@polpo-ai/connect 0.15.144 → 0.16.0

package/dist/capability-resolver.js

@@ -1,5 +1,38 @@
-import { ConnectionSelectionError, } from "@polpo-ai/core";
+import { ConnectionSelectionError, createToolInvocationContext, assertAgentIdentity, } from "@polpo-ai/core";
 import { hasScopes } from "./scopes.js";
+const capabilitySelections = new WeakMap();
+const capabilityAuthorizations = new WeakMap();
+/** Host-only delivery guard. Rechecks the acquired account, grant, identity
+ * and credential installation without switching selection or rematerializing
+ * secrets. Never serialize this guard into a tool or sandbox capability. */
+export async function assertConnectionCapabilityAuthorized(capability) {
+    const authorize = capabilityAuthorizations.get(capability);
+    if (!authorize)
+        throw new ConnectionSelectionError("connection_resolver_unavailable", "Connection capability has no host authorization guard");
+    await authorize();
+}
+export function getConnectionCapabilitySelection(capability) {
+    return capabilitySelections.get(capability);
+}
+/** Host-only snapshot for durable delegation. Never expose this to tools or
+ * copy it into a sandbox: it includes credential installation references. */
+export function snapshotConnectionCapabilitySelection(connection) {
+    const binding = connection.binding;
+    return Object.freeze({ connectionId: connection.id, providerId: connection.providerId,
+        audience: effectiveConnectionAudience(connection), secretRef: connection.secretRef,
+        credentialVersion: connection.credentialVersion,
+        bindingKey: JSON.stringify([binding?.principal?.type, binding?.principal?.id, binding?.principal?.namespace,
+            binding?.tenant?.namespace, binding?.tenant?.id, binding?.resource?.namespace, binding?.resource?.type,
+            binding?.resource?.id, binding?.scopeEpoch, connection.owner?.type, connection.owner?.id,
+            connection.owner?.type === "external_user" ? connection.owner.namespace : undefined]),
+    });
+}
+export function matchesConnectionCapabilitySelection(connection, expected) {
+    const current = snapshotConnectionCapabilitySelection(connection);
+    return current.connectionId === expected.connectionId && current.providerId === expected.providerId
+        && current.audience === expected.audience && current.secretRef === expected.secretRef
+        && current.credentialVersion === expected.credentialVersion && current.bindingKey === expected.bindingKey;
+}
 function bindingPartMatches(binding, selector) {
     if (!binding)
         return true;
@@ -9,14 +42,43 @@ function bindingPartMatches(binding, selector) {
     const selectorRecord = selector;
     return Object.keys(bindingRecord).every((key) => bindingRecord[key] === selectorRecord[key]);
 }
-function bindingMatches(binding, selector) {
-    if (!binding)
-        return false;
-    return bindingPartMatches(binding.principal, selector.principal)
+/** Legacy installations are shared; ownership is never inferred from binding fields. */
+export function effectiveConnectionAudience(connection) {
+    return connection.audience ?? "shared";
+}
+/** Grant bindings are additional constraints, not standalone account identities. */
+export function matchesConnectionBindingAttributes(binding, selector) {
+    return !binding || (bindingPartMatches(binding.principal, selector.principal)
         && bindingPartMatches(binding.tenant, selector.tenant)
         && bindingPartMatches(binding.resource, selector.resource)
-        && (binding.scopeEpoch === undefined
-            || binding.scopeEpoch === selector.scopeEpoch);
+        && (binding.scopeEpoch === undefined || binding.scopeEpoch === selector.scopeEpoch));
+}
+/** Match account ownership and binding against a host-created selector. No fallback is performed. */
+export function matchesConnectionBinding(connection, selector) {
+    const binding = connection.binding;
+    // Pre-audience records retain their historical classification. A missing
+    // user match must never silently become project-wide access.
+    const audience = effectiveConnectionAudience(connection);
+    if (selector.audience !== undefined && audience !== selector.audience)
+        return false;
+    if (audience === "personal") {
+        if (!connection.owner || connection.owner.type !== "user"
+            || selector.principal?.type !== "user" || selector.principal.id !== connection.owner.id)
+            return false;
+    }
+    if (audience === "end_user") {
+        const owner = connection.owner;
+        if (owner?.type !== "external_user" || typeof owner.namespace !== "string" || !owner.namespace.trim()
+            || !binding?.principal || binding.principal.type !== "external_user" || binding.principal.id !== owner.id
+            || selector.principal?.type !== "external_user" || selector.principal.id !== owner.id
+            || selector.principal.namespace !== owner.namespace)
+            return false;
+    }
+    if (!binding)
+        return selector.audience === "shared" || selector.audience === "personal";
+    if (Object.keys(binding).length === 0)
+        return false;
+    return matchesConnectionBindingAttributes(binding, selector);
 }
 function requiredText(name, value) {
     if (typeof value !== "string" || !value.trim()) {
@@ -32,11 +94,14 @@ function normalizeSelector(selector) {
             && Object.getPrototypeOf(selector) !== null)) {
         throw new ConnectionSelectionError("connection_slot_invalid", "Trusted Connection selector must be an object");
     }
-    const unsupported = Object.keys(selector).filter((key) => !["projectId", "orgId", "principal", "tenant", "resource", "scopeEpoch"].includes(key));
+    const unsupported = Object.keys(selector).filter((key) => !["projectId", "orgId", "principal", "tenant", "resource", "scopeEpoch", "audience"].includes(key));
     if (unsupported.length > 0) {
         throw new ConnectionSelectionError("connection_slot_invalid", `Trusted Connection selector contains unsupported fields: ${unsupported.join(", ")}`);
     }
-    const part = (name, value, fields) => {
+    if (selector.audience !== undefined && !["personal", "shared", "end_user"].includes(selector.audience)) {
+        throw new ConnectionSelectionError("connection_slot_invalid", "Trusted Connection selector audience is invalid");
+    }
+    const part = (name, value, fields, optionalFields = []) => {
         if (value === undefined)
             return undefined;
         if (!value
@@ -46,11 +111,11 @@ function normalizeSelector(selector) {
                 && Object.getPrototypeOf(value) !== null)) {
             throw new ConnectionSelectionError("connection_slot_invalid", `Trusted Connection selector ${name} is invalid`);
         }
-        const unsupportedPart = Object.keys(value).filter((key) => !fields.includes(key));
+        const unsupportedPart = Object.keys(value).filter((key) => !fields.includes(key) && !optionalFields.includes(key));
         if (unsupportedPart.length > 0) {
             throw new ConnectionSelectionError("connection_slot_invalid", `Trusted Connection selector ${name} contains unsupported fields: ${unsupportedPart.join(", ")}`);
         }
-        const normalized = Object.fromEntries(fields.map((field) => [
+        const normalized = Object.fromEntries([...fields, ...optionalFields.filter(field => value[field] !== undefined)].map((field) => [
             field,
             requiredText(`${name}.${String(field)}`, value[String(field)]),
         ]));
@@ -59,8 +124,9 @@ function normalizeSelector(selector) {
     return Object.freeze({
         projectId: requiredText("projectId", selector.projectId),
         ...(selector.orgId === undefined ? {} : { orgId: requiredText("orgId", selector.orgId) }),
+        ...(selector.audience === undefined ? {} : { audience: selector.audience }),
         ...(selector.principal === undefined ? {} : {
-            principal: part("principal", selector.principal, ["type", "id"]),
+            principal: part("principal", selector.principal, ["type", "id"], ["namespace"]),
         }),
         ...(selector.tenant === undefined ? {} : {
             tenant: part("tenant", selector.tenant, ["namespace", "id"]),
@@ -101,12 +167,35 @@ function credentialCapability(credential) {
         getKey: () => credential.kind === "api_key" ? credential.value : undefined,
     };
 }
-export function createConnectionCapabilityResolver(options) {
+export function createConnectionAccessResolver(options) {
     return {
-        async resolve(input) {
+        async acquire(original) {
+            let input = original;
             try {
+                input = Object.freeze({ ...original,
+                    spec: Object.freeze({ ...original.spec, scopes: Object.freeze([...original.spec.scopes]) }),
+                    invocation: createToolInvocationContext(original.invocation),
+                });
+                const assertCurrentAgent = async () => {
+                    if (!options.getAgentSnapshot)
+                        return;
+                    const expected = input.invocation.agent;
+                    if (!expected)
+                        throw new ConnectionSelectionError("connection_scope_denied", "An authoritative agent identity is required");
+                    const current = await options.getAgentSnapshot(expected.name);
+                    try {
+                        assertAgentIdentity(expected, current);
+                    }
+                    catch {
+                        throw new ConnectionSelectionError("connection_scope_denied", "The execution agent no longer exists or has been replaced");
+                    }
+                };
+                if (input.signal?.aborted)
+                    throw new ConnectionSelectionError("connection_scope_denied", "Connection invocation was cancelled", { slot: input.slot });
+                await assertCurrentAgent();
                 const selector = normalizeSelector(await options.resolveSelector(input));
-                const listed = await options.store.listConnections({
+                const resumed = options.selection ? await options.store.getConnection(options.selection.connectionId) : undefined;
+                const listed = options.selection ? (resumed ? [resumed] : []) : await options.store.listConnections({
                     ...(options.isConnectionVisible ? {} : { projectId: selector.projectId }),
                     ...(selector.orgId ? { orgId: selector.orgId } : {}),
                     ...(input.spec.provider ? { providerId: input.spec.provider } : {}),
@@ -114,13 +203,15 @@ export function createConnectionCapabilityResolver(options) {
                 });
                 const candidates = [];
                 for (const connection of listed) {
-                    const visible = connection.projectId === selector.projectId
-                        || await options.isConnectionVisible?.(connection, selector) === true;
+                    const visible = options.isConnectionVisible
+                        ? await options.isConnectionVisible(connection, selector)
+                        : connection.projectId === selector.projectId;
                     if (connection.status === "active"
                         && visible
                         && (selector.orgId === undefined || connection.orgId === selector.orgId)
                         && (input.spec.provider === undefined || connection.providerId === input.spec.provider)
-                        && bindingMatches(connection.binding, selector)) {
+                        && matchesConnectionBinding(connection, selector)
+                        && (!options.selection || matchesConnectionCapabilitySelection(connection, options.selection))) {
                         candidates.push(connection);
                     }
                 }
@@ -128,6 +219,7 @@ export function createConnectionCapabilityResolver(options) {
                     throw new ConnectionSelectionError("connection_not_found_for_scope", `No active Connection matches slot "${input.slot}"`, { slot: input.slot });
                 }
                 const authorized = [];
+                const connectionSlot = Object.freeze({ name: input.slot, mode: input.spec.mode ?? "legacy_credentials" });
                 for (const connection of candidates) {
                     if (!hasScopes(connection.grantedScopes, input.spec.scopes))
                         continue;
@@ -138,6 +230,7 @@ export function createConnectionCapabilityResolver(options) {
                             : {}),
                         scopes: [...input.spec.scopes],
                         actionId: input.toolName,
+                        connectionSlot,
                     }) ?? true;
                     if (allowed)
                         authorized.push(connection);
@@ -149,27 +242,100 @@ export function createConnectionCapabilityResolver(options) {
                     throw new ConnectionSelectionError("connection_selection_ambiguous", `More than one Connection matches slot "${input.slot}"`, { slot: input.slot });
                 }
                 const selected = authorized[0];
+                await assertCurrentAgent();
+                let disposed = false;
+                const identity = snapshotConnectionCapabilitySelection(selected);
+                const capabilityScopes = input.spec.scopes;
+                return {
+                    input, connection: selected, selection: identity,
+                    dispose: () => { disposed = true; },
+                    current: async () => {
+                        let current;
+                        try {
+                            if (disposed || input.signal?.aborted)
+                                throw new ConnectionSelectionError("connection_scope_denied", "Connection capability is no longer active", { slot: input.slot });
+                            const found = await options.store.getConnection(identity.connectionId);
+                            const visible = found && (options.isConnectionVisible
+                                ? await options.isConnectionVisible(found, selector)
+                                : found.projectId === selector.projectId);
+                            if (!found || found.status !== "active" || !visible
+                                || !matchesConnectionCapabilitySelection(found, identity)
+                                || (selector.orgId !== undefined && found.orgId !== selector.orgId)
+                                || !matchesConnectionBinding(found, selector)) {
+                                throw new ConnectionSelectionError("connection_not_found_for_scope", "Selected Connection is no longer available", { slot: input.slot });
+                            }
+                            const allowed = hasScopes(found.grantedScopes, capabilityScopes) && (await options.policy?.canUseConnection({
+                                connection: found,
+                                ...(input.invocation.user ? { subject: { type: "user", id: input.invocation.user } } : {}),
+                                scopes: [...capabilityScopes], actionId: input.toolName, connectionSlot,
+                            }) ?? true);
+                            if (!allowed || disposed || input.signal?.aborted)
+                                throw new ConnectionSelectionError("connection_scope_denied", "Connection permission is no longer valid", { slot: input.slot });
+                            await assertCurrentAgent();
+                            if (disposed || input.signal?.aborted)
+                                throw new ConnectionSelectionError("connection_scope_denied", "Connection capability is no longer active", { slot: input.slot });
+                            current = found;
+                        }
+                        catch (error) {
+                            if (error instanceof ConnectionSelectionError)
+                                throw error;
+                            throw new ConnectionSelectionError("connection_resolver_unavailable", "Connection authorization could not be rechecked", { slot: input.slot, cause: error });
+                        }
+                        return current;
+                    },
+                };
+            }
+            catch (error) {
+                if (error instanceof ConnectionSelectionError)
+                    throw error;
+                throw new ConnectionSelectionError("connection_resolver_unavailable", `Trusted Connection resolution failed for slot "${input.slot}"`, { slot: input.slot, cause: error });
+            }
+        },
+    };
+}
+export function createConnectionCapabilityResolver(options) {
+    const accessResolver = createConnectionAccessResolver(options);
+    return {
+        async resolve(original) {
+            let access;
+            try {
+                access = await accessResolver.acquire(original);
+                const input = access.input;
+                const selected = access.connection;
                 const mode = input.spec.mode ?? "legacy_credentials";
                 if (mode === "gateway") {
-                    if (!options.request) {
+                    if (!options.request)
                         throw new ConnectionSelectionError("connection_resolver_unavailable", `Connection gateway is unavailable for slot "${input.slot}"`, { slot: input.slot });
-                    }
-                    return {
-                        mode,
-                        providerId: selected.providerId,
-                        scopes: Object.freeze([...selected.grantedScopes]),
-                        request: (request) => options.request(selected, input, request),
+                    const acquired = access;
+                    const capability = {
+                        mode, providerId: selected.providerId, scopes: input.spec.scopes,
+                        dispose: () => acquired.dispose(),
+                        request: async (request) => {
+                            const current = await acquired.current();
+                            return options.request(current, input, request, async () => { await acquired.current(); });
+                        },
                     };
+                    capabilitySelections.set(capability, acquired.selection);
+                    capabilityAuthorizations.set(capability, async () => { await acquired.current(); });
+                    return capability;
                 }
-                if (!options.materialize) {
+                if (!options.materialize)
                     throw new ConnectionSelectionError("connection_resolver_unavailable", `Legacy credential materialization is unavailable for slot "${input.slot}"`, { slot: input.slot });
-                }
-                return credentialCapability(await options.materialize(selected, input));
+                await access.current();
+                const credential = await options.materialize(selected, input);
+                await access.current();
+                const capability = credentialCapability(credential);
+                const acquired = access;
+                capability.dispose = () => acquired.dispose();
+                capabilitySelections.set(capability, acquired.selection);
+                capabilityAuthorizations.set(capability, async () => { await acquired.current(); });
+                return capability;
             }
             catch (error) {
+                access?.dispose();
                 if (error instanceof ConnectionSelectionError)
                     throw error;
-                throw new ConnectionSelectionError("connection_resolver_unavailable", `Trusted Connection resolution failed for slot "${input.slot}"`, { slot: input.slot, cause: error });
+                throw new ConnectionSelectionError("connection_resolver_unavailable", `Trusted Connection resolution failed for slot "${original.slot}"`, { slot: original.slot, cause: error });
             }
         },
     };
@@ -186,9 +352,9 @@ export function createApplicationCapabilityResolver(options) {
                 ...options,
                 resolveSelector: () => options.resolveSelector(input),
                 request: options.request
-                    ? async (connection, resolveInput, request) => {
+                    ? async (connection, resolveInput, request, reauthorize) => {
                         assertApplicationOperationAllowed(input.spec.allowedOperations, request, input.spec.scopes);
-                        return options.request(connection, resolveInput, request);
+                        return options.request(connection, resolveInput, request, reauthorize);
                     }
                     : undefined,
             });

package/dist/capability-resolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"capability-resolver.js","sourceRoot":"","sources":["../src/capability-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,GASzB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAwCxC,SAAS,kBAAkB,CACzB,OAAsB,EACtB,QAAuB;IAEvB,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,MAAM,aAAa,GAAG,OAAkC,CAAC;IACzD,MAAM,cAAc,GAAG,QAAmC,CAAC;IAC3D,OAAO,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,KAAK,CACrC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,cAAc,CAAC,GAAG,CAAC,CACpD,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,OAAgD,EAChD,QAAqC;IAErC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,OAAO,kBAAkB,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC;WAC3D,kBAAkB,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;WACnD,kBAAkB,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC;WACvD,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS;eAC/B,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,KAAc;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,wBAAwB,CAChC,yBAAyB,EACzB,+BAA+B,IAAI,cAAc,CAClD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAqC;IAC9D,IACE,CAAC,QAAQ;WACN,OAAO,QAAQ,KAAK,QAAQ;WAC5B,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;WACvB,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,SAAS;eACnD,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,EAC9C,CAAC;QACD,MAAM,IAAI,wBAAwB,CAChC,yBAAyB,EACzB,+CAA+C,CAChD,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CACvD,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1F,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,wBAAwB,CAChC,yBAAyB,EACzB,4DAA4D,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,CACX,IAAY,EACZ,KAAoB,EACpB,MAA4B,EACb,EAAE;QACjB,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,IACE,CAAC,KAAK;eACH,OAAO,KAAK,KAAK,QAAQ;eACzB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;eACpB,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS;mBAChD,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,EAC3C,CAAC;YACD,MAAM,IAAI,wBAAwB,CAChC,yBAAyB,EACzB,+BAA+B,IAAI,aAAa,CACjD,CAAC;QACJ,CAAC;QACD,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CACxD,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAc,CAAC,CAAC,CAAC;QACpC,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,wBAAwB,CAChC,yBAAyB,EACzB,+BAA+B,IAAI,iCAAiC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjG,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CACnC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YACpB,KAAK;YACL,YAAY,CACV,GAAG,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,EACzB,KAAiC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAClD;SACF,CAAC,CACH,CAAC;QACF,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,CAAM,CAAC;IACxC,CAAC,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,SAAS,EAAE,YAAY,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC;QACxD,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1C,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;SACjE,CAAC;QACF,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACvC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;SAC7D,CAAC;QACF,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACzC,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;SAC3E,CAAC;QACF,GAAG,CAAC,QAAQ,CAAC,UAAU,KAAK,SAAS;YACnC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC,YAAY,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;KACrE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,oBAAoB,CAC3B,UAAwC;IAExC,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACrC,MAAM,YAAY,GAAG,QAAQ,IAAI,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ;QACtE,CAAC,CAAC,QAAQ,CAAC,UAAU;QACrB,CAAC,CAAC,eAAe,CAAC;IACpB,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,KAAK,SAAS;QACzC,CAAC,CAAC,UAAU,CAAC,KAAK;QAClB,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,KAAK,KAAK;YACzD,CAAC,CAAC,UAAU,CAAC,WAAW;YACxB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,KAAK,KAAK;QACzE,CAAC,CAAC,UAAU,CAAC,SAAS,IAAI,QAAQ;QAClC,CAAC,CAAC,QAAQ,CAAC;IACb,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK;YACrB,CAAC,CAAC;gBACE,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC,WAAW,EAAE,KAAK,eAAe;oBAC5D,CAAC,CAAC,GAAG,SAAS,IAAI,KAAK,EAAE;oBACzB,CAAC,CAAC,KAAK;aACV;YACH,CAAC,CAAC,SAAS;QACb,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK;QACrB,MAAM,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;KAC3E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,OAA4C;IAE5C,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;gBACzE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC;oBACjD,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;oBACzE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnE,MAAM,EAAE,QAAQ;iBACjB,CAAC,CAAC;gBACH,MAAM,UAAU,GAAuB,EAAE,CAAC;gBAC1C,KAAK,MAAM,UAAU,IAAI,MAAM,EAAE,CAAC;oBAChC,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;2BACtD,MAAM,OAAO,CAAC,mBAAmB,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,KAAK,IAAI,CAAC;oBACxE,IACE,UAAU,CAAC,MAAM,KAAK,QAAQ;2BAC3B,OAAO;2BACP,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,IAAI,UAAU,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,CAAC;2BACrE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,UAAU,CAAC,UAAU,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;2BACpF,cAAc,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,EAC/C,CAAC;wBACD,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBAC9B,CAAC;gBACH,CAAC;gBAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC5B,MAAM,IAAI,wBAAwB,CAChC,gCAAgC,EAChC,sCAAsC,KAAK,CAAC,IAAI,GAAG,EACnD,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CACrB,CAAC;gBACJ,CAAC;gBAED,MAAM,UAAU,GAAuB,EAAE,CAAC;gBAC1C,KAAK,MAAM,UAAU,IAAI,UAAU,EAAE,CAAC;oBACpC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;wBAAE,SAAS;oBACtE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC;wBACrD,UAAU;wBACV,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI;4BACvB,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE;4BACnE,CAAC,CAAC,EAAE,CAAC;wBACP,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;wBAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;qBACzB,CAAC,IAAI,IAAI,CAAC;oBACX,IAAI,OAAO;wBAAE,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC3C,CAAC;gBACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC5B,MAAM,IAAI,wBAAwB,CAChC,yBAAyB,EACzB,yCAAyC,KAAK,CAAC,IAAI,GAAG,EACtD,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CACrB,CAAC;gBACJ,CAAC;gBACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC1B,MAAM,IAAI,wBAAwB,CAChC,gCAAgC,EAChC,0CAA0C,KAAK,CAAC,IAAI,GAAG,EACvD,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CACrB,CAAC;gBACJ,CAAC;gBAED,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;gBAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,oBAAoB,CAAC;gBACrD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;oBACvB,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;wBACrB,MAAM,IAAI,wBAAwB,CAChC,iCAAiC,EACjC,+CAA+C,KAAK,CAAC,IAAI,GAAG,EAC5D,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CACrB,CAAC;oBACJ,CAAC;oBACD,OAAO;wBACL,IAAI;wBACJ,UAAU,EAAE,QAAQ,CAAC,UAAU;wBAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC;wBAClD,OAAO,EAAE,CAAc,OAA0B,EAAE,EAAE,CACnD,OAAO,CAAC,OAAQ,CAAI,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC;qBAChD,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;oBACzB,MAAM,IAAI,wBAAwB,CAChC,iCAAiC,EACjC,8DAA8D,KAAK,CAAC,IAAI,GAAG,EAC3E,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CACrB,CAAC;gBACJ,CAAC;gBACD,OAAO,oBAAoB,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;YAC1E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,wBAAwB;oBAAE,MAAM,KAAK,CAAC;gBAC3D,MAAM,IAAI,wBAAwB,CAChC,iCAAiC,EACjC,kDAAkD,KAAK,CAAC,IAAI,GAAG,EAC/D,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CACnC,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,OAA6C;IAE7C,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YAC9C,IAAI,CAAC,EAAE,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5F,MAAM,IAAI,wBAAwB,CAChC,yBAAyB,EACzB,8DAA8D,CAC/D,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,kCAAkC,CAAC;gBAClD,GAAG,OAAO;gBACV,eAAe,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC;gBACrD,OAAO,EAAE,OAAO,CAAC,OAAO;oBACtB,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE;wBAC1C,iCAAiC,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;wBAC5F,OAAO,OAAO,CAAC,OAAQ,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;oBAC7D,CAAC;oBACH,CAAC,CAAC,SAAS;aACd,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC,OAAO,CAAC;gBACtB,IAAI,EAAE,EAAE;gBACR,IAAI,EAAE;oBACJ,QAAQ;oBACR,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM;oBACzB,WAAW,EAAE,0BAA0B,EAAE,EAAE;oBAC3C,IAAI,EAAE,SAAS;iBAChB;gBACD,QAAQ,EAAE,eAAe,EAAE,EAAE;gBAC7B,UAAU,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,EAAE;gBAC7C,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,iCAAiC,CACxC,QAA0D,EAC1D,OAA0B,EAC1B,gBAAmC;IAEnC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;QACvC,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5G,IAAI,MAAM,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAC/D,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAClH,OAAO,CAAC,MAAM,CAAC,cAAc,IAAI,SAAS,CAAC,gBAAgB,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,wBAAwB,CAChC,6BAA6B,EAC7B,oDAAoD,MAAM,IAAI,OAAO,CAAC,IAAI,EAAE,CAC7E,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"capability-resolver.js","sourceRoot":"","sources":["../src/capability-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,2BAA2B,EAC3B,mBAAmB,GAUpB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAgDxC,MAAM,oBAAoB,GAAG,IAAI,OAAO,EAA+D,CAAC;AACxG,MAAM,wBAAwB,GAAG,IAAI,OAAO,EAAqD,CAAC;AAElG;;4EAE4E;AAC5E,MAAM,CAAC,KAAK,UAAU,oCAAoC,CAAC,UAAwC;IACjG,MAAM,SAAS,GAAG,wBAAwB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC3D,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,wBAAwB,CAAC,iCAAiC,EAAE,uDAAuD,CAAC,CAAC;IAC/I,MAAM,SAAS,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,UAAwC;IACvF,OAAO,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC9C,CAAC;AAED;6EAC6E;AAC7E,MAAM,UAAU,qCAAqC,CAAC,UAA4B;IAChF,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IACnC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU;QACnF,QAAQ,EAAE,2BAA2B,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS;QAClF,iBAAiB,EAAE,UAAU,CAAC,iBAAiB;QAC/C,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;YACzG,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI;YACtG,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,EAAE;YACxF,UAAU,CAAC,KAAK,EAAE,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;KACxF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,UAA4B,EAAE,QAAuC;IACxH,MAAM,OAAO,GAAG,qCAAqC,CAAC,UAAU,CAAC,CAAC;IAClE,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;WAC9F,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,IAAI,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;WAClF,OAAO,CAAC,iBAAiB,KAAK,QAAQ,CAAC,iBAAiB,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,CAAC;AAC9G,CAAC;AAWD,SAAS,kBAAkB,CACzB,OAAsB,EACtB,QAAuB;IAEvB,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,MAAM,aAAa,GAAG,OAAkC,CAAC;IACzD,MAAM,cAAc,GAAG,QAAmC,CAAC;IAC3D,OAAO,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,KAAK,CACrC,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,cAAc,CAAC,GAAG,CAAC,CACpD,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,2BAA2B,CAAC,UAA4B;IACtE,OAAO,UAAU,CAAC,QAAQ,IAAI,QAAQ,CAAC;AACzC,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,kCAAkC,CAChD,OAAgD,EAChD,QAAqC;IAErC,OAAO,CAAC,OAAO,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC;WACxE,kBAAkB,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;WACnD,kBAAkB,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC;WACvD,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,wBAAwB,CACtC,UAA4B,EAC5B,QAAqC;IAErC,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IACnC,yEAAyE;IACzE,6DAA6D;IAC7D,MAAM,QAAQ,GAAG,2BAA2B,CAAC,UAAU,CAAC,CAAC;IACzD,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,QAAQ,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IACpF,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC5B,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM;eACpD,QAAQ,CAAC,SAAS,EAAE,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,UAAU,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;IAC1G,CAAC;IACD,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC/B,IAAI,KAAK,EAAE,IAAI,KAAK,eAAe,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE;eAChG,CAAC,OAAO,EAAE,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,KAAK,eAAe,IAAI,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE;eACtG,QAAQ,CAAC,SAAS,EAAE,IAAI,KAAK,eAAe,IAAI,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE;eAClF,QAAQ,CAAC,SAAS,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,OAAO;QAAE,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,UAAU,CAAC;IACxF,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,OAAO,kCAAkC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,KAAc;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,wBAAwB,CAChC,yBAAyB,EACzB,+BAA+B,IAAI,cAAc,CAClD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAqC;IAC9D,IACE,CAAC,QAAQ;WACN,OAAO,QAAQ,KAAK,QAAQ;WAC5B,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;WACvB,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,SAAS;eACnD,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,EAC9C,CAAC;QACD,MAAM,IAAI,wBAAwB,CAChC,yBAAyB,EACzB,+CAA+C,CAChD,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CACvD,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IACtG,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,wBAAwB,CAChC,yBAAyB,EACzB,4DAA4D,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvG,MAAM,IAAI,wBAAwB,CAAC,yBAAyB,EAAE,iDAAiD,CAAC,CAAC;IACnH,CAAC;IACD,MAAM,IAAI,GAAG,CACX,IAAY,EACZ,KAAoB,EACpB,MAA4B,EAC5B,iBAAuC,EAAE,EAC1B,EAAE;QACjB,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,IACE,CAAC,KAAK;eACH,OAAO,KAAK,KAAK,QAAQ;eACzB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;eACpB,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS;mBAChD,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,EAC3C,CAAC;YACD,MAAM,IAAI,wBAAwB,CAChC,yBAAyB,EACzB,+BAA+B,IAAI,aAAa,CACjD,CAAC;QACJ,CAAC;QACD,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CACxD,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAc,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAc,CAAC,CAAC,CAAC;QAChF,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,wBAAwB,CAChC,yBAAyB,EACzB,+BAA+B,IAAI,iCAAiC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjG,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CACnC,CAAC,GAAG,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YACxF,KAAK;YACL,YAAY,CACV,GAAG,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,EACzB,KAAiC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAClD;SACF,CAAC,CACH,CAAC;QACF,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,CAAM,CAAC;IACxC,CAAC,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,SAAS,EAAE,YAAY,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC;QACxD,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC3E,GAAG,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1C,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC;SAChF,CAAC;QACF,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACvC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;SAC7D,CAAC;QACF,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACzC,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;SAC3E,CAAC;QACF,GAAG,CAAC,QAAQ,CAAC,UAAU,KAAK,SAAS;YACnC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC,YAAY,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;KACrE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,oBAAoB,CAC3B,UAAwC;IAExC,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACrC,MAAM,YAAY,GAAG,QAAQ,IAAI,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ;QACtE,CAAC,CAAC,QAAQ,CAAC,UAAU;QACrB,CAAC,CAAC,eAAe,CAAC;IACpB,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,KAAK,SAAS;QACzC,CAAC,CAAC,UAAU,CAAC,KAAK;QAClB,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,KAAK,KAAK;YACzD,CAAC,CAAC,UAAU,CAAC,WAAW;YACxB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,KAAK,KAAK;QACzE,CAAC,CAAC,UAAU,CAAC,SAAS,IAAI,QAAQ;QAClC,CAAC,CAAC,QAAQ,CAAC;IACb,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK;YACrB,CAAC,CAAC;gBACE,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC,WAAW,EAAE,KAAK,eAAe;oBAC5D,CAAC,CAAC,GAAG,SAAS,IAAI,KAAK,EAAE;oBACzB,CAAC,CAAC,KAAK;aACV;YACH,CAAC,CAAC,SAAS;QACb,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK;QACrB,MAAM,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;KAC3E,CAAC;AACJ,CAAC;AAeD,MAAM,UAAU,8BAA8B,CAAC,OAAwC;IAGrF,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,QAAQ;YACpB,IAAI,KAAK,GAAG,QAAQ,CAAC;YACrB,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ;oBACjC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;oBAC3F,UAAU,EAAE,2BAA2B,CAAC,QAAQ,CAAC,UAAU,CAAC;iBAC7D,CAAC,CAAC;gBACH,MAAM,kBAAkB,GAAG,KAAK,IAAI,EAAE;oBACpC,IAAI,CAAC,OAAO,CAAC,gBAAgB;wBAAE,OAAO;oBACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;oBACxC,IAAI,CAAC,QAAQ;wBAAE,MAAM,IAAI,wBAAwB,CAAC,yBAAyB,EAAE,6CAA6C,CAAC,CAAC;oBAC5H,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;oBAC9D,IAAI,CAAC;wBAAC,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;oBAAC,CAAC;oBAC/C,MAAM,CAAC;wBAAC,MAAM,IAAI,wBAAwB,CAAC,yBAAyB,EAAE,2DAA2D,CAAC,CAAC;oBAAC,CAAC;gBACvI,CAAC,CAAC;gBACF,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;oBAAE,MAAM,IAAI,wBAAwB,CAC3D,yBAAyB,EAAE,qCAAqC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC1F,MAAM,kBAAkB,EAAE,CAAC;gBAC3B,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;gBACzE,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAClH,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC;oBAClG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;oBACzE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnE,MAAM,EAAE,QAAQ;iBACjB,CAAC,CAAC;gBACH,MAAM,UAAU,GAAuB,EAAE,CAAC;gBAC1C,KAAK,MAAM,UAAU,IAAI,MAAM,EAAE,CAAC;oBAChC,MAAM,OAAO,GAAG,OAAO,CAAC,mBAAmB;wBACzC,CAAC,CAAC,MAAM,OAAO,CAAC,mBAAmB,CAAC,UAAU,EAAE,QAAQ,CAAC;wBACzD,CAAC,CAAC,UAAU,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,CAAC;oBAChD,IACE,UAAU,CAAC,MAAM,KAAK,QAAQ;2BAC3B,OAAO;2BACP,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,IAAI,UAAU,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,CAAC;2BACrE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,UAAU,CAAC,UAAU,KAAK,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;2BACpF,wBAAwB,CAAC,UAAU,EAAE,QAAQ,CAAC;2BAC9C,CAAC,CAAC,OAAO,CAAC,SAAS,IAAI,oCAAoC,CAAC,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,EAC9F,CAAC;wBACD,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;oBAC9B,CAAC;gBACH,CAAC;gBAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC5B,MAAM,IAAI,wBAAwB,CAChC,gCAAgC,EAChC,sCAAsC,KAAK,CAAC,IAAI,GAAG,EACnD,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CACrB,CAAC;gBACJ,CAAC;gBAED,MAAM,UAAU,GAAuB,EAAE,CAAC;gBAC1C,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,oBAAoB,EAAE,CAAC,CAAC;gBAC1G,KAAK,MAAM,UAAU,IAAI,UAAU,EAAE,CAAC;oBACpC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;wBAAE,SAAS;oBACtE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC;wBACrD,UAAU;wBACV,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI;4BACvB,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE;4BACnE,CAAC,CAAC,EAAE,CAAC;wBACP,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;wBAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,cAAc;qBACf,CAAC,IAAI,IAAI,CAAC;oBACX,IAAI,OAAO;wBAAE,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC3C,CAAC;gBACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC5B,MAAM,IAAI,wBAAwB,CAChC,yBAAyB,EACzB,yCAAyC,KAAK,CAAC,IAAI,GAAG,EACtD,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CACrB,CAAC;gBACJ,CAAC;gBACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC1B,MAAM,IAAI,wBAAwB,CAChC,gCAAgC,EAChC,0CAA0C,KAAK,CAAC,IAAI,GAAG,EACvD,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CACrB,CAAC;gBACJ,CAAC;gBAED,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;gBAC/B,MAAM,kBAAkB,EAAE,CAAC;gBAC3B,IAAI,QAAQ,GAAG,KAAK,CAAC;gBACrB,MAAM,QAAQ,GAAG,qCAAqC,CAAC,QAAQ,CAAC,CAAC;gBACjE,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC3C,OAAO;oBACL,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ;oBAChD,OAAO,EAAE,GAAG,EAAE,GAAG,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC;oBACnC,OAAO,EAAE,KAAK,IAAI,EAAE;wBAClB,IAAI,OAAyB,CAAC;wBAC9B,IAAI,CAAC;4BACH,IAAI,QAAQ,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;gCAAE,MAAM,IAAI,wBAAwB,CACvE,yBAAyB,EAAE,2CAA2C,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAC7F,CAAC;4BACF,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;4BACvE,MAAM,OAAO,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,mBAAmB;gCACnD,CAAC,CAAC,MAAM,OAAO,CAAC,mBAAmB,CAAC,KAAK,EAAE,QAAQ,CAAC;gCACpD,CAAC,CAAC,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC;4BAC5C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,OAAO;mCAC9C,CAAC,oCAAoC,CAAC,KAAK,EAAE,QAAQ,CAAC;mCACtD,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,CAAC;mCAChE,CAAC,wBAAwB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;gCAChD,MAAM,IAAI,wBAAwB,CAAC,gCAAgC,EAAE,4CAA4C,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;4BAC3I,CAAC;4BACD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,aAAa,EAAE,gBAAgB,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC;gCAC1G,UAAU,EAAE,KAAK;gCACjB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gCACnG,MAAM,EAAE,CAAC,GAAG,gBAAgB,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,cAAc;6BACxE,CAAC,IAAI,IAAI,CAAC,CAAC;4BACZ,IAAI,CAAC,OAAO,IAAI,QAAQ,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;gCAAE,MAAM,IAAI,wBAAwB,CACnF,yBAAyB,EAAE,0CAA0C,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAC5F,CAAC;4BACF,MAAM,kBAAkB,EAAE,CAAC;4BAC3B,IAAI,QAAQ,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;gCAAE,MAAM,IAAI,wBAAwB,CACvE,yBAAyB,EAAE,2CAA2C,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;4BAChG,OAAO,GAAG,KAAK,CAAC;wBAClB,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,IAAI,KAAK,YAAY,wBAAwB;gCAAE,MAAM,KAAK,CAAC;4BAC3D,MAAM,IAAI,wBAAwB,CAAC,iCAAiC,EAAE,iDAAiD,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;wBAC/J,CAAC;wBACD,OAAO,OAAO,CAAC;oBACjB,CAAC;iBACF,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,wBAAwB;oBAAE,MAAM,KAAK,CAAC;gBAC3D,MAAM,IAAI,wBAAwB,CAAC,iCAAiC,EAClE,kDAAkD,KAAK,CAAC,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YACzG,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,OAA4C;IAE5C,MAAM,cAAc,GAAG,8BAA8B,CAAC,OAAO,CAAC,CAAC;IAC/D,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,QAAQ;YACpB,IAAI,MAA4C,CAAC;YACjD,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAChD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;gBAC3B,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC;gBACnC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,oBAAoB,CAAC;gBACrD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;oBACvB,IAAI,CAAC,OAAO,CAAC,OAAO;wBAAE,MAAM,IAAI,wBAAwB,CAAC,iCAAiC,EACxF,+CAA+C,KAAK,CAAC,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;oBACtF,MAAM,QAAQ,GAAG,MAAM,CAAC;oBACxB,MAAM,UAAU,GAAiC;wBAC/C,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM;wBAChE,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE;wBACjC,OAAO,EAAE,KAAK,EAAe,OAA0B,EAAE,EAAE;4BACzD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;4BACzC,OAAO,OAAO,CAAC,OAAQ,CAAI,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;wBACjG,CAAC;qBACF,CAAC;oBACF,oBAAoB,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;oBACzD,wBAAwB,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;oBACpF,OAAO,UAAU,CAAC;gBACpB,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,WAAW;oBAAE,MAAM,IAAI,wBAAwB,CAAC,iCAAiC,EAC5F,8DAA8D,KAAK,CAAC,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;gBACrG,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;gBACvB,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAC9D,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;gBACvB,MAAM,UAAU,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;gBACpD,MAAM,QAAQ,GAAG,MAAM,CAAC;gBACxB,UAAU,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBAC9C,oBAAoB,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;gBACzD,wBAAwB,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpF,OAAO,UAAU,CAAC;YACpB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,EAAE,OAAO,EAAE,CAAC;gBAClB,IAAI,KAAK,YAAY,wBAAwB;oBAAE,MAAM,KAAK,CAAC;gBAC3D,MAAM,IAAI,wBAAwB,CAAC,iCAAiC,EAClE,kDAAkD,QAAQ,CAAC,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/G,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,OAA6C;IAE7C,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YAC9C,IAAI,CAAC,EAAE,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5F,MAAM,IAAI,wBAAwB,CAChC,yBAAyB,EACzB,8DAA8D,CAC/D,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,kCAAkC,CAAC;gBAClD,GAAG,OAAO;gBACV,eAAe,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC;gBACrD,OAAO,EAAE,OAAO,CAAC,OAAO;oBACtB,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE;wBACvD,iCAAiC,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;wBAC5F,OAAO,OAAO,CAAC,OAAQ,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;oBAC1E,CAAC;oBACH,CAAC,CAAC,SAAS;aACd,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC,OAAO,CAAC;gBACtB,IAAI,EAAE,EAAE;gBACR,IAAI,EAAE;oBACJ,QAAQ;oBACR,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM;oBACzB,WAAW,EAAE,0BAA0B,EAAE,EAAE;oBAC3C,IAAI,EAAE,SAAS;iBAChB;gBACD,QAAQ,EAAE,eAAe,EAAE,EAAE;gBAC7B,UAAU,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,EAAE;gBAC7C,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,iCAAiC,CACxC,QAA0D,EAC1D,OAA0B,EAC1B,gBAAmC;IAEnC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;QACvC,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5G,IAAI,MAAM,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAC/D,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAClH,OAAO,CAAC,MAAM,CAAC,cAAc,IAAI,SAAS,CAAC,gBAAgB,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,wBAAwB,CAChC,6BAA6B,EAC7B,oDAAoD,MAAM,IAAI,OAAO,CAAC,IAAI,EAAE,CAC7E,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/client/index.d.ts

@@ -1,36 +1,43 @@
+import type { ConnectorCatalogEntry, ConnectorDefinition } from "../definitions.js";
+import type { StoredConnectorDefinition } from "../definition-store.js";
+import type { ConnectionVerificationResult, ConnectorSetupReadinessInput, ConnectorSetupReadinessResult } from "../verification.js";
 import type { ConnectionOperationPolicy, ConnectionRequest, ConnectionResponse, ToolInvocationJsonValue } from "@polpo-ai/core";
-import type { ConnectSubject, ConnectionAudience, ConnectionBindingAttributes, ConnectionLink, ConnectionLinkListFilter, ConnectionOwner, ConnectionRecord, ConnectionSetupSession, ConnectorProviderDefinition, McpConnectionAuth, McpConnectionTransport, McpOAuthClientInformation, McpOAuthClientMode, McpOAuthInspection, RuntimeToken } from "../types.js";
+import type { ConnectSubject, ConnectionAudience, ConnectionBindingAttributes, ConnectionCreationContext, ConnectionLink, ConnectionLinkListFilter, ConnectionOwner, ConnectionRecord, ConnectionSetupSession, ConnectionSetupStatus, ConnectorProviderDefinition, McpConnectionAuth, McpConnectionTransport, McpOAuthClientInformation, McpOAuthClientMode, McpOAuthInspection, ResolvedMcpOAuthClient, RuntimeToken } from "../types.js";
 export interface PolpoConnectClientOptions {
     baseUrl: string;
     headers?: HeadersInit | (() => HeadersInit | Promise<HeadersInit>);
     fetch?: typeof fetch;
 }
-export interface CreateApiKeyConnectionRequest {
+export interface CreateApiKeyConnectionRequest extends ConnectionCreationContext {
     providerId: string;
+    authenticationId?: string;
     apiKey: string;
     scopes?: string[];
-    subject?: ConnectSubject;
     name?: string;
     projectId?: string;
     orgId?: string;
     metadata?: Record<string, unknown>;
 }
-export interface CreateMcpConnectionRequest {
+export type CreatePublicConnectionRequest = Omit<CreateApiKeyConnectionRequest, "apiKey">;
+export interface CreateMcpConnectionRequest extends ConnectionCreationContext {
     providerId?: string;
+    authenticationId?: string;
     name?: string;
     url: string;
     transport?: McpConnectionTransport;
     auth?: McpConnectionAuth;
+    headerName?: string;
     apiKey?: string;
     bearerToken?: string;
     scopes?: string[];
-    subject?: ConnectSubject;
     projectId?: string;
     orgId?: string;
     metadata?: Record<string, unknown>;
 }
 export interface StartOAuthRequest {
     providerId: string;
+    authenticationId?: string;
+    oauthClientMode?: "managed" | "customer" | "instance";
     scopes?: string[];
     subject?: ConnectSubject;
     redirectUri: string;
@@ -54,7 +61,9 @@ export interface InspectMcpOAuthRequest {
     url: string;
     transport?: McpConnectionTransport;
 }
-export interface StartMcpOAuthRequest extends InspectMcpOAuthRequest {
+export interface StartMcpOAuthRequest extends InspectMcpOAuthRequest, ConnectionCreationContext {
+    providerId?: string;
+    authenticationId?: string;
     name?: string;
     scopes?: string[];
     mode: McpOAuthClientMode;
@@ -70,6 +79,9 @@ export interface GetTokenRequest {
 }
 export interface CreateConnectionSetupSessionRequest {
     providerId: string;
+    authenticationId?: string;
+    /** Reusable host-owned MCP OAuth configuration; never a provider secret. */
+    configurationId?: string;
     projectId: string;
     orgId?: string;
     audience: ConnectionAudience;
@@ -118,22 +130,15 @@ export interface ApplicationCapabilityRequest {
     invocation?: ApplicationCapabilityInvocation;
     request: ConnectionRequest;
 }
-export interface ConnectionSetupStatus {
-    providerId: string;
-    projectId: string;
-    status: "pending" | "started" | "completed" | "cancelled" | "expired" | "error";
-    resultingConnectionId?: string;
-    expiresAt: string;
-    consumedAt?: string;
-    scopes: string[];
-    application?: {
-        name: string;
-        url?: string;
-    };
+export type { ConnectionSetupStatus } from "../types.js";
+/** Project-approved destinations after provider authorization, independent of OAuth app ownership. */
+export interface ProjectConnectionSetupConfiguration {
+    returnOrigins: string[];
 }
 export interface CloudOAuthClientRecord {
     id: string;
     providerId: string;
+    authenticationId?: string;
     owner: {
         type: "organization" | "project";
         id: string;
@@ -149,10 +154,37 @@ export interface CloudOAuthClientRecord {
 }
 export interface ConfigureCloudOAuthClientRequest {
     name?: string;
+    authenticationId?: string;
     clientId: string;
     clientSecret?: string;
     returnOrigins?: string[];
 }
+export type McpOAuthConfigurationScope = {
+    type: "project" | "organization";
+    id: string;
+};
+export type ConfigureMcpOAuthRequest = Pick<ResolvedMcpOAuthClient, "providerId" | "authenticationId" | "resourceUrl" | "transport" | "registration"> & {
+    name?: string;
+    returnOrigins?: string[];
+};
+export type CloudMcpOAuthConfiguration = Omit<ResolvedMcpOAuthClient, "registration"> & {
+    registration: Exclude<ResolvedMcpOAuthClient["registration"], {
+        mode: "pre_registered";
+    }> | {
+        mode: "pre_registered";
+        client: McpOAuthClientInformation & {
+            client_secret?: never;
+        };
+    };
+    name?: string;
+    status: "active" | "revoked";
+    hasSecret: boolean;
+    fingerprint: string;
+    revision: string;
+    returnOrigins: string[];
+    createdAt: string;
+    updatedAt: string;
+};
 export interface ConnectionEventRecord {
     id: string;
     connectionId?: string | null;
@@ -187,14 +219,41 @@ export declare class PolpoConnectClient {
     private readonly headers?;
     constructor(options: PolpoConnectClientOptions);
     listProviders(): Promise<ConnectorProviderDefinition[]>;
+    listCatalog(): Promise<ConnectorCatalogEntry[]>;
+    listProjectCatalog(projectId: string): Promise<ConnectorCatalogEntry[]>;
+    getProjectSetupReadiness(projectId: string, input: Pick<ConnectorSetupReadinessInput, "providerId" | "authenticationId"> & {
+        oauthClientMode?: "managed" | "customer";
+    }): Promise<ConnectorSetupReadinessResult>;
+    registerProjectConnectorDefinition(projectId: string, definition: ConnectorDefinition): Promise<StoredConnectorDefinition>;
+    disableProjectConnectorDefinition(projectId: string, connectorId: string): Promise<StoredConnectorDefinition>;
+    getSetupReadiness(input: ConnectorSetupReadinessInput): Promise<ConnectorSetupReadinessResult>;
+    registerConnectorDefinition(definition: ConnectorDefinition): Promise<StoredConnectorDefinition>;
+    disableConnectorDefinition(connectorId: string): Promise<StoredConnectorDefinition>;
     listConnections(): Promise<ConnectionRecord[]>;
     listConnectionLinks(filter?: ConnectionLinkListFilter): Promise<ConnectionLink[]>;
     linkConnection(connectionId: string, projectId: string): Promise<ConnectionLink>;
     unlinkConnection(linkId: string): Promise<ConnectionLink>;
     createApiKeyConnection(input: CreateApiKeyConnectionRequest): Promise<ConnectionRecord>;
+    createPublicConnection(input: CreatePublicConnectionRequest): Promise<ConnectionRecord>;
+    verifyConnection(connectionId: string): Promise<ConnectionVerificationResult>;
+    verifyProjectConnection(projectId: string, connectionId: string): Promise<ConnectionVerificationResult>;
     createMcpConnection(input: CreateMcpConnectionRequest): Promise<ConnectionRecord>;
+    createProjectApiKeyConnection(projectId: string, input: CreateApiKeyConnectionRequest): Promise<ConnectionRecord>;
+    createProjectPublicConnection(projectId: string, input: CreatePublicConnectionRequest): Promise<ConnectionRecord>;
+    createProjectMcpConnection(projectId: string, input: CreateMcpConnectionRequest): Promise<ConnectionRecord>;
+    inspectMcpOAuth(input: InspectMcpOAuthRequest): Promise<McpOAuthInspection>;
+    startMcpOAuth(input: StartMcpOAuthRequest & {
+        redirectUri: string;
+        projectId?: string;
+        orgId?: string;
+    }): Promise<StartOAuthResponse>;
     inspectProjectMcpOAuth(projectId: string, input: InspectMcpOAuthRequest): Promise<McpOAuthInspection>;
+    /** Requires a Polpo browser session; a platform key does not identify the
+     * person authorizing MCP. CLI users review and confirm setup in the dashboard. */
     startProjectMcpOAuth(projectId: string, input: StartMcpOAuthRequest): Promise<StartOAuthResponse>;
+    /** @deprecated Cloud deliberately rejects MCP reconnect until verified-account
+     * continuity is supported. Create a new Connection and explicitly reassign
+     * its tools; this compatibility method surfaces the server's 409 denial. */
     reconnectProjectMcpConnection(projectId: string, connectionId: string): Promise<StartOAuthResponse>;
     verifyProjectMcpConnection(projectId: string, connectionId: string): Promise<{
         ok: true;
@@ -206,19 +265,37 @@ export declare class PolpoConnectClient {
     createProjectSetupSession(projectId: string, input: Omit<CreateConnectionSetupSessionRequest, "projectId">): Promise<ConnectionSetupSession & {
         setupUrl: string;
     }>;
+    getProjectSetupConfiguration(projectId: string): Promise<ProjectConnectionSetupConfiguration>;
+    listProjectEndUserConnections(projectId: string, owner: {
+        namespace: string;
+        id: string;
+    }): Promise<ConnectionRecord[]>;
+    revokeProjectEndUserConnection(projectId: string, owner: {
+        namespace: string;
+        id: string;
+    }, connectionId: string): Promise<ConnectionRecord>;
+    configureProjectSetup(projectId: string, input: ProjectConnectionSetupConfiguration): Promise<ProjectConnectionSetupConfiguration>;
     getSetupStatus(setupToken: string): Promise<ConnectionSetupStatus>;
     cancelSetupSession(setupToken: string): Promise<ConnectionSetupStatus>;
     waitForSetupCompletion(setupToken: string, options?: WaitForConnectionSetupOptions): Promise<ConnectionSetupStatus>;
     startOAuthSetup(setupSessionId: string): Promise<StartOAuthResponse>;
+    /** Starts a session from createProjectSetupSession through the Cloud public setup API. */
+    startProjectOAuthSetup(setupToken: string): Promise<StartOAuthResponse>;
     getToken(connectionId: string, input?: GetTokenRequest): Promise<RuntimeToken>;
     gatewayRequest<T = unknown>(connectionId: string, input: ConnectionGatewayRequest): Promise<ConnectionResponse<T>>;
     listApplicationCapabilities(projectId: string, status?: "pending" | "active" | "revoked"): Promise<ApplicationCapabilityRecord[]>;
     listProjectOAuthClients(projectId: string): Promise<CloudOAuthClientRecord[]>;
+    listMcpOAuthConfigurations(owner: McpOAuthConfigurationScope): Promise<CloudMcpOAuthConfiguration[]>;
+    createMcpOAuthConfiguration(owner: McpOAuthConfigurationScope, input: ConfigureMcpOAuthRequest): Promise<CloudMcpOAuthConfiguration>;
+    updateMcpOAuthConfiguration(owner: McpOAuthConfigurationScope, id: string, input: ConfigureMcpOAuthRequest & {
+        expectedRevision: string;
+    }): Promise<CloudMcpOAuthConfiguration>;
+    revokeMcpOAuthConfiguration(owner: McpOAuthConfigurationScope, id: string, expectedRevision: string): Promise<CloudMcpOAuthConfiguration>;
     configureProjectOAuthClient(projectId: string, providerId: string, input: ConfigureCloudOAuthClientRequest): Promise<CloudOAuthClientRecord>;
-    revokeProjectOAuthClient(projectId: string, providerId: string): Promise<CloudOAuthClientRecord>;
+    revokeProjectOAuthClient(projectId: string, providerId: string, authenticationId?: string): Promise<CloudOAuthClientRecord>;
     listOrganizationOAuthClients(organizationId: string): Promise<CloudOAuthClientRecord[]>;
     configureOrganizationOAuthClient(organizationId: string, providerId: string, input: ConfigureCloudOAuthClientRequest): Promise<CloudOAuthClientRecord>;
-    revokeOrganizationOAuthClient(organizationId: string, providerId: string): Promise<CloudOAuthClientRecord>;
+    revokeOrganizationOAuthClient(organizationId: string, providerId: string, authenticationId?: string): Promise<CloudOAuthClientRecord>;
     configureApplicationCapability(projectId: string, capabilityId: string, input: ConfigureApplicationCapabilityRequest): Promise<ApplicationCapabilityRecord>;
     revokeApplicationCapability(projectId: string, capabilityId: string): Promise<ApplicationCapabilityRecord>;
     requestApplicationCapability<T = unknown>(projectId: string, capabilityId: string, input: ApplicationCapabilityRequest): Promise<ConnectionResponse<T>>;