@zackbart/connecta 0.8.0 → 0.9.0

package/dist/toolkits.d.ts

@@ -1,124 +0,0 @@
-import type { Connector, InboundAuth, ToolkitBinding } from "./types.js";
-/** Toolkit names share the connector-id grammar: URL-safe, no separators. */
-export declare const TOOLKIT_NAME_RE: RegExp;
-/** One named scope, declared in `ConnectaConfig.toolkits` (config as code). */
-export interface ToolkitDefinition {
-    /** Connector ids this toolkit may see. Required, and at least one. */
-    connectors: string[];
-    /**
-     * Optional finer grain: full tool addresses (`"<connectorId>.<toolName>"`).
-     * Naming ANY address of a connector narrows that connector to exactly the
-     * addresses named; connectors with no entry here keep their whole tool list.
-     */
-    includeTools?: string[];
-    /** Optional tool addresses to hide, applied after `includeTools`. */
-    excludeTools?: string[];
-    /** Operator note. Never sent to clients — this is documentation for config. */
-    description?: string;
-}
-/** `ConnectaConfig.toolkits` — toolkit name → definition. */
-export type ToolkitConfig = Record<string, ToolkitDefinition>;
-/** A validated toolkit: the visibility predicate the scoped registry consults. */
-export interface Toolkit {
-    readonly name: string;
-    readonly description?: string;
-    /**
-     * The validated config this scope came from. Kept as immutable data so
-     * deployment-wide operator surfaces can explain the running configuration
-     * without inventing a second source of truth.
-     */
-    readonly connectors: readonly string[];
-    readonly includeTools: readonly string[];
-    readonly excludeTools: readonly string[];
-    /** True when `connectorId` is inside this toolkit's scope. */
-    hasConnector(connectorId: string): boolean;
-    /** True when `<connectorId>.<toolName>` is inside this toolkit's scope. */
-    hasTool(connectorId: string, toolName: string): boolean;
-}
-/**
- * Split `"<connectorId>.<toolName>"` on the FIRST dot — connector ids contain
- * no dots, so a downstream tool name may. Returns null for a malformed address.
- */
-export declare function splitAddress(address: string): {
-    connectorId: string;
-    toolName: string;
-} | null;
-/**
- * Validate every declared toolkit against the connector set. Returns undefined
- * when no toolkits are configured, so an existing deployment keeps exactly its
- * current (unscoped) behavior.
- */
-export declare function resolveToolkits(toolkits: ToolkitConfig | undefined, connectors: readonly Connector[]): ReadonlyMap<string, Toolkit> | undefined;
-/**
- * The binding half of an inbound-auth adapter's options — the shape every
- * shipped adapter (`bearerToken`, `clerkAuth`) mixes into its own options so an
- * operator writes one thing in one style, next to the credential it binds.
- */
-export interface ToolkitBindingOptions {
-    /**
-     * Toolkit names this credential may select with `?toolkit=<name>`. Present ⇒
-     * the identity is BOUND: any other toolkit, and (unless `unscoped`) a
-     * connection with no `?toolkit=`, is refused at connect time. Absent ⇒
-     * unbound, exactly as before bindings existed.
-     */
-    toolkits?: readonly string[];
-    /**
-     * Also allow a connection with no `?toolkit=` (the full registry, and the
-     * deployment-wide operator surfaces). Only meaningful beside `toolkits`.
-     */
-    unscoped?: boolean;
-}
-/**
- * Validate one adapter's binding options into a `ToolkitBinding`, or undefined
- * when the adapter declares none. Structural mistakes THROW where the operator
- * wrote them (adapter construction), for the same reason toolkit definitions do:
- * a binding that does not say what its author meant is worse than none, because
- * it is invisible until the day it denies — or admits — the wrong caller.
- *
- * Names are only checked against the *grammar* here; cross-checking them
- * against the configured toolkits happens in `validateToolkitBindings`, which
- * runs in `createConnecta` where both halves are finally in scope.
- */
-export declare function resolveToolkitBinding(source: string, options: ToolkitBindingOptions): ToolkitBinding | undefined;
-/**
- * Resolve the binding one admitted identity is actually held to, from the
- * provider's static declaration and whatever its `authorize` returned.
- *
- * - Neither ⇒ unbound (undefined), the pre-binding behavior.
- * - Declaration only ⇒ the declaration.
- * - Per-identity only ⇒ that binding, validated. This is the custom-adapter
- *   seam: a provider that declares nothing is asserting it resolves membership
- *   itself, so there is nothing to check it against.
- * - Both ⇒ the **intersection**. The declaration is a CEILING, not a default: an
- *   adapter that maps a user-writable IdP claim to toolkits must not be able to
- *   widen the credential's own binding, which would turn "support token" into
- *   "any toolkit, plus the full registry" for anyone who can set that claim.
- *   Narrowing is fine and useful (per-user subsets of the team's view).
- *
- * A malformed binding on either side is not silently ignored — it returns
- * `{ ok: false }` and the caller refuses the request, because the alternative
- * (dropping it) is the fail-open reading.
- */
-export declare function resolveIdentityBinding(declared: unknown, perIdentity: unknown): {
-    ok: true;
-    binding?: ToolkitBinding;
-} | {
-    ok: false;
-    reason: string;
-};
-/**
- * Cross-check every statically declared binding against the deployment's
- * toolkits, in `createConnecta`. A name that no toolkit declares is a typo, and
- * a typo here fails CLOSED — the credential would be refused every connection
- * with a 403 the client reads as a transport failure — so it throws at
- * construction rather than becoming a support ticket. A structurally malformed
- * declaration (only reachable from a hand-written `InboundAuth`, since the
- * shipped adapters validate their own options) throws here too, rather than
- * waiting to refuse every request at runtime.
- *
- * Bindings a provider mints per-identity (`AuthResult.toolkitBinding`) do not
- * exist yet and cannot be checked here; they are validated on arrival and capped
- * by the declaration (`resolveIdentityBinding`).
- */
-export declare function validateToolkitBindings(auth: readonly InboundAuth[], toolkits: ReadonlyMap<string, Toolkit> | undefined): void;
-//# sourceMappingURL=toolkits.d.ts.map

package/dist/toolkits.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"toolkits.d.ts","sourceRoot":"","sources":["../src/toolkits.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEzE,6EAA6E;AAC7E,eAAO,MAAM,eAAe,QAAkB,CAAC;AAE/C,+EAA+E;AAC/E,MAAM,WAAW,iBAAiB;IAChC,sEAAsE;IACtE,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,qEAAqE;IACrE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,6DAA6D;AAC7D,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;AAE9D,kFAAkF;AAClF,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,8DAA8D;IAC9D,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3C,2EAA2E;IAC3E,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;CACzD;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,MAAM,GACd;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAOlD;AAmID;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,aAAa,GAAG,SAAS,EACnC,UAAU,EAAE,SAAS,SAAS,EAAE,GAC/B,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAsB1C;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,qBAAqB,GAC7B,cAAc,GAAG,SAAS,CA2C5B;AA4CD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,OAAO,EACjB,WAAW,EAAE,OAAO,GAElB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,cAAc,CAAA;CAAE,GACtC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAoChC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,SAAS,WAAW,EAAE,EAC5B,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GACjD,IAAI,CA2BN"}

package/dist/toolkits.js

@@ -1,322 +0,0 @@
-// Toolkits: named, operator-defined scoped views over one deployment's
-// registry, selected per client connection with `?toolkit=<name>` on /mcp.
-//
-// A connecta deployment belongs to an ORG; a toolkit is the view a GROUP OF
-// TEAM MEMBERS inside that org gets — a "support" toolkit seeing Zendesk and
-// Notion, an "exec" toolkit that also sees Gmail. This module only *defines and
-// validates* scopes and the identity bindings that gate them. Enforcement lives
-// in two places, each with one job:
-//
-//   - WHICH toolkit an identity may open: the connect-time binding check in
-//     `resolveToolkitScope` (src/server.ts), run after the auth gate and before
-//     any scoped registry exists.
-//   - WHAT a selected toolkit may see: `ScopedRegistry` (src/registry.ts),
-//     which every meta-tool inherits through `RegistryView`.
-/** Toolkit names share the connector-id grammar: URL-safe, no separators. */
-export const TOOLKIT_NAME_RE = /^[a-z0-9_-]+$/;
-/**
- * Split `"<connectorId>.<toolName>"` on the FIRST dot — connector ids contain
- * no dots, so a downstream tool name may. Returns null for a malformed address.
- */
-export function splitAddress(address) {
-    const dot = address.indexOf(".");
-    if (dot <= 0 || dot === address.length - 1)
-        return null;
-    return {
-        connectorId: address.slice(0, dot),
-        toolName: address.slice(dot + 1),
-    };
-}
-/** Group tool addresses by connector id, validating each against the toolkit. */
-function toolFilter(name, addresses, connectorIds, staticTools, field) {
-    const byConnector = new Map();
-    if (addresses !== undefined && !Array.isArray(addresses)) {
-        // A bare string would otherwise iterate character by character and produce
-        // a stream of confusing address errors; anything else would throw "not
-        // iterable" from deep inside the loop. Name the field instead.
-        throw new Error(`Toolkit "${name}" ${field} must be an array of "<connectorId>.<toolName>" addresses.`);
-    }
-    if (addresses !== undefined &&
-        addresses.length === 0 &&
-        field === "includeTools") {
-        // An empty allowlist reads as "only these tools" but would behave as "all
-        // of them" — the one shape here that fails OPEN. (An empty excludeTools is
-        // an honest no-op and is allowed.)
-        throw new Error(`Toolkit "${name}" has an empty includeTools: remove it to expose every tool, or list the addresses this toolkit may use.`);
-    }
-    for (const address of addresses ?? []) {
-        const parts = splitAddress(address);
-        if (!parts) {
-            throw new Error(`Toolkit "${name}" ${field} entry "${address}" is not a tool address: expected "<connectorId>.<toolName>".`);
-        }
-        if (!connectorIds.has(parts.connectorId)) {
-            // A typo here would silently do nothing, quietly widening the scope the
-            // operator believes they wrote. Fail at construction instead.
-            throw new Error(`Toolkit "${name}" ${field} entry "${address}" names connector "${parts.connectorId}", which is not in this toolkit's connectors list.`);
-        }
-        // Static-only, exactly like the registry's convention checks: an in-code
-        // connector's tool list is known now, so a misspelled name — an exclude
-        // that silently excludes nothing — is caught. Remote catalogs are fetched
-        // lazily over the network and cannot be checked at construction.
-        const known = staticTools.get(parts.connectorId);
-        if (known && !known.has(parts.toolName)) {
-            throw new Error(`Toolkit "${name}" ${field} entry "${address}" names no tool on connector "${parts.connectorId}".`);
-        }
-        const tools = byConnector.get(parts.connectorId) ?? new Set();
-        tools.add(parts.toolName);
-        byConnector.set(parts.connectorId, tools);
-    }
-    return byConnector;
-}
-/**
- * Validate one toolkit definition against the deployment's connectors.
- *
- * Structural mistakes THROW at construction rather than warn: a typo'd id in
- * an allowlist is a scope the operator did not write, and a scope nobody wrote
- * is not one an operator can reason about. (A definition scopes visibility only;
- * WHICH identity may select it is the separate binding below — see the module
- * header and documentation/toolkits.md.) Tool names are checked only for connectors that expose
- * `staticTools` (i.e. `api()`); a remote connector's catalog is fetched lazily
- * over the network and is unknown at construction time.
- */
-function resolveToolkit(name, definition, known, staticTools) {
-    if (!TOOLKIT_NAME_RE.test(name)) {
-        throw new Error(`Invalid toolkit name "${name}": must match ${TOOLKIT_NAME_RE.source}`);
-    }
-    if (!Array.isArray(definition.connectors) ||
-        definition.connectors.length === 0) {
-        throw new Error(`Toolkit "${name}" selects no connectors: list at least one connector id in "connectors".`);
-    }
-    const connectorIds = new Set();
-    for (const id of definition.connectors) {
-        if (!known.has(id)) {
-            throw new Error(`Toolkit "${name}" references unknown connector "${id}".`);
-        }
-        connectorIds.add(id);
-    }
-    const includes = toolFilter(name, definition.includeTools, connectorIds, staticTools, "includeTools");
-    const excludes = toolFilter(name, definition.excludeTools, connectorIds, staticTools, "excludeTools");
-    return {
-        name,
-        ...(definition.description ? { description: definition.description } : {}),
-        connectors: Object.freeze([...connectorIds]),
-        includeTools: Object.freeze([...(definition.includeTools ?? [])]),
-        excludeTools: Object.freeze([...(definition.excludeTools ?? [])]),
-        hasConnector: (connectorId) => connectorIds.has(connectorId),
-        hasTool: (connectorId, toolName) => {
-            if (!connectorIds.has(connectorId))
-                return false;
-            const include = includes.get(connectorId);
-            if (include && !include.has(toolName))
-                return false;
-            return !excludes.get(connectorId)?.has(toolName);
-        },
-    };
-}
-/**
- * Validate every declared toolkit against the connector set. Returns undefined
- * when no toolkits are configured, so an existing deployment keeps exactly its
- * current (unscoped) behavior.
- */
-export function resolveToolkits(toolkits, connectors) {
-    if (!toolkits)
-        return undefined;
-    // Object.entries (not a keyed lookup) so no config key — `__proto__` and
-    // friends included — can ever resolve through the prototype chain. Names are
-    // then held in a Map, which has no prototype to pollute.
-    const entries = Object.entries(toolkits);
-    if (entries.length === 0)
-        return undefined;
-    const known = new Set(connectors.map((connector) => connector.id));
-    const staticTools = new Map();
-    for (const connector of connectors) {
-        if (connector.staticTools) {
-            staticTools.set(connector.id, new Set(connector.staticTools.map((tool) => tool.name)));
-        }
-    }
-    const resolved = new Map();
-    for (const [name, definition] of entries) {
-        resolved.set(name, resolveToolkit(name, definition, known, staticTools));
-    }
-    return resolved;
-}
-/**
- * Validate one adapter's binding options into a `ToolkitBinding`, or undefined
- * when the adapter declares none. Structural mistakes THROW where the operator
- * wrote them (adapter construction), for the same reason toolkit definitions do:
- * a binding that does not say what its author meant is worse than none, because
- * it is invisible until the day it denies — or admits — the wrong caller.
- *
- * Names are only checked against the *grammar* here; cross-checking them
- * against the configured toolkits happens in `validateToolkitBindings`, which
- * runs in `createConnecta` where both halves are finally in scope.
- */
-export function resolveToolkitBinding(source, options) {
-    const { toolkits, unscoped } = options;
-    if (toolkits === undefined) {
-        if (unscoped !== undefined) {
-            // `unscoped` alone reads like a permission but grants nothing an unbound
-            // identity does not already have, so it is almost certainly a half-written
-            // binding — the one shape here that would silently fail OPEN.
-            throw new Error(`${source}: \`unscoped\` only means something beside \`toolkits\`. ` +
-                "List the toolkits this credential may open, or drop `unscoped` to " +
-                "leave the credential unbound.");
-        }
-        return undefined;
-    }
-    if (!Array.isArray(toolkits)) {
-        throw new Error(`${source}: \`toolkits\` must be an array of toolkit names.`);
-    }
-    const names = [];
-    for (const name of toolkits) {
-        if (typeof name !== "string" || !TOOLKIT_NAME_RE.test(name)) {
-            // A name outside the grammar can never match a declared toolkit, so this
-            // would bind the credential to nothing selectable.
-            throw new Error(`${source}: \`toolkits\` entry ${JSON.stringify(name)} is not a ` +
-                `toolkit name (must match ${TOOLKIT_NAME_RE.source}).`);
-        }
-        if (!names.includes(name))
-            names.push(name);
-    }
-    if (names.length === 0 && unscoped !== true) {
-        throw new Error(`${source}: binds no toolkits and no unscoped access, so this credential ` +
-            "could authenticate but never connect. List at least one toolkit, or " +
-            "pass `unscoped: true` to bind it to the full registry only.");
-    }
-    return Object.freeze({
-        toolkits: Object.freeze(names),
-        ...(unscoped === true ? { unscoped: true } : {}),
-    });
-}
-/**
- * Coerce an arbitrary value into a `ToolkitBinding`, or null when it is not one.
- *
- * The shipped adapters build bindings through `resolveToolkitBinding` above, but
- * `InboundAuth` is an open interface and `AuthResult.toolkitBinding` arrives at
- * REQUEST time from code connecta does not own — a custom adapter, or one
- * mapping an IdP claim. Every field is therefore re-checked here rather than
- * trusted from the type, because each way of being wrong fails OPEN if it is
- * merely believed:
- *
- * - `unscoped` is compared to `true` by identity, so a truthy non-boolean (the
- *   string `"false"` out of an env var, say) cannot grant the full registry;
- * - `toolkits` must be a real array — a bare string would otherwise reach
- *   `String.prototype.includes`, where `?toolkit=sup` would "match" `"support"`
- *   by substring;
- * - a missing/!array `toolkits` is not treated as an empty binding, because the
- *   caller of a null return refuses the request outright.
- *
- * Returns a frozen, deduplicated copy: nothing downstream can be mutated by the
- * adapter after the check, and every name is known to fit the grammar.
- */
-function normalizeToolkitBinding(value) {
-    if (typeof value !== "object" || value === null || Array.isArray(value)) {
-        return null;
-    }
-    const { toolkits, unscoped } = value;
-    if (!Array.isArray(toolkits))
-        return null;
-    if (unscoped !== undefined && typeof unscoped !== "boolean")
-        return null;
-    const names = [];
-    for (const name of toolkits) {
-        if (typeof name !== "string" || !TOOLKIT_NAME_RE.test(name))
-            return null;
-        if (!names.includes(name))
-            names.push(name);
-    }
-    return Object.freeze({
-        toolkits: Object.freeze(names),
-        ...(unscoped === true ? { unscoped: true } : {}),
-    });
-}
-/**
- * Resolve the binding one admitted identity is actually held to, from the
- * provider's static declaration and whatever its `authorize` returned.
- *
- * - Neither ⇒ unbound (undefined), the pre-binding behavior.
- * - Declaration only ⇒ the declaration.
- * - Per-identity only ⇒ that binding, validated. This is the custom-adapter
- *   seam: a provider that declares nothing is asserting it resolves membership
- *   itself, so there is nothing to check it against.
- * - Both ⇒ the **intersection**. The declaration is a CEILING, not a default: an
- *   adapter that maps a user-writable IdP claim to toolkits must not be able to
- *   widen the credential's own binding, which would turn "support token" into
- *   "any toolkit, plus the full registry" for anyone who can set that claim.
- *   Narrowing is fine and useful (per-user subsets of the team's view).
- *
- * A malformed binding on either side is not silently ignored — it returns
- * `{ ok: false }` and the caller refuses the request, because the alternative
- * (dropping it) is the fail-open reading.
- */
-export function resolveIdentityBinding(declared, perIdentity) {
-    const ceiling = declared === undefined ? undefined : normalizeToolkitBinding(declared);
-    if (declared !== undefined && !ceiling) {
-        return {
-            ok: false,
-            reason: "the toolkit binding declared on the provider is malformed " +
-                "(`toolkits` must be an array of toolkit names, `unscoped` a boolean)",
-        };
-    }
-    if (perIdentity === undefined) {
-        return ceiling ? { ok: true, binding: ceiling } : { ok: true };
-    }
-    const identity = normalizeToolkitBinding(perIdentity);
-    if (!identity) {
-        return {
-            ok: false,
-            reason: "the toolkit binding its authorize() returned for this identity is " +
-                "malformed (`toolkits` must be an array of toolkit names, `unscoped` " +
-                "a boolean)",
-        };
-    }
-    if (!ceiling)
-        return { ok: true, binding: identity };
-    return {
-        ok: true,
-        binding: Object.freeze({
-            toolkits: Object.freeze(identity.toolkits.filter((name) => ceiling.toolkits.includes(name))),
-            ...(identity.unscoped === true && ceiling.unscoped === true
-                ? { unscoped: true }
-                : {}),
-        }),
-    };
-}
-/**
- * Cross-check every statically declared binding against the deployment's
- * toolkits, in `createConnecta`. A name that no toolkit declares is a typo, and
- * a typo here fails CLOSED — the credential would be refused every connection
- * with a 403 the client reads as a transport failure — so it throws at
- * construction rather than becoming a support ticket. A structurally malformed
- * declaration (only reachable from a hand-written `InboundAuth`, since the
- * shipped adapters validate their own options) throws here too, rather than
- * waiting to refuse every request at runtime.
- *
- * Bindings a provider mints per-identity (`AuthResult.toolkitBinding`) do not
- * exist yet and cannot be checked here; they are validated on arrival and capped
- * by the declaration (`resolveIdentityBinding`).
- */
-export function validateToolkitBindings(auth, toolkits) {
-    for (const provider of auth) {
-        if (provider.toolkitBinding === undefined)
-            continue;
-        const binding = normalizeToolkitBinding(provider.toolkitBinding);
-        if (!binding) {
-            throw new Error(`Inbound auth provider "${provider.kind}" declares a malformed ` +
-                "toolkitBinding: `toolkits` must be an array of toolkit names " +
-                `(matching ${TOOLKIT_NAME_RE.source}) and \`unscoped\` a boolean.`);
-        }
-        if (!toolkits || toolkits.size === 0) {
-            throw new Error(`Inbound auth provider "${provider.kind}" binds toolkits ` +
-                `(${binding.toolkits.join(", ")}) but this deployment configures no ` +
-                "toolkits. Declare them in `toolkits`, or drop the binding.");
-        }
-        for (const name of binding.toolkits) {
-            if (!toolkits.has(name)) {
-                throw new Error(`Inbound auth provider "${provider.kind}" binds unknown toolkit ` +
-                    `"${name}". Configured toolkits: ${[...toolkits.keys()].join(", ")}.`);
-            }
-        }
-    }
-}
-//# sourceMappingURL=toolkits.js.map

package/dist/toolkits.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"toolkits.js","sourceRoot":"","sources":["../src/toolkits.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,2EAA2E;AAC3E,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,gFAAgF;AAChF,gFAAgF;AAChF,oCAAoC;AACpC,EAAE;AACF,4EAA4E;AAC5E,gFAAgF;AAChF,kCAAkC;AAClC,2EAA2E;AAC3E,6DAA6D;AAI7D,6EAA6E;AAC7E,MAAM,CAAC,MAAM,eAAe,GAAG,eAAe,CAAC;AAuC/C;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAe;IAEf,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACxD,OAAO;QACL,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;QAClC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;KACjC,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,SAAS,UAAU,CACjB,IAAY,EACZ,SAA+B,EAC/B,YAAiC,EACjC,WAAqD,EACrD,KAAsC;IAEtC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAuB,CAAC;IACnD,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACzD,2EAA2E;QAC3E,uEAAuE;QACvE,+DAA+D;QAC/D,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,KAAK,KAAK,4DAA4D,CACvF,CAAC;IACJ,CAAC;IACD,IACE,SAAS,KAAK,SAAS;QACvB,SAAS,CAAC,MAAM,KAAK,CAAC;QACtB,KAAK,KAAK,cAAc,EACxB,CAAC;QACD,0EAA0E;QAC1E,2EAA2E;QAC3E,mCAAmC;QACnC,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,0GAA0G,CAC3H,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,SAAS,IAAI,EAAE,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,KAAK,KAAK,WAAW,OAAO,+DAA+D,CAC5G,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YACzC,wEAAwE;YACxE,8DAA8D;YAC9D,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,KAAK,KAAK,WAAW,OAAO,sBAAsB,KAAK,CAAC,WAAW,oDAAoD,CACxI,CAAC;QACJ,CAAC;QACD,yEAAyE;QACzE,wEAAwE;QACxE,0EAA0E;QAC1E,iEAAiE;QACjE,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACjD,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,KAAK,KAAK,WAAW,OAAO,iCAAiC,KAAK,CAAC,WAAW,IAAI,CACnG,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QACtE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC1B,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,cAAc,CACrB,IAAY,EACZ,UAA6B,EAC7B,KAA0B,EAC1B,WAAqD;IAErD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,yBAAyB,IAAI,iBAAiB,eAAe,CAAC,MAAM,EAAE,CACvE,CAAC;IACJ,CAAC;IACD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC;QACrC,UAAU,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAClC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,0EAA0E,CAC3F,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,KAAK,MAAM,EAAE,IAAI,UAAU,CAAC,UAAU,EAAE,CAAC;QACvC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,mCAAmC,EAAE,IAAI,CAC1D,CAAC;QACJ,CAAC;QACD,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvB,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CACzB,IAAI,EACJ,UAAU,CAAC,YAAY,EACvB,YAAY,EACZ,WAAW,EACX,cAAc,CACf,CAAC;IACF,MAAM,QAAQ,GAAG,UAAU,CACzB,IAAI,EACJ,UAAU,CAAC,YAAY,EACvB,YAAY,EACZ,WAAW,EACX,cAAc,CACf,CAAC;IACF,OAAO;QACL,IAAI;QACJ,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC;QAC5C,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC;QACjE,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC;QACjE,YAAY,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC;QAC5D,OAAO,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,EAAE;YACjC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC;gBAAE,OAAO,KAAK,CAAC;YACjD,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC1C,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,OAAO,KAAK,CAAC;YACpD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnD,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAmC,EACnC,UAAgC;IAEhC,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,yEAAyE;IACzE,6EAA6E;IAC7E,yDAAyD;IACzD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IACnE,MAAM,WAAW,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC3D,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;YAC1B,WAAW,CAAC,GAAG,CACb,SAAS,CAAC,EAAE,EACZ,IAAI,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CACxD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,OAAO,EAAE,CAAC;QACzC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAsBD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAc,EACd,OAA8B;IAE9B,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IACvC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,yEAAyE;YACzE,2EAA2E;YAC3E,8DAA8D;YAC9D,MAAM,IAAI,KAAK,CACb,GAAG,MAAM,2DAA2D;gBAClE,oEAAoE;gBACpE,+BAA+B,CAClC,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,GAAG,MAAM,mDAAmD,CAC7D,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5D,yEAAyE;YACzE,mDAAmD;YACnD,MAAM,IAAI,KAAK,CACb,GAAG,MAAM,wBAAwB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY;gBAC/D,4BAA4B,eAAe,CAAC,MAAM,IAAI,CACzD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,GAAG,MAAM,iEAAiE;YACxE,sEAAsE;YACtE,6DAA6D,CAChE,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAsB;QACnD,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjD,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAS,uBAAuB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,KAG9B,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,QAAQ,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACzE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACzE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAsB;QACnD,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjD,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAiB,EACjB,WAAoB;IAIpB,MAAM,OAAO,GACX,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IACzE,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC;QACvC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EACJ,4DAA4D;gBAC5D,sEAAsE;SACzE,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,WAAW,CAAC,CAAC;IACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EACJ,oEAAoE;gBACpE,sEAAsE;gBACtE,YAAY;SACf,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IACrD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;YACrB,QAAQ,EAAE,MAAM,CAAC,MAAM,CACrB,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAC/C;YACtB,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI;gBACzD,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACpB,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAA4B,EAC5B,QAAkD;IAElD,KAAK,MAAM,QAAQ,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,QAAQ,CAAC,cAAc,KAAK,SAAS;YAAE,SAAS;QACpD,MAAM,OAAO,GAAG,uBAAuB,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QACjE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,0BAA0B,QAAQ,CAAC,IAAI,yBAAyB;gBAC9D,+DAA+D;gBAC/D,aAAa,eAAe,CAAC,MAAM,+BAA+B,CACrE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CACb,0BAA0B,QAAQ,CAAC,IAAI,mBAAmB;gBACxD,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,sCAAsC;gBACrE,4DAA4D,CAC/D,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CACb,0BAA0B,QAAQ,CAAC,IAAI,0BAA0B;oBAC/D,IAAI,IAAI,2BAA2B,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACxE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}