@pulumi/snowflake 2.18.0-alpha.1783237205 → 2.18.0

package/apiIntegrationExternalMcpDynamicClient.js

@@ -0,0 +1,137 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiIntegrationExternalMcpDynamicClient = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const utilities = __importStar(require("./utilities"));
+/**
+ * > **Caution: Preview Feature** This feature is considered a preview feature in the provider, regardless of the state of the resource in Snowflake. We do not guarantee its stability. It will be reworked and marked as a stable feature in future releases. Breaking changes are expected, even without bumping the major version. To use this feature, add the relevant feature name to `previewFeaturesEnabled` field in the provider configuration. Please always refer to the Getting Help section in our Github repo to best determine how to get help for your questions.
+ *
+ * Resource used to manage API integration External MCP Dynamic Client Registration objects. For more information, check [api integration documentation](https://docs.snowflake.com/en/sql-reference/sql/create-api-integration).
+ *
+ * ## Example Usage
+ *
+ * > **Note** Instead of using fully_qualified_name, you can reference objects managed outside Terraform by constructing a correct ID, consult identifiers guide.
+ * <!-- TODO(SNOW-1634854): include an example showing both methods-->
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as snowflake from "@pulumi/snowflake";
+ *
+ * // basic resource
+ * const basic = new snowflake.ApiIntegrationExternalMcpDynamicClient("basic", {
+ *     name: "external_mcp_dynamic_client_integration",
+ *     oauthResourceUrl: "https://mcp-server.example.com",
+ *     apiAllowedPrefixes: ["https://mcp-server.example.com/"],
+ *     enabled: true,
+ * });
+ * // complete resource
+ * const complete = new snowflake.ApiIntegrationExternalMcpDynamicClient("complete", {
+ *     name: "external_mcp_dynamic_client_integration_complete",
+ *     oauthResourceUrl: "https://mcp-server.example.com",
+ *     apiAllowedPrefixes: ["https://mcp-server.example.com/"],
+ *     apiBlockedPrefixes: ["https://mcp-server.example.com/blocked/"],
+ *     enabled: true,
+ *     comment: "Example External MCP Dynamic Client Registration integration",
+ * });
+ * ```
+ *
+ * > **Note** If a field has a default value, it is shown next to the type in the schema.
+ *
+ * ## Import
+ *
+ * ```sh
+ * $ pulumi import snowflake:index/apiIntegrationExternalMcpDynamicClient:ApiIntegrationExternalMcpDynamicClient example '"<name>"'
+ * ```
+ */
+class ApiIntegrationExternalMcpDynamicClient extends pulumi.CustomResource {
+    /**
+     * Get an existing ApiIntegrationExternalMcpDynamicClient resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new ApiIntegrationExternalMcpDynamicClient(name, state, { ...opts, id: id });
+    }
+    /** @internal */
+    static __pulumiType = 'snowflake:index/apiIntegrationExternalMcpDynamicClient:ApiIntegrationExternalMcpDynamicClient';
+    /**
+     * Returns true if the given object is an instance of ApiIntegrationExternalMcpDynamicClient.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === ApiIntegrationExternalMcpDynamicClient.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["apiAllowedPrefixes"] = state?.apiAllowedPrefixes;
+            resourceInputs["apiBlockedPrefixes"] = state?.apiBlockedPrefixes;
+            resourceInputs["comment"] = state?.comment;
+            resourceInputs["describeOutputs"] = state?.describeOutputs;
+            resourceInputs["enabled"] = state?.enabled;
+            resourceInputs["fullyQualifiedName"] = state?.fullyQualifiedName;
+            resourceInputs["name"] = state?.name;
+            resourceInputs["oauthResourceUrl"] = state?.oauthResourceUrl;
+            resourceInputs["showOutputs"] = state?.showOutputs;
+        }
+        else {
+            const args = argsOrState;
+            if (args?.apiAllowedPrefixes === undefined && !opts.urn) {
+                throw new Error("Missing required property 'apiAllowedPrefixes'");
+            }
+            if (args?.enabled === undefined && !opts.urn) {
+                throw new Error("Missing required property 'enabled'");
+            }
+            if (args?.oauthResourceUrl === undefined && !opts.urn) {
+                throw new Error("Missing required property 'oauthResourceUrl'");
+            }
+            resourceInputs["apiAllowedPrefixes"] = args?.apiAllowedPrefixes;
+            resourceInputs["apiBlockedPrefixes"] = args?.apiBlockedPrefixes;
+            resourceInputs["comment"] = args?.comment;
+            resourceInputs["enabled"] = args?.enabled;
+            resourceInputs["name"] = args?.name;
+            resourceInputs["oauthResourceUrl"] = args?.oauthResourceUrl;
+            resourceInputs["describeOutputs"] = undefined /*out*/;
+            resourceInputs["fullyQualifiedName"] = undefined /*out*/;
+            resourceInputs["showOutputs"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(ApiIntegrationExternalMcpDynamicClient.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.ApiIntegrationExternalMcpDynamicClient = ApiIntegrationExternalMcpDynamicClient;
+//# sourceMappingURL=apiIntegrationExternalMcpDynamicClient.js.map

package/apiIntegrationExternalMcpDynamicClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiIntegrationExternalMcpDynamicClient.js","sourceRoot":"","sources":["../apiIntegrationExternalMcpDynamicClient.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AAGzC,uDAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,MAAa,sCAAuC,SAAQ,MAAM,CAAC,cAAc;IAC7E;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAmD,EAAE,IAAmC;QACjJ,OAAO,IAAI,sCAAsC,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,+FAA+F,CAAC;IAEtI;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,sCAAsC,CAAC,YAAY,CAAC;IACvF,CAAC;IA+CD,YAAY,IAAY,EAAE,WAAsG,EAAE,IAAmC;QACjK,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAsE,CAAC;YACrF,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,EAAE,kBAAkB,CAAC;YACjE,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,EAAE,kBAAkB,CAAC;YACjE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,EAAE,kBAAkB,CAAC;YACjE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;SACtD;aAAM;YACH,MAAM,IAAI,GAAG,WAAqE,CAAC;YACnF,IAAI,IAAI,EAAE,kBAAkB,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;aACrE;YACD,IAAI,IAAI,EAAE,OAAO,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,IAAI,IAAI,EAAE,gBAAgB,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;aACnE;YACD,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,EAAE,kBAAkB,CAAC;YAChE,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,EAAE,kBAAkB,CAAC;YAChE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACtD,cAAc,CAAC,oBAAoB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACzD,cAAc,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACrD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,sCAAsC,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC3F,CAAC;;AA9GL,wFA+GC"}

package/apiIntegrationExternalMcpOauth2.d.ts

@@ -0,0 +1,243 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "./types/input";
+import * as outputs from "./types/output";
+/**
+ * > **Caution: Preview Feature** This feature is considered a preview feature in the provider, regardless of the state of the resource in Snowflake. We do not guarantee its stability. It will be reworked and marked as a stable feature in future releases. Breaking changes are expected, even without bumping the major version. To use this feature, add the relevant feature name to `previewFeaturesEnabled` field in the provider configuration. Please always refer to the Getting Help section in our Github repo to best determine how to get help for your questions.
+ *
+ * Resource used to manage API integration for external MCP (Model Context Protocol) servers using OAuth 2.0 authentication. For more information, check [api integration documentation](https://docs.snowflake.com/en/sql-reference/sql/create-api-integration).
+ *
+ * ## Example Usage
+ *
+ * > **Note** Instead of using fully_qualified_name, you can reference objects managed outside Terraform by constructing a correct ID, consult identifiers guide.
+ * <!-- TODO(SNOW-1634854): include an example showing both methods-->
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as snowflake from "@pulumi/snowflake";
+ *
+ * // basic resource
+ * const basic = new snowflake.ApiIntegrationExternalMcpOauth2("basic", {
+ *     name: "external_mcp_oauth2_integration",
+ *     oauthClientId: "my-client-id",
+ *     oauthClientSecret: "my-client-secret",
+ *     oauthTokenEndpoint: "https://mcp-server.example.com/oauth/token",
+ *     oauthAuthorizationEndpoint: "https://mcp-server.example.com/oauth/authorize",
+ *     apiAllowedPrefixes: ["https://mcp-server.example.com/"],
+ *     enabled: true,
+ * });
+ * // complete resource
+ * const complete = new snowflake.ApiIntegrationExternalMcpOauth2("complete", {
+ *     name: "external_mcp_oauth2_integration_complete",
+ *     oauthClientId: "my-client-id",
+ *     oauthClientSecret: "my-client-secret",
+ *     oauthTokenEndpoint: "https://mcp-server.example.com/oauth/token",
+ *     oauthAuthorizationEndpoint: "https://mcp-server.example.com/oauth/authorize",
+ *     oauthClientAuthMethod: "CLIENT_SECRET_POST",
+ *     oauthRefreshTokenValidity: 86400,
+ *     apiAllowedPrefixes: ["https://mcp-server.example.com/"],
+ *     apiBlockedPrefixes: ["https://mcp-server.example.com/blocked/"],
+ *     enabled: true,
+ *     comment: "Example External MCP OAuth2 integration",
+ * });
+ * ```
+ *
+ * > **Note** If a field has a default value, it is shown next to the type in the schema.
+ *
+ * ## Import
+ *
+ * ```sh
+ * $ pulumi import snowflake:index/apiIntegrationExternalMcpOauth2:ApiIntegrationExternalMcpOauth2 example '"<name>"'
+ * ```
+ */
+export declare class ApiIntegrationExternalMcpOauth2 extends pulumi.CustomResource {
+    /**
+     * Get an existing ApiIntegrationExternalMcpOauth2 resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ApiIntegrationExternalMcpOauth2State, opts?: pulumi.CustomResourceOptions): ApiIntegrationExternalMcpOauth2;
+    /**
+     * Returns true if the given object is an instance of ApiIntegrationExternalMcpOauth2.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is ApiIntegrationExternalMcpOauth2;
+    /**
+     * Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
+     */
+    readonly apiAllowedPrefixes: pulumi.Output<string[]>;
+    /**
+     * Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
+     */
+    readonly apiBlockedPrefixes: pulumi.Output<string[] | undefined>;
+    /**
+     * Specifies a comment for the integration.
+     */
+    readonly comment: pulumi.Output<string | undefined>;
+    /**
+     * Outputs the result of `DESCRIBE API INTEGRATION` for the given integration.
+     */
+    readonly describeOutputs: pulumi.Output<outputs.ApiIntegrationExternalMcpOauth2DescribeOutput[]>;
+    /**
+     * Specifies whether this API integration is enabled or disabled.
+     */
+    readonly enabled: pulumi.Output<boolean>;
+    /**
+     * Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
+     */
+    readonly fullyQualifiedName: pulumi.Output<string>;
+    /**
+     * Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * Specifies the OAuth 2.0 authorization endpoint URL for the MCP server.
+     */
+    readonly oauthAuthorizationEndpoint: pulumi.Output<string>;
+    /**
+     * Specifies the OAuth 2.0 client authentication method. Valid values are (case-insensitive): `CLIENT_SECRET_BASIC` | `CLIENT_SECRET_POST`.
+     */
+    readonly oauthClientAuthMethod: pulumi.Output<string | undefined>;
+    /**
+     * Specifies the OAuth 2.0 client ID for the MCP server.
+     */
+    readonly oauthClientId: pulumi.Output<string>;
+    /**
+     * Specifies the OAuth 2.0 client secret for the MCP server. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
+     */
+    readonly oauthClientSecret: pulumi.Output<string>;
+    /**
+     * Specifies the validity period (in seconds) for refresh tokens issued by the MCP server.
+     */
+    readonly oauthRefreshTokenValidity: pulumi.Output<number | undefined>;
+    /**
+     * Specifies the OAuth 2.0 token endpoint URL for the MCP server.
+     */
+    readonly oauthTokenEndpoint: pulumi.Output<string>;
+    /**
+     * Outputs the result of `SHOW API INTEGRATIONS` for the given integration.
+     */
+    readonly showOutputs: pulumi.Output<outputs.ApiIntegrationExternalMcpOauth2ShowOutput[]>;
+    /**
+     * Create a ApiIntegrationExternalMcpOauth2 resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: ApiIntegrationExternalMcpOauth2Args, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering ApiIntegrationExternalMcpOauth2 resources.
+ */
+export interface ApiIntegrationExternalMcpOauth2State {
+    /**
+     * Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
+     */
+    apiAllowedPrefixes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
+     */
+    apiBlockedPrefixes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Specifies a comment for the integration.
+     */
+    comment?: pulumi.Input<string | undefined>;
+    /**
+     * Outputs the result of `DESCRIBE API INTEGRATION` for the given integration.
+     */
+    describeOutputs?: pulumi.Input<pulumi.Input<inputs.ApiIntegrationExternalMcpOauth2DescribeOutput>[] | undefined>;
+    /**
+     * Specifies whether this API integration is enabled or disabled.
+     */
+    enabled?: pulumi.Input<boolean | undefined>;
+    /**
+     * Fully qualified name of the resource. For more information, see [object name resolution](https://docs.snowflake.com/en/sql-reference/name-resolution).
+     */
+    fullyQualifiedName?: pulumi.Input<string | undefined>;
+    /**
+     * Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
+     */
+    name?: pulumi.Input<string | undefined>;
+    /**
+     * Specifies the OAuth 2.0 authorization endpoint URL for the MCP server.
+     */
+    oauthAuthorizationEndpoint?: pulumi.Input<string | undefined>;
+    /**
+     * Specifies the OAuth 2.0 client authentication method. Valid values are (case-insensitive): `CLIENT_SECRET_BASIC` | `CLIENT_SECRET_POST`.
+     */
+    oauthClientAuthMethod?: pulumi.Input<string | undefined>;
+    /**
+     * Specifies the OAuth 2.0 client ID for the MCP server.
+     */
+    oauthClientId?: pulumi.Input<string | undefined>;
+    /**
+     * Specifies the OAuth 2.0 client secret for the MCP server. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
+     */
+    oauthClientSecret?: pulumi.Input<string | undefined>;
+    /**
+     * Specifies the validity period (in seconds) for refresh tokens issued by the MCP server.
+     */
+    oauthRefreshTokenValidity?: pulumi.Input<number | undefined>;
+    /**
+     * Specifies the OAuth 2.0 token endpoint URL for the MCP server.
+     */
+    oauthTokenEndpoint?: pulumi.Input<string | undefined>;
+    /**
+     * Outputs the result of `SHOW API INTEGRATIONS` for the given integration.
+     */
+    showOutputs?: pulumi.Input<pulumi.Input<inputs.ApiIntegrationExternalMcpOauth2ShowOutput>[] | undefined>;
+}
+/**
+ * The set of arguments for constructing a ApiIntegrationExternalMcpOauth2 resource.
+ */
+export interface ApiIntegrationExternalMcpOauth2Args {
+    /**
+     * Explicitly limits external functions that use the integration to reference one or more HTTPS proxy service and remote service endpoints and resources.
+     */
+    apiAllowedPrefixes: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Lists the endpoints and resources in the HTTPS proxy service that are not allowed to be called from Snowflake.
+     */
+    apiBlockedPrefixes?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+    /**
+     * Specifies a comment for the integration.
+     */
+    comment?: pulumi.Input<string | undefined>;
+    /**
+     * Specifies whether this API integration is enabled or disabled.
+     */
+    enabled: pulumi.Input<boolean>;
+    /**
+     * Specifies the identifier (i.e. name) for the integration. This value must be unique in your account. Due to technical limitations (read more here), avoid using the following characters: `|`, `.`, `"`.
+     */
+    name?: pulumi.Input<string | undefined>;
+    /**
+     * Specifies the OAuth 2.0 authorization endpoint URL for the MCP server.
+     */
+    oauthAuthorizationEndpoint: pulumi.Input<string>;
+    /**
+     * Specifies the OAuth 2.0 client authentication method. Valid values are (case-insensitive): `CLIENT_SECRET_BASIC` | `CLIENT_SECRET_POST`.
+     */
+    oauthClientAuthMethod?: pulumi.Input<string | undefined>;
+    /**
+     * Specifies the OAuth 2.0 client ID for the MCP server.
+     */
+    oauthClientId: pulumi.Input<string>;
+    /**
+     * Specifies the OAuth 2.0 client secret for the MCP server. External changes for this field won't be detected. In case you want to apply external changes, you can re-create the resource manually using "terraform taint".
+     */
+    oauthClientSecret: pulumi.Input<string>;
+    /**
+     * Specifies the validity period (in seconds) for refresh tokens issued by the MCP server.
+     */
+    oauthRefreshTokenValidity?: pulumi.Input<number | undefined>;
+    /**
+     * Specifies the OAuth 2.0 token endpoint URL for the MCP server.
+     */
+    oauthTokenEndpoint: pulumi.Input<string>;
+}
+//# sourceMappingURL=apiIntegrationExternalMcpOauth2.d.ts.map

package/apiIntegrationExternalMcpOauth2.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiIntegrationExternalMcpOauth2.d.ts","sourceRoot":"","sources":["../apiIntegrationExternalMcpOauth2.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAG1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,qBAAa,+BAAgC,SAAQ,MAAM,CAAC,cAAc;IACtE;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,oCAAoC,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,+BAA+B;IAOhL;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,+BAA+B;IAO1E;;OAEG;IACH,SAAwB,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACpE;;OAEG;IACH,SAAwB,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IAChF;;OAEG;IACH,SAAwB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACnE;;OAEG;IACH,SAAgC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,6CAA6C,EAAE,CAAC,CAAC;IACxH;;OAEG;IACH,SAAwB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACxD;;OAEG;IACH,SAAgC,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1E;;OAEG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD;;OAEG;IACH,SAAwB,0BAA0B,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1E;;OAEG;IACH,SAAwB,qBAAqB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjF;;OAEG;IACH,SAAwB,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7D;;OAEG;IACH,SAAwB,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE;;OAEG;IACH,SAAwB,yBAAyB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACrF;;OAEG;IACH,SAAwB,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClE;;OAEG;IACH,SAAgC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,yCAAyC,EAAE,CAAC,CAAC;IAEhH;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mCAAmC,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CA4D3G;AAED;;GAEG;AACH,MAAM,WAAW,oCAAoC;IACjD;;OAEG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACtE;;OAEG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACtE;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3C;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,6CAA6C,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACjH;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC5C;;OAEG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACtD;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;OAEG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9D;;OAEG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzD;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjD;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACrD;;OAEG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7D;;OAEG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACtD;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,yCAAyC,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;CAC5G;AAED;;GAEG;AACH,MAAM,WAAW,mCAAmC;IAChD;;OAEG;IACH,kBAAkB,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzD;;OAEG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACtE;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3C;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;OAEG;IACH,0BAA0B,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjD;;OAEG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzD;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpC;;OAEG;IACH,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxC;;OAEG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7D;;OAEG;IACH,kBAAkB,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAC5C"}

package/apiIntegrationExternalMcpOauth2.js

@@ -0,0 +1,166 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApiIntegrationExternalMcpOauth2 = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const utilities = __importStar(require("./utilities"));
+/**
+ * > **Caution: Preview Feature** This feature is considered a preview feature in the provider, regardless of the state of the resource in Snowflake. We do not guarantee its stability. It will be reworked and marked as a stable feature in future releases. Breaking changes are expected, even without bumping the major version. To use this feature, add the relevant feature name to `previewFeaturesEnabled` field in the provider configuration. Please always refer to the Getting Help section in our Github repo to best determine how to get help for your questions.
+ *
+ * Resource used to manage API integration for external MCP (Model Context Protocol) servers using OAuth 2.0 authentication. For more information, check [api integration documentation](https://docs.snowflake.com/en/sql-reference/sql/create-api-integration).
+ *
+ * ## Example Usage
+ *
+ * > **Note** Instead of using fully_qualified_name, you can reference objects managed outside Terraform by constructing a correct ID, consult identifiers guide.
+ * <!-- TODO(SNOW-1634854): include an example showing both methods-->
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as snowflake from "@pulumi/snowflake";
+ *
+ * // basic resource
+ * const basic = new snowflake.ApiIntegrationExternalMcpOauth2("basic", {
+ *     name: "external_mcp_oauth2_integration",
+ *     oauthClientId: "my-client-id",
+ *     oauthClientSecret: "my-client-secret",
+ *     oauthTokenEndpoint: "https://mcp-server.example.com/oauth/token",
+ *     oauthAuthorizationEndpoint: "https://mcp-server.example.com/oauth/authorize",
+ *     apiAllowedPrefixes: ["https://mcp-server.example.com/"],
+ *     enabled: true,
+ * });
+ * // complete resource
+ * const complete = new snowflake.ApiIntegrationExternalMcpOauth2("complete", {
+ *     name: "external_mcp_oauth2_integration_complete",
+ *     oauthClientId: "my-client-id",
+ *     oauthClientSecret: "my-client-secret",
+ *     oauthTokenEndpoint: "https://mcp-server.example.com/oauth/token",
+ *     oauthAuthorizationEndpoint: "https://mcp-server.example.com/oauth/authorize",
+ *     oauthClientAuthMethod: "CLIENT_SECRET_POST",
+ *     oauthRefreshTokenValidity: 86400,
+ *     apiAllowedPrefixes: ["https://mcp-server.example.com/"],
+ *     apiBlockedPrefixes: ["https://mcp-server.example.com/blocked/"],
+ *     enabled: true,
+ *     comment: "Example External MCP OAuth2 integration",
+ * });
+ * ```
+ *
+ * > **Note** If a field has a default value, it is shown next to the type in the schema.
+ *
+ * ## Import
+ *
+ * ```sh
+ * $ pulumi import snowflake:index/apiIntegrationExternalMcpOauth2:ApiIntegrationExternalMcpOauth2 example '"<name>"'
+ * ```
+ */
+class ApiIntegrationExternalMcpOauth2 extends pulumi.CustomResource {
+    /**
+     * Get an existing ApiIntegrationExternalMcpOauth2 resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new ApiIntegrationExternalMcpOauth2(name, state, { ...opts, id: id });
+    }
+    /** @internal */
+    static __pulumiType = 'snowflake:index/apiIntegrationExternalMcpOauth2:ApiIntegrationExternalMcpOauth2';
+    /**
+     * Returns true if the given object is an instance of ApiIntegrationExternalMcpOauth2.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === ApiIntegrationExternalMcpOauth2.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["apiAllowedPrefixes"] = state?.apiAllowedPrefixes;
+            resourceInputs["apiBlockedPrefixes"] = state?.apiBlockedPrefixes;
+            resourceInputs["comment"] = state?.comment;
+            resourceInputs["describeOutputs"] = state?.describeOutputs;
+            resourceInputs["enabled"] = state?.enabled;
+            resourceInputs["fullyQualifiedName"] = state?.fullyQualifiedName;
+            resourceInputs["name"] = state?.name;
+            resourceInputs["oauthAuthorizationEndpoint"] = state?.oauthAuthorizationEndpoint;
+            resourceInputs["oauthClientAuthMethod"] = state?.oauthClientAuthMethod;
+            resourceInputs["oauthClientId"] = state?.oauthClientId;
+            resourceInputs["oauthClientSecret"] = state?.oauthClientSecret;
+            resourceInputs["oauthRefreshTokenValidity"] = state?.oauthRefreshTokenValidity;
+            resourceInputs["oauthTokenEndpoint"] = state?.oauthTokenEndpoint;
+            resourceInputs["showOutputs"] = state?.showOutputs;
+        }
+        else {
+            const args = argsOrState;
+            if (args?.apiAllowedPrefixes === undefined && !opts.urn) {
+                throw new Error("Missing required property 'apiAllowedPrefixes'");
+            }
+            if (args?.enabled === undefined && !opts.urn) {
+                throw new Error("Missing required property 'enabled'");
+            }
+            if (args?.oauthAuthorizationEndpoint === undefined && !opts.urn) {
+                throw new Error("Missing required property 'oauthAuthorizationEndpoint'");
+            }
+            if (args?.oauthClientId === undefined && !opts.urn) {
+                throw new Error("Missing required property 'oauthClientId'");
+            }
+            if (args?.oauthClientSecret === undefined && !opts.urn) {
+                throw new Error("Missing required property 'oauthClientSecret'");
+            }
+            if (args?.oauthTokenEndpoint === undefined && !opts.urn) {
+                throw new Error("Missing required property 'oauthTokenEndpoint'");
+            }
+            resourceInputs["apiAllowedPrefixes"] = args?.apiAllowedPrefixes;
+            resourceInputs["apiBlockedPrefixes"] = args?.apiBlockedPrefixes;
+            resourceInputs["comment"] = args?.comment;
+            resourceInputs["enabled"] = args?.enabled;
+            resourceInputs["name"] = args?.name;
+            resourceInputs["oauthAuthorizationEndpoint"] = args?.oauthAuthorizationEndpoint;
+            resourceInputs["oauthClientAuthMethod"] = args?.oauthClientAuthMethod;
+            resourceInputs["oauthClientId"] = args?.oauthClientId;
+            resourceInputs["oauthClientSecret"] = args?.oauthClientSecret ? pulumi.secret(args.oauthClientSecret) : undefined;
+            resourceInputs["oauthRefreshTokenValidity"] = args?.oauthRefreshTokenValidity;
+            resourceInputs["oauthTokenEndpoint"] = args?.oauthTokenEndpoint;
+            resourceInputs["describeOutputs"] = undefined /*out*/;
+            resourceInputs["fullyQualifiedName"] = undefined /*out*/;
+            resourceInputs["showOutputs"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        const secretOpts = { additionalSecretOutputs: ["oauthClientSecret"] };
+        opts = pulumi.mergeOptions(opts, secretOpts);
+        super(ApiIntegrationExternalMcpOauth2.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.ApiIntegrationExternalMcpOauth2 = ApiIntegrationExternalMcpOauth2;
+//# sourceMappingURL=apiIntegrationExternalMcpOauth2.js.map

package/apiIntegrationExternalMcpOauth2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiIntegrationExternalMcpOauth2.js","sourceRoot":"","sources":["../apiIntegrationExternalMcpOauth2.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AAGzC,uDAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,MAAa,+BAAgC,SAAQ,MAAM,CAAC,cAAc;IACtE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA4C,EAAE,IAAmC;QAC1I,OAAO,IAAI,+BAA+B,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,iFAAiF,CAAC;IAExH;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,+BAA+B,CAAC,YAAY,CAAC;IAChF,CAAC;IAmED,YAAY,IAAY,EAAE,WAAwF,EAAE,IAAmC;QACnJ,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA+D,CAAC;YAC9E,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,EAAE,kBAAkB,CAAC;YACjE,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,EAAE,kBAAkB,CAAC;YACjE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,EAAE,kBAAkB,CAAC;YACjE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,4BAA4B,CAAC,GAAG,KAAK,EAAE,0BAA0B,CAAC;YACjF,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,EAAE,qBAAqB,CAAC;YACvE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,EAAE,yBAAyB,CAAC;YAC/E,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,EAAE,kBAAkB,CAAC;YACjE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;SACtD;aAAM;YACH,MAAM,IAAI,GAAG,WAA8D,CAAC;YAC5E,IAAI,IAAI,EAAE,kBAAkB,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;aACrE;YACD,IAAI,IAAI,EAAE,OAAO,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,IAAI,IAAI,EAAE,0BAA0B,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC7D,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;aAC7E;YACD,IAAI,IAAI,EAAE,aAAa,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAChD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;aAChE;YACD,IAAI,IAAI,EAAE,iBAAiB,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;aACpE;YACD,IAAI,IAAI,EAAE,kBAAkB,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;aACrE;YACD,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,EAAE,kBAAkB,CAAC;YAChE,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,EAAE,kBAAkB,CAAC;YAChE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,4BAA4B,CAAC,GAAG,IAAI,EAAE,0BAA0B,CAAC;YAChF,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,EAAE,qBAAqB,CAAC;YACtE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC;YACtD,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAClH,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,EAAE,yBAAyB,CAAC;YAC9E,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,EAAE,kBAAkB,CAAC;YAChE,cAAc,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACtD,cAAc,CAAC,oBAAoB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACzD,cAAc,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACrD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACtE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,+BAA+B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACpF,CAAC;;AAvJL,0EAwJC"}