@tangle-network/braid 0.2.2 → 0.3.1

package/dist/adapters/connections/nitro-confidential-attestation.js

@@ -0,0 +1,255 @@
+import { createHash, X509Certificate } from 'node:crypto';
+import { confidentialExecutionVerified, sha256Bytes } from '@tangle-network/agent-interface';
+import { decodeTangleConfidentialAttestationQuote, encodeTangleConfidentialAttestationQuote, } from '@tangle-network/agent-provider-tangle';
+import { createNitroHardwareVerifier, normalizeTeeType, parseNitroAttestationDocument, toHex, verifyAttestation, } from '@tangle-network/tcloud-attestation';
+import { MAX_CONFIDENTIAL_ATTESTATION_MAX_AGE_SECONDS, MIN_CONFIDENTIAL_ATTESTATION_MAX_AGE_SECONDS, } from '../../domain/entities-core.js';
+import { AWS_NITRO_ENCLAVES_ROOT_G1_PEM, AWS_NITRO_ENCLAVES_ROOT_G1_SHA256, } from './aws-nitro-root-g1.js';
+const MAX_MEASUREMENT_BYTES = 48;
+const MIN_NONCE_HEX_CHARS = 64;
+const MAX_NONCE_HEX_CHARS = 128;
+const MAX_NITRO_TIMESTAMP_SKEW_SECONDS = 60;
+const POLICY_ID_PATTERN = /^[A-Za-z][A-Za-z0-9._:-]{0,255}$/u;
+const SHA256_DIGEST_PATTERN = /^sha256:[0-9a-f]{64}$/u;
+/**
+ * Build the one Nitro trust path used for provider admission and replay.
+ *
+ * The root is pinned before any verifier callback is returned. The callback
+ * never accepts a missing policy, an unverified quote, or a copied signature.
+ */
+export function createNitroConfidentialAttestationVerifiers(policy, options = {}) {
+    const normalizedPolicy = normalizeNitroConfidentialAttestationTrustPolicy(policy);
+    const root = assertOfficialNitroRoot();
+    const nowSeconds = options.now ?? (() => Math.floor(Date.now() / 1000));
+    const verifyEvidence = (report, attestation, expected) => {
+        if (!canonicalBindingsMatch(attestation, expected))
+            return null;
+        if (!normalizedPolicy.acceptedPolicyIds.includes(attestation.policy))
+            return null;
+        if (!isCanonicalNonce(attestation.nonce))
+            return null;
+        const measurement = sha256Bytes(Uint8Array.from(report.measurement));
+        if (measurement !== attestation.measurement ||
+            !normalizedPolicy.acceptedMeasurements.includes(measurement)) {
+            return null;
+        }
+        if (attestation.verifiedAt !== verifiedAtFor(report.timestamp))
+            return null;
+        let document;
+        try {
+            document = parseNitroAttestationDocument(Uint8Array.from(report.evidence));
+        }
+        catch {
+            return null;
+        }
+        if (document.nonce === undefined ||
+            toHex(document.nonce) !== attestation.nonce ||
+            document.certificate.length === 0 ||
+            document.signature.length === 0) {
+            return null;
+        }
+        const now = nowSeconds();
+        if (!Number.isSafeInteger(now) || now < 0)
+            return null;
+        const signedTimestamp = Math.floor(document.timestamp / 1000);
+        const signedMaxAge = normalizedPolicy.maxAgeSeconds;
+        const signedMaxFutureSkew = MAX_NITRO_TIMESTAMP_SKEW_SECONDS;
+        if (!Number.isSafeInteger(signedTimestamp) ||
+            signedTimestamp > now + signedMaxFutureSkew ||
+            now - signedTimestamp > signedMaxAge) {
+            return null;
+        }
+        const result = verifyAttestation({
+            tee_type: report.tee_type,
+            evidence: [...report.evidence],
+            measurement: [...report.measurement],
+            timestamp: report.timestamp,
+        }, {
+            acceptedTeeTypes: ['nitro'],
+            acceptedMeasurements: [toHex(Uint8Array.from(report.measurement))],
+            maxAgeSeconds: normalizedPolicy.maxAgeSeconds,
+            now,
+            // Do not pass expectedNonce. tcloud-attestation pads string nonces to
+            // 64 bytes, while AWS Nitro preserves the caller's 32-byte nonce.
+            hardwareVerifier: createNitroHardwareVerifier({
+                trustedRootCertificates: [root.raw],
+                nowMs: now * 1000,
+                maxTimestampSkewSeconds: signedMaxFutureSkew,
+            }),
+        });
+        if (!result.valid || result.attestation?.teeType !== 'nitro')
+            return null;
+        const leaf = leafCertificate(document.certificate);
+        if (leaf === null || equalBytes(leaf.raw, root.raw))
+            return null;
+        return {
+            measurement,
+            providerKeyId: digestBytes(leaf.raw),
+            providerSignature: digestBytes(document.signature),
+        };
+    };
+    const tangle = async ({ report, expected, attestation, }) => {
+        try {
+            const parsed = parseRawNitroReport(report);
+            if (!quoteMatchesReport(attestation.quote, parsed))
+                return null;
+            const verified = verifyEvidence(parsed, attestation, expected);
+            if (verified === null)
+                return null;
+            return verified;
+        }
+        catch {
+            return null;
+        }
+    };
+    const canonical = (attestation, expected) => {
+        try {
+            const report = decodeNitroQuote(attestation.quote);
+            const verified = verifyEvidence(report, attestation, expected);
+            return (verified !== null &&
+                attestation.providerKeyId === verified.providerKeyId &&
+                attestation.providerSignature === verified.providerSignature);
+        }
+        catch {
+            return false;
+        }
+    };
+    return Object.freeze({
+        policy: normalizedPolicy,
+        tangle,
+        canonical,
+    });
+}
+/** Resolve a policy on the selected connection, then fall back to test hooks. */
+export function nitroVerifiersForConnection(record, options) {
+    if (options.tangleConfidentialAttestationVerifier !== undefined ||
+        options.confidentialAttestationVerifier !== undefined) {
+        return Object.freeze({
+            ...(options.tangleConfidentialAttestationVerifier === undefined
+                ? {}
+                : { tangle: options.tangleConfidentialAttestationVerifier }),
+            ...(options.confidentialAttestationVerifier === undefined
+                ? {}
+                : { canonical: options.confidentialAttestationVerifier }),
+        });
+    }
+    const policy = options.tangleConfidentialAttestationPolicy ?? record.confidentialAttestationPolicy;
+    return policy === undefined ? undefined : createNitroConfidentialAttestationVerifiers(policy);
+}
+/** Validate and freeze a startup trust policy before it reaches provider code. */
+export function normalizeNitroConfidentialAttestationTrustPolicy(policy) {
+    if (policy === null || typeof policy !== 'object' || Array.isArray(policy)) {
+        throw new TypeError('Nitro confidential attestation policy must be an object');
+    }
+    const keys = Object.keys(policy);
+    if (keys.some((key) => key !== 'acceptedMeasurements' && key !== 'acceptedPolicyIds' && key !== 'maxAgeSeconds')) {
+        throw new TypeError('Nitro confidential attestation policy contains an unsupported field');
+    }
+    const acceptedMeasurements = policy.acceptedMeasurements;
+    const acceptedPolicyIds = policy.acceptedPolicyIds;
+    if (!Array.isArray(acceptedMeasurements) ||
+        acceptedMeasurements.length === 0 ||
+        acceptedMeasurements.length > 256 ||
+        acceptedMeasurements.some((measurement) => !SHA256_DIGEST_PATTERN.test(measurement))) {
+        throw new TypeError('Nitro confidential attestation policy requires one to 256 canonical SHA-256 measurements');
+    }
+    if (new Set(acceptedMeasurements).size !== acceptedMeasurements.length) {
+        throw new TypeError('Nitro confidential attestation policy measurements must be unique');
+    }
+    if (!Array.isArray(acceptedPolicyIds) ||
+        acceptedPolicyIds.length === 0 ||
+        acceptedPolicyIds.length > 256 ||
+        acceptedPolicyIds.some((value) => !POLICY_ID_PATTERN.test(value))) {
+        throw new TypeError('Nitro confidential attestation policy requires one to 256 canonical policy ids');
+    }
+    if (new Set(acceptedPolicyIds).size !== acceptedPolicyIds.length) {
+        throw new TypeError('Nitro confidential attestation policy ids must be unique');
+    }
+    if (!Number.isSafeInteger(policy.maxAgeSeconds) ||
+        policy.maxAgeSeconds < MIN_CONFIDENTIAL_ATTESTATION_MAX_AGE_SECONDS ||
+        policy.maxAgeSeconds > MAX_CONFIDENTIAL_ATTESTATION_MAX_AGE_SECONDS) {
+        throw new TypeError(`Nitro confidential attestation maxAgeSeconds must be an integer from ${MIN_CONFIDENTIAL_ATTESTATION_MAX_AGE_SECONDS} to ${MAX_CONFIDENTIAL_ATTESTATION_MAX_AGE_SECONDS}`);
+    }
+    const normalized = {
+        acceptedMeasurements: Object.freeze([...acceptedMeasurements]),
+        acceptedPolicyIds: Object.freeze([...acceptedPolicyIds]),
+        maxAgeSeconds: policy.maxAgeSeconds,
+    };
+    return Object.freeze(normalized);
+}
+function canonicalBindingsMatch(attestation, expected) {
+    return confidentialExecutionVerified({
+        request: {
+            requested: true,
+            nonce: attestation.nonce,
+            policy: attestation.policy,
+            profileDigest: attestation.profileDigest,
+        },
+        environment: expected,
+        attestation,
+        verifyProviderAttestation: () => true,
+    });
+}
+function parseRawNitroReport(value) {
+    const quote = encodeTangleConfidentialAttestationQuote(value);
+    if (quote === undefined)
+        throw new TypeError('Nitro attestation report is outside the provider bounds');
+    const report = decodeTangleConfidentialAttestationQuote(quote);
+    if (report === undefined || normalizeTeeType(report.tee_type) !== 'nitro') {
+        throw new TypeError('Nitro attestation report must declare tee_type=nitro');
+    }
+    if (report.measurement.length !== MAX_MEASUREMENT_BYTES) {
+        throw new TypeError('Nitro attestation measurement must be 48 bytes');
+    }
+    return report;
+}
+function quoteMatchesReport(quote, report) {
+    try {
+        const decoded = decodeTangleConfidentialAttestationQuote(quote);
+        return decoded !== undefined && JSON.stringify(report) === JSON.stringify(decoded);
+    }
+    catch {
+        return false;
+    }
+}
+function decodeNitroQuote(quote) {
+    const report = decodeTangleConfidentialAttestationQuote(quote);
+    if (report === undefined)
+        throw new TypeError('Nitro quote is not a canonical Tangle TEE quote');
+    return parseRawNitroReport(report);
+}
+function isCanonicalNonce(value) {
+    return ((value.length === MIN_NONCE_HEX_CHARS || value.length === MAX_NONCE_HEX_CHARS) &&
+        /^[0-9a-f]+$/u.test(value));
+}
+function verifiedAtFor(timestamp) {
+    const date = new Date(timestamp * 1000);
+    if (!Number.isFinite(date.getTime()))
+        throw new TypeError('Nitro timestamp is outside date bounds');
+    return date.toISOString();
+}
+function leafCertificate(bytes) {
+    try {
+        return new X509Certificate(bytes);
+    }
+    catch {
+        return null;
+    }
+}
+function assertOfficialNitroRoot() {
+    const root = new X509Certificate(AWS_NITRO_ENCLAVES_ROOT_G1_PEM);
+    const fingerprint = digestBytes(root.raw);
+    if (fingerprint !== AWS_NITRO_ENCLAVES_ROOT_G1_SHA256) {
+        throw new Error('The bundled AWS Nitro Root-G1 certificate fingerprint does not match AWS');
+    }
+    if (!root.verify(root.publicKey)) {
+        throw new Error('The bundled AWS Nitro Root-G1 certificate is not self-signed');
+    }
+    return root;
+}
+function digestBytes(value) {
+    return `sha256:${createHash('sha256').update(value).digest('hex')}`;
+}
+function equalBytes(left, right) {
+    return left.length === right.length && left.every((byte, index) => byte === right[index]);
+}
+//# sourceMappingURL=nitro-confidential-attestation.js.map

package/dist/adapters/connections/nitro-confidential-attestation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nitro-confidential-attestation.js","sourceRoot":"","sources":["../../../src/adapters/connections/nitro-confidential-attestation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAOzD,OAAO,EAAE,6BAA6B,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAA;AAM5F,OAAO,EACL,wCAAwC,EACxC,wCAAwC,GACzC,MAAM,uCAAuC,CAAA;AAC9C,OAAO,EACL,2BAA2B,EAC3B,gBAAgB,EAChB,6BAA6B,EAC7B,KAAK,EACL,iBAAiB,GAClB,MAAM,oCAAoC,CAAA;AAE3C,OAAO,EACL,4CAA4C,EAC5C,4CAA4C,GAC7C,MAAM,+BAA+B,CAAA;AACtC,OAAO,EACL,8BAA8B,EAC9B,iCAAiC,GAClC,MAAM,wBAAwB,CAAA;AAE/B,MAAM,qBAAqB,GAAG,EAAE,CAAA;AAChC,MAAM,mBAAmB,GAAG,EAAE,CAAA;AAC9B,MAAM,mBAAmB,GAAG,GAAG,CAAA;AAC/B,MAAM,gCAAgC,GAAG,EAAE,CAAA;AAC3C,MAAM,iBAAiB,GAAG,mCAAmC,CAAA;AAC7D,MAAM,qBAAqB,GAAG,wBAAwB,CAAA;AAkCtD;;;;;GAKG;AACH,MAAM,UAAU,2CAA2C,CACzD,MAA+C,EAC/C,OAAO,GAAgD,EAAE;IAEzD,MAAM,gBAAgB,GAAG,gDAAgD,CAAC,MAAM,CAAC,CAAA;IACjF,MAAM,IAAI,GAAG,uBAAuB,EAAE,CAAA;IACtC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAA;IAEvE,MAAM,cAAc,GAAG,CACrB,MAAsB,EACtB,WAAoC,EACpC,QAA0C,EACZ,EAAE;QAChC,IAAI,CAAC,sBAAsB,CAAC,WAAW,EAAE,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAA;QAC/D,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAA;QACjF,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QAErD,MAAM,WAAW,GAAG,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAA;QACpE,IACE,WAAW,KAAK,WAAW,CAAC,WAAW;YACvC,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAC5D,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IAAI,WAAW,CAAC,UAAU,KAAK,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAA;QAE3E,IAAI,QAA0D,CAAA;QAC9D,IAAI,CAAC;YACH,QAAQ,GAAG,6BAA6B,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IACE,QAAQ,CAAC,KAAK,KAAK,SAAS;YAC5B,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,KAAK;YAC3C,QAAQ,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YACjC,QAAQ,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAC/B,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QAED,MAAM,GAAG,GAAG,UAAU,EAAE,CAAA;QACxB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC;YAAE,OAAO,IAAI,CAAA;QACtD,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC,CAAA;QAC7D,MAAM,YAAY,GAAG,gBAAgB,CAAC,aAAa,CAAA;QACnD,MAAM,mBAAmB,GAAG,gCAAgC,CAAA;QAC5D,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC;YACtC,eAAe,GAAG,GAAG,GAAG,mBAAmB;YAC3C,GAAG,GAAG,eAAe,GAAG,YAAY,EACpC,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,MAAM,GAAG,iBAAiB,CAC9B;YACE,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;YAC9B,WAAW,EAAE,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC;YACpC,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,EACD;YACE,gBAAgB,EAAE,CAAC,OAAO,CAAC;YAC3B,oBAAoB,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;YAClE,aAAa,EAAE,gBAAgB,CAAC,aAAa;YAC7C,GAAG;YACH,sEAAsE;YACtE,kEAAkE;YAClE,gBAAgB,EAAE,2BAA2B,CAAC;gBAC5C,uBAAuB,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;gBACnC,KAAK,EAAE,GAAG,GAAG,IAAI;gBACjB,uBAAuB,EAAE,mBAAmB;aAC7C,CAAC;SACH,CACF,CAAA;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,WAAW,EAAE,OAAO,KAAK,OAAO;YAAE,OAAO,IAAI,CAAA;QAEzE,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QAClD,IAAI,IAAI,KAAK,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAA;QAChE,OAAO;YACL,WAAW;YACX,aAAa,EAAE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;YACpC,iBAAiB,EAAE,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC;SACnD,CAAA;IACH,CAAC,CAAA;IAED,MAAM,MAAM,GAA0C,KAAK,EAAE,EAC3D,MAAM,EACN,QAAQ,EACR,WAAW,GACZ,EAA6D,EAAE;QAC9D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAA;YAC1C,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAA;YAC/D,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAA;YAC9D,IAAI,QAAQ,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAA;YAClC,OAAO,QAAQ,CAAA;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC,CAAA;IAED,MAAM,SAAS,GAAoC,CAAC,WAAW,EAAE,QAAQ,EAAW,EAAE;QACpF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;YAClD,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAA;YAC9D,OAAO,CACL,QAAQ,KAAK,IAAI;gBACjB,WAAW,CAAC,aAAa,KAAK,QAAQ,CAAC,aAAa;gBACpD,WAAW,CAAC,iBAAiB,KAAK,QAAQ,CAAC,iBAAiB,CAC7D,CAAA;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC,CAAA;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,gBAAgB;QACxB,MAAM;QACN,SAAS;KACV,CAAC,CAAA;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,2BAA2B,CACzC,MAAwB,EACxB,OAIC;IAED,IACE,OAAO,CAAC,qCAAqC,KAAK,SAAS;QAC3D,OAAO,CAAC,+BAA+B,KAAK,SAAS,EACrD,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,GAAG,CAAC,OAAO,CAAC,qCAAqC,KAAK,SAAS;gBAC7D,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,qCAAqC,EAAE,CAAC;YAC9D,GAAG,CAAC,OAAO,CAAC,+BAA+B,KAAK,SAAS;gBACvD,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,+BAA+B,EAAE,CAAC;SAC5D,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,mCAAmC,IAAI,MAAM,CAAC,6BAA6B,CAAA;IAClG,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,2CAA2C,CAAC,MAAM,CAAC,CAAA;AAC/F,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,gDAAgD,CAC9D,MAA+C;IAE/C,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,SAAS,CAAC,yDAAyD,CAAC,CAAA;IAChF,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAChC,IACE,IAAI,CAAC,IAAI,CACP,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,KAAK,sBAAsB,IAAI,GAAG,KAAK,mBAAmB,IAAI,GAAG,KAAK,eAAe,CAC3F,EACD,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,qEAAqE,CAAC,CAAA;IAC5F,CAAC;IACD,MAAM,oBAAoB,GAAG,MAAM,CAAC,oBAAoB,CAAA;IACxD,MAAM,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,CAAA;IAClD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,oBAAoB,CAAC;QACpC,oBAAoB,CAAC,MAAM,KAAK,CAAC;QACjC,oBAAoB,CAAC,MAAM,GAAG,GAAG;QACjC,oBAAoB,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,EACpF,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,0FAA0F,CAC3F,CAAA;IACH,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,oBAAoB,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC,MAAM,EAAE,CAAC;QACvE,MAAM,IAAI,SAAS,CAAC,mEAAmE,CAAC,CAAA;IAC1F,CAAC;IACD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC;QACjC,iBAAiB,CAAC,MAAM,KAAK,CAAC;QAC9B,iBAAiB,CAAC,MAAM,GAAG,GAAG;QAC9B,iBAAiB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EACjE,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,gFAAgF,CACjF,CAAA;IACH,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC,IAAI,KAAK,iBAAiB,CAAC,MAAM,EAAE,CAAC;QACjE,MAAM,IAAI,SAAS,CAAC,0DAA0D,CAAC,CAAA;IACjF,CAAC;IACD,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC;QAC3C,MAAM,CAAC,aAAa,GAAG,4CAA4C;QACnE,MAAM,CAAC,aAAa,GAAG,4CAA4C,EACnE,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,wEAAwE,4CAA4C,OAAO,4CAA4C,EAAE,CAC1K,CAAA;IACH,CAAC;IACD,MAAM,UAAU,GAAG;QACjB,oBAAoB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,oBAAoB,CAAC,CAAC;QAC9D,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC;QACxD,aAAa,EAAE,MAAM,CAAC,aAAa;KACpC,CAAA;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;AAClC,CAAC;AAED,SAAS,sBAAsB,CAC7B,WAAoC,EACpC,QAA0C;IAE1C,OAAO,6BAA6B,CAAC;QACnC,OAAO,EAAE;YACP,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,WAAW,CAAC,KAAK;YACxB,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,aAAa,EAAE,WAAW,CAAC,aAAa;SACzC;QACD,WAAW,EAAE,QAAQ;QACrB,WAAW;QACX,yBAAyB,EAAE,GAAG,EAAE,CAAC,IAAI;KACtC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAsC;IACjE,MAAM,KAAK,GAAG,wCAAwC,CAAC,KAAK,CAAC,CAAA;IAC7D,IAAI,KAAK,KAAK,SAAS;QACrB,MAAM,IAAI,SAAS,CAAC,yDAAyD,CAAC,CAAA;IAChF,MAAM,MAAM,GAAG,wCAAwC,CAAC,KAAK,CAAC,CAAA;IAC9D,IAAI,MAAM,KAAK,SAAS,IAAI,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,OAAO,EAAE,CAAC;QAC1E,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAA;IAC7E,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;QACxD,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAA;IACvE,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa,EAAE,MAAsB;IAC/D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,wCAAwC,CAAC,KAAK,CAAC,CAAA;QAC/D,OAAO,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,MAAM,GAAG,wCAAwC,CAAC,KAAK,CAAC,CAAA;IAC9D,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAA;IAChG,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAA;AACpC,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,CACL,CAAC,KAAK,CAAC,MAAM,KAAK,mBAAmB,IAAI,KAAK,CAAC,MAAM,KAAK,mBAAmB,CAAC;QAC9E,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAC3B,CAAA;AACH,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB;IACtC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,CAAA;IACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAA;IAC/D,OAAO,IAAI,CAAC,WAAW,EAAE,CAAA;AAC3B,CAAC;AAED,SAAS,eAAe,CAAC,KAAiB;IACxC,IAAI,CAAC;QACH,OAAO,IAAI,eAAe,CAAC,KAAK,CAAC,CAAA;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB;IAC9B,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,8BAA8B,CAAC,CAAA;IAChE,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACzC,IAAI,WAAW,KAAK,iCAAiC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAA;IAC7F,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAA;IACjF,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB;IACpC,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;AACrE,CAAC;AAED,SAAS,UAAU,CAAC,IAAgB,EAAE,KAAiB;IACrD,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;AAC3F,CAAC"}

package/dist/adapters/connections/production-connection-credentials.d.ts

@@ -1,5 +1,11 @@
 import type { ConnectionRecord } from '../../domain/entities.js';
 import type { ProductionConnectionOptions } from './production-connection-types.js';
+/**
+ * Stores a secret together with the origin it was issued for. The binding lives
+ * in the operating-system credential store, so editing the workspace endpoint
+ * cannot redirect the secret to another origin.
+ */
+export declare function bindCredentialToOrigin(secret: Uint8Array, endpoint: string): Uint8Array;
 export declare function readConnectionCredential(record: ConnectionRecord, options: ProductionConnectionOptions, endpoint: string): Promise<string | undefined>;
 /** Proves that a caller-supplied durable id maps to an existing protected value. */
 export declare function assertConnectionCredentialReference(record: ConnectionRecord, options: ProductionConnectionOptions): Promise<void>;

package/dist/adapters/connections/production-connection-credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"production-connection-credentials.d.ts","sourceRoot":"","sources":["../../../src/adapters/connections/production-connection-credentials.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAIhE,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAA;AAEnF,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,2BAA2B,EACpC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAuC7B;AAED,oFAAoF;AACpF,wBAAsB,mCAAmC,CACvD,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,IAAI,CAAC,CAIf"}
+{"version":3,"file":"production-connection-credentials.d.ts","sourceRoot":"","sources":["../../../src/adapters/connections/production-connection-credentials.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAQhE,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAA;AAInF;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,UAAU,CAOvF;AA+CD,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,2BAA2B,EACpC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAuC7B;AAED,oFAAoF;AACpF,wBAAsB,mCAAmC,CACvD,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,IAAI,CAAC,CAIf"}

package/dist/adapters/connections/production-connection-credentials.js

@@ -1,6 +1,50 @@
 import { ConnectionError } from '../../app/connection-errors.js';
 import { credentialRef } from '../../ports/credentials.js';
-import { isLoopbackEndpoint } from './production-connection-endpoints.js';
+import { DEFAULT_TANGLE_INFERENCE_ENDPOINT, isLoopbackEndpoint, } from './production-connection-endpoints.js';
+import { DEFAULT_TANGLE_SANDBOX_ENDPOINT } from './production-connection-types.js';
+const BOUND_CREDENTIAL_HEADER = 'braid-credential-v1\n';
+/**
+ * Stores a secret together with the origin it was issued for. The binding lives
+ * in the operating-system credential store, so editing the workspace endpoint
+ * cannot redirect the secret to another origin.
+ */
+export function bindCredentialToOrigin(secret, endpoint) {
+    const origin = new URL(endpoint).origin;
+    const header = new TextEncoder().encode(`${BOUND_CREDENTIAL_HEADER}${origin}\n`);
+    const bound = new Uint8Array(header.length + secret.length);
+    bound.set(header, 0);
+    bound.set(secret, header.length);
+    return bound;
+}
+/**
+ * Credentials stored before origin binding carry no origin. They stay usable
+ * only where they could have been issued: the connection kind's default Tangle
+ * origin, or a loopback CLI Bridge.
+ */
+function legacyCredentialOriginAllowed(record, options, endpoint) {
+    const origin = new URL(endpoint).origin;
+    if (record.kind === 'tangle-sandbox')
+        return (origin === new URL(options.defaultSandboxEndpoint ?? DEFAULT_TANGLE_SANDBOX_ENDPOINT).origin);
+    if (record.kind === 'tangle-inference')
+        return (origin ===
+            new URL(options.defaultInferenceEndpoint ?? DEFAULT_TANGLE_INFERENCE_ENDPOINT).origin);
+    return isLoopbackEndpoint(endpoint);
+}
+function credentialForOrigin(value, record, options, endpoint) {
+    if (!value.startsWith(BOUND_CREDENTIAL_HEADER)) {
+        if (legacyCredentialOriginAllowed(record, options, endpoint))
+            return value;
+    }
+    else {
+        const rest = value.slice(BOUND_CREDENTIAL_HEADER.length);
+        const newline = rest.indexOf('\n');
+        const boundOrigin = newline < 0 ? '' : rest.slice(0, newline);
+        const secret = newline < 0 ? '' : rest.slice(newline + 1).trim();
+        if (boundOrigin === new URL(endpoint).origin && secret.length > 0)
+            return secret;
+    }
+    throw new ConnectionError('CONNECTION_CREDENTIAL_REAUTH_REQUIRED', 'The stored credential was not issued for this endpoint origin; run setup to authenticate the new endpoint', { connectionId: record.id });
+}
 export async function readConnectionCredential(record, options, endpoint) {
     const required = record.kind !== 'cli-bridge' ||
         !isLoopbackEndpoint(endpoint) ||
@@ -19,7 +63,7 @@ export async function readConnectionCredential(record, options, endpoint) {
         if (value.length === 0 || value.includes('\u0000')) {
             throw new ConnectionError('CONNECTION_CREDENTIAL_INVALID', 'The referenced credential in the operating-system credential store is empty or malformed', { connectionId: record.id });
         }
-        return value;
+        return credentialForOrigin(value, record, options, endpoint);
     }
     catch (error) {
         if (error instanceof ConnectionError)

package/dist/adapters/connections/production-connection-credentials.js.map

@@ -1 +1 @@
-{"version":3,"file":"production-connection-credentials.js","sourceRoot":"","sources":["../../../src/adapters/connections/production-connection-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAGhE,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAA;AAGzE,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAAwB,EACxB,OAAoC,EACpC,QAAgB;IAEhB,MAAM,QAAQ,GACZ,MAAM,CAAC,IAAI,KAAK,YAAY;QAC5B,CAAC,kBAAkB,CAAC,QAAQ,CAAC;QAC7B,MAAM,CAAC,aAAa,KAAK,SAAS,CAAA;IACpC,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACvC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,eAAe,CACvB,gCAAgC,EAChC,gFAAgF,EAChF,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,CAC5B,CAAA;QACH,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,iCAAiC,CAAC,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC,CAAA;IAC7F,IAAI,KAA6B,CAAA;IACjC,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;QACrB,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAA;QAC5E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,eAAe,CACvB,+BAA+B,EAC/B,0FAA0F,EAC1F,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,CAC5B,CAAA;QACH,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,eAAe;YAAE,MAAM,KAAK,CAAA;QACjD,MAAM,IAAI,eAAe,CACvB,+BAA+B,EAC/B,4FAA4F,EAC5F,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,CAC5B,CAAA;IACH,CAAC;YAAS,CAAC;QACT,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;QACd,uBAAuB,CAAC,MAAM,CAAC,CAAA;IACjC,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,MAAwB,EACxB,OAAoC;IAEpC,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS;QAAE,OAAM;IAC9C,MAAM,MAAM,GAAG,MAAM,iCAAiC,CAAC,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC,CAAA;IAC7F,uBAAuB,CAAC,MAAM,CAAC,CAAA;AACjC,CAAC;AAED,KAAK,UAAU,iCAAiC,CAC9C,MAAwB,EACxB,mBAAmE,EACnE,OAAoC;IAEpC,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC;QAC3D,MAAM,IAAI,eAAe,CACvB,oCAAoC,EACpC,yGAAyG,EACzG,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,CAC5B,CAAA;IACH,CAAC;IACD,IAAI,OAAsB,CAAA;IAC1B,IAAI,CAAC;QACH,OAAO,GAAG,aAAa,CAAC,MAAM,OAAO,CAAC,qBAAqB,CAAC,mBAAmB,CAAC,CAAC,CAAA;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CACvB,oCAAoC,EACpC,sDAAsD,EACtD,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,CAC5B,CAAA;IACH,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CACvB,mCAAmC,EACnC,6GAA6G,EAC7G,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,CAC5B,CAAA;IACH,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAsD;IACrF,IAAI,CAAC;QACH,MAAM,CAAC,OAAO,EAAE,CAAA;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;IACrE,CAAC;AACH,CAAC"}
+{"version":3,"file":"production-connection-credentials.js","sourceRoot":"","sources":["../../../src/adapters/connections/production-connection-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAGhE,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAC1D,OAAO,EACL,iCAAiC,EACjC,kBAAkB,GACnB,MAAM,sCAAsC,CAAA;AAC7C,OAAO,EAAE,+BAA+B,EAAE,MAAM,kCAAkC,CAAA;AAGlF,MAAM,uBAAuB,GAAG,uBAAuB,CAAA;AAEvD;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAkB,EAAE,QAAgB;IACzE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAA;IACvC,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,uBAAuB,GAAG,MAAM,IAAI,CAAC,CAAA;IAChF,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAA;IAC3D,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;IACpB,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IAChC,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,6BAA6B,CACpC,MAAwB,EACxB,OAAoC,EACpC,QAAgB;IAEhB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAA;IACvC,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB;QAClC,OAAO,CACL,MAAM,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,sBAAsB,IAAI,+BAA+B,CAAC,CAAC,MAAM,CAC7F,CAAA;IACH,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB;QACpC,OAAO,CACL,MAAM;YACN,IAAI,GAAG,CAAC,OAAO,CAAC,wBAAwB,IAAI,iCAAiC,CAAC,CAAC,MAAM,CACtF,CAAA;IACH,OAAO,kBAAkB,CAAC,QAAQ,CAAC,CAAA;AACrC,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAAa,EACb,MAAwB,EACxB,OAAoC,EACpC,QAAgB;IAEhB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAC/C,IAAI,6BAA6B,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAA;IAC5E,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAA;QACxD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAClC,MAAM,WAAW,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;QAC7D,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAChE,IAAI,WAAW,KAAK,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,MAAM,CAAA;IAClF,CAAC;IACD,MAAM,IAAI,eAAe,CACvB,uCAAuC,EACvC,2GAA2G,EAC3G,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,CAC5B,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAAwB,EACxB,OAAoC,EACpC,QAAgB;IAEhB,MAAM,QAAQ,GACZ,MAAM,CAAC,IAAI,KAAK,YAAY;QAC5B,CAAC,kBAAkB,CAAC,QAAQ,CAAC;QAC7B,MAAM,CAAC,aAAa,KAAK,SAAS,CAAA;IACpC,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACvC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,eAAe,CACvB,gCAAgC,EAChC,gFAAgF,EAChF,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,CAC5B,CAAA;QACH,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,iCAAiC,CAAC,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC,CAAA;IAC7F,IAAI,KAA6B,CAAA;IACjC,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;QACrB,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAA;QAC5E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,eAAe,CACvB,+BAA+B,EAC/B,0FAA0F,EAC1F,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,CAC5B,CAAA;QACH,CAAC;QACD,OAAO,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,eAAe;YAAE,MAAM,KAAK,CAAA;QACjD,MAAM,IAAI,eAAe,CACvB,+BAA+B,EAC/B,4FAA4F,EAC5F,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,CAC5B,CAAA;IACH,CAAC;YAAS,CAAC;QACT,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;QACd,uBAAuB,CAAC,MAAM,CAAC,CAAA;IACjC,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,MAAwB,EACxB,OAAoC;IAEpC,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS;QAAE,OAAM;IAC9C,MAAM,MAAM,GAAG,MAAM,iCAAiC,CAAC,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC,CAAA;IAC7F,uBAAuB,CAAC,MAAM,CAAC,CAAA;AACjC,CAAC;AAED,KAAK,UAAU,iCAAiC,CAC9C,MAAwB,EACxB,mBAAmE,EACnE,OAAoC;IAEpC,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC;QAC3D,MAAM,IAAI,eAAe,CACvB,oCAAoC,EACpC,yGAAyG,EACzG,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,CAC5B,CAAA;IACH,CAAC;IACD,IAAI,OAAsB,CAAA;IAC1B,IAAI,CAAC;QACH,OAAO,GAAG,aAAa,CAAC,MAAM,OAAO,CAAC,qBAAqB,CAAC,mBAAmB,CAAC,CAAC,CAAA;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CACvB,oCAAoC,EACpC,sDAAsD,EACtD,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,CAC5B,CAAA;IACH,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CACvB,mCAAmC,EACnC,6GAA6G,EAC7G,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,CAC5B,CAAA;IACH,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAsD;IACrF,IAAI,CAAC;QACH,MAAM,CAAC,OAAO,EAAE,CAAA;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;IACrE,CAAC;AACH,CAAC"}

package/dist/adapters/connections/production-connection-health.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"production-connection-health.d.ts","sourceRoot":"","sources":["../../../src/adapters/connections/production-connection-health.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,gBAAgB,EAChB,2BAA2B,EAC3B,gBAAgB,EAEjB,MAAM,0BAA0B,CAAA;AAWjC,OAAO,KAAK,EACV,uBAAuB,EACvB,kCAAkC,EAClC,2BAA2B,EAC5B,MAAM,kCAAkC,CAAA;AAEzC,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,2BAA2B,EACpC,aAAa,EAAE,uBAAuB,GACrC,OAAO,CAAC,gBAAgB,CAAC,CA4B3B;AAED,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,2BAA2B,EACpC,KAAK,EAAE,MAAM,EACb,mBAAmB,EAAE,kCAAkC,GACtD,OAAO,CAAC,2BAA2B,CAAC,CAmEtC"}
+{"version":3,"file":"production-connection-health.d.ts","sourceRoot":"","sources":["../../../src/adapters/connections/production-connection-health.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,gBAAgB,EAChB,2BAA2B,EAC3B,gBAAgB,EAEjB,MAAM,0BAA0B,CAAA;AAWjC,OAAO,KAAK,EACV,uBAAuB,EACvB,kCAAkC,EAClC,2BAA2B,EAC5B,MAAM,kCAAkC,CAAA;AAGzC,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,2BAA2B,EACpC,aAAa,EAAE,uBAAuB,GACrC,OAAO,CAAC,gBAAgB,CAAC,CA6B3B;AAED,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,2BAA2B,EACpC,KAAK,EAAE,MAAM,EACb,mBAAmB,EAAE,kCAAkC,GACtD,OAAO,CAAC,2BAA2B,CAAC,CAoEtC"}

package/dist/adapters/connections/production-connection-health.js

@@ -4,6 +4,7 @@ import { cliBridgeModelValidationRequest } from './cli-bridge-model-validation.j
 import { readConnectionCredential } from './production-connection-credentials.js';
 import { appendHealthPath, connectionEndpoint, normalizeCliBridgeRuntimeBaseUrl, stripCliBridgeVersion, } from './production-connection-endpoints.js';
 import { createTangleSandboxClient } from './production-connection-providers.js';
+import { tangleRouterClientHeaders } from './tangle-router-client.js';
 export async function healthForConnection(record, options, healthOptions) {
     const checkedAt = (healthOptions.now ?? options.now ?? nowIso)();
     try {
@@ -16,7 +17,7 @@ export async function healthForConnection(record, options, healthOptions) {
         const healthUrl = record.kind === 'cli-bridge'
             ? appendHealthPath(stripCliBridgeVersion(endpoint))
             : appendHealthPath(endpoint);
-        return await probeHttpHealth(healthUrl, credential, checkedAt, options.fetch, healthOptions.signal, record.kind === 'cli-bridge' ? stripCliBridgeVersion(endpoint) : undefined);
+        return await probeHttpHealth(healthUrl, credential, checkedAt, options.fetch, healthOptions.signal, record.kind === 'cli-bridge' ? stripCliBridgeVersion(endpoint) : undefined, record.kind === 'tangle-inference' ? tangleRouterClientHeaders() : {});
     }
     catch (error) {
         return healthFromError(error, checkedAt);
@@ -78,6 +79,7 @@ export async function verifyModelForConnection(record, options, model, verificat
                 Accept: 'application/json',
                 'Content-Type': 'application/json',
                 ...(credential ? { Authorization: `Bearer ${credential}` } : {}),
+                ...(record.kind === 'tangle-inference' ? tangleRouterClientHeaders() : {}),
             },
             body: JSON.stringify(requestBody),
             ...(verificationOptions.signal ? { signal: verificationOptions.signal } : {}),
@@ -126,7 +128,7 @@ async function probeSandboxHealth(client, checkedAt, signal) {
         message: 'The published sandbox client exposes no health operation',
     };
 }
-async function probeHttpHealth(url, credential, checkedAt, fetcher, signal, cliBridgeEndpoint) {
+async function probeHttpHealth(url, credential, checkedAt, fetcher, signal, cliBridgeEndpoint, clientHeaders = {}) {
     const request = fetcher ?? globalThis.fetch;
     if (typeof request !== 'function') {
         return { status: 'unreachable', checkedAt, message: 'HTTP health checks are unavailable' };
@@ -137,6 +139,7 @@ async function probeHttpHealth(url, credential, checkedAt, fetcher, signal, cliB
             headers: {
                 Accept: 'application/json',
                 ...(credential ? { Authorization: `Bearer ${credential}` } : {}),
+                ...clientHeaders,
             },
             ...(signal ? { signal } : {}),
         });
@@ -177,7 +180,8 @@ function healthFromError(error, checkedAt) {
         if (error.code === 'CONNECTION_CREDENTIAL_REQUIRED' ||
             error.code === 'CONNECTION_CREDENTIAL_REF_UNMAPPED' ||
             error.code === 'CONNECTION_CREDENTIAL_UNAVAILABLE' ||
-            error.code === 'CONNECTION_CREDENTIAL_INVALID') {
+            error.code === 'CONNECTION_CREDENTIAL_INVALID' ||
+            error.code === 'CONNECTION_CREDENTIAL_REAUTH_REQUIRED') {
             return {
                 status: 'unauthorized',
                 checkedAt,
@@ -246,7 +250,8 @@ function modelVerificationFromError(model, checkedAt, error) {
         if (error.code === 'CONNECTION_CREDENTIAL_REQUIRED' ||
             error.code === 'CONNECTION_CREDENTIAL_REF_UNMAPPED' ||
             error.code === 'CONNECTION_CREDENTIAL_UNAVAILABLE' ||
-            error.code === 'CONNECTION_CREDENTIAL_INVALID') {
+            error.code === 'CONNECTION_CREDENTIAL_INVALID' ||
+            error.code === 'CONNECTION_CREDENTIAL_REAUTH_REQUIRED') {
             return {
                 model,
                 status: 'unauthorized',

package/dist/adapters/connections/production-connection-health.js.map

@@ -1 +1 @@
-{"version":3,"file":"production-connection-health.js","sourceRoot":"","sources":["../../../src/adapters/connections/production-connection-health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAOhE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAA;AAC7D,OAAO,EAAE,+BAA+B,EAAE,MAAM,kCAAkC,CAAA;AAClF,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAA;AACjF,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,gCAAgC,EAChC,qBAAqB,GACtB,MAAM,sCAAsC,CAAA;AAC7C,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAA;AAOhF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAwB,EACxB,OAAoC,EACpC,aAAsC;IAEtC,MAAM,SAAS,GAAG,CAAC,aAAa,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,EAAE,CAAA;IAChE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QACpD,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,CAAC,MAAM,yBAAyB,CAC7C,MAAM,EACN,OAAO,EACP,aAAa,CAAC,MAAM,CACrB,CAAwB,CAAA;YACzB,OAAO,MAAM,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;QAC1E,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;QAC5E,MAAM,SAAS,GACb,MAAM,CAAC,IAAI,KAAK,YAAY;YAC1B,CAAC,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;YACnD,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAA;QAChC,OAAO,MAAM,eAAe,CAC1B,SAAS,EACT,UAAU,EACV,SAAS,EACT,OAAO,CAAC,KAAK,EACb,aAAa,CAAC,MAAM,EACpB,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAC3E,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,eAAe,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;IAC1C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAAwB,EACxB,OAAoC,EACpC,KAAa,EACb,mBAAuD;IAEvD,MAAM,SAAS,GAAG,CAAC,mBAAmB,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,EAAE,CAAA;IACtE,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IACpC,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO;YACL,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,YAAY;YACpB,SAAS;YACT,OAAO,EAAE,kDAAkD;SAC5D,CAAA;IACH,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACrC,OAAO;YACL,KAAK,EAAE,eAAe;YACtB,MAAM,EAAE,YAAY;YACpB,SAAS;YACT,OAAO,EAAE,6DAA6D;SACvE,CAAA;IACH,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,mBAAmB,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9E,OAAO;YACL,KAAK,EAAE,eAAe;YACtB,MAAM,EAAE,YAAY;YACpB,SAAS;YACT,OAAO,EAAE,kEAAkE;SAC5E,CAAA;IACH,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QACpD,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;QAC5E,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAA;QACjD,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;YAClC,OAAO;gBACL,KAAK,EAAE,eAAe;gBACtB,MAAM,EAAE,aAAa;gBACrB,SAAS;gBACT,OAAO,EAAE,mDAAmD;aAC7D,CAAA;QACH,CAAC;QACD,MAAM,OAAO,GACX,MAAM,CAAC,IAAI,KAAK,YAAY;YAC1B,CAAC,CAAC,GAAG,gCAAgC,CAAC,QAAQ,CAAC,mBAAmB;YAClE,CAAC,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAA;QACzD,MAAM,WAAW,GACf,MAAM,CAAC,IAAI,KAAK,YAAY;YAC1B,CAAC,CAAC,+BAA+B,CAAC,mBAAmB,CAAC,OAAO,IAAI,EAAE,CAAC;YACpE,CAAC,CAAC;gBACE,KAAK,EAAE,eAAe;gBACtB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC;gBACtF,MAAM,EAAE,KAAK;gBACb,UAAU,EAAE,CAAC;aACd,CAAA;QACP,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE;YACtC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,kBAAkB;gBAClC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjE;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;YACjC,GAAG,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9E,CAAC,CAAA;QACF,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;QAC1D,OAAO,6BAA6B,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,CAAC,CAAA;IACjG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,0BAA0B,CAAC,eAAe,EAAE,SAAS,EAAE,KAAK,CAAC,CAAA;IACtE,CAAC;AACH,CAAC;AAOD,KAAK,UAAU,kBAAkB,CAC/B,MAA2B,EAC3B,SAAsB,EACtB,MAAoB;IAEpB,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE;gBAC7C,MAAM,EAAE,KAAK;gBACb,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9B,CAAC,CAAA;YACF,OAAO,gBAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,MAAM,EAAE,aAAa;gBACrB,SAAS;gBACT,OAAO,EAAE,yCAAyC;aACnD,CAAA;QACH,CAAC;IACH,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC5B,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE;gBAClC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAA;QAC9F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,MAAM,EAAE,aAAa;gBACrB,SAAS;gBACT,OAAO,EAAE,yCAAyC;aACnD,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO;QACL,MAAM,EAAE,cAAc;QACtB,SAAS;QACT,OAAO,EAAE,0DAA0D;KACpE,CAAA;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,GAAW,EACX,UAA8B,EAC9B,SAAsB,EACtB,OAAiC,EACjC,MAAoB,EACpB,iBAA0B;IAE1B,MAAM,OAAO,GAAG,OAAO,IAAI,UAAU,CAAC,KAAK,CAAA;IAC3C,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;QAClC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAA;IAC5F,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;YAClC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjE;YACD,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B,CAAC,CAAA;QACF,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;YAClD,OAAO,oBAAoB,CAAC,iBAAiB,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,MAAM,CAAA;QACzF,CAAC;QACD,OAAO,gBAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAA;IACzF,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc,EAAE,SAAsB;IAC9D,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAA;IAC1E,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACrC,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAA;IACjG,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,SAAS;YACT,OAAO,EAAE,8CAA8C;SACxD,CAAA;IACH,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;QACxE,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,SAAS;YACT,OAAO,EAAE,gDAAgD;SAC1D,CAAA;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAA;AAClG,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,SAAsB;IAC7D,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;QACrC,IACE,KAAK,CAAC,IAAI,KAAK,gCAAgC;YAC/C,KAAK,CAAC,IAAI,KAAK,oCAAoC;YACnD,KAAK,CAAC,IAAI,KAAK,mCAAmC;YAClD,KAAK,CAAC,IAAI,KAAK,+BAA+B,EAC9C,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,cAAc;gBACtB,SAAS;gBACT,OAAO,EAAE,+CAA+C;aACzD,CAAA;QACH,CAAC;QACD,IACE,KAAK,CAAC,IAAI,KAAK,8BAA8B;YAC7C,KAAK,CAAC,IAAI,KAAK,6BAA6B;YAC5C,KAAK,CAAC,IAAI,KAAK,8BAA8B,EAC7C,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAA;QAC7F,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAA;AAC5F,CAAC;AAED,SAAS,6BAA6B,CACpC,KAAa,EACb,UAAkB,EAClB,IAAY,EACZ,SAAsB;IAEtB,IAAI,UAAU,IAAI,GAAG,IAAI,UAAU,GAAG,GAAG,EAAE,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,CAAA;IACzE,CAAC;IACD,IAAI,UAAU,KAAK,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,OAAO;YACL,KAAK;YACL,MAAM,EAAE,gBAAgB;YACxB,SAAS;YACT,IAAI,EAAE,gBAAgB;YACtB,UAAU,EAAE,UAAU;YACtB,OAAO,EAAE,yBAAyB,KAAK,0FAA0F;SAClI,CAAA;IACH,CAAC;IACD,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;QAC7C,OAAO;YACL,KAAK;YACL,MAAM,EAAE,cAAc;YACtB,SAAS;YACT,UAAU,EAAE,UAAU;YACtB,OAAO,EAAE,iCAAiC,KAAK,sCAAsC;SACtF,CAAA;IACH,CAAC;IACD,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO;YACL,KAAK;YACL,MAAM,EAAE,cAAc;YACtB,SAAS;YACT,UAAU,EAAE,UAAU;YACtB,OAAO,EAAE,qCAAqC,KAAK,eAAe;SACnE,CAAA;IACH,CAAC;IACD,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,GAAG,IAAI,CAAC,UAAU,IAAI,GAAG,IAAI,UAAU,GAAG,GAAG,CAAC,EAAE,CAAC;QACxF,OAAO;YACL,KAAK;YACL,MAAM,EAAE,cAAc;YACtB,SAAS;YACT,UAAU,EAAE,UAAU;YACtB,OAAO,EAAE,mEAAmE,KAAK,EAAE;SACpF,CAAA;IACH,CAAC;IACD,OAAO;QACL,KAAK;QACL,MAAM,EAAE,aAAa;QACrB,SAAS;QACT,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,kEAAkE,KAAK,EAAE;KACnF,CAAA;AACH,CAAC;AAED,SAAS,0BAA0B,CACjC,KAAa,EACb,SAAsB,EACtB,KAAc;IAEd,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;QACrC,IACE,KAAK,CAAC,IAAI,KAAK,gCAAgC;YAC/C,KAAK,CAAC,IAAI,KAAK,oCAAoC;YACnD,KAAK,CAAC,IAAI,KAAK,mCAAmC;YAClD,KAAK,CAAC,IAAI,KAAK,+BAA+B,EAC9C,CAAC;YACD,OAAO;gBACL,KAAK;gBACL,MAAM,EAAE,cAAc;gBACtB,SAAS;gBACT,OAAO,EAAE,sEAAsE;aAChF,CAAA;QACH,CAAC;QACD,IACE,KAAK,CAAC,IAAI,KAAK,8BAA8B;YAC7C,KAAK,CAAC,IAAI,KAAK,6BAA6B;YAC5C,KAAK,CAAC,IAAI,KAAK,8BAA8B,EAC7C,CAAC;YACD,OAAO;gBACL,KAAK;gBACL,MAAM,EAAE,cAAc;gBACtB,SAAS;gBACT,OAAO,EAAE,2DAA2D;aACrE,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO;QACL,KAAK;QACL,MAAM,EAAE,aAAa;QACrB,SAAS;QACT,OAAO,EAAE,+DAA+D;KACzE,CAAA;AACH,CAAC;AAED,SAAS,MAAM;IACb,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;AACjC,CAAC"}
+{"version":3,"file":"production-connection-health.js","sourceRoot":"","sources":["../../../src/adapters/connections/production-connection-health.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAOhE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAA;AAC7D,OAAO,EAAE,+BAA+B,EAAE,MAAM,kCAAkC,CAAA;AAClF,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAA;AACjF,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,gCAAgC,EAChC,qBAAqB,GACtB,MAAM,sCAAsC,CAAA;AAC7C,OAAO,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAA;AAMhF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAA;AAErE,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAwB,EACxB,OAAoC,EACpC,aAAsC;IAEtC,MAAM,SAAS,GAAG,CAAC,aAAa,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,EAAE,CAAA;IAChE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QACpD,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,CAAC,MAAM,yBAAyB,CAC7C,MAAM,EACN,OAAO,EACP,aAAa,CAAC,MAAM,CACrB,CAAwB,CAAA;YACzB,OAAO,MAAM,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;QAC1E,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;QAC5E,MAAM,SAAS,GACb,MAAM,CAAC,IAAI,KAAK,YAAY;YAC1B,CAAC,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;YACnD,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAA;QAChC,OAAO,MAAM,eAAe,CAC1B,SAAS,EACT,UAAU,EACV,SAAS,EACT,OAAO,CAAC,KAAK,EACb,aAAa,CAAC,MAAM,EACpB,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,EAC1E,MAAM,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAAC,yBAAyB,EAAE,CAAC,CAAC,CAAC,EAAE,CACtE,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,eAAe,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;IAC1C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAAwB,EACxB,OAAoC,EACpC,KAAa,EACb,mBAAuD;IAEvD,MAAM,SAAS,GAAG,CAAC,mBAAmB,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,EAAE,CAAA;IACtE,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IACpC,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO;YACL,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,YAAY;YACpB,SAAS;YACT,OAAO,EAAE,kDAAkD;SAC5D,CAAA;IACH,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACrC,OAAO;YACL,KAAK,EAAE,eAAe;YACtB,MAAM,EAAE,YAAY;YACpB,SAAS;YACT,OAAO,EAAE,6DAA6D;SACvE,CAAA;IACH,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,mBAAmB,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9E,OAAO;YACL,KAAK,EAAE,eAAe;YACtB,MAAM,EAAE,YAAY;YACpB,SAAS;YACT,OAAO,EAAE,kEAAkE;SAC5E,CAAA;IACH,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QACpD,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;QAC5E,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAA;QACjD,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;YAClC,OAAO;gBACL,KAAK,EAAE,eAAe;gBACtB,MAAM,EAAE,aAAa;gBACrB,SAAS;gBACT,OAAO,EAAE,mDAAmD;aAC7D,CAAA;QACH,CAAC;QACD,MAAM,OAAO,GACX,MAAM,CAAC,IAAI,KAAK,YAAY;YAC1B,CAAC,CAAC,GAAG,gCAAgC,CAAC,QAAQ,CAAC,mBAAmB;YAClE,CAAC,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAA;QACzD,MAAM,WAAW,GACf,MAAM,CAAC,IAAI,KAAK,YAAY;YAC1B,CAAC,CAAC,+BAA+B,CAAC,mBAAmB,CAAC,OAAO,IAAI,EAAE,CAAC;YACpE,CAAC,CAAC;gBACE,KAAK,EAAE,eAAe;gBACtB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC;gBACtF,MAAM,EAAE,KAAK;gBACb,UAAU,EAAE,CAAC;aACd,CAAA;QACP,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE;YACtC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,kBAAkB;gBAClC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAAC,yBAAyB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3E;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;YACjC,GAAG,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9E,CAAC,CAAA;QACF,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;QAC1D,OAAO,6BAA6B,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,CAAC,CAAA;IACjG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,0BAA0B,CAAC,eAAe,EAAE,SAAS,EAAE,KAAK,CAAC,CAAA;IACtE,CAAC;AACH,CAAC;AAOD,KAAK,UAAU,kBAAkB,CAC/B,MAA2B,EAC3B,SAAsB,EACtB,MAAoB;IAEpB,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE;gBAC7C,MAAM,EAAE,KAAK;gBACb,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9B,CAAC,CAAA;YACF,OAAO,gBAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,MAAM,EAAE,aAAa;gBACrB,SAAS;gBACT,OAAO,EAAE,yCAAyC;aACnD,CAAA;QACH,CAAC;IACH,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC5B,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE;gBAClC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAA;QAC9F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,MAAM,EAAE,aAAa;gBACrB,SAAS;gBACT,OAAO,EAAE,yCAAyC;aACnD,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO;QACL,MAAM,EAAE,cAAc;QACtB,SAAS;QACT,OAAO,EAAE,0DAA0D;KACpE,CAAA;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,GAAW,EACX,UAA8B,EAC9B,SAAsB,EACtB,OAAiC,EACjC,MAAoB,EACpB,iBAA0B,EAC1B,aAAa,GAAqC,EAAE;IAEpD,MAAM,OAAO,GAAG,OAAO,IAAI,UAAU,CAAC,KAAK,CAAA;IAC3C,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;QAClC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAA;IAC5F,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;YAClC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,GAAG,aAAa;aACjB;YACD,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B,CAAC,CAAA;QACF,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;YAClD,OAAO,oBAAoB,CAAC,iBAAiB,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,MAAM,CAAA;QACzF,CAAC;QACD,OAAO,gBAAgB,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAA;IACzF,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc,EAAE,SAAsB;IAC9D,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAA;IAC1E,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACrC,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAA;IACjG,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,SAAS;YACT,OAAO,EAAE,8CAA8C;SACxD,CAAA;IACH,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;QACxE,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,SAAS;YACT,OAAO,EAAE,gDAAgD;SAC1D,CAAA;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAA;AAClG,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,SAAsB;IAC7D,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;QACrC,IACE,KAAK,CAAC,IAAI,KAAK,gCAAgC;YAC/C,KAAK,CAAC,IAAI,KAAK,oCAAoC;YACnD,KAAK,CAAC,IAAI,KAAK,mCAAmC;YAClD,KAAK,CAAC,IAAI,KAAK,+BAA+B;YAC9C,KAAK,CAAC,IAAI,KAAK,uCAAuC,EACtD,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,cAAc;gBACtB,SAAS;gBACT,OAAO,EAAE,+CAA+C;aACzD,CAAA;QACH,CAAC;QACD,IACE,KAAK,CAAC,IAAI,KAAK,8BAA8B;YAC7C,KAAK,CAAC,IAAI,KAAK,6BAA6B;YAC5C,KAAK,CAAC,IAAI,KAAK,8BAA8B,EAC7C,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAA;QAC7F,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAA;AAC5F,CAAC;AAED,SAAS,6BAA6B,CACpC,KAAa,EACb,UAAkB,EAClB,IAAY,EACZ,SAAsB;IAEtB,IAAI,UAAU,IAAI,GAAG,IAAI,UAAU,GAAG,GAAG,EAAE,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,CAAA;IACzE,CAAC;IACD,IAAI,UAAU,KAAK,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,OAAO;YACL,KAAK;YACL,MAAM,EAAE,gBAAgB;YACxB,SAAS;YACT,IAAI,EAAE,gBAAgB;YACtB,UAAU,EAAE,UAAU;YACtB,OAAO,EAAE,yBAAyB,KAAK,0FAA0F;SAClI,CAAA;IACH,CAAC;IACD,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;QAC7C,OAAO;YACL,KAAK;YACL,MAAM,EAAE,cAAc;YACtB,SAAS;YACT,UAAU,EAAE,UAAU;YACtB,OAAO,EAAE,iCAAiC,KAAK,sCAAsC;SACtF,CAAA;IACH,CAAC;IACD,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO;YACL,KAAK;YACL,MAAM,EAAE,cAAc;YACtB,SAAS;YACT,UAAU,EAAE,UAAU;YACtB,OAAO,EAAE,qCAAqC,KAAK,eAAe;SACnE,CAAA;IACH,CAAC;IACD,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,GAAG,IAAI,CAAC,UAAU,IAAI,GAAG,IAAI,UAAU,GAAG,GAAG,CAAC,EAAE,CAAC;QACxF,OAAO;YACL,KAAK;YACL,MAAM,EAAE,cAAc;YACtB,SAAS;YACT,UAAU,EAAE,UAAU;YACtB,OAAO,EAAE,mEAAmE,KAAK,EAAE;SACpF,CAAA;IACH,CAAC;IACD,OAAO;QACL,KAAK;QACL,MAAM,EAAE,aAAa;QACrB,SAAS;QACT,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,kEAAkE,KAAK,EAAE;KACnF,CAAA;AACH,CAAC;AAED,SAAS,0BAA0B,CACjC,KAAa,EACb,SAAsB,EACtB,KAAc;IAEd,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;QACrC,IACE,KAAK,CAAC,IAAI,KAAK,gCAAgC;YAC/C,KAAK,CAAC,IAAI,KAAK,oCAAoC;YACnD,KAAK,CAAC,IAAI,KAAK,mCAAmC;YAClD,KAAK,CAAC,IAAI,KAAK,+BAA+B;YAC9C,KAAK,CAAC,IAAI,KAAK,uCAAuC,EACtD,CAAC;YACD,OAAO;gBACL,KAAK;gBACL,MAAM,EAAE,cAAc;gBACtB,SAAS;gBACT,OAAO,EAAE,sEAAsE;aAChF,CAAA;QACH,CAAC;QACD,IACE,KAAK,CAAC,IAAI,KAAK,8BAA8B;YAC7C,KAAK,CAAC,IAAI,KAAK,6BAA6B;YAC5C,KAAK,CAAC,IAAI,KAAK,8BAA8B,EAC7C,CAAC;YACD,OAAO;gBACL,KAAK;gBACL,MAAM,EAAE,cAAc;gBACtB,SAAS;gBACT,OAAO,EAAE,2DAA2D;aACrE,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO;QACL,KAAK;QACL,MAAM,EAAE,aAAa;QACrB,SAAS;QACT,OAAO,EAAE,+DAA+D;KACzE,CAAA;AACH,CAAC;AAED,SAAS,MAAM;IACb,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;AACjC,CAAC"}

package/dist/adapters/connections/production-connection-providers.d.ts

@@ -1,6 +1,19 @@
+import type { AgentWorkspaceBranchingProvider } from '@tangle-network/agent-interface';
+import type { AgentEnvironment, AgentEnvironmentProvider } from '@tangle-network/agent-interface/environment-provider';
 import { type SandboxClientLike } from '@tangle-network/agent-provider-tangle';
 import type { ConnectionRecord } from '../../domain/entities.js';
 import type { ConnectionCapabilityReport, ProductionConnectionOptions } from './production-connection-types.js';
 export declare function createTangleSandboxClient(record: ConnectionRecord, options: ProductionConnectionOptions, signal?: AbortSignal): Promise<SandboxClientLike>;
+/** Construct the selected Tangle provider without creating or retaining an environment. */
+export declare function createTangleEnvironmentProvider(record: ConnectionRecord, options: ProductionConnectionOptions, signal?: AbortSignal): Promise<AgentEnvironmentProvider>;
+/**
+ * Create a restart-safe source lookup without retaining a live environment.
+ *
+ * The provider constructs the source-scoped handle and owns every Sandbox call.
+ * Braid retains only this lazy factory, so restart recovery cannot use stale state.
+ */
+export declare function createTangleWorkspaceBranchingProvider(record: ConnectionRecord, options: ProductionConnectionOptions): AgentWorkspaceBranchingProvider;
+/** Reconstruct one provider environment for an independent workspace check. */
+export declare function getTangleSandboxEnvironment(record: ConnectionRecord, options: ProductionConnectionOptions, environmentId: string, signal?: AbortSignal): Promise<AgentEnvironment | null>;
 export declare function capabilitiesForConnection(record: ConnectionRecord, options: ProductionConnectionOptions): Promise<ConnectionCapabilityReport>;
 //# sourceMappingURL=production-connection-providers.d.ts.map

package/dist/adapters/connections/production-connection-providers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"production-connection-providers.d.ts","sourceRoot":"","sources":["../../../src/adapters/connections/production-connection-providers.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,uCAAuC,CAAA;AAG9C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAIhE,OAAO,KAAK,EAEV,0BAA0B,EAG1B,2BAA2B,EAC5B,MAAM,kCAAkC,CAAA;AAGzC,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,2BAA2B,EACpC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,iBAAiB,CAAC,CAkB5B;AAED,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,0BAA0B,CAAC,CAsCrC"}
+{"version":3,"file":"production-connection-providers.d.ts","sourceRoot":"","sources":["../../../src/adapters/connections/production-connection-providers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,+BAA+B,EAChC,MAAM,iCAAiC,CAAA;AACxC,OAAO,KAAK,EACV,gBAAgB,EAEhB,wBAAwB,EACzB,MAAM,sDAAsD,CAAA;AAE7D,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,uCAAuC,CAAA;AAG9C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAKhE,OAAO,KAAK,EAEV,0BAA0B,EAG1B,2BAA2B,EAC5B,MAAM,kCAAkC,CAAA;AAGzC,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,2BAA2B,EACpC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,iBAAiB,CAAC,CAkB5B;AAED,2FAA2F;AAC3F,wBAAsB,+BAA+B,CACnD,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,2BAA2B,EACpC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,wBAAwB,CAAC,CAUnC;AAED;;;;;GAKG;AACH,wBAAgB,sCAAsC,CACpD,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,2BAA2B,GACnC,+BAA+B,CAYjC;AAED,+EAA+E;AAC/E,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,2BAA2B,EACpC,aAAa,EAAE,MAAM,EACrB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAIlC;AAED,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,0BAA0B,CAAC,CA0DrC"}

package/dist/adapters/connections/production-connection-providers.js

@@ -3,6 +3,7 @@ import { createTangleProvider, defaultTangleSandboxCapabilities, } from '@tangle
 import { Sandbox } from '@tangle-network/sandbox';
 import { ConnectionError } from '../../app/connection-errors.js';
 import { environmentSupportsInteractionResponse } from '../../ports/execution.js';
+import { nitroVerifiersForConnection } from './nitro-confidential-attestation.js';
 import { readConnectionCredential } from './production-connection-credentials.js';
 import { connectionEndpoint } from './production-connection-endpoints.js';
 import { supportsTangleRetainedControlLookup } from './tangle-retained-control-lookup.js';
@@ -22,6 +23,42 @@ export async function createTangleSandboxClient(record, options, signal) {
     // objects are structurally compatible for the provider methods we consume.
     return new Sandbox({ baseUrl: endpoint, apiKey });
 }
+/** Construct the selected Tangle provider without creating or retaining an environment. */
+export async function createTangleEnvironmentProvider(record, options, signal) {
+    const client = await createTangleSandboxClient(record, options, signal);
+    const confidential = nitroVerifiersForConnection(record, options);
+    return createTangleProvider({
+        client,
+        name: 'tangle-sandbox',
+        ...(confidential?.tangle === undefined
+            ? {}
+            : { confidentialAttestationVerifier: confidential.tangle }),
+    });
+}
+/**
+ * Create a restart-safe source lookup without retaining a live environment.
+ *
+ * The provider constructs the source-scoped handle and owns every Sandbox call.
+ * Braid retains only this lazy factory, so restart recovery cannot use stale state.
+ */
+export function createTangleWorkspaceBranchingProvider(record, options) {
+    return Object.freeze({
+        async forEnvironment(sourceEnvironmentId, operation) {
+            const provider = await createTangleEnvironmentProvider(record, options, operation?.signal);
+            const branching = provider.workspaceBranching;
+            if (branching === undefined)
+                return null;
+            return branching.forEnvironment(sourceEnvironmentId, operation);
+        },
+    });
+}
+/** Reconstruct one provider environment for an independent workspace check. */
+export async function getTangleSandboxEnvironment(record, options, environmentId, signal) {
+    const provider = await createTangleEnvironmentProvider(record, options, signal);
+    if (provider.get === undefined)
+        return null;
+    return provider.get(environmentId, signal === undefined ? undefined : { signal });
+}
 export async function capabilitiesForConnection(record, options) {
     switch (record.kind) {
         case 'cli-bridge': {
@@ -42,9 +79,28 @@ export async function capabilitiesForConnection(record, options) {
                 list: false,
             });
         case 'tangle-sandbox': {
-            const reported = options.sandboxClient
-                ? await createTangleProvider({ client: options.sandboxClient }).capabilities()
-                : defaultTangleSandboxCapabilities();
+            const confidential = nitroVerifiersForConnection(record, options);
+            const reported = options.sandboxClient === undefined
+                ? {
+                    ...defaultTangleSandboxCapabilities(),
+                    branching: {
+                        checkpoint: false,
+                        fork: false,
+                        confidential: false,
+                        retrySafe: false,
+                        lookup: false,
+                        cleanup: false,
+                    },
+                    confidential: false,
+                }
+                : await createTangleProvider({
+                    client: options.sandboxClient,
+                    ...(confidential?.tangle === undefined
+                        ? {}
+                        : {
+                            confidentialAttestationVerifier: confidential.tangle,
+                        }),
+                }).capabilities();
             const environment = tangleConnectionCapabilities(record, reported, options.tangleRetainedControlLookup !== undefined ||
                 options.sandboxClient === undefined ||
                 supportsTangleRetainedControlLookup(options.sandboxClient));

package/dist/adapters/connections/production-connection-providers.js.map

@@ -1 +1 @@
-{"version":3,"file":"production-connection-providers.js","sourceRoot":"","sources":["../../../src/adapters/connections/production-connection-providers.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAA;AACnF,OAAO,EACL,oBAAoB,EACpB,gCAAgC,GAEjC,MAAM,uCAAuC,CAAA;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAEhE,OAAO,EAAE,sCAAsC,EAAE,MAAM,0BAA0B,CAAA;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAA;AACjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAA;AAQzE,OAAO,EAAE,mCAAmC,EAAE,MAAM,qCAAqC,CAAA;AAEzF,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAwB,EACxB,OAAoC,EACpC,MAAoB;IAEpB,IAAI,OAAO,CAAC,aAAa;QAAE,OAAO,OAAO,CAAC,aAAa,CAAA;IACvD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACpD,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;IACxE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,eAAe,CACvB,gCAAgC,EAChC,2CAA2C,EAC3C,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,CAC5B,CAAA;IACH,CAAC;IACD,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IAClG,CAAC;IACD,yEAAyE;IACzE,4EAA4E;IAC5E,2EAA2E;IAC3E,OAAO,IAAI,OAAO,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAiC,CAAA;AACnF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAwB,EACxB,OAAoC;IAEpC,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,YAAY,EAAE,CAAC;YAClB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;YACpD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAA;YAC/D,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,CAAA;YACjD,OAAO,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE;gBACnD,MAAM,EAAE,OAAO,QAAQ,CAAC,MAAM,KAAK,UAAU;gBAC7C,GAAG,EAAE,OAAO,QAAQ,CAAC,GAAG,KAAK,UAAU;gBACvC,IAAI,EAAE,OAAO,QAAQ,CAAC,IAAI,KAAK,UAAU;aAC1C,CAAC,CAAA;QACJ,CAAC;QACD,KAAK,kBAAkB;YACrB,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;YACnC,OAAO,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE;gBACjD,MAAM,EAAE,IAAI;gBACZ,GAAG,EAAE,KAAK;gBACV,IAAI,EAAE,KAAK;aACZ,CAAC,CAAA;QACJ,KAAK,gBAAgB,EAAE,CAAC;YACtB,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa;gBACpC,CAAC,CAAC,MAAM,oBAAoB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,YAAY,EAAE;gBAC9E,CAAC,CAAC,gCAAgC,EAAE,CAAA;YACtC,MAAM,WAAW,GAAG,4BAA4B,CAC9C,MAAM,EACN,QAAQ,EACR,OAAO,CAAC,2BAA2B,KAAK,SAAS;gBAC/C,OAAO,CAAC,aAAa,KAAK,SAAS;gBACnC,mCAAmC,CAAC,OAAO,CAAC,aAAa,CAAC,CAC7D,CAAA;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,CAAA;YACpC,OAAO,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE;gBACvD,MAAM,EAAE,IAAI;gBACZ,GAAG,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,GAAG,KAAK,UAAU;gBACxE,IAAI,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU;aAC3E,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CACnC,MAAwB,EACxB,QAAsC,EACtC,wBAAwB,GAAG,KAAK;IAEhC,IAAI,MAAM,CAAC,eAAe,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QACpD,OAAO;YACL,GAAG,QAAQ;YACX,SAAS,EAAE,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;YAClE,QAAQ,EAAE,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;SAClF,CAAA;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe,CAAA;IACzC,MAAM,aAAa,GACjB,wBAAwB;QACxB,QAAQ,EAAE,gBAAgB,KAAK,IAAI;QACnC,QAAQ,CAAC,cAAc,KAAK,IAAI;QAChC,QAAQ,CAAC,aAAa,KAAK,IAAI;QAC/B,QAAQ,CAAC,uBAAuB,KAAK,IAAI;QACzC,QAAQ,CAAC,SAAS,CAAC,MAAM;QACzB,QAAQ,CAAC,SAAS,CAAC,MAAM;QACzB,QAAQ,CAAC,SAAS,CAAC,eAAe,CAAA;IACpC,OAAO;QACL,GAAG,QAAQ;QACX,SAAS,EAAE;YACT,GAAG,QAAQ,CAAC,SAAS;YACrB,IAAI,EAAE,aAAa,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI;YAC9C,MAAM,EAAE,aAAa,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM;YAClD,MAAM,EAAE,aAAa,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM;YAClD,eAAe,EAAE,aAAa,IAAI,QAAQ,CAAC,SAAS,CAAC,eAAe;SACrE;QACD,QAAQ,EAAE,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;KAClF,CAAA;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAwB,EACxB,OAAiD,EACjD,WAAqD,EACrD,eAA0C;IAE1C,MAAM,SAAS,GAAG,WAAW,EAAE,SAAS,IAAI;QAC1C,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,KAAK;QACb,eAAe,EAAE,IAAI;KACtB,CAAA;IACD,MAAM,QAAQ,GAAG,WAAW,EAAE,QAAQ,IAAI;QACxC,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,KAAK;QACX,QAAQ,EAAE,KAAK;KAChB,CAAA;IACD,MAAM,OAAO,GAAkC;QAC7C,OAAO;QACP,SAAS;QACT,QAAQ;QACR,YAAY,EAAE;YACZ,SAAS,EAAE,WAAW,EAAE,YAAY,KAAK,SAAS;YAClD,OAAO,EAAE,sCAAsC,CAAC,WAAW,CAAC;SAC7D;KACF,CAAA;IACD,MAAM,OAAO,GAAgD;QAC3D,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,IAAI,eAAe,CAAC,MAAM;QACxD,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM;QAChC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM;QAChC,kBAAkB,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ;QAC7C,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;QACtC,kBAAkB,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ;QAC7C,UAAU,EAAE,WAAW,EAAE,SAAS,CAAC,UAAU,KAAK,IAAI;QACtD,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,IAAI,KAAK,IAAI;QAC1C,SAAS,EAAE,WAAW,EAAE,SAAS,KAAK,IAAI;QAC1C,KAAK,EAAE,WAAW,EAAE,KAAK,KAAK,IAAI;QAClC,qBAAqB,EAAE,OAAO,CAAC,YAAY,CAAC,OAAO;KACpD,CAAA;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC,EAAE;QACvB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;YACrB,GAAG,OAAO;YACV,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;YAC3C,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;YACzC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC;SAClD,CAAC;QACF,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC;QAC/C,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;KAChC,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"production-connection-providers.js","sourceRoot":"","sources":["../../../src/adapters/connections/production-connection-providers.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,uBAAuB,EAAE,MAAM,2CAA2C,CAAA;AACnF,OAAO,EACL,oBAAoB,EACpB,gCAAgC,GAEjC,MAAM,uCAAuC,CAAA;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAEhE,OAAO,EAAE,sCAAsC,EAAE,MAAM,0BAA0B,CAAA;AACjF,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAA;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAA;AACjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAA;AAQzE,OAAO,EAAE,mCAAmC,EAAE,MAAM,qCAAqC,CAAA;AAEzF,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAwB,EACxB,OAAoC,EACpC,MAAoB;IAEpB,IAAI,OAAO,CAAC,aAAa;QAAE,OAAO,OAAO,CAAC,aAAa,CAAA;IACvD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACpD,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;IACxE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,eAAe,CACvB,gCAAgC,EAChC,2CAA2C,EAC3C,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,EAAE,CAC5B,CAAA;IACH,CAAC;IACD,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IAClG,CAAC;IACD,yEAAyE;IACzE,4EAA4E;IAC5E,2EAA2E;IAC3E,OAAO,IAAI,OAAO,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAiC,CAAA;AACnF,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,MAAwB,EACxB,OAAoC,EACpC,MAAoB;IAEpB,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;IACvE,MAAM,YAAY,GAAG,2BAA2B,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACjE,OAAO,oBAAoB,CAAC;QAC1B,MAAM;QACN,IAAI,EAAE,gBAAgB;QACtB,GAAG,CAAC,YAAY,EAAE,MAAM,KAAK,SAAS;YACpC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,+BAA+B,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC;KAC9D,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sCAAsC,CACpD,MAAwB,EACxB,OAAoC;IAEpC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,CAAC,cAAc,CAClB,mBAA2B,EAC3B,SAA6C;YAE7C,MAAM,QAAQ,GAAG,MAAM,+BAA+B,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;YAC1F,MAAM,SAAS,GAAG,QAAQ,CAAC,kBAAkB,CAAA;YAC7C,IAAI,SAAS,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAA;YACxC,OAAO,SAAS,CAAC,cAAc,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAA;QACjE,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,MAAwB,EACxB,OAAoC,EACpC,aAAqB,EACrB,MAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,+BAA+B,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;IAC/E,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IAC3C,OAAO,QAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;AACnF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAwB,EACxB,OAAoC;IAEpC,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,YAAY,EAAE,CAAC;YAClB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;YACpD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAA;YAC/D,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,CAAA;YACjD,OAAO,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE;gBACnD,MAAM,EAAE,OAAO,QAAQ,CAAC,MAAM,KAAK,UAAU;gBAC7C,GAAG,EAAE,OAAO,QAAQ,CAAC,GAAG,KAAK,UAAU;gBACvC,IAAI,EAAE,OAAO,QAAQ,CAAC,IAAI,KAAK,UAAU;aAC1C,CAAC,CAAA;QACJ,CAAC;QACD,KAAK,kBAAkB;YACrB,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;YACnC,OAAO,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE;gBACjD,MAAM,EAAE,IAAI;gBACZ,GAAG,EAAE,KAAK;gBACV,IAAI,EAAE,KAAK;aACZ,CAAC,CAAA;QACJ,KAAK,gBAAgB,EAAE,CAAC;YACtB,MAAM,YAAY,GAAG,2BAA2B,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;YACjE,MAAM,QAAQ,GACZ,OAAO,CAAC,aAAa,KAAK,SAAS;gBACjC,CAAC,CAAC;oBACE,GAAG,gCAAgC,EAAE;oBACrC,SAAS,EAAE;wBACT,UAAU,EAAE,KAAK;wBACjB,IAAI,EAAE,KAAK;wBACX,YAAY,EAAE,KAAK;wBACnB,SAAS,EAAE,KAAK;wBAChB,MAAM,EAAE,KAAK;wBACb,OAAO,EAAE,KAAK;qBACf;oBACD,YAAY,EAAE,KAAK;iBACpB;gBACH,CAAC,CAAC,MAAM,oBAAoB,CAAC;oBACzB,MAAM,EAAE,OAAO,CAAC,aAAa;oBAC7B,GAAG,CAAC,YAAY,EAAE,MAAM,KAAK,SAAS;wBACpC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC;4BACE,+BAA+B,EAAE,YAAY,CAAC,MAAM;yBACrD,CAAC;iBACP,CAAC,CAAC,YAAY,EAAE,CAAA;YACvB,MAAM,WAAW,GAAG,4BAA4B,CAC9C,MAAM,EACN,QAAQ,EACR,OAAO,CAAC,2BAA2B,KAAK,SAAS;gBAC/C,OAAO,CAAC,aAAa,KAAK,SAAS;gBACnC,mCAAmC,CAAC,OAAO,CAAC,aAAa,CAAC,CAC7D,CAAA;YACD,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,CAAA;YACpC,OAAO,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE;gBACvD,MAAM,EAAE,IAAI;gBACZ,GAAG,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,GAAG,KAAK,UAAU;gBACxE,IAAI,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU;aAC3E,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,4BAA4B,CACnC,MAAwB,EACxB,QAAsC,EACtC,wBAAwB,GAAG,KAAK;IAEhC,IAAI,MAAM,CAAC,eAAe,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QACpD,OAAO;YACL,GAAG,QAAQ;YACX,SAAS,EAAE,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;YAClE,QAAQ,EAAE,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;SAClF,CAAA;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe,CAAA;IACzC,MAAM,aAAa,GACjB,wBAAwB;QACxB,QAAQ,EAAE,gBAAgB,KAAK,IAAI;QACnC,QAAQ,CAAC,cAAc,KAAK,IAAI;QAChC,QAAQ,CAAC,aAAa,KAAK,IAAI;QAC/B,QAAQ,CAAC,uBAAuB,KAAK,IAAI;QACzC,QAAQ,CAAC,SAAS,CAAC,MAAM;QACzB,QAAQ,CAAC,SAAS,CAAC,MAAM;QACzB,QAAQ,CAAC,SAAS,CAAC,eAAe,CAAA;IACpC,OAAO;QACL,GAAG,QAAQ;QACX,SAAS,EAAE;YACT,GAAG,QAAQ,CAAC,SAAS;YACrB,IAAI,EAAE,aAAa,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI;YAC9C,MAAM,EAAE,aAAa,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM;YAClD,MAAM,EAAE,aAAa,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM;YAClD,eAAe,EAAE,aAAa,IAAI,QAAQ,CAAC,SAAS,CAAC,eAAe;SACrE;QACD,QAAQ,EAAE,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;KAClF,CAAA;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAwB,EACxB,OAAiD,EACjD,WAAqD,EACrD,eAA0C;IAE1C,MAAM,SAAS,GAAG,WAAW,EAAE,SAAS,IAAI;QAC1C,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,KAAK;QACb,eAAe,EAAE,IAAI;KACtB,CAAA;IACD,MAAM,QAAQ,GAAG,WAAW,EAAE,QAAQ,IAAI;QACxC,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,KAAK;QACX,QAAQ,EAAE,KAAK;KAChB,CAAA;IACD,MAAM,OAAO,GAAkC;QAC7C,OAAO;QACP,SAAS;QACT,QAAQ;QACR,YAAY,EAAE;YACZ,SAAS,EAAE,WAAW,EAAE,YAAY,KAAK,SAAS;YAClD,OAAO,EAAE,sCAAsC,CAAC,WAAW,CAAC;SAC7D;KACF,CAAA;IACD,MAAM,OAAO,GAAgD;QAC3D,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,IAAI,eAAe,CAAC,MAAM;QACxD,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM;QAChC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM;QAChC,kBAAkB,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ;QAC7C,eAAe,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;QACtC,kBAAkB,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ;QAC7C,UAAU,EAAE,WAAW,EAAE,SAAS,CAAC,UAAU,KAAK,IAAI;QACtD,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,IAAI,KAAK,IAAI;QAC1C,SAAS,EAAE,WAAW,EAAE,SAAS,KAAK,IAAI;QAC1C,KAAK,EAAE,WAAW,EAAE,KAAK,KAAK,IAAI;QAClC,qBAAqB,EAAE,OAAO,CAAC,YAAY,CAAC,OAAO;KACpD,CAAA;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC,EAAE;QACvB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;YACrB,GAAG,OAAO;YACV,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;YAC3C,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;YACzC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC;SAClD,CAAC;QACF,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC;QAC/C,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;KAChC,CAAC,CAAA;AACJ,CAAC"}