cordisx 0.1.0-beta.21 → 0.1.0-beta.22

package/dist/src/launcher/model-catalog/managed-provider-owner.js

@@ -0,0 +1,348 @@
+import { createHash, randomBytes } from 'node:crypto';
+import { lstat, mkdir, realpath, rmdir } from 'node:fs/promises';
+import path from 'node:path';
+import { createMacOSKeychainBackend } from '../secret-store.js';
+import { CatalogError, object } from './contracts.js';
+import { withAbort } from './abort.js';
+import { createDiscoveryRequestCapability } from './request-capability.js';
+import { ManagedCatalogState } from './managed-catalog-state.js';
+import { managedProviderSettings, managedProviderView, opaqueProviderId, parseManagedProviderRecord, } from './managed-provider-schema.js';
+const nonce = () => randomBytes(32).toString('base64url');
+const failure = () => new CatalogError('credential-unavailable');
+const metadataOf = ({ secret: _secret, ...value }) => Object.freeze(value);
+/** Host composition only. Never register this object as a plugin context service or renderer global. */
+export class ManagedProviderOwner {
+    #backend;
+    #service;
+    #lock;
+    #lockIdentity;
+    #fetcher;
+    #records = new Map();
+    #retired = [];
+    #index = '';
+    #tail = Promise.resolve();
+    #closed = false;
+    #closePromise;
+    #leases = new Set();
+    #listeners = new Set();
+    #state;
+    constructor(backend, service, lock, identity, fetcher) {
+        this.#backend = backend;
+        this.#service = service;
+        this.#lock = lock;
+        this.#lockIdentity = identity;
+        this.#fetcher = fetcher;
+        this.#state = new ManagedCatalogState(`${lock}.state`, backend, service, () => this.#assertCurrent());
+    }
+    static async open(options) {
+        if (!/^[a-z0-9][a-z0-9._-]{0,63}$/u.test(options.profileId))
+            throw failure();
+        if (!options.keychain && (options.platform ?? process.platform) !== 'darwin')
+            throw failure();
+        const home = await realpath(options.homeDir);
+        const directory = path.join(home, 'state', 'host-provider-owners');
+        await mkdir(directory, { recursive: true, mode: 0o700 });
+        const metadata = await lstat(directory);
+        if (!metadata.isDirectory() || (metadata.mode & 0o077) !== 0 || (process.getuid && metadata.uid !== process.getuid())) {
+            throw failure();
+        }
+        const lock = path.join(directory, `${options.profileId}.lock`);
+        // A crashed owner needs explicit lock recovery. Never steal a possibly healthy owner's lease.
+        try {
+            await mkdir(lock, { mode: 0o700 });
+        }
+        catch {
+            throw failure();
+        }
+        const identity = await lstat(lock);
+        const scope = createHash('sha256').update(JSON.stringify([home, options.profileId])).digest('hex');
+        const owner = new ManagedProviderOwner(options.keychain ?? createMacOSKeychainBackend(), `cordisx/host-provider/v1/${scope}`, lock, identity, options.fetcher);
+        try {
+            await owner.#load();
+            return owner;
+        }
+        catch {
+            await owner.close();
+            throw failure();
+        }
+    }
+    snapshot() {
+        if (this.#closed)
+            return [];
+        return Object.freeze([...this.#records.values()].map(record => managedProviderView(record.value)));
+    }
+    subscribe(listener) {
+        this.#listeners.add(listener);
+        return () => {
+            this.#listeners.delete(listener);
+        };
+    }
+    /** Host-only encrypted configuration/cache/overlay state; never mount these methods on RPC. */
+    readCatalogState() {
+        return this.#serial(() => this.#state.read());
+    }
+    writeCatalogState(value, authorized) {
+        return this.#serial(() => this.#state.write(value, authorized));
+    }
+    validateCurrent() {
+        return this.#assertCurrent();
+    }
+    /** Only the native credential broker consumes this private session. Not an adapter capability. */
+    async nativeConnection(id, admittedResponses = () => false) {
+        await this.#assertCurrent();
+        const entry = this.#records.get(id);
+        if (!entry || entry.value.settings.protocol !== 'responses' && !admittedResponses()) {
+            throw new CatalogError('unsupported');
+        }
+        const record = await this.#readRecord(entry);
+        await this.#assertCurrent();
+        if (this.#records.get(id) !== entry || record.settings.protocol !== 'responses' && !admittedResponses()) {
+            throw new CatalogError('cancelled');
+        }
+        const endpoint = new URL(record.settings.endpoint);
+        return Object.freeze({
+            value: Object.freeze({
+                service: { pluginId: 'cordisx-host', serviceId: id, generation: record.scopeRevision },
+                endpoint: {
+                    origin: endpoint.origin,
+                    apiPath: endpoint.pathname,
+                    auth: { scheme: 'bearer', token: record.secret },
+                },
+                models: { generation: record.revision, defaultAlias: '', aliases: [] },
+                cleanup: { authorityId: record.scopeRevision },
+            }),
+            dispose() { },
+        });
+    }
+    /** capture must be a trusted Host-private prompt, not a renderer/plugin secret field. */
+    save(input, capture, authorized = () => true) {
+        return this.#serial(async () => {
+            if (!authorized())
+                throw new CatalogError('permission');
+            await this.#assertCurrent();
+            await this.#cleanup();
+            const settings = managedProviderSettings(input.settings);
+            const prior = input.id === undefined ? undefined : this.#records.get(input.id);
+            if (input.id !== undefined && (!prior || prior.value.revision !== input.expectedRevision)) {
+                throw new CatalogError('source-invalid');
+            }
+            if (!prior && (input.expectedRevision !== undefined || !capture || this.#records.size >= 64)) {
+                throw new CatalogError('source-invalid');
+            }
+            const abort = new AbortController();
+            this.#leases.add(abort);
+            const timer = setTimeout(() => abort.abort(), 60_000);
+            timer.unref?.();
+            try {
+                const secret = capture
+                    ? await withAbort(capture(abort.signal), abort.signal)
+                    : (await this.#readRecord(prior)).secret;
+                await this.#assertCurrent();
+                if (!authorized())
+                    throw new CatalogError('permission');
+                const changedScope = !prior || capture !== undefined || settings.endpoint !== prior.value.settings.endpoint
+                    || settings.protocol !== prior.value.settings.protocol;
+                if (changedScope && prior && settings.supplement.length)
+                    throw new CatalogError('source-invalid');
+                const record = parseManagedProviderRecord({
+                    id: prior?.value.id ?? nonce(),
+                    revision: nonce(),
+                    scopeRevision: changedScope ? nonce() : prior.value.scopeRevision,
+                    credentialRevision: capture ? nonce() : prior.value.credentialRevision,
+                    credentialRef: capture ? nonce() : prior.value.credentialRef,
+                    settings,
+                    secret,
+                });
+                const ref = nonce();
+                const raw = JSON.stringify(record);
+                if (raw.length > 16 * 1024)
+                    throw new CatalogError('source-invalid');
+                // Journal the new slot before writing it so interrupted provisioning can erase it on reopen.
+                await this.#commit(this.#records, [ref], authorized);
+                // The new Keychain record is immutable. The index switch is the durable commit point.
+                await this.#backend.upsert(this.#service, ref, raw);
+                const next = new Map(this.#records).set(record.id, { ref, value: metadataOf(record) });
+                try {
+                    await this.#commit(next, prior ? [prior.ref] : [], authorized);
+                }
+                catch (error) {
+                    // A backend failure may occur after its write. Never delete a possibly committed record.
+                    this.#closed = true;
+                    this.#revoke();
+                    throw error;
+                }
+                await this.#cleanup();
+                return managedProviderView(record);
+            }
+            finally {
+                clearTimeout(timer);
+                this.#leases.delete(abort);
+                abort.abort();
+            }
+        });
+    }
+    remove(id, expectedRevision, authorized = () => true) {
+        return this.#serial(async () => {
+            if (!authorized())
+                throw new CatalogError('permission');
+            await this.#assertCurrent();
+            await this.#cleanup();
+            const prior = this.#records.get(id);
+            if (!prior || prior.value.revision !== expectedRevision)
+                throw new CatalogError('source-invalid');
+            const next = new Map(this.#records);
+            next.delete(id);
+            await this.#commit(next, [prior.ref], authorized);
+            await this.#cleanup();
+        });
+    }
+    /** At most one fixed operation. No plugin-supplied adapter, URL, headers or credential lookup. */
+    connection(id) {
+        const entry = this.#records.get(id);
+        if (this.#closed || !entry || !entry.value.settings.discoveryEnabled || entry.value.settings.strategy.kind !== 'auto')
+            return undefined;
+        const record = entry.value;
+        const current = () => !this.#closed && this.#records.get(id) === entry;
+        return Object.freeze({
+            endpoint: record.settings.endpoint,
+            scopeRevision: record.scopeRevision,
+            current,
+            request: async (operation, externalSignal) => {
+                if (this.#leases.size >= 4)
+                    throw new CatalogError('temporary');
+                const abort = new AbortController();
+                this.#leases.add(abort);
+                const timer = setTimeout(() => abort.abort(), 10_000);
+                timer.unref?.();
+                const signal = AbortSignal.any([externalSignal, abort.signal]);
+                try {
+                    await this.#assertCurrent();
+                    const request = createDiscoveryRequestCapability({
+                        operation: { origin: 'https://api.deepseek.com', method: 'GET', path: '/models' },
+                        current: () => current() && !signal.aborted,
+                        bearer: async () => {
+                            await this.#assertCurrent();
+                            const latest = await this.#readRecord(entry);
+                            return latest.secret;
+                        },
+                        ...(this.#fetcher ? { fetcher: this.#fetcher } : {}),
+                    });
+                    const response = await request(operation, signal);
+                    await this.#assertCurrent();
+                    if (!current())
+                        throw new CatalogError('cancelled');
+                    return response;
+                }
+                catch (error) {
+                    throw error instanceof CatalogError ? error : failure();
+                }
+                finally {
+                    clearTimeout(timer);
+                    this.#leases.delete(abort);
+                }
+            },
+        });
+    }
+    async #load() {
+        if (await this.#backend.status(this.#service, 'index') === 'unset') {
+            this.#index = JSON.stringify({ version: 1, entries: [], retired: [] });
+            await this.#backend.upsert(this.#service, 'index', this.#index);
+        }
+        else
+            this.#index = await this.#backend.read(this.#service, 'index');
+        const index = object(JSON.parse(this.#index));
+        if (!index || index.version !== 1 || Object.keys(index).length !== 3 || !Array.isArray(index.entries)
+            || index.entries.length > 64
+            || !Array.isArray(index.retired) || index.retired.length > 64 || !index.retired.every(opaqueProviderId))
+            throw failure();
+        this.#retired = [...index.retired];
+        for (const value of index.entries) {
+            const item = object(value);
+            if (!item || Object.keys(item).length !== 2 || !opaqueProviderId(item.id) || !opaqueProviderId(item.ref)
+                || this.#records.has(item.id))
+                throw failure();
+            const record = parseManagedProviderRecord(JSON.parse(await this.#backend.read(this.#service, item.ref)));
+            if (record.id !== item.id)
+                throw failure();
+            if (this.#retired.includes(item.ref))
+                throw failure();
+            this.#records.set(item.id, { ref: item.ref, value: metadataOf(record) });
+        }
+        await this.#cleanup();
+    }
+    async #readRecord(entry) {
+        const latest = parseManagedProviderRecord(JSON.parse(await this.#backend.read(this.#service, entry.ref)));
+        if (JSON.stringify(metadataOf(latest)) !== JSON.stringify(entry.value))
+            throw failure();
+        return latest;
+    }
+    async #cleanup() {
+        if (!this.#retired.length)
+            return;
+        for (const ref of this.#retired)
+            await this.#backend.remove(this.#service, ref);
+        await this.#commit(this.#records, []);
+    }
+    async #assertCurrent() {
+        if (this.#closed)
+            throw failure();
+        const metadata = await lstat(this.#lock).catch(() => undefined);
+        if (!metadata?.isDirectory() || metadata.dev !== this.#lockIdentity.dev || metadata.ino !== this.#lockIdentity.ino
+            || await this.#backend.read(this.#service, 'index') !== this.#index) {
+            this.#closed = true;
+            this.#revoke();
+            throw failure();
+        }
+        if (this.#closed)
+            throw failure();
+    }
+    async #commit(next, retired, authorized = () => true) {
+        await this.#assertCurrent();
+        if (!authorized())
+            throw new CatalogError('permission');
+        const index = JSON.stringify({
+            version: 1,
+            entries: [...next].map(([id, record]) => ({ id, ref: record.ref })),
+            retired,
+        });
+        await this.#backend.upsert(this.#service, 'index', index);
+        this.#index = index;
+        this.#records = next;
+        this.#retired = retired;
+        this.#revoke();
+        if (this.#closed)
+            return;
+        for (const listener of this.#listeners) {
+            try {
+                listener();
+            }
+            catch { /* Reader isolation. */ }
+        }
+    }
+    #revoke() {
+        for (const lease of this.#leases)
+            lease.abort();
+        this.#leases.clear();
+    }
+    #serial(action) {
+        const job = this.#tail.then(action).catch(error => {
+            throw error instanceof CatalogError ? error : failure();
+        });
+        this.#tail = job.catch(() => undefined);
+        return job;
+    }
+    close() {
+        this.#closePromise ??= (async () => {
+            this.#closed = true;
+            this.#revoke();
+            this.#listeners.clear();
+            await this.#tail;
+            this.#records.clear();
+            const metadata = await lstat(this.#lock).catch(() => undefined);
+            if (metadata?.dev === this.#lockIdentity.dev && metadata.ino === this.#lockIdentity.ino)
+                await rmdir(this.#lock);
+        })();
+        return this.#closePromise;
+    }
+}
+//# sourceMappingURL=managed-provider-owner.js.map

package/dist/src/launcher/model-catalog/managed-provider-owner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-provider-owner.js","sourceRoot":"","sources":["../../../../src/launcher/model-catalog/managed-provider-owner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AAChE,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,0BAA0B,EAAgC,MAAM,oBAAoB,CAAA;AAC7F,OAAO,EAAE,YAAY,EAAmD,MAAM,EAAE,MAAM,gBAAgB,CAAA;AACtG,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AACtC,OAAO,EAAE,gCAAgC,EAAuB,MAAM,yBAAyB,CAAA;AAC/F,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAEhE,OAAO,EAEL,uBAAuB,EAEvB,mBAAmB,EACnB,gBAAgB,EAChB,0BAA0B,GAC3B,MAAM,8BAA8B,CAAA;AAErC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AACzD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,YAAY,CAAC,wBAAwB,CAAC,CAAA;AAEhE,MAAM,UAAU,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,EAAyB,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAUjG,wGAAwG;AACxG,MAAM,OAAO,oBAAoB;IACtB,QAAQ,CAAyB;IACjC,QAAQ,CAAQ;IAChB,KAAK,CAAQ;IACb,aAAa,CAA8B;IAC3C,QAAQ,CAA4B;IAC7C,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAA;IACzC,QAAQ,GAAa,EAAE,CAAA;IACvB,MAAM,GAAG,EAAE,CAAA;IACX,KAAK,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAA;IAC3C,OAAO,GAAG,KAAK,CAAA;IACf,aAAa,CAAgB;IAC7B,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAA;IACpC,UAAU,GAAG,IAAI,GAAG,EAAc,CAAA;IACzB,MAAM,CAAqB;IAEpC,YACE,OAAgC,EAChC,OAAe,EACf,IAAY,EACZ,QAAsC,EACtC,OAAwB;QAExB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;QACvB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;QACvB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAA;QACjB,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAA;QAC7B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;QACvB,IAAI,CAAC,MAAM,GAAG,IAAI,mBAAmB,CAAC,GAAG,IAAI,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAA;IACvG,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAqB;QACrC,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;YAAE,MAAM,OAAO,EAAE,CAAA;QAC5E,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,QAAQ;YAAE,MAAM,OAAO,EAAE,CAAA;QAC7F,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,CAAC,CAAA;QAClE,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACxD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAA;QACvC,IACE,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,EACjH,CAAC;YACD,MAAM,OAAO,EAAE,CAAA;QACjB,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,SAAS,OAAO,CAAC,CAAA;QAC9D,8FAA8F;QAC9F,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,OAAO,EAAE,CAAA;QACjB,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;QAClC,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAClG,MAAM,KAAK,GAAG,IAAI,oBAAoB,CACpC,OAAO,CAAC,QAAQ,IAAI,0BAA0B,EAAE,EAChD,4BAA4B,KAAK,EAAE,EACnC,IAAI,EACJ,QAAQ,EACR,OAAO,CAAC,OAAO,CAChB,CAAA;QACD,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,KAAK,EAAE,CAAA;YACnB,OAAO,KAAK,CAAA;QACd,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,KAAK,CAAC,KAAK,EAAE,CAAA;YACnB,MAAM,OAAO,EAAE,CAAA;QACjB,CAAC;IACH,CAAC;IAED,QAAQ;QACN,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAA;QAC3B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IACpG,CAAC;IAED,SAAS,CAAC,QAAoB;QAC5B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC7B,OAAO,GAAG,EAAE;YACV,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QAClC,CAAC,CAAA;IACH,CAAC;IAED,+FAA+F;IAC/F,gBAAgB;QACd,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;IAC/C,CAAC;IACD,iBAAiB,CAAC,KAAc,EAAE,UAAyB;QACzD,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAA;IACjE,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,cAAc,EAAE,CAAA;IAC9B,CAAC;IAED,kGAAkG;IAClG,KAAK,CAAC,gBAAgB,CACpB,EAAU,EACV,oBAAmC,GAAG,EAAE,CAAC,KAAK;QAE9C,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACnC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,KAAK,WAAW,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;YACpF,MAAM,IAAI,YAAY,CAAC,aAAa,CAAC,CAAA;QACvC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;QAC5C,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAC3B,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,WAAW,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;YACxG,MAAM,IAAI,YAAY,CAAC,WAAW,CAAC,CAAA;QACrC,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QAClD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;gBACnB,OAAO,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,aAAa,EAAE;gBACtF,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,OAAO,EAAE,QAAQ,CAAC,QAAwB;oBAC1C,IAAI,EAAE,EAAE,MAAM,EAAE,QAAiB,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;iBAC1D;gBACD,MAAM,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;gBACtE,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,aAAa,EAAE;aAC/C,CAAC;YACF,OAAO,KAAI,CAAC;SACb,CAAC,CAAA;IACJ,CAAC;IAED,yFAAyF;IACzF,IAAI,CACF,KAA+F,EAC/F,OAAkD,EAClD,aAA4B,GAAG,EAAE,CAAC,IAAI;QAEtC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YAC7B,IAAI,CAAC,UAAU,EAAE;gBAAE,MAAM,IAAI,YAAY,CAAC,YAAY,CAAC,CAAA;YACvD,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;YAC3B,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAA;YACrB,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;YACxD,MAAM,KAAK,GAAG,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YAC9E,IAAI,KAAK,CAAC,EAAE,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC1F,MAAM,IAAI,YAAY,CAAC,gBAAgB,CAAC,CAAA;YAC1C,CAAC;YACD,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC7F,MAAM,IAAI,YAAY,CAAC,gBAAgB,CAAC,CAAA;YAC1C,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAA;YACnC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YACvB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAA;YACrD,KAAK,CAAC,KAAK,EAAE,EAAE,CAAA;YACf,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,OAAO;oBACpB,CAAC,CAAC,MAAM,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC;oBACtD,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,KAAM,CAAC,CAAC,CAAC,MAAM,CAAA;gBAC3C,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;gBAC3B,IAAI,CAAC,UAAU,EAAE;oBAAE,MAAM,IAAI,YAAY,CAAC,YAAY,CAAC,CAAA;gBACvD,MAAM,YAAY,GAAG,CAAC,KAAK,IAAI,OAAO,KAAK,SAAS,IAAI,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ;uBACtG,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAA;gBACxD,IAAI,YAAY,IAAI,KAAK,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM;oBAAE,MAAM,IAAI,YAAY,CAAC,gBAAgB,CAAC,CAAA;gBACjG,MAAM,MAAM,GAAG,0BAA0B,CAAC;oBACxC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,IAAI,KAAK,EAAE;oBAC9B,QAAQ,EAAE,KAAK,EAAE;oBACjB,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,KAAM,CAAC,KAAK,CAAC,aAAa;oBAClE,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,KAAM,CAAC,KAAK,CAAC,kBAAkB;oBACvE,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,KAAM,CAAC,KAAK,CAAC,aAAa;oBAC7D,QAAQ;oBACR,MAAM;iBACP,CAAC,CAAA;gBACF,MAAM,GAAG,GAAG,KAAK,EAAE,CAAA;gBACnB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;gBAClC,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI;oBAAE,MAAM,IAAI,YAAY,CAAC,gBAAgB,CAAC,CAAA;gBACpE,6FAA6F;gBAC7F,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,CAAA;gBACpD,sFAAsF;gBACtF,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;gBACnD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;gBACtF,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,UAAU,CAAC,CAAA;gBAChE,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,yFAAyF;oBACzF,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;oBACnB,IAAI,CAAC,OAAO,EAAE,CAAA;oBACd,MAAM,KAAK,CAAA;gBACb,CAAC;gBACD,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAA;gBACrB,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAA;YACpC,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,KAAK,CAAC,CAAA;gBACnB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBAC1B,KAAK,CAAC,KAAK,EAAE,CAAA;YACf,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,CAAC,EAAU,EAAE,gBAAwB,EAAE,aAA4B,GAAG,EAAE,CAAC,IAAI;QACjF,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YAC7B,IAAI,CAAC,UAAU,EAAE;gBAAE,MAAM,IAAI,YAAY,CAAC,YAAY,CAAC,CAAA;YACvD,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;YAC3B,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAA;YACrB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACnC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,KAAK,gBAAgB;gBAAE,MAAM,IAAI,YAAY,CAAC,gBAAgB,CAAC,CAAA;YACjG,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACnC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YACf,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,CAAA;YACjD,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAA;QACvB,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,kGAAkG;IAClG,UAAU,CAAC,EAAU;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACnC,IACE,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM;YACjH,OAAO,SAAS,CAAA;QAClB,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAA;QAC1B,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,KAAK,CAAA;QACtE,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ;YAClC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,OAAO;YACP,OAAO,EAAE,KAAK,EAAE,SAA2B,EAAE,cAA2B,EAAE,EAAE;gBAC1E,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;oBAAE,MAAM,IAAI,YAAY,CAAC,WAAW,CAAC,CAAA;gBAC/D,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAA;gBACnC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;gBACvB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAA;gBACrD,KAAK,CAAC,KAAK,EAAE,EAAE,CAAA;gBACf,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;gBAC9D,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;oBAC3B,MAAM,OAAO,GAAG,gCAAgC,CAAC;wBAC/C,SAAS,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE;wBACjF,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;wBAC3C,MAAM,EAAE,KAAK,IAAI,EAAE;4BACjB,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;4BAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;4BAC5C,OAAO,MAAM,CAAC,MAAM,CAAA;wBACtB,CAAC;wBACD,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACrD,CAAC,CAAA;oBACF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;oBACjD,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;oBAC3B,IAAI,CAAC,OAAO,EAAE;wBAAE,MAAM,IAAI,YAAY,CAAC,WAAW,CAAC,CAAA;oBACnD,OAAO,QAAQ,CAAA;gBACjB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,KAAK,YAAY,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA;gBACzD,CAAC;wBAAS,CAAC;oBACT,YAAY,CAAC,KAAK,CAAC,CAAA;oBACnB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBAC5B,CAAC;YACH,CAAC;SACF,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,OAAO,EAAE,CAAC;YACnE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAA;YACtE,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QACjE,CAAC;;YAAM,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QACrE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;QAC7C,IACE,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;eAC9F,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE;eACzB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC;YACvG,MAAM,OAAO,EAAE,CAAA;QACjB,IAAI,CAAC,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAA;QAClC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;YAC1B,IACE,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;mBACjG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,MAAM,OAAO,EAAE,CAAA;YACjB,MAAM,MAAM,GAAG,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;YACxG,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE;gBAAE,MAAM,OAAO,EAAE,CAAA;YAC1C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,MAAM,OAAO,EAAE,CAAA;YACrD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC1E,CAAC;QACD,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAA;IACvB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAkB;QAClC,MAAM,MAAM,GAAG,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACzG,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,MAAM,OAAO,EAAE,CAAA;QACvF,OAAO,MAAM,CAAA;IACf,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,OAAM;QACjC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;QAC/E,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;IACvC,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,OAAO,EAAE,CAAA;QACjC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC/D,IACE,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,QAAQ,CAAC,GAAG,KAAK,IAAI,CAAC,aAAa,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,KAAK,IAAI,CAAC,aAAa,CAAC,GAAG;eAC3G,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC,MAAM,EACnE,CAAC;YACD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;YACnB,IAAI,CAAC,OAAO,EAAE,CAAA;YACd,MAAM,OAAO,EAAE,CAAA;QACjB,CAAC;QACD,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,OAAO,EAAE,CAAA;IACnC,CAAC;IAED,KAAK,CAAC,OAAO,CACX,IAA8B,EAC9B,OAAiB,EACjB,aAA4B,GAAG,EAAE,CAAC,IAAI;QAEtC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAC3B,IAAI,CAAC,UAAU,EAAE;YAAE,MAAM,IAAI,YAAY,CAAC,YAAY,CAAC,CAAA;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;YAC3B,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;YACnE,OAAO;SACR,CAAC,CAAA;QACF,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,CAAA;QACzD,IAAI,CAAC,MAAM,GAAG,KAAK,CAAA;QACnB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;QACpB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;QACvB,IAAI,CAAC,OAAO,EAAE,CAAA;QACd,IAAI,IAAI,CAAC,OAAO;YAAE,OAAM;QACxB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,QAAQ,EAAE,CAAA;YACZ,CAAC;YAAC,MAAM,CAAC,CAAC,uBAAuB,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO;YAAE,KAAK,CAAC,KAAK,EAAE,CAAA;QAC/C,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;IAED,OAAO,CAAI,MAAwB;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YAChD,MAAM,KAAK,YAAY,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA;QACzD,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACvC,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,KAAK;QACH,IAAI,CAAC,aAAa,KAAK,CAAC,KAAK,IAAI,EAAE;YACjC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;YACnB,IAAI,CAAC,OAAO,EAAE,CAAA;YACd,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAA;YACvB,MAAM,IAAI,CAAC,KAAK,CAAA;YAChB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAA;YACrB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAC/D,IAAI,QAAQ,EAAE,GAAG,KAAK,IAAI,CAAC,aAAa,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,KAAK,IAAI,CAAC,aAAa,CAAC,GAAG;gBAAE,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClH,CAAC,CAAC,EAAE,CAAA;QACJ,OAAO,IAAI,CAAC,aAAa,CAAA;IAC3B,CAAC;CACF"}

package/dist/src/launcher/model-catalog/managed-provider-schema.d.ts

@@ -0,0 +1,31 @@
+import { type CatalogStrategy } from './contracts.js';
+export interface ManagedProviderSettings {
+    readonly title: string;
+    readonly endpoint: string;
+    readonly protocol: 'responses' | 'chat-completions';
+    readonly discoveryEnabled: boolean;
+    readonly strategy: CatalogStrategy;
+    readonly supplement: readonly {
+        readonly id: string;
+        readonly label?: string;
+    }[];
+}
+export declare function managedProviderSettings(value: unknown): ManagedProviderSettings;
+export declare const opaqueProviderId: (value: unknown) => value is string;
+export interface ManagedProviderView {
+    readonly id: string;
+    readonly revision: string;
+    readonly scopeRevision: string;
+    readonly credentialRevision: string;
+    readonly credentialState: 'set';
+    readonly settings: ManagedProviderSettings;
+}
+/** Stored only in the dedicated Host Keychain namespace; never a renderer/plugin descriptor. */
+export interface ManagedProviderRecord extends Omit<ManagedProviderView, 'credentialState'> {
+    readonly credentialRef: string;
+    readonly secret: string;
+    readonly settings: ManagedProviderSettings;
+}
+export declare function parseManagedProviderRecord(value: unknown): ManagedProviderRecord;
+export declare function managedProviderView(record: Omit<ManagedProviderRecord, 'secret'>): ManagedProviderView;
+//# sourceMappingURL=managed-provider-schema.d.ts.map

package/dist/src/launcher/model-catalog/managed-provider-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-provider-schema.d.ts","sourceRoot":"","sources":["../../../../src/launcher/model-catalog/managed-provider-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAA+B,KAAK,eAAe,EAAgC,MAAM,gBAAgB,CAAA;AAIhH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,QAAQ,EAAE,WAAW,GAAG,kBAAkB,CAAA;IACnD,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAA;IAClC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAA;IAClC,QAAQ,CAAC,UAAU,EAAE,SAAS;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CACjF;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,uBAAuB,CA0C/E;AAED,eAAO,MAAM,gBAAgB,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,MACM,CAAA;AAEjE,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAA;IACnC,QAAQ,CAAC,eAAe,EAAE,KAAK,CAAA;IAC/B,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAA;CAC3C;AAED,gGAAgG;AAChG,MAAM,WAAW,qBAAsB,SAAQ,IAAI,CAAC,mBAAmB,EAAE,iBAAiB,CAAC;IACzF,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAA;CAC3C;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,qBAAqB,CAqBhF;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,qBAAqB,EAAE,QAAQ,CAAC,GAAG,mBAAmB,CAStG"}

package/dist/src/launcher/model-catalog/managed-provider-schema.js

@@ -0,0 +1,71 @@
+import { boundedString, CatalogError, object, parseCatalogStrategy } from './contracts.js';
+import { parseSupplement } from './supplement.js';
+import { isDeepSeekOfficialEndpoint } from './deepseek.js';
+export function managedProviderSettings(value) {
+    const input = object(value);
+    if (!input
+        || Object.keys(input).some(key => !['title', 'endpoint', 'protocol', 'discoveryEnabled', 'strategy', 'supplement'].includes(key)) || !boundedString(input.title, 128) || !boundedString(input.endpoint, 2048)
+        || !['responses', 'chat-completions'].includes(String(input.protocol))
+        || typeof input.discoveryEnabled !== 'boolean')
+        throw new CatalogError('source-invalid');
+    let endpoint;
+    try {
+        endpoint = new URL(input.endpoint);
+    }
+    catch {
+        throw new CatalogError('source-invalid');
+    }
+    if (endpoint.protocol !== 'https:' || endpoint.username || endpoint.password || endpoint.search || endpoint.hash
+        || /[\\?#]/u.test(input.endpoint) || endpoint.href !== input.endpoint && endpoint.href !== `${input.endpoint}/`)
+        throw new CatalogError('source-invalid');
+    const strategy = parseCatalogStrategy(input.strategy);
+    // This owner does not execute scripts, read native secrets, or accept arbitrary local file references.
+    if (strategy.kind !== 'auto' && !(strategy.kind === 'manual' && 'ids' in strategy)) {
+        throw new CatalogError('unsupported');
+    }
+    if (strategy.kind === 'auto'
+        && (!isDeepSeekOfficialEndpoint(input.endpoint) || !['detect', 'deepseek-official'].includes(strategy.adapter)))
+        throw new CatalogError('unsupported');
+    const supplement = parseSupplement({
+        scopeRevision: 'validation',
+        authorityRevision: 'validation',
+        models: input.supplement,
+    });
+    return Object.freeze({
+        title: input.title,
+        endpoint: input.endpoint,
+        protocol: input.protocol,
+        discoveryEnabled: input.discoveryEnabled,
+        strategy,
+        supplement: supplement.models,
+    });
+}
+export const opaqueProviderId = (value) => typeof value === 'string' && /^[A-Za-z0-9_-]{43}$/u.test(value);
+export function parseManagedProviderRecord(value) {
+    const input = object(value);
+    if (!input
+        || Object.keys(input).some(key => !['id', 'revision', 'scopeRevision', 'credentialRevision', 'credentialRef', 'settings', 'secret'].includes(key))
+        || ![input.id, input.revision, input.scopeRevision, input.credentialRevision, input.credentialRef].every(opaqueProviderId)
+        || !boundedString(input.secret, 8192) || /\s/u.test(input.secret))
+        throw new CatalogError('source-invalid');
+    return Object.freeze({
+        id: input.id,
+        revision: input.revision,
+        scopeRevision: input.scopeRevision,
+        credentialRevision: input.credentialRevision,
+        credentialRef: input.credentialRef,
+        secret: input.secret,
+        settings: managedProviderSettings(input.settings),
+    });
+}
+export function managedProviderView(record) {
+    return Object.freeze({
+        id: record.id,
+        revision: record.revision,
+        scopeRevision: record.scopeRevision,
+        credentialRevision: record.credentialRevision,
+        credentialState: 'set',
+        settings: record.settings,
+    });
+}
+//# sourceMappingURL=managed-provider-schema.js.map

package/dist/src/launcher/model-catalog/managed-provider-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-provider-schema.js","sourceRoot":"","sources":["../../../../src/launcher/model-catalog/managed-provider-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,YAAY,EAAwB,MAAM,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AAChH,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAA;AAW1D,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3B,IACE,CAAC,KAAK;WACH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC/B,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,kBAAkB,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAC/F,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC;WAC1E,CAAC,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;WACnE,OAAO,KAAK,CAAC,gBAAgB,KAAK,SAAS;QAC9C,MAAM,IAAI,YAAY,CAAC,gBAAgB,CAAC,CAAA;IAC1C,IAAI,QAAa,CAAA;IACjB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,gBAAgB,CAAC,CAAA;IAC1C,CAAC;IACD,IACE,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI;WACzG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,GAAG,KAAK,CAAC,QAAQ,GAAG;QAC/G,MAAM,IAAI,YAAY,CAAC,gBAAgB,CAAC,CAAA;IAC1C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IACrD,uGAAuG;IACvG,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,IAAI,QAAQ,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,YAAY,CAAC,aAAa,CAAC,CAAA;IACvC,CAAC;IACD,IACE,QAAQ,CAAC,IAAI,KAAK,MAAM;WACrB,CAAC,CAAC,0BAA0B,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC/G,MAAM,IAAI,YAAY,CAAC,aAAa,CAAC,CAAA;IACvC,MAAM,UAAU,GAAG,eAAe,CAAC;QACjC,aAAa,EAAE,YAAY;QAC3B,iBAAiB,EAAE,YAAY;QAC/B,MAAM,EAAE,KAAK,CAAC,UAAU;KACzB,CAAC,CAAA;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAA+C;QAC/D,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,QAAQ;QACR,UAAU,EAAE,UAAU,CAAC,MAAM;KAC9B,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAAmB,EAAE,CAClE,OAAO,KAAK,KAAK,QAAQ,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAkBjE,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3B,IACE,CAAC,KAAK;WACH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC/B,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,eAAe,EAAE,oBAAoB,EAAE,eAAe,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAChH;WACE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,kBAAkB,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,KAAK,CACtG,gBAAgB,CACjB;WACE,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QACjE,MAAM,IAAI,YAAY,CAAC,gBAAgB,CAAC,CAAA;IAC1C,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,KAAK,CAAC,EAAY;QACtB,QAAQ,EAAE,KAAK,CAAC,QAAkB;QAClC,aAAa,EAAE,KAAK,CAAC,aAAuB;QAC5C,kBAAkB,EAAE,KAAK,CAAC,kBAA4B;QACtD,aAAa,EAAE,KAAK,CAAC,aAAuB;QAC5C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC;KAClD,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAA6C;IAC/E,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,eAAe,EAAE,KAAK;QACtB,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC,CAAA;AACJ,CAAC"}

package/dist/src/launcher/model-catalog/owner-projection.d.ts

@@ -0,0 +1,20 @@
+import type { NativeModelProviderCatalogEntry } from '../native-model-provider-catalog.js';
+import type { CatalogBinding, CatalogModel, DiscoveryConnection } from './contracts.js';
+import { ModelCatalogService } from './service.js';
+import type { DiscoveryAdapterRegistry } from './registry.js';
+export interface CatalogOwnerBinding {
+    readonly binding: CatalogBinding;
+    readonly provider: Omit<NativeModelProviderCatalogEntry, 'models'>;
+    readonly connection?: DiscoveryConnection;
+    readonly read: (signal: AbortSignal) => Promise<readonly CatalogModel[]>;
+}
+/** The effective target owner supplies bindings; this adapter never scans native credentials. */
+export declare function createOwnerCatalogProjection(registry: DiscoveryAdapterRegistry): {
+    service: ModelCatalogService;
+    update(binding: CatalogOwnerBinding): void;
+    remove(bindingRef: string): void;
+    catalog(): readonly NativeModelProviderCatalogEntry[];
+    subscribe: (listener: () => void) => () => void;
+    dispose(): void;
+};
+//# sourceMappingURL=owner-projection.d.ts.map

package/dist/src/launcher/model-catalog/owner-projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-projection.d.ts","sourceRoot":"","sources":["../../../../src/launcher/model-catalog/owner-projection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,qCAAqC,CAAA;AAC1F,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AACvF,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAA;AAE7D,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;IAChC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,+BAA+B,EAAE,QAAQ,CAAC,CAAA;IAClE,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAA;IACzC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC,CAAA;CACzE;AAED,iGAAiG;AACjG,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,wBAAwB;;oBAS3D,mBAAmB;uBAShB,MAAM;eAId,SAAS,+BAA+B,EAAE;0BAM/B,MAAM,IAAI;;EAMnC"}

package/dist/src/launcher/model-catalog/owner-projection.js

@@ -0,0 +1,37 @@
+import { ModelCatalogService } from './service.js';
+/** The effective target owner supplies bindings; this adapter never scans native credentials. */
+export function createOwnerCatalogProjection(registry) {
+    const bindings = new Map();
+    const service = new ModelCatalogService({
+        registry,
+        connection: binding => bindings.get(binding.bindingRef)?.connection,
+        read: (binding, signal) => bindings.get(binding.bindingRef)?.read(signal) ?? Promise.resolve([]),
+    });
+    return {
+        service,
+        update(binding) {
+            const duplicate = [...bindings.values()].find(value => value.provider.providerId === binding.provider.providerId
+                && value.binding.bindingRef !== binding.binding.bindingRef);
+            if (duplicate)
+                throw new Error('Ambiguous target provider identity');
+            bindings.set(binding.binding.bindingRef, binding);
+            service.configure(binding.binding);
+        },
+        remove(bindingRef) {
+            bindings.delete(bindingRef);
+            service.remove(bindingRef);
+        },
+        catalog() {
+            return Object.freeze([...bindings.values()].map(({ binding, provider }) => {
+                const snapshot = service.snapshot(binding.bindingRef);
+                return Object.freeze({ ...provider, models: snapshot?.models ?? Object.freeze([]) });
+            }));
+        },
+        subscribe: (listener) => service.subscribe(listener),
+        dispose() {
+            service.dispose();
+            bindings.clear();
+        },
+    };
+}
+//# sourceMappingURL=owner-projection.js.map

package/dist/src/launcher/model-catalog/owner-projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-projection.js","sourceRoot":"","sources":["../../../../src/launcher/model-catalog/owner-projection.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAUlD,iGAAiG;AACjG,MAAM,UAAU,4BAA4B,CAAC,QAAkC;IAC7E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA+B,CAAA;IACvD,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC;QACtC,QAAQ;QACR,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,UAAU;QACnE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;KACjG,CAAC,CAAA;IACF,OAAO;QACL,OAAO;QACP,MAAM,CAAC,OAA4B;YACjC,MAAM,SAAS,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CACpD,KAAK,CAAC,QAAQ,CAAC,UAAU,KAAK,OAAO,CAAC,QAAQ,CAAC,UAAU;mBACtD,KAAK,CAAC,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,OAAO,CAAC,UAAU,CAC3D,CAAA;YACD,IAAI,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;YACpE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;YACjD,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QACpC,CAAC;QACD,MAAM,CAAC,UAAkB;YACvB,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;YAC3B,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QAC5B,CAAC;QACD,OAAO;YACL,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE;gBACxE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;gBACrD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;YACtF,CAAC,CAAC,CAAC,CAAA;QACL,CAAC;QACD,SAAS,EAAE,CAAC,QAAoB,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC;QAChE,OAAO;YACL,OAAO,CAAC,OAAO,EAAE,CAAA;YACjB,QAAQ,CAAC,KAAK,EAAE,CAAA;QAClB,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/src/launcher/model-catalog/registry.d.ts

@@ -0,0 +1,7 @@
+import { type DiscoveryAdapter } from './contracts.js';
+export declare class DiscoveryAdapterRegistry {
+    private readonly adapters;
+    constructor(adapters: readonly DiscoveryAdapter[]);
+    resolve(endpoint: string, requested?: string): DiscoveryAdapter;
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist/src/launcher/model-catalog/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../../src/launcher/model-catalog/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAEpE,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;gBAE1C,QAAQ,EAAE,SAAS,gBAAgB,EAAE;IAOjD,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,SAAW,GAAG,gBAAgB;CAQlE"}

package/dist/src/launcher/model-catalog/registry.js

@@ -0,0 +1,19 @@
+import { CatalogError } from './contracts.js';
+export class DiscoveryAdapterRegistry {
+    adapters;
+    constructor(adapters) {
+        if (new Set(adapters.map(adapter => adapter.id)).size !== adapters.length) {
+            throw new Error('Duplicate discovery adapter');
+        }
+        this.adapters = Object.freeze([...adapters]);
+    }
+    resolve(endpoint, requested = 'detect') {
+        const matches = this.adapters.filter(adapter => (requested === 'detect' || adapter.id === requested) && adapter.matches(endpoint));
+        if (matches.length === 0)
+            throw new CatalogError('unsupported');
+        if (matches.length !== 1)
+            throw new CatalogError('ambiguous');
+        return matches[0];
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/src/launcher/model-catalog/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../../src/launcher/model-catalog/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAyB,MAAM,gBAAgB,CAAA;AAEpE,MAAM,OAAO,wBAAwB;IAClB,QAAQ,CAA6B;IAEtD,YAAY,QAAqC;QAC/C,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;QAChD,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAA;IAC9C,CAAC;IAED,OAAO,CAAC,QAAgB,EAAE,SAAS,GAAG,QAAQ;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAC7C,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAClF,CAAA;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,aAAa,CAAC,CAAA;QAC/D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,WAAW,CAAC,CAAA;QAC7D,OAAO,OAAO,CAAC,CAAC,CAAE,CAAA;IACpB,CAAC;CACF"}

package/dist/src/launcher/model-catalog/request-capability.d.ts

@@ -0,0 +1,10 @@
+import { type DiscoveryConnection, type DiscoveryRequest } from './contracts.js';
+export type DiscoveryFetch = (url: string, init: RequestInit) => Promise<Response>;
+/** Host-only credential use. Adapters cannot supply headers, a body or a destination. */
+export declare function createDiscoveryRequestCapability(input: {
+    readonly operation: DiscoveryRequest;
+    readonly current: () => boolean;
+    readonly bearer: (signal: AbortSignal) => Promise<string | undefined>;
+    readonly fetcher?: DiscoveryFetch;
+}): DiscoveryConnection['request'];
+//# sourceMappingURL=request-capability.d.ts.map

package/dist/src/launcher/model-catalog/request-capability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-capability.d.ts","sourceRoot":"","sources":["../../../../src/launcher/model-catalog/request-capability.ts"],"names":[],"mappings":"AAAA,OAAO,EAA+B,KAAK,mBAAmB,EAAE,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAG7G,MAAM,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;AAElF,yFAAyF;AACzF,wBAAgB,gCAAgC,CAAC,KAAK,EAAE;IACtD,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAA;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAA;IAC/B,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;IACrE,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAA;CAClC,GAAG,mBAAmB,CAAC,SAAS,CAAC,CA+DjC"}