oCAAoC,CAAC,CAAC;IAC3E,MAAM,OAAO,GAA2B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC,EAAE,CAAC;YACnG,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;YACpD,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC;mBACvE,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,IAAI,EAAE;gBAAE,OAAO,CAAC,2BAA2B,CAAC,CAAC;YAC/G,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,uBAAuB,CAAC;QAC9E,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,yBAAyB,CAAC,EAAE,cAAc;QACnE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACxE,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,4BAA4B,CAAC,KAAc;IACzD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;IACpD,SAAS,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,yBAAyB;QAC/G,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,sBAAsB,CAAC,CAAC;IAC3H,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC;QAAE,OAAO,CAAC,0CAA0C,CAAC,CAAC;IAC7E,IAAI,KAAK,CAAC,QAAQ,KAAK,UAAU,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK;QAAE,OAAO,CAAC,gCAAgC,CAAC,CAAC;IACzG,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,CAAC,8BAA8B,CAAC,CAAC;IACrG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAClH,OAAO,CAAC,gEAAgE,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,cAAc,GAA8B,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACnF,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;QACvD,KAAK,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,QAAQ,EAAE,aAAa,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,CAAC,EAAE,CAAC;YACpH,IAAI,GAAG,IAAI,IAAI;gBAAE,OAAO,CAAC,+EAA+E,CAAC,CAAC;QAC5G,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;QACxD,SAAS,CAAC,IAAI,EAAE,CAAC,GAAG,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ;gBAC9F,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;oBACxC,CAAC,CAAC,CAAC,kBAAkB,EAAE,UAAU,EAAE,WAAW,EAAE,cAAc,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,0BAA0B,CAAC,CAAC;QAChK,MAAM,IAAI,GAAuB;YAC/B,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,mBAAmB,CAAC;YAC5C,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,sBAAsB,CAAC,EAAE,CAAC;YACxF,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;SAC3F,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC3D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;YAC9D,SAAS,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,mBAAmB,CAAC,CAAC;YAC5D,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;mBAC9D,CAAC,KAAK,CAAC,QAAQ,KAAK,KAAK,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,CAAC;gBAAE,OAAO,CAAC,+BAA+B,CAAC,CAAC;YACxG,MAAM,MAAM,GAAG,4BAA4B,CAAC;gBAC1C,OAAO,EAAE,CAAC,uCAAuC,CAAC;gBAClD,IAAI,EAAE,SAA+C;aACtD,CAAC,CAAC;YACH,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,IAA+C,EAAE,CAAC;QACzG,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,CAAC,6CAA6C,CAAC,CAAC;QACnF,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAClG,OAAO,CAAC,6EAA6E,CAAC,CAAC;YACzF,CAAC;YACD,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACtD,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO,CAAC,4CAA4C,CAAC,CAAC;QACxF,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,SAAS;YAAE,OAAO,CAAC,gCAAgC,CAAC,CAAC;QACzH,OAAO;YACL,GAAG,IAAI,EAAE,IAAI,EAAE,QAAQ;YACvB,gBAAgB,EAAE,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;YACrE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC;YAC7C,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC;YAC7F,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;YAC/E,GAAG,CAAC,IAAI,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,UAAU,CAAC,IAAI,CAAC,oBAAoB,EAAE,sBAAsB,CAAC,EAAE,CAAC;YAC3I,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,UAAU,CAAC,IAAI,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,EAAE,CAAC;YAC3H,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;SACvF,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3D,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,CAAC,MAAM;QAAE,OAAO,CAAC,uCAAuC,CAAC,CAAC;IACzF,MAAM,uBAAuB,GAAG,UAAU,CAAC,KAAK,CAAC,uBAAuB,EAAE,2BAA2B,CAAC,CAAC;IACvG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC;QAAE,OAAO,CAAC,yCAAyC,CAAC,CAAC;IAC1F,MAAM,IAAI,GAAG;QACX,OAAO,EAAE,CAAU,EAAE,EAAE,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,CAAC;QAC7D,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,gBAAgB,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM;QAC9D,uBAAuB,EAAE,cAAc;QACvC,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,uBAAuB,CAAC,EAAE,CAAC;QAC7G,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACjF,GAAG,mBAAmB,CAAC,EAAE,GAAG,KAAK,EAAE,cAAc,EAAE,CAAC;KACrD,CAAC;IACF,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,mDAAmD,CAAC,CAAC;IACrF,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,mDAAmD,CAAC,CAAC;QAC3F,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,8BAA8B,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAC9H,IAAI,YAAY,IAAI,CAAC,KAAK,CAAC,iBAAiB,IAAI,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YAChJ,OAAO,CAAC,6CAA6C,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,oBAAoB,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK;YACpD,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAwB,CAAC;IAC5B,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IACnD,IAAI,MAAM,IAAI,IAAI;QAAE,OAAO,CAAC,mEAAmE,CAAC,CAAC;IACjG,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,GAAG,4BAA4B,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAyB,CAAC,CAAC;IAC5H,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,8BAA8B,CAAC,KAAK,CAAC,YAAY,EAAE,UAAU,EAAE,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1K,IAAI,YAAY,EAAE,IAAI,KAAK,MAAM,IAAI,YAAY,CAAC,OAAO,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC;QACrH,OAAO,CAAC,kEAAkE,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,YAAY,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACtE,IAAI,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,CAAC,6CAA6C,CAAC,CAAC;IACxH,CAAC;IACD,OAAO,oBAAoB,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAwB,CAAC;AACjJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAA8B;IAEzD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC1C,IAAI,OAAO,KAAK,CAAC,iBAAiB,KAAK,SAAS;YAAE,OAAO,CAAC,qCAAqC,CAAC,CAAC;QACjG,MAAM,CAAC,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAC;IACrD,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAU,EAAE,CAAC;QAC9D,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS;QACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG;YAAE,OAAO,CAAC,aAAa,IAAI,mBAAmB,CAAC,CAAC;QAC3G,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAc,EAAE,EAAE;YAChD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAClC,SAAS,CAAC,KAAK,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,CAAC;gBAC1F,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,UAAU,CAAC;oBAChH,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC;YACjF,MAAM,EAAE,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;YACjG,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,OAAO,CAAC,uBAAuB,IAAI,KAAK,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACZ,MAAM,IAAI,GAA4B,EAAE,EAAE,EAAE,CAAC;YAC7C,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC;gBAAE,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS;oBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;YACtH,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,KAAK,MAAM,KAAK,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC;oBAC9C,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS;wBAAE,OAAO,CAAC,SAAS,KAAK,oBAAoB,CAAC,CAAC;oBACjH,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS;wBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC7D,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;oBAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACnE,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;oBAAE,IAAI,CAAC,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC,CAAC;gBAC7G,KAAK,MAAM,KAAK,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC;oBAAE,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS;wBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC9H,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAC7B,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAAE,OAAO,CAAC,4BAA4B,CAAC,CAAC;oBACpG,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;gBACzB,CAAC;YACH,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAE,MAAM,CAAC,MAA4C,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5G,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG;YACX,GAAI,KAAK,CAAC,cAAsD,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;YACpH,GAAI,KAAK,CAAC,cAAqE,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,IAAI,EAAE,CAAC;YACtI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,OAAuC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,QAAwC,IAAI,EAAE,CAAC,CAAC,CAAC;iBACzH,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;SAClD,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,CAAC,0CAA0C,CAAC,CAAC;IACzG,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,0BAA0B,CAAC,KAA0B,EAAE,gBAAyB;IAC9F,MAAM,UAAU,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,gBAAgB,IAAI,UAAU,CAAC,uBAAuB,CAAC;IACxE,MAAM,MAAM,GAAG,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;IACxF,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,+BAA+B,QAAQ,EAAE,CAAC,CAAC;IACnG,IAAI,IAAyB,CAAC;IAC9B,IAAI,UAAU,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAClC,IAAI,GAAG;YACL,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa;YAChD,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAA2B,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI;YAC5F,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClH,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACrC,IAAI,GAAG;YACL,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa;YACpD,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpF,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpF,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,kBAAkB,IAAI,MAAM,EAAE,CAAC;QACpE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC;QACrD,IAAI,GAAG,MAAM,CAAC;IAChB,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO,oBAAoB,CAAC;QAC1B,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW;QAC7E,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC/E,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ;QACrF,iBAAiB,EAAE,UAAU,CAAC,iBAAiB,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ;QACjF,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,IAAI,EAAE,UAAU,CAAC,QAAQ,KAAK,UAAU;YACtC,CAAC,CAAC,4BAA4B,CAAC;gBAC7B,GAAG,UAAU,CAAC,IAAI;gBAClB,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;aAC1G,CAAC,CAAC,CAAC,CAAC,SAAS;KACjB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAA2D;IAC3F,IAAI,SAAS,IAAI,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,UAAU,EAAE,GAAG,4BAA4B,CAAC,QAAQ,CAAC,CAAC;QACpF,OAAO,oBAAoB,CAAC,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,MAAM,GAAG,QAAuC,CAAC;IACvD,MAAM,EAAE,GAAG,MAAM,CAAC,gBAAgB,IAAI,SAAS,CAAC;IAChD,IAAI,cAAuC,CAAC;IAC5C,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC/B,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ;YAC5C,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE;YACnF,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM;gBAC3B,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE;gBAChE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ;wBAC/D,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;IAC5H,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACzC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;QAC5E,cAAc,GAAG,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC;IACnC,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACvC,cAAc,GAAG,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;IAC1C,CAAC;SAAM,CAAC;QACN,cAAc,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa;YAC9E,SAAS,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE;gBACzG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAA4C,EAAE,CAAC;IACrJ,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;IACtE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;IACvD,OAAO,oBAAoB,CAAC;QAC1B,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI;QACpF,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC5H,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa;QAChG,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,QAAQ,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU;QACpH,uBAAuB,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,cAAc,CAAC;QAC7D,YAAY,EAAE,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC;QAClD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAyC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5E,CAAC,CAAC;AACL,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,yBAAyB,CAAC,QAAqC;IAC7E,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;IAChC,CAAC;IACD,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAI,KAAQ;IAC9C,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/errors.d.ts

@@ -1,4 +1,4 @@
-export type ConnectErrorCode = "invalid_request" | "invalid_provider" | "invalid_scope" | "provider_not_found" | "unsupported_auth" | "connection_not_found" | "connection_revoked" | "secret_not_found" | "token_not_available" | "token_exchange_failed" | "refresh_unavailable" | "oauth_state_not_found" | "oauth_state_expired" | "oauth_error" | "oauth_discovery_failed" | "oauth_registration_failed" | "oauth_callback_in_progress" | "setup_invalid" | "setup_expired" | "setup_consumed" | "policy_denied" | "http_error";
+export type ConnectErrorCode = "invalid_request" | "invalid_provider" | "invalid_scope" | "provider_not_found" | "unsupported_auth" | "connection_not_found" | "connection_revoked" | "secret_not_found" | "token_not_available" | "token_exchange_failed" | "refresh_unavailable" | "rate_limited" | "dispatch_unavailable" | "oauth_state_not_found" | "oauth_state_expired" | "oauth_error" | "oauth_discovery_failed" | "oauth_registration_failed" | "oauth_callback_in_progress" | "setup_invalid" | "setup_expired" | "setup_consumed" | "policy_denied" | "http_error";
 export declare class ConnectError extends Error {
     readonly code: ConnectErrorCode;
     readonly status: number;

package/dist/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,gBAAgB,GACxB,iBAAiB,GACjB,kBAAkB,GAClB,eAAe,GACf,oBAAoB,GACpB,kBAAkB,GAClB,sBAAsB,GACtB,oBAAoB,GACpB,kBAAkB,GAClB,qBAAqB,GACrB,uBAAuB,GACvB,qBAAqB,GACrB,uBAAuB,GACvB,qBAAqB,GACrB,aAAa,GACb,wBAAwB,GACxB,2BAA2B,GAC3B,4BAA4B,GAC5B,eAAe,GACf,eAAe,GACf,gBAAgB,GAChB,eAAe,GACf,YAAY,CAAC;AAEjB,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;gBAEf,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAO;CAO1G;AAuCD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAEpE"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,gBAAgB,GACxB,iBAAiB,GACjB,kBAAkB,GAClB,eAAe,GACf,oBAAoB,GACpB,kBAAkB,GAClB,sBAAsB,GACtB,oBAAoB,GACpB,kBAAkB,GAClB,qBAAqB,GACrB,uBAAuB,GACvB,qBAAqB,GACrB,cAAc,GACd,sBAAsB,GACtB,uBAAuB,GACvB,qBAAqB,GACrB,aAAa,GACb,wBAAwB,GACxB,2BAA2B,GAC3B,4BAA4B,GAC5B,eAAe,GACf,eAAe,GACf,gBAAgB,GAChB,eAAe,GACf,YAAY,CAAC;AAEjB,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;gBAEf,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAO;CAO1G;AA0CD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAEpE"}

package/dist/errors.js

@@ -41,7 +41,10 @@ function defaultStatus(code) {
         case "http_error":
             return 502;
         case "refresh_unavailable":
+        case "dispatch_unavailable":
             return 503;
+        case "rate_limited":
+            return 429;
         default:
             return 500;
     }

package/dist/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAwBA,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,IAAI,CAAmB;IACvB,MAAM,CAAS;IACf,OAAO,CAAW;IAE3B,YAAY,IAAsB,EAAE,OAAe,EAAE,UAAkD,EAAE;QACvG,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACjC,CAAC;CACF;AAED,SAAS,aAAa,CAAC,IAAsB;IAC3C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,iBAAiB,CAAC;QACvB,KAAK,kBAAkB,CAAC;QACxB,KAAK,eAAe,CAAC;QACrB,KAAK,kBAAkB,CAAC;QACxB,KAAK,aAAa,CAAC;QACnB,KAAK,wBAAwB,CAAC;QAC9B,KAAK,2BAA2B;YAC9B,OAAO,GAAG,CAAC;QACb,KAAK,eAAe;YAClB,OAAO,GAAG,CAAC;QACb,KAAK,eAAe;YAClB,OAAO,GAAG,CAAC;QACb,KAAK,gBAAgB,CAAC;QACtB,KAAK,4BAA4B;YAC/B,OAAO,GAAG,CAAC;QACb,KAAK,sBAAsB,CAAC;QAC5B,KAAK,oBAAoB,CAAC;QAC1B,KAAK,uBAAuB,CAAC;QAC7B,KAAK,kBAAkB;YACrB,OAAO,GAAG,CAAC;QACb,KAAK,oBAAoB,CAAC;QAC1B,KAAK,qBAAqB,CAAC;QAC3B,KAAK,eAAe;YAClB,OAAO,GAAG,CAAC;QACb,KAAK,uBAAuB,CAAC;QAC7B,KAAK,qBAAqB,CAAC;QAC3B,KAAK,YAAY;YACf,OAAO,GAAG,CAAC;QACb,KAAK,qBAAqB;YACxB,OAAO,GAAG,CAAC;QACb;YACE,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,KAAK,YAAY,YAAY,CAAC;AACvC,CAAC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AA0BA,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,IAAI,CAAmB;IACvB,MAAM,CAAS;IACf,OAAO,CAAW;IAE3B,YAAY,IAAsB,EAAE,OAAe,EAAE,UAAkD,EAAE;QACvG,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACjC,CAAC;CACF;AAED,SAAS,aAAa,CAAC,IAAsB;IAC3C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,iBAAiB,CAAC;QACvB,KAAK,kBAAkB,CAAC;QACxB,KAAK,eAAe,CAAC;QACrB,KAAK,kBAAkB,CAAC;QACxB,KAAK,aAAa,CAAC;QACnB,KAAK,wBAAwB,CAAC;QAC9B,KAAK,2BAA2B;YAC9B,OAAO,GAAG,CAAC;QACb,KAAK,eAAe;YAClB,OAAO,GAAG,CAAC;QACb,KAAK,eAAe;YAClB,OAAO,GAAG,CAAC;QACb,KAAK,gBAAgB,CAAC;QACtB,KAAK,4BAA4B;YAC/B,OAAO,GAAG,CAAC;QACb,KAAK,sBAAsB,CAAC;QAC5B,KAAK,oBAAoB,CAAC;QAC1B,KAAK,uBAAuB,CAAC;QAC7B,KAAK,kBAAkB;YACrB,OAAO,GAAG,CAAC;QACb,KAAK,oBAAoB,CAAC;QAC1B,KAAK,qBAAqB,CAAC;QAC3B,KAAK,eAAe;YAClB,OAAO,GAAG,CAAC;QACb,KAAK,uBAAuB,CAAC;QAC7B,KAAK,qBAAqB,CAAC;QAC3B,KAAK,YAAY;YACf,OAAO,GAAG,CAAC;QACb,KAAK,qBAAqB,CAAC;QAC3B,KAAK,sBAAsB;YACzB,OAAO,GAAG,CAAC;QACb,KAAK,cAAc;YACjB,OAAO,GAAG,CAAC;QACb;YACE,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,KAAK,YAAY,YAAY,CAAC;AACvC,CAAC"}

package/dist/http-policy.d.ts

@@ -1,5 +1,5 @@
 import { type ConnectionRequest } from "@polpo-ai/core";
-import type { ConnectorHttpPolicy } from "./types.js";
+import type { ConnectorHttpAuthPolicy, ConnectorHttpPolicy } from "./types.js";
 export interface ResolvedConnectorHttpRequest {
     url: string;
     method: string;
@@ -11,6 +11,8 @@ export interface ResolvedConnectorHttpRequest {
     followRedirects: boolean;
 }
 export declare function normalizeConnectorHttpPolicy(input: ConnectorHttpPolicy): ConnectorHttpPolicy;
+/** Shared credential injection validation for API and remote MCP setup. */
+export declare function normalizeConnectorAuthPolicy(input: ConnectorHttpAuthPolicy): ConnectorHttpAuthPolicy;
 export declare function resolveConnectorHttpRequest(rawPolicy: ConnectorHttpPolicy, input: ConnectionRequest): ResolvedConnectorHttpRequest;
 export declare function assertConnectorRedirectAllowed(rawPolicy: ConnectorHttpPolicy, destination: string): string;
 export declare function connectorHostnameIsUnsafe(hostname: string): boolean;

package/dist/http-policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-policy.d.ts","sourceRoot":"","sources":["../src/http-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AA4BtD,MAAM,WAAW,4BAA4B;IAC3C,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,OAAO,CAAC;IACd,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,OAAO,CAAC;CAC1B;AAyHD,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,mBAAmB,GACzB,mBAAmB,CAsDrB;AAED,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,mBAAmB,EAC9B,KAAK,EAAE,iBAAiB,GACvB,4BAA4B,CA0F9B;AAED,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,mBAAmB,EAC9B,WAAW,EAAE,MAAM,GAClB,MAAM,CAoBR;AAED,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEnE"}
+{"version":3,"file":"http-policy.d.ts","sourceRoot":"","sources":["../src/http-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AA4B/E,MAAM,WAAW,4BAA4B;IAC3C,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,OAAO,CAAC;IACd,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,OAAO,CAAC;CAC1B;AAqID,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,mBAAmB,GACzB,mBAAmB,CAoCrB;AAED,2EAA2E;AAC3E,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,uBAAuB,GAAG,uBAAuB,CAwBpG;AAED,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,mBAAmB,EAC9B,KAAK,EAAE,iBAAiB,GACvB,4BAA4B,CA0F9B;AAED,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,mBAAmB,EAC9B,WAAW,EAAE,MAAM,GAClB,MAAM,CAoBR;AAED,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEnE"}

package/dist/http-policy.js

@@ -34,6 +34,8 @@ function positiveInteger(name, value, fallback, maximum) {
     return candidate;
 }
 function normalizeOrigin(value) {
+    if (typeof value !== "string")
+        denied("Connector HTTP origin must be a string");
     let url;
     try {
         url = new URL(value);
@@ -66,7 +68,22 @@ function isUnsafeHostname(rawHostname) {
         if (/^(?:fc|fd|fe[89ab])/i.test(hostname))
             return true;
         const mapped = hostname.match(/::ffff:(\d+\.\d+\.\d+\.\d+)$/i)?.[1];
-        return mapped ? isUnsafeIpv4(mapped) : false;
+        if (mapped)
+            return isUnsafeIpv4(mapped);
+        // URL normalizes mapped IPv4 literals to hexadecimal IPv6 groups.
+        let normalized;
+        try {
+            normalized = new URL(`https://[${hostname}]/`).hostname.replace(/^\[|\]$/g, "");
+        }
+        catch {
+            return true;
+        }
+        const hexMapped = normalized.match(/^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/i);
+        if (hexMapped) {
+            const high = parseInt(hexMapped[1], 16), low = parseInt(hexMapped[2], 16);
+            return isUnsafeIpv4([high >> 8, high & 255, low >> 8, low & 255].join("."));
+        }
+        return false;
     }
     return /^\d+\.\d+\.\d+\.\d+$/.test(hostname)
         ? isUnsafeIpv4(hostname)
@@ -93,6 +110,8 @@ function isUnsafeIpv4(hostname) {
         || a >= 224;
 }
 function normalizePathPattern(pattern) {
+    if (typeof pattern !== "string")
+        denied("Connector HTTP path pattern must be a string");
     const normalized = pattern.trim();
     if (!normalized.startsWith("/")
         || normalized.startsWith("//")
@@ -132,7 +151,15 @@ export function normalizeConnectorHttpPolicy(input) {
         denied("Connector HTTP policy must declare between 1 and 16 origins");
     }
     const origins = [...new Set(input.origins.map(normalizeOrigin))];
+    if (input.allowedMethods !== undefined && !Array.isArray(input.allowedMethods))
+        denied("Connector HTTP methods must be an array");
+    if (input.allowedPathPatterns !== undefined && !Array.isArray(input.allowedPathPatterns))
+        denied("Connector HTTP path patterns must be an array");
+    if (input.followRedirects !== undefined && typeof input.followRedirects !== "boolean")
+        denied("Connector redirect policy must be a boolean");
     const methods = [...new Set((input.allowedMethods ?? DEFAULT_METHODS).map((method) => {
+            if (typeof method !== "string")
+                denied("Connector HTTP method must be a string");
             const normalized = method.trim().toUpperCase();
             if (!/^[A-Z]+$/.test(normalized))
                 denied(`Connector HTTP method is invalid: ${method}`);
@@ -145,31 +172,45 @@ export function normalizeConnectorHttpPolicy(input) {
     if (patterns.length === 0 || patterns.length > 128) {
         denied("Connector HTTP policy must allow between 1 and 128 path patterns");
     }
-    if (!input.auth || !["bearer", "header", "query"].includes(input.auth.mode)) {
-        denied("Connector HTTP auth policy is invalid");
-    }
-    const authName = input.auth.name?.trim();
-    if ((input.auth.mode === "header" || input.auth.mode === "query")
-        && (!authName || !/^[A-Za-z][A-Za-z0-9_-]{0,127}$/.test(authName))) {
-        denied(`Connector HTTP ${input.auth.mode} auth requires a safe name`);
-    }
+    const auth = normalizeConnectorAuthPolicy(input.auth);
     return Object.freeze({
         origins: Object.freeze(origins),
         allowedMethods: Object.freeze(methods),
         allowedPathPatterns: Object.freeze(patterns),
-        auth: Object.freeze({
-            mode: input.auth.mode,
-            ...(authName ? { name: authName } : {}),
-        }),
+        auth,
         followRedirects: input.followRedirects === true,
         maxRequestBytes: positiveInteger("maxRequestBytes", input.maxRequestBytes, DEFAULT_MAX_REQUEST_BYTES, MAX_HTTP_BYTES),
         maxResponseBytes: positiveInteger("maxResponseBytes", input.maxResponseBytes, DEFAULT_MAX_RESPONSE_BYTES, MAX_HTTP_BYTES),
         timeoutMs: positiveInteger("timeoutMs", input.timeoutMs, DEFAULT_TIMEOUT_MS, MAX_TIMEOUT_MS),
     });
 }
+/** Shared credential injection validation for API and remote MCP setup. */
+export function normalizeConnectorAuthPolicy(input) {
+    if (!input || !["bearer", "header", "query", "none"].includes(input.mode)) {
+        denied("Connector HTTP auth policy is invalid");
+    }
+    if (input.name !== undefined && typeof input.name !== "string")
+        denied("Connector HTTP auth name must be a string");
+    const authName = input.name?.trim();
+    if ((input.mode === "header" || input.mode === "query")
+        && (!authName || !/^[A-Za-z][A-Za-z0-9_-]{0,127}$/.test(authName))) {
+        denied(`Connector HTTP ${input.mode} auth requires a safe name`);
+    }
+    if ((input.mode === "none" || input.mode === "bearer") && authName) {
+        denied(`Connector HTTP ${input.mode} auth cannot declare a name`);
+    }
+    if (input.mode === "header" && authName) {
+        const name = authName.toLowerCase();
+        if ((FORBIDDEN_REQUEST_HEADERS.has(name) && name !== "authorization")
+            || name.startsWith("proxy-") || name.startsWith("sec-")) {
+            denied("Connector HTTP authentication cannot replace transport or cookie headers");
+        }
+    }
+    return Object.freeze({ mode: input.mode, ...(authName ? { name: authName } : {}) });
+}
 export function resolveConnectorHttpRequest(rawPolicy, input) {
     const policy = normalizeConnectorHttpPolicy(rawPolicy);
-    const method = input.method?.trim().toUpperCase();
+    const method = typeof input.method === "string" ? input.method.trim().toUpperCase() : undefined;
     if (!method || !/^[A-Z]+$/.test(method) || !policy.allowedMethods.includes(method)) {
         denied(`Connection request method is not allowed: ${input.method}`);
     }