managed-deepagents 0.5.0-dev.84 → 0.5.0-dev.86

package/dist/identity/google/connect-http.d.ts

@@ -1,38 +1,37 @@
 /**
- * Connect-with-Google — thin adapter over {@link createFleetIntegrationConnectProvider}.
+ * Connect-with-Google — thin adapter over {@link defineFleetIntegrationConnect}.
  *
  * Mounted under `/identity/google/*` when listed on `identity.connect`, or
  * inferred from declared Google toolserver connectors on a user-scoped
  * deployment.
  */
-import type { IdentityConnectMountContext, IdentityConnectProvider } from "../connect-provider-types.js";
-import { type FleetIntegrationConnectProviderOptions } from "../fleet-integration-connect.js";
+import type { FleetIntegrationConnectProviderOptions } from "../fleet-integration-connect.js";
 export declare const GOOGLE_CONNECT_STATUS_PATH: string;
 export declare const GOOGLE_CONNECT_START_PATH: string;
 export declare const GOOGLE_CONNECT_CALLBACK_PATH: string;
 export declare const GOOGLE_CONNECT_LINK_PATH: string;
-export declare function isGoogleActorSubjectEnabled(): boolean;
-export declare function enableGoogleActorSubject(): void;
+export declare const isGoogleActorSubjectEnabled: () => boolean;
+export declare const enableGoogleActorSubject: () => void;
 /**
  * Enable actor-subject mode when Google connectors imply per-user vault subjects.
  *
  * Prefer {@link enableActorSubjectIntegrationsFromConnectors} at compile seams.
  */
-export declare function enableGoogleActorSubjectFromConnectors(connectorKinds: readonly (string | undefined)[] | undefined, scope?: IdentityConnectMountContext["scope"]): void;
-export declare function resetGoogleActorSubjectEnabledForTests(): void;
-export declare function isGoogleConnectConfigured(env?: NodeJS.ProcessEnv): boolean;
-export declare function googleConnectUrl(publicAppUrl: string): string;
+export declare const enableGoogleActorSubjectFromConnectors: (connectorKinds: readonly (string | undefined)[] | undefined, scope?: import("../connect-provider-types.js").IdentityConnectMountContext["scope"]) => void;
+export declare const resetGoogleActorSubjectEnabledForTests: () => void;
+export declare const isGoogleConnectConfigured: (env?: NodeJS.ProcessEnv) => boolean;
+export declare const googleConnectUrl: (publicAppUrl: string) => string;
 /** Options for {@link createGoogleIdentityConnectProvider}. */
 export type GoogleIdentityConnectProviderOptions = FleetIntegrationConnectProviderOptions;
 /** Build a Google connect provider. */
-export declare function createGoogleIdentityConnectProvider(options?: GoogleIdentityConnectProviderOptions): IdentityConnectProvider;
+export declare const createGoogleIdentityConnectProvider: (options?: FleetIntegrationConnectProviderOptions) => import("../connect-provider-types.js").IdentityConnectProvider;
 /** Default Google connect provider used as a built-in mount candidate. */
-export declare const googleIdentityConnectProvider: IdentityConnectProvider;
+export declare const googleIdentityConnectProvider: import("../connect-provider-types.js").IdentityConnectProvider;
 /**
  * Opt into Connect-with-Google on `defineIdentity({ connect: […] })`.
  *
  * Usually unnecessary: declaring Google toolserver connectors on a user-scoped
  * identity deployment mounts this provider and derives OAuth scopes automatically.
  */
-export declare function connect(options?: GoogleIdentityConnectProviderOptions): IdentityConnectProvider;
+export declare const connect: (options?: FleetIntegrationConnectProviderOptions) => import("../connect-provider-types.js").IdentityConnectProvider;
 //# sourceMappingURL=connect-http.d.ts.map

package/dist/identity/google/connect-http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connect-http.d.ts","sourceRoot":"","sources":["../../../src/identity/google/connect-http.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAUH,OAAO,KAAK,EACV,2BAA2B,EAC3B,uBAAuB,EACxB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAIL,KAAK,sCAAsC,EAC5C,MAAM,iCAAiC,CAAC;AAKzC,eAAO,MAAM,0BAA0B,QAAe,CAAC;AACvD,eAAO,MAAM,yBAAyB,QAAgB,CAAC;AACvD,eAAO,MAAM,4BAA4B,QAAiB,CAAC;AAC3D,eAAO,MAAM,wBAAwB,QAAa,CAAC;AAEnD,wBAAgB,2BAA2B,IAAI,OAAO,CAErD;AAED,wBAAgB,wBAAwB,IAAI,IAAI,CAE/C;AAED;;;;GAIG;AACH,wBAAgB,sCAAsC,CACpD,cAAc,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,GAAG,SAAS,EAC3D,KAAK,CAAC,EAAE,2BAA2B,CAAC,OAAO,CAAC,GAC3C,IAAI,CAMN;AAED,wBAAgB,sCAAsC,IAAI,IAAI,CAE7D;AAED,wBAAgB,yBAAyB,CACvC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAET;AAED,wBAAgB,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,+DAA+D;AAC/D,MAAM,MAAM,oCAAoC,GAC9C,sCAAsC,CAAC;AAEzC,uCAAuC;AACvC,wBAAgB,mCAAmC,CACjD,OAAO,GAAE,oCAAyC,GACjD,uBAAuB,CAOzB;AAED,0EAA0E;AAC1E,eAAO,MAAM,6BAA6B,EAAE,uBACL,CAAC;AAExC;;;;;GAKG;AACH,wBAAgB,OAAO,CACrB,OAAO,CAAC,EAAE,oCAAoC,GAC7C,uBAAuB,CAKzB"}
+{"version":3,"file":"connect-http.d.ts","sourceRoot":"","sources":["../../../src/identity/google/connect-http.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,sCAAsC,EAAE,MAAM,iCAAiC,CAAC;AAS9F,eAAO,MAAM,0BAA0B,QAAsB,CAAC;AAC9D,eAAO,MAAM,yBAAyB,QAAuB,CAAC;AAC9D,eAAO,MAAM,4BAA4B,QAAwB,CAAC;AAClE,eAAO,MAAM,wBAAwB,QAAoB,CAAC;AAE1D,eAAO,MAAM,2BAA2B,eAA+B,CAAC;AACxE,eAAO,MAAM,wBAAwB,YAA4B,CAAC;AAClE;;;;GAIG;AACH,eAAO,MAAM,sCAAsC,4JACV,CAAC;AAC1C,eAAO,MAAM,sCAAsC,YACV,CAAC;AAC1C,eAAO,MAAM,yBAAyB,sCAA6B,CAAC;AACpE,eAAO,MAAM,gBAAgB,kCAAoB,CAAC;AAElD,+DAA+D;AAC/D,MAAM,MAAM,oCAAoC,GAC9C,sCAAsC,CAAC;AAEzC,uCAAuC;AACvC,eAAO,MAAM,mCAAmC,sHAAwB,CAAC;AAEzE,0EAA0E;AAC1E,eAAO,MAAM,6BAA6B,gEAAkB,CAAC;AAE7D;;;;;GAKG;AACH,eAAO,MAAM,OAAO,sHAAiB,CAAC"}

package/dist/identity/google/connect-http.js

@@ -1,59 +1,42 @@
 /**
- * Connect-with-Google — thin adapter over {@link createFleetIntegrationConnectProvider}.
+ * Connect-with-Google — thin adapter over {@link defineFleetIntegrationConnect}.
  *
  * Mounted under `/identity/google/*` when listed on `identity.connect`, or
  * inferred from declared Google toolserver connectors on a user-scoped
  * deployment.
  */
 import { GOOGLE_INTEGRATION } from "../../connectors/toolserver/integrations.js";
-import { enableActorSubjectIntegration, enableActorSubjectIntegrationFromConnectors, isActorSubjectIntegrationEnabled, resetActorSubjectEnabledForTests, } from "../actor-subject.js";
-import { identityConnectPaths } from "../connect-paths.js";
-import { createFleetIntegrationConnectProvider, fleetIntegrationConnectUrl, isFleetIntegrationConnectConfigured, } from "../fleet-integration-connect.js";
+import { defineFleetIntegrationConnect } from "../define-fleet-connect.js";
 import { googleByoOauth } from "./oauth.js";
-const PATHS = identityConnectPaths("google");
-export const GOOGLE_CONNECT_STATUS_PATH = PATHS.status;
-export const GOOGLE_CONNECT_START_PATH = PATHS.connect;
-export const GOOGLE_CONNECT_CALLBACK_PATH = PATHS.callback;
-export const GOOGLE_CONNECT_LINK_PATH = PATHS.link;
-export function isGoogleActorSubjectEnabled() {
-    return isActorSubjectIntegrationEnabled("google");
-}
-export function enableGoogleActorSubject() {
-    enableActorSubjectIntegration("google");
-}
+const google = defineFleetIntegrationConnect({
+    integration: GOOGLE_INTEGRATION,
+    byoClient: googleByoOauth,
+    fallbackScopes: ["openid", "email", "profile"],
+});
+export const GOOGLE_CONNECT_STATUS_PATH = google.paths.status;
+export const GOOGLE_CONNECT_START_PATH = google.paths.connect;
+export const GOOGLE_CONNECT_CALLBACK_PATH = google.paths.callback;
+export const GOOGLE_CONNECT_LINK_PATH = google.paths.link;
+export const isGoogleActorSubjectEnabled = google.isActorSubjectEnabled;
+export const enableGoogleActorSubject = google.enableActorSubject;
 /**
  * Enable actor-subject mode when Google connectors imply per-user vault subjects.
  *
  * Prefer {@link enableActorSubjectIntegrationsFromConnectors} at compile seams.
  */
-export function enableGoogleActorSubjectFromConnectors(connectorKinds, scope) {
-    enableActorSubjectIntegrationFromConnectors(GOOGLE_INTEGRATION, connectorKinds, scope);
-}
-export function resetGoogleActorSubjectEnabledForTests() {
-    resetActorSubjectEnabledForTests();
-}
-export function isGoogleConnectConfigured(env = process.env) {
-    return isFleetIntegrationConnectConfigured(googleByoOauth, env);
-}
-export function googleConnectUrl(publicAppUrl) {
-    return fleetIntegrationConnectUrl(GOOGLE_INTEGRATION, publicAppUrl);
-}
+export const enableGoogleActorSubjectFromConnectors = google.enableActorSubjectFromConnectors;
+export const resetGoogleActorSubjectEnabledForTests = google.resetActorSubjectEnabledForTests;
+export const isGoogleConnectConfigured = google.isConnectConfigured;
+export const googleConnectUrl = google.connectUrl;
 /** Build a Google connect provider. */
-export function createGoogleIdentityConnectProvider(options = {}) {
-    return createFleetIntegrationConnectProvider(GOOGLE_INTEGRATION, googleByoOauth, options, ["openid", "email", "profile"]);
-}
+export const createGoogleIdentityConnectProvider = google.createProvider;
 /** Default Google connect provider used as a built-in mount candidate. */
-export const googleIdentityConnectProvider = createGoogleIdentityConnectProvider();
+export const googleIdentityConnectProvider = google.provider;
 /**
  * Opt into Connect-with-Google on `defineIdentity({ connect: […] })`.
  *
  * Usually unnecessary: declaring Google toolserver connectors on a user-scoped
  * identity deployment mounts this provider and derives OAuth scopes automatically.
  */
-export function connect(options) {
-    enableGoogleActorSubject();
-    return options
-        ? createGoogleIdentityConnectProvider(options)
-        : googleIdentityConnectProvider;
-}
+export const connect = google.connect;
 //# sourceMappingURL=connect-http.js.map

package/dist/identity/google/connect-http.js.map

@@ -1 +1 @@
-{"version":3,"file":"connect-http.js","sourceRoot":"","sources":["../../../src/identity/google/connect-http.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AACjF,OAAO,EACL,6BAA6B,EAC7B,2CAA2C,EAC3C,gCAAgC,EAChC,gCAAgC,GACjC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAK3D,OAAO,EACL,qCAAqC,EACrC,0BAA0B,EAC1B,mCAAmC,GAEpC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;AAE7C,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,CAAC,MAAM,CAAC;AACvD,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,CAAC,OAAO,CAAC;AACvD,MAAM,CAAC,MAAM,4BAA4B,GAAG,KAAK,CAAC,QAAQ,CAAC;AAC3D,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,CAAC,IAAI,CAAC;AAEnD,MAAM,UAAU,2BAA2B;IACzC,OAAO,gCAAgC,CAAC,QAAQ,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,6BAA6B,CAAC,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sCAAsC,CACpD,cAA2D,EAC3D,KAA4C;IAE5C,2CAA2C,CACzC,kBAAkB,EAClB,cAAc,EACd,KAAK,CACN,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sCAAsC;IACpD,gCAAgC,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,OAAO,mCAAmC,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,YAAoB;IACnD,OAAO,0BAA0B,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAC;AACtE,CAAC;AAMD,uCAAuC;AACvC,MAAM,UAAU,mCAAmC,CACjD,OAAO,GAAyC,EAAE;IAElD,OAAO,qCAAqC,CAC1C,kBAAkB,EAClB,cAAc,EACd,OAAO,EACP,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAC/B,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,MAAM,6BAA6B,GACxC,mCAAmC,EAAE,CAAC;AAExC;;;;;GAKG;AACH,MAAM,UAAU,OAAO,CACrB,OAA8C;IAE9C,wBAAwB,EAAE,CAAC;IAC3B,OAAO,OAAO;QACZ,CAAC,CAAC,mCAAmC,CAAC,OAAO,CAAC;QAC9C,CAAC,CAAC,6BAA6B,CAAC;AACpC,CAAC"}
+{"version":3,"file":"connect-http.js","sourceRoot":"","sources":["../../../src/identity/google/connect-http.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AACjF,OAAO,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAE3E,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,MAAM,GAAG,6BAA6B,CAAC;IAC3C,WAAW,EAAE,kBAAkB;IAC/B,SAAS,EAAE,cAAc;IACzB,cAAc,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;CAC/C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;AAC9D,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;AAC9D,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;AAClE,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;AAE1D,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC,qBAAqB,CAAC;AACxE,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,kBAAkB,CAAC;AAClE;;;;GAIG;AACH,MAAM,CAAC,MAAM,sCAAsC,GACjD,MAAM,CAAC,gCAAgC,CAAC;AAC1C,MAAM,CAAC,MAAM,sCAAsC,GACjD,MAAM,CAAC,gCAAgC,CAAC;AAC1C,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC,mBAAmB,CAAC;AACpE,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,UAAU,CAAC;AAMlD,uCAAuC;AACvC,MAAM,CAAC,MAAM,mCAAmC,GAAG,MAAM,CAAC,cAAc,CAAC;AAEzE,0EAA0E;AAC1E,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC,QAAQ,CAAC;AAE7D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC"}

package/dist/identity/google/oauth.d.ts

@@ -15,7 +15,7 @@ export declare const GOOGLE_OAUTH_TOKEN_URL_ENV: string;
 export declare const GOOGLE_OAUTH_USERINFO_URL_ENV: string;
 /** Google-bound OAuth state / connect-ticket helpers. */
 export declare const googleOauthTickets: import("../oauth-tickets.js").OauthTickets;
-export declare const resolveGoogleOauthRedirectBase: typeof import("../byo-oauth.js").resolveSlackOauthRedirectBase;
+export declare const resolveGoogleOauthRedirectBase: typeof import("../oauth-env.js").resolveOauthRedirectBase;
 export declare const readGoogleOauthConfig: (env?: NodeJS.ProcessEnv) => ByoOauthConfig | null;
 export declare const buildGoogleAuthorizeUrl: (config: ByoOauthConfig, state: string, redirectUri: string, scopes?: string) => string;
 export declare const exchangeGoogleOauthCode: (config: ByoOauthConfig, code: string, redirectUri: string, fetchImpl?: typeof fetch) => Promise<import("../fleet-connect.js").FleetVaultByoTokenResult>;

package/dist/identity/google/oauth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../src/identity/google/oauth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,cAAc,EACpB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAQ/C,4EAA4E;AAC5E,eAAO,MAAM,cAAc,EAAE,cAsB3B,CAAC;AAEH,eAAO,MAAM,0BAA0B,QAA8B,CAAC;AACtE,eAAO,MAAM,8BAA8B,QAAkC,CAAC;AAC9E,eAAO,MAAM,uBAAuB,QAA4B,CAAC;AACjE,eAAO,MAAM,yBAAyB,QAA6B,CAAC;AACpE,eAAO,MAAM,0BAA0B,QAA8B,CAAC;AACtE,eAAO,MAAM,6BAA6B,QAAiC,CAAC;AAE5E,yDAAyD;AACzD,eAAO,MAAM,kBAAkB,4CAAyB,CAAC;AAEzD,eAAO,MAAM,8BAA8B,gEACP,CAAC;AAErC,eAAO,MAAM,qBAAqB,oDAA4B,CAAC;AAC/D,eAAO,MAAM,uBAAuB,yFAAmC,CAAC;AACxE,eAAO,MAAM,uBAAuB,0JAA8B,CAAC"}
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../src/identity/google/oauth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,cAAc,EACpB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAQ/C,4EAA4E;AAC5E,eAAO,MAAM,cAAc,EAAE,cAsB3B,CAAC;AAEH,eAAO,MAAM,0BAA0B,QAA8B,CAAC;AACtE,eAAO,MAAM,8BAA8B,QAAkC,CAAC;AAC9E,eAAO,MAAM,uBAAuB,QAA4B,CAAC;AACjE,eAAO,MAAM,yBAAyB,QAA6B,CAAC;AACpE,eAAO,MAAM,0BAA0B,QAA8B,CAAC;AACtE,eAAO,MAAM,6BAA6B,QAAiC,CAAC;AAE5E,yDAAyD;AACzD,eAAO,MAAM,kBAAkB,4CAAyB,CAAC;AAEzD,eAAO,MAAM,8BAA8B,2DACP,CAAC;AAErC,eAAO,MAAM,qBAAqB,oDAA4B,CAAC;AAC/D,eAAO,MAAM,uBAAuB,yFAAmC,CAAC;AACxE,eAAO,MAAM,uBAAuB,0JAA8B,CAAC"}

package/dist/identity/index.d.ts

@@ -22,13 +22,14 @@ export { agentIdFromActor, enableActorSubjectIntegrationsFromConnectors, enableA
 export { createFleetVaultConnectProvider, fleetConnectUrl, isFleetVaultConnectConfigured, type FleetVaultByoOauth, type FleetVaultByoOauthConfig, type FleetVaultConnectProviderOptions, type FleetVaultByoTokenResult, } from "./fleet-connect.js";
 export { createByoOauthClient, type ByoOauthClient, type ByoOauthConfig, type CreateByoOauthClientOptions, } from "./byo-oauth.js";
 export { createFleetIntegrationConnectProvider, fleetIntegrationConnectUrl, isFleetIntegrationConnectConfigured, type FleetIntegrationConnectProviderOptions, } from "./fleet-integration-connect.js";
-export { createFleetConnectHintMiddleware, fleetConnectHintUrl, rewriteFleetToolError, } from "./fleet-connect-hint.js";
+export { clearFleetConnectHintCacheForTests, createFleetConnectHintMiddleware, fleetConnectHintUrl, rewriteFleetToolError, } from "./fleet-connect-hint.js";
 export { createConnectTicket, createOauthState, oauthTicketsFor, verifyConnectTicket, verifyOauthState, type OauthTickets, } from "./oauth-tickets.js";
 /**
  * Declare the identity contract for the deployment.
  *
  * The common case takes no arguments — a backend you operate asserts the caller,
- * and each caller gets private threads and memory:
+ * and the agent uses one shared memory slice plus the shared LangSmith vault
+ * (`mda connect`):
  *
  * ```ts
  * export const identity = defineIdentity();
@@ -82,11 +83,19 @@ export declare const auth: {
     }): ValidatedTokenProvider;
     /**
      * LangSmith OAuth access tokens (Ed25519 JWTs). Verifies against LangSmith's
-     * public JWKS. `apiUrl` defaults to the US SaaS endpoint; override for another
-     * region or self-hosted LangSmith. Audience is the same URL — LangSmith only
-     * mints tokens for its own API (and MCP), so it cannot be narrowed further.
+     * public JWKS.
+     *
+     * Resolution order for the issuer / audience / JWKS origin:
+     * 1. Explicit `apiUrl` (escape hatch for self-hosted or unusual installs)
+     * 2. `LANGSMITH_ENDPOINT` (normalized; Host provides this in the runtime for
+     *    the region you deployed to — it is reserved and cannot be set as a
+     *    deployment secret)
+     * 3. US SaaS (`https://api.smith.langchain.com`)
+     *
+     * Audience is the same URL — LangSmith only mints tokens for its own API
+     * (and MCP), so it cannot be narrowed further.
      */
-    langsmith({ apiUrl, }?: {
+    langsmith({ apiUrl }?: {
         apiUrl?: string;
     }): ValidatedTokenProvider;
     /**

package/dist/identity/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAqB,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,KAAK,uBAAuB,EAAoB,MAAM,eAAe,CAAC;AAC/E,OAAO,KAAK,EAGV,cAAc,EACd,kBAAkB,EAElB,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,YAAY,EACV,YAAY,EACZ,eAAe,EACf,aAAa,EACb,sBAAsB,GACvB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,YAAY,EACZ,6BAA6B,EAC7B,kBAAkB,EAClB,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,cAAc,EACd,uBAAuB,EACvB,kBAAkB,EAClB,WAAW,EACX,uBAAuB,EACvB,kBAAkB,EAClB,eAAe,EACf,WAAW,EACX,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,gBAAgB,EAChB,wBAAwB,EACxB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,wBAAwB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,4BAA4B,GAClC,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,gBAAgB,EAChB,4CAA4C,EAC5C,6BAA6B,EAC7B,gCAAgC,EAChC,yBAAyB,EACzB,mBAAmB,EACnB,gCAAgC,EAChC,wBAAwB,EACxB,KAAK,uBAAuB,GAC7B,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,+BAA+B,EAC/B,eAAe,EACf,6BAA6B,EAC7B,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,gCAAgC,EACrC,KAAK,wBAAwB,GAC9B,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,oBAAoB,EACpB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,2BAA2B,GACjC,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,qCAAqC,EACrC,0BAA0B,EAC1B,mCAAmC,EACnC,KAAK,sCAAsC,GAC5C,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,gCAAgC,EAChC,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EAChB,KAAK,YAAY,GAClB,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,cAAc,CAC5B,OAAO,GAAE,eAAoB,GAC5B,kBAAkB,CAIpB;AAED;;;;GAIG;AACH,eAAO,MAAM,IAAI;IACf,KAAK,wBAGF;QACD,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,sBAAsB;IAU1B,KAAK,aAAa;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,sBAAsB;IAS7D,IAAI,wBAGD;QACD,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,sBAAsB;IAU1B,OAAO,0BAGJ;QACD,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,sBAAsB;IAU1B,KAAK,0BAGF;QACD,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,sBAAsB;IAU1B,MAAM,gBAAe;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAQ,sBAAsB;IAUxE,oCAAoC;IACpC,QAAQ,UAAU,uBAAuB,GAAG,sBAAsB;IAIlE,mEAAmE;IACnE,IAAI,wBAGD;QACD,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,sBAAsB;IAU1B;;;;;OAKG;IACH,SAAS,eAEN;QACD,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAQ,sBAAsB;IAW/B;;;OAGG;IACH,MAAM,IAAI,sBAAsB;IAehC,yCAAyC;IACzC,KAAK,wBAGF;QACD,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,gEAAgE;QAChE,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAQ,sBAAsB;CAWhC,CAAC;AAKF;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CA4E7D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAqB,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,KAAK,uBAAuB,EAAoB,MAAM,eAAe,CAAC;AAC/E,OAAO,KAAK,EAGV,cAAc,EACd,kBAAkB,EAElB,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,YAAY,EACV,YAAY,EACZ,eAAe,EACf,aAAa,EACb,sBAAsB,GACvB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,YAAY,EACZ,6BAA6B,EAC7B,kBAAkB,EAClB,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,cAAc,EACd,uBAAuB,EACvB,kBAAkB,EAClB,WAAW,EACX,uBAAuB,EACvB,kBAAkB,EAClB,eAAe,EACf,WAAW,EACX,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,gBAAgB,EAChB,wBAAwB,EACxB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,wBAAwB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,4BAA4B,GAClC,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,gBAAgB,EAChB,4CAA4C,EAC5C,6BAA6B,EAC7B,gCAAgC,EAChC,yBAAyB,EACzB,mBAAmB,EACnB,gCAAgC,EAChC,wBAAwB,EACxB,KAAK,uBAAuB,GAC7B,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,+BAA+B,EAC/B,eAAe,EACf,6BAA6B,EAC7B,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,gCAAgC,EACrC,KAAK,wBAAwB,GAC9B,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,oBAAoB,EACpB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,2BAA2B,GACjC,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,qCAAqC,EACrC,0BAA0B,EAC1B,mCAAmC,EACnC,KAAK,sCAAsC,GAC5C,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,kCAAkC,EAClC,gCAAgC,EAChC,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EAChB,KAAK,YAAY,GAClB,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,cAAc,CAC5B,OAAO,GAAE,eAAoB,GAC5B,kBAAkB,CAIpB;AAED;;;;GAIG;AACH,eAAO,MAAM,IAAI;IACf,KAAK,wBAGF;QACD,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,sBAAsB;IAU1B,KAAK,aAAa;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,sBAAsB;IAS7D,IAAI,wBAGD;QACD,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,sBAAsB;IAU1B,OAAO,0BAGJ;QACD,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,sBAAsB;IAU1B,KAAK,0BAGF;QACD,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,sBAAsB;IAU1B,MAAM,gBAAe;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAQ,sBAAsB;IAUxE,oCAAoC;IACpC,QAAQ,UAAU,uBAAuB,GAAG,sBAAsB;IAIlE,mEAAmE;IACnE,IAAI,wBAGD;QACD,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,sBAAsB;IAU1B;;;;;;;;;;;;;OAaG;IACH,SAAS,cAAa;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAQ,sBAAsB;IAYvE;;;OAGG;IACH,MAAM,IAAI,sBAAsB;IAehC,yCAAyC;IACzC,KAAK,wBAGF;QACD,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,gEAAgE;QAChE,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAQ,sBAAsB;CAWhC,CAAC;AAKF;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CA4E7D"}

package/dist/identity/index.js

@@ -20,13 +20,14 @@ export { agentIdFromActor, enableActorSubjectIntegrationsFromConnectors, enableA
 export { createFleetVaultConnectProvider, fleetConnectUrl, isFleetVaultConnectConfigured, } from "./fleet-connect.js";
 export { createByoOauthClient, } from "./byo-oauth.js";
 export { createFleetIntegrationConnectProvider, fleetIntegrationConnectUrl, isFleetIntegrationConnectConfigured, } from "./fleet-integration-connect.js";
-export { createFleetConnectHintMiddleware, fleetConnectHintUrl, rewriteFleetToolError, } from "./fleet-connect-hint.js";
+export { clearFleetConnectHintCacheForTests, createFleetConnectHintMiddleware, fleetConnectHintUrl, rewriteFleetToolError, } from "./fleet-connect-hint.js";
 export { createConnectTicket, createOauthState, oauthTicketsFor, verifyConnectTicket, verifyOauthState, } from "./oauth-tickets.js";
 /**
  * Declare the identity contract for the deployment.
  *
  * The common case takes no arguments — a backend you operate asserts the caller,
- * and each caller gets private threads and memory:
+ * and the agent uses one shared memory slice plus the shared LangSmith vault
+ * (`mda connect`):
  *
  * ```ts
  * export const identity = defineIdentity();
@@ -122,17 +123,26 @@ export const auth = {
     },
     /**
      * LangSmith OAuth access tokens (Ed25519 JWTs). Verifies against LangSmith's
-     * public JWKS. `apiUrl` defaults to the US SaaS endpoint; override for another
-     * region or self-hosted LangSmith. Audience is the same URL — LangSmith only
-     * mints tokens for its own API (and MCP), so it cannot be narrowed further.
+     * public JWKS.
+     *
+     * Resolution order for the issuer / audience / JWKS origin:
+     * 1. Explicit `apiUrl` (escape hatch for self-hosted or unusual installs)
+     * 2. `LANGSMITH_ENDPOINT` (normalized; Host provides this in the runtime for
+     *    the region you deployed to — it is reserved and cannot be set as a
+     *    deployment secret)
+     * 3. US SaaS (`https://api.smith.langchain.com`)
+     *
+     * Audience is the same URL — LangSmith only mints tokens for its own API
+     * (and MCP), so it cannot be narrowed further.
      */
-    langsmith({ apiUrl = "https://api.smith.langchain.com", } = {}) {
+    langsmith({ apiUrl } = {}) {
+        const resolved = resolveLangsmithApiUrl(apiUrl);
         return {
             id: "langsmith",
-            issuer: apiUrl,
-            jwks: `${apiUrl}/.well-known/jwks.json`,
+            issuer: resolved,
+            jwks: `${resolved}/.well-known/jwks.json`,
             algorithms: ["EdDSA"],
-            audience: apiUrl,
+            audience: resolved,
             claims: { user: "sub" },
         };
     },
@@ -178,9 +188,9 @@ export function validateIdentity(config) {
     if (ingress === null || typeof ingress !== "object" || !("http" in ingress)) {
         throw new Error("defineIdentity(...) requires an `ingress.http` value ('backend' or a validated_token config).");
     }
-    const organizations = config.organizations;
-    if (organizations !== "optional" && organizations !== "required") {
-        throw new Error('defineIdentity(...) requires `organizations` to be "optional" or "required".');
+    const organization = config.organization;
+    if (organization !== "optional" && organization !== "required") {
+        throw new Error('defineIdentity(...) requires `organization` to be "optional" or "required".');
     }
     const scope = config.scope;
     if (scope === null || typeof scope !== "object") {
@@ -190,10 +200,10 @@ export function validateIdentity(config) {
         throw new Error('defineIdentity(...) requires `scope.memory` (one of "user" | "organization" | "agent" | "none").');
     }
     // An organization-scoped axis is only meaningful when one is always present.
-    if (organizations === "optional") {
+    if (organization === "optional") {
         const organizationAxes = ["threads", "memory", "credentials"].filter((axis) => scope[axis] === "organization");
         if (organizationAxes.length > 0) {
-            throw new Error(`defineIdentity(...) cannot use "organization" scope (${organizationAxes.join(", ")}) with organizations: "optional". Set organizations: "required".`);
+            throw new Error(`defineIdentity(...) cannot use "organization" scope (${organizationAxes.join(", ")}) with organization: "optional". Set organization: "required".`);
         }
     }
     // Credentials axis must agree with the presence of a resolver/endpoint.
@@ -320,4 +330,41 @@ function validateOneCredentialResolver(entry, label) {
         throw new Error(`defineIdentity(...) ${label} requires exactly one of \`resolve\` (function) or \`endpoint\` ({ url }).`);
     }
 }
+const DEFAULT_LANGSMITH_API_URL = "https://api.smith.langchain.com";
+/**
+ * Platform API origin for LangSmith token verification.
+ *
+ * Mirrors the CLI's `normalize_platform_api_url`: trim, optional `https://`,
+ * strip trailing slashes and a trailing `/api/v1` REST suffix. Explicit
+ * `override` wins; otherwise Host/runtime `LANGSMITH_ENDPOINT`; otherwise US
+ * SaaS.
+ */
+function resolveLangsmithApiUrl(override) {
+    const fromOverride = normalizeLangsmithApiUrl(override);
+    if (fromOverride) {
+        return fromOverride;
+    }
+    return (normalizeLangsmithApiUrl(process.env.LANGSMITH_ENDPOINT) ??
+        DEFAULT_LANGSMITH_API_URL);
+}
+function normalizeLangsmithApiUrl(value) {
+    const trimmed = value?.trim();
+    if (!trimmed) {
+        return undefined;
+    }
+    let origin = trimmed;
+    if (!/^[a-z][a-z0-9+.-]*:\/\//i.test(origin)) {
+        origin = `https://${origin}`;
+    }
+    // Loop instead of /\/+$/ — CodeQL flags that pattern on env/user input.
+    let end = origin.length;
+    while (end > 0 && origin.charCodeAt(end - 1) === 47 /* / */) {
+        end -= 1;
+    }
+    origin = end === origin.length ? origin : origin.slice(0, end);
+    if (origin.endsWith("/api/v1")) {
+        origin = origin.slice(0, -"/api/v1".length);
+    }
+    return origin || undefined;
+}
 //# sourceMappingURL=index.js.map

package/dist/identity/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAwB,MAAM,cAAc,CAAC;AACvE,OAAO,EAAgC,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAU/E,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAQjD,OAAO,EACL,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,2BAA2B,CAAC;AA6BnC,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,wBAAwB,GAMzB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,gBAAgB,EAChB,4CAA4C,EAC5C,6BAA6B,EAC7B,gCAAgC,EAChC,yBAAyB,EACzB,mBAAmB,EACnB,gCAAgC,EAChC,wBAAwB,GAEzB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,+BAA+B,EAC/B,eAAe,EACf,6BAA6B,GAK9B,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,oBAAoB,GAIrB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,qCAAqC,EACrC,0BAA0B,EAC1B,mCAAmC,GAEpC,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,gCAAgC,EAChC,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,gBAAgB,GAEjB,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAO,GAAoB,EAAE;IAE7B,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC1C,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,KAAK,CAAC,EACJ,MAAM,EACN,QAAQ,GAIT;QACC,OAAO;YACL,MAAM,EAAE,WAAW,MAAM,GAAG;YAC5B,IAAI,EAAE,WAAW,MAAM,wBAAwB;YAC/C,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE;SAClE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,EAAE,MAAM,EAAsB;QAClC,OAAO;YACL,MAAM,EAAE,WAAW,MAAM,EAAE;YAC3B,IAAI,EAAE,WAAW,MAAM,wBAAwB;YAC/C,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACxB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,EACH,MAAM,EACN,QAAQ,GAIT;QACC,OAAO;YACL,MAAM,EAAE,WAAW,MAAM,EAAE;YAC3B,IAAI,EAAE,WAAW,MAAM,iBAAiB;YACxC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACxB,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,EACN,UAAU,EACV,MAAM,GAIP;QACC,MAAM,MAAM,GAAG,uBAAuB,MAAM,kBAAkB,UAAU,EAAE,CAAC;QAC3E,OAAO;YACL,MAAM;YACN,IAAI,EAAE,GAAG,MAAM,wBAAwB;YACvC,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACxB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,EACJ,QAAQ,EACR,QAAQ,GAIT;QACC,OAAO;YACL,MAAM,EAAE,qCAAqC,QAAQ,OAAO;YAC5D,IAAI,EAAE,qCAAqC,QAAQ,sBAAsB;YACzE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE;SAC1C,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,EAAE,QAAQ,EAAE,GAA0B,EAAE;QAC7C,OAAO;YACL,MAAM,EAAE,6BAA6B;YACrC,IAAI,EAAE,4CAA4C;YAClD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE;SACxC,CAAC;IACJ,CAAC;IAED,oCAAoC;IACpC,QAAQ,CAAC,OAAgC;QACvC,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAED,mEAAmE;IACnE,IAAI,CAAC,EACH,MAAM,EACN,QAAQ,GAIT;QACC,OAAO;YACL,MAAM;YACN,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACxB,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,SAAS,CAAC,EACR,MAAM,GAAG,iCAAiC,GAC3C,GAEG,EAAE;QACJ,OAAO;YACL,EAAE,EAAE,WAAW;YACf,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,GAAG,MAAM,wBAAwB;YACvC,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACxB,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,MAAM;QACJ,OAAO;YACL,EAAE,EAAE,QAAQ;YACZ,UAAU,EAAE;gBACV,GAAG,EAAE,6BAA6B;gBAClC,OAAO,EAAE;oBACP,MAAM,EAAE,6BAA6B;oBACrC,sBAAsB,EAAE,YAAY;oBACpC,YAAY,EAAE,mCAAmC;iBAClD;aACF;YACD,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;SAC1C,CAAC;IACJ,CAAC;IAED,yCAAyC;IACzC,KAAK,CAAC,EACJ,GAAG,EACH,UAAU,GACX,GAIG,EAAE;QACJ,OAAO;YACL,EAAE,EAAE,OAAO;YACX,KAAK,EAAE;gBACL,KAAK,EAAE,IAAI;gBACX,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtC;YACD,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACxB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,8EAA8E;AAC9E,MAAM,wBAAwB,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAU,CAAC;AAEpE;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAsB;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAyC,CAAC;IACjE,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CACb,+FAA+F,CAChG,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;IAC3C,IAAI,aAAa,KAAK,UAAU,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CACb,8EAA8E,CAC/E,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAER,CAAC;IACd,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,kGAAkG,CACnG,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;QACjC,MAAM,gBAAgB,GACpB,CAAC,SAAS,EAAE,QAAQ,EAAE,aAAa,CACpC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,CAAC;QACnD,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,wDAAwD,gBAAgB,CAAC,IAAI,CAC3E,IAAI,CACL,kEAAkE,CACpE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC;IACrD,MAAM,eAAe,GAAG,KAAK,CAAC,WAAW,CAAC;IAC1C,IAAI,eAAe,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CACb,qGAAqG,CACtG,CAAC;IACJ,CAAC;IACD,IACE,WAAW;QACX,OAAO,eAAe,KAAK,QAAQ;QAClC,wBAA8C,CAAC,QAAQ,CAAC,eAAe,CAAC,EACzE,CAAC;QACD,MAAM,IAAI,KAAK,CACb,qFAAqF,eAAe,KAAK;YACvG,2DAA2D,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,EAAE,CAAC;QAChB,0BAA0B,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACjD,CAAC;IAED,8EAA8E;IAC9E,MAAM,IAAI,GAAI,OAA6B,CAAC,IAAI,CAAC;IACjD,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;SAAM,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,iHAAiH,CAClH,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,wBAAwB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAgB;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,+EAA+E;YAC7E,+CAA+C,CAClD,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,+BAA+B,KAAK,8CAA8C,CACnF,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,KAQhB,CAAC;QACF,IAAI,OAAO,QAAQ,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CACb,+BAA+B,KAAK,uCAAuC,CAC5E,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,MAAM,IAAI;YACnB,aAAa;YACb,QAAQ;YACR,gBAAgB;YAChB,kBAAkB;YAClB,QAAQ;YACR,qBAAqB;SACb,EAAE,CAAC;YACX,IAAI,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC;gBAC3C,MAAM,IAAI,KAAK,CACb,+BAA+B,KAAK,OAAO,QAAQ,CAAC,EAAE,iBAAiB,MAAM,KAAK,CACnF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAa;IACrC,OAAO,CACL,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACZ,IAA2B,CAAC,IAAI,KAAK,iBAAiB,CACxD,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,IAA2B;IACzD,MAAM,IAAI,GAAI,IAAgC,CAAC,SAAS,CAAC;IACzD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IACjC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,KAA+B,CAAC;QACjD,MAAM,KAAK,GAAG,QAAQ,EAAE,EAAE,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1C,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CACb,gDAAgD,KAAK,qBAAqB,CAC3E,CAAC;QACJ,CAAC;QACD,IACE,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ;YACnC,QAAQ,CAAC,MAAM,KAAK,IAAI;YACxB,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC/B,CAAC;YACD,MAAM,IAAI,KAAK,CACb,gDAAgD,KAAK,4BAA4B,CAClF,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,IAAI,OAAO,QAAQ,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,sGAAsG,CACvG,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GACf,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;YACjC,QAAQ,CAAC,QAAQ,KAAK,IAAI;YAC1B,OAAO,QAAQ,CAAC,YAAY,KAAK,QAAQ;YACzC,QAAQ,CAAC,UAAU,KAAK,SAAS;YACjC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC;QAC/B,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,gDAAgD,KAAK,8FAA8F,CACpJ,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,WAAoB;IACtD,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACb,kFAAkF;YAChF,oDAAoD,CACvD,CAAC;IACJ,CAAC;IACD,IACE,0BAA0B,CACxB,WAA6D,CAC9D,EACD,CAAC;QACD,6BAA6B,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;QAC5D,OAAO;IACT,CAAC;IACD,4EAA4E;IAC5E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,WAAsC,CAAC,CAAC;IACvE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,0EAA0E;YACxE,+CAA+C,CAClD,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;QACJ,CAAC;QACD,6BAA6B,CAAC,KAAK,EAAE,iBAAiB,IAAI,IAAI,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,SAAS,6BAA6B,CAAC,KAAc,EAAE,KAAa;IAClE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,uBAAuB,KAAK,sEAAsE,CACnG,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,KAAkD,CAAC;IAC/D,MAAM,YAAY,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU,CAAC;IACvD,MAAM,WAAW,GACf,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAChC,GAAG,CAAC,QAAQ,KAAK,IAAI;QACrB,OAAQ,GAAG,CAAC,QAA8B,CAAC,GAAG,KAAK,QAAQ,CAAC;IAC9D,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,uBAAuB,KAAK,4EAA4E,CACzG,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAwB,MAAM,cAAc,CAAC;AACvE,OAAO,EAAgC,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAU/E,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAQjD,OAAO,EACL,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,2BAA2B,CAAC;AA6BnC,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,wBAAwB,GAMzB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,gBAAgB,EAChB,4CAA4C,EAC5C,6BAA6B,EAC7B,gCAAgC,EAChC,yBAAyB,EACzB,mBAAmB,EACnB,gCAAgC,EAChC,wBAAwB,GAEzB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,+BAA+B,EAC/B,eAAe,EACf,6BAA6B,GAK9B,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,oBAAoB,GAIrB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,qCAAqC,EACrC,0BAA0B,EAC1B,mCAAmC,GAEpC,MAAM,gCAAgC,CAAC;AAExC,OAAO,EACL,kCAAkC,EAClC,gCAAgC,EAChC,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,gBAAgB,GAEjB,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAO,GAAoB,EAAE;IAE7B,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC1C,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,KAAK,CAAC,EACJ,MAAM,EACN,QAAQ,GAIT;QACC,OAAO;YACL,MAAM,EAAE,WAAW,MAAM,GAAG;YAC5B,IAAI,EAAE,WAAW,MAAM,wBAAwB;YAC/C,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE;SAClE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,EAAE,MAAM,EAAsB;QAClC,OAAO;YACL,MAAM,EAAE,WAAW,MAAM,EAAE;YAC3B,IAAI,EAAE,WAAW,MAAM,wBAAwB;YAC/C,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACxB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,EACH,MAAM,EACN,QAAQ,GAIT;QACC,OAAO;YACL,MAAM,EAAE,WAAW,MAAM,EAAE;YAC3B,IAAI,EAAE,WAAW,MAAM,iBAAiB;YACxC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACxB,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,EACN,UAAU,EACV,MAAM,GAIP;QACC,MAAM,MAAM,GAAG,uBAAuB,MAAM,kBAAkB,UAAU,EAAE,CAAC;QAC3E,OAAO;YACL,MAAM;YACN,IAAI,EAAE,GAAG,MAAM,wBAAwB;YACvC,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACxB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,EACJ,QAAQ,EACR,QAAQ,GAIT;QACC,OAAO;YACL,MAAM,EAAE,qCAAqC,QAAQ,OAAO;YAC5D,IAAI,EAAE,qCAAqC,QAAQ,sBAAsB;YACzE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE;SAC1C,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,EAAE,QAAQ,EAAE,GAA0B,EAAE;QAC7C,OAAO;YACL,MAAM,EAAE,6BAA6B;YACrC,IAAI,EAAE,4CAA4C;YAClD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE;SACxC,CAAC;IACJ,CAAC;IAED,oCAAoC;IACpC,QAAQ,CAAC,OAAgC;QACvC,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAED,mEAAmE;IACnE,IAAI,CAAC,EACH,MAAM,EACN,QAAQ,GAIT;QACC,OAAO;YACL,MAAM;YACN,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACxB,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,GAAwB,EAAE;QAC5C,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAChD,OAAO;YACL,EAAE,EAAE,WAAW;YACf,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,GAAG,QAAQ,wBAAwB;YACzC,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACxB,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,MAAM;QACJ,OAAO;YACL,EAAE,EAAE,QAAQ;YACZ,UAAU,EAAE;gBACV,GAAG,EAAE,6BAA6B;gBAClC,OAAO,EAAE;oBACP,MAAM,EAAE,6BAA6B;oBACrC,sBAAsB,EAAE,YAAY;oBACpC,YAAY,EAAE,mCAAmC;iBAClD;aACF;YACD,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;SAC1C,CAAC;IACJ,CAAC;IAED,yCAAyC;IACzC,KAAK,CAAC,EACJ,GAAG,EACH,UAAU,GACX,GAIG,EAAE;QACJ,OAAO;YACL,EAAE,EAAE,OAAO;YACX,KAAK,EAAE;gBACL,KAAK,EAAE,IAAI;gBACX,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtC;YACD,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;SACxB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,8EAA8E;AAC9E,MAAM,wBAAwB,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAU,CAAC;AAEpE;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAsB;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAyC,CAAC;IACjE,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CACb,+FAA+F,CAChG,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IACzC,IAAI,YAAY,KAAK,UAAU,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAER,CAAC;IACd,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,kGAAkG,CACnG,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,IAAI,YAAY,KAAK,UAAU,EAAE,CAAC;QAChC,MAAM,gBAAgB,GACpB,CAAC,SAAS,EAAE,QAAQ,EAAE,aAAa,CACpC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,CAAC;QACnD,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,wDAAwD,gBAAgB,CAAC,IAAI,CAC3E,IAAI,CACL,gEAAgE,CAClE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC;IACrD,MAAM,eAAe,GAAG,KAAK,CAAC,WAAW,CAAC;IAC1C,IAAI,eAAe,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CACb,qGAAqG,CACtG,CAAC;IACJ,CAAC;IACD,IACE,WAAW;QACX,OAAO,eAAe,KAAK,QAAQ;QAClC,wBAA8C,CAAC,QAAQ,CAAC,eAAe,CAAC,EACzE,CAAC;QACD,MAAM,IAAI,KAAK,CACb,qFAAqF,eAAe,KAAK;YACvG,2DAA2D,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,EAAE,CAAC;QAChB,0BAA0B,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACjD,CAAC;IAED,8EAA8E;IAC9E,MAAM,IAAI,GAAI,OAA6B,CAAC,IAAI,CAAC;IACjD,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;SAAM,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,iHAAiH,CAClH,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,wBAAwB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAgB;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,+EAA+E;YAC7E,+CAA+C,CAClD,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,+BAA+B,KAAK,8CAA8C,CACnF,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,KAQhB,CAAC;QACF,IAAI,OAAO,QAAQ,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CACb,+BAA+B,KAAK,uCAAuC,CAC5E,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,MAAM,IAAI;YACnB,aAAa;YACb,QAAQ;YACR,gBAAgB;YAChB,kBAAkB;YAClB,QAAQ;YACR,qBAAqB;SACb,EAAE,CAAC;YACX,IAAI,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC;gBAC3C,MAAM,IAAI,KAAK,CACb,+BAA+B,KAAK,OAAO,QAAQ,CAAC,EAAE,iBAAiB,MAAM,KAAK,CACnF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAa;IACrC,OAAO,CACL,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACZ,IAA2B,CAAC,IAAI,KAAK,iBAAiB,CACxD,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,IAA2B;IACzD,MAAM,IAAI,GAAI,IAAgC,CAAC,SAAS,CAAC;IACzD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IACjC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,KAA+B,CAAC;QACjD,MAAM,KAAK,GAAG,QAAQ,EAAE,EAAE,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1C,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CACb,gDAAgD,KAAK,qBAAqB,CAC3E,CAAC;QACJ,CAAC;QACD,IACE,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ;YACnC,QAAQ,CAAC,MAAM,KAAK,IAAI;YACxB,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC/B,CAAC;YACD,MAAM,IAAI,KAAK,CACb,gDAAgD,KAAK,4BAA4B,CAClF,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,IAAI,OAAO,QAAQ,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,sGAAsG,CACvG,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GACf,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;YACjC,QAAQ,CAAC,QAAQ,KAAK,IAAI;YAC1B,OAAO,QAAQ,CAAC,YAAY,KAAK,QAAQ;YACzC,QAAQ,CAAC,UAAU,KAAK,SAAS;YACjC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC;QAC/B,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,gDAAgD,KAAK,8FAA8F,CACpJ,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,WAAoB;IACtD,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACb,kFAAkF;YAChF,oDAAoD,CACvD,CAAC;IACJ,CAAC;IACD,IACE,0BAA0B,CACxB,WAA6D,CAC9D,EACD,CAAC;QACD,6BAA6B,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;QAC5D,OAAO;IACT,CAAC;IACD,4EAA4E;IAC5E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,WAAsC,CAAC,CAAC;IACvE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,0EAA0E;YACxE,+CAA+C,CAClD,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;QACJ,CAAC;QACD,6BAA6B,CAAC,KAAK,EAAE,iBAAiB,IAAI,IAAI,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,SAAS,6BAA6B,CAAC,KAAc,EAAE,KAAa;IAClE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,uBAAuB,KAAK,sEAAsE,CACnG,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,KAAkD,CAAC;IAC/D,MAAM,YAAY,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU,CAAC;IACvD,MAAM,WAAW,GACf,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAChC,GAAG,CAAC,QAAQ,KAAK,IAAI;QACrB,OAAQ,GAAG,CAAC,QAA8B,CAAC,GAAG,KAAK,QAAQ,CAAC;IAC9D,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,uBAAuB,KAAK,4EAA4E,CACzG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,yBAAyB,GAAG,iCAAiC,CAAC;AAEpE;;;;;;;GAOG;AACH,SAAS,sBAAsB,CAAC,QAAiB;IAC/C,MAAM,YAAY,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,OAAO,CACL,wBAAwB,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACxD,yBAAyB,CAC1B,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,KAAyB;IAEzB,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,MAAM,GAAG,OAAO,CAAC;IACrB,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7C,MAAM,GAAG,WAAW,MAAM,EAAE,CAAC;IAC/B,CAAC;IACD,wEAAwE;IACxE,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC;IACxB,OAAO,GAAG,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC;QAC5D,GAAG,IAAI,CAAC,CAAC;IACX,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/D,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/B,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,MAAM,IAAI,SAAS,CAAC;AAC7B,CAAC"}

package/dist/identity/linkedin/connect-http.d.ts

@@ -1,38 +1,37 @@
 /**
- * Connect-with-LinkedIn — thin adapter over {@link createFleetIntegrationConnectProvider}.
+ * Connect-with-LinkedIn — thin adapter over {@link defineFleetIntegrationConnect}.
  *
  * Mounted under `/identity/linkedin/*` when listed on `identity.connect`, or
  * inferred from declared LinkedIn toolserver connectors on a user-scoped
  * deployment.
  */
-import type { IdentityConnectMountContext, IdentityConnectProvider } from "../connect-provider-types.js";
-import { type FleetIntegrationConnectProviderOptions } from "../fleet-integration-connect.js";
+import type { FleetIntegrationConnectProviderOptions } from "../fleet-integration-connect.js";
 export declare const LINKEDIN_CONNECT_STATUS_PATH: string;
 export declare const LINKEDIN_CONNECT_START_PATH: string;
 export declare const LINKEDIN_CONNECT_CALLBACK_PATH: string;
 export declare const LINKEDIN_CONNECT_LINK_PATH: string;
-export declare function isLinkedInActorSubjectEnabled(): boolean;
-export declare function enableLinkedInActorSubject(): void;
+export declare const isLinkedInActorSubjectEnabled: () => boolean;
+export declare const enableLinkedInActorSubject: () => void;
 /**
  * Enable actor-subject mode when LinkedIn connectors imply per-user vault subjects.
  *
  * Prefer {@link enableActorSubjectIntegrationsFromConnectors} at compile seams.
  */
-export declare function enableLinkedInActorSubjectFromConnectors(connectorKinds: readonly (string | undefined)[] | undefined, scope?: IdentityConnectMountContext["scope"]): void;
-export declare function resetLinkedInActorSubjectEnabledForTests(): void;
-export declare function isLinkedInConnectConfigured(env?: NodeJS.ProcessEnv): boolean;
-export declare function linkedinConnectUrl(publicAppUrl: string): string;
+export declare const enableLinkedInActorSubjectFromConnectors: (connectorKinds: readonly (string | undefined)[] | undefined, scope?: import("../connect-provider-types.js").IdentityConnectMountContext["scope"]) => void;
+export declare const resetLinkedInActorSubjectEnabledForTests: () => void;
+export declare const isLinkedInConnectConfigured: (env?: NodeJS.ProcessEnv) => boolean;
+export declare const linkedinConnectUrl: (publicAppUrl: string) => string;
 /** Options for {@link createLinkedInIdentityConnectProvider}. */
 export type LinkedInIdentityConnectProviderOptions = FleetIntegrationConnectProviderOptions;
 /** Build a LinkedIn connect provider. */
-export declare function createLinkedInIdentityConnectProvider(options?: LinkedInIdentityConnectProviderOptions): IdentityConnectProvider;
+export declare const createLinkedInIdentityConnectProvider: (options?: FleetIntegrationConnectProviderOptions) => import("../connect-provider-types.js").IdentityConnectProvider;
 /** Default LinkedIn connect provider used as a built-in mount candidate. */
-export declare const linkedinIdentityConnectProvider: IdentityConnectProvider;
+export declare const linkedinIdentityConnectProvider: import("../connect-provider-types.js").IdentityConnectProvider;
 /**
  * Opt into Connect-with-LinkedIn on `defineIdentity({ connect: […] })`.
  *
  * Usually unnecessary: declaring `connectors.linkedin` on a user-scoped
  * identity deployment mounts this provider and derives OAuth scopes automatically.
  */
-export declare function connect(options?: LinkedInIdentityConnectProviderOptions): IdentityConnectProvider;
+export declare const connect: (options?: FleetIntegrationConnectProviderOptions) => import("../connect-provider-types.js").IdentityConnectProvider;
 //# sourceMappingURL=connect-http.d.ts.map

package/dist/identity/linkedin/connect-http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connect-http.d.ts","sourceRoot":"","sources":["../../../src/identity/linkedin/connect-http.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAUH,OAAO,KAAK,EACV,2BAA2B,EAC3B,uBAAuB,EACxB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAIL,KAAK,sCAAsC,EAC5C,MAAM,iCAAiC,CAAC;AAKzC,eAAO,MAAM,4BAA4B,QAAe,CAAC;AACzD,eAAO,MAAM,2BAA2B,QAAgB,CAAC;AACzD,eAAO,MAAM,8BAA8B,QAAiB,CAAC;AAC7D,eAAO,MAAM,0BAA0B,QAAa,CAAC;AAErD,wBAAgB,6BAA6B,IAAI,OAAO,CAEvD;AAED,wBAAgB,0BAA0B,IAAI,IAAI,CAEjD;AAED;;;;GAIG;AACH,wBAAgB,wCAAwC,CACtD,cAAc,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,GAAG,SAAS,EAC3D,KAAK,CAAC,EAAE,2BAA2B,CAAC,OAAO,CAAC,GAC3C,IAAI,CAMN;AAED,wBAAgB,wCAAwC,IAAI,IAAI,CAE/D;AAED,wBAAgB,2BAA2B,CACzC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAET;AAED,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,iEAAiE;AACjE,MAAM,MAAM,sCAAsC,GAChD,sCAAsC,CAAC;AAEzC,yCAAyC;AACzC,wBAAgB,qCAAqC,CACnD,OAAO,GAAE,sCAA2C,GACnD,uBAAuB,CAMzB;AAED,4EAA4E;AAC5E,eAAO,MAAM,+BAA+B,EAAE,uBACL,CAAC;AAE1C;;;;;GAKG;AACH,wBAAgB,OAAO,CACrB,OAAO,CAAC,EAAE,sCAAsC,GAC/C,uBAAuB,CAKzB"}
+{"version":3,"file":"connect-http.d.ts","sourceRoot":"","sources":["../../../src/identity/linkedin/connect-http.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,sCAAsC,EAAE,MAAM,iCAAiC,CAAC;AAQ9F,eAAO,MAAM,4BAA4B,QAAwB,CAAC;AAClE,eAAO,MAAM,2BAA2B,QAAyB,CAAC;AAClE,eAAO,MAAM,8BAA8B,QAA0B,CAAC;AACtE,eAAO,MAAM,0BAA0B,QAAsB,CAAC;AAE9D,eAAO,MAAM,6BAA6B,eAAiC,CAAC;AAC5E,eAAO,MAAM,0BAA0B,YAA8B,CAAC;AACtE;;;;GAIG;AACH,eAAO,MAAM,wCAAwC,4JACV,CAAC;AAC5C,eAAO,MAAM,wCAAwC,YACV,CAAC;AAC5C,eAAO,MAAM,2BAA2B,sCAA+B,CAAC;AACxE,eAAO,MAAM,kBAAkB,kCAAsB,CAAC;AAEtD,iEAAiE;AACjE,MAAM,MAAM,sCAAsC,GAChD,sCAAsC,CAAC;AAEzC,yCAAyC;AACzC,eAAO,MAAM,qCAAqC,sHAA0B,CAAC;AAE7E,4EAA4E;AAC5E,eAAO,MAAM,+BAA+B,gEAAoB,CAAC;AAEjE;;;;;GAKG;AACH,eAAO,MAAM,OAAO,sHAAmB,CAAC"}

package/dist/identity/linkedin/connect-http.js

@@ -1,59 +1,41 @@
 /**
- * Connect-with-LinkedIn — thin adapter over {@link createFleetIntegrationConnectProvider}.
+ * Connect-with-LinkedIn — thin adapter over {@link defineFleetIntegrationConnect}.
  *
  * Mounted under `/identity/linkedin/*` when listed on `identity.connect`, or
  * inferred from declared LinkedIn toolserver connectors on a user-scoped
  * deployment.
  */
 import { LINKEDIN_INTEGRATION } from "../../connectors/toolserver/integrations.js";
-import { enableActorSubjectIntegration, enableActorSubjectIntegrationFromConnectors, isActorSubjectIntegrationEnabled, resetActorSubjectEnabledForTests, } from "../actor-subject.js";
-import { identityConnectPaths } from "../connect-paths.js";
-import { createFleetIntegrationConnectProvider, fleetIntegrationConnectUrl, isFleetIntegrationConnectConfigured, } from "../fleet-integration-connect.js";
+import { defineFleetIntegrationConnect } from "../define-fleet-connect.js";
 import { linkedinByoOauth } from "./oauth.js";
-const PATHS = identityConnectPaths("linkedin");
-export const LINKEDIN_CONNECT_STATUS_PATH = PATHS.status;
-export const LINKEDIN_CONNECT_START_PATH = PATHS.connect;
-export const LINKEDIN_CONNECT_CALLBACK_PATH = PATHS.callback;
-export const LINKEDIN_CONNECT_LINK_PATH = PATHS.link;
-export function isLinkedInActorSubjectEnabled() {
-    return isActorSubjectIntegrationEnabled("linkedin");
-}
-export function enableLinkedInActorSubject() {
-    enableActorSubjectIntegration("linkedin");
-}
+const linkedin = defineFleetIntegrationConnect({
+    integration: LINKEDIN_INTEGRATION,
+    byoClient: linkedinByoOauth,
+});
+export const LINKEDIN_CONNECT_STATUS_PATH = linkedin.paths.status;
+export const LINKEDIN_CONNECT_START_PATH = linkedin.paths.connect;
+export const LINKEDIN_CONNECT_CALLBACK_PATH = linkedin.paths.callback;
+export const LINKEDIN_CONNECT_LINK_PATH = linkedin.paths.link;
+export const isLinkedInActorSubjectEnabled = linkedin.isActorSubjectEnabled;
+export const enableLinkedInActorSubject = linkedin.enableActorSubject;
 /**
  * Enable actor-subject mode when LinkedIn connectors imply per-user vault subjects.
  *
  * Prefer {@link enableActorSubjectIntegrationsFromConnectors} at compile seams.
  */
-export function enableLinkedInActorSubjectFromConnectors(connectorKinds, scope) {
-    enableActorSubjectIntegrationFromConnectors(LINKEDIN_INTEGRATION, connectorKinds, scope);
-}
-export function resetLinkedInActorSubjectEnabledForTests() {
-    resetActorSubjectEnabledForTests();
-}
-export function isLinkedInConnectConfigured(env = process.env) {
-    return isFleetIntegrationConnectConfigured(linkedinByoOauth, env);
-}
-export function linkedinConnectUrl(publicAppUrl) {
-    return fleetIntegrationConnectUrl(LINKEDIN_INTEGRATION, publicAppUrl);
-}
+export const enableLinkedInActorSubjectFromConnectors = linkedin.enableActorSubjectFromConnectors;
+export const resetLinkedInActorSubjectEnabledForTests = linkedin.resetActorSubjectEnabledForTests;
+export const isLinkedInConnectConfigured = linkedin.isConnectConfigured;
+export const linkedinConnectUrl = linkedin.connectUrl;
 /** Build a LinkedIn connect provider. */
-export function createLinkedInIdentityConnectProvider(options = {}) {
-    return createFleetIntegrationConnectProvider(LINKEDIN_INTEGRATION, linkedinByoOauth, options);
-}
+export const createLinkedInIdentityConnectProvider = linkedin.createProvider;
 /** Default LinkedIn connect provider used as a built-in mount candidate. */
-export const linkedinIdentityConnectProvider = createLinkedInIdentityConnectProvider();
+export const linkedinIdentityConnectProvider = linkedin.provider;
 /**
  * Opt into Connect-with-LinkedIn on `defineIdentity({ connect: […] })`.
  *
  * Usually unnecessary: declaring `connectors.linkedin` on a user-scoped
  * identity deployment mounts this provider and derives OAuth scopes automatically.
  */
-export function connect(options) {
-    enableLinkedInActorSubject();
-    return options
-        ? createLinkedInIdentityConnectProvider(options)
-        : linkedinIdentityConnectProvider;
-}
+export const connect = linkedin.connect;
 //# sourceMappingURL=connect-http.js.map

package/dist/identity/linkedin/connect-http.js.map

@@ -1 +1 @@
-{"version":3,"file":"connect-http.js","sourceRoot":"","sources":["../../../src/identity/linkedin/connect-http.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AACnF,OAAO,EACL,6BAA6B,EAC7B,2CAA2C,EAC3C,gCAAgC,EAChC,gCAAgC,GACjC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAK3D,OAAO,EACL,qCAAqC,EACrC,0BAA0B,EAC1B,mCAAmC,GAEpC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,MAAM,KAAK,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;AAE/C,MAAM,CAAC,MAAM,4BAA4B,GAAG,KAAK,CAAC,MAAM,CAAC;AACzD,MAAM,CAAC,MAAM,2BAA2B,GAAG,KAAK,CAAC,OAAO,CAAC;AACzD,MAAM,CAAC,MAAM,8BAA8B,GAAG,KAAK,CAAC,QAAQ,CAAC;AAC7D,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,CAAC,IAAI,CAAC;AAErD,MAAM,UAAU,6BAA6B;IAC3C,OAAO,gCAAgC,CAAC,UAAU,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,0BAA0B;IACxC,6BAA6B,CAAC,UAAU,CAAC,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wCAAwC,CACtD,cAA2D,EAC3D,KAA4C;IAE5C,2CAA2C,CACzC,oBAAoB,EACpB,cAAc,EACd,KAAK,CACN,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wCAAwC;IACtD,gCAAgC,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,OAAO,mCAAmC,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,YAAoB;IACrD,OAAO,0BAA0B,CAAC,oBAAoB,EAAE,YAAY,CAAC,CAAC;AACxE,CAAC;AAMD,yCAAyC;AACzC,MAAM,UAAU,qCAAqC,CACnD,OAAO,GAA2C,EAAE;IAEpD,OAAO,qCAAqC,CAC1C,oBAAoB,EACpB,gBAAgB,EAChB,OAAO,CACR,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,MAAM,+BAA+B,GAC1C,qCAAqC,EAAE,CAAC;AAE1C;;;;;GAKG;AACH,MAAM,UAAU,OAAO,CACrB,OAAgD;IAEhD,0BAA0B,EAAE,CAAC;IAC7B,OAAO,OAAO;QACZ,CAAC,CAAC,qCAAqC,CAAC,OAAO,CAAC;QAChD,CAAC,CAAC,+BAA+B,CAAC;AACtC,CAAC"}
+{"version":3,"file":"connect-http.js","sourceRoot":"","sources":["../../../src/identity/linkedin/connect-http.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AACnF,OAAO,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAE3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,MAAM,QAAQ,GAAG,6BAA6B,CAAC;IAC7C,WAAW,EAAE,oBAAoB;IACjC,SAAS,EAAE,gBAAgB;CAC5B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4BAA4B,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;AAClE,MAAM,CAAC,MAAM,2BAA2B,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;AAClE,MAAM,CAAC,MAAM,8BAA8B,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;AACtE,MAAM,CAAC,MAAM,0BAA0B,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;AAE9D,MAAM,CAAC,MAAM,6BAA6B,GAAG,QAAQ,CAAC,qBAAqB,CAAC;AAC5E,MAAM,CAAC,MAAM,0BAA0B,GAAG,QAAQ,CAAC,kBAAkB,CAAC;AACtE;;;;GAIG;AACH,MAAM,CAAC,MAAM,wCAAwC,GACnD,QAAQ,CAAC,gCAAgC,CAAC;AAC5C,MAAM,CAAC,MAAM,wCAAwC,GACnD,QAAQ,CAAC,gCAAgC,CAAC;AAC5C,MAAM,CAAC,MAAM,2BAA2B,GAAG,QAAQ,CAAC,mBAAmB,CAAC;AACxE,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,CAAC,UAAU,CAAC;AAMtD,yCAAyC;AACzC,MAAM,CAAC,MAAM,qCAAqC,GAAG,QAAQ,CAAC,cAAc,CAAC;AAE7E,4EAA4E;AAC5E,MAAM,CAAC,MAAM,+BAA+B,GAAG,QAAQ,CAAC,QAAQ,CAAC;AAEjE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC"}

package/dist/identity/linkedin/oauth.d.ts

@@ -15,7 +15,7 @@ export declare const LINKEDIN_OAUTH_TOKEN_URL_ENV: string;
 export declare const LINKEDIN_OAUTH_USERINFO_URL_ENV: string;
 /** LinkedIn-bound OAuth state / connect-ticket helpers. */
 export declare const linkedinOauthTickets: import("../oauth-tickets.js").OauthTickets;
-export declare const resolveLinkedInOauthRedirectBase: typeof import("../byo-oauth.js").resolveSlackOauthRedirectBase;
+export declare const resolveLinkedInOauthRedirectBase: typeof import("../oauth-env.js").resolveOauthRedirectBase;
 export declare const readLinkedInOauthConfig: (env?: NodeJS.ProcessEnv) => ByoOauthConfig | null;
 export declare const buildLinkedInAuthorizeUrl: (config: ByoOauthConfig, state: string, redirectUri: string, scopes?: string) => string;
 export declare const exchangeLinkedInOauthCode: (config: ByoOauthConfig, code: string, redirectUri: string, fetchImpl?: typeof fetch) => Promise<import("../fleet-connect.js").FleetVaultByoTokenResult>;

package/dist/identity/linkedin/oauth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../src/identity/linkedin/oauth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,cAAc,EACpB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,MAAM,mBAAmB,GAAG,cAAc,CAAC;AAUjD,8EAA8E;AAC9E,eAAO,MAAM,gBAAgB,EAAE,cAqB7B,CAAC;AAEH,eAAO,MAAM,4BAA4B,QAAgC,CAAC;AAC1E,eAAO,MAAM,gCAAgC,QACV,CAAC;AACpC,eAAO,MAAM,yBAAyB,QAA8B,CAAC;AACrE,eAAO,MAAM,2BAA2B,QAA+B,CAAC;AACxE,eAAO,MAAM,4BAA4B,QAAgC,CAAC;AAC1E,eAAO,MAAM,+BAA+B,QAAmC,CAAC;AAEhF,2DAA2D;AAC3D,eAAO,MAAM,oBAAoB,4CAA2B,CAAC;AAE7D,eAAO,MAAM,gCAAgC,gEACP,CAAC;AAEvC,eAAO,MAAM,uBAAuB,oDAA8B,CAAC;AACnE,eAAO,MAAM,yBAAyB,yFAAqC,CAAC;AAC5E,eAAO,MAAM,yBAAyB,0JAAgC,CAAC"}
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../src/identity/linkedin/oauth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,cAAc,EACpB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,MAAM,mBAAmB,GAAG,cAAc,CAAC;AAUjD,8EAA8E;AAC9E,eAAO,MAAM,gBAAgB,EAAE,cAqB7B,CAAC;AAEH,eAAO,MAAM,4BAA4B,QAAgC,CAAC;AAC1E,eAAO,MAAM,gCAAgC,QACV,CAAC;AACpC,eAAO,MAAM,yBAAyB,QAA8B,CAAC;AACrE,eAAO,MAAM,2BAA2B,QAA+B,CAAC;AACxE,eAAO,MAAM,4BAA4B,QAAgC,CAAC;AAC1E,eAAO,MAAM,+BAA+B,QAAmC,CAAC;AAEhF,2DAA2D;AAC3D,eAAO,MAAM,oBAAoB,4CAA2B,CAAC;AAE7D,eAAO,MAAM,gCAAgC,2DACP,CAAC;AAEvC,eAAO,MAAM,uBAAuB,oDAA8B,CAAC;AACnE,eAAO,MAAM,yBAAyB,yFAAqC,CAAC;AAC5E,eAAO,MAAM,yBAAyB,0JAAgC,CAAC"}

package/dist/identity/marketplace/connect.js

@@ -13,7 +13,7 @@ import { resolveMarketplaceMcpServer } from "../../connectors/marketplace/fleet-
 import { enableActorSubjectIntegration } from "../actor-subject.js";
 import { createFleetVaultConnectProvider, } from "../fleet-connect.js";
 import { createFleetAuthSession, deleteAgentConnection, listAgentConnections, } from "../fleet.js";
-import { MDA_PUBLIC_API_URL_ENV, MDA_PUBLIC_APP_URL_ENV, resolveSlackOauthRedirectBase, } from "../slack/oauth.js";
+import { MDA_PUBLIC_API_URL_ENV, MDA_PUBLIC_APP_URL_ENV, resolveOauthRedirectBase, } from "../oauth-env.js";
 import { marketplaceAsFleetHint } from "./connect-hint.js";
 function fleetClientOptions(fleet) {
     if (!fleet) {
@@ -40,7 +40,7 @@ export function createMarketplaceVaultConnectProvider(integration, options = {})
         integration: marketplaceAsFleetHint(integration),
         ...(options.scopes ? { scopes: [...options.scopes] } : {}),
         fallbackScopes: [...(integration.scopes ?? [])],
-        resolveRedirectBase: resolveSlackOauthRedirectBase,
+        resolveRedirectBase: resolveOauthRedirectBase,
         resolvePublicAppUrl() {
             return (process.env[MDA_PUBLIC_APP_URL_ENV]?.replace(/\/$/, "") ||
                 process.env[MDA_PUBLIC_API_URL_ENV]?.replace(/\/$/, ""));