managed-deepagents 0.5.3-dev.111 → 0.5.3-dev.113

package/dist/identity/github/oauth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../src/identity/github/oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,cAAc,EACpB,MAAM,iBAAiB,CAAC;AAGzB,eAAO,MAAM,oBAAoB,qBAAqB,CAAC;AACvD,eAAO,MAAM,wBAAwB,yBAAyB,CAAC;AAC/D,kEAAkE;AAClE,eAAO,MAAM,uBAAuB,wBAAwB,CAAC;AAC7D,8CAA8C;AAC9C,eAAO,MAAM,qBAAqB,sBAAsB,CAAC;AAQzD,MAAM,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAE/C,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAyBD,6DAA6D;AAC7D,eAAO,MAAM,cAAc,EAAE,cAkD3B,CAAC;AAEH,yDAAyD;AACzD,eAAO,MAAM,kBAAkB,4CAAyB,CAAC;AAEzD,eAAO,MAAM,8BAA8B,2DACP,CAAC;AAErC;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,iBAAiB,GAAG,IAAI,CAK1B;AAED,eAAO,MAAM,uBAAuB,yFAAmC,CAAC;AAExE;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,iBAAiB,EACzB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,sBAAsB,CAAC,CAqBjC"}

package/dist/identity/github/oauth.js

@@ -1,124 +0,0 @@
-/**
- * GitHub OAuth helpers for Connect-with-GitHub credential binding.
- *
- * Unlike Slack Connect (channel identity remap only), GitHub Connect stores a
- * per-actor OAuth access token so `credentials.github({ write: ["actor"] })`
- * can act as the signed-in user (e.g. open pull requests).
- *
- * Implemented as a {@link createByoOauthClient} descriptor with GitHub-specific
- * token (JSON body) and userinfo (API headers) quirks.
- */
-import { createByoOauthClient, } from "../byo-oauth.js";
-import { MDA_PUBLIC_APP_URL_ENV } from "../oauth-env.js";
-export const GITHUB_CLIENT_ID_ENV = "GITHUB_CLIENT_ID";
-export const GITHUB_CLIENT_SECRET_ENV = "GITHUB_CLIENT_SECRET";
-/** Space-separated OAuth scopes. Defaults to `repo read:user`. */
-export const GITHUB_OAUTH_SCOPES_ENV = "GITHUB_OAUTH_SCOPES";
-/** Override GitHub OAuth/API base (tests). */
-export const GITHUB_OAUTH_BASE_ENV = "GITHUB_OAUTH_BASE";
-const DEFAULT_OAUTH_BASE = "https://github.com";
-const DEFAULT_API_BASE = "https://api.github.com";
-const DEFAULT_SCOPES = "repo read:user";
-const SUBJECT_METADATA_KEY = "github_user_id";
-const LOGIN_METADATA_KEY = "github_login";
-function githubEndpoints(env) {
-    const oauthBase = (env[GITHUB_OAUTH_BASE_ENV]?.trim() || DEFAULT_OAUTH_BASE).replace(/\/$/, "");
-    const apiBase = oauthBase === DEFAULT_OAUTH_BASE ? DEFAULT_API_BASE : `${oauthBase}/api/v3`;
-    return {
-        oauthBase,
-        apiBase,
-        authUrl: `${oauthBase}/login/oauth/authorize`,
-        tokenUrl: `${oauthBase}/login/oauth/access_token`,
-        userInfoUrl: `${apiBase}/user`,
-        defaultScopes: DEFAULT_SCOPES,
-    };
-}
-/** GitHub BYO OAuth client (config, authorize, exchange). */
-export const githubByoOauth = createByoOauthClient({
-    providerId: "github",
-    displayName: "GitHub",
-    envPrefix: "GITHUB",
-    envKeys: {
-        scopes: GITHUB_OAUTH_SCOPES_ENV,
-    },
-    defaultPrompt: false,
-    tokenRequest: {
-        format: "json",
-        headers: { Accept: "application/json" },
-    },
-    userInfoRequest: {
-        required: true,
-        headers: {
-            Accept: "application/vnd.github+json",
-            "User-Agent": "managed-deepagents",
-            "X-GitHub-Api-Version": "2022-11-28",
-        },
-    },
-    defaultEndpoints(env) {
-        const endpoints = githubEndpoints(env);
-        return {
-            authUrl: endpoints.authUrl,
-            tokenUrl: endpoints.tokenUrl,
-            userInfoUrl: endpoints.userInfoUrl,
-            defaultScopes: endpoints.defaultScopes,
-        };
-    },
-    parseUserInfo(json) {
-        const id = json.id;
-        const login = typeof json.login === "string" ? json.login : undefined;
-        if (id === undefined || !login) {
-            throw new Error(typeof json.message === "string"
-                ? json.message
-                : "GitHub /user lookup failed");
-        }
-        return {
-            ...(typeof json.email === "string" && json.email
-                ? { email: json.email }
-                : {}),
-            subject: String(id),
-            metadata: {
-                [LOGIN_METADATA_KEY]: login,
-            },
-        };
-    },
-    subjectMetadataKey: SUBJECT_METADATA_KEY,
-});
-/** GitHub-bound OAuth state / connect-ticket helpers. */
-export const githubOauthTickets = githubByoOauth.tickets;
-export const resolveGitHubOauthRedirectBase = githubByoOauth.resolveRedirectBase;
-/**
- * Requires `MDA_PUBLIC_APP_URL` — unlike Fleet BYO readers, do not fall back
- * to `MDA_PUBLIC_API_URL`; post-OAuth redirect targets the managed app
- * (`/settings?github=connected`).
- */
-export function readGitHubOauthConfig(env = process.env) {
-    if (!env[MDA_PUBLIC_APP_URL_ENV]?.trim()) {
-        return null;
-    }
-    return githubByoOauth.readConfig(env);
-}
-export const buildGitHubAuthorizeUrl = githubByoOauth.buildAuthorizeUrl;
-/**
- * Exchange an authorization code for a user access token and profile.
- *
- * GitHub returns `application/x-www-form-urlencoded` unless `Accept:
- * application/json` is set — handled by the BYO tokenRequest config.
- */
-export async function exchangeGitHubOauthCode(config, code, redirectUri, fetchImpl = fetch) {
-    const result = await githubByoOauth.exchangeCode(config, code, redirectUri, fetchImpl);
-    const userId = result.metadata?.[SUBJECT_METADATA_KEY];
-    const login = result.metadata?.[LOGIN_METADATA_KEY];
-    if (typeof userId !== "string" || typeof login !== "string" || !login) {
-        throw new Error("GitHub /user lookup failed");
-    }
-    return {
-        accessToken: result.accessToken,
-        ...(result.tokenType ? { tokenType: result.tokenType } : {}),
-        ...(result.scope ? { scope: result.scope } : {}),
-        ...(result.refreshToken ? { refreshToken: result.refreshToken } : {}),
-        userId,
-        login,
-        ...(result.accountLabel ? { email: result.accountLabel } : {}),
-    };
-}
-//# sourceMappingURL=oauth.js.map

package/dist/identity/github/oauth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/identity/github/oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,oBAAoB,GAGrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAAkB,CAAC;AACvD,MAAM,CAAC,MAAM,wBAAwB,GAAG,sBAAsB,CAAC;AAC/D,kEAAkE;AAClE,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAAC;AAC7D,8CAA8C;AAC9C,MAAM,CAAC,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AAEzD,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAChD,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;AAClD,MAAM,cAAc,GAAG,gBAAgB,CAAC;AACxC,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAC9C,MAAM,kBAAkB,GAAG,cAAc,CAAC;AAc1C,SAAS,eAAe,CAAC,GAAsB;IAQ7C,MAAM,SAAS,GAAG,CAChB,GAAG,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,IAAI,kBAAkB,CACzD,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrB,MAAM,OAAO,GACX,SAAS,KAAK,kBAAkB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,SAAS,SAAS,CAAC;IAC9E,OAAO;QACL,SAAS;QACT,OAAO;QACP,OAAO,EAAE,GAAG,SAAS,wBAAwB;QAC7C,QAAQ,EAAE,GAAG,SAAS,2BAA2B;QACjD,WAAW,EAAE,GAAG,OAAO,OAAO;QAC9B,aAAa,EAAE,cAAc;KAC9B,CAAC;AACJ,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,MAAM,cAAc,GAAmB,oBAAoB,CAAC;IACjE,UAAU,EAAE,QAAQ;IACpB,WAAW,EAAE,QAAQ;IACrB,SAAS,EAAE,QAAQ;IACnB,OAAO,EAAE;QACP,MAAM,EAAE,uBAAuB;KAChC;IACD,aAAa,EAAE,KAAK;IACpB,YAAY,EAAE;QACZ,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;KACxC;IACD,eAAe,EAAE;QACf,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE;YACP,MAAM,EAAE,6BAA6B;YACrC,YAAY,EAAE,oBAAoB;YAClC,sBAAsB,EAAE,YAAY;SACrC;KACF;IACD,gBAAgB,CAAC,GAAG;QAClB,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACvC,OAAO;YACL,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,aAAa,EAAE,SAAS,CAAC,aAAa;SACvC,CAAC;IACJ,CAAC;IACD,aAAa,CAAC,IAAI;QAChB,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QACtE,IAAI,EAAE,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;gBAC9B,CAAC,CAAC,IAAI,CAAC,OAAO;gBACd,CAAC,CAAC,4BAA4B,CACjC,CAAC;QACJ,CAAC;QACD,OAAO;YACL,GAAG,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK;gBAC9C,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;gBACvB,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;YACnB,QAAQ,EAAE;gBACR,CAAC,kBAAkB,CAAC,EAAE,KAAK;aAC5B;SACF,CAAC;IACJ,CAAC;IACD,kBAAkB,EAAE,oBAAoB;CACzC,CAAC,CAAC;AAEH,yDAAyD;AACzD,MAAM,CAAC,MAAM,kBAAkB,GAAG,cAAc,CAAC,OAAO,CAAC;AAEzD,MAAM,CAAC,MAAM,8BAA8B,GACzC,cAAc,CAAC,mBAAmB,CAAC;AAErC;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAc,CAAC,iBAAiB,CAAC;AAExE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAyB,EACzB,IAAY,EACZ,WAAmB,EACnB,SAAS,GAAiB,KAAK;IAE/B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,YAAY,CAC9C,MAAM,EACN,IAAI,EACJ,WAAW,EACX,SAAS,CACV,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,oBAAoB,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,kBAAkB,CAAC,CAAC;IACpD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM;QACN,KAAK;QACL,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC;AACJ,CAAC"}

package/dist/identity/google/connect-http.d.ts

@@ -1,37 +0,0 @@
-/**
- * Connect-with-Google — thin adapter over {@link defineFleetIntegrationConnect}.
- *
- * Mounted under `/identity/google/*` when listed on `identity.connect`, or
- * inferred from declared Google toolserver connectors on a user-scoped
- * deployment.
- */
-import type { FleetIntegrationConnectProviderOptions } from "../fleet-integration-connect.js";
-export declare const GOOGLE_CONNECT_STATUS_PATH: string;
-export declare const GOOGLE_CONNECT_START_PATH: string;
-export declare const GOOGLE_CONNECT_CALLBACK_PATH: string;
-export declare const GOOGLE_CONNECT_LINK_PATH: string;
-export declare const isGoogleActorSubjectEnabled: () => boolean;
-export declare const enableGoogleActorSubject: () => void;
-/**
- * Enable actor-subject mode when Google connectors imply per-user vault subjects.
- *
- * Prefer {@link enableActorSubjectIntegrationsFromConnectors} at compile seams.
- */
-export declare const enableGoogleActorSubjectFromConnectors: (connectorKinds: readonly (string | undefined)[] | undefined, scope?: import("../connect-provider-types.js").IdentityConnectMountContext["scope"]) => void;
-export declare const resetGoogleActorSubjectEnabledForTests: () => void;
-export declare const isGoogleConnectConfigured: (env?: NodeJS.ProcessEnv) => boolean;
-export declare const googleConnectUrl: (publicAppUrl: string) => string;
-/** Options for {@link createGoogleIdentityConnectProvider}. */
-export type GoogleIdentityConnectProviderOptions = FleetIntegrationConnectProviderOptions;
-/** Build a Google connect provider. */
-export declare const createGoogleIdentityConnectProvider: (options?: FleetIntegrationConnectProviderOptions) => import("../connect-provider-types.js").IdentityConnectProvider;
-/** Default Google connect provider used as a built-in mount candidate. */
-export declare const googleIdentityConnectProvider: import("../connect-provider-types.js").IdentityConnectProvider;
-/**
- * Opt into Connect-with-Google on `defineIdentity({ connect: […] })`.
- *
- * Usually unnecessary: declaring Google toolserver connectors on a user-scoped
- * identity deployment mounts this provider and derives OAuth scopes automatically.
- */
-export declare const connect: (options?: FleetIntegrationConnectProviderOptions) => import("../connect-provider-types.js").IdentityConnectProvider;
-//# sourceMappingURL=connect-http.d.ts.map

package/dist/identity/google/connect-http.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"connect-http.d.ts","sourceRoot":"","sources":["../../../src/identity/google/connect-http.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,sCAAsC,EAAE,MAAM,iCAAiC,CAAC;AAS9F,eAAO,MAAM,0BAA0B,QAAsB,CAAC;AAC9D,eAAO,MAAM,yBAAyB,QAAuB,CAAC;AAC9D,eAAO,MAAM,4BAA4B,QAAwB,CAAC;AAClE,eAAO,MAAM,wBAAwB,QAAoB,CAAC;AAE1D,eAAO,MAAM,2BAA2B,eAA+B,CAAC;AACxE,eAAO,MAAM,wBAAwB,YAA4B,CAAC;AAClE;;;;GAIG;AACH,eAAO,MAAM,sCAAsC,4JACV,CAAC;AAC1C,eAAO,MAAM,sCAAsC,YACV,CAAC;AAC1C,eAAO,MAAM,yBAAyB,sCAA6B,CAAC;AACpE,eAAO,MAAM,gBAAgB,kCAAoB,CAAC;AAElD,+DAA+D;AAC/D,MAAM,MAAM,oCAAoC,GAC9C,sCAAsC,CAAC;AAEzC,uCAAuC;AACvC,eAAO,MAAM,mCAAmC,sHAAwB,CAAC;AAEzE,0EAA0E;AAC1E,eAAO,MAAM,6BAA6B,gEAAkB,CAAC;AAE7D;;;;;GAKG;AACH,eAAO,MAAM,OAAO,sHAAiB,CAAC"}

package/dist/identity/google/connect-http.js

@@ -1,42 +0,0 @@
-/**
- * Connect-with-Google — thin adapter over {@link defineFleetIntegrationConnect}.
- *
- * Mounted under `/identity/google/*` when listed on `identity.connect`, or
- * inferred from declared Google toolserver connectors on a user-scoped
- * deployment.
- */
-import { GOOGLE_INTEGRATION } from "../../connectors/toolserver/integrations.js";
-import { defineFleetIntegrationConnect } from "../define-fleet-connect.js";
-import { googleByoOauth } from "./oauth.js";
-const google = defineFleetIntegrationConnect({
-    integration: GOOGLE_INTEGRATION,
-    byoClient: googleByoOauth,
-    fallbackScopes: ["openid", "email", "profile"],
-});
-export const GOOGLE_CONNECT_STATUS_PATH = google.paths.status;
-export const GOOGLE_CONNECT_START_PATH = google.paths.connect;
-export const GOOGLE_CONNECT_CALLBACK_PATH = google.paths.callback;
-export const GOOGLE_CONNECT_LINK_PATH = google.paths.link;
-export const isGoogleActorSubjectEnabled = google.isActorSubjectEnabled;
-export const enableGoogleActorSubject = google.enableActorSubject;
-/**
- * Enable actor-subject mode when Google connectors imply per-user vault subjects.
- *
- * Prefer {@link enableActorSubjectIntegrationsFromConnectors} at compile seams.
- */
-export const enableGoogleActorSubjectFromConnectors = google.enableActorSubjectFromConnectors;
-export const resetGoogleActorSubjectEnabledForTests = google.resetActorSubjectEnabledForTests;
-export const isGoogleConnectConfigured = google.isConnectConfigured;
-export const googleConnectUrl = google.connectUrl;
-/** Build a Google connect provider. */
-export const createGoogleIdentityConnectProvider = google.createProvider;
-/** Default Google connect provider used as a built-in mount candidate. */
-export const googleIdentityConnectProvider = google.provider;
-/**
- * Opt into Connect-with-Google on `defineIdentity({ connect: […] })`.
- *
- * Usually unnecessary: declaring Google toolserver connectors on a user-scoped
- * identity deployment mounts this provider and derives OAuth scopes automatically.
- */
-export const connect = google.connect;
-//# sourceMappingURL=connect-http.js.map

package/dist/identity/google/connect-http.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"connect-http.js","sourceRoot":"","sources":["../../../src/identity/google/connect-http.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,6CAA6C,CAAC;AACjF,OAAO,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAE3E,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,MAAM,GAAG,6BAA6B,CAAC;IAC3C,WAAW,EAAE,kBAAkB;IAC/B,SAAS,EAAE,cAAc;IACzB,cAAc,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;CAC/C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;AAC9D,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;AAC9D,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;AAClE,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;AAE1D,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC,qBAAqB,CAAC;AACxE,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,kBAAkB,CAAC;AAClE;;;;GAIG;AACH,MAAM,CAAC,MAAM,sCAAsC,GACjD,MAAM,CAAC,gCAAgC,CAAC;AAC1C,MAAM,CAAC,MAAM,sCAAsC,GACjD,MAAM,CAAC,gCAAgC,CAAC;AAC1C,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC,mBAAmB,CAAC;AACpE,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,UAAU,CAAC;AAMlD,uCAAuC;AACvC,MAAM,CAAC,MAAM,mCAAmC,GAAG,MAAM,CAAC,cAAc,CAAC;AAEzE,0EAA0E;AAC1E,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC,QAAQ,CAAC;AAE7D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC"}

package/dist/identity/google/index.d.ts

@@ -1,7 +0,0 @@
-/**
- * Google identity helpers — Connect-with-Google.
- */
-export { connect, createGoogleIdentityConnectProvider, enableGoogleActorSubject, enableGoogleActorSubjectFromConnectors, googleConnectUrl, googleIdentityConnectProvider, isGoogleActorSubjectEnabled, isGoogleConnectConfigured, resetGoogleActorSubjectEnabledForTests, GOOGLE_CONNECT_CALLBACK_PATH, GOOGLE_CONNECT_LINK_PATH, GOOGLE_CONNECT_START_PATH, GOOGLE_CONNECT_STATUS_PATH, } from "./connect-http.js";
-export type { GoogleIdentityConnectProviderOptions } from "./connect-http.js";
-export { googleOauthTickets } from "./oauth.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/identity/google/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/identity/google/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,OAAO,EACP,mCAAmC,EACnC,wBAAwB,EACxB,sCAAsC,EACtC,gBAAgB,EAChB,6BAA6B,EAC7B,2BAA2B,EAC3B,yBAAyB,EACzB,sCAAsC,EACtC,4BAA4B,EAC5B,wBAAwB,EACxB,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,oCAAoC,EAAE,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC"}

package/dist/identity/google/index.js

@@ -1,6 +0,0 @@
-/**
- * Google identity helpers — Connect-with-Google.
- */
-export { connect, createGoogleIdentityConnectProvider, enableGoogleActorSubject, enableGoogleActorSubjectFromConnectors, googleConnectUrl, googleIdentityConnectProvider, isGoogleActorSubjectEnabled, isGoogleConnectConfigured, resetGoogleActorSubjectEnabledForTests, GOOGLE_CONNECT_CALLBACK_PATH, GOOGLE_CONNECT_LINK_PATH, GOOGLE_CONNECT_START_PATH, GOOGLE_CONNECT_STATUS_PATH, } from "./connect-http.js";
-export { googleOauthTickets } from "./oauth.js";
-//# sourceMappingURL=index.js.map

package/dist/identity/google/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/identity/google/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,OAAO,EACP,mCAAmC,EACnC,wBAAwB,EACxB,sCAAsC,EACtC,gBAAgB,EAChB,6BAA6B,EAC7B,2BAA2B,EAC3B,yBAAyB,EACzB,sCAAsC,EACtC,4BAA4B,EAC5B,wBAAwB,EACxB,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC"}

package/dist/identity/google/oauth.d.ts

@@ -1,22 +0,0 @@
-/**
- * Google BYO OAuth descriptor — optional non-LangSmith Connect-with-Google.
- * The default path uses Fleet auth-sessions instead.
- */
-import { type ByoOauthConfig, type ByoOauthClient } from "../byo-oauth.js";
-export { MDA_PUBLIC_API_URL_ENV, MDA_PUBLIC_APP_URL_ENV, OAUTH_STATE_SIGNING_KEY_ENV, readOauthStateSigningKey, } from "../byo-oauth.js";
-export type GoogleOauthConfig = ByoOauthConfig;
-/** Google BYO OAuth client (config, authorize, exchange, Fleet adapter). */
-export declare const googleByoOauth: ByoOauthClient;
-export declare const GOOGLE_OAUTH_CLIENT_ID_ENV: string;
-export declare const GOOGLE_OAUTH_CLIENT_SECRET_ENV: string;
-export declare const GOOGLE_OAUTH_SCOPES_ENV: string;
-export declare const GOOGLE_OAUTH_AUTH_URL_ENV: string;
-export declare const GOOGLE_OAUTH_TOKEN_URL_ENV: string;
-export declare const GOOGLE_OAUTH_USERINFO_URL_ENV: string;
-/** Google-bound OAuth state / connect-ticket helpers. */
-export declare const googleOauthTickets: import("../oauth-tickets.js").OauthTickets;
-export declare const resolveGoogleOauthRedirectBase: typeof import("../oauth-env.js").resolveOauthRedirectBase;
-export declare const readGoogleOauthConfig: (env?: NodeJS.ProcessEnv) => ByoOauthConfig | null;
-export declare const buildGoogleAuthorizeUrl: (config: ByoOauthConfig, state: string, redirectUri: string, scopes?: string) => string;
-export declare const exchangeGoogleOauthCode: (config: ByoOauthConfig, code: string, redirectUri: string, fetchImpl?: typeof fetch) => Promise<import("../fleet-connect.js").FleetVaultByoTokenResult>;
-//# sourceMappingURL=oauth.d.ts.map

package/dist/identity/google/oauth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../src/identity/google/oauth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,cAAc,EACpB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAQ/C,4EAA4E;AAC5E,eAAO,MAAM,cAAc,EAAE,cAsB3B,CAAC;AAEH,eAAO,MAAM,0BAA0B,QAA8B,CAAC;AACtE,eAAO,MAAM,8BAA8B,QAAkC,CAAC;AAC9E,eAAO,MAAM,uBAAuB,QAA4B,CAAC;AACjE,eAAO,MAAM,yBAAyB,QAA6B,CAAC;AACpE,eAAO,MAAM,0BAA0B,QAA8B,CAAC;AACtE,eAAO,MAAM,6BAA6B,QAAiC,CAAC;AAE5E,yDAAyD;AACzD,eAAO,MAAM,kBAAkB,4CAAyB,CAAC;AAEzD,eAAO,MAAM,8BAA8B,2DACP,CAAC;AAErC,eAAO,MAAM,qBAAqB,oDAA4B,CAAC;AAC/D,eAAO,MAAM,uBAAuB,yFAAmC,CAAC;AACxE,eAAO,MAAM,uBAAuB,0JAA8B,CAAC"}

package/dist/identity/google/oauth.js

@@ -1,48 +0,0 @@
-/**
- * Google BYO OAuth descriptor — optional non-LangSmith Connect-with-Google.
- * The default path uses Fleet auth-sessions instead.
- */
-import { createByoOauthClient, } from "../byo-oauth.js";
-export { MDA_PUBLIC_API_URL_ENV, MDA_PUBLIC_APP_URL_ENV, OAUTH_STATE_SIGNING_KEY_ENV, readOauthStateSigningKey, } from "../byo-oauth.js";
-const DEFAULT_AUTH_URL = "https://accounts.google.com/o/oauth2/v2/auth";
-const DEFAULT_TOKEN_URL = "https://oauth2.googleapis.com/token";
-const DEFAULT_USERINFO_URL = "https://www.googleapis.com/oauth2/v3/userinfo";
-/** Profile-only default; connector-derived unions replace this at authorize time. */
-const DEFAULT_SCOPES = ["openid", "email", "profile"].join(" ");
-/** Google BYO OAuth client (config, authorize, exchange, Fleet adapter). */
-export const googleByoOauth = createByoOauthClient({
-    providerId: "google",
-    displayName: "Google",
-    envPrefix: "GOOGLE_OAUTH",
-    defaultEndpoints: () => ({
-        authUrl: DEFAULT_AUTH_URL,
-        tokenUrl: DEFAULT_TOKEN_URL,
-        userInfoUrl: DEFAULT_USERINFO_URL,
-        defaultScopes: DEFAULT_SCOPES,
-    }),
-    authorizeParams: { access_type: "offline" },
-    parseUserInfo(json) {
-        return {
-            ...(typeof json.email === "string" && json.email
-                ? { email: json.email }
-                : {}),
-            ...(typeof json.sub === "string" && json.sub
-                ? { subject: json.sub }
-                : {}),
-        };
-    },
-    subjectMetadataKey: "google_sub",
-});
-export const GOOGLE_OAUTH_CLIENT_ID_ENV = googleByoOauth.env.clientId;
-export const GOOGLE_OAUTH_CLIENT_SECRET_ENV = googleByoOauth.env.clientSecret;
-export const GOOGLE_OAUTH_SCOPES_ENV = googleByoOauth.env.scopes;
-export const GOOGLE_OAUTH_AUTH_URL_ENV = googleByoOauth.env.authUrl;
-export const GOOGLE_OAUTH_TOKEN_URL_ENV = googleByoOauth.env.tokenUrl;
-export const GOOGLE_OAUTH_USERINFO_URL_ENV = googleByoOauth.env.userInfoUrl;
-/** Google-bound OAuth state / connect-ticket helpers. */
-export const googleOauthTickets = googleByoOauth.tickets;
-export const resolveGoogleOauthRedirectBase = googleByoOauth.resolveRedirectBase;
-export const readGoogleOauthConfig = googleByoOauth.readConfig;
-export const buildGoogleAuthorizeUrl = googleByoOauth.buildAuthorizeUrl;
-export const exchangeGoogleOauthCode = googleByoOauth.exchangeCode;
-//# sourceMappingURL=oauth.js.map

package/dist/identity/google/oauth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/identity/google/oauth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,oBAAoB,GAGrB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AAIzB,MAAM,gBAAgB,GAAG,8CAA8C,CAAC;AACxE,MAAM,iBAAiB,GAAG,qCAAqC,CAAC;AAChE,MAAM,oBAAoB,GAAG,+CAA+C,CAAC;AAC7E,qFAAqF;AACrF,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEhE,4EAA4E;AAC5E,MAAM,CAAC,MAAM,cAAc,GAAmB,oBAAoB,CAAC;IACjE,UAAU,EAAE,QAAQ;IACpB,WAAW,EAAE,QAAQ;IACrB,SAAS,EAAE,cAAc;IACzB,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;QACvB,OAAO,EAAE,gBAAgB;QACzB,QAAQ,EAAE,iBAAiB;QAC3B,WAAW,EAAE,oBAAoB;QACjC,aAAa,EAAE,cAAc;KAC9B,CAAC;IACF,eAAe,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE;IAC3C,aAAa,CAAC,IAAI;QAChB,OAAO;YACL,GAAG,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK;gBAC9C,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;gBACvB,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG;gBAC1C,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;gBACvB,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IACD,kBAAkB,EAAE,YAAY;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC;AACtE,MAAM,CAAC,MAAM,8BAA8B,GAAG,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC;AAC9E,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC;AACjE,MAAM,CAAC,MAAM,yBAAyB,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC;AACpE,MAAM,CAAC,MAAM,0BAA0B,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC;AACtE,MAAM,CAAC,MAAM,6BAA6B,GAAG,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC;AAE5E,yDAAyD;AACzD,MAAM,CAAC,MAAM,kBAAkB,GAAG,cAAc,CAAC,OAAO,CAAC;AAEzD,MAAM,CAAC,MAAM,8BAA8B,GACzC,cAAc,CAAC,mBAAmB,CAAC;AAErC,MAAM,CAAC,MAAM,qBAAqB,GAAG,cAAc,CAAC,UAAU,CAAC;AAC/D,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAc,CAAC,iBAAiB,CAAC;AACxE,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAc,CAAC,YAAY,CAAC"}

package/dist/identity/linkedin/connect-http.d.ts

@@ -1,37 +0,0 @@
-/**
- * Connect-with-LinkedIn — thin adapter over {@link defineFleetIntegrationConnect}.
- *
- * Mounted under `/identity/linkedin/*` when listed on `identity.connect`, or
- * inferred from declared LinkedIn toolserver connectors on a user-scoped
- * deployment.
- */
-import type { FleetIntegrationConnectProviderOptions } from "../fleet-integration-connect.js";
-export declare const LINKEDIN_CONNECT_STATUS_PATH: string;
-export declare const LINKEDIN_CONNECT_START_PATH: string;
-export declare const LINKEDIN_CONNECT_CALLBACK_PATH: string;
-export declare const LINKEDIN_CONNECT_LINK_PATH: string;
-export declare const isLinkedInActorSubjectEnabled: () => boolean;
-export declare const enableLinkedInActorSubject: () => void;
-/**
- * Enable actor-subject mode when LinkedIn connectors imply per-user vault subjects.
- *
- * Prefer {@link enableActorSubjectIntegrationsFromConnectors} at compile seams.
- */
-export declare const enableLinkedInActorSubjectFromConnectors: (connectorKinds: readonly (string | undefined)[] | undefined, scope?: import("../connect-provider-types.js").IdentityConnectMountContext["scope"]) => void;
-export declare const resetLinkedInActorSubjectEnabledForTests: () => void;
-export declare const isLinkedInConnectConfigured: (env?: NodeJS.ProcessEnv) => boolean;
-export declare const linkedinConnectUrl: (publicAppUrl: string) => string;
-/** Options for {@link createLinkedInIdentityConnectProvider}. */
-export type LinkedInIdentityConnectProviderOptions = FleetIntegrationConnectProviderOptions;
-/** Build a LinkedIn connect provider. */
-export declare const createLinkedInIdentityConnectProvider: (options?: FleetIntegrationConnectProviderOptions) => import("../connect-provider-types.js").IdentityConnectProvider;
-/** Default LinkedIn connect provider used as a built-in mount candidate. */
-export declare const linkedinIdentityConnectProvider: import("../connect-provider-types.js").IdentityConnectProvider;
-/**
- * Opt into Connect-with-LinkedIn on `defineIdentity({ connect: […] })`.
- *
- * Usually unnecessary: declaring `connectors.linkedin` on a user-scoped
- * identity deployment mounts this provider and derives OAuth scopes automatically.
- */
-export declare const connect: (options?: FleetIntegrationConnectProviderOptions) => import("../connect-provider-types.js").IdentityConnectProvider;
-//# sourceMappingURL=connect-http.d.ts.map

package/dist/identity/linkedin/connect-http.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"connect-http.d.ts","sourceRoot":"","sources":["../../../src/identity/linkedin/connect-http.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,sCAAsC,EAAE,MAAM,iCAAiC,CAAC;AAQ9F,eAAO,MAAM,4BAA4B,QAAwB,CAAC;AAClE,eAAO,MAAM,2BAA2B,QAAyB,CAAC;AAClE,eAAO,MAAM,8BAA8B,QAA0B,CAAC;AACtE,eAAO,MAAM,0BAA0B,QAAsB,CAAC;AAE9D,eAAO,MAAM,6BAA6B,eAAiC,CAAC;AAC5E,eAAO,MAAM,0BAA0B,YAA8B,CAAC;AACtE;;;;GAIG;AACH,eAAO,MAAM,wCAAwC,4JACV,CAAC;AAC5C,eAAO,MAAM,wCAAwC,YACV,CAAC;AAC5C,eAAO,MAAM,2BAA2B,sCAA+B,CAAC;AACxE,eAAO,MAAM,kBAAkB,kCAAsB,CAAC;AAEtD,iEAAiE;AACjE,MAAM,MAAM,sCAAsC,GAChD,sCAAsC,CAAC;AAEzC,yCAAyC;AACzC,eAAO,MAAM,qCAAqC,sHAA0B,CAAC;AAE7E,4EAA4E;AAC5E,eAAO,MAAM,+BAA+B,gEAAoB,CAAC;AAEjE;;;;;GAKG;AACH,eAAO,MAAM,OAAO,sHAAmB,CAAC"}

package/dist/identity/linkedin/connect-http.js

@@ -1,41 +0,0 @@
-/**
- * Connect-with-LinkedIn — thin adapter over {@link defineFleetIntegrationConnect}.
- *
- * Mounted under `/identity/linkedin/*` when listed on `identity.connect`, or
- * inferred from declared LinkedIn toolserver connectors on a user-scoped
- * deployment.
- */
-import { LINKEDIN_INTEGRATION } from "../../connectors/toolserver/integrations.js";
-import { defineFleetIntegrationConnect } from "../define-fleet-connect.js";
-import { linkedinByoOauth } from "./oauth.js";
-const linkedin = defineFleetIntegrationConnect({
-    integration: LINKEDIN_INTEGRATION,
-    byoClient: linkedinByoOauth,
-});
-export const LINKEDIN_CONNECT_STATUS_PATH = linkedin.paths.status;
-export const LINKEDIN_CONNECT_START_PATH = linkedin.paths.connect;
-export const LINKEDIN_CONNECT_CALLBACK_PATH = linkedin.paths.callback;
-export const LINKEDIN_CONNECT_LINK_PATH = linkedin.paths.link;
-export const isLinkedInActorSubjectEnabled = linkedin.isActorSubjectEnabled;
-export const enableLinkedInActorSubject = linkedin.enableActorSubject;
-/**
- * Enable actor-subject mode when LinkedIn connectors imply per-user vault subjects.
- *
- * Prefer {@link enableActorSubjectIntegrationsFromConnectors} at compile seams.
- */
-export const enableLinkedInActorSubjectFromConnectors = linkedin.enableActorSubjectFromConnectors;
-export const resetLinkedInActorSubjectEnabledForTests = linkedin.resetActorSubjectEnabledForTests;
-export const isLinkedInConnectConfigured = linkedin.isConnectConfigured;
-export const linkedinConnectUrl = linkedin.connectUrl;
-/** Build a LinkedIn connect provider. */
-export const createLinkedInIdentityConnectProvider = linkedin.createProvider;
-/** Default LinkedIn connect provider used as a built-in mount candidate. */
-export const linkedinIdentityConnectProvider = linkedin.provider;
-/**
- * Opt into Connect-with-LinkedIn on `defineIdentity({ connect: […] })`.
- *
- * Usually unnecessary: declaring `connectors.linkedin` on a user-scoped
- * identity deployment mounts this provider and derives OAuth scopes automatically.
- */
-export const connect = linkedin.connect;
-//# sourceMappingURL=connect-http.js.map

package/dist/identity/linkedin/connect-http.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"connect-http.js","sourceRoot":"","sources":["../../../src/identity/linkedin/connect-http.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AACnF,OAAO,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAE3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,MAAM,QAAQ,GAAG,6BAA6B,CAAC;IAC7C,WAAW,EAAE,oBAAoB;IACjC,SAAS,EAAE,gBAAgB;CAC5B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4BAA4B,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;AAClE,MAAM,CAAC,MAAM,2BAA2B,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;AAClE,MAAM,CAAC,MAAM,8BAA8B,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;AACtE,MAAM,CAAC,MAAM,0BAA0B,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;AAE9D,MAAM,CAAC,MAAM,6BAA6B,GAAG,QAAQ,CAAC,qBAAqB,CAAC;AAC5E,MAAM,CAAC,MAAM,0BAA0B,GAAG,QAAQ,CAAC,kBAAkB,CAAC;AACtE;;;;GAIG;AACH,MAAM,CAAC,MAAM,wCAAwC,GACnD,QAAQ,CAAC,gCAAgC,CAAC;AAC5C,MAAM,CAAC,MAAM,wCAAwC,GACnD,QAAQ,CAAC,gCAAgC,CAAC;AAC5C,MAAM,CAAC,MAAM,2BAA2B,GAAG,QAAQ,CAAC,mBAAmB,CAAC;AACxE,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,CAAC,UAAU,CAAC;AAMtD,yCAAyC;AACzC,MAAM,CAAC,MAAM,qCAAqC,GAAG,QAAQ,CAAC,cAAc,CAAC;AAE7E,4EAA4E;AAC5E,MAAM,CAAC,MAAM,+BAA+B,GAAG,QAAQ,CAAC,QAAQ,CAAC;AAEjE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC"}

package/dist/identity/linkedin/index.d.ts

@@ -1,7 +0,0 @@
-/**
- * LinkedIn identity helpers — Connect-with-LinkedIn (Fleet vault).
- */
-export { connect, createLinkedInIdentityConnectProvider, enableLinkedInActorSubject, enableLinkedInActorSubjectFromConnectors, linkedinConnectUrl, linkedinIdentityConnectProvider, isLinkedInActorSubjectEnabled, isLinkedInConnectConfigured, resetLinkedInActorSubjectEnabledForTests, LINKEDIN_CONNECT_CALLBACK_PATH, LINKEDIN_CONNECT_LINK_PATH, LINKEDIN_CONNECT_START_PATH, LINKEDIN_CONNECT_STATUS_PATH, } from "./connect-http.js";
-export type { LinkedInIdentityConnectProviderOptions } from "./connect-http.js";
-export { linkedinOauthTickets } from "./oauth.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/identity/linkedin/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/identity/linkedin/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,OAAO,EACP,qCAAqC,EACrC,0BAA0B,EAC1B,wCAAwC,EACxC,kBAAkB,EAClB,+BAA+B,EAC/B,6BAA6B,EAC7B,2BAA2B,EAC3B,wCAAwC,EACxC,8BAA8B,EAC9B,0BAA0B,EAC1B,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,sCAAsC,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC"}

package/dist/identity/linkedin/index.js

@@ -1,6 +0,0 @@
-/**
- * LinkedIn identity helpers — Connect-with-LinkedIn (Fleet vault).
- */
-export { connect, createLinkedInIdentityConnectProvider, enableLinkedInActorSubject, enableLinkedInActorSubjectFromConnectors, linkedinConnectUrl, linkedinIdentityConnectProvider, isLinkedInActorSubjectEnabled, isLinkedInConnectConfigured, resetLinkedInActorSubjectEnabledForTests, LINKEDIN_CONNECT_CALLBACK_PATH, LINKEDIN_CONNECT_LINK_PATH, LINKEDIN_CONNECT_START_PATH, LINKEDIN_CONNECT_STATUS_PATH, } from "./connect-http.js";
-export { linkedinOauthTickets } from "./oauth.js";
-//# sourceMappingURL=index.js.map

package/dist/identity/linkedin/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/identity/linkedin/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,OAAO,EACP,qCAAqC,EACrC,0BAA0B,EAC1B,wCAAwC,EACxC,kBAAkB,EAClB,+BAA+B,EAC/B,6BAA6B,EAC7B,2BAA2B,EAC3B,wCAAwC,EACxC,8BAA8B,EAC9B,0BAA0B,EAC1B,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC"}

package/dist/identity/linkedin/oauth.d.ts

@@ -1,22 +0,0 @@
-/**
- * LinkedIn BYO OAuth descriptor — optional non-LangSmith Connect-with-LinkedIn.
- * The default path uses Fleet auth-sessions instead.
- */
-import { type ByoOauthConfig, type ByoOauthClient } from "../byo-oauth.js";
-export { MDA_PUBLIC_API_URL_ENV, MDA_PUBLIC_APP_URL_ENV, OAUTH_STATE_SIGNING_KEY_ENV, readOauthStateSigningKey, } from "../byo-oauth.js";
-export type LinkedInOauthConfig = ByoOauthConfig;
-/** LinkedIn BYO OAuth client (config, authorize, exchange, Fleet adapter). */
-export declare const linkedinByoOauth: ByoOauthClient;
-export declare const LINKEDIN_OAUTH_CLIENT_ID_ENV: string;
-export declare const LINKEDIN_OAUTH_CLIENT_SECRET_ENV: string;
-export declare const LINKEDIN_OAUTH_SCOPES_ENV: string;
-export declare const LINKEDIN_OAUTH_AUTH_URL_ENV: string;
-export declare const LINKEDIN_OAUTH_TOKEN_URL_ENV: string;
-export declare const LINKEDIN_OAUTH_USERINFO_URL_ENV: string;
-/** LinkedIn-bound OAuth state / connect-ticket helpers. */
-export declare const linkedinOauthTickets: import("../oauth-tickets.js").OauthTickets;
-export declare const resolveLinkedInOauthRedirectBase: typeof import("../oauth-env.js").resolveOauthRedirectBase;
-export declare const readLinkedInOauthConfig: (env?: NodeJS.ProcessEnv) => ByoOauthConfig | null;
-export declare const buildLinkedInAuthorizeUrl: (config: ByoOauthConfig, state: string, redirectUri: string, scopes?: string) => string;
-export declare const exchangeLinkedInOauthCode: (config: ByoOauthConfig, code: string, redirectUri: string, fetchImpl?: typeof fetch) => Promise<import("../fleet-connect.js").FleetVaultByoTokenResult>;
-//# sourceMappingURL=oauth.d.ts.map

package/dist/identity/linkedin/oauth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../src/identity/linkedin/oauth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,cAAc,EACpB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,MAAM,mBAAmB,GAAG,cAAc,CAAC;AAUjD,8EAA8E;AAC9E,eAAO,MAAM,gBAAgB,EAAE,cAqB7B,CAAC;AAEH,eAAO,MAAM,4BAA4B,QAAgC,CAAC;AAC1E,eAAO,MAAM,gCAAgC,QACV,CAAC;AACpC,eAAO,MAAM,yBAAyB,QAA8B,CAAC;AACrE,eAAO,MAAM,2BAA2B,QAA+B,CAAC;AACxE,eAAO,MAAM,4BAA4B,QAAgC,CAAC;AAC1E,eAAO,MAAM,+BAA+B,QAAmC,CAAC;AAEhF,2DAA2D;AAC3D,eAAO,MAAM,oBAAoB,4CAA2B,CAAC;AAE7D,eAAO,MAAM,gCAAgC,2DACP,CAAC;AAEvC,eAAO,MAAM,uBAAuB,oDAA8B,CAAC;AACnE,eAAO,MAAM,yBAAyB,yFAAqC,CAAC;AAC5E,eAAO,MAAM,yBAAyB,0JAAgC,CAAC"}

package/dist/identity/linkedin/oauth.js

@@ -1,47 +0,0 @@
-/**
- * LinkedIn BYO OAuth descriptor — optional non-LangSmith Connect-with-LinkedIn.
- * The default path uses Fleet auth-sessions instead.
- */
-import { createByoOauthClient, } from "../byo-oauth.js";
-export { MDA_PUBLIC_API_URL_ENV, MDA_PUBLIC_APP_URL_ENV, OAUTH_STATE_SIGNING_KEY_ENV, readOauthStateSigningKey, } from "../byo-oauth.js";
-const DEFAULT_AUTH_URL = "https://www.linkedin.com/oauth/v2/authorization";
-const DEFAULT_TOKEN_URL = "https://www.linkedin.com/oauth/v2/accessToken";
-const DEFAULT_USERINFO_URL = "https://api.linkedin.com/v2/userinfo";
-/** Profile + Share on LinkedIn; connector-derived unions replace this at authorize time. */
-const DEFAULT_SCOPES = ["openid", "profile", "email", "w_member_social"].join(" ");
-/** LinkedIn BYO OAuth client (config, authorize, exchange, Fleet adapter). */
-export const linkedinByoOauth = createByoOauthClient({
-    providerId: "linkedin",
-    displayName: "LinkedIn",
-    envPrefix: "LINKEDIN_OAUTH",
-    defaultEndpoints: () => ({
-        authUrl: DEFAULT_AUTH_URL,
-        tokenUrl: DEFAULT_TOKEN_URL,
-        userInfoUrl: DEFAULT_USERINFO_URL,
-        defaultScopes: DEFAULT_SCOPES,
-    }),
-    parseUserInfo(json) {
-        return {
-            ...(typeof json.email === "string" && json.email
-                ? { email: json.email }
-                : {}),
-            ...(typeof json.sub === "string" && json.sub
-                ? { subject: json.sub }
-                : {}),
-        };
-    },
-    subjectMetadataKey: "linkedin_sub",
-});
-export const LINKEDIN_OAUTH_CLIENT_ID_ENV = linkedinByoOauth.env.clientId;
-export const LINKEDIN_OAUTH_CLIENT_SECRET_ENV = linkedinByoOauth.env.clientSecret;
-export const LINKEDIN_OAUTH_SCOPES_ENV = linkedinByoOauth.env.scopes;
-export const LINKEDIN_OAUTH_AUTH_URL_ENV = linkedinByoOauth.env.authUrl;
-export const LINKEDIN_OAUTH_TOKEN_URL_ENV = linkedinByoOauth.env.tokenUrl;
-export const LINKEDIN_OAUTH_USERINFO_URL_ENV = linkedinByoOauth.env.userInfoUrl;
-/** LinkedIn-bound OAuth state / connect-ticket helpers. */
-export const linkedinOauthTickets = linkedinByoOauth.tickets;
-export const resolveLinkedInOauthRedirectBase = linkedinByoOauth.resolveRedirectBase;
-export const readLinkedInOauthConfig = linkedinByoOauth.readConfig;
-export const buildLinkedInAuthorizeUrl = linkedinByoOauth.buildAuthorizeUrl;
-export const exchangeLinkedInOauthCode = linkedinByoOauth.exchangeCode;
-//# sourceMappingURL=oauth.js.map

package/dist/identity/linkedin/oauth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/identity/linkedin/oauth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,oBAAoB,GAGrB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AAIzB,MAAM,gBAAgB,GAAG,iDAAiD,CAAC;AAC3E,MAAM,iBAAiB,GAAG,+CAA+C,CAAC;AAC1E,MAAM,oBAAoB,GAAG,sCAAsC,CAAC;AACpE,4FAA4F;AAC5F,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC,IAAI,CAC3E,GAAG,CACJ,CAAC;AAEF,8EAA8E;AAC9E,MAAM,CAAC,MAAM,gBAAgB,GAAmB,oBAAoB,CAAC;IACnE,UAAU,EAAE,UAAU;IACtB,WAAW,EAAE,UAAU;IACvB,SAAS,EAAE,gBAAgB;IAC3B,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;QACvB,OAAO,EAAE,gBAAgB;QACzB,QAAQ,EAAE,iBAAiB;QAC3B,WAAW,EAAE,oBAAoB;QACjC,aAAa,EAAE,cAAc;KAC9B,CAAC;IACF,aAAa,CAAC,IAAI;QAChB,OAAO;YACL,GAAG,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK;gBAC9C,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;gBACvB,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG;gBAC1C,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;gBACvB,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IACD,kBAAkB,EAAE,cAAc;CACnC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4BAA4B,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC;AAC1E,MAAM,CAAC,MAAM,gCAAgC,GAC3C,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC;AACpC,MAAM,CAAC,MAAM,yBAAyB,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC;AACrE,MAAM,CAAC,MAAM,2BAA2B,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC;AACxE,MAAM,CAAC,MAAM,4BAA4B,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC;AAC1E,MAAM,CAAC,MAAM,+BAA+B,GAAG,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC;AAEhF,2DAA2D;AAC3D,MAAM,CAAC,MAAM,oBAAoB,GAAG,gBAAgB,CAAC,OAAO,CAAC;AAE7D,MAAM,CAAC,MAAM,gCAAgC,GAC3C,gBAAgB,CAAC,mBAAmB,CAAC;AAEvC,MAAM,CAAC,MAAM,uBAAuB,GAAG,gBAAgB,CAAC,UAAU,CAAC;AACnE,MAAM,CAAC,MAAM,yBAAyB,GAAG,gBAAgB,CAAC,iBAAiB,CAAC;AAC5E,MAAM,CAAC,MAAM,yBAAyB,GAAG,gBAAgB,CAAC,YAAY,CAAC"}

package/dist/identity/marketplace/connect-hint.d.ts

@@ -1,31 +0,0 @@
-/**
- * Connect-hint middleware for Fleet marketplace MCP bridges.
- *
- * Same proactive "not connected yet" system hint as toolserver Fleet OAuth
- * integrations ({@link createFleetConnectHintMiddleware}), but the vault
- * `provider_id` is discovered from the workspace `mcp_servers` row.
- */
-import type { MarketplaceMcpIntegration } from "../../connectors/marketplace/catalog.js";
-import { resolveMarketplaceMcpServer } from "../../connectors/marketplace/fleet-mcp.js";
-import type { FleetOAuthIntegration } from "../../connectors/toolserver/integrations.js";
-import type { ManagedMiddleware } from "../../runtime/managed-middleware.js";
-import { type FleetConnectHintMiddlewareOptions } from "../fleet-connect-hint.js";
-import { listAgentConnections, type FleetClientOptions } from "../fleet.js";
-/** Adapt a marketplace catalog row to the Fleet Connect / hint integration shape. */
-export declare function marketplaceAsFleetHint(integration: MarketplaceMcpIntegration, providerId?: string): FleetOAuthIntegration;
-export type MarketplaceConnectHintMiddlewareOptions = Omit<FleetConnectHintMiddlewareOptions, "integration" | "providerSlug"> & {
-    fleet?: FleetClientOptions & {
-        list?: typeof listAgentConnections;
-        resolveServer?: typeof resolveMarketplaceMcpServer;
-    };
-};
-/**
- * Absolute Connect start URL for a marketplace bridge (with optional ticket).
- */
-export declare function marketplaceConnectHintUrl(integration: MarketplaceMcpIntegration, env?: NodeJS.ProcessEnv, userId?: string): Promise<string>;
-/**
- * Middleware that injects a system hint when the caller has no vault connection
- * for this marketplace MCP integration.
- */
-export declare function createMarketplaceConnectHintMiddleware(integration: MarketplaceMcpIntegration, options?: MarketplaceConnectHintMiddlewareOptions): ManagedMiddleware;
-//# sourceMappingURL=connect-hint.d.ts.map

package/dist/identity/marketplace/connect-hint.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"connect-hint.d.ts","sourceRoot":"","sources":["../../../src/identity/marketplace/connect-hint.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AACzF,OAAO,EAAE,2BAA2B,EAAE,MAAM,2CAA2C,CAAC;AACxF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AACzF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAE7E,OAAO,EAGL,KAAK,iCAAiC,EACvC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAAE,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE5E,qFAAqF;AACrF,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,yBAAyB,EACtC,UAAU,SAAK,GACd,qBAAqB,CAYvB;AAED,MAAM,MAAM,uCAAuC,GAAG,IAAI,CACxD,iCAAiC,EACjC,aAAa,GAAG,cAAc,CAC/B,GAAG;IACF,KAAK,CAAC,EAAE,kBAAkB,GAAG;QAC3B,IAAI,CAAC,EAAE,OAAO,oBAAoB,CAAC;QACnC,aAAa,CAAC,EAAE,OAAO,2BAA2B,CAAC;KACpD,CAAC;CACH,CAAC;AAEF;;GAEG;AACH,wBAAsB,yBAAyB,CAC7C,WAAW,EAAE,yBAAyB,EACtC,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED;;;GAGG;AACH,wBAAgB,sCAAsC,CACpD,WAAW,EAAE,yBAAyB,EACtC,OAAO,GAAE,uCAA4C,GACpD,iBAAiB,CAwBnB"}