@zackbart/connecta 0.7.5 → 0.7.7

package/dist/auth/downstream-oauth.js

@@ -13,6 +13,46 @@ function timingSafeEqual(a, b) {
         diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
     return diff === 0;
 }
+const LEGACY_GENERATION = "legacy";
+const ACTIVE_GENERATION_PREFIX = "v2:";
+const RESETTING_GENERATION_PREFIX = "reset:";
+const DISCONNECTED_GENERATION_PREFIX = "disconnected:";
+const STORED_VALUE_VERSION = 1;
+const OAUTH_VALUE_KEYS = [
+    "oauth:client",
+    "oauth:tokens",
+    "oauth:pending",
+    "oauth:verifier",
+    "oauth:state",
+];
+const MAX_CLEANUP_BACKLOG = 1_000;
+function storedOAuthValue(value) {
+    if (!value || typeof value !== "object")
+        return false;
+    const candidate = value;
+    return (candidate.connectaOAuthVersion === STORED_VALUE_VERSION &&
+        typeof candidate.generation === "string" &&
+        "value" in candidate);
+}
+function isModernGeneration(generation) {
+    return (generation.startsWith(ACTIVE_GENERATION_PREFIX) ||
+        generation.startsWith(RESETTING_GENERATION_PREFIX) ||
+        generation.startsWith(DISCONNECTED_GENERATION_PREFIX));
+}
+/**
+ * Physical key for an OAuth value in one authorization epoch. Legacy values
+ * keep their historical names so upgrades can read an existing grant. Modern
+ * values get an epoch-specific namespace: a stale write or delete can then
+ * affect only its own flow, even if it lands after a replacement flow.
+ */
+export function oauthValueStorageKey(key, generation) {
+    return generation !== null && isModernGeneration(generation)
+        ? `${key}:epoch:${generation}`
+        : key;
+}
+function cleanupBacklogKey(generation) {
+    return `oauth:cleanup:${encodeURIComponent(generation)}`;
+}
 /**
  * OAuthClientProvider implemented over KVStorage for a single downstream
  * connector. Keys live in the connector's namespace as `oauth:<field>`.
@@ -27,9 +67,9 @@ export class KvOAuthProvider {
     storage;
     redirectUri;
     /**
-     * The force-reauth generation this provider's flow started under, captured by
-     * the connector before it drives a connect. `null` until stamped — a provider
-     * used outside a connect flow (or in isolation) writes unconditionally.
+     * The reset generation this provider's flow started under. Every OAuth value
+     * it writes carries this epoch, so a late write can land after a reset without
+     * becoming readable under the new generation.
      */
     capturedGeneration = null;
     constructor(connectorId, storage, redirectUri) {
@@ -39,24 +79,132 @@ export class KvOAuthProvider {
     }
     /**
      * Stamp the force-reauth generation the current connect flow started under.
-     * Subsequent saveTokens/saveClientInformation writes are dropped if KV's
-     * generation has since advanced (a concurrent force wiped credentials) — see
-     * isStale(). Called by the connector once per connect, before c.connect().
+     * Called by the connector once per connect, before c.connect(). The callback
+     * path captures the generation stored beside its verified state instead.
      */
     captureGeneration(gen) {
         this.capturedGeneration = gen;
     }
     /**
-     * Whether a concurrent force re-auth advanced the KV generation past the one
-     * this flow captured. When true, this isolate's SDK is mid-flight against
-     * credentials that were just wiped — persisting them would resurrect the
-     * wiped-and-reauthorized connector for later isolates. Fails open (writes)
-     * when no generation was captured.
+     * The epoch this provider writes under. Direct unit/custom use lazily captures
+     * the current generation; connector-driven connect and callback paths stamp it
+     * explicitly before the SDK can write.
      */
-    async isStale() {
-        if (this.capturedGeneration === null)
-            return false;
-        return (await this.generation()) > this.capturedGeneration;
+    async writeGeneration() {
+        this.capturedGeneration ??= await this.generation();
+        return this.capturedGeneration;
+    }
+    /**
+     * Store a value in the flow's physical epoch namespace. The pre-write check
+     * avoids needless stale residue. The namespaced key closes the remaining
+     * check-then-write race: a late old write cannot overwrite a replacement
+     * flow's value because the two writes have different physical keys.
+     */
+    async writeValue(key, value, serializeLegacy) {
+        const generation = await this.writeGeneration();
+        if (generation.startsWith(RESETTING_GENERATION_PREFIX) ||
+            generation.startsWith(DISCONNECTED_GENERATION_PREFIX) ||
+            (await this.generation()) !== generation) {
+            return;
+        }
+        const stored = {
+            connectaOAuthVersion: STORED_VALUE_VERSION,
+            generation,
+            value,
+        };
+        const physicalKey = oauthValueStorageKey(key, generation);
+        await this.storage.set(physicalKey, isModernGeneration(generation)
+            ? JSON.stringify(stored)
+            : serializeLegacy(value));
+        // If reset landed after the pre-write check and completed its cleanup
+        // before this set, remove the now-unreachable residue ourselves. The epoch
+        // key already provides correctness; this second check is physical hygiene.
+        const current = await this.generation();
+        if (current !== generation) {
+            try {
+                await this.storage.delete(physicalKey);
+            }
+            catch {
+                // Make a transient cleanup failure retryable by the next force reset.
+                // This is still best-effort if storage cannot accept the backlog write.
+                try {
+                    await this.rememberRetiredGeneration(current, generation);
+                }
+                catch {
+                    // The old namespace is already unreadable; storage availability is
+                    // the remaining physical-hygiene boundary.
+                }
+            }
+        }
+    }
+    /**
+     * Read a value only when it belongs to the active generation. Plain legacy
+     * values remain readable until the first v2 reset, so upgrades do not discard
+     * an existing grant; once a modern epoch exists, untagged residue fails
+     * closed.
+     */
+    async readValue(key, parseLegacy) {
+        const generation = await this.generation();
+        const raw = await this.storage.get(oauthValueStorageKey(key, generation));
+        if (raw === null)
+            return undefined;
+        if (generation.startsWith(RESETTING_GENERATION_PREFIX) ||
+            generation.startsWith(DISCONNECTED_GENERATION_PREFIX)) {
+            return undefined;
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch {
+            // Raw string state from a pre-envelope deployment is handled below.
+        }
+        if (storedOAuthValue(parsed)) {
+            return parsed.generation === generation
+                ? { value: parsed.value, generation }
+                : undefined;
+        }
+        if (isModernGeneration(generation))
+            return undefined;
+        return { value: parseLegacy(raw), generation };
+    }
+    /** Attempt every key deletion, then report the first backend failure. */
+    async deleteAll(keys) {
+        let firstError;
+        for (const key of keys) {
+            try {
+                await this.storage.delete(key);
+            }
+            catch (error) {
+                firstError ??= error;
+            }
+        }
+        if (firstError)
+            throw firstError;
+    }
+    async cleanupBacklog(generation) {
+        const raw = await this.storage.get(cleanupBacklogKey(generation));
+        if (raw === null)
+            return [];
+        const parsed = JSON.parse(raw);
+        if (!Array.isArray(parsed) ||
+            parsed.length > MAX_CLEANUP_BACKLOG ||
+            !parsed.every((value) => typeof value === "string")) {
+            throw new Error(`Invalid OAuth cleanup backlog for "${this.connectorId}"`);
+        }
+        return [...new Set(parsed)];
+    }
+    async rememberRetiredGeneration(active, retired) {
+        const backlog = await this.cleanupBacklog(active);
+        if (backlog.includes(retired))
+            return;
+        if (backlog.length >= MAX_CLEANUP_BACKLOG) {
+            throw new Error(`OAuth cleanup backlog for "${this.connectorId}" is full`);
+        }
+        await this.storage.set(cleanupBacklogKey(active), JSON.stringify([...backlog, retired]));
+    }
+    valueKeysForGeneration(generation) {
+        return OAUTH_VALUE_KEYS.map((key) => oauthValueStorageKey(key, generation));
     }
     get redirectUrl() {
         return this.redirectUri;
@@ -71,36 +219,16 @@ export class KvOAuthProvider {
         };
     }
     async clientInformation() {
-        const raw = await this.storage.get("oauth:client");
-        return raw ? JSON.parse(raw) : undefined;
+        return (await this.readValue("oauth:client", (raw) => JSON.parse(raw)))?.value;
     }
     async saveClientInformation(info) {
-        // A concurrent force wiped credentials and bumped the generation while this
-        // flow ran — skip rather than re-register a client under revoked state. The
-        // in-memory SDK keeps this info for the current (doomed) connect, which the
-        // connector's post-connect fence then discards.
-        if (await this.isStale())
-            return;
-        await this.storage.set("oauth:client", JSON.stringify(info));
+        await this.writeValue("oauth:client", info, (value) => JSON.stringify(value));
     }
     async tokens() {
-        const raw = await this.storage.get("oauth:tokens");
-        return raw ? JSON.parse(raw) : undefined;
+        return (await this.readValue("oauth:tokens", (raw) => JSON.parse(raw)))?.value;
     }
     async saveTokens(tokens) {
-        // Generation-guarded write. The dangerous case: an isolate mid-connect (or
-        // mid-refresh) whose SDK just minted fresh tokens against a still-valid
-        // grant, racing a force re-auth that wiped KV and bumped the generation.
-        // Persisting here would resurrect those tokens for later isolates to read.
-        // A silent skip (not a throw) is deliberate: throwing propagates out of the
-        // SDK's auth() and fails the in-flight request/connect noisily, whereas
-        // skipping lets the in-memory client finish its current operation while
-        // leaving KV wiped — the connector's generation check drops that client on
-        // its next call. Fails open when no generation was captured, so ordinary
-        // token refresh (no force) still persists.
-        if (await this.isStale())
-            return;
-        await this.storage.set("oauth:tokens", JSON.stringify(tokens));
+        await this.writeValue("oauth:tokens", tokens, (value) => JSON.stringify(value));
     }
     /**
      * OAuth `state`. The SDK calls this (when present) and appends the value to
@@ -113,7 +241,7 @@ export class KvOAuthProvider {
      */
     async state() {
         const value = randomState();
-        await this.storage.set("oauth:state", value);
+        await this.writeValue("oauth:state", value, (raw) => raw);
         return value;
     }
     /**
@@ -121,59 +249,139 @@ export class KvOAuthProvider {
      * value. Absent stored state or absent candidate → false (fail closed).
      */
     async verifyState(candidate) {
-        const expected = await this.storage.get("oauth:state");
+        const expected = await this.readValue("oauth:state", (raw) => raw);
         if (!expected || candidate === null)
             return false;
-        return timingSafeEqual(candidate, expected);
+        const matches = timingSafeEqual(candidate, expected.value);
+        if (matches)
+            this.captureGeneration(expected.generation);
+        return matches;
     }
     async saveCodeVerifier(verifier) {
-        await this.storage.set("oauth:verifier", verifier);
+        await this.writeValue("oauth:verifier", verifier, (raw) => raw);
     }
     async codeVerifier() {
-        const raw = await this.storage.get("oauth:verifier");
-        if (!raw)
+        const stored = await this.readValue("oauth:verifier", (raw) => raw);
+        if (!stored) {
             throw new Error(`No PKCE code verifier for "${this.connectorId}"`);
-        return raw;
+        }
+        return stored.value;
     }
     async redirectToAuthorization(authorizationUrl) {
-        await this.storage.set("oauth:pending", authorizationUrl.toString());
+        await this.writeValue("oauth:pending", authorizationUrl.toString(), (raw) => raw);
     }
     /** The stored authorization URL, if a flow is pending. */
     async pendingAuthorizationUrl() {
-        return (await this.storage.get("oauth:pending")) ?? undefined;
+        return (await this.readValue("oauth:pending", (raw) => raw))?.value;
     }
     /** Clear one-shot flow state after the callback completes. */
     async clearPending() {
-        await this.storage.delete("oauth:pending");
-        await this.storage.delete("oauth:verifier");
-        await this.storage.delete("oauth:state");
+        const generation = await this.writeGeneration();
+        await this.deleteAll([
+            oauthValueStorageKey("oauth:pending", generation),
+            oauthValueStorageKey("oauth:verifier", generation),
+            oauthValueStorageKey("oauth:state", generation),
+        ]);
     }
     /**
-     * Force-reauth generation. Monotonic counter shared across isolates via KV;
-     * NOT cleared by clearPending/invalidateCredentials — its whole job is to
-     * keep advancing so an isolate holding a client from a prior generation can
-     * notice it went stale. Defaults to 0 when never bumped.
+     * Force-reauth epoch shared across isolates through storage. Old numeric
+     * generations remain valid strings for migration; new resets use unique
+     * nonces, avoiding the lost-update race of read/increment/write.
      */
     async generation() {
-        const raw = await this.storage.get("oauth:generation");
-        const n = raw ? Number(raw) : 0;
-        return Number.isFinite(n) ? n : 0;
+        return (await this.storage.get("oauth:generation")) ?? LEGACY_GENERATION;
     }
-    /** Advance the generation (on force re-auth) and return the new value. */
+    /** True only after an operator disconnect, until an explicit authorization starts. */
+    async operatorDisconnected() {
+        return this.isOperatorDisconnectedGeneration(await this.generation());
+    }
+    /** Interpret a generation already read by a connector without another KV lookup. */
+    isOperatorDisconnectedGeneration(generation) {
+        return generation.startsWith(DISCONNECTED_GENERATION_PREFIX);
+    }
+    /** Publish a unique active epoch without a read/modify/write race. */
     async bumpGeneration() {
-        const next = (await this.generation()) + 1;
-        await this.storage.set("oauth:generation", String(next));
+        const next = `${ACTIVE_GENERATION_PREFIX}${crypto.randomUUID()}`;
+        await this.storage.set("oauth:generation", next);
         return next;
     }
+    /**
+     * Fence every flow that could still write, then remove all durable and
+     * one-shot authorization state. The generation is intentionally retained:
+     * it is the epoch fence that tells another isolate not to resurrect
+     * credentials it read before this reset.
+     *
+     * Once the fence is durable, attempt every deletion even if one fails. A
+     * partial backend outage should not leave unrelated secrets behind merely
+     * because an earlier key happened to be the first failed delete.
+     */
+    async resetAuthorization(operatorDisconnected = false) {
+        const nonce = crypto.randomUUID();
+        const previous = await this.generation();
+        const inherited = await this.cleanupBacklog(previous);
+        const active = `${operatorDisconnected
+            ? DISCONNECTED_GENERATION_PREFIX
+            : ACTIVE_GENERATION_PREFIX}${nonce}`;
+        const retired = [...new Set([...inherited, previous])];
+        if (retired.length > MAX_CLEANUP_BACKLOG) {
+            throw new Error(`OAuth cleanup backlog for "${this.connectorId}" is full`);
+        }
+        // Publish the complete inherited cleanup work under the prospective epoch
+        // before making that epoch active. A crash or later retry can therefore
+        // always recover the older namespaces without a storage prefix scan.
+        await this.storage.set(cleanupBacklogKey(active), JSON.stringify(retired));
+        // This is the one authoritative transition. From this point onward every
+        // old physical namespace is unreadable. There is deliberately no second
+        // "finalize" write: concurrent resets therefore cannot overwrite a newer
+        // reset's epoch after their cleanup finishes out of order.
+        try {
+            await this.storage.set("oauth:generation", active);
+        }
+        catch (error) {
+            try {
+                await this.storage.delete(cleanupBacklogKey(active));
+            }
+            catch {
+                // Best-effort removal of a manifest for an epoch never activated.
+            }
+            throw error;
+        }
+        let firstError;
+        for (const generation of retired) {
+            try {
+                await this.deleteAll(this.valueKeysForGeneration(generation));
+                await this.storage.delete(cleanupBacklogKey(generation));
+            }
+            catch (error) {
+                firstError ??= error;
+            }
+        }
+        // Keep the active manifest immutable for the epoch's whole lifetime, even
+        // after successful cleanup. A late old-epoch write can land after cleanup;
+        // if its self-delete fails, the next reset must still inherit the complete
+        // lineage without racing a manifest shrink/delete. The successor copies
+        // this manifest before activation and then removes this retired copy.
+        if (firstError)
+            throw firstError;
+    }
     async invalidateCredentials(scope) {
-        if (scope === "all" || scope === "client") {
-            await this.storage.delete("oauth:client");
+        const generation = await this.writeGeneration();
+        if (scope === "all") {
+            await this.deleteAll([
+                oauthValueStorageKey("oauth:client", generation),
+                oauthValueStorageKey("oauth:tokens", generation),
+                oauthValueStorageKey("oauth:verifier", generation),
+            ]);
+            return;
+        }
+        if (scope === "client") {
+            await this.storage.delete(oauthValueStorageKey("oauth:client", generation));
         }
-        if (scope === "all" || scope === "tokens") {
-            await this.storage.delete("oauth:tokens");
+        if (scope === "tokens") {
+            await this.storage.delete(oauthValueStorageKey("oauth:tokens", generation));
         }
-        if (scope === "all" || scope === "verifier") {
-            await this.storage.delete("oauth:verifier");
+        if (scope === "verifier") {
+            await this.storage.delete(oauthValueStorageKey("oauth:verifier", generation));
         }
     }
 }

package/dist/auth/downstream-oauth.js.map

@@ -1 +1 @@
-{"version":3,"file":"downstream-oauth.js","sourceRoot":"","sources":["../../src/auth/downstream-oauth.ts"],"names":[],"mappings":"AAQA,+EAA+E;AAC/E,SAAS,WAAW;IAClB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,mFAAmF;AACnF,SAAS,eAAe,CAAC,CAAS,EAAE,CAAS;IAC3C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC7E,OAAO,IAAI,KAAK,CAAC,CAAC;AACpB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,eAAe;IASP;IACA;IACA;IAVnB;;;;OAIG;IACK,kBAAkB,GAAkB,IAAI,CAAC;IAEjD,YACmB,WAAmB,EACnB,OAAkB,EAClB,WAAmB;QAFnB,gBAAW,GAAX,WAAW,CAAQ;QACnB,YAAO,GAAP,OAAO,CAAW;QAClB,gBAAW,GAAX,WAAW,CAAQ;IACnC,CAAC;IAEJ;;;;;OAKG;IACH,iBAAiB,CAAC,GAAW;QAC3B,IAAI,CAAC,kBAAkB,GAAG,GAAG,CAAC;IAChC,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,OAAO;QACnB,IAAI,IAAI,CAAC,kBAAkB,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACnD,OAAO,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC;IAC7D,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,IAAI,cAAc;QAChB,OAAO;YACL,aAAa,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC;YACjC,WAAW,EAAE,UAAU;YACvB,WAAW,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;YACpD,cAAc,EAAE,CAAC,MAAM,CAAC;YACxB,0BAA0B,EAAE,MAAM;SACnC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB;QACrB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACnD,OAAO,GAAG,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,IAAiC;QAEjC,4EAA4E;QAC5E,4EAA4E;QAC5E,4EAA4E;QAC5E,gDAAgD;QAChD,IAAI,MAAM,IAAI,CAAC,OAAO,EAAE;YAAE,OAAO;QACjC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,MAAM;QACV,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACnD,OAAO,GAAG,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAmB;QAClC,2EAA2E;QAC3E,wEAAwE;QACxE,yEAAyE;QACzE,2EAA2E;QAC3E,4EAA4E;QAC5E,wEAAwE;QACxE,wEAAwE;QACxE,2EAA2E;QAC3E,yEAAyE;QACzE,2CAA2C;QAC3C,IAAI,MAAM,IAAI,CAAC,OAAO,EAAE;YAAE,OAAO;QACjC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACjE,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,KAAK;QACT,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;QAC5B,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAC7C,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,SAAwB;QACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAClD,OAAO,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,QAAgB;QACrC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACrD,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;QAC7E,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,gBAAqB;QACjD,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,0DAA0D;IAC1D,KAAK,CAAC,uBAAuB;QAC3B,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,SAAS,CAAC;IAChE,CAAC;IAED,8DAA8D;IAC9D,KAAK,CAAC,YAAY;QAChB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC3C,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC5C,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC3C,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,UAAU;QACd,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,cAAc;QAClB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,KAA6D;QAE7D,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC1C,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC1C,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YAC5C,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"downstream-oauth.js","sourceRoot":"","sources":["../../src/auth/downstream-oauth.ts"],"names":[],"mappings":"AAQA,+EAA+E;AAC/E,SAAS,WAAW;IAClB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,mFAAmF;AACnF,SAAS,eAAe,CAAC,CAAS,EAAE,CAAS;IAC3C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC7E,OAAO,IAAI,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,iBAAiB,GAAG,QAAQ,CAAC;AACnC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AACvC,MAAM,2BAA2B,GAAG,QAAQ,CAAC;AAC7C,MAAM,8BAA8B,GAAG,eAAe,CAAC;AACvD,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,MAAM,gBAAgB,GAAG;IACvB,cAAc;IACd,cAAc;IACd,eAAe;IACf,gBAAgB;IAChB,aAAa;CACL,CAAC;AACX,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAQlC,SAAS,gBAAgB,CACvB,KAAc;IAEd,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,SAAS,GAAG,KAAqC,CAAC;IACxD,OAAO,CACL,SAAS,CAAC,oBAAoB,KAAK,oBAAoB;QACvD,OAAO,SAAS,CAAC,UAAU,KAAK,QAAQ;QACxC,OAAO,IAAI,SAAS,CACrB,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAkB;IAC5C,OAAO,CACL,UAAU,CAAC,UAAU,CAAC,wBAAwB,CAAC;QAC/C,UAAU,CAAC,UAAU,CAAC,2BAA2B,CAAC;QAClD,UAAU,CAAC,UAAU,CAAC,8BAA8B,CAAC,CACtD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAW,EACX,UAAyB;IAEzB,OAAO,UAAU,KAAK,IAAI,IAAI,kBAAkB,CAAC,UAAU,CAAC;QAC1D,CAAC,CAAC,GAAG,GAAG,UAAU,UAAU,EAAE;QAC9B,CAAC,CAAC,GAAG,CAAC;AACV,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAkB;IAC3C,OAAO,iBAAiB,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,eAAe;IASP;IACA;IACA;IAVnB;;;;OAIG;IACK,kBAAkB,GAAkB,IAAI,CAAC;IAEjD,YACmB,WAAmB,EACnB,OAAkB,EAClB,WAAmB;QAFnB,gBAAW,GAAX,WAAW,CAAQ;QACnB,YAAO,GAAP,OAAO,CAAW;QAClB,gBAAW,GAAX,WAAW,CAAQ;IACnC,CAAC;IAEJ;;;;OAIG;IACH,iBAAiB,CAAC,GAAW;QAC3B,IAAI,CAAC,kBAAkB,GAAG,GAAG,CAAC;IAChC,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,eAAe;QAC3B,IAAI,CAAC,kBAAkB,KAAK,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACpD,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,UAAU,CACtB,GAAW,EACX,KAAQ,EACR,eAAqC;QAErC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAChD,IACE,UAAU,CAAC,UAAU,CAAC,2BAA2B,CAAC;YAClD,UAAU,CAAC,UAAU,CAAC,8BAA8B,CAAC;YACrD,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,KAAK,UAAU,EACxC,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAwB;YAClC,oBAAoB,EAAE,oBAAoB;YAC1C,UAAU;YACV,KAAK;SACN,CAAC;QACF,MAAM,WAAW,GAAG,oBAAoB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC1D,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CACpB,WAAW,EACX,kBAAkB,CAAC,UAAU,CAAC;YAC5B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YACxB,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAC3B,CAAC;QACF,sEAAsE;QACtE,2EAA2E;QAC3E,2EAA2E;QAC3E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxC,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,sEAAsE;gBACtE,wEAAwE;gBACxE,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,yBAAyB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;gBAC5D,CAAC;gBAAC,MAAM,CAAC;oBACP,mEAAmE;oBACnE,2CAA2C;gBAC7C,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,SAAS,CACrB,GAAW,EACX,WAA+B;QAE/B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAChC,oBAAoB,CAAC,GAAG,EAAE,UAAU,CAAC,CACtC,CAAC;QACF,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACnC,IACE,UAAU,CAAC,UAAU,CAAC,2BAA2B,CAAC;YAClD,UAAU,CAAC,UAAU,CAAC,8BAA8B,CAAC,EACrD,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;QACD,IAAI,gBAAgB,CAAI,MAAM,CAAC,EAAE,CAAC;YAChC,OAAO,MAAM,CAAC,UAAU,KAAK,UAAU;gBACrC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE;gBACrC,CAAC,CAAC,SAAS,CAAC;QAChB,CAAC;QACD,IAAI,kBAAkB,CAAC,UAAU,CAAC;YAAE,OAAO,SAAS,CAAC;QACrD,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC;IACjD,CAAC;IAED,yEAAyE;IACjE,KAAK,CAAC,SAAS,CAAC,IAAuB;QAC7C,IAAI,UAAmB,CAAC;QACxB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,UAAU,KAAK,KAAK,CAAC;YACvB,CAAC;QACH,CAAC;QACD,IAAI,UAAU;YAAE,MAAM,UAAU,CAAC;IACnC,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,UAAkB;QAC7C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;QAClE,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACtB,MAAM,CAAC,MAAM,GAAG,mBAAmB;YACnC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EACnD,CAAC;YACD,MAAM,IAAI,KAAK,CACb,sCAAsC,IAAI,CAAC,WAAW,GAAG,CAC1D,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,yBAAyB,CACrC,MAAc,EACd,OAAe;QAEf,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO;QACtC,IAAI,OAAO,CAAC,MAAM,IAAI,mBAAmB,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CACb,8BAA8B,IAAI,CAAC,WAAW,WAAW,CAC1D,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CACpB,iBAAiB,CAAC,MAAM,CAAC,EACzB,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,OAAO,EAAE,OAAO,CAAC,CAAC,CACtC,CAAC;IACJ,CAAC;IAEO,sBAAsB,CAAC,UAAkB;QAC/C,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAClC,oBAAoB,CAAC,GAAG,EAAE,UAAU,CAAC,CACtC,CAAC;IACJ,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,IAAI,cAAc;QAChB,OAAO;YACL,aAAa,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC;YACjC,WAAW,EAAE,UAAU;YACvB,WAAW,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;YACpD,cAAc,EAAE,CAAC,MAAM,CAAC;YACxB,0BAA0B,EAAE,MAAM;SACnC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB;QACrB,OAAO,CACL,MAAM,IAAI,CAAC,SAAS,CAClB,cAAc,EACd,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgC,CACxD,CACF,EAAE,KAAK,CAAC;IACX,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,IAAiC;QAEjC,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CACpD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CACtB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM;QACV,OAAO,CACL,MAAM,IAAI,CAAC,SAAS,CAClB,cAAc,EACd,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CACxC,CACF,EAAE,KAAK,CAAC;IACX,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAmB;QAClC,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CACtD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CACtB,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,KAAK;QACT,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;QAC5B,MAAM,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QAC1D,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,SAAwB;QACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QACnE,IAAI,CAAC,QAAQ,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAClD,MAAM,OAAO,GAAG,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3D,IAAI,OAAO;YAAE,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACzD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,QAAgB;QACrC,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,EAAE,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,gBAAqB;QACjD,MAAM,IAAI,CAAC,UAAU,CACnB,eAAe,EACf,gBAAgB,CAAC,QAAQ,EAAE,EAC3B,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CACb,CAAC;IACJ,CAAC;IAED,0DAA0D;IAC1D,KAAK,CAAC,uBAAuB;QAC3B,OAAO,CACL,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CACpD,EAAE,KAAK,CAAC;IACX,CAAC;IAED,8DAA8D;IAC9D,KAAK,CAAC,YAAY;QAChB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAChD,MAAM,IAAI,CAAC,SAAS,CAAC;YACnB,oBAAoB,CAAC,eAAe,EAAE,UAAU,CAAC;YACjD,oBAAoB,CAAC,gBAAgB,EAAE,UAAU,CAAC;YAClD,oBAAoB,CAAC,aAAa,EAAE,UAAU,CAAC;SAChD,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU;QACd,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,iBAAiB,CAAC;IAC3E,CAAC;IAED,sFAAsF;IACtF,KAAK,CAAC,oBAAoB;QACxB,OAAO,IAAI,CAAC,gCAAgC,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,oFAAoF;IACpF,gCAAgC,CAAC,UAAkB;QACjD,OAAO,UAAU,CAAC,UAAU,CAAC,8BAA8B,CAAC,CAAC;IAC/D,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,cAAc;QAClB,MAAM,IAAI,GAAG,GAAG,wBAAwB,GAAG,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;QACjE,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,kBAAkB,CAAC,oBAAoB,GAAG,KAAK;QACnD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,GACb,oBAAoB;YAClB,CAAC,CAAC,8BAA8B;YAChC,CAAC,CAAC,wBACN,GAAG,KAAK,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;QACvD,IAAI,OAAO,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CACb,8BAA8B,IAAI,CAAC,WAAW,WAAW,CAC1D,CAAC;QACJ,CAAC;QACD,0EAA0E;QAC1E,wEAAwE;QACxE,qEAAqE;QACrE,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CACpB,iBAAiB,CAAC,MAAM,CAAC,EACzB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CACxB,CAAC;QACF,yEAAyE;QACzE,wEAAwE;QACxE,yEAAyE;QACzE,2DAA2D;QAC3D,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,kEAAkE;YACpE,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QAED,IAAI,UAAmB,CAAC;QACxB,KAAK,MAAM,UAAU,IAAI,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC,CAAC;gBAC9D,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;YAC3D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,UAAU,KAAK,KAAK,CAAC;YACvB,CAAC;QACH,CAAC;QACD,0EAA0E;QAC1E,2EAA2E;QAC3E,2EAA2E;QAC3E,wEAAwE;QACxE,sEAAsE;QACtE,IAAI,UAAU;YAAE,MAAM,UAAU,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,KAA6D;QAE7D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAChD,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,SAAS,CAAC;gBACnB,oBAAoB,CAAC,cAAc,EAAE,UAAU,CAAC;gBAChD,oBAAoB,CAAC,cAAc,EAAE,UAAU,CAAC;gBAChD,oBAAoB,CAAC,gBAAgB,EAAE,UAAU,CAAC;aACnD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CACvB,oBAAoB,CAAC,cAAc,EAAE,UAAU,CAAC,CACjD,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CACvB,oBAAoB,CAAC,cAAc,EAAE,UAAU,CAAC,CACjD,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CACvB,oBAAoB,CAAC,gBAAgB,EAAE,UAAU,CAAC,CACnD,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/connectors/remote-mcp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remote-mcp.d.ts","sourceRoot":"","sources":["../../src/connectors/remote-mcp.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,SAAS,EACT,SAAS,EACV,MAAM,+CAA+C,CAAC;AAKvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,KAAK,EACV,SAAS,EACT,gBAAgB,EAEhB,MAAM,EAEP,MAAM,aAAa,CAAC;AAErB,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAEtB,MAAM,MAAM,uBAAuB,GAAG,MAAM,GAAG,aAAa,CAAC;AAE7D,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,gFAAgF;IAChF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,uBAAuB,CAAC;IACpC;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,SAAS,CAAC;CAC1D;AAmMD,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAW1C,qBAAa,sBAAuB,SAAQ,kBAAkB;gBAChD,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAOhD;AAaD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,MAAM,EACnB,MAAM,GAAE,uBAAgC,EACxC,SAAS,GAAE,SAAiB,GAC3B,SAAS,CA2EX;AAiBD;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,GAAG,SAAS,CA6hBvE"}
+{"version":3,"file":"remote-mcp.d.ts","sourceRoot":"","sources":["../../src/connectors/remote-mcp.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,SAAS,EACT,SAAS,EACV,MAAM,+CAA+C,CAAC;AAKvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,KAAK,EACV,SAAS,EACT,gBAAgB,EAEhB,MAAM,EAEP,MAAM,aAAa,CAAC;AAErB,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAEtB,MAAM,MAAM,uBAAuB,GAAG,MAAM,GAAG,aAAa,CAAC;AAE7D,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,gFAAgF;IAChF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,uBAAuB,CAAC;IACpC;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,CAAC,GAAG,EAAE,gBAAgB,KAAK,SAAS,CAAC;CAC1D;AAmMD,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAW1C,qBAAa,sBAAuB,SAAQ,kBAAkB;gBAChD,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAOhD;AAaD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,MAAM,EACnB,MAAM,GAAE,uBAAgC,EACxC,SAAS,GAAE,SAAiB,GAC3B,SAAS,CA2EX;AAiBD;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,GAAG,SAAS,CAimBvE"}