arc-1 0.9.25 → 1.0.0

package/dist/server/destination-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"destination-discovery.js","sourceRoot":"","sources":["../../src/server/destination-discovery.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAElF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAGL,8BAA8B,EAC9B,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,iCAAiC,EAAE,MAAM,sCAAsC,CAAC;AA4BzF,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAEvC,IAAI;IADf,YACW,IAA6F,EACtG,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;oBAHN,IAAI;QAIb,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED,SAAS,cAAc,CAAC,UAA6C,EAAE,GAAW;IAChF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,qGAAqG;AACrG,SAAS,eAAe,CAAC,UAA6C,EAAE,GAAW;IACjF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/G,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACnD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC5E,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;QACd,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;QAClB,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;QAClB,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC1C,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG;YAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1E,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,WAAwB;IACpE,MAAM,UAAU,GAAG,WAAW,CAAC,kBAAkB,CAAC;IAClD,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,aAAa,GAA2B,EAAE,CAAC;IACjD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,SAAS;QACrD,4EAA4E;QAC5E,kFAAkF;QAClF,aAAa,CAAC,GAAG,CAAC,GAAG,iCAAiC,CAAC,GAAG,CAAC;YACzD,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ;gBACzB,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;YACvB,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,IAAI,cAAc,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1E,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,MAAM,UAAU,GAAG,WAAW,CAAC,wBAAwB,IAAI,cAAc,CAAC,UAAU,EAAE,0BAA0B,CAAC,CAAC;IAElH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,IAAI,EAAE,WAAW,CAAC,IAAI,IAAI,cAAc,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE;QAClE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;QACnE,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/E,cAAc,EAAE,WAAW,CAAC,cAAc;QAC1C,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,QAAQ,EAAE,cAAc,CAAC,UAAU,EAAE,WAAW,CAAC;QACjD,SAAS,EAAE,WAAW,CAAC,YAAY,CAAC,IAAI,cAAc,CAAC,UAAU,EAAE,YAAY,CAAC;QAChF,WAAW,EAAE,cAAc,CAAC,UAAU,EAAE,aAAa,CAAC;QACtD,WAAW,EAAE,cAAc,CAAC,UAAU,EAAE,cAAc,CAAC;QACvD,UAAU,EAAE,eAAe,CAAC,UAAU,EAAE,YAAY,CAAC;QACrD,2BAA2B,EAAE,CAAC,CAAC,UAAU;QACzC,mCAAmC,EAAE,UAAU,CAAC,CAAC,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;QAChG,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;KAC5C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,WAAwB;IACrD,MAAM,UAAU,GAAG,WAAW,CAAC,kBAAkB,CAAC;IAClD,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9B,MAAM,cAAc,GAAG,UAAU,CAAC,WAAW,CAAC,KAAK,SAAS,IAAI,UAAU,CAAC,YAAY,CAAC,KAAK,SAAS,CAAC;IACvG,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IACpG,OAAO,cAAc,IAAI,CAAC,cAAc,CAAC;AAC3C,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,YAAY,8BAA8B,EAAE,CAAC;QACpD,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;YAChC,OAAO,IAAI,yBAAyB,CAClC,0BAA0B,EAC1B,6FAA6F,CAC9F,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,yBAAyB,CAClC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,8BAA8B,EAChG,KAAK,CAAC,MAAM;YACV,CAAC,CAAC,+CAA+C,KAAK,CAAC,MAAM,GAAG;YAChE,CAAC,CAAC,uCAAuC,CAC5C,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,yBAAyB,CAAC,yBAAyB,EAAE,uCAAuC,CAAC,CAAC;AAC3G,CAAC;AAED,yGAAyG;AACzG,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,SAAoB;IAC7D,IAAI,CAAC;QACH,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACrD,uBAAuB,CAAC,SAAS,EAAE,YAAY,EAAE,aAAa,CAAC;YAC/D,uBAAuB,CAAC,SAAS,EAAE,UAAU,EAAE,aAAa,CAAC;SAC9D,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,aAAa;aAC7B,GAAG,CAAC,6BAA6B,CAAC;aAClC,MAAM,CAAC,CAAC,KAAK,EAAkC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC9D,MAAM,aAAa,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,6BAA6B,GAAG,aAAa,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,MAAM,CAAC;QACzF,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,CAAC;QAC1C,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,GAAG,UAAU,CAAC,MAAM,GAAG,6BAA6B,CAAC,CAAC;QACrG,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;YACrC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;YAC3C,YAAY;YACZ,cAAc;YACd,6BAA6B;SAC9B,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC"}

package/dist/server/destination-registry.d.ts

@@ -0,0 +1,111 @@
+/** Immutable validation registry for destination-discovered multi-target mode. */
+import type { SafetyConfig } from '../adt/safety.js';
+import type { DestinationDiscoveryResult, DiscoveredDestination } from './destination-discovery.js';
+import type { ServerConfig } from './types.js';
+export { TARGET_ID_PATTERN } from './multi-target-identity.js';
+export declare const MULTI_TARGET_MAX = 256;
+export type TargetExclusionCode = 'ACTIVE' | 'ARC1_ENABLED_MISSING' | 'ARC1_DISABLED' | 'ARC1_ENABLED_INVALID' | 'MISSING_NAME' | 'INVALID_NAME' | 'MISSING_URL' | 'INVALID_URL' | 'MISSING_SYSID' | 'INVALID_SYSID' | 'INVALID_TARGET_ALIAS' | 'MISSING_CLIENT' | 'INVALID_CLIENT' | 'UNSUPPORTED_TYPE' | 'UNSUPPORTED_PROXY' | 'UNSUPPORTED_AUTH' | 'BASIC_AUTH_DISABLED' | 'BASIC_PREEMPTIVE_DISABLED' | 'MISSING_DESCRIPTION' | 'INVALID_LANGUAGE' | 'UNKNOWN_ARC1_PROPERTY' | 'INVALID_POLICY' | 'UNSUPPORTED_V1_WRITE_CONFIG' | 'DUPLICATE_DESTINATION_NAME' | 'DUPLICATE_TARGET' | 'DUPLICATE_BASIC_CONNECTION' | 'SHADOWED_BY_INSTANCE' | 'TARGET_LIMIT_EXCEEDED';
+export interface TargetPolicy {
+    readonly allowDataPreview: boolean;
+    readonly allowFreeSQL: boolean;
+}
+export type TargetAuthentication = 'PrincipalPropagation' | 'BasicAuthentication';
+export type TargetIdentity = 'per-user' | 'shared';
+export interface TargetDescriptor {
+    readonly target: string;
+    readonly sid: string;
+    readonly client: string;
+    readonly description: string;
+    readonly language: string;
+    readonly destinationName: string;
+    readonly authentication: TargetAuthentication;
+    /** Effective SAP identity mode, derived exclusively from authentication. */
+    readonly identity: TargetIdentity;
+    readonly proxyType: 'OnPremise';
+    readonly hasCloudConnectorLocationId: boolean;
+    readonly requestedPolicy: TargetPolicy;
+    readonly effectivePolicy: TargetPolicy;
+    readonly connectionFingerprint: string;
+    readonly fingerprint: string;
+}
+export interface TargetDiagnostic {
+    readonly destinationName: string;
+    readonly target?: string;
+    readonly status: 'active' | 'disabled' | 'ignored' | 'quarantined';
+    readonly code: TargetExclusionCode;
+    readonly message: string;
+    readonly description?: string;
+    readonly type?: string;
+    readonly authentication?: string;
+    readonly proxyType?: string;
+    readonly sid?: string;
+    readonly client?: string;
+    readonly language?: string;
+    readonly hasCloudConnectorLocationId: boolean;
+    readonly requestedPolicy?: TargetPolicy;
+    readonly effectivePolicy?: TargetPolicy;
+    readonly limitedByInstance?: boolean;
+    readonly warnings: readonly TargetExclusionCode[];
+    /** Canonical supported ARC-1 settings only. Unknown property values are never retained. */
+    readonly arcConfig: Readonly<{
+        enabled?: boolean;
+        allowDataPreview?: boolean;
+        allowFreeSQL?: boolean;
+        targetAlias?: string;
+        unknownProperties?: readonly string[];
+    }>;
+}
+export interface RegistryFailure {
+    readonly code: 'TARGET_LIMIT_EXCEEDED' | 'REGISTRY_DISCOVERY_ERROR';
+    readonly message: string;
+}
+export interface RegistryCounts {
+    readonly scanned: number;
+    readonly unrelated: number;
+    readonly arcAdjacent: number;
+    readonly arcRelated: number;
+    readonly enabled: number;
+    readonly active: number;
+    readonly disabled: number;
+    readonly ignored: number;
+    readonly quarantined: number;
+}
+export declare function sanitizeTargetDescription(value: string | undefined, fallback: string): string;
+interface FingerprintInput extends Omit<TargetDescriptor, 'fingerprint' | 'connectionFingerprint'> {
+    readonly urlFingerprint: string;
+    readonly cloudConnectorLocationIdFingerprint?: string;
+}
+export declare function targetConnectionFingerprint(value: {
+    urlFingerprint: string;
+    client: string;
+    cloudConnectorLocationIdFingerprint?: string;
+}): string;
+export declare function targetFingerprint(value: FingerprintInput): string;
+/**
+ * Validate one destination candidate for a runtime drift check.
+ *
+ * Registry-wide duplicate, shadow, and 256-target checks remain startup-only.
+ */
+export declare function evaluateStandaloneTargetDescriptor(source: DiscoveredDestination, base: ServerConfig): TargetDescriptor | undefined;
+export declare class DestinationRegistry {
+    readonly targets: readonly TargetDescriptor[];
+    readonly diagnostics: readonly TargetDiagnostic[];
+    readonly revision: string;
+    readonly failure?: RegistryFailure;
+    readonly loadedAt: string;
+    readonly counts: RegistryCounts;
+    readonly arcAdjacentWithoutMarkerCount: number;
+    private readonly byTarget;
+    private constructor();
+    static unavailable(failure: RegistryFailure): DestinationRegistry;
+    static fromDiscovery(discovery: DestinationDiscoveryResult, base: ServerConfig): DestinationRegistry;
+    get(target: string): TargetDescriptor | undefined;
+    get available(): boolean;
+}
+/** Find deliberate-or-accidental overlap between bare /mcp and discovered routes. */
+export declare function duplicateSingleTargetIds(registry: DestinationRegistry, destinationNames: readonly (string | undefined)[], connectionFingerprint?: string): string[];
+/** Basic v1 must not expose one shared SAP credential path through guarded and unguarded routes. */
+export declare function sharedBasicSingleTargetConflicts(registry: DestinationRegistry, sharedBasicDestinationName: string | undefined, connectionFingerprint: string | undefined, singleTargetUsesSharedBasic: boolean): string[];
+export declare function multiTargetSafety(policy: TargetPolicy): SafetyConfig;
+export declare function targetSafety(target: TargetDescriptor): SafetyConfig;
+//# sourceMappingURL=destination-registry.d.ts.map

package/dist/server/destination-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"destination-registry.d.ts","sourceRoot":"","sources":["../../src/server/destination-registry.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAGlF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAOpG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,eAAO,MAAM,gBAAgB,MAAM,CAAC;AAEpC,MAAM,MAAM,mBAAmB,GAC3B,QAAQ,GACR,sBAAsB,GACtB,eAAe,GACf,sBAAsB,GACtB,cAAc,GACd,cAAc,GACd,aAAa,GACb,aAAa,GACb,eAAe,GACf,eAAe,GACf,sBAAsB,GACtB,gBAAgB,GAChB,gBAAgB,GAChB,kBAAkB,GAClB,mBAAmB,GACnB,kBAAkB,GAClB,qBAAqB,GACrB,2BAA2B,GAC3B,qBAAqB,GACrB,kBAAkB,GAClB,uBAAuB,GACvB,gBAAgB,GAChB,6BAA6B,GAC7B,4BAA4B,GAC5B,kBAAkB,GAClB,4BAA4B,GAC5B,sBAAsB,GACtB,uBAAuB,CAAC;AAE5B,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;CAChC;AAED,MAAM,MAAM,oBAAoB,GAAG,sBAAsB,GAAG,qBAAqB,CAAC;AAClF,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEnD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,oBAAoB,CAAC;IAC9C,4EAA4E;IAC5E,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC;IAChC,QAAQ,CAAC,2BAA2B,EAAE,OAAO,CAAC;IAC9C,QAAQ,CAAC,eAAe,EAAE,YAAY,CAAC;IACvC,QAAQ,CAAC,eAAe,EAAE,YAAY,CAAC;IACvC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,aAAa,CAAC;IACnE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,2BAA2B,EAAE,OAAO,CAAC;IAC9C,QAAQ,CAAC,eAAe,CAAC,EAAE,YAAY,CAAC;IACxC,QAAQ,CAAC,eAAe,CAAC,EAAE,YAAY,CAAC;IACxC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAClD,2FAA2F;IAC3F,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;QAC3B,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;KACvC,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,uBAAuB,GAAG,0BAA0B,CAAC;IACpE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQ7F;AAED,UAAU,gBAAiB,SAAQ,IAAI,CAAC,gBAAgB,EAAE,aAAa,GAAG,uBAAuB,CAAC;IAChG,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,mCAAmC,CAAC,EAAE,MAAM,CAAC;CACvD;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,mCAAmC,CAAC,EAAE,MAAM,CAAC;CAC9C,GAAG,MAAM,CAUT;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CAiBjE;AAgWD;;;;GAIG;AACH,wBAAgB,kCAAkC,CAChD,MAAM,EAAE,qBAAqB,EAC7B,IAAI,EAAE,YAAY,GACjB,gBAAgB,GAAG,SAAS,CAE9B;AAiFD,qBAAa,mBAAmB;IAC9B,QAAQ,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC9C,QAAQ,CAAC,WAAW,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAClD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,6BAA6B,EAAE,MAAM,CAAC;IAC/C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwC;IAEjE,OAAO,eAkBN;IAED,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,eAAe,GAAG,mBAAmB,CAmBhE;IAED,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,0BAA0B,EAAE,IAAI,EAAE,YAAY,GAAG,mBAAmB,CAgFnG;IAED,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAEhD;IAED,IAAI,SAAS,IAAI,OAAO,CAEvB;CACF;AAED,qFAAqF;AACrF,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,mBAAmB,EAC7B,gBAAgB,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,EACjD,qBAAqB,CAAC,EAAE,MAAM,GAC7B,MAAM,EAAE,CASV;AAED,oGAAoG;AACpG,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,mBAAmB,EAC7B,0BAA0B,EAAE,MAAM,GAAG,SAAS,EAC9C,qBAAqB,EAAE,MAAM,GAAG,SAAS,EACzC,2BAA2B,EAAE,OAAO,GACnC,MAAM,EAAE,CAKV;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,GAAG,YAAY,CAWpE;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,gBAAgB,GAAG,YAAY,CAEnE"}

package/dist/server/destination-registry.js

@@ -0,0 +1,449 @@
+/** Immutable validation registry for destination-discovered multi-target mode. */
+import { createHash } from 'node:crypto';
+import { isSupportedMultiTargetArcProperty, isWriteRelatedArcProperty, parseDestinationBoolean, } from './multi-target-destination-config.js';
+import { buildTargetId, SAP_SYSID_PATTERN, TARGET_SYSTEM_ALIAS_PATTERN } from './multi-target-identity.js';
+export { TARGET_ID_PATTERN } from './multi-target-identity.js';
+export const MULTI_TARGET_MAX = 256;
+export function sanitizeTargetDescription(value, fallback) {
+    if (!value)
+        return fallback;
+    const withoutControls = Array.from(value.normalize('NFKC'), (character) => {
+        const codePoint = character.codePointAt(0) ?? 0;
+        return codePoint <= 0x1f || (codePoint >= 0x7f && codePoint <= 0x9f) ? ' ' : character;
+    }).join('');
+    const normalized = withoutControls.replace(/\s+/g, ' ').trim();
+    return normalized.length > 0 && normalized.length <= 160 ? normalized : fallback;
+}
+export function targetConnectionFingerprint(value) {
+    return createHash('sha256')
+        .update(JSON.stringify({
+        urlFingerprint: value.urlFingerprint,
+        client: value.client,
+        cloudConnectorLocationIdFingerprint: value.cloudConnectorLocationIdFingerprint ?? '',
+    }))
+        .digest('hex');
+}
+export function targetFingerprint(value) {
+    const canonical = JSON.stringify({
+        destinationName: value.destinationName,
+        description: value.description,
+        urlFingerprint: value.urlFingerprint,
+        authentication: value.authentication,
+        identity: value.identity,
+        proxyType: value.proxyType,
+        client: value.client,
+        cloudConnectorLocationIdFingerprint: value.cloudConnectorLocationIdFingerprint ?? '',
+        sid: value.sid,
+        target: value.target,
+        language: value.language,
+        allowDataPreview: value.requestedPolicy.allowDataPreview,
+        allowFreeSQL: value.requestedPolicy.allowFreeSQL,
+    });
+    return createHash('sha256').update(canonical).digest('hex');
+}
+function immutableArcConfig(properties) {
+    const unknownProperties = Object.keys(properties)
+        .filter((key) => !isSupportedMultiTargetArcProperty(key))
+        .sort();
+    return Object.freeze({
+        enabled: parseDestinationBoolean(properties['arc1.enabled']),
+        allowDataPreview: parseDestinationBoolean(properties['arc1.allow_data_preview']),
+        allowFreeSQL: parseDestinationBoolean(properties['arc1.allow_free_sql']),
+        ...(TARGET_SYSTEM_ALIAS_PATTERN.test(properties['arc1.target_alias'] ?? '')
+            ? { targetAlias: properties['arc1.target_alias'] }
+            : {}),
+        ...(unknownProperties.length > 0 ? { unknownProperties: Object.freeze(unknownProperties) } : {}),
+    });
+}
+/** Finish one failed validation step while keeping evaluate() a linear checklist. */
+function excludedCandidate(source, diagnosticBase, enabled, status, code, message) {
+    return {
+        source,
+        enabled,
+        diagnostic: { ...diagnosticBase, status, code, message },
+    };
+}
+function evaluate(source, base) {
+    const arcConfig = immutableArcConfig(source.arcProperties);
+    const diagnosticBase = {
+        destinationName: source.name,
+        type: source.type,
+        authentication: source.authentication,
+        proxyType: source.proxyType,
+        hasCloudConnectorLocationId: source.hasCloudConnectorLocationId,
+        arcConfig,
+        warnings: Object.freeze([]),
+    };
+    const enabledRaw = source.arcProperties['arc1.enabled'];
+    const enabled = parseDestinationBoolean(enabledRaw);
+    if (enabledRaw === undefined) {
+        return excludedCandidate(source, diagnosticBase, false, 'ignored', 'ARC1_ENABLED_MISSING', 'ARC-1 marker arc1.enabled is missing.');
+    }
+    if (enabled === undefined) {
+        return excludedCandidate(source, diagnosticBase, false, 'quarantined', 'ARC1_ENABLED_INVALID', 'arc1.enabled must be true or false.');
+    }
+    if (!enabled) {
+        return excludedCandidate(source, diagnosticBase, false, 'disabled', 'ARC1_DISABLED', 'ARC-1 target is explicitly disabled.');
+    }
+    for (const key of Object.keys(source.arcProperties)) {
+        if (isWriteRelatedArcProperty(key)) {
+            return excludedCandidate(source, diagnosticBase, true, 'quarantined', 'UNSUPPORTED_V1_WRITE_CONFIG', 'Write-related destination configuration is not supported in multi-target v1.');
+        }
+        if (!isSupportedMultiTargetArcProperty(key)) {
+            return excludedCandidate(source, diagnosticBase, true, 'quarantined', 'UNKNOWN_ARC1_PROPERTY', `Unsupported ARC-1 destination property: ${key}`);
+        }
+    }
+    const dataRequested = parseDestinationBoolean(source.arcProperties['arc1.allow_data_preview']);
+    const sqlRequested = parseDestinationBoolean(source.arcProperties['arc1.allow_free_sql']);
+    if ((source.arcProperties['arc1.allow_data_preview'] !== undefined && dataRequested === undefined) ||
+        (source.arcProperties['arc1.allow_free_sql'] !== undefined && sqlRequested === undefined)) {
+        return excludedCandidate(source, diagnosticBase, true, 'quarantined', 'INVALID_POLICY', 'ARC-1 data and SQL policy values must be true or false.');
+    }
+    if (!source.name) {
+        return excludedCandidate(source, diagnosticBase, true, 'quarantined', 'MISSING_NAME', 'Destination name is required.');
+    }
+    if (!/^[A-Za-z0-9_.-]{1,200}$/.test(source.name)) {
+        return excludedCandidate(source, diagnosticBase, true, 'quarantined', 'INVALID_NAME', 'Destination name contains unsupported characters or is too long.');
+    }
+    if (source.type !== 'HTTP') {
+        return excludedCandidate(source, diagnosticBase, true, 'quarantined', 'UNSUPPORTED_TYPE', 'Destination Type must be HTTP.');
+    }
+    if (source.urlState === 'missing') {
+        return excludedCandidate(source, diagnosticBase, true, 'quarantined', 'MISSING_URL', 'Destination URL is required.');
+    }
+    if (source.urlState !== 'valid' || !source.urlFingerprint) {
+        return excludedCandidate(source, diagnosticBase, true, 'quarantined', 'INVALID_URL', 'Destination URL must be a valid HTTP or HTTPS URL.');
+    }
+    let authentication;
+    let identity;
+    if (source.authentication === 'PrincipalPropagation') {
+        authentication = 'PrincipalPropagation';
+        identity = 'per-user';
+    }
+    else if (source.authentication === 'BasicAuthentication') {
+        if (!base.multiTargetAllowBasicAuth) {
+            return excludedCandidate(source, diagnosticBase, true, 'quarantined', 'BASIC_AUTH_DISABLED', 'BasicAuthentication targets require ARC1_MULTI_TARGET_ALLOW_BASIC_AUTH=true.');
+        }
+        if (source.preemptive !== undefined && parseDestinationBoolean(source.preemptive) !== true) {
+            return excludedCandidate(source, diagnosticBase, true, 'quarantined', 'BASIC_PREEMPTIVE_DISABLED', 'BasicAuthentication destination Preemptive must be absent or true.');
+        }
+        authentication = 'BasicAuthentication';
+        identity = 'shared';
+    }
+    else {
+        return excludedCandidate(source, diagnosticBase, true, 'quarantined', 'UNSUPPORTED_AUTH', 'Destination Authentication must be PrincipalPropagation or an explicitly enabled BasicAuthentication.');
+    }
+    if (source.proxyType !== 'OnPremise') {
+        return excludedCandidate(source, diagnosticBase, true, 'quarantined', 'UNSUPPORTED_PROXY', 'Destination ProxyType must be OnPremise.');
+    }
+    if (!source.sapSysId) {
+        return excludedCandidate(source, diagnosticBase, true, 'quarantined', 'MISSING_SYSID', 'Destination property sap-sysid is required.');
+    }
+    if (!SAP_SYSID_PATTERN.test(source.sapSysId)) {
+        return excludedCandidate(source, diagnosticBase, true, 'quarantined', 'INVALID_SYSID', 'sap-sysid must match three uppercase alphanumeric characters and start with a letter.');
+    }
+    if (!source.sapClient) {
+        return excludedCandidate(source, diagnosticBase, true, 'quarantined', 'MISSING_CLIENT', 'Destination property sap-client is required.');
+    }
+    if (!/^\d{3}$/.test(source.sapClient)) {
+        return excludedCandidate(source, diagnosticBase, true, 'quarantined', 'INVALID_CLIENT', 'sap-client must contain exactly three digits.');
+    }
+    const targetAlias = source.arcProperties['arc1.target_alias'];
+    if (targetAlias !== undefined && !TARGET_SYSTEM_ALIAS_PATTERN.test(targetAlias)) {
+        return excludedCandidate(source, diagnosticBase, true, 'quarantined', 'INVALID_TARGET_ALIAS', 'arc1.target_alias must start with an uppercase letter and contain 3-32 uppercase letters, digits, or internal hyphens.');
+    }
+    const language = source.sapLanguage?.trim().toUpperCase() || base.language;
+    if (!/^[A-Z]{2}$/.test(language)) {
+        return excludedCandidate(source, diagnosticBase, true, 'quarantined', 'INVALID_LANGUAGE', 'sap-language must contain exactly two letters.');
+    }
+    const targetId = buildTargetId(source.sapSysId, source.sapClient, targetAlias);
+    const description = sanitizeTargetDescription(source.description, targetId);
+    const descriptionFallback = description === targetId && source.description !== targetId;
+    const requestedPolicy = Object.freeze({
+        allowDataPreview: dataRequested ?? false,
+        allowFreeSQL: sqlRequested ?? false,
+    });
+    const effectivePolicy = Object.freeze({
+        allowDataPreview: base.allowDataPreview && requestedPolicy.allowDataPreview,
+        allowFreeSQL: base.allowFreeSQL && requestedPolicy.allowFreeSQL,
+    });
+    const withoutFingerprints = {
+        target: targetId,
+        sid: source.sapSysId,
+        client: source.sapClient,
+        description,
+        language,
+        destinationName: source.name,
+        authentication,
+        identity,
+        proxyType: 'OnPremise',
+        hasCloudConnectorLocationId: source.hasCloudConnectorLocationId,
+        requestedPolicy,
+        effectivePolicy,
+    };
+    const connectionFingerprint = targetConnectionFingerprint({
+        urlFingerprint: source.urlFingerprint,
+        client: source.sapClient,
+        cloudConnectorLocationIdFingerprint: source.cloudConnectorLocationIdFingerprint,
+    });
+    const target = Object.freeze({
+        ...withoutFingerprints,
+        connectionFingerprint,
+        fingerprint: targetFingerprint({
+            ...withoutFingerprints,
+            urlFingerprint: source.urlFingerprint,
+            cloudConnectorLocationIdFingerprint: source.cloudConnectorLocationIdFingerprint,
+        }),
+    });
+    return {
+        source,
+        enabled: true,
+        target,
+        diagnostic: {
+            ...diagnosticBase,
+            target: targetId,
+            description,
+            sid: source.sapSysId,
+            client: source.sapClient,
+            language,
+            status: 'active',
+            code: 'ACTIVE',
+            message: 'Destination is active on pinned and aggregate multi-target routes.',
+            requestedPolicy,
+            effectivePolicy,
+            limitedByInstance: requestedPolicy.allowDataPreview !== effectivePolicy.allowDataPreview ||
+                requestedPolicy.allowFreeSQL !== effectivePolicy.allowFreeSQL,
+            warnings: Object.freeze(descriptionFallback ? ['MISSING_DESCRIPTION'] : []),
+        },
+    };
+}
+/**
+ * Validate one destination candidate for a runtime drift check.
+ *
+ * Registry-wide duplicate, shadow, and 256-target checks remain startup-only.
+ */
+export function evaluateStandaloneTargetDescriptor(source, base) {
+    return evaluate(source, base).target;
+}
+function registryRevision(diagnostics, targets = []) {
+    const targetFingerprints = new Map(targets.map((target) => [target.destinationName, target.fingerprint]));
+    const canonical = diagnostics
+        .map((entry) => ({
+        destinationName: entry.destinationName,
+        target: entry.target ?? '',
+        status: entry.status,
+        code: entry.code ?? '',
+        message: entry.message,
+        description: entry.description ?? '',
+        type: entry.type ?? '',
+        authentication: entry.authentication ?? '',
+        proxyType: entry.proxyType ?? '',
+        hasCloudConnectorLocationId: entry.hasCloudConnectorLocationId,
+        arcConfig: entry.arcConfig,
+        requestedPolicy: entry.requestedPolicy,
+        effectivePolicy: entry.effectivePolicy,
+        warnings: entry.warnings,
+        targetFingerprint: targetFingerprints.get(entry.destinationName) ?? '',
+    }))
+        .map((entry) => ({ entry, sortKey: JSON.stringify(entry) }))
+        .sort((a, b) => a.sortKey.localeCompare(b.sortKey))
+        .map(({ entry }) => entry);
+    return createHash('sha256').update(JSON.stringify(canonical)).digest('hex');
+}
+function diagnosticSortKey(entry) {
+    return JSON.stringify([
+        entry.destinationName,
+        entry.target ?? '',
+        entry.status,
+        entry.code ?? '',
+        entry.message,
+        entry.description ?? '',
+        entry.type ?? '',
+        entry.authentication ?? '',
+        entry.proxyType ?? '',
+        entry.hasCloudConnectorLocationId,
+        entry.arcConfig,
+        entry.requestedPolicy,
+        entry.effectivePolicy,
+        entry.warnings,
+    ]);
+}
+function conflictMessage(code) {
+    switch (code) {
+        case 'DUPLICATE_DESTINATION_NAME':
+            return 'More than one subaccount destination uses this destination name; every claimant is quarantined.';
+        case 'DUPLICATE_TARGET':
+            return 'More than one destination claims this public target ID; every claimant is quarantined.';
+        case 'DUPLICATE_BASIC_CONNECTION':
+            return 'More than one shared Basic destination claims the same physical SAP client; every claimant is quarantined to preserve the credential lockout guard.';
+        case 'SHADOWED_BY_INSTANCE':
+            return 'A service-instance destination has the same name and could shadow this subaccount destination.';
+        default:
+            return 'Destination configuration conflict.';
+    }
+}
+function countsFor(discovery, diagnostics, enabled, active) {
+    return {
+        scanned: discovery.scannedCount,
+        unrelated: discovery.unrelatedCount,
+        arcAdjacent: discovery.arcAdjacentWithoutMarkerCount,
+        arcRelated: discovery.subaccount.length,
+        enabled,
+        active,
+        disabled: diagnostics.filter((entry) => entry.status === 'disabled').length,
+        ignored: diagnostics.filter((entry) => entry.status === 'ignored').length,
+        quarantined: diagnostics.filter((entry) => entry.status === 'quarantined').length,
+    };
+}
+export class DestinationRegistry {
+    targets;
+    diagnostics;
+    revision;
+    failure;
+    loadedAt;
+    counts;
+    arcAdjacentWithoutMarkerCount;
+    byTarget;
+    constructor(args) {
+        this.targets = Object.freeze([...args.targets]);
+        this.diagnostics = Object.freeze([...args.diagnostics]);
+        this.revision = args.revision;
+        this.failure = args.failure;
+        this.loadedAt = args.loadedAt ?? new Date().toISOString();
+        this.counts = Object.freeze({ ...args.counts });
+        this.arcAdjacentWithoutMarkerCount = args.arcAdjacentWithoutMarkerCount;
+        this.byTarget = new Map(this.targets.map((target) => [target.target, target]));
+        Object.freeze(this);
+    }
+    static unavailable(failure) {
+        return new DestinationRegistry({
+            targets: [],
+            diagnostics: [],
+            revision: createHash('sha256').update(`${failure.code}:${failure.message}`).digest('hex'),
+            failure: Object.freeze({ ...failure }),
+            counts: {
+                scanned: 0,
+                unrelated: 0,
+                arcAdjacent: 0,
+                arcRelated: 0,
+                enabled: 0,
+                active: 0,
+                disabled: 0,
+                ignored: 0,
+                quarantined: 0,
+            },
+            arcAdjacentWithoutMarkerCount: 0,
+        });
+    }
+    static fromDiscovery(discovery, base) {
+        const evaluated = discovery.subaccount.map((source) => evaluate(source, base));
+        const enabledCount = evaluated.filter((entry) => entry.enabled).length;
+        if (enabledCount > MULTI_TARGET_MAX) {
+            const diagnostics = evaluated.map((entry) => entry.enabled
+                ? Object.freeze({
+                    ...entry.diagnostic,
+                    status: 'quarantined',
+                    code: 'TARGET_LIMIT_EXCEEDED',
+                    message: `Enabled target count exceeds the limit of ${MULTI_TARGET_MAX}; no discovered target is active.`,
+                })
+                : entry.diagnostic);
+            diagnostics.sort((a, b) => diagnosticSortKey(a).localeCompare(diagnosticSortKey(b)));
+            return new DestinationRegistry({
+                targets: [],
+                diagnostics,
+                revision: registryRevision(diagnostics),
+                failure: Object.freeze({
+                    code: 'TARGET_LIMIT_EXCEEDED',
+                    message: `${enabledCount} enabled multi-target destinations exceed the limit of ${MULTI_TARGET_MAX}.`,
+                }),
+                counts: countsFor(discovery, diagnostics, enabledCount, 0),
+                arcAdjacentWithoutMarkerCount: discovery.arcAdjacentWithoutMarkerCount,
+            });
+        }
+        const destinationCounts = new Map();
+        const targetCounts = new Map();
+        const basicConnectionCounts = new Map();
+        const instanceNames = new Set(discovery.instanceNames);
+        for (const entry of evaluated) {
+            destinationCounts.set(entry.source.name, (destinationCounts.get(entry.source.name) ?? 0) + 1);
+            if (entry.target)
+                targetCounts.set(entry.target.target, (targetCounts.get(entry.target.target) ?? 0) + 1);
+            if (entry.target?.authentication === 'BasicAuthentication') {
+                basicConnectionCounts.set(entry.target.connectionFingerprint, (basicConnectionCounts.get(entry.target.connectionFingerprint) ?? 0) + 1);
+            }
+        }
+        const diagnostics = [];
+        const targets = [];
+        for (const entry of evaluated) {
+            let conflict;
+            if ((destinationCounts.get(entry.source.name) ?? 0) > 1)
+                conflict = 'DUPLICATE_DESTINATION_NAME';
+            else if (instanceNames.has(entry.source.name))
+                conflict = 'SHADOWED_BY_INSTANCE';
+            else if (entry.target && (targetCounts.get(entry.target.target) ?? 0) > 1)
+                conflict = 'DUPLICATE_TARGET';
+            else if (entry.target?.authentication === 'BasicAuthentication' &&
+                (basicConnectionCounts.get(entry.target.connectionFingerprint) ?? 0) > 1) {
+                conflict = 'DUPLICATE_BASIC_CONNECTION';
+            }
+            if (conflict && entry.enabled) {
+                diagnostics.push(Object.freeze({
+                    ...entry.diagnostic,
+                    status: 'quarantined',
+                    code: conflict,
+                    message: conflictMessage(conflict),
+                }));
+            }
+            else {
+                diagnostics.push(Object.freeze(entry.diagnostic));
+                if (entry.target && entry.diagnostic.status === 'active')
+                    targets.push(entry.target);
+            }
+        }
+        targets.sort((a, b) => a.target.localeCompare(b.target));
+        diagnostics.sort((a, b) => diagnosticSortKey(a).localeCompare(diagnosticSortKey(b)));
+        return new DestinationRegistry({
+            targets,
+            diagnostics,
+            revision: registryRevision(diagnostics, targets),
+            counts: countsFor(discovery, diagnostics, enabledCount, targets.length),
+            arcAdjacentWithoutMarkerCount: discovery.arcAdjacentWithoutMarkerCount,
+        });
+    }
+    get(target) {
+        return this.byTarget.get(target);
+    }
+    get available() {
+        return !this.failure;
+    }
+}
+/** Find deliberate-or-accidental overlap between bare /mcp and discovered routes. */
+export function duplicateSingleTargetIds(registry, destinationNames, connectionFingerprint) {
+    const configuredNames = new Set(destinationNames.filter((name) => !!name));
+    return registry.targets
+        .filter((target) => configuredNames.has(target.destinationName) ||
+        (!!connectionFingerprint && target.connectionFingerprint === connectionFingerprint))
+        .map((target) => target.target);
+}
+/** Basic v1 must not expose one shared SAP credential path through guarded and unguarded routes. */
+export function sharedBasicSingleTargetConflicts(registry, sharedBasicDestinationName, connectionFingerprint, singleTargetUsesSharedBasic) {
+    if (!singleTargetUsesSharedBasic)
+        return [];
+    return duplicateSingleTargetIds(registry, [sharedBasicDestinationName], connectionFingerprint).filter((targetId) => registry.get(targetId)?.identity === 'shared');
+}
+export function multiTargetSafety(policy) {
+    return {
+        allowWrites: false,
+        allowDataPreview: policy.allowDataPreview,
+        allowFreeSQL: policy.allowFreeSQL,
+        allowTransportWrites: false,
+        allowGitWrites: false,
+        allowedPackages: ['$TMP'],
+        allowedTransports: [],
+        denyActions: [],
+    };
+}
+export function targetSafety(target) {
+    return multiTargetSafety(target.effectivePolicy);
+}
+//# sourceMappingURL=destination-registry.js.map

package/dist/server/destination-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"destination-registry.js","sourceRoot":"","sources":["../../src/server/destination-registry.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAElF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EACL,iCAAiC,EACjC,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AAG3G,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAuGpC,MAAM,UAAU,yBAAyB,CAAC,KAAyB,EAAE,QAAgB;IACnF,IAAI,CAAC,KAAK;QAAE,OAAO,QAAQ,CAAC;IAC5B,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE;QACxE,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO,SAAS,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/D,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;AACnF,CAAC;AAOD,MAAM,UAAU,2BAA2B,CAAC,KAI3C;IACC,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CACL,IAAI,CAAC,SAAS,CAAC;QACb,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,mCAAmC,EAAE,KAAK,CAAC,mCAAmC,IAAI,EAAE;KACrF,CAAC,CACH;SACA,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAuB;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,mCAAmC,EAAE,KAAK,CAAC,mCAAmC,IAAI,EAAE;QACpF,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,gBAAgB,EAAE,KAAK,CAAC,eAAe,CAAC,gBAAgB;QACxD,YAAY,EAAE,KAAK,CAAC,eAAe,CAAC,YAAY;KACjD,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,kBAAkB,CAAC,UAA4C;IACtE,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;SAC9C,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,iCAAiC,CAAC,GAAG,CAAC,CAAC;SACxD,IAAI,EAAE,CAAC;IACV,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,uBAAuB,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAC5D,gBAAgB,EAAE,uBAAuB,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC;QAChF,YAAY,EAAE,uBAAuB,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;QACxE,GAAG,CAAC,2BAA2B,CAAC,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC;YACzE,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,mBAAmB,CAAC,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjG,CAAC,CAAC;AACL,CAAC;AAcD,qFAAqF;AACrF,SAAS,iBAAiB,CACxB,MAA6B,EAC7B,cAA8B,EAC9B,OAAgB,EAChB,MAAqD,EACrD,IAAoE,EACpE,OAAe;IAEf,OAAO;QACL,MAAM;QACN,OAAO;QACP,UAAU,EAAE,EAAE,GAAG,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE;KACzD,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,MAA6B,EAAE,IAAkB;IACjE,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC3D,MAAM,cAAc,GAAG;QACrB,eAAe,EAAE,MAAM,CAAC,IAAI;QAC5B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,2BAA2B,EAAE,MAAM,CAAC,2BAA2B;QAC/D,SAAS;QACT,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;KACnB,CAAC;IAEX,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;IACpD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,iBAAiB,CACtB,MAAM,EACN,cAAc,EACd,KAAK,EACL,SAAS,EACT,sBAAsB,EACtB,uCAAuC,CACxC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,iBAAiB,CACtB,MAAM,EACN,cAAc,EACd,KAAK,EACL,aAAa,EACb,sBAAsB,EACtB,qCAAqC,CACtC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,iBAAiB,CACtB,MAAM,EACN,cAAc,EACd,KAAK,EACL,UAAU,EACV,eAAe,EACf,sCAAsC,CACvC,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QACpD,IAAI,yBAAyB,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,OAAO,iBAAiB,CACtB,MAAM,EACN,cAAc,EACd,IAAI,EACJ,aAAa,EACb,6BAA6B,EAC7B,8EAA8E,CAC/E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,iCAAiC,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5C,OAAO,iBAAiB,CACtB,MAAM,EACN,cAAc,EACd,IAAI,EACJ,aAAa,EACb,uBAAuB,EACvB,2CAA2C,GAAG,EAAE,CACjD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,uBAAuB,CAAC,MAAM,CAAC,aAAa,CAAC,yBAAyB,CAAC,CAAC,CAAC;IAC/F,MAAM,YAAY,GAAG,uBAAuB,CAAC,MAAM,CAAC,aAAa,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAC1F,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,yBAAyB,CAAC,KAAK,SAAS,IAAI,aAAa,KAAK,SAAS,CAAC;QAC9F,CAAC,MAAM,CAAC,aAAa,CAAC,qBAAqB,CAAC,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,CAAC,EACzF,CAAC;QACD,OAAO,iBAAiB,CACtB,MAAM,EACN,cAAc,EACd,IAAI,EACJ,aAAa,EACb,gBAAgB,EAChB,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,iBAAiB,CACtB,MAAM,EACN,cAAc,EACd,IAAI,EACJ,aAAa,EACb,cAAc,EACd,+BAA+B,CAChC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,OAAO,iBAAiB,CACtB,MAAM,EACN,cAAc,EACd,IAAI,EACJ,aAAa,EACb,cAAc,EACd,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,iBAAiB,CACtB,MAAM,EACN,cAAc,EACd,IAAI,EACJ,aAAa,EACb,kBAAkB,EAClB,gCAAgC,CACjC,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,iBAAiB,CACtB,MAAM,EACN,cAAc,EACd,IAAI,EACJ,aAAa,EACb,aAAa,EACb,8BAA8B,CAC/B,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1D,OAAO,iBAAiB,CACtB,MAAM,EACN,cAAc,EACd,IAAI,EACJ,aAAa,EACb,aAAa,EACb,oDAAoD,CACrD,CAAC;IACJ,CAAC;IACD,IAAI,cAAoC,CAAC;IACzC,IAAI,QAAwB,CAAC;IAC7B,IAAI,MAAM,CAAC,cAAc,KAAK,sBAAsB,EAAE,CAAC;QACrD,cAAc,GAAG,sBAAsB,CAAC;QACxC,QAAQ,GAAG,UAAU,CAAC;IACxB,CAAC;SAAM,IAAI,MAAM,CAAC,cAAc,KAAK,qBAAqB,EAAE,CAAC;QAC3D,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC;YACpC,OAAO,iBAAiB,CACtB,MAAM,EACN,cAAc,EACd,IAAI,EACJ,aAAa,EACb,qBAAqB,EACrB,8EAA8E,CAC/E,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,uBAAuB,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;YAC3F,OAAO,iBAAiB,CACtB,MAAM,EACN,cAAc,EACd,IAAI,EACJ,aAAa,EACb,2BAA2B,EAC3B,oEAAoE,CACrE,CAAC;QACJ,CAAC;QACD,cAAc,GAAG,qBAAqB,CAAC;QACvC,QAAQ,GAAG,QAAQ,CAAC;IACtB,CAAC;SAAM,CAAC;QACN,OAAO,iBAAiB,CACtB,MAAM,EACN,cAAc,EACd,IAAI,EACJ,aAAa,EACb,kBAAkB,EAClB,uGAAuG,CACxG,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;QACrC,OAAO,iBAAiB,CACtB,MAAM,EACN,cAAc,EACd,IAAI,EACJ,aAAa,EACb,mBAAmB,EACnB,0CAA0C,CAC3C,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,OAAO,iBAAiB,CACtB,MAAM,EACN,cAAc,EACd,IAAI,EACJ,aAAa,EACb,eAAe,EACf,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7C,OAAO,iBAAiB,CACtB,MAAM,EACN,cAAc,EACd,IAAI,EACJ,aAAa,EACb,eAAe,EACf,uFAAuF,CACxF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO,iBAAiB,CACtB,MAAM,EACN,cAAc,EACd,IAAI,EACJ,aAAa,EACb,gBAAgB,EAChB,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,OAAO,iBAAiB,CACtB,MAAM,EACN,cAAc,EACd,IAAI,EACJ,aAAa,EACb,gBAAgB,EAChB,+CAA+C,CAChD,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;IAC9D,IAAI,WAAW,KAAK,SAAS,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAChF,OAAO,iBAAiB,CACtB,MAAM,EACN,cAAc,EACd,IAAI,EACJ,aAAa,EACb,sBAAsB,EACtB,wHAAwH,CACzH,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC;IAC3E,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,OAAO,iBAAiB,CACtB,MAAM,EACN,cAAc,EACd,IAAI,EACJ,aAAa,EACb,kBAAkB,EAClB,gDAAgD,CACjD,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC/E,MAAM,WAAW,GAAG,yBAAyB,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC5E,MAAM,mBAAmB,GAAG,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC;IACxF,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;QACpC,gBAAgB,EAAE,aAAa,IAAI,KAAK;QACxC,YAAY,EAAE,YAAY,IAAI,KAAK;KACpC,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;QACpC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,eAAe,CAAC,gBAAgB;QAC3E,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,eAAe,CAAC,YAAY;KAChE,CAAC,CAAC;IACH,MAAM,mBAAmB,GAAoE;QAC3F,MAAM,EAAE,QAAQ;QAChB,GAAG,EAAE,MAAM,CAAC,QAAQ;QACpB,MAAM,EAAE,MAAM,CAAC,SAAS;QACxB,WAAW;QACX,QAAQ;QACR,eAAe,EAAE,MAAM,CAAC,IAAI;QAC5B,cAAc;QACd,QAAQ;QACR,SAAS,EAAE,WAAW;QACtB,2BAA2B,EAAE,MAAM,CAAC,2BAA2B;QAC/D,eAAe;QACf,eAAe;KAChB,CAAC;IACF,MAAM,qBAAqB,GAAG,2BAA2B,CAAC;QACxD,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,MAAM,EAAE,MAAM,CAAC,SAAS;QACxB,mCAAmC,EAAE,MAAM,CAAC,mCAAmC;KAChF,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC3B,GAAG,mBAAmB;QACtB,qBAAqB;QACrB,WAAW,EAAE,iBAAiB,CAAC;YAC7B,GAAG,mBAAmB;YACtB,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,mCAAmC,EAAE,MAAM,CAAC,mCAAmC;SAChF,CAAC;KACH,CAAC,CAAC;IACH,OAAO;QACL,MAAM;QACN,OAAO,EAAE,IAAI;QACb,MAAM;QACN,UAAU,EAAE;YACV,GAAG,cAAc;YACjB,MAAM,EAAE,QAAQ;YAChB,WAAW;YACX,GAAG,EAAE,MAAM,CAAC,QAAQ;YACpB,MAAM,EAAE,MAAM,CAAC,SAAS;YACxB,QAAQ;YACR,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,oEAAoE;YAC7E,eAAe;YACf,eAAe;YACf,iBAAiB,EACf,eAAe,CAAC,gBAAgB,KAAK,eAAe,CAAC,gBAAgB;gBACrE,eAAe,CAAC,YAAY,KAAK,eAAe,CAAC,YAAY;YAC/D,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5E;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kCAAkC,CAChD,MAA6B,EAC7B,IAAkB;IAElB,OAAO,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC;AACvC,CAAC;AAED,SAAS,gBAAgB,CAAC,WAAwC,EAAE,OAAO,GAAgC,EAAE;IAC3G,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAC1G,MAAM,SAAS,GAAG,WAAW;SAC1B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACf,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;QACpC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;QACtB,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,EAAE;QAC1C,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,EAAE;QAChC,2BAA2B,EAAE,KAAK,CAAC,2BAA2B;QAC9D,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,iBAAiB,EAAE,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE;KACvE,CAAC,CAAC;SACF,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;SAC3D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;SAClD,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAuB;IAChD,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,KAAK,CAAC,eAAe;QACrB,KAAK,CAAC,MAAM,IAAI,EAAE;QAClB,KAAK,CAAC,MAAM;QACZ,KAAK,CAAC,IAAI,IAAI,EAAE;QAChB,KAAK,CAAC,OAAO;QACb,KAAK,CAAC,WAAW,IAAI,EAAE;QACvB,KAAK,CAAC,IAAI,IAAI,EAAE;QAChB,KAAK,CAAC,cAAc,IAAI,EAAE;QAC1B,KAAK,CAAC,SAAS,IAAI,EAAE;QACrB,KAAK,CAAC,2BAA2B;QACjC,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,eAAe;QACrB,KAAK,CAAC,eAAe;QACrB,KAAK,CAAC,QAAQ;KACf,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,IAAyB;IAChD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,4BAA4B;YAC/B,OAAO,iGAAiG,CAAC;QAC3G,KAAK,kBAAkB;YACrB,OAAO,wFAAwF,CAAC;QAClG,KAAK,4BAA4B;YAC/B,OAAO,qJAAqJ,CAAC;QAC/J,KAAK,sBAAsB;YACzB,OAAO,gGAAgG,CAAC;QAC1G;YACE,OAAO,qCAAqC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAChB,SAAqC,EACrC,WAAwC,EACxC,OAAe,EACf,MAAc;IAEd,OAAO;QACL,OAAO,EAAE,SAAS,CAAC,YAAY;QAC/B,SAAS,EAAE,SAAS,CAAC,cAAc;QACnC,WAAW,EAAE,SAAS,CAAC,6BAA6B;QACpD,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC,MAAM;QACvC,OAAO;QACP,MAAM;QACN,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,MAAM;QAC3E,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM;QACzE,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,MAAM;KAClF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,mBAAmB;IACrB,OAAO,CAA8B;IACrC,WAAW,CAA8B;IACzC,QAAQ,CAAS;IACjB,OAAO,CAAmB;IAC1B,QAAQ,CAAS;IACjB,MAAM,CAAiB;IACvB,6BAA6B,CAAS;IAC9B,QAAQ,CAAwC;IAEjE,YAAoB,IAQnB;QACC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QACxD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC1D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,6BAA6B,GAAG,IAAI,CAAC,6BAA6B,CAAC;QACxE,IAAI,CAAC,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC/E,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,OAAwB;QACzC,OAAO,IAAI,mBAAmB,CAAC;YAC7B,OAAO,EAAE,EAAE;YACX,WAAW,EAAE,EAAE;YACf,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YACzF,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;YACtC,MAAM,EAAE;gBACN,OAAO,EAAE,CAAC;gBACV,SAAS,EAAE,CAAC;gBACZ,WAAW,EAAE,CAAC;gBACd,UAAU,EAAE,CAAC;gBACb,OAAO,EAAE,CAAC;gBACV,MAAM,EAAE,CAAC;gBACT,QAAQ,EAAE,CAAC;gBACX,OAAO,EAAE,CAAC;gBACV,WAAW,EAAE,CAAC;aACf;YACD,6BAA6B,EAAE,CAAC;SACjC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,aAAa,CAAC,SAAqC,EAAE,IAAkB;QAC5E,MAAM,SAAS,GAAG,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;QAC/E,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QACvE,IAAI,YAAY,GAAG,gBAAgB,EAAE,CAAC;YACpC,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1C,KAAK,CAAC,OAAO;gBACX,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;oBACZ,GAAG,KAAK,CAAC,UAAU;oBACnB,MAAM,EAAE,aAAsB;oBAC9B,IAAI,EAAE,uBAAgC;oBACtC,OAAO,EAAE,6CAA6C,gBAAgB,mCAAmC;iBAC1G,CAAC;gBACJ,CAAC,CAAC,KAAK,CAAC,UAAU,CACrB,CAAC;YACF,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrF,OAAO,IAAI,mBAAmB,CAAC;gBAC7B,OAAO,EAAE,EAAE;gBACX,WAAW;gBACX,QAAQ,EAAE,gBAAgB,CAAC,WAAW,CAAC;gBACvC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;oBACrB,IAAI,EAAE,uBAAuB;oBAC7B,OAAO,EAAE,GAAG,YAAY,0DAA0D,gBAAgB,GAAG;iBACtG,CAAC;gBACF,MAAM,EAAE,SAAS,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC;gBAC1D,6BAA6B,EAAE,SAAS,CAAC,6BAA6B;aACvE,CAAC,CAAC;QACL,CAAC;QAED,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;QACpD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC/C,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAkB,CAAC;QACxD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACvD,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9B,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9F,IAAI,KAAK,CAAC,MAAM;gBAAE,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1G,IAAI,KAAK,CAAC,MAAM,EAAE,cAAc,KAAK,qBAAqB,EAAE,CAAC;gBAC3D,qBAAqB,CAAC,GAAG,CACvB,KAAK,CAAC,MAAM,CAAC,qBAAqB,EAClC,CAAC,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CACzE,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAuB,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAuB,EAAE,CAAC;QACvC,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9B,IAAI,QAAyC,CAAC;YAC9C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;gBAAE,QAAQ,GAAG,4BAA4B,CAAC;iBAC5F,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,QAAQ,GAAG,sBAAsB,CAAC;iBAC5E,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;gBAAE,QAAQ,GAAG,kBAAkB,CAAC;iBACpG,IACH,KAAK,CAAC,MAAM,EAAE,cAAc,KAAK,qBAAqB;gBACtD,CAAC,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EACxE,CAAC;gBACD,QAAQ,GAAG,4BAA4B,CAAC;YAC1C,CAAC;YAED,IAAI,QAAQ,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC9B,WAAW,CAAC,IAAI,CACd,MAAM,CAAC,MAAM,CAAC;oBACZ,GAAG,KAAK,CAAC,UAAU;oBACnB,MAAM,EAAE,aAAa;oBACrB,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,eAAe,CAAC,QAAQ,CAAC;iBACnC,CAAC,CACH,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;gBAClD,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,QAAQ;oBAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACzD,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrF,OAAO,IAAI,mBAAmB,CAAC;YAC7B,OAAO;YACP,WAAW;YACX,QAAQ,EAAE,gBAAgB,CAAC,WAAW,EAAE,OAAO,CAAC;YAChD,MAAM,EAAE,SAAS,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC;YACvE,6BAA6B,EAAE,SAAS,CAAC,6BAA6B;SACvE,CAAC,CAAC;IACL,CAAC;IAED,GAAG,CAAC,MAAc;QAChB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,SAAS;QACX,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;IACvB,CAAC;CACF;AAED,qFAAqF;AACrF,MAAM,UAAU,wBAAwB,CACtC,QAA6B,EAC7B,gBAAiD,EACjD,qBAA8B;IAE9B,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3F,OAAO,QAAQ,CAAC,OAAO;SACpB,MAAM,CACL,CAAC,MAAM,EAAE,EAAE,CACT,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC;QAC3C,CAAC,CAAC,CAAC,qBAAqB,IAAI,MAAM,CAAC,qBAAqB,KAAK,qBAAqB,CAAC,CACtF;SACA,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,gCAAgC,CAC9C,QAA6B,EAC7B,0BAA8C,EAC9C,qBAAyC,EACzC,2BAAoC;IAEpC,IAAI,CAAC,2BAA2B;QAAE,OAAO,EAAE,CAAC;IAC5C,OAAO,wBAAwB,CAAC,QAAQ,EAAE,CAAC,0BAA0B,CAAC,EAAE,qBAAqB,CAAC,CAAC,MAAM,CACnG,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,QAAQ,KAAK,QAAQ,CAC5D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAoB;IACpD,OAAO;QACL,WAAW,EAAE,KAAK;QAClB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,oBAAoB,EAAE,KAAK;QAC3B,cAAc,EAAE,KAAK;QACrB,eAAe,EAAE,CAAC,MAAM,CAAC;QACzB,iBAAiB,EAAE,EAAE;QACrB,WAAW,EAAE,EAAE;KAChB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAwB;IACnD,OAAO,iBAAiB,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;AACnD,CAAC"}