@zackbart/connecta 0.12.2 → 0.14.0

package/CHANGELOG.md

@@ -2,6 +2,330 @@
 
 All notable changes to this package are documented here.
 
+## 0.14.0 — 2026-08-03
+
+Connecta went from one maintained prebuilt connection to five. Stripe, Linear,
+Notion, and Cloudflare join Mixpanel behind `./providers/<name>`, and together
+they answer the question the Mixpanel connection left open: whether a
+maintained connection means anything more specific than a wrapper. Stripe and
+Linear proxy hosted MCP servers and spend their effort on what a transport
+cannot say — Stripe makes production-versus-sandbox a required declaration with
+no default and refuses a deployment whose API key contradicts it; Linear
+selects a read-only *endpoint* whose token cannot reach a write API, which is a
+stronger guarantee than any annotation. Notion and Cloudflare are hand-written
+`api()` surfaces, and they exist because shape is the problem rather than
+transport: a Notion page is tens of kilobytes of discriminated wrappers and
+rich-text runs around a few hundred bytes of meaning, and a generated
+Cloudflare wrapper exposed `arguments?: {}[]` in its compact schema and pushed
+the real parameter list into a documentation page an agent had to read before
+it could call anything. Fifteen and fourteen deliberate tools respectively,
+projected down to ids and plain values, with `raw: true` wherever the dropped
+detail can matter. None of the four adds a dependency — not to core, not as an
+optional peer, not in `devDependencies`. The whole set installs with nothing
+extra and none of it is reachable from the root entry.
+
+Nothing breaks. Every export is additive and lives behind its own subpath, no
+existing signature moved, and a deployment that configures none of the new
+providers can upgrade with a version bump and read no further. Two changes are
+worth knowing about anyway. Vetted annotations on a prebuilt connection no
+longer argue with an explicit downstream annotation in *either* direction: a
+name the downstream explicitly marks `readOnlyHint: true` that no release has
+classified now stays callable from `execute_code` instead of failing closed
+onto the approval path. Silence on an unclassified name still means not
+read-only, so catalog drift is unaffected — this only moves names the
+downstream actually spoke about. The one branch that still outranks the
+downstream is a name a release reviewed and filed destructive: a
+`Delete-Dashboard` arriving with `readOnlyHint: true` is a downstream bug
+rather than news, and stays behind `call_destructive_tool`. That asymmetry is
+deliberate for now and tracked as an open question (#315). The other change is
+text: the `execute_code` code-parameter description gained a sentence about not
+aborting on a missing tool match or result key. Everything in `eval/` is
+internal and ships in no package (#295, #297, #303, #306, #310, PRs #305–#317).
+
+### Added
+
+- **A maintained Stripe connection at `./providers/stripe`.** `stripe(id, {
+  mode, purpose, title?, auth?, connectedAccount?, instructions?,
+  maxResultBytes? })` proxies Stripe's hosted MCP server at
+  `https://mcp.stripe.com/` over HTTPS, OAuth by default and static headers for
+  restricted API keys. `mode` is `"production" | "sandbox"` with **no default**,
+  because there is no safe guess between an account that moves real money and
+  one that does not. Stripe publishes one endpoint and selects the environment
+  by credential, so the mode cannot be routed — instead it is made impossible to
+  miss, appearing in the default title, in the description `search_tools` ranks,
+  in the first two lines of the guide, and in the admission policy (production
+  100 calls/second at concurrency 8; sandbox 25 at 4). A `headers` credential
+  carrying a recognizable key prefix (`sk_`, `rk_`, or `pk_` with `_live_` or
+  `_test_`) that contradicts the declared mode throws at construction; an OAuth
+  connector or an unrecognized credential shape is left alone rather than
+  guessed at, and the error names only the two modes, never the key.
+  `connectedAccount` requires an `acct_` id and headers auth. Seven reads and
+  four writes are vetted fill-in-only.
+- **A maintained Linear connection at `./providers/linear`.** `linear(id, {
+  purpose, access?, title?, auth?, instructions?, maxResultBytes?,
+  callAdmission? })` proxies Linear's hosted MCP server, with `access` selecting
+  the endpoint: `"read-write"` (default) at `https://mcp.linear.app/mcp` with
+  the `read` and `write` scopes, `"read-only"` at
+  `https://mcp.linear.app/mcp/readonly` with `read` alone. Read-only is not a
+  client-side filter — the token minted for that endpoint cannot reach Linear's
+  write APIs at all. The mode is legible at browse time rather than only after
+  the guide is fetched: a read-only connection titles itself `Linear
+  (read-only)` and its guide opens with the access note, which is what discovery
+  summarizes. The deprecated `/sse` transport is deliberately unreachable. No
+  admission policy is imposed by default, because Linear's published limit is
+  per user per hour and varies by credential type while Connecta's counter is
+  per runtime; a deployment that knows its own ceiling can pass `callAdmission`.
+  The read allowlist is a deliberate superset of any one workspace, since
+  several tools are plan-gated. Every `save_*` is filed destructive — they are
+  upserts.
+- **A maintained Notion connection at `./providers/notion`.** `notion(id, {
+  purpose, title?, instructions?, credentialLabel?, defaultPageSize?,
+  maxResultBytes? })` is the first prebuilt connection built on `api()` rather
+  than `remoteMcp()`: fifteen hand-written tools over `api.notion.com` pinned to
+  `Notion-Version: 2026-03-11` with no override, because that is the version in
+  which databases split into data sources, `archived` became `in_trash`, and
+  block append took a `position` object — an older pin would return quietly
+  wrong results rather than fail loudly. Ten reads carry `readOnlyHint: true`;
+  five writes route through `call_destructive_tool`, with `destructiveHint`
+  reserved for the two that replace or remove existing state.
+  `update_page_properties` has no `in_trash` argument, so an update can never
+  trash a page; `trash_page` is its own named and reversible tool. Lean
+  projections are the headline — properties flattened, rich text reduced to
+  plain strings, `search` dropping properties entirely, `get_page` reporting
+  what Notion truncated at 25 references — and seven reads take `raw: true` to
+  return the untouched payload where the dropped detail matters. Errors map to
+  what the caller should do next: 403 is deliberately not `auth_required`,
+  because re-authorizing cannot grant a capability or share a page, and 404 says
+  out loud that Notion returns it both for a missing object and an unshared one.
+  Admission pairs a 180-per-minute rolling budget with `maxConcurrency: 3`,
+  because a budget alone is an average and an average cannot stop a program
+  firing forty calls in one tick. Its guide is the only one of the four marked
+  `required`.
+- **A maintained Cloudflare connection at `./providers/cloudflare`.**
+  `cloudflare(id, { purpose, title?, accountId?, zoneId?, baseUrl?,
+  credential?, instructions?, maxResultBytes?, maxConcurrency? })` is fourteen
+  hand-written tools over the v4 REST API, fetch-native and dependency-free:
+  Cloudflare publishes an official SDK and this connection does not use it,
+  because the SDK's typed wrappers and pagination helpers are exactly what a
+  projected result and a `page.hasMore` boolean replace. `test/package-surface.test.ts`
+  pins the claim — the `cloudflare` package must appear in no dependency list at
+  all, and every import in the provider must be relative. Every tool carries a
+  complete closed schema: `additionalProperties: false`, an accurate `required`
+  list, an `enum` on every constrained field, a description on every property
+  (asserted, not claimed), and per-endpoint `perPage` bounds. Because
+  `strictValidation` refuses an out-of-range page size locally, the schemas
+  record *whose* bound is being enforced and the descriptions say so out loud:
+  Cloudflare's own where documented, this connection's cap where Cloudflare's
+  nominal ceiling is unusable (`list_dns_records` caps at 1,000 against a
+  documented 5,000,000), and this connection's entirely where Cloudflare
+  documents none (`list_pages_projects`). Twenty-one DNS record types are
+  exported as `CLOUDFLARE_DNS_RECORD_TYPES`. Admission mirrors the documented
+  1,200-per-five-minutes with a default concurrency of 6.
+
+### Changed
+
+- **Explicit downstream annotations win in both directions.** A prebuilt
+  connection's vetted classification was already fill-in only against a
+  downstream saying a name is *less* safe than the allowlist claims. It now also
+  yields to a downstream saying a name is safe when no release has classified
+  that name at all: an explicit `readOnlyHint: true` on an unreviewed tool is
+  kept, and the tool stays callable from `execute_code`. On a name no release
+  has reviewed, the downstream's word is the only evidence there is. Silence
+  still means not read-only, so catalog drift fails closed exactly as before,
+  and a name a release reviewed and filed destructive still outranks a
+  downstream `readOnlyHint: true` — an open question rather than a settled
+  invariant (#315). Mixpanel deployments are the ones that can observe this
+  today: a tool Mixpanel explicitly annotates read-only that this release's
+  allowlist has never seen moves off the approval path.
+- **`execute_code` tells a program not to abort on a missing key.** The code
+  parameter's description gained: "So does aborting on a missing tool match or
+  result key — re-search, describe, or read the result's actual keys here
+  instead." The eval lane that motivated it measures whether a program shapes
+  its result in the run that produced it rather than returning catalog data for
+  a later call.
+- **`documentation/` gained a guide per maintained connection** — `stripe.md`,
+  `linear.md`, `notion.md`, `cloudflare.md` — and `connectors.md` now lists all
+  five. Its custom-`remoteMcp()` example moved off Linear to an in-house deploy
+  server, as did the Docker example's OAuth demo, since Linear is now a prebuilt
+  connection rather than an illustration of hand-writing one.
+
+### Fixed
+
+- **`api()` connectors await their handlers.** `callTool` returned the handler's
+  promise without awaiting it, so a handler that threw before its first `await`
+  sat handler-less through the thenable-adoption microtask and was reported as
+  an unhandled rejection by workerd and vitest even though the caller caught the
+  typed failure. It is now a caught typed failure and nothing else. Affects
+  every `api()` connector, hand-written or prebuilt.
+- **An empty-query browse of an unavailable catalog says so.** A browse has no
+  terms to analyze and so reported nothing at all, which was indistinguishable
+  from a connector that simply exposes no tools — while the guidance on a scoped
+  miss recommends exactly that browse. A browse scoped to an unavailable
+  connector now carries `unavailableConnectorCount`, the typed `catalogError`,
+  and guidance naming it; an unscoped browse carries the count and a
+  scope-by-connector pointer but no `catalogError`, because one connector's
+  failure is not another browse's context. A configured connector that
+  correctly exposes no tools still reports no analysis, so empty, unavailable,
+  and unknown do not serialize alike.
+- **An empty-query browse of an unknown connector reports the unknown
+  connector.** A browse scoped to an id that is not configured now returns
+  `connectorScope`, `unknownConnector`, and the same omit-the-connector guidance
+  the term-bearing path already gave. Nothing was attempted, so there is no
+  count and no `catalogError`, and the response names no connector but the one
+  the caller supplied — listing what else is configured would answer a question
+  they did not ask, past a filter they may not pass.
+
+### Internal
+
+- **A reference-connection lane in `eval/`.** Six cases — discovery, a simple
+  read, a dependent reduction, invalid arguments, an unavailable credential, and
+  write routing — run a cold agent against a second isolated deployment whose
+  `cloudflare()` connector is the real constructor with only the network
+  doubled, reached through the already-documented `baseUrl`. Schemas,
+  `strictValidation`, annotations, projections, admission, guide, and error
+  mapping are the shipped ones, and credentials go through the real vault; no
+  product surface was added for the benchmark. Write routing is the only case
+  permitted across the destructive boundary, and the fixture exposes a
+  downstream-effects endpoint as independent evidence. `eval/` is not in the
+  published `files` allowlist; deployments never see it.
+
+## 0.13.0 — 2026-08-03
+
+Everything an agent reads before it calls anything got more selective. Connecta
+ships its first maintained prebuilt connection — `mixpanel()` behind
+`./providers/mixpanel`, one import returning one ordinary `Connector` with the
+provider's endpoint, region, auth, and rate-limit defaults already right — and
+the ethos now names a maintained prebuilt connection the preferred authoring
+path, with `remoteMcp()` and `api()` staying equal first-class primitives for
+everything nobody maintains. Connector guides became structured: a guide can
+declare a bounded `summary` and mark itself `required`, and discovery carries
+`guideSummary` with `guideRequired`/`guideRequiredReasons`, so an agent fetches
+a guide when it changes the call and skips it when a complete read-only schema
+already says everything. A connector-scoped search whose catalog is down now
+returns a typed `catalogError` instead of advice to retry later. And the tool
+descriptions stopped inviting the two failures the new cold-agent benchmark
+kept catching: a top-level search that duplicates the one the program was about
+to run, and a program guessing at a result shape it never read.
+
+No API breaks. `usageGuide` still accepts a plain markdown string and means
+exactly what it did; every new discovery field is additive and absent unless
+earned. What changed under existing deployments is text, and it is worth
+knowing about: the served tool descriptions and the MCP `instructions` string
+are rewritten, and `skills({})` now summarizes a connector guide from its first
+body line rather than its heading — a guide opening `# Acme` that used to list
+as "Acme" now lists as the sentence beneath it. The built-in usage skill also
+grew, because the per-connector guides section is now appended unconditionally
+rather than only where a guide exists; that keeps the shared guide
+byte-identical across every deployment, so an agent that read it once in a task
+never needs a second local copy, at the cost of one paragraph in deployments
+with no guides. Upgrading is a version bump and nothing else — there is no new
+configuration, no new dependency, and no behavior a deployment must opt into
+(#294, #295, #296, #297, PRs #298–#302).
+
+### Added
+
+- **A maintained Mixpanel connection at `./providers/mixpanel`.**
+  `mixpanel(id, { purpose, region?, auth?, instructions?, title?,
+  maxResultBytes? })` proxies Mixpanel's hosted MCP server with the endpoint
+  chosen by data residency (`us`, `eu`, `in`, default `us`), OAuth by default
+  and static headers for service accounts, HTTPS required, and a rolling
+  600-calls-per-hour admission budget matching the provider's published limit.
+  It carries a maintained usage guide — start at `Get-Projects`, then
+  `Get-Business-Context`; discover names instead of guessing spellings; fetch
+  `Get-Query-Schema` before `Run-Query` — to which a deployment may append its
+  own account instructions. The subpath is an optional import, not a
+  dependency: nothing new installs with core.
+- **Fill-in-only vetted safety annotations.** The connection classifies 63
+  Mixpanel tools — 35 read-only, 28 writes split into additive creates and
+  destructive edits — but only where the downstream is silent. An explicit
+  `destructiveHint: true` or `readOnlyHint: false` from Mixpanel on an
+  allowlisted read name wins, because that is the downstream saying this
+  release's allowlist is wrong. Tools this release has never seen fail closed
+  to approval-visible rather than being assumed safe.
+- **`ConnectorUsageGuide`.** A connector may now declare
+  `usageGuide: { content, summary?, required? }` instead of a bare string.
+  `summary` is the bounded line discovery shows; `required: true` says correct
+  use always depends on conventions no tool schema can carry. Mutations and
+  truncated schemas already require review and do not need the flag.
+- **`guideSummary`, `guideRequired`, and `guideRequiredReasons` on discovery.**
+  `search_tools`, `connecta.search`, and `connecta.describe` now say what a
+  guide covers and whether it must be read first, with the reason named:
+  `connector_required` and `approval_required` stand however far a schema is
+  expanded, while `schema_truncated` clears once describe returns the exact
+  shape. A connector-scoped search that matches nothing still surfaces the
+  connector's guide, so an agent that searched the wrong terms learns the
+  vocabulary instead of concluding the connector is empty.
+- **A scoped `catalogError`.** A search explicitly scoped to one connector
+  whose catalog is unavailable now returns the classified failure — `code`,
+  bounded `message`, `retryable`, and `retryAfterMs` when known — so an agent
+  can tell a transient outage from one an operator has to clear. Exactly four
+  fields, pinned by a test: an unscoped search still gets only
+  `unavailableConnectorCount`, because one connector's failure is not another
+  search's context.
+
+### Changed
+
+- **Routing guidance no longer invites redundant discovery.** Top-level
+  `search_tools` is now reserved for a single unreduced read or for
+  write-capable work; anything involving reduction, dependent steps, loops, or
+  joins is one `execute_code` program that searches and calls inside the run.
+  Search guidance also tells an agent to scope to an obvious connector id and
+  to require purpose, input, truncation, safety, and output fit rather than
+  taking the first lexical match. Measured against the shipped text over five
+  repetitions, route compliance went from 9/30 to 25/30.
+- **`call_destructive_tool` carries the guide note.** Destructive multi-step
+  work keeps its route through top-level discovery — `execute_code` admits only
+  read-only tools — and its description now says to inspect the address and
+  fetch any guide it names before a consequential call.
+- **The ethos prefers prebuilt connections, and refuses a registry.** The
+  decisions table accepts prebuilt connections as the preferred authoring path
+  *when connecta maintains one*, fenced: exactly one ordinary `Connector` with
+  no extra privileges, never a bundle or preset, tools hand-written or proxied
+  rather than generated from a schema document, and vetted annotations that
+  only fill in downstream silence. A provider registry or integration
+  marketplace is refused outright — prebuilt connections are imports, not
+  listings, and discovery happens in documentation, never at runtime.
+- **The usage skill is byte-identical everywhere.** The per-connector guides
+  section is appended unconditionally and rewritten to route on
+  `guideRequired`/`guideSummary` rather than telling agents to read every
+  guide before first use. Guide-free deployments still pay no fixed
+  tool-description cost — the conditional notes in the meta-tool descriptions
+  remain absent.
+- **Guide summaries prefer substance over headings.** `skills({})` reads a
+  guide's first meaningful body line, falling back to the heading and then to
+  the connector description, so a listing describes what a guide says rather
+  than what it is titled.
+
+### Fixed
+
+- **The Mixpanel connection could not have booted.** Its call-admission rule
+  paired a budget with `retryAfterMs` — a queue setting without a queue, which
+  the admission controller refuses at construction. No suite caught it because
+  every suite stubbed remote-MCP before the registry saw the connector; a new
+  suite now boots two accounts through the real `createConnecta` with `fetch`
+  rigged to throw, proving the boot and the per-account address, catalog,
+  storage, credential, and budget namespaces.
+- **Tool descriptions claimed a waiver describe already performs.** Three
+  descriptions said schema expansion never clears a guide requirement while
+  `describe` cleared `schema_truncated` on every call. The text moved to the
+  behavior rather than the reverse.
+- **Package-surface guards derive from `src/providers/`** instead of naming
+  `mixpanel.ts`, so the next provider fails them only for a real reason.
+
+### Internal
+
+- **A cold-agent benchmark lane in `eval/`.** Fourteen cases across two lanes —
+  eight measuring whether an agent meeting a connector cold discovers, routes,
+  and recovers, six measuring route compliance for the description rewrite —
+  with a comparator that refuses to compare runs whose harness, scoring, or
+  sandbox fingerprints differ, and reports a `productSha256` over `src/**`. A
+  baseline and a candidate cut from one working tree record the same commit and
+  the same dirty flag, and only the fingerprint says whether the candidate
+  measured changed code. It also reports host-routing probes separately from
+  foreign calls, so a contaminated run announces itself instead of reading as a
+  product regression. `eval/` is not in the published `files` list; deployments
+  never see it.
+
 ## 0.12.2 — 2026-08-02
 
 Rendered programs can now bind a small, explicit set of read-only connector

package/README.md

@@ -72,7 +72,10 @@ For an agent setting this up, the contract is:
 2. Keep the required `executor: quickJsExecutor()` configuration; without an
    executor the deployment refuses to boot.
 3. Keep secrets in environment variables or a secret store, never source.
-4. Add code only for deliberate `api()` connectors.
+4. Add connectors explicitly: import a maintained prebuilt provider
+   constructor when one exists, otherwise write a deliberate `remoteMcp()` or
+   `api()` connector. There is no registry to browse and nothing registers
+   itself.
 5. Run `npm run typecheck`, start the server, and run
    `CONNECTA_TOKEN=... npm run doctor`. Doctor checks health, the executor, and
    the exact seven-tool model-facing surface, then executes a harmless sandbox

package/dist/catalog-service.d.ts

@@ -41,6 +41,7 @@ export interface CatalogDescribeArgs {
 interface CatalogSearchEntry {
     connector: Connector;
     guide?: string;
+    guideSummary?: string;
     tool: {
         name: string;
         address: string;
@@ -53,8 +54,23 @@ interface CatalogSearchEntry {
         requiredInputKeys?: string[];
         outputKeys?: string[];
         annotations?: ToolDef["annotations"];
+        guideRequired?: true;
+        guideRequiredReasons?: GuideRequiredReason[];
     };
 }
+type GuideRequiredReason = "connector_required" | "approval_required" | "schema_truncated";
+/**
+ * The classified-failure subset a scoped search may echo: enough to tell a
+ * transient outage from one an operator must clear, and nothing more. Kept as
+ * its own type rather than `CallErrorDetails` so widening the call-path
+ * classifier cannot widen this discovery-surface field by accident.
+ */
+interface CatalogFailureDetail {
+    code: string;
+    message: string;
+    retryable: boolean;
+    retryAfterMs?: number;
+}
 export interface CatalogSearchPage {
     entries: CatalogSearchEntry[];
     total: number;
@@ -71,6 +87,12 @@ export interface CatalogSearchPage {
         connectorScope?: string;
         unknownConnector?: true;
         unavailableConnectorCount?: number;
+        /** Bounded typed failure for an explicitly scoped unavailable catalog. */
+        catalogError?: CatalogFailureDetail;
+        guide?: string;
+        guideSummary?: string;
+        guideRequired?: true;
+        guideRequiredReasons?: GuideRequiredReason[];
         guidance?: string;
     };
 }
@@ -79,6 +101,9 @@ export interface CatalogDescription {
     name?: string;
     description?: string;
     guide?: string;
+    guideSummary?: string;
+    guideRequired?: true;
+    guideRequiredReasons?: GuideRequiredReason[];
     inputSchema?: unknown;
     outputSchema?: unknown;
     annotations?: ToolDef["annotations"];
@@ -158,6 +183,12 @@ export declare function groupedSearchResult(page: CatalogSearchPage): {
         connectorScope?: string;
         unknownConnector?: true;
         unavailableConnectorCount?: number;
+        /** Bounded typed failure for an explicitly scoped unavailable catalog. */
+        catalogError?: CatalogFailureDetail;
+        guide?: string;
+        guideSummary?: string;
+        guideRequired?: true;
+        guideRequiredReasons?: GuideRequiredReason[];
         guidance?: string;
     };
     matchMode?: "partial";
@@ -166,6 +197,7 @@ export declare function groupedSearchResult(page: CatalogSearchPage): {
         id: string;
         title?: string;
         guide?: string;
+        guideSummary?: string;
         tools: CatalogSearchEntry["tool"][];
     }[];
     total: number;
@@ -182,11 +214,18 @@ export declare function flatSearchResult(page: CatalogSearchPage): {
         connectorScope?: string;
         unknownConnector?: true;
         unavailableConnectorCount?: number;
+        /** Bounded typed failure for an explicitly scoped unavailable catalog. */
+        catalogError?: CatalogFailureDetail;
+        guide?: string;
+        guideSummary?: string;
+        guideRequired?: true;
+        guideRequiredReasons?: GuideRequiredReason[];
         guidance?: string;
     };
     matchMode?: "partial";
     nextOffset?: number;
     tools: {
+        guideSummary?: string;
         guide?: string;
         name: string;
         address: string;
@@ -199,6 +238,8 @@ export declare function flatSearchResult(page: CatalogSearchPage): {
         requiredInputKeys?: string[];
         outputKeys?: string[];
         annotations?: ToolDef["annotations"];
+        guideRequired?: true;
+        guideRequiredReasons?: GuideRequiredReason[];
     }[];
     total: number;
     offset: number;

package/dist/catalog-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"catalog-service.d.ts","sourceRoot":"","sources":["../src/catalog-service.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,KAAK,EACV,yBAAyB,EACzB,YAAY,EACb,MAAM,eAAe,CAAC;AAWvB,OAAO,KAAK,EACV,SAAS,EAET,OAAO,EACR,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,oBAAoB,IAAI,CAAC;AACtC,eAAO,MAAM,gBAAgB,MAAM,CAAC;AACpC,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAC1C,eAAO,MAAM,0BAA0B,SAAU,CAAC;AAMlD;;;;GAIG;AACH,MAAM,MAAM,WAAW,GAAG,cAAc,GAAG,iBAAiB,CAAC;AAE7D,qBAAa,oBAAqB,SAAQ,KAAK;IAE3C,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,kBAAkB;gBAAzC,IAAI,EAAE,cAAc,GAAG,kBAAkB,EAClD,OAAO,EAAE,MAAM;CAKlB;AA8DD,2EAA2E;AAC3E,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAazE;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,MAAM,CAAC,EAAE,UAAU,GAAG,kBAAkB,GAAG,KAAK,CAAC;IACjD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,cAAc,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IACpC,kFAAkF;IAClF,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AA+BD,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IAC5B,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,UAAU,kBAAkB;IAC1B,SAAS,EAAE,SAAS,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,oBAAoB,CAAC,EAAE,IAAI,CAAC;QAC5B,qBAAqB,CAAC,EAAE,IAAI,CAAC;QAC7B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;QACrB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC7B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QACtB,WAAW,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;KACtC,CAAC;CACH;AA4BD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,aAAa,CAAC,EAAE;QACd,gBAAgB,EAAE,MAAM,EAAE,CAAC;QAC3B,gBAAgB,EAAE,MAAM,EAAE,CAAC;QAC3B,cAAc,EAAE,MAAM,EAAE,CAAC;QACzB,SAAS,CAAC,EAAE,IAAI,CAAC;QACjB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,gBAAgB,CAAC,EAAE,IAAI,CAAC;QACxB,yBAAyB,CAAC,EAAE,MAAM,CAAC;QACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,WAAW,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,SAAS,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,MAAM,iBAAiB,GACzB;IACE,EAAE,EAAE,IAAI,CAAC;IACT,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;CACnB,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,gBAAgB,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAeN;;;;GAIG;AACH,qBAAa,cAAc;IASvB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM;IAT1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAc;IAC1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IACvD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyC;gBAG9C,QAAQ,EAAE,YAAY,EAC9B,OAAO,EAAE,MAAM,EACxB,OAAO,GAAE;QACP,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,yEAAyE;QACzE,WAAW,CAAC,EAAE,WAAW,CAAC;KACtB;IASR;;;;;;;;;;OAUG;IACH,cAAc,CACZ,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,EAC3C,OAAO,EAAE,MAAM,GACd,WAAW,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAWxC,aAAa,CACjB,EAAE,EAAE,MAAM,EACV,WAAW,GAAE,yBAA8B,GAC1C,OAAO,CAAC,OAAO,EAAE,CAAC;IAkBrB,OAAO,CAAC,gBAAgB;IAYlB,WAAW,CACf,OAAO,EAAE,MAAM,EACf,WAAW,GAAE,yBAA8B,GAC1C,OAAO,CAAC,iBAAiB,CAAC;IAiE7B;;;;OAIG;IACG,gBAAgB,CACpB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,EACtC,WAAW,GAAE,yBAA8B,GAC1C,OAAO,CAAC,iBAAiB,CAAC;IAwFvB,MAAM,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA+O3D,QAAQ,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;CA0EzE;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB;;0BAlnBrC,MAAM,EAAE;0BACR,MAAM,EAAE;wBACV,MAAM,EAAE;oBACZ,IAAI;yBACC,MAAM;2BACJ,IAAI;oCACK,MAAM;mBACvB,MAAM;;;;;YA6mBb,MAAM;gBACF,MAAM;gBACN,MAAM;eACP,kBAAkB,CAAC,MAAM,CAAC,EAAE;;;;;;EA6BtC;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,iBAAiB;;0BAtpBlC,MAAM,EAAE;0BACR,MAAM,EAAE;wBACV,MAAM,EAAE;oBACZ,IAAI;yBACC,MAAM;2BACJ,IAAI;oCACK,MAAM;mBACvB,MAAM;;;;;;cAxDX,MAAM;iBACH,MAAM;sBACD,MAAM;sBACN,OAAO;uBACN,OAAO;+BACC,IAAI;gCACH,IAAI;oBAChB,MAAM,EAAE;4BACA,MAAM,EAAE;qBACf,MAAM,EAAE;sBACP,OAAO,CAAC,aAAa,CAAC;;;;;;EA2sBvC"}
+{"version":3,"file":"catalog-service.d.ts","sourceRoot":"","sources":["../src/catalog-service.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,KAAK,EACV,yBAAyB,EACzB,YAAY,EACb,MAAM,eAAe,CAAC;AAavB,OAAO,KAAK,EACV,SAAS,EAET,OAAO,EACR,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,oBAAoB,IAAI,CAAC;AACtC,eAAO,MAAM,gBAAgB,MAAM,CAAC;AACpC,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAC1C,eAAO,MAAM,0BAA0B,SAAU,CAAC;AAMlD;;;;GAIG;AACH,MAAM,MAAM,WAAW,GAAG,cAAc,GAAG,iBAAiB,CAAC;AAE7D,qBAAa,oBAAqB,SAAQ,KAAK;IAE3C,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,kBAAkB;gBAAzC,IAAI,EAAE,cAAc,GAAG,kBAAkB,EAClD,OAAO,EAAE,MAAM;CAKlB;AA8DD,2EAA2E;AAC3E,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAazE;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,MAAM,CAAC,EAAE,UAAU,GAAG,kBAAkB,GAAG,KAAK,CAAC;IACjD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,cAAc,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IACpC,kFAAkF;IAClF,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AA+BD,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IAC5B,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,UAAU,kBAAkB;IAC1B,SAAS,EAAE,SAAS,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,oBAAoB,CAAC,EAAE,IAAI,CAAC;QAC5B,qBAAqB,CAAC,EAAE,IAAI,CAAC;QAC7B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;QACrB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC7B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QACtB,WAAW,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;QACrC,aAAa,CAAC,EAAE,IAAI,CAAC;QACrB,oBAAoB,CAAC,EAAE,mBAAmB,EAAE,CAAC;KAC9C,CAAC;CACH;AAED,KAAK,mBAAmB,GACpB,oBAAoB,GACpB,mBAAmB,GACnB,kBAAkB,CAAC;AA8CvB;;;;;GAKG;AACH,UAAU,oBAAoB;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,aAAa,CAAC,EAAE;QACd,gBAAgB,EAAE,MAAM,EAAE,CAAC;QAC3B,gBAAgB,EAAE,MAAM,EAAE,CAAC;QAC3B,cAAc,EAAE,MAAM,EAAE,CAAC;QACzB,SAAS,CAAC,EAAE,IAAI,CAAC;QACjB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,gBAAgB,CAAC,EAAE,IAAI,CAAC;QACxB,yBAAyB,CAAC,EAAE,MAAM,CAAC;QACnC,0EAA0E;QAC1E,YAAY,CAAC,EAAE,oBAAoB,CAAC;QACpC,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,aAAa,CAAC,EAAE,IAAI,CAAC;QACrB,oBAAoB,CAAC,EAAE,mBAAmB,EAAE,CAAC;QAC7C,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,IAAI,CAAC;IACrB,oBAAoB,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAC7C,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,WAAW,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,SAAS,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,MAAM,iBAAiB,GACzB;IACE,EAAE,EAAE,IAAI,CAAC;IACT,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;CACnB,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,gBAAgB,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAeN;;;;GAIG;AACH,qBAAa,cAAc;IASvB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM;IAT1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAc;IAC1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IACvD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyC;gBAG9C,QAAQ,EAAE,YAAY,EAC9B,OAAO,EAAE,MAAM,EACxB,OAAO,GAAE;QACP,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,yEAAyE;QACzE,WAAW,CAAC,EAAE,WAAW,CAAC;KACtB;IASR;;;;;;;;;;OAUG;IACH,cAAc,CACZ,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,EAC3C,OAAO,EAAE,MAAM,GACd,WAAW,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAWxC,aAAa,CACjB,EAAE,EAAE,MAAM,EACV,WAAW,GAAE,yBAA8B,GAC1C,OAAO,CAAC,OAAO,EAAE,CAAC;IAkBrB,OAAO,CAAC,gBAAgB;IAYlB,WAAW,CACf,OAAO,EAAE,MAAM,EACf,WAAW,GAAE,yBAA8B,GAC1C,OAAO,CAAC,iBAAiB,CAAC;IAiE7B;;;;OAIG;IACG,gBAAgB,CACpB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,EACtC,WAAW,GAAE,yBAA8B,GAC1C,OAAO,CAAC,iBAAiB,CAAC;IAwFvB,MAAM,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA2U3D,QAAQ,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;CAyFzE;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB;;0BAtuBrC,MAAM,EAAE;0BACR,MAAM,EAAE;wBACV,MAAM,EAAE;oBACZ,IAAI;yBACC,MAAM;2BACJ,IAAI;oCACK,MAAM;QAClC,0EAA0E;uBAC3D,oBAAoB;gBAC3B,MAAM;uBACC,MAAM;wBACL,IAAI;+BACG,mBAAmB,EAAE;mBACjC,MAAM;;;;;YA2tBb,MAAM;gBACF,MAAM;gBACN,MAAM;uBACC,MAAM;eACd,kBAAkB,CAAC,MAAM,CAAC,EAAE;;;;;;EAgCtC;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,iBAAiB;;0BA9wBlC,MAAM,EAAE;0BACR,MAAM,EAAE;wBACV,MAAM,EAAE;oBACZ,IAAI;yBACC,MAAM;2BACJ,IAAI;oCACK,MAAM;QAClC,0EAA0E;uBAC3D,oBAAoB;gBAC3B,MAAM;uBACC,MAAM;wBACL,IAAI;+BACG,mBAAmB,EAAE;mBACjC,MAAM;;;;;;;cApGX,MAAM;iBACH,MAAM;sBACD,MAAM;sBACN,OAAO;uBACN,OAAO;+BACC,IAAI;gCACH,IAAI;oBAChB,MAAM,EAAE;4BACA,MAAM,EAAE;qBACf,MAAM,EAAE;sBACP,OAAO,CAAC,aAAa,CAAC;wBACpB,IAAI;+BACG,mBAAmB,EAAE;;;;;;EA02B/C"}