managed-deepagents 0.5.0-dev.80 → 0.5.0-dev.82

package/dist/identity/google/oauth.js

@@ -0,0 +1,48 @@
+/**
+ * Google BYO OAuth descriptor — optional non-LangSmith Connect-with-Google.
+ * The default path uses Fleet auth-sessions instead.
+ */
+import { createByoOauthClient, } from "../byo-oauth.js";
+export { MDA_PUBLIC_API_URL_ENV, MDA_PUBLIC_APP_URL_ENV, OAUTH_STATE_SIGNING_KEY_ENV, readOauthStateSigningKey, } from "../byo-oauth.js";
+const DEFAULT_AUTH_URL = "https://accounts.google.com/o/oauth2/v2/auth";
+const DEFAULT_TOKEN_URL = "https://oauth2.googleapis.com/token";
+const DEFAULT_USERINFO_URL = "https://www.googleapis.com/oauth2/v3/userinfo";
+/** Profile-only default; connector-derived unions replace this at authorize time. */
+const DEFAULT_SCOPES = ["openid", "email", "profile"].join(" ");
+/** Google BYO OAuth client (config, authorize, exchange, Fleet adapter). */
+export const googleByoOauth = createByoOauthClient({
+    providerId: "google",
+    displayName: "Google",
+    envPrefix: "GOOGLE_OAUTH",
+    defaultEndpoints: () => ({
+        authUrl: DEFAULT_AUTH_URL,
+        tokenUrl: DEFAULT_TOKEN_URL,
+        userInfoUrl: DEFAULT_USERINFO_URL,
+        defaultScopes: DEFAULT_SCOPES,
+    }),
+    authorizeParams: { access_type: "offline" },
+    parseUserInfo(json) {
+        return {
+            ...(typeof json.email === "string" && json.email
+                ? { email: json.email }
+                : {}),
+            ...(typeof json.sub === "string" && json.sub
+                ? { subject: json.sub }
+                : {}),
+        };
+    },
+    subjectMetadataKey: "google_sub",
+});
+export const GOOGLE_OAUTH_CLIENT_ID_ENV = googleByoOauth.env.clientId;
+export const GOOGLE_OAUTH_CLIENT_SECRET_ENV = googleByoOauth.env.clientSecret;
+export const GOOGLE_OAUTH_SCOPES_ENV = googleByoOauth.env.scopes;
+export const GOOGLE_OAUTH_AUTH_URL_ENV = googleByoOauth.env.authUrl;
+export const GOOGLE_OAUTH_TOKEN_URL_ENV = googleByoOauth.env.tokenUrl;
+export const GOOGLE_OAUTH_USERINFO_URL_ENV = googleByoOauth.env.userInfoUrl;
+/** Google-bound OAuth state / connect-ticket helpers. */
+export const googleOauthTickets = googleByoOauth.tickets;
+export const resolveGoogleOauthRedirectBase = googleByoOauth.resolveRedirectBase;
+export const readGoogleOauthConfig = googleByoOauth.readConfig;
+export const buildGoogleAuthorizeUrl = googleByoOauth.buildAuthorizeUrl;
+export const exchangeGoogleOauthCode = googleByoOauth.exchangeCode;
+//# sourceMappingURL=oauth.js.map

package/dist/identity/google/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/identity/google/oauth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,oBAAoB,GAGrB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AAIzB,MAAM,gBAAgB,GAAG,8CAA8C,CAAC;AACxE,MAAM,iBAAiB,GAAG,qCAAqC,CAAC;AAChE,MAAM,oBAAoB,GAAG,+CAA+C,CAAC;AAC7E,qFAAqF;AACrF,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEhE,4EAA4E;AAC5E,MAAM,CAAC,MAAM,cAAc,GAAmB,oBAAoB,CAAC;IACjE,UAAU,EAAE,QAAQ;IACpB,WAAW,EAAE,QAAQ;IACrB,SAAS,EAAE,cAAc;IACzB,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;QACvB,OAAO,EAAE,gBAAgB;QACzB,QAAQ,EAAE,iBAAiB;QAC3B,WAAW,EAAE,oBAAoB;QACjC,aAAa,EAAE,cAAc;KAC9B,CAAC;IACF,eAAe,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE;IAC3C,aAAa,CAAC,IAAI;QAChB,OAAO;YACL,GAAG,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK;gBAC9C,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;gBACvB,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG;gBAC1C,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;gBACvB,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IACD,kBAAkB,EAAE,YAAY;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC;AACtE,MAAM,CAAC,MAAM,8BAA8B,GAAG,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC;AAC9E,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC;AACjE,MAAM,CAAC,MAAM,yBAAyB,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC;AACpE,MAAM,CAAC,MAAM,0BAA0B,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC;AACtE,MAAM,CAAC,MAAM,6BAA6B,GAAG,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC;AAE5E,yDAAyD;AACzD,MAAM,CAAC,MAAM,kBAAkB,GAAG,cAAc,CAAC,OAAO,CAAC;AAEzD,MAAM,CAAC,MAAM,8BAA8B,GACzC,cAAc,CAAC,mBAAmB,CAAC;AAErC,MAAM,CAAC,MAAM,qBAAqB,GAAG,cAAc,CAAC,UAAU,CAAC;AAC/D,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAc,CAAC,iBAAiB,CAAC;AACxE,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAc,CAAC,YAAY,CAAC"}

package/dist/identity/index.d.ts

@@ -17,6 +17,13 @@ export type { IdentityAuth, IdentityOptions, IdentityScope, IdentityScopeOverrid
 export { credentialTargetNames, isSingleCredentialResolver, } from "./credential-resolvers.js";
 export type { ClaimMapping, CredentialConnectRequirements, CredentialResolver, CredentialResolverConfig, CredentialResolvers, CredentialScope, CredentialTarget, HttpIngress, IdentityConfig, IdentityConnectProvider, IdentityDefinition, MemoryScope, OrganizationRequirement, ResolvedCredential, RuntimeIdentity, ThreadScope, ValidatedTokenIngress, ValidatedTokenProvider, } from "./types.js";
 export type { GitHubAppJwtArgs, GitHubCredentialsOptions, GitHubTokenSource, GitHubUserTokenArgs, } from "./github/credentials.js";
+export { createFleetAuthSession, deleteAgentConnection, hasFleetAuthCredentials, listAgentConnections, resolveFleetApiUrl, resolveFleetHeaders, upsertAgentProviderToken, type CreateFleetAuthSessionBody, type FleetAuthSession, type FleetClientOptions, type FleetConnection, type UpsertAgentProviderTokenBody, } from "./fleet.js";
+export { agentIdFromActor, enableActorSubjectIntegrationsFromConnectors, enableActorSubjectIntegration, isActorSubjectIntegrationEnabled, isActorSubjectSlugEnabled, NAMESPACE_MDA_ACTOR, resetActorSubjectEnabledForTests, resolveActorDeploymentId, type AgentIdFromActorOptions, } from "./actor-subject.js";
+export { createFleetVaultConnectProvider, fleetConnectUrl, isFleetVaultConnectConfigured, type FleetVaultByoOauth, type FleetVaultByoOauthConfig, type FleetVaultConnectProviderOptions, type FleetVaultByoTokenResult, } from "./fleet-connect.js";
+export { createByoOauthClient, type ByoOauthClient, type ByoOauthConfig, type CreateByoOauthClientOptions, } from "./byo-oauth.js";
+export { createFleetIntegrationConnectProvider, fleetIntegrationConnectUrl, isFleetIntegrationConnectConfigured, type FleetIntegrationConnectProviderOptions, } from "./fleet-integration-connect.js";
+export { createFleetConnectHintMiddleware, fleetConnectHintUrl, rewriteFleetToolError, } from "./fleet-connect-hint.js";
+export { createConnectTicket, createOauthState, oauthTicketsFor, verifyConnectTicket, verifyOauthState, type OauthTickets, } from "./oauth-tickets.js";
 /**
  * Declare the identity contract for the deployment.
  *
@@ -73,6 +80,15 @@ export declare const auth: {
         issuer: string;
         audience?: string;
     }): ValidatedTokenProvider;
+    /**
+     * LangSmith OAuth access tokens (Ed25519 JWTs). Verifies against LangSmith's
+     * public JWKS. `apiUrl` defaults to the US SaaS endpoint; override for another
+     * region or self-hosted LangSmith. Audience is the same URL — LangSmith only
+     * mints tokens for its own API (and MCP), so it cannot be narrowed further.
+     */
+    langsmith({ apiUrl, }?: {
+        apiUrl?: string;
+    }): ValidatedTokenProvider;
     /**
      * GitHub OAuth access tokens (opaque bearer tokens, not JWTs). MDA verifies
      * each request by calling `GET https://api.github.com/user` with the token.

package/dist/identity/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAqB,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,KAAK,uBAAuB,EAAoB,MAAM,eAAe,CAAC;AAC/E,OAAO,KAAK,EAGV,cAAc,EACd,kBAAkB,EAElB,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,YAAY,EACV,YAAY,EACZ,eAAe,EACf,aAAa,EACb,sBAAsB,GACvB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,YAAY,EACZ,6BAA6B,EAC7B,kBAAkB,EAClB,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,cAAc,EACd,uBAAuB,EACvB,kBAAkB,EAClB,WAAW,EACX,uBAAuB,EACvB,kBAAkB,EAClB,eAAe,EACf,WAAW,EACX,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,gBAAgB,EAChB,wBAAwB,EACxB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,yBAAyB,CAAC;AAEjC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,cAAc,CAC5B,OAAO,GAAE,eAAoB,GAC5B,kBAAkB,CAIpB;AAED;;;;GAIG;AACH,eAAO,MAAM,IAAI;IACf,KAAK,wBAGF;QACD,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,sBAAsB;IAU1B,KAAK,aAAa;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,sBAAsB;IAS7D,IAAI,wBAGD;QACD,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,sBAAsB;IAU1B,OAAO,0BAGJ;QACD,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,sBAAsB;IAU1B,KAAK,0BAGF;QACD,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,sBAAsB;IAU1B,MAAM,gBAAe;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAQ,sBAAsB;IAUxE,oCAAoC;IACpC,QAAQ,UAAU,uBAAuB,GAAG,sBAAsB;IAIlE,mEAAmE;IACnE,IAAI,wBAGD;QACD,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,sBAAsB;IAU1B;;;OAGG;IACH,MAAM,IAAI,sBAAsB;IAehC,yCAAyC;IACzC,KAAK,wBAGF;QACD,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,gEAAgE;QAChE,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAQ,sBAAsB;CAWhC,CAAC;AAIF;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CA4E7D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAqB,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,KAAK,uBAAuB,EAAoB,MAAM,eAAe,CAAC;AAC/E,OAAO,KAAK,EAGV,cAAc,EACd,kBAAkB,EAElB,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,YAAY,EACV,YAAY,EACZ,eAAe,EACf,aAAa,EACb,sBAAsB,GACvB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,YAAY,EACZ,6BAA6B,EAC7B,kBAAkB,EAClB,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,cAAc,EACd,uBAAuB,EACvB,kBAAkB,EAClB,WAAW,EACX,uBAAuB,EACvB,kBAAkB,EAClB,eAAe,EACf,WAAW,EACX,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,gBAAgB,EAChB,wBAAwB,EACxB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,wBAAwB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,4BAA4B,GAClC,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,gBAAgB,EAChB,4CAA4C,EAC5C,6BAA6B,EAC7B,gCAAgC,EAChC,yBAAyB,EACzB,mBAAmB,EACnB,gCAAgC,EAChC,wBAAwB,EACxB,KAAK,uBAAuB,GAC7B,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,+BAA+B,EAC/B,eAAe,EACf,6BAA6B,EAC7B,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,gCAAgC,EACrC,KAAK,wBAAwB,GAC9B,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,oBAAoB,EACpB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,2BAA2B,GACjC,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,qCAAqC,EACrC,0BAA0B,EAC1B,mCAAmC,EACnC,KAAK,sCAAsC,GAC5C,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,gCAAgC,EAChC,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EAChB,KAAK,YAAY,GAClB,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,cAAc,CAC5B,OAAO,GAAE,eAAoB,GAC5B,kBAAkB,CAIpB;AAED;;;;GAIG;AACH,eAAO,MAAM,IAAI;IACf,KAAK,wBAGF;QACD,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,sBAAsB;IAU1B,KAAK,aAAa;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,sBAAsB;IAS7D,IAAI,wBAGD;QACD,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,sBAAsB;IAU1B,OAAO,0BAGJ;QACD,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,sBAAsB;IAU1B,KAAK,0BAGF;QACD,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,sBAAsB;IAU1B,MAAM,gBAAe;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAQ,sBAAsB;IAUxE,oCAAoC;IACpC,QAAQ,UAAU,uBAAuB,GAAG,sBAAsB;IAIlE,mEAAmE;IACnE,IAAI,wBAGD;QACD,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,sBAAsB;IAU1B;;;;;OAKG;IACH,SAAS,eAEN;QACD,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAQ,sBAAsB;IAW/B;;;OAGG;IACH,MAAM,IAAI,sBAAsB;IAehC,yCAAyC;IACzC,KAAK,wBAGF;QACD,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,gEAAgE;QAChE,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAQ,sBAAsB;CAWhC,CAAC;AAKF;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CA4E7D"}

package/dist/identity/index.js

@@ -15,6 +15,13 @@ import { supabaseProvider } from "./supabase.js";
 export { normalizeGroups, organizationClaimName, userClaimName, } from "./claims.js";
 export { normalizeIdentity } from "./options.js";
 export { credentialTargetNames, isSingleCredentialResolver, } from "./credential-resolvers.js";
+export { createFleetAuthSession, deleteAgentConnection, hasFleetAuthCredentials, listAgentConnections, resolveFleetApiUrl, resolveFleetHeaders, upsertAgentProviderToken, } from "./fleet.js";
+export { agentIdFromActor, enableActorSubjectIntegrationsFromConnectors, enableActorSubjectIntegration, isActorSubjectIntegrationEnabled, isActorSubjectSlugEnabled, NAMESPACE_MDA_ACTOR, resetActorSubjectEnabledForTests, resolveActorDeploymentId, } from "./actor-subject.js";
+export { createFleetVaultConnectProvider, fleetConnectUrl, isFleetVaultConnectConfigured, } from "./fleet-connect.js";
+export { createByoOauthClient, } from "./byo-oauth.js";
+export { createFleetIntegrationConnectProvider, fleetIntegrationConnectUrl, isFleetIntegrationConnectConfigured, } from "./fleet-integration-connect.js";
+export { createFleetConnectHintMiddleware, fleetConnectHintUrl, rewriteFleetToolError, } from "./fleet-connect-hint.js";
+export { createConnectTicket, createOauthState, oauthTicketsFor, verifyConnectTicket, verifyOauthState, } from "./oauth-tickets.js";
 /**
  * Declare the identity contract for the deployment.
  *
@@ -113,6 +120,22 @@ export const auth = {
             claims: { user: "sub" },
         };
     },
+    /**
+     * LangSmith OAuth access tokens (Ed25519 JWTs). Verifies against LangSmith's
+     * public JWKS. `apiUrl` defaults to the US SaaS endpoint; override for another
+     * region or self-hosted LangSmith. Audience is the same URL — LangSmith only
+     * mints tokens for its own API (and MCP), so it cannot be narrowed further.
+     */
+    langsmith({ apiUrl = "https://api.smith.langchain.com", } = {}) {
+        return {
+            id: "langsmith",
+            issuer: apiUrl,
+            jwks: `${apiUrl}/.well-known/jwks.json`,
+            algorithms: ["EdDSA"],
+            audience: apiUrl,
+            claims: { user: "sub" },
+        };
+    },
     /**
      * GitHub OAuth access tokens (opaque bearer tokens, not JWTs). MDA verifies
      * each request by calling `GET https://api.github.com/user` with the token.
@@ -144,7 +167,8 @@ export const auth = {
         };
     },
 };
-const MANAGED_CREDENTIAL_MODES = ["agent", "user", "none"];
+/** Non-custom credentials modes currently selectable on `CredentialScope`. */
+const MANAGED_CREDENTIAL_MODES = ["user", "agent", "none"];
 /**
  * Eagerly reject illegal identity configs at authoring time so misconfig never
  * reaches the compiler or runtime.

package/dist/identity/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAwB,MAAM,cAAc,CAAC;AACvE,OAAO,EAAgC,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAU/E,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAQjD,OAAO,EACL,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,2BAA2B,CAAC;AA6BnC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAO,GAAoB,EAAE;IAE7B,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC1C,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,KAAK,CAAC,EACJ,MAAM,EACN,QAAQ,GAIT;QACC,OAAO;YACL,MAAM,EAAE,WAAW,MAAM,GAAG;YAC5B,IAAI,EAAE,WAAW,MAAM,wBAAwB;YAC/C,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE;SAClE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,EAAE,MAAM,EAAsB;QAClC,OAAO;YACL,MAAM,EAAE,WAAW,MAAM,EAAE;YAC3B,IAAI,EAAE,WAAW,MAAM,wBAAwB;YAC/C,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACxB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,EACH,MAAM,EACN,QAAQ,GAIT;QACC,OAAO;YACL,MAAM,EAAE,WAAW,MAAM,EAAE;YAC3B,IAAI,EAAE,WAAW,MAAM,iBAAiB;YACxC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACxB,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,EACN,UAAU,EACV,MAAM,GAIP;QACC,MAAM,MAAM,GAAG,uBAAuB,MAAM,kBAAkB,UAAU,EAAE,CAAC;QAC3E,OAAO;YACL,MAAM;YACN,IAAI,EAAE,GAAG,MAAM,wBAAwB;YACvC,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACxB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,EACJ,QAAQ,EACR,QAAQ,GAIT;QACC,OAAO;YACL,MAAM,EAAE,qCAAqC,QAAQ,OAAO;YAC5D,IAAI,EAAE,qCAAqC,QAAQ,sBAAsB;YACzE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE;SAC1C,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,EAAE,QAAQ,EAAE,GAA0B,EAAE;QAC7C,OAAO;YACL,MAAM,EAAE,6BAA6B;YACrC,IAAI,EAAE,4CAA4C;YAClD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE;SACxC,CAAC;IACJ,CAAC;IAED,oCAAoC;IACpC,QAAQ,CAAC,OAAgC;QACvC,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAED,mEAAmE;IACnE,IAAI,CAAC,EACH,MAAM,EACN,QAAQ,GAIT;QACC,OAAO;YACL,MAAM;YACN,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACxB,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,MAAM;QACJ,OAAO;YACL,EAAE,EAAE,QAAQ;YACZ,UAAU,EAAE;gBACV,GAAG,EAAE,6BAA6B;gBAClC,OAAO,EAAE;oBACP,MAAM,EAAE,6BAA6B;oBACrC,sBAAsB,EAAE,YAAY;oBACpC,YAAY,EAAE,mCAAmC;iBAClD;aACF;YACD,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;SAC1C,CAAC;IACJ,CAAC;IAED,yCAAyC;IACzC,KAAK,CAAC,EACJ,GAAG,EACH,UAAU,GACX,GAIG,EAAE;QACJ,OAAO;YACL,EAAE,EAAE,OAAO;YACX,KAAK,EAAE;gBACL,KAAK,EAAE,IAAI;gBACX,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtC;YACD,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACxB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,wBAAwB,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AAEpE;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAsB;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAyC,CAAC;IACjE,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CACb,+FAA+F,CAChG,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;IAC3C,IAAI,aAAa,KAAK,UAAU,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CACb,8EAA8E,CAC/E,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAER,CAAC;IACd,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,kGAAkG,CACnG,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;QACjC,MAAM,gBAAgB,GACpB,CAAC,SAAS,EAAE,QAAQ,EAAE,aAAa,CACpC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,CAAC;QACnD,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,wDAAwD,gBAAgB,CAAC,IAAI,CAC3E,IAAI,CACL,kEAAkE,CACpE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC;IACrD,MAAM,eAAe,GAAG,KAAK,CAAC,WAAW,CAAC;IAC1C,IAAI,eAAe,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CACb,qGAAqG,CACtG,CAAC;IACJ,CAAC;IACD,IACE,WAAW;QACX,OAAO,eAAe,KAAK,QAAQ;QAClC,wBAA8C,CAAC,QAAQ,CAAC,eAAe,CAAC,EACzE,CAAC;QACD,MAAM,IAAI,KAAK,CACb,qFAAqF,eAAe,KAAK;YACvG,2DAA2D,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,EAAE,CAAC;QAChB,0BAA0B,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACjD,CAAC;IAED,8EAA8E;IAC9E,MAAM,IAAI,GAAI,OAA6B,CAAC,IAAI,CAAC;IACjD,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;SAAM,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,iHAAiH,CAClH,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,wBAAwB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAgB;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,+EAA+E;YAC7E,+CAA+C,CAClD,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,+BAA+B,KAAK,8CAA8C,CACnF,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,KAQhB,CAAC;QACF,IAAI,OAAO,QAAQ,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CACb,+BAA+B,KAAK,uCAAuC,CAC5E,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,MAAM,IAAI;YACnB,aAAa;YACb,QAAQ;YACR,gBAAgB;YAChB,kBAAkB;YAClB,QAAQ;YACR,qBAAqB;SACb,EAAE,CAAC;YACX,IAAI,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC;gBAC3C,MAAM,IAAI,KAAK,CACb,+BAA+B,KAAK,OAAO,QAAQ,CAAC,EAAE,iBAAiB,MAAM,KAAK,CACnF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAa;IACrC,OAAO,CACL,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACZ,IAA2B,CAAC,IAAI,KAAK,iBAAiB,CACxD,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,IAA2B;IACzD,MAAM,IAAI,GAAI,IAAgC,CAAC,SAAS,CAAC;IACzD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IACjC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,KAA+B,CAAC;QACjD,MAAM,KAAK,GAAG,QAAQ,EAAE,EAAE,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1C,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CACb,gDAAgD,KAAK,qBAAqB,CAC3E,CAAC;QACJ,CAAC;QACD,IACE,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ;YACnC,QAAQ,CAAC,MAAM,KAAK,IAAI;YACxB,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC/B,CAAC;YACD,MAAM,IAAI,KAAK,CACb,gDAAgD,KAAK,4BAA4B,CAClF,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,IAAI,OAAO,QAAQ,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,sGAAsG,CACvG,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GACf,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;YACjC,QAAQ,CAAC,QAAQ,KAAK,IAAI;YAC1B,OAAO,QAAQ,CAAC,YAAY,KAAK,QAAQ;YACzC,QAAQ,CAAC,UAAU,KAAK,SAAS;YACjC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC;QAC/B,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,gDAAgD,KAAK,8FAA8F,CACpJ,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,WAAoB;IACtD,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACb,kFAAkF;YAChF,oDAAoD,CACvD,CAAC;IACJ,CAAC;IACD,IACE,0BAA0B,CACxB,WAA6D,CAC9D,EACD,CAAC;QACD,6BAA6B,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;QAC5D,OAAO;IACT,CAAC;IACD,4EAA4E;IAC5E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,WAAsC,CAAC,CAAC;IACvE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,0EAA0E;YACxE,+CAA+C,CAClD,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;QACJ,CAAC;QACD,6BAA6B,CAAC,KAAK,EAAE,iBAAiB,IAAI,IAAI,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,SAAS,6BAA6B,CAAC,KAAc,EAAE,KAAa;IAClE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,uBAAuB,KAAK,sEAAsE,CACnG,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,KAAkD,CAAC;IAC/D,MAAM,YAAY,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU,CAAC;IACvD,MAAM,WAAW,GACf,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAChC,GAAG,CAAC,QAAQ,KAAK,IAAI;QACrB,OAAQ,GAAG,CAAC,QAA8B,CAAC,GAAG,KAAK,QAAQ,CAAC;IAC9D,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,uBAAuB,KAAK,4EAA4E,CACzG,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAwB,MAAM,cAAc,CAAC;AACvE,OAAO,EAAgC,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAU/E,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAQjD,OAAO,EACL,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,2BAA2B,CAAC;AA6BnC,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,wBAAwB,GAMzB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,gBAAgB,EAChB,4CAA4C,EAC5C,6BAA6B,EAC7B,gCAAgC,EAChC,yBAAyB,EACzB,mBAAmB,EACnB,gCAAgC,EAChC,wBAAwB,GAEzB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,+BAA+B,EAC/B,eAAe,EACf,6BAA6B,GAK9B,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,oBAAoB,GAIrB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,qCAAqC,EACrC,0BAA0B,EAC1B,mCAAmC,GAEpC,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,gCAAgC,EAChC,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,gBAAgB,GAEjB,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAO,GAAoB,EAAE;IAE7B,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC1C,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,KAAK,CAAC,EACJ,MAAM,EACN,QAAQ,GAIT;QACC,OAAO;YACL,MAAM,EAAE,WAAW,MAAM,GAAG;YAC5B,IAAI,EAAE,WAAW,MAAM,wBAAwB;YAC/C,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE;SAClE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,EAAE,MAAM,EAAsB;QAClC,OAAO;YACL,MAAM,EAAE,WAAW,MAAM,EAAE;YAC3B,IAAI,EAAE,WAAW,MAAM,wBAAwB;YAC/C,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACxB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,EACH,MAAM,EACN,QAAQ,GAIT;QACC,OAAO;YACL,MAAM,EAAE,WAAW,MAAM,EAAE;YAC3B,IAAI,EAAE,WAAW,MAAM,iBAAiB;YACxC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACxB,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,EACN,UAAU,EACV,MAAM,GAIP;QACC,MAAM,MAAM,GAAG,uBAAuB,MAAM,kBAAkB,UAAU,EAAE,CAAC;QAC3E,OAAO;YACL,MAAM;YACN,IAAI,EAAE,GAAG,MAAM,wBAAwB;YACvC,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACxB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,EACJ,QAAQ,EACR,QAAQ,GAIT;QACC,OAAO;YACL,MAAM,EAAE,qCAAqC,QAAQ,OAAO;YAC5D,IAAI,EAAE,qCAAqC,QAAQ,sBAAsB;YACzE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE;SAC1C,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,EAAE,QAAQ,EAAE,GAA0B,EAAE;QAC7C,OAAO;YACL,MAAM,EAAE,6BAA6B;YACrC,IAAI,EAAE,4CAA4C;YAClD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE;SACxC,CAAC;IACJ,CAAC;IAED,oCAAoC;IACpC,QAAQ,CAAC,OAAgC;QACvC,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAED,mEAAmE;IACnE,IAAI,CAAC,EACH,MAAM,EACN,QAAQ,GAIT;QACC,OAAO;YACL,MAAM;YACN,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACxB,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,SAAS,CAAC,EACR,MAAM,GAAG,iCAAiC,GAC3C,GAEG,EAAE;QACJ,OAAO;YACL,EAAE,EAAE,WAAW;YACf,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,GAAG,MAAM,wBAAwB;YACvC,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACxB,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,MAAM;QACJ,OAAO;YACL,EAAE,EAAE,QAAQ;YACZ,UAAU,EAAE;gBACV,GAAG,EAAE,6BAA6B;gBAClC,OAAO,EAAE;oBACP,MAAM,EAAE,6BAA6B;oBACrC,sBAAsB,EAAE,YAAY;oBACpC,YAAY,EAAE,mCAAmC;iBAClD;aACF;YACD,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;SAC1C,CAAC;IACJ,CAAC;IAED,yCAAyC;IACzC,KAAK,CAAC,EACJ,GAAG,EACH,UAAU,GACX,GAIG,EAAE;QACJ,OAAO;YACL,EAAE,EAAE,OAAO;YACX,KAAK,EAAE;gBACL,KAAK,EAAE,IAAI;gBACX,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtC;YACD,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACxB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,8EAA8E;AAC9E,MAAM,wBAAwB,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAU,CAAC;AAEpE;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAsB;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAyC,CAAC;IACjE,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CACb,+FAA+F,CAChG,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;IAC3C,IAAI,aAAa,KAAK,UAAU,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CACb,8EAA8E,CAC/E,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAER,CAAC;IACd,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,kGAAkG,CACnG,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;QACjC,MAAM,gBAAgB,GACpB,CAAC,SAAS,EAAE,QAAQ,EAAE,aAAa,CACpC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,CAAC;QACnD,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,wDAAwD,gBAAgB,CAAC,IAAI,CAC3E,IAAI,CACL,kEAAkE,CACpE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC;IACrD,MAAM,eAAe,GAAG,KAAK,CAAC,WAAW,CAAC;IAC1C,IAAI,eAAe,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CACb,qGAAqG,CACtG,CAAC;IACJ,CAAC;IACD,IACE,WAAW;QACX,OAAO,eAAe,KAAK,QAAQ;QAClC,wBAA8C,CAAC,QAAQ,CAAC,eAAe,CAAC,EACzE,CAAC;QACD,MAAM,IAAI,KAAK,CACb,qFAAqF,eAAe,KAAK;YACvG,2DAA2D,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,EAAE,CAAC;QAChB,0BAA0B,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACjD,CAAC;IAED,8EAA8E;IAC9E,MAAM,IAAI,GAAI,OAA6B,CAAC,IAAI,CAAC;IACjD,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;SAAM,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,iHAAiH,CAClH,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,wBAAwB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAgB;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,+EAA+E;YAC7E,+CAA+C,CAClD,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,+BAA+B,KAAK,8CAA8C,CACnF,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,KAQhB,CAAC;QACF,IAAI,OAAO,QAAQ,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CACb,+BAA+B,KAAK,uCAAuC,CAC5E,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,MAAM,IAAI;YACnB,aAAa;YACb,QAAQ;YACR,gBAAgB;YAChB,kBAAkB;YAClB,QAAQ;YACR,qBAAqB;SACb,EAAE,CAAC;YACX,IAAI,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC;gBAC3C,MAAM,IAAI,KAAK,CACb,+BAA+B,KAAK,OAAO,QAAQ,CAAC,EAAE,iBAAiB,MAAM,KAAK,CACnF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAa;IACrC,OAAO,CACL,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACZ,IAA2B,CAAC,IAAI,KAAK,iBAAiB,CACxD,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,IAA2B;IACzD,MAAM,IAAI,GAAI,IAAgC,CAAC,SAAS,CAAC;IACzD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IACjC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,KAA+B,CAAC;QACjD,MAAM,KAAK,GAAG,QAAQ,EAAE,EAAE,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1C,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CACb,gDAAgD,KAAK,qBAAqB,CAC3E,CAAC;QACJ,CAAC;QACD,IACE,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ;YACnC,QAAQ,CAAC,MAAM,KAAK,IAAI;YACxB,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC/B,CAAC;YACD,MAAM,IAAI,KAAK,CACb,gDAAgD,KAAK,4BAA4B,CAClF,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,IAAI,OAAO,QAAQ,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,sGAAsG,CACvG,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GACf,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;YACjC,QAAQ,CAAC,QAAQ,KAAK,IAAI;YAC1B,OAAO,QAAQ,CAAC,YAAY,KAAK,QAAQ;YACzC,QAAQ,CAAC,UAAU,KAAK,SAAS;YACjC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC;QAC/B,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,gDAAgD,KAAK,8FAA8F,CACpJ,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,WAAoB;IACtD,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACb,kFAAkF;YAChF,oDAAoD,CACvD,CAAC;IACJ,CAAC;IACD,IACE,0BAA0B,CACxB,WAA6D,CAC9D,EACD,CAAC;QACD,6BAA6B,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;QAC5D,OAAO;IACT,CAAC;IACD,4EAA4E;IAC5E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,WAAsC,CAAC,CAAC;IACvE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,0EAA0E;YACxE,+CAA+C,CAClD,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;QACJ,CAAC;QACD,6BAA6B,CAAC,KAAK,EAAE,iBAAiB,IAAI,IAAI,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,SAAS,6BAA6B,CAAC,KAAc,EAAE,KAAa;IAClE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,uBAAuB,KAAK,sEAAsE,CACnG,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,KAAkD,CAAC;IAC/D,MAAM,YAAY,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU,CAAC;IACvD,MAAM,WAAW,GACf,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAChC,GAAG,CAAC,QAAQ,KAAK,IAAI;QACrB,OAAQ,GAAG,CAAC,QAA8B,CAAC,GAAG,KAAK,QAAQ,CAAC;IAC9D,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,uBAAuB,KAAK,4EAA4E,CACzG,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/identity/linkedin/connect-http.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Connect-with-LinkedIn — thin adapter over {@link createFleetIntegrationConnectProvider}.
+ *
+ * Mounted under `/identity/linkedin/*` when listed on `identity.connect`, or
+ * inferred from declared LinkedIn toolserver connectors on a user-scoped
+ * deployment.
+ */
+import type { IdentityConnectMountContext, IdentityConnectProvider } from "../connect-provider-types.js";
+import { type FleetIntegrationConnectProviderOptions } from "../fleet-integration-connect.js";
+export declare const LINKEDIN_CONNECT_STATUS_PATH: string;
+export declare const LINKEDIN_CONNECT_START_PATH: string;
+export declare const LINKEDIN_CONNECT_CALLBACK_PATH: string;
+export declare const LINKEDIN_CONNECT_LINK_PATH: string;
+export declare function isLinkedInActorSubjectEnabled(): boolean;
+export declare function enableLinkedInActorSubject(): void;
+/**
+ * Enable actor-subject mode when LinkedIn connectors imply per-user vault subjects.
+ *
+ * Prefer {@link enableActorSubjectIntegrationsFromConnectors} at compile seams.
+ */
+export declare function enableLinkedInActorSubjectFromConnectors(connectorKinds: readonly (string | undefined)[] | undefined, scope?: IdentityConnectMountContext["scope"]): void;
+export declare function resetLinkedInActorSubjectEnabledForTests(): void;
+export declare function isLinkedInConnectConfigured(env?: NodeJS.ProcessEnv): boolean;
+export declare function linkedinConnectUrl(publicAppUrl: string): string;
+/** Options for {@link createLinkedInIdentityConnectProvider}. */
+export type LinkedInIdentityConnectProviderOptions = FleetIntegrationConnectProviderOptions;
+/** Build a LinkedIn connect provider. */
+export declare function createLinkedInIdentityConnectProvider(options?: LinkedInIdentityConnectProviderOptions): IdentityConnectProvider;
+/** Default LinkedIn connect provider used as a built-in mount candidate. */
+export declare const linkedinIdentityConnectProvider: IdentityConnectProvider;
+/**
+ * Opt into Connect-with-LinkedIn on `defineIdentity({ connect: […] })`.
+ *
+ * Usually unnecessary: declaring `connectors.linkedin` on a user-scoped
+ * identity deployment mounts this provider and derives OAuth scopes automatically.
+ */
+export declare function connect(options?: LinkedInIdentityConnectProviderOptions): IdentityConnectProvider;
+//# sourceMappingURL=connect-http.d.ts.map

package/dist/identity/linkedin/connect-http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-http.d.ts","sourceRoot":"","sources":["../../../src/identity/linkedin/connect-http.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAUH,OAAO,KAAK,EACV,2BAA2B,EAC3B,uBAAuB,EACxB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAIL,KAAK,sCAAsC,EAC5C,MAAM,iCAAiC,CAAC;AAKzC,eAAO,MAAM,4BAA4B,QAAe,CAAC;AACzD,eAAO,MAAM,2BAA2B,QAAgB,CAAC;AACzD,eAAO,MAAM,8BAA8B,QAAiB,CAAC;AAC7D,eAAO,MAAM,0BAA0B,QAAa,CAAC;AAErD,wBAAgB,6BAA6B,IAAI,OAAO,CAEvD;AAED,wBAAgB,0BAA0B,IAAI,IAAI,CAEjD;AAED;;;;GAIG;AACH,wBAAgB,wCAAwC,CACtD,cAAc,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,GAAG,SAAS,EAC3D,KAAK,CAAC,EAAE,2BAA2B,CAAC,OAAO,CAAC,GAC3C,IAAI,CAMN;AAED,wBAAgB,wCAAwC,IAAI,IAAI,CAE/D;AAED,wBAAgB,2BAA2B,CACzC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAET;AAED,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,iEAAiE;AACjE,MAAM,MAAM,sCAAsC,GAChD,sCAAsC,CAAC;AAEzC,yCAAyC;AACzC,wBAAgB,qCAAqC,CACnD,OAAO,GAAE,sCAA2C,GACnD,uBAAuB,CAMzB;AAED,4EAA4E;AAC5E,eAAO,MAAM,+BAA+B,EAAE,uBACL,CAAC;AAE1C;;;;;GAKG;AACH,wBAAgB,OAAO,CACrB,OAAO,CAAC,EAAE,sCAAsC,GAC/C,uBAAuB,CAKzB"}

package/dist/identity/linkedin/connect-http.js

@@ -0,0 +1,59 @@
+/**
+ * Connect-with-LinkedIn — thin adapter over {@link createFleetIntegrationConnectProvider}.
+ *
+ * Mounted under `/identity/linkedin/*` when listed on `identity.connect`, or
+ * inferred from declared LinkedIn toolserver connectors on a user-scoped
+ * deployment.
+ */
+import { LINKEDIN_INTEGRATION } from "../../connectors/toolserver/integrations.js";
+import { enableActorSubjectIntegration, enableActorSubjectIntegrationFromConnectors, isActorSubjectIntegrationEnabled, resetActorSubjectEnabledForTests, } from "../actor-subject.js";
+import { identityConnectPaths } from "../connect-paths.js";
+import { createFleetIntegrationConnectProvider, fleetIntegrationConnectUrl, isFleetIntegrationConnectConfigured, } from "../fleet-integration-connect.js";
+import { linkedinByoOauth } from "./oauth.js";
+const PATHS = identityConnectPaths("linkedin");
+export const LINKEDIN_CONNECT_STATUS_PATH = PATHS.status;
+export const LINKEDIN_CONNECT_START_PATH = PATHS.connect;
+export const LINKEDIN_CONNECT_CALLBACK_PATH = PATHS.callback;
+export const LINKEDIN_CONNECT_LINK_PATH = PATHS.link;
+export function isLinkedInActorSubjectEnabled() {
+    return isActorSubjectIntegrationEnabled("linkedin");
+}
+export function enableLinkedInActorSubject() {
+    enableActorSubjectIntegration("linkedin");
+}
+/**
+ * Enable actor-subject mode when LinkedIn connectors imply per-user vault subjects.
+ *
+ * Prefer {@link enableActorSubjectIntegrationsFromConnectors} at compile seams.
+ */
+export function enableLinkedInActorSubjectFromConnectors(connectorKinds, scope) {
+    enableActorSubjectIntegrationFromConnectors(LINKEDIN_INTEGRATION, connectorKinds, scope);
+}
+export function resetLinkedInActorSubjectEnabledForTests() {
+    resetActorSubjectEnabledForTests();
+}
+export function isLinkedInConnectConfigured(env = process.env) {
+    return isFleetIntegrationConnectConfigured(linkedinByoOauth, env);
+}
+export function linkedinConnectUrl(publicAppUrl) {
+    return fleetIntegrationConnectUrl(LINKEDIN_INTEGRATION, publicAppUrl);
+}
+/** Build a LinkedIn connect provider. */
+export function createLinkedInIdentityConnectProvider(options = {}) {
+    return createFleetIntegrationConnectProvider(LINKEDIN_INTEGRATION, linkedinByoOauth, options);
+}
+/** Default LinkedIn connect provider used as a built-in mount candidate. */
+export const linkedinIdentityConnectProvider = createLinkedInIdentityConnectProvider();
+/**
+ * Opt into Connect-with-LinkedIn on `defineIdentity({ connect: […] })`.
+ *
+ * Usually unnecessary: declaring `connectors.linkedin` on a user-scoped
+ * identity deployment mounts this provider and derives OAuth scopes automatically.
+ */
+export function connect(options) {
+    enableLinkedInActorSubject();
+    return options
+        ? createLinkedInIdentityConnectProvider(options)
+        : linkedinIdentityConnectProvider;
+}
+//# sourceMappingURL=connect-http.js.map

package/dist/identity/linkedin/connect-http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-http.js","sourceRoot":"","sources":["../../../src/identity/linkedin/connect-http.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AACnF,OAAO,EACL,6BAA6B,EAC7B,2CAA2C,EAC3C,gCAAgC,EAChC,gCAAgC,GACjC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAK3D,OAAO,EACL,qCAAqC,EACrC,0BAA0B,EAC1B,mCAAmC,GAEpC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,MAAM,KAAK,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;AAE/C,MAAM,CAAC,MAAM,4BAA4B,GAAG,KAAK,CAAC,MAAM,CAAC;AACzD,MAAM,CAAC,MAAM,2BAA2B,GAAG,KAAK,CAAC,OAAO,CAAC;AACzD,MAAM,CAAC,MAAM,8BAA8B,GAAG,KAAK,CAAC,QAAQ,CAAC;AAC7D,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,CAAC,IAAI,CAAC;AAErD,MAAM,UAAU,6BAA6B;IAC3C,OAAO,gCAAgC,CAAC,UAAU,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,0BAA0B;IACxC,6BAA6B,CAAC,UAAU,CAAC,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wCAAwC,CACtD,cAA2D,EAC3D,KAA4C;IAE5C,2CAA2C,CACzC,oBAAoB,EACpB,cAAc,EACd,KAAK,CACN,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wCAAwC;IACtD,gCAAgC,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,OAAO,mCAAmC,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,YAAoB;IACrD,OAAO,0BAA0B,CAAC,oBAAoB,EAAE,YAAY,CAAC,CAAC;AACxE,CAAC;AAMD,yCAAyC;AACzC,MAAM,UAAU,qCAAqC,CACnD,OAAO,GAA2C,EAAE;IAEpD,OAAO,qCAAqC,CAC1C,oBAAoB,EACpB,gBAAgB,EAChB,OAAO,CACR,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,MAAM,+BAA+B,GAC1C,qCAAqC,EAAE,CAAC;AAE1C;;;;;GAKG;AACH,MAAM,UAAU,OAAO,CACrB,OAAgD;IAEhD,0BAA0B,EAAE,CAAC;IAC7B,OAAO,OAAO;QACZ,CAAC,CAAC,qCAAqC,CAAC,OAAO,CAAC;QAChD,CAAC,CAAC,+BAA+B,CAAC;AACtC,CAAC"}

package/dist/identity/linkedin/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * LinkedIn identity helpers — Connect-with-LinkedIn (Fleet vault).
+ */
+export { connect, createLinkedInIdentityConnectProvider, enableLinkedInActorSubject, enableLinkedInActorSubjectFromConnectors, linkedinConnectUrl, linkedinIdentityConnectProvider, isLinkedInActorSubjectEnabled, isLinkedInConnectConfigured, resetLinkedInActorSubjectEnabledForTests, LINKEDIN_CONNECT_CALLBACK_PATH, LINKEDIN_CONNECT_LINK_PATH, LINKEDIN_CONNECT_START_PATH, LINKEDIN_CONNECT_STATUS_PATH, } from "./connect-http.js";
+export type { LinkedInIdentityConnectProviderOptions } from "./connect-http.js";
+export { linkedinOauthTickets } from "./oauth.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/identity/linkedin/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/identity/linkedin/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,OAAO,EACP,qCAAqC,EACrC,0BAA0B,EAC1B,wCAAwC,EACxC,kBAAkB,EAClB,+BAA+B,EAC/B,6BAA6B,EAC7B,2BAA2B,EAC3B,wCAAwC,EACxC,8BAA8B,EAC9B,0BAA0B,EAC1B,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,sCAAsC,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC"}

package/dist/identity/linkedin/index.js

@@ -0,0 +1,6 @@
+/**
+ * LinkedIn identity helpers — Connect-with-LinkedIn (Fleet vault).
+ */
+export { connect, createLinkedInIdentityConnectProvider, enableLinkedInActorSubject, enableLinkedInActorSubjectFromConnectors, linkedinConnectUrl, linkedinIdentityConnectProvider, isLinkedInActorSubjectEnabled, isLinkedInConnectConfigured, resetLinkedInActorSubjectEnabledForTests, LINKEDIN_CONNECT_CALLBACK_PATH, LINKEDIN_CONNECT_LINK_PATH, LINKEDIN_CONNECT_START_PATH, LINKEDIN_CONNECT_STATUS_PATH, } from "./connect-http.js";
+export { linkedinOauthTickets } from "./oauth.js";
+//# sourceMappingURL=index.js.map

package/dist/identity/linkedin/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/identity/linkedin/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,OAAO,EACP,qCAAqC,EACrC,0BAA0B,EAC1B,wCAAwC,EACxC,kBAAkB,EAClB,+BAA+B,EAC/B,6BAA6B,EAC7B,2BAA2B,EAC3B,wCAAwC,EACxC,8BAA8B,EAC9B,0BAA0B,EAC1B,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC"}

package/dist/identity/linkedin/oauth.d.ts

@@ -0,0 +1,22 @@
+/**
+ * LinkedIn BYO OAuth descriptor — optional non-LangSmith Connect-with-LinkedIn.
+ * The default path uses Fleet auth-sessions instead.
+ */
+import { type ByoOauthConfig, type ByoOauthClient } from "../byo-oauth.js";
+export { MDA_PUBLIC_API_URL_ENV, MDA_PUBLIC_APP_URL_ENV, OAUTH_STATE_SIGNING_KEY_ENV, readOauthStateSigningKey, } from "../byo-oauth.js";
+export type LinkedInOauthConfig = ByoOauthConfig;
+/** LinkedIn BYO OAuth client (config, authorize, exchange, Fleet adapter). */
+export declare const linkedinByoOauth: ByoOauthClient;
+export declare const LINKEDIN_OAUTH_CLIENT_ID_ENV: string;
+export declare const LINKEDIN_OAUTH_CLIENT_SECRET_ENV: string;
+export declare const LINKEDIN_OAUTH_SCOPES_ENV: string;
+export declare const LINKEDIN_OAUTH_AUTH_URL_ENV: string;
+export declare const LINKEDIN_OAUTH_TOKEN_URL_ENV: string;
+export declare const LINKEDIN_OAUTH_USERINFO_URL_ENV: string;
+/** LinkedIn-bound OAuth state / connect-ticket helpers. */
+export declare const linkedinOauthTickets: import("../oauth-tickets.js").OauthTickets;
+export declare const resolveLinkedInOauthRedirectBase: typeof import("../byo-oauth.js").resolveSlackOauthRedirectBase;
+export declare const readLinkedInOauthConfig: (env?: NodeJS.ProcessEnv) => ByoOauthConfig | null;
+export declare const buildLinkedInAuthorizeUrl: (config: ByoOauthConfig, state: string, redirectUri: string, scopes?: string) => string;
+export declare const exchangeLinkedInOauthCode: (config: ByoOauthConfig, code: string, redirectUri: string, fetchImpl?: typeof fetch) => Promise<import("../fleet-connect.js").FleetVaultByoTokenResult>;
+//# sourceMappingURL=oauth.d.ts.map

package/dist/identity/linkedin/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../src/identity/linkedin/oauth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,cAAc,EACpB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,MAAM,mBAAmB,GAAG,cAAc,CAAC;AAUjD,8EAA8E;AAC9E,eAAO,MAAM,gBAAgB,EAAE,cAqB7B,CAAC;AAEH,eAAO,MAAM,4BAA4B,QAAgC,CAAC;AAC1E,eAAO,MAAM,gCAAgC,QACV,CAAC;AACpC,eAAO,MAAM,yBAAyB,QAA8B,CAAC;AACrE,eAAO,MAAM,2BAA2B,QAA+B,CAAC;AACxE,eAAO,MAAM,4BAA4B,QAAgC,CAAC;AAC1E,eAAO,MAAM,+BAA+B,QAAmC,CAAC;AAEhF,2DAA2D;AAC3D,eAAO,MAAM,oBAAoB,4CAA2B,CAAC;AAE7D,eAAO,MAAM,gCAAgC,gEACP,CAAC;AAEvC,eAAO,MAAM,uBAAuB,oDAA8B,CAAC;AACnE,eAAO,MAAM,yBAAyB,yFAAqC,CAAC;AAC5E,eAAO,MAAM,yBAAyB,0JAAgC,CAAC"}

package/dist/identity/linkedin/oauth.js

@@ -0,0 +1,47 @@
+/**
+ * LinkedIn BYO OAuth descriptor — optional non-LangSmith Connect-with-LinkedIn.
+ * The default path uses Fleet auth-sessions instead.
+ */
+import { createByoOauthClient, } from "../byo-oauth.js";
+export { MDA_PUBLIC_API_URL_ENV, MDA_PUBLIC_APP_URL_ENV, OAUTH_STATE_SIGNING_KEY_ENV, readOauthStateSigningKey, } from "../byo-oauth.js";
+const DEFAULT_AUTH_URL = "https://www.linkedin.com/oauth/v2/authorization";
+const DEFAULT_TOKEN_URL = "https://www.linkedin.com/oauth/v2/accessToken";
+const DEFAULT_USERINFO_URL = "https://api.linkedin.com/v2/userinfo";
+/** Profile + Share on LinkedIn; connector-derived unions replace this at authorize time. */
+const DEFAULT_SCOPES = ["openid", "profile", "email", "w_member_social"].join(" ");
+/** LinkedIn BYO OAuth client (config, authorize, exchange, Fleet adapter). */
+export const linkedinByoOauth = createByoOauthClient({
+    providerId: "linkedin",
+    displayName: "LinkedIn",
+    envPrefix: "LINKEDIN_OAUTH",
+    defaultEndpoints: () => ({
+        authUrl: DEFAULT_AUTH_URL,
+        tokenUrl: DEFAULT_TOKEN_URL,
+        userInfoUrl: DEFAULT_USERINFO_URL,
+        defaultScopes: DEFAULT_SCOPES,
+    }),
+    parseUserInfo(json) {
+        return {
+            ...(typeof json.email === "string" && json.email
+                ? { email: json.email }
+                : {}),
+            ...(typeof json.sub === "string" && json.sub
+                ? { subject: json.sub }
+                : {}),
+        };
+    },
+    subjectMetadataKey: "linkedin_sub",
+});
+export const LINKEDIN_OAUTH_CLIENT_ID_ENV = linkedinByoOauth.env.clientId;
+export const LINKEDIN_OAUTH_CLIENT_SECRET_ENV = linkedinByoOauth.env.clientSecret;
+export const LINKEDIN_OAUTH_SCOPES_ENV = linkedinByoOauth.env.scopes;
+export const LINKEDIN_OAUTH_AUTH_URL_ENV = linkedinByoOauth.env.authUrl;
+export const LINKEDIN_OAUTH_TOKEN_URL_ENV = linkedinByoOauth.env.tokenUrl;
+export const LINKEDIN_OAUTH_USERINFO_URL_ENV = linkedinByoOauth.env.userInfoUrl;
+/** LinkedIn-bound OAuth state / connect-ticket helpers. */
+export const linkedinOauthTickets = linkedinByoOauth.tickets;
+export const resolveLinkedInOauthRedirectBase = linkedinByoOauth.resolveRedirectBase;
+export const readLinkedInOauthConfig = linkedinByoOauth.readConfig;
+export const buildLinkedInAuthorizeUrl = linkedinByoOauth.buildAuthorizeUrl;
+export const exchangeLinkedInOauthCode = linkedinByoOauth.exchangeCode;
+//# sourceMappingURL=oauth.js.map

package/dist/identity/linkedin/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/identity/linkedin/oauth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,oBAAoB,GAGrB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AAIzB,MAAM,gBAAgB,GAAG,iDAAiD,CAAC;AAC3E,MAAM,iBAAiB,GAAG,+CAA+C,CAAC;AAC1E,MAAM,oBAAoB,GAAG,sCAAsC,CAAC;AACpE,4FAA4F;AAC5F,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC,IAAI,CAC3E,GAAG,CACJ,CAAC;AAEF,8EAA8E;AAC9E,MAAM,CAAC,MAAM,gBAAgB,GAAmB,oBAAoB,CAAC;IACnE,UAAU,EAAE,UAAU;IACtB,WAAW,EAAE,UAAU;IACvB,SAAS,EAAE,gBAAgB;IAC3B,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;QACvB,OAAO,EAAE,gBAAgB;QACzB,QAAQ,EAAE,iBAAiB;QAC3B,WAAW,EAAE,oBAAoB;QACjC,aAAa,EAAE,cAAc;KAC9B,CAAC;IACF,aAAa,CAAC,IAAI;QAChB,OAAO;YACL,GAAG,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK;gBAC9C,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;gBACvB,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG;gBAC1C,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;gBACvB,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IACD,kBAAkB,EAAE,cAAc;CACnC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4BAA4B,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC;AAC1E,MAAM,CAAC,MAAM,gCAAgC,GAC3C,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC;AACpC,MAAM,CAAC,MAAM,yBAAyB,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC;AACrE,MAAM,CAAC,MAAM,2BAA2B,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC;AACxE,MAAM,CAAC,MAAM,4BAA4B,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC;AAC1E,MAAM,CAAC,MAAM,+BAA+B,GAAG,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC;AAEhF,2DAA2D;AAC3D,MAAM,CAAC,MAAM,oBAAoB,GAAG,gBAAgB,CAAC,OAAO,CAAC;AAE7D,MAAM,CAAC,MAAM,gCAAgC,GAC3C,gBAAgB,CAAC,mBAAmB,CAAC;AAEvC,MAAM,CAAC,MAAM,uBAAuB,GAAG,gBAAgB,CAAC,UAAU,CAAC;AACnE,MAAM,CAAC,MAAM,yBAAyB,GAAG,gBAAgB,CAAC,iBAAiB,CAAC;AAC5E,MAAM,CAAC,MAAM,yBAAyB,GAAG,gBAAgB,CAAC,YAAY,CAAC"}

package/dist/identity/marketplace/connect-hint.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Connect-hint middleware for Fleet marketplace MCP bridges.
+ *
+ * Same proactive "not connected yet" system hint as toolserver Fleet OAuth
+ * integrations ({@link createFleetConnectHintMiddleware}), but the vault
+ * `provider_id` is discovered from the workspace `mcp_servers` row.
+ */
+import type { MarketplaceMcpIntegration } from "../../connectors/marketplace/catalog.js";
+import { resolveMarketplaceMcpServer } from "../../connectors/marketplace/fleet-mcp.js";
+import type { FleetOAuthIntegration } from "../../connectors/toolserver/integrations.js";
+import type { ManagedMiddleware } from "../../runtime/managed-middleware.js";
+import { type FleetConnectHintMiddlewareOptions } from "../fleet-connect-hint.js";
+import { listAgentConnections, type FleetClientOptions } from "../fleet.js";
+/** Adapt a marketplace catalog row to the Fleet Connect / hint integration shape. */
+export declare function marketplaceAsFleetHint(integration: MarketplaceMcpIntegration, providerId?: string): FleetOAuthIntegration;
+export type MarketplaceConnectHintMiddlewareOptions = Omit<FleetConnectHintMiddlewareOptions, "integration" | "providerSlug"> & {
+    fleet?: FleetClientOptions & {
+        list?: typeof listAgentConnections;
+        resolveServer?: typeof resolveMarketplaceMcpServer;
+    };
+};
+/**
+ * Absolute Connect start URL for a marketplace bridge (with optional ticket).
+ */
+export declare function marketplaceConnectHintUrl(integration: MarketplaceMcpIntegration, env?: NodeJS.ProcessEnv, userId?: string): Promise<string>;
+/**
+ * Middleware that injects a system hint when the caller has no vault connection
+ * for this marketplace MCP integration.
+ */
+export declare function createMarketplaceConnectHintMiddleware(integration: MarketplaceMcpIntegration, options?: MarketplaceConnectHintMiddlewareOptions): ManagedMiddleware;
+//# sourceMappingURL=connect-hint.d.ts.map

package/dist/identity/marketplace/connect-hint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-hint.d.ts","sourceRoot":"","sources":["../../../src/identity/marketplace/connect-hint.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACzF,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AACzF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAE7E,OAAO,EAGL,KAAK,iCAAiC,EACvC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAAE,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE5E,qFAAqF;AACrF,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,yBAAyB,EACtC,UAAU,SAAK,GACd,qBAAqB,CAYvB;AAED,MAAM,MAAM,uCAAuC,GAAG,IAAI,CACxD,iCAAiC,EACjC,aAAa,GAAG,cAAc,CAC/B,GAAG;IACF,KAAK,CAAC,EAAE,kBAAkB,GAAG;QAC3B,IAAI,CAAC,EAAE,OAAO,oBAAoB,CAAC;QACnC,aAAa,CAAC,EAAE,OAAO,2BAA2B,CAAC;KACpD,CAAC;CACH,CAAC;AAEF;;GAEG;AACH,wBAAsB,yBAAyB,CAC7C,WAAW,EAAE,yBAAyB,EACtC,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED;;;GAGG;AACH,wBAAgB,sCAAsC,CACpD,WAAW,EAAE,yBAAyB,EACtC,OAAO,GAAE,uCAA4C,GACpD,iBAAiB,CAwBnB"}

package/dist/identity/marketplace/connect-hint.js

@@ -0,0 +1,59 @@
+/**
+ * Connect-hint middleware for Fleet marketplace MCP bridges.
+ *
+ * Same proactive "not connected yet" system hint as toolserver Fleet OAuth
+ * integrations ({@link createFleetConnectHintMiddleware}), but the vault
+ * `provider_id` is discovered from the workspace `mcp_servers` row.
+ */
+import { resolveMarketplaceMcpServer } from "../../connectors/marketplace/fleet-mcp.js";
+import { agentIdFromActor } from "../actor-subject.js";
+import { createFleetConnectHintMiddleware, fleetConnectHintUrl, } from "../fleet-connect-hint.js";
+import { listAgentConnections } from "../fleet.js";
+/** Adapt a marketplace catalog row to the Fleet Connect / hint integration shape. */
+export function marketplaceAsFleetHint(integration, providerId = "") {
+    return {
+        id: integration.id,
+        connectId: integration.connectId,
+        displayName: integration.displayName,
+        defaultProviderSlug: providerId,
+        toolServerSlugs: [],
+        scopesBySlug: {},
+        ...(integration.scopes?.length
+            ? { profileScopes: [...integration.scopes] }
+            : {}),
+    };
+}
+/**
+ * Absolute Connect start URL for a marketplace bridge (with optional ticket).
+ */
+export async function marketplaceConnectHintUrl(integration, env = process.env, userId) {
+    return fleetConnectHintUrl(marketplaceAsFleetHint(integration), env, userId);
+}
+/**
+ * Middleware that injects a system hint when the caller has no vault connection
+ * for this marketplace MCP integration.
+ */
+export function createMarketplaceConnectHintMiddleware(integration, options = {}) {
+    const list = options.fleet?.list ?? listAgentConnections;
+    const resolve = options.fleet?.resolveServer ?? resolveMarketplaceMcpServer;
+    return createFleetConnectHintMiddleware({
+        integration: marketplaceAsFleetHint(integration),
+        resolvePublicAppUrl: options.resolvePublicAppUrl,
+        fleet: options.fleet,
+        isConnected: options.isConnected ??
+            (async (userId) => {
+                const server = await resolve({
+                    mcpUrl: integration.mcpUrl,
+                    ...(options.fleet ?? {}),
+                });
+                const providerId = server.oauth_provider_id?.trim();
+                if (!providerId) {
+                    return false;
+                }
+                const agentId = agentIdFromActor(userId);
+                const connections = await list(agentId, options.fleet ?? {});
+                return connections.some((c) => c.provider_id === providerId);
+            }),
+    });
+}
+//# sourceMappingURL=connect-hint.js.map

package/dist/identity/marketplace/connect-hint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-hint.js","sourceRoot":"","sources":["../../../src/identity/marketplace/connect-hint.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AAGxF,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EACL,gCAAgC,EAChC,mBAAmB,GAEpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAA2B,MAAM,aAAa,CAAC;AAE5E,qFAAqF;AACrF,MAAM,UAAU,sBAAsB,CACpC,WAAsC,EACtC,UAAU,GAAG,EAAE;IAEf,OAAO;QACL,EAAE,EAAE,WAAW,CAAC,EAAE;QAClB,SAAS,EAAE,WAAW,CAAC,SAAS;QAChC,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,mBAAmB,EAAE,UAAU;QAC/B,eAAe,EAAE,EAAE;QACnB,YAAY,EAAE,EAAE;QAChB,GAAG,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM;YAC5B,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,EAAE;YAC5C,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAYD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,WAAsC,EACtC,GAAG,GAAsB,OAAO,CAAC,GAAG,EACpC,MAAe;IAEf,OAAO,mBAAmB,CAAC,sBAAsB,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;AAC/E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sCAAsC,CACpD,WAAsC,EACtC,OAAO,GAA4C,EAAE;IAErD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,IAAI,oBAAoB,CAAC;IACzD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,aAAa,IAAI,2BAA2B,CAAC;IAE5E,OAAO,gCAAgC,CAAC;QACtC,WAAW,EAAE,sBAAsB,CAAC,WAAW,CAAC;QAChD,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;QAChD,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,WAAW,EACT,OAAO,CAAC,WAAW;YACnB,CAAC,KAAK,EAAE,MAAc,EAAE,EAAE;gBACxB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC;oBAC3B,MAAM,EAAE,WAAW,CAAC,MAAM;oBAC1B,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;iBACzB,CAAC,CAAC;gBACH,MAAM,UAAU,GAAG,MAAM,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;gBACpD,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;gBACzC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBAC7D,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,UAAU,CAAC,CAAC;YAC/D,CAAC,CAAC;KACL,CAAC,CAAC;AACL,CAAC"}

package/dist/identity/marketplace/connect.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Connect-with-X for Fleet marketplace MCP integrations.
+ *
+ * Thin adapter over {@link createFleetVaultConnectProvider}: same actor →
+ * agent_id vault lifecycle as Google / Microsoft / LinkedIn, but the OAuth
+ * provider slug is discovered at runtime from the workspace `mcp_servers` row.
+ *
+ * `connect.<id>()` factories and identity-http candidates are derived from
+ * {@link MARKETPLACE_MCP_INTEGRATIONS}.
+ */
+import { type MarketplaceMcpIntegration, type MarketplaceMcpIntegrationId } from "../../connectors/marketplace/catalog.js";
+import { resolveMarketplaceMcpServer } from "../../connectors/marketplace/fleet-mcp.js";
+import type { IdentityConnectProvider } from "../connect-provider-types.js";
+import { createFleetAuthSession, deleteAgentConnection, listAgentConnections, type FleetClientOptions } from "../fleet.js";
+export interface MarketplaceConnectProviderOptions {
+    /** Injectable Fleet client (tests). */
+    fleet?: FleetClientOptions & {
+        list?: typeof listAgentConnections;
+        delete?: typeof deleteAgentConnection;
+        resolveServer?: typeof resolveMarketplaceMcpServer;
+        createSession?: typeof createFleetAuthSession;
+    };
+    /** Override OAuth scopes (default: integration.scopes). */
+    scopes?: string[];
+}
+/** `connect.<id>()` factories for every marketplace catalog entry. */
+export type MarketplaceConnect = {
+    [Id in MarketplaceMcpIntegrationId]: (options?: MarketplaceConnectProviderOptions) => IdentityConnectProvider;
+};
+/**
+ * Build a Connect provider for a marketplace MCP integration.
+ *
+ * Mounts when declared on `identity.connect`, or when the matching
+ * `connectors.<id>` is present on a user-scoped deployment.
+ */
+export declare function createMarketplaceVaultConnectProvider(integration: MarketplaceMcpIntegration, options?: MarketplaceConnectProviderOptions): IdentityConnectProvider;
+/**
+ * Default Connect providers for every marketplace catalog entry.
+ *
+ * Shared between `connect.<id>()` (no options) and identity-http candidates so
+ * mount inference and explicit opt-in use the same instances.
+ */
+export declare const marketplaceIdentityConnectProviders: IdentityConnectProvider[];
+/**
+ * `connect.<id>()` factories derived from the marketplace catalog.
+ *
+ * Usually unnecessary: declaring `connectors.<id>` on a user-scoped identity
+ * deployment mounts the matching Connect flow automatically.
+ */
+export declare const marketplaceConnect: MarketplaceConnect;
+//# sourceMappingURL=connect.d.ts.map

package/dist/identity/marketplace/connect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../../src/identity/marketplace/connect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAGL,KAAK,yBAAyB,EAC9B,KAAK,2BAA2B,EACjC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AAExF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAK5E,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,EACpB,KAAK,kBAAkB,EACxB,MAAM,aAAa,CAAC;AAQrB,MAAM,WAAW,iCAAiC;IAChD,uCAAuC;IACvC,KAAK,CAAC,EAAE,kBAAkB,GAAG;QAC3B,IAAI,CAAC,EAAE,OAAO,oBAAoB,CAAC;QACnC,MAAM,CAAC,EAAE,OAAO,qBAAqB,CAAC;QACtC,aAAa,CAAC,EAAE,OAAO,2BAA2B,CAAC;QACnD,aAAa,CAAC,EAAE,OAAO,sBAAsB,CAAC;KAC/C,CAAC;IACF,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,sEAAsE;AACtE,MAAM,MAAM,kBAAkB,GAAG;KAC9B,EAAE,IAAI,2BAA2B,GAAG,CACnC,OAAO,CAAC,EAAE,iCAAiC,KACxC,uBAAuB;CAC7B,CAAC;AAuBF;;;;;GAKG;AACH,wBAAgB,qCAAqC,CACnD,WAAW,EAAE,yBAAyB,EACtC,OAAO,GAAE,iCAAsC,GAC9C,uBAAuB,CAqCzB;AAED;;;;;GAKG;AACH,eAAO,MAAM,mCAAmC,EAAE,uBAAuB,EAGtE,CAAC;AAEJ;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,EAAE,kBAUV,CAAC"}