narai-primitives 2.0.0-rc.1

package/dist/config/secrets.js

@@ -0,0 +1,43 @@
+/**
+ * Secret-reference syntax validation.
+ *
+ * V1 only validates syntax — it does not eagerly resolve secrets. Strings
+ * starting with `env:NAME` pass through unchanged so each connector can
+ * resolve them lazily via its own credential-providers chain at the moment
+ * of use. The wrong form `env.NAME` (with a dot) is rejected with a clear
+ * error so it doesn't silently flow through as a literal.
+ */
+const REJECTED_DOT_PREFIX = "env.";
+/**
+ * Throws if the string uses the wrong form. Other content (including
+ * `env:NAME`, `keychain:NAME`, plain literals) is accepted unchanged.
+ */
+export function assertValidSecretSyntax(value, location) {
+    if (value.startsWith(REJECTED_DOT_PREFIX)) {
+        const loc = location !== undefined ? ` at ${location}` : "";
+        throw new Error(`Invalid secret reference '${value}'${loc}. Use 'env:NAME' (with a colon), not 'env.NAME' (with a dot).`);
+    }
+}
+/**
+ * Recursively validates every string in a value tree. Throws on the first
+ * malformed reference, with a dotted path indicating where the bad value lives.
+ */
+export function validateSecretsInTree(node, path = "") {
+    if (typeof node === "string") {
+        assertValidSecretSyntax(node, path === "" ? undefined : path);
+        return;
+    }
+    if (Array.isArray(node)) {
+        for (let i = 0; i < node.length; i++) {
+            validateSecretsInTree(node[i], `${path}[${i}]`);
+        }
+        return;
+    }
+    if (node !== null && typeof node === "object") {
+        for (const [k, v] of Object.entries(node)) {
+            const next = path === "" ? k : `${path}.${k}`;
+            validateSecretsInTree(v, next);
+        }
+    }
+}
+//# sourceMappingURL=secrets.js.map

package/dist/config/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../src/config/secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEnC;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAa,EAAE,QAAiB;IACtE,IAAI,KAAK,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACb,6BAA6B,KAAK,IAAI,GAAG,+DAA+D,CACzG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAa,EAAE,IAAI,GAAG,EAAE;IAC5D,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,uBAAuB,CAAC,IAAI,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9D,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC;YAC9C,qBAAqB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/config/types.d.ts

@@ -0,0 +1,104 @@
+/**
+ * Universal types shared by the hub, every connector, and any consumer
+ * that reads ~/.connectors/config.yaml.
+ *
+ * Only fields universal to every connector are declared with strict types.
+ * Anything connector-specific (db's `servers:`, jira's `atlassian-api-key`,
+ * etc.) flows through as opaque entries on `ResolvedConnector.options` and
+ * is validated by the connector itself when it consumes its slice.
+ */
+/** The five canonical policy actions every connector understands. */
+export type PolicyAction = "read" | "write" | "delete" | "admin" | "privilege";
+/** The base policy decisions. db-agent extends this with `present`. */
+export type PolicyDecision = "allow" | "escalate" | "deny" | "present";
+/**
+ * A policy block. Universal actions (read/write/...) take a PolicyDecision;
+ * connector-specific extras (e.g. `unbounded_select` for db-agent) may take
+ * any string value. The library does not interpret extras — the connector
+ * does.
+ */
+export interface PolicyMap {
+    read?: PolicyDecision;
+    write?: PolicyDecision;
+    delete?: PolicyDecision;
+    admin?: PolicyDecision;
+    privilege?: PolicyDecision;
+    /** Connector-specific extras (e.g. `unbounded_select`). */
+    [extra: string]: PolicyDecision | string | undefined;
+}
+/**
+ * The raw input shape — what `js-yaml` returns from a ~/.connectors/config.yaml
+ * file. Loose by design: the actual interpretation happens in resolve.ts.
+ */
+export type RawConfigInput = Record<string, unknown>;
+/** Options consumed by the public API. */
+export interface LoadOptions {
+    /** Apply `consumers.<name>` overrides on top of base + environment. */
+    consumer?: string;
+    /** Pick a specific environment. Falls back to `environments.default`. */
+    environment?: string;
+    /** CWD for resolving `./.connectors/config.yaml`. Defaults to `process.cwd()`. */
+    cwd?: string;
+}
+/** Same as LoadOptions but without `cwd`, used by the in-memory resolver. */
+export interface ResolveOptions {
+    consumer?: string;
+    environment?: string;
+}
+/**
+ * The fully-resolved view of one connector's effective config for a given
+ * (consumer, environment) pair.
+ */
+export interface ResolvedConnector {
+    /** Connector name, matching its key under `connectors:` in the config. */
+    name: string;
+    /**
+     * Whether this connector is active for the current call. False if the
+     * consumer's `enabled:` allowlist excludes it, or if any merge level set
+     * `disable: true`.
+     */
+    enabled: boolean;
+    /**
+     * `skill:` value, unresolved. Three syntaxes:
+     *   - bare word (`jira-agent-connector`) → built-in connector skill.
+     *   - starts with `~` (`~/.claude/skills/foo`) → user-level skill at that path.
+     *   - other (`./path/to/skill`, `path/to/skill`) → repo-level skill resolved
+     *     against the consumer's CWD.
+     * Path-to-disk and SKILL.md content resolution lives in
+     * `@narai/connector-toolkit`, not here.
+     */
+    skill: string;
+    /** Per-connector model override; null means inherit. */
+    model: string | null;
+    /** Whether this connector's guardrail rules participate in the unified hook. */
+    enforce_hooks: boolean;
+    /** Effective policy after base+env+consumer merge. */
+    policy: PolicyMap;
+    /**
+     * All connector-specific extras (`audit`, `servers`, `atlassian-api-key`,
+     * etc.). Secrets like `env:NAME` are passed through unresolved so each
+     * connector can resolve them lazily at use time.
+     */
+    options: Record<string, unknown>;
+}
+/** The fully-resolved view of the whole config for a given call. */
+export interface ResolvedConfig {
+    /** Hub-specific settings. Read by `@narai/connector-hub`. */
+    hub: {
+        model: string | null;
+        max_tokens: number | null;
+    };
+    /** Top-level policy defaults (apply unless a connector overrides). */
+    policy: PolicyMap;
+    /** Top-level enforce_hooks default. */
+    enforce_hooks: boolean;
+    /** Top-level model default; null means inherit from the active session. */
+    model: string | null;
+    /** Resolved environment name, or null if none was selected. */
+    environment: string | null;
+    /** Resolved consumer name, or null if none was provided. */
+    consumer: string | null;
+    /** Per-connector resolved views. */
+    connectors: Record<string, ResolvedConnector>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/config/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/config/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,qEAAqE;AACrE,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,WAAW,CAAC;AAE/E,uEAAuE;AACvE,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;AAEvE;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,2DAA2D;IAC3D,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,GAAG,MAAM,GAAG,SAAS,CAAC;CACtD;AAED;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAErD,0CAA0C;AAC1C,MAAM,WAAW,WAAW;IAC1B,uEAAuE;IACvE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kFAAkF;IAClF,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,6EAA6E;AAC7E,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;;;;;;;OAQG;IACH,KAAK,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,gFAAgF;IAChF,aAAa,EAAE,OAAO,CAAC;IACvB,sDAAsD;IACtD,MAAM,EAAE,SAAS,CAAC;IAClB;;;;OAIG;IACH,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,oEAAoE;AACpE,MAAM,WAAW,cAAc;IAC7B,6DAA6D;IAC7D,GAAG,EAAE;QACH,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,CAAC;IACF,sEAAsE;IACtE,MAAM,EAAE,SAAS,CAAC;IAClB,uCAAuC;IACvC,aAAa,EAAE,OAAO,CAAC;IACvB,2EAA2E;IAC3E,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,+DAA+D;IAC/D,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,oCAAoC;IACpC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;CAC/C"}

package/dist/config/types.js

@@ -0,0 +1,11 @@
+/**
+ * Universal types shared by the hub, every connector, and any consumer
+ * that reads ~/.connectors/config.yaml.
+ *
+ * Only fields universal to every connector are declared with strict types.
+ * Anything connector-specific (db's `servers:`, jira's `atlassian-api-key`,
+ * etc.) flows through as opaque entries on `ResolvedConnector.options` and
+ * is validated by the connector itself when it consumes its slice.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/config/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/config/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/dist/connectors/aws/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/connectors/aws/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../../src/connectors/aws/cli.ts"],"names":[],"mappings":""}

package/dist/connectors/aws/cli.js

@@ -0,0 +1,27 @@
+#!/usr/bin/env node
+/**
+ * Thin bin entry. Library code lives in index.ts.
+ *
+ * Reads `~/.connectors/config.yaml` (or `NARAI_CONFIG_BLOB`, when injected
+ * by `@narai/connector-hub`) before `main()` runs and applies any configured
+ * AWS credentials/region to `process.env` so the SDK picks them up via the
+ * default credential chain. Existing exports of `AWS_ACCESS_KEY_ID` etc.
+ * win — the bootstrap only fills in undefined entries.
+ */
+import { loadConnectorEnvironment } from "narai-primitives/config";
+import connector from "./index.js";
+const AWS_ENV_MAPPING = {
+    access_key_id: "AWS_ACCESS_KEY_ID",
+    secret_access_key: "AWS_SECRET_ACCESS_KEY",
+    session_token: "AWS_SESSION_TOKEN",
+    region: "AWS_DEFAULT_REGION",
+    profile: "AWS_PROFILE",
+};
+async function run() {
+    await loadConnectorEnvironment("aws", { envMapping: AWS_ENV_MAPPING });
+    return connector.main(process.argv.slice(2));
+}
+void run().then((code) => {
+    process.exit(code);
+});
+//# sourceMappingURL=cli.js.map

package/dist/connectors/aws/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../../src/connectors/aws/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;GAQG;AACH,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,SAAS,MAAM,YAAY,CAAC;AAEnC,MAAM,eAAe,GAA2B;IAC9C,aAAa,EAAE,mBAAmB;IAClC,iBAAiB,EAAE,uBAAuB;IAC1C,aAAa,EAAE,mBAAmB;IAClC,MAAM,EAAE,oBAAoB;IAC5B,OAAO,EAAE,aAAa;CACvB,CAAC;AAEF,KAAK,UAAU,GAAG;IAChB,MAAM,wBAAwB,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC;IACvE,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;IACvB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC,CAAC,CAAC"}

package/dist/connectors/aws/index.d.ts

@@ -0,0 +1,27 @@
+/**
+ * @narai/aws-agent-connector — read-only AWS SDK v3 connector.
+ *
+ * Built on @narai/connector-toolkit. The default export is a ready-to-use
+ * `Connector`; `buildAwsConnector(overrides?)` is exposed for tests that
+ * want to inject fake SDK factories.
+ *
+ * Optional dependencies: each `@aws-sdk/client-*` is loaded lazily via
+ * dynamic import when the connector's `sdk` hook runs. Missing SDK
+ * packages surface as `CONFIG_ERROR` envelopes (never crashes).
+ */
+import { type Connector } from "narai-primitives/toolkit";
+import { AwsClient, type AwsSdkFactories } from "./lib/aws_client.js";
+export declare function loadRealFactories(): Promise<AwsSdkFactories | null>;
+export interface BuildOptions {
+    sdk?: () => Promise<AwsClient>;
+    credentials?: () => Promise<Record<string, unknown>>;
+    /** Override the default region. Individual actions can still override per-call. */
+    defaultRegion?: string;
+}
+export declare function buildAwsConnector(overrides?: BuildOptions): Connector;
+declare const connector: Connector;
+export default connector;
+export declare const main: (argv: readonly string[]) => Promise<number>, fetch: (action: string, params: unknown) => Promise<import("narai-primitives/toolkit").Envelope>, validActions: ReadonlySet<string>;
+export { AwsClient, loadAwsCredentialsOverride, type AwsCommand, type AwsClientOptions, type AwsSdkFactories, type AwsResult, type AwsErrorPayload, type AwsSuccessPayload, type AwsDBInstance, type AwsDynamoTable, type AwsBucket, type AwsLambdaFunction, type AwsDatapoint, } from "./lib/aws_client.js";
+export { AwsSdkError } from "./lib/aws_error.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/connectors/aws/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/connectors/aws/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAmB,KAAK,SAAS,EAAkB,MAAM,0BAA0B,CAAC;AAE3F,OAAO,EACL,SAAS,EAET,KAAK,eAAe,EACrB,MAAM,qBAAqB,CAAC;AAmF7B,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAkDzE;AAMD,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACrD,mFAAmF;IACnF,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,iBAAiB,CAAC,SAAS,GAAE,YAAiB,GAAG,SAAS,CAkKzE;AAGD,QAAA,MAAM,SAAS,WAAsB,CAAC;AACtC,eAAe,SAAS,CAAC;AACzB,eAAO,MAAQ,IAAI,gDAAE,KAAK,6FAAE,YAAY,qBAAc,CAAC;AAGvD,OAAO,EACL,SAAS,EACT,0BAA0B,EAC1B,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,SAAS,EACd,KAAK,iBAAiB,EACtB,KAAK,YAAY,GAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/connectors/aws/index.js

@@ -0,0 +1,281 @@
+/**
+ * @narai/aws-agent-connector — read-only AWS SDK v3 connector.
+ *
+ * Built on @narai/connector-toolkit. The default export is a ready-to-use
+ * `Connector`; `buildAwsConnector(overrides?)` is exposed for tests that
+ * want to inject fake SDK factories.
+ *
+ * Optional dependencies: each `@aws-sdk/client-*` is loaded lazily via
+ * dynamic import when the connector's `sdk` hook runs. Missing SDK
+ * packages surface as `CONFIG_ERROR` envelopes (never crashes).
+ */
+import { createConnector } from "narai-primitives/toolkit";
+import { z } from "zod";
+import { AwsClient, } from "./lib/aws_client.js";
+import { AwsSdkError } from "./lib/aws_error.js";
+// ───────────────────────────────────────────────────────────────────────────
+// Param schemas
+// ───────────────────────────────────────────────────────────────────────────
+const MAX_METRIC_HOURS = 168;
+const regionField = z
+    .string()
+    .regex(/^[a-z]{2}-[a-z]+-\d+$/, "Invalid region — expected format like us-east-1");
+const listFunctionsParams = z.object({
+    region: regionField,
+    prefix: z.string().default(""),
+});
+const describeDbParams = z.object({
+    region: regionField,
+    db_identifier: z
+        .string()
+        .regex(/^[a-zA-Z][a-zA-Z0-9-]{0,62}$/, "Invalid db_identifier — must start with letter, alphanumeric and hyphens only"),
+});
+const listBucketsParams = z.object({
+    prefix: z.string().default(""),
+    region: z.string().default("us-east-1"),
+});
+const getMetricsParams = z.object({
+    region: regionField,
+    namespace: z.string().min(1, "get_metrics requires a non-empty 'namespace'"),
+    metric_name: z.string().min(1, "get_metrics requires a non-empty 'metric_name'"),
+    dimensions: z
+        .record(z.union([z.string(), z.number(), z.boolean()]))
+        .transform((d) => {
+        const out = {};
+        for (const [k, v] of Object.entries(d))
+            out[k] = String(v);
+        return out;
+    })
+        .default({}),
+    hours: z.coerce.number().int().positive().max(MAX_METRIC_HOURS).default(24),
+});
+// ───────────────────────────────────────────────────────────────────────────
+// Error-code translation
+// ───────────────────────────────────────────────────────────────────────────
+const CODE_MAP = {
+    METHOD_NOT_ALLOWED: "VALIDATION_ERROR",
+    SDK_UNAVAILABLE: "CONFIG_ERROR",
+    AUTH_ERROR: "AUTH_ERROR",
+    NOT_FOUND: "NOT_FOUND",
+    RATE_LIMITED: "RATE_LIMITED",
+    TIMEOUT: "TIMEOUT",
+    SDK_ERROR: "CONNECTION_ERROR",
+    CONFIG_ERROR: "CONFIG_ERROR",
+};
+function throwIfError(result) {
+    if (!result.ok) {
+        throw new AwsSdkError(result.code, result.message, result.retriable);
+    }
+}
+// ───────────────────────────────────────────────────────────────────────────
+// SDK factory loader — dynamic imports of optional `@aws-sdk/client-*` packages.
+// ───────────────────────────────────────────────────────────────────────────
+async function tryImport(name) {
+    try {
+        return (await import(name));
+    }
+    catch {
+        return null;
+    }
+}
+export async function loadRealFactories() {
+    const factories = {};
+    const register = (key, mod, exportName) => {
+        const exported = mod?.[exportName];
+        if (typeof exported !== "function" || !mod)
+            return;
+        const Ctor = exported;
+        // The real AWS SDK v3 client.send() expects a Command instance built by
+        // the SDK module (it must carry resolveMiddleware()), not a plain object.
+        // Translate the internal {__name__, ...input} shape used by aws_client
+        // into a real Command at the boundary so production calls dispatch.
+        factories[key] = (config) => {
+            const client = new Ctor(config);
+            return {
+                send: async (cmd) => {
+                    // aws_client.send() passes {__name__, ...input}; init() may pass a
+                    // pre-built Command instance from the SDK module. Branch on the
+                    // marker to decide whether to construct or pass through.
+                    const wrapped = cmd;
+                    const commandName = wrapped?.__name__;
+                    if (typeof commandName !== "string") {
+                        return client.send(cmd);
+                    }
+                    const CommandCtor = mod[commandName];
+                    if (typeof CommandCtor !== "function") {
+                        throw new Error(`AWS SDK send: ${commandName} not exported by SDK module`);
+                    }
+                    const { __name__, ...input } = wrapped;
+                    const Command = CommandCtor;
+                    return client.send(new Command(input));
+                },
+            };
+        };
+    };
+    register("rds", await tryImport("@aws-sdk/client-rds"), "RDSClient");
+    register("dynamodb", await tryImport("@aws-sdk/client-dynamodb"), "DynamoDBClient");
+    register("s3", await tryImport("@aws-sdk/client-s3"), "S3Client");
+    register("cloudwatch", await tryImport("@aws-sdk/client-cloudwatch"), "CloudWatchClient");
+    register("lambda", await tryImport("@aws-sdk/client-lambda"), "LambdaClient");
+    register("sts", await tryImport("@aws-sdk/client-sts"), "STSClient");
+    return Object.keys(factories).length > 0 ? factories : null;
+}
+export function buildAwsConnector(overrides = {}) {
+    const defaultCredentials = async () => {
+        // AWS uses the default credential chain via the SDK; no explicit secret
+        // load. Return an empty object so the factory's `credentials` step is
+        // satisfied.
+        return {};
+    };
+    const defaultSdk = async () => {
+        const factories = await loadRealFactories();
+        if (!factories) {
+            throw new AwsSdkError("SDK_UNAVAILABLE", "AWS SDK clients not available. Install @aws-sdk/client-rds, " +
+                "@aws-sdk/client-dynamodb, @aws-sdk/client-s3, @aws-sdk/client-cloudwatch, " +
+                "@aws-sdk/client-lambda (as needed) and configure credentials via the " +
+                "default AWS credential chain.", false);
+        }
+        const client = new AwsClient({
+            region: overrides.defaultRegion ?? "us-east-1",
+            factories,
+        });
+        await client.init();
+        return client;
+    };
+    return createConnector({
+        name: "aws",
+        version: "3.0.0",
+        scope: (ctx) => ctx.sdk.accountId ? `${ctx.sdk.accountId}/${ctx.sdk.region}` : null,
+        credentials: overrides.credentials ?? defaultCredentials,
+        sdk: overrides.sdk ?? defaultSdk,
+        actions: {
+            list_functions: {
+                description: "List Lambda functions in a region",
+                params: listFunctionsParams,
+                classify: { kind: "read" },
+                handler: async (p, ctx) => {
+                    const result = await ctx.sdk.listLambdaFunctions();
+                    throwIfError(result);
+                    const fns = result.data.Functions ?? [];
+                    const filtered = p.prefix
+                        ? fns.filter((f) => (f.FunctionName ?? "").startsWith(p.prefix))
+                        : fns;
+                    return {
+                        region: p.region,
+                        functions: filtered.map((f) => ({
+                            name: f.FunctionName ?? "",
+                            runtime: f.Runtime ?? "",
+                            last_modified: f.LastModified ?? null,
+                        })),
+                        function_count: filtered.length,
+                    };
+                },
+            },
+            describe_db: {
+                description: "Describe an RDS DB instance by identifier",
+                params: describeDbParams,
+                classify: { kind: "read" },
+                handler: async (p, ctx) => {
+                    const result = await ctx.sdk.describeDBInstances({
+                        DBInstanceIdentifier: p.db_identifier,
+                    });
+                    throwIfError(result);
+                    const inst = (result.data.DBInstances ?? [])[0];
+                    if (!inst) {
+                        throw new AwsSdkError("NOT_FOUND", `No instance found for identifier '${p.db_identifier}'`, false);
+                    }
+                    return {
+                        region: p.region,
+                        db_identifier: inst.DBInstanceIdentifier ?? p.db_identifier,
+                        engine: inst.Engine ?? "",
+                        engine_version: inst.EngineVersion ?? "",
+                        instance_class: inst.DBInstanceClass ?? "",
+                        status: inst.DBInstanceStatus ?? "",
+                        endpoint: inst.Endpoint?.Address ?? "",
+                        storage_gb: inst.AllocatedStorage ?? 0,
+                    };
+                },
+            },
+            list_buckets: {
+                description: "List S3 buckets (optionally filtered by prefix)",
+                params: listBucketsParams,
+                classify: { kind: "read" },
+                handler: async (p, ctx) => {
+                    const result = await ctx.sdk.listBuckets();
+                    throwIfError(result);
+                    const buckets = result.data.Buckets ?? [];
+                    const filtered = p.prefix
+                        ? buckets.filter((b) => (b.Name ?? "").startsWith(p.prefix))
+                        : buckets;
+                    return {
+                        buckets: filtered.map((b) => ({
+                            name: b.Name ?? "",
+                            created_at: b.CreationDate
+                                ? b.CreationDate instanceof Date
+                                    ? b.CreationDate.toISOString()
+                                    : String(b.CreationDate)
+                                : null,
+                        })),
+                        bucket_count: filtered.length,
+                    };
+                },
+            },
+            get_metrics: {
+                description: "Get CloudWatch metric statistics for the last N hours",
+                params: getMetricsParams,
+                classify: { kind: "read" },
+                handler: async (p, ctx) => {
+                    const endTime = new Date();
+                    const startTime = new Date(endTime.getTime() - p.hours * 3600_000);
+                    const result = await ctx.sdk.getMetricStatistics({
+                        Namespace: p.namespace,
+                        MetricName: p.metric_name,
+                        Dimensions: Object.entries(p.dimensions).map(([Name, Value]) => ({
+                            Name,
+                            Value,
+                        })),
+                        StartTime: startTime,
+                        EndTime: endTime,
+                        Period: 300,
+                        Statistics: ["Average", "Sum", "Maximum"],
+                    });
+                    throwIfError(result);
+                    const dps = result.data.Datapoints ?? [];
+                    return {
+                        region: p.region,
+                        namespace: p.namespace,
+                        metric_name: p.metric_name,
+                        dimensions: p.dimensions,
+                        hours: p.hours,
+                        datapoints: dps.map((d) => ({
+                            timestamp: d.Timestamp instanceof Date
+                                ? d.Timestamp.toISOString()
+                                : d.Timestamp ?? null,
+                            sum: d.Sum ?? null,
+                            average: d.Average ?? null,
+                            maximum: d.Maximum ?? null,
+                        })),
+                    };
+                },
+            },
+        },
+        mapError: (err) => {
+            if (err instanceof AwsSdkError) {
+                return {
+                    error_code: CODE_MAP[err.code] ?? "CONNECTION_ERROR",
+                    message: err.message,
+                    retriable: err.retriable,
+                };
+            }
+            return undefined;
+        },
+    });
+}
+// Default production connector.
+const connector = buildAwsConnector();
+export default connector;
+export const { main, fetch, validActions } = connector;
+// Re-exports for advanced consumers.
+export { AwsClient, loadAwsCredentialsOverride, } from "./lib/aws_client.js";
+export { AwsSdkError } from "./lib/aws_error.js";
+//# sourceMappingURL=index.js.map

package/dist/connectors/aws/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/connectors/aws/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,eAAe,EAAkC,MAAM,0BAA0B,CAAC;AAC3F,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,SAAS,GAGV,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,MAAM,WAAW,GAAG,CAAC;KAClB,MAAM,EAAE;KACR,KAAK,CAAC,uBAAuB,EAAE,iDAAiD,CAAC,CAAC;AAErF,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CAC/B,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,MAAM,EAAE,WAAW;IACnB,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,KAAK,CACJ,8BAA8B,EAC9B,+EAA+E,CAChF;CACJ,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;CACxC,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,MAAM,EAAE,WAAW;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,8CAA8C,CAAC;IAC5E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,gDAAgD,CAAC;IAChF,UAAU,EAAE,CAAC;SACV,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;SACtD,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE;QACf,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3D,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;SACD,OAAO,CAAC,EAAE,CAAC;IACd,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC5E,CAAC,CAAC;AAEH,8EAA8E;AAC9E,yBAAyB;AACzB,8EAA8E;AAE9E,MAAM,QAAQ,GAA8B;IAC1C,kBAAkB,EAAE,kBAAkB;IACtC,eAAe,EAAE,cAAc;IAC/B,UAAU,EAAE,YAAY;IACxB,SAAS,EAAE,WAAW;IACtB,YAAY,EAAE,cAAc;IAC5B,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,kBAAkB;IAC7B,YAAY,EAAE,cAAc;CAC7B,CAAC;AAEF,SAAS,YAAY,CACnB,MAAoB;IAEpB,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,iFAAiF;AACjF,8EAA8E;AAE9E,KAAK,UAAU,SAAS,CAAC,IAAY;IACnC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,MAAM,CAAC,IAAc,CAAC,CAA4B,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,SAAS,GAAoB,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,CACf,GAAM,EACN,GAAmC,EACnC,UAAkB,EACZ,EAAE;QACR,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC;QACnC,IAAI,OAAO,QAAQ,KAAK,UAAU,IAAI,CAAC,GAAG;YAAE,OAAO;QACnD,MAAM,IAAI,GAAG,QAEZ,CAAC;QACF,wEAAwE;QACxE,0EAA0E;QAC1E,uEAAuE;QACvE,oEAAoE;QACpE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE;YAC1B,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC;YAChC,OAAO;gBACL,IAAI,EAAE,KAAK,EAAE,GAAY,EAAE,EAAE;oBAC3B,mEAAmE;oBACnE,gEAAgE;oBAChE,yDAAyD;oBACzD,MAAM,OAAO,GAAG,GAAsD,CAAC;oBACvE,MAAM,WAAW,GAAG,OAAO,EAAE,QAAQ,CAAC;oBACtC,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;wBACpC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAY,CAAC,CAAC;oBACnC,CAAC;oBACD,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC;oBACrC,IAAI,OAAO,WAAW,KAAK,UAAU,EAAE,CAAC;wBACtC,MAAM,IAAI,KAAK,CACb,iBAAiB,WAAW,6BAA6B,CAC1D,CAAC;oBACJ,CAAC;oBACD,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;oBACvC,MAAM,OAAO,GAAG,WAA8C,CAAC;oBAC/D,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;gBACzC,CAAC;aACF,CAAC;QACJ,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,QAAQ,CAAC,KAAK,EAAE,MAAM,SAAS,CAAC,qBAAqB,CAAC,EAAE,WAAW,CAAC,CAAC;IACrE,QAAQ,CAAC,UAAU,EAAE,MAAM,SAAS,CAAC,0BAA0B,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACpF,QAAQ,CAAC,IAAI,EAAE,MAAM,SAAS,CAAC,oBAAoB,CAAC,EAAE,UAAU,CAAC,CAAC;IAClE,QAAQ,CAAC,YAAY,EAAE,MAAM,SAAS,CAAC,4BAA4B,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAC1F,QAAQ,CAAC,QAAQ,EAAE,MAAM,SAAS,CAAC,wBAAwB,CAAC,EAAE,cAAc,CAAC,CAAC;IAC9E,QAAQ,CAAC,KAAK,EAAE,MAAM,SAAS,CAAC,qBAAqB,CAAC,EAAE,WAAW,CAAC,CAAC;IAErE,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC;AAaD,MAAM,UAAU,iBAAiB,CAAC,YAA0B,EAAE;IAC5D,MAAM,kBAAkB,GAAG,KAAK,IAAsC,EAAE;QACtE,wEAAwE;QACxE,sEAAsE;QACtE,aAAa;QACb,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,KAAK,IAAwB,EAAE;QAChD,MAAM,SAAS,GAAG,MAAM,iBAAiB,EAAE,CAAC;QAC5C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,WAAW,CACnB,iBAAiB,EACjB,8DAA8D;gBAC5D,4EAA4E;gBAC5E,uEAAuE;gBACvE,+BAA+B,EACjC,KAAK,CACN,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;YAC3B,MAAM,EAAE,SAAS,CAAC,aAAa,IAAI,WAAW;YAC9C,SAAS;SACV,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,OAAO,eAAe,CAAY;QAChC,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CACb,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;QACrE,WAAW,EAAE,SAAS,CAAC,WAAW,IAAI,kBAAkB;QACxD,GAAG,EAAE,SAAS,CAAC,GAAG,IAAI,UAAU;QAChC,OAAO,EAAE;YACP,cAAc,EAAE;gBACd,WAAW,EAAE,mCAAmC;gBAChD,MAAM,EAAE,mBAAmB;gBAC3B,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;gBAC1B,OAAO,EAAE,KAAK,EAAE,CAAsC,EAAE,GAAG,EAAE,EAAE;oBAC7D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;oBACnD,YAAY,CAAC,MAAM,CAAC,CAAC;oBACrB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;oBACxC,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM;wBACvB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;wBAChE,CAAC,CAAC,GAAG,CAAC;oBACR,OAAO;wBACL,MAAM,EAAE,CAAC,CAAC,MAAM;wBAChB,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;4BAC9B,IAAI,EAAE,CAAC,CAAC,YAAY,IAAI,EAAE;4BAC1B,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE;4BACxB,aAAa,EAAE,CAAC,CAAC,YAAY,IAAI,IAAI;yBACtC,CAAC,CAAC;wBACH,cAAc,EAAE,QAAQ,CAAC,MAAM;qBAChC,CAAC;gBACJ,CAAC;aACF;YACD,WAAW,EAAE;gBACX,WAAW,EAAE,2CAA2C;gBACxD,MAAM,EAAE,gBAAgB;gBACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;gBAC1B,OAAO,EAAE,KAAK,EAAE,CAAmC,EAAE,GAAG,EAAE,EAAE;oBAC1D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC;wBAC/C,oBAAoB,EAAE,CAAC,CAAC,aAAa;qBACtC,CAAC,CAAC;oBACH,YAAY,CAAC,MAAM,CAAC,CAAC;oBACrB,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;oBAChD,IAAI,CAAC,IAAI,EAAE,CAAC;wBACV,MAAM,IAAI,WAAW,CACnB,WAAW,EACX,qCAAqC,CAAC,CAAC,aAAa,GAAG,EACvD,KAAK,CACN,CAAC;oBACJ,CAAC;oBACD,OAAO;wBACL,MAAM,EAAE,CAAC,CAAC,MAAM;wBAChB,aAAa,EAAE,IAAI,CAAC,oBAAoB,IAAI,CAAC,CAAC,aAAa;wBAC3D,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;wBACzB,cAAc,EAAE,IAAI,CAAC,aAAa,IAAI,EAAE;wBACxC,cAAc,EAAE,IAAI,CAAC,eAAe,IAAI,EAAE;wBAC1C,MAAM,EAAE,IAAI,CAAC,gBAAgB,IAAI,EAAE;wBACnC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE;wBACtC,UAAU,EAAE,IAAI,CAAC,gBAAgB,IAAI,CAAC;qBACvC,CAAC;gBACJ,CAAC;aACF;YACD,YAAY,EAAE;gBACZ,WAAW,EAAE,iDAAiD;gBAC9D,MAAM,EAAE,iBAAiB;gBACzB,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;gBAC1B,OAAO,EAAE,KAAK,EAAE,CAAoC,EAAE,GAAG,EAAE,EAAE;oBAC3D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBAC3C,YAAY,CAAC,MAAM,CAAC,CAAC;oBACrB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;oBAC1C,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM;wBACvB,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;wBAC5D,CAAC,CAAC,OAAO,CAAC;oBACZ,OAAO;wBACL,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;4BAC5B,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;4BAClB,UAAU,EAAE,CAAC,CAAC,YAAY;gCACxB,CAAC,CAAC,CAAC,CAAC,YAAY,YAAY,IAAI;oCAC9B,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE;oCAC9B,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC;gCAC1B,CAAC,CAAC,IAAI;yBACT,CAAC,CAAC;wBACH,YAAY,EAAE,QAAQ,CAAC,MAAM;qBAC9B,CAAC;gBACJ,CAAC;aACF;YACD,WAAW,EAAE;gBACX,WAAW,EAAE,uDAAuD;gBACpE,MAAM,EAAE,gBAAgB;gBACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;gBAC1B,OAAO,EAAE,KAAK,EAAE,CAAmC,EAAE,GAAG,EAAE,EAAE;oBAC1D,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;oBAC3B,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,GAAG,QAAQ,CAAC,CAAC;oBACnE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC;wBAC/C,SAAS,EAAE,CAAC,CAAC,SAAS;wBACtB,UAAU,EAAE,CAAC,CAAC,WAAW;wBACzB,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;4BAC/D,IAAI;4BACJ,KAAK;yBACN,CAAC,CAAC;wBACH,SAAS,EAAE,SAAS;wBACpB,OAAO,EAAE,OAAO;wBAChB,MAAM,EAAE,GAAG;wBACX,UAAU,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC;qBAC1C,CAAC,CAAC;oBACH,YAAY,CAAC,MAAM,CAAC,CAAC;oBACrB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;oBACzC,OAAO;wBACL,MAAM,EAAE,CAAC,CAAC,MAAM;wBAChB,SAAS,EAAE,CAAC,CAAC,SAAS;wBACtB,WAAW,EAAE,CAAC,CAAC,WAAW;wBAC1B,UAAU,EAAE,CAAC,CAAC,UAAU;wBACxB,KAAK,EAAE,CAAC,CAAC,KAAK;wBACd,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;4BAC1B,SAAS,EACP,CAAC,CAAC,SAAS,YAAY,IAAI;gCACzB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE;gCAC3B,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI;4BACzB,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,IAAI;4BAClB,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;4BAC1B,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;yBAC3B,CAAC,CAAC;qBACJ,CAAC;gBACJ,CAAC;aACF;SACF;QACD,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE;YAChB,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;gBAC/B,OAAO;oBACL,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,kBAAkB;oBACpD,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,SAAS,EAAE,GAAG,CAAC,SAAS;iBACzB,CAAC;YACJ,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,gCAAgC;AAChC,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;AACtC,eAAe,SAAS,CAAC;AACzB,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,SAAS,CAAC;AAEvD,qCAAqC;AACrC,OAAO,EACL,SAAS,EACT,0BAA0B,GAY3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC"}