@abloatai/transaction 0.51.0 → 0.53.0

package/dist/ablo.d.ts

@@ -12,7 +12,7 @@
  * import { schema } from './schema';
  *
  * const ablo = Ablo({ schema, apiKey: process.env.ABLO_API_KEY, transport: 'http' });
- * await ablo.tasks.update({ id: taskId, data: { status: 'done' } });
+ * await ablo.items.update({ id: itemId, data: { status: 'done' } });
  * ```
  *
  * The reactive materialiser — local store, live queries, presence rendering —

package/dist/ablo.js

@@ -12,7 +12,7 @@
  * import { schema } from './schema';
  *
  * const ablo = Ablo({ schema, apiKey: process.env.ABLO_API_KEY, transport: 'http' });
- * await ablo.tasks.update({ id: taskId, data: { status: 'done' } });
+ * await ablo.items.update({ id: itemId, data: { status: 'done' } });
  * ```
  *
  * The reactive materialiser — local store, live queries, presence rendering —

package/dist/ai-sdk/updateTool.d.ts

@@ -14,7 +14,7 @@
  * import { updateTool } from '@abloatai/ablo/ai-sdk';
  * import { z } from 'zod';
  *
- * const saveSection = updateTool(ablo.documents, {
+ * const saveSection = updateTool(ablo.records, {
  *   description: 'Save your section into the shared document.',
  *   inputSchema: z.object({ text: z.string() }),
  *   id: () => DOC_ID,

package/dist/ai-sdk/updateTool.js

@@ -14,7 +14,7 @@
  * import { updateTool } from '@abloatai/ablo/ai-sdk';
  * import { z } from 'zod';
  *
- * const saveSection = updateTool(ablo.documents, {
+ * const saveSection = updateTool(ablo.records, {
  *   description: 'Save your section into the shared document.',
  *   inputSchema: z.object({ text: z.string() }),
  *   id: () => DOC_ID,

package/dist/auth/apiKey.d.ts

@@ -107,12 +107,6 @@ export declare function modeFromApiKey(key: string): CliMode | undefined;
 export declare function describeCliKeyMismatch(configured: StaticApiKey, cli: CliCredentialSnapshot): CliKeyMismatch | null;
 export declare function warnIfCliKeyMismatch(input: AuthResolveInput, warn?: (message: string) => void): Promise<void>;
 export { ABLO_HOSTED_API_DOMAIN, ABLO_HOSTED_HTTP_BASE_URL, ABLO_DEFAULT_BASE_URL } from './hostedEndpoints.js';
-/**
- * Normalizes older hosted host names to the current public API domain.
- * Self-hosted or custom URLs pass through unchanged; only the retired
- * first-party host names are rewritten.
- */
-export declare function normalizeAbloHostedBaseUrl(rawUrl: string): string;
 export declare function resolveBaseURL(input: AuthResolveInput): string;
 /**
  * Guards against using a secret `apiKey` in a browser. A secret key is

package/dist/auth/apiKey.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apiKey.d.ts","sourceRoot":"","sources":["../../src/auth/apiKey.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mBAAmB,EAEpB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAE/B;;;;;GAKG;AACH,YAAY,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEhE;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAAC;IACrD,wEAAwE;IACxE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAAC;IAC3D,kDAAkD;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAC3C,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IACzC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,4BAA4B,CAAC,EAAE,OAAO,CAAC;CACjD;AAED,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CAClD;AAED;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAKnE;AAED,wBAAgB,aAAa,CAC3B,KAAK,EAAE,gBAAgB,GACtB,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAkDpC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,GACzC,kBAAkB,GAAG,IAAI,CAG3B;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,GAAG,IAAI,CAEvE;AAED;;;;;;GAMG;AACH,KAAK,OAAO,GAAG,cAAc,CAAC;AAC9B,KAAK,kBAAkB,GAAG,QAAQ,GAAG,KAAK,CAAC;AAE3C,UAAU,YAAY;IACpB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;CACrC;AAED,UAAU,qBAAqB;IAC7B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,cAAc,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAMD,sEAAsE;AACtE,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAI/D;AAiID,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,YAAY,EACxB,GAAG,EAAE,qBAAqB,GACzB,cAAc,GAAG,IAAI,CAsCvB;AAID,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,gBAAgB,EACvB,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GAC/B,OAAO,CAAC,IAAI,CAAC,CAYf;AAID,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAShH;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAiCjE;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CAE9D;AAED;;;;;;;GAOG;AACH;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAUpE;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,GACzC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAIxB;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC,GAAG,MAAM,CAYT"}
+{"version":3,"file":"apiKey.d.ts","sourceRoot":"","sources":["../../src/auth/apiKey.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mBAAmB,EAEpB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAE/B;;;;;GAKG;AACH,YAAY,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEhE;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAAC;IACrD,wEAAwE;IACxE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAAC;IAC3D,kDAAkD;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAC3C,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IACzC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,4BAA4B,CAAC,EAAE,OAAO,CAAC;CACjD;AAED,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CAClD;AAED;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAKnE;AAED,wBAAgB,aAAa,CAC3B,KAAK,EAAE,gBAAgB,GACtB,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAkDpC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,GACzC,kBAAkB,GAAG,IAAI,CAG3B;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,GAAG,IAAI,CAEvE;AAED;;;;;;GAMG;AACH,KAAK,OAAO,GAAG,cAAc,CAAC;AAC9B,KAAK,kBAAkB,GAAG,QAAQ,GAAG,KAAK,CAAC;AAE3C,UAAU,YAAY;IACpB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;CACrC;AAED,UAAU,qBAAqB;IAC7B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,cAAc,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAMD,sEAAsE;AACtE,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAI/D;AAiID,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,YAAY,EACxB,GAAG,EAAE,qBAAqB,GACzB,cAAc,GAAG,IAAI,CAsCvB;AAID,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,gBAAgB,EACvB,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GAC/B,OAAO,CAAC,IAAI,CAAC,CAYf;AAID,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAEhH,wBAAgB,cAAc,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CAE9D;AAED;;;;;;;GAOG;AACH;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAUpE;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,GACzC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAIxB;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC,GAAG,MAAM,CAUT"}

package/dist/auth/apiKey.js

@@ -12,7 +12,8 @@
  * a stray environment variable.
  */
 import { AbloValidationError } from '../errors.js';
-import { ABLO_HOSTED_API_DOMAIN, ABLO_DEFAULT_BASE_URL } from './hostedEndpoints.js';
+import { ABLO_DEFAULT_BASE_URL } from './hostedEndpoints.js';
+import { normalizeAbloBaseUrl } from './baseUrl.js';
 import { isCredentialEndpoint, createEndpointCredentialResolver } from './credentialEndpoint.js';
 import { credentialToken, } from './credentialResult.js';
 import { assertBrowserSafety, protectBrowserCredentialProvider, } from './browserCredentialSafety.js';
@@ -268,54 +269,8 @@ export async function warnIfCliKeyMismatch(input, warn) {
 // Declared in `./hostedEndpoints`, the single source of the hosted domain, and
 // re-exported here so existing import paths keep working.
 export { ABLO_HOSTED_API_DOMAIN, ABLO_HOSTED_HTTP_BASE_URL, ABLO_DEFAULT_BASE_URL } from './hostedEndpoints.js';
-const LEGACY_HOSTED_API_HOSTS = new Set([
-    'mesh.ablo.finance',
-    'mesh-staging.ablo.finance',
-    'api.ablo.finance',
-    'sync-staging.ablo.finance',
-]);
-/**
- * Normalizes older hosted host names to the current public API domain.
- * Self-hosted or custom URLs pass through unchanged; only the retired
- * first-party host names are rewritten.
- */
-export function normalizeAbloHostedBaseUrl(rawUrl) {
-    const trimmed = rawUrl.trim();
-    if (!trimmed)
-        return trimmed;
-    // A scheme-less value (e.g. `api-staging.abloatai.com`) is treated as a
-    // relative URL: `new URL()` throws on it, and a later `fetch` would resolve it
-    // against the current page — producing a 404 from the app's own origin.
-    // Prepending a scheme makes the base absolute. `https` matches
-    // {@link ABLO_HOSTED_HTTP_BASE_URL}; the socket layer derives `wss` from it.
-    // An existing scheme (ws, wss, http, or https) is preserved untouched.
-    const schemed = /^[a-z][a-z0-9+.-]*:\/\//i.test(trimmed) ? trimmed : `https://${trimmed}`;
-    try {
-        const url = new URL(schemed);
-        // Canonicalize the scheme to the HTTP family: accept all four schemes
-        // (http, https, ws, wss), normalize at this single entry point, and let
-        // each layer derive its own protocol (the socket layer maps http to ws and
-        // https to wss; fetch uses the URL as-is). Without this, a `ws://` base URL
-        // reaches HTTP consumers un-normalized and the client fails at startup
-        // instead of connecting.
-        if (url.protocol === 'ws:')
-            url.protocol = 'http:';
-        if (url.protocol === 'wss:')
-            url.protocol = 'https:';
-        if (!LEGACY_HOSTED_API_HOSTS.has(url.hostname)) {
-            return url.toString().replace(/\/+$/, '');
-        }
-        url.hostname = ABLO_HOSTED_API_DOMAIN;
-        if (url.protocol === 'http:')
-            url.protocol = 'https:';
-        return url.toString().replace(/\/+$/, '');
-    }
-    catch {
-        return schemed;
-    }
-}
 export function resolveBaseURL(input) {
-    return normalizeAbloHostedBaseUrl(input.options.baseURL ?? ABLO_DEFAULT_BASE_URL);
+    return normalizeAbloBaseUrl(input.options.baseURL ?? ABLO_DEFAULT_BASE_URL);
 }
 /**
  * Guards against using a secret `apiKey` in a browser. A secret key is
@@ -365,17 +320,15 @@ export async function resolveApiKeyValue(apiKey) {
  * the protocol family: ws becomes http and wss becomes https.
  */
 export function resolveBootstrapBaseUrl(input) {
-    if (input.bootstrapBaseUrl) {
-        // Coerce ws/wss to http/https on the override path as well. This base URL is
-        // used for HTTP fetches (identity resolution, credential exchange, and
-        // bootstrap), and the browser `fetch` rejects ws and wss schemes outright.
-        // The override can legitimately arrive with a WebSocket scheme when a caller
-        // derives it as `${baseUrl}/api` from a WebSocket base URL, so normalize it
-        // here rather than failing at fetch time.
-        return ensureApiSuffix(normalizeAbloHostedBaseUrl(input.bootstrapBaseUrl).replace(/^ws/, 'http'));
-    }
-    const url = normalizeAbloHostedBaseUrl(input.url);
-    return ensureApiSuffix(url.replace(/^ws/, 'http'));
+    // Both paths go through `normalizeAbloBaseUrl`, which canonicalizes ws to
+    // http and wss to https. That matters most on the override, which legitimately
+    // arrives with a WebSocket scheme when a caller derives it as `${baseUrl}/api`
+    // from a WebSocket base URL: this URL is used for HTTP fetches (identity
+    // resolution, credential exchange, and bootstrap), and `fetch` rejects ws and
+    // wss outright.
+    // `||`, not `??`: an empty override is an absent override, and should fall
+    // through to the client's own URL rather than to the hosted default.
+    return ensureApiSuffix(normalizeAbloBaseUrl(input.bootstrapBaseUrl || input.url));
 }
 /**
  * Ensures the HTTP base ends in the `/api` route segment that every endpoint is
@@ -400,7 +353,7 @@ function ensureApiSuffix(httpBase) {
         return u.toString().replace(/\/+$/, '');
     }
     catch {
-        // Should be unreachable after `normalizeAbloHostedBaseUrl`, which yields an
+        // Should be unreachable after `normalizeAbloBaseUrl`, which yields an
         // absolute URL, but fall back to a string check rather than throwing.
         return trimmed.endsWith("/api") ? trimmed : `${trimmed}/api`;
     }

package/dist/auth/apiKey.js.map

@@ -1 +1 @@
-{"version":3,"file":"apiKey.js","sourceRoot":"","sources":["../../src/auth/apiKey.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAA2B,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAE5E,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAErF,OAAO,EAAE,oBAAoB,EAAE,gCAAgC,EAAE,MAAM,yBAAyB,CAAC;AACjG,OAAO,EACL,eAAe,GAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mBAAmB,EACnB,gCAAgC,GACjC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,CAAC;AA0C/B;;;;GAIG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,WAAW,GAAG,UAEnB,CAAC;IACF,OAAO,WAAW,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,KAAuB;IAEvB,0EAA0E;IAC1E,4EAA4E;IAC5E,gFAAgF;IAChF,8EAA8E;IAC9E,sEAAsE;IACtE,mCAAmC;IACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;IAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;IACxC,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,mBAAmB,CAC3B,yEAAyE;gBACvE,oEAAoE;gBACpE,0BAA0B,EAC5B,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,cAAc,EAAE,CACnD,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,QAAQ,KAAK,UAAU,EAAE,CAAC;YACnC,OAAO,gCAAgC,CACrC,QAAQ,EACR,KAAK,CAAC,OAAO,CAAC,uBAAuB,CACtC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,mBAAmB,CAC3B,0EAA0E;gBACxE,oDAAoD,EACtD,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,cAAc,EAAE,CACnD,CAAC;QACJ,CAAC;QACD,OAAO,gCAAgC,CAAC,gCAAgC,CAAC,QAAQ,EAAE;YACjF,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK;YAC1B,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa;YACtC,gBAAgB,EAAE,KAAK,CAAC,OAAO,CAAC,4BAA4B;SAC7D,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,oBAAoB,CAAC,UAAU,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,mBAAmB,CAC3B,4EAA4E,EAC5E,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,QAAQ,EAAE,CAC7C,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,UAAU,KAAK,UAAU,EAAE,CAAC;QACrC,OAAO,gCAAgC,CACrC,UAAU,EACV,KAAK,CAAC,OAAO,CAAC,uBAAuB,CACtC,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,yBAAyB,CACvC,MAA0C;IAE1C,IAAI,OAAO,MAAM,KAAK,UAAU;QAAE,OAAO,MAAM,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAuB;IACtD,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;AACzC,CAAC;AAiCD,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC;AAChC,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACjD,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,YAAY,CAAC;IACpD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAuB;IAClD,IAAI,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7C,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC;IACtC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACxC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CACtB,KAAc;IAEd,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACnD,MAAM,QAAQ,GAAqE,EAAE,CAAC;IACtF,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC3E,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QAC9C,MAAM,GAAG,GAAG,GAA8B,CAAC;QAC3C,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC5B,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAC,GAAG;YACf,OAAO,EAAE,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YACrE,UAAU,EAAE,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;SAClF,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CACxB,KAAqC;IAErC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IACjE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACpC,IACE,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC;QACxC,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,CAAC,EAC9C,CAAC;QACD,OAAO;YACL,OAAO,EAAE,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YACrE,UAAU,EAAE,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;SAClF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IACtE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,IAAI,GAAI,KAA4B,CAAC,IAAI,CAAC;IAChD,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACxE,CAAC;AAED,SAAS,iBAAiB,CAAI,SAAiB;IAC7C,0EAA0E;IAC1E,wEAAwE;IACxE,wEAAwE;IACxE,0EAA0E;IAC1E,6EAA6E;IAC7E,wEAAwE;IACxE,OAAO,MAAM,CAAC,yBAAyB,CAAC,2BAA2B,CAAC,SAAS,CAAe,CAAC;AAC/F,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAC3C,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,iBAAiB,CAC1C,kBAAkB,CACnB,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QAC3C,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAiC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,GAAuC;IAC9E,MAAM,WAAW,GAAI,UAEnB,CAAC,OAAO,CAAC;IACX,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAE/C,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAChD,iBAAiB,CAA2B,SAAS,CAAC;QACtD,iBAAiB,CAA6B,WAAW,CAAC;KAC3D,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,GAAG,CAAC,eAAe;WAC1B,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACpG,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACrC,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAC3C,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;KACjD,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1E,MAAM,aAAa,GAAG,iBAAiB,CAAC,GAAG,EAAE,aAAa,CAAC,IAAI,SAAS,CAAC;IAEzE,MAAM,QAAQ,GAAG;QACf,GAAG,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC;QACnC,GAAG,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC;KAClC,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,EAAE,GAAG,iBAAiB,CAAC,GAAG,CAAC,EAAE,GAAG,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1E,IAAI,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;YACxD,QAAQ,CAAC,aAAa,CAAC,GAAG,MAAM,CAAC;QACnC,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACzF,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,aAAa;QACb,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,MAAM;YAClD,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,EAAE;YAC9D,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,UAAwB,EACxB,GAA0B;IAE1B,MAAM,cAAc,GAAG,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,mBAAmB,GAAG,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,eAAe,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,mBAAmB,CAAC;IAEvF,IAAI,cAAc,IAAI,cAAc,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC;QAClD,OAAO;YACL,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,mBAAmB;YACnB,cAAc;YACd,OAAO,EAAE,GAAG,CAAC,IAAI;YACjB,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,IAAI,EAAE,eAAe;YACrB,OAAO,EACL,GAAG,WAAW,SAAS,cAAc,SAAS,mBAAmB,2BAA2B;gBAC5F,GAAG,GAAG,CAAC,IAAI,QAAQ,eAAe,CAAC,CAAC,CAAC,uBAAuB,eAAe,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI;gBACvF,qBAAqB,cAAc,aAAa,GAAG,CAAC,IAAI,4BAA4B;gBACpF,sBAAsB,cAAc,mBAAmB;SAC1D,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,SAAS,IAAI,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;QACrF,OAAO;YACL,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,mBAAmB;YACnB,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,GAAG,CAAC,IAAI;YACjB,eAAe;YACf,IAAI,EAAE,cAAc;YACpB,OAAO,EACL,iBAAiB,mBAAmB,uCAAuC,GAAG,CAAC,IAAI,OAAO;gBAC1F,IAAI,eAAe,sEAAsE;gBACzF,0CAA0C;SAC7C,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAGD,IAAI,oBAAoB,GAAG,KAAK,CAAC;AACjC,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAuB,EACvB,IAAgC;IAEhC,IAAI,oBAAoB;QAAE,OAAO;IACjC,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;QAAE,OAAO;IAChD,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU;QAAE,OAAO;IACxB,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvD,IAAI,CAAC,GAAG;QAAE,OAAO;IACjB,MAAM,QAAQ,GAAG,sBAAsB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACzD,IAAI,CAAC,QAAQ;QAAE,OAAO;IACtB,oBAAoB,GAAG,IAAI,CAAC;IAC5B,IAAI,IAAI;QAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SAC5B,IAAI,OAAO,OAAO,KAAK,WAAW;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;AACpF,CAAC;AAED,+EAA+E;AAC/E,0DAA0D;AAC1D,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAEhH,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACtC,mBAAmB;IACnB,2BAA2B;IAC3B,kBAAkB;IAClB,2BAA2B;CAC5B,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,MAAc;IACvD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC;IAE7B,wEAAwE;IACxE,+EAA+E;IAC/E,wEAAwE;IACxE,+DAA+D;IAC/D,6EAA6E;IAC7E,uEAAuE;IACvE,MAAM,OAAO,GAAG,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,OAAO,EAAE,CAAC;IAE1F,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,sEAAsE;QACtE,wEAAwE;QACxE,2EAA2E;QAC3E,4EAA4E;QAC5E,uEAAuE;QACvE,yBAAyB;QACzB,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK;YAAE,GAAG,CAAC,QAAQ,GAAG,OAAO,CAAC;QACnD,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM;YAAE,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAErD,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/C,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC5C,CAAC;QAED,GAAG,CAAC,QAAQ,GAAG,sBAAsB,CAAC;QACtC,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO;YAAE,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACtD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAuB;IACpD,OAAO,0BAA0B,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,IAAI,qBAAqB,CAAC,CAAC;AACpF,CAAC;AAED;;;;;;;GAOG;AACH;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAAC,OAAe;IAC5D,MAAM,WAAW,GAAY,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACjE,IAAI,WAAW,IAAI,IAAI;QAAE,OAAO;IAChC,MAAM,IAAI,mBAAmB,CAC3B,uEAAuE;QACrE,yEAAyE;QACzE,qEAAqE;QACrE,gEAAgE,EAClE,EAAE,IAAI,EAAE,cAAc,EAAE,CACzB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAA0C;IAE1C,IAAI,MAAM,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,OAAO,MAAM,KAAK,UAAU;QAAE,OAAO,eAAe,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAGvC;IACC,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC3B,6EAA6E;QAC7E,uEAAuE;QACvE,2EAA2E;QAC3E,6EAA6E;QAC7E,4EAA4E;QAC5E,0CAA0C;QAC1C,OAAO,eAAe,CAAC,0BAA0B,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IACpG,CAAC;IACD,MAAM,GAAG,GAAG,0BAA0B,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClD,OAAO,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,eAAe,CAAC,QAAgB;IACvC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,KAAK;YAAE,OAAO,OAAO,CAAC;QAC5D,CAAC,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC;QACrD,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;QAC5E,sEAAsE;QACtE,OAAO,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,MAAM,CAAC;IAC/D,CAAC;AACH,CAAC"}
+{"version":3,"file":"apiKey.js","sourceRoot":"","sources":["../../src/auth/apiKey.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAA2B,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAE5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,OAAO,EAAE,oBAAoB,EAAE,gCAAgC,EAAE,MAAM,yBAAyB,CAAC;AACjG,OAAO,EACL,eAAe,GAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mBAAmB,EACnB,gCAAgC,GACjC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,CAAC;AA0C/B;;;;GAIG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,WAAW,GAAG,UAEnB,CAAC;IACF,OAAO,WAAW,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,KAAuB;IAEvB,0EAA0E;IAC1E,4EAA4E;IAC5E,gFAAgF;IAChF,8EAA8E;IAC9E,sEAAsE;IACtE,mCAAmC;IACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;IAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;IACxC,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,mBAAmB,CAC3B,yEAAyE;gBACvE,oEAAoE;gBACpE,0BAA0B,EAC5B,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,cAAc,EAAE,CACnD,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,QAAQ,KAAK,UAAU,EAAE,CAAC;YACnC,OAAO,gCAAgC,CACrC,QAAQ,EACR,KAAK,CAAC,OAAO,CAAC,uBAAuB,CACtC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,mBAAmB,CAC3B,0EAA0E;gBACxE,oDAAoD,EACtD,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,cAAc,EAAE,CACnD,CAAC;QACJ,CAAC;QACD,OAAO,gCAAgC,CAAC,gCAAgC,CAAC,QAAQ,EAAE;YACjF,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK;YAC1B,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa;YACtC,gBAAgB,EAAE,KAAK,CAAC,OAAO,CAAC,4BAA4B;SAC7D,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,oBAAoB,CAAC,UAAU,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,mBAAmB,CAC3B,4EAA4E,EAC5E,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,QAAQ,EAAE,CAC7C,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,UAAU,KAAK,UAAU,EAAE,CAAC;QACrC,OAAO,gCAAgC,CACrC,UAAU,EACV,KAAK,CAAC,OAAO,CAAC,uBAAuB,CACtC,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,yBAAyB,CACvC,MAA0C;IAE1C,IAAI,OAAO,MAAM,KAAK,UAAU;QAAE,OAAO,MAAM,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAuB;IACtD,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;AACzC,CAAC;AAiCD,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC;AAChC,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACjD,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,YAAY,CAAC;IACpD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAuB;IAClD,IAAI,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7C,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC;IACtC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACxC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CACtB,KAAc;IAEd,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACnD,MAAM,QAAQ,GAAqE,EAAE,CAAC;IACtF,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC3E,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QAC9C,MAAM,GAAG,GAAG,GAA8B,CAAC;QAC3C,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC5B,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAC,GAAG;YACf,OAAO,EAAE,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YACrE,UAAU,EAAE,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;SAClF,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CACxB,KAAqC;IAErC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IACjE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACpC,IACE,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC;QACxC,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,CAAC,EAC9C,CAAC;QACD,OAAO;YACL,OAAO,EAAE,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YACrE,UAAU,EAAE,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;SAClF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IACtE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,IAAI,GAAI,KAA4B,CAAC,IAAI,CAAC;IAChD,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACxE,CAAC;AAED,SAAS,iBAAiB,CAAI,SAAiB;IAC7C,0EAA0E;IAC1E,wEAAwE;IACxE,wEAAwE;IACxE,0EAA0E;IAC1E,6EAA6E;IAC7E,wEAAwE;IACxE,OAAO,MAAM,CAAC,yBAAyB,CAAC,2BAA2B,CAAC,SAAS,CAAe,CAAC;AAC/F,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAC3C,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,iBAAiB,CAC1C,kBAAkB,CACnB,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QAC3C,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAiC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,GAAuC;IAC9E,MAAM,WAAW,GAAI,UAEnB,CAAC,OAAO,CAAC;IACX,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAE/C,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAChD,iBAAiB,CAA2B,SAAS,CAAC;QACtD,iBAAiB,CAA6B,WAAW,CAAC;KAC3D,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,GAAG,CAAC,eAAe;WAC1B,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACpG,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACrC,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAC3C,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;KACjD,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1E,MAAM,aAAa,GAAG,iBAAiB,CAAC,GAAG,EAAE,aAAa,CAAC,IAAI,SAAS,CAAC;IAEzE,MAAM,QAAQ,GAAG;QACf,GAAG,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC;QACnC,GAAG,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC;KAClC,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,EAAE,GAAG,iBAAiB,CAAC,GAAG,CAAC,EAAE,GAAG,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1E,IAAI,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;YACxD,QAAQ,CAAC,aAAa,CAAC,GAAG,MAAM,CAAC;QACnC,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACzF,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,aAAa;QACb,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,MAAM;YAClD,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC,aAAa,CAAC,CAAC,MAAM,EAAE;YAC9D,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,UAAwB,EACxB,GAA0B;IAE1B,MAAM,cAAc,GAAG,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,mBAAmB,GAAG,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,eAAe,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,mBAAmB,CAAC;IAEvF,IAAI,cAAc,IAAI,cAAc,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC;QAClD,OAAO;YACL,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,mBAAmB;YACnB,cAAc;YACd,OAAO,EAAE,GAAG,CAAC,IAAI;YACjB,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,IAAI,EAAE,eAAe;YACrB,OAAO,EACL,GAAG,WAAW,SAAS,cAAc,SAAS,mBAAmB,2BAA2B;gBAC5F,GAAG,GAAG,CAAC,IAAI,QAAQ,eAAe,CAAC,CAAC,CAAC,uBAAuB,eAAe,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI;gBACvF,qBAAqB,cAAc,aAAa,GAAG,CAAC,IAAI,4BAA4B;gBACpF,sBAAsB,cAAc,mBAAmB;SAC1D,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,SAAS,IAAI,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;QACrF,OAAO;YACL,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,mBAAmB;YACnB,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,GAAG,CAAC,IAAI;YACjB,eAAe;YACf,IAAI,EAAE,cAAc;YACpB,OAAO,EACL,iBAAiB,mBAAmB,uCAAuC,GAAG,CAAC,IAAI,OAAO;gBAC1F,IAAI,eAAe,sEAAsE;gBACzF,0CAA0C;SAC7C,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAGD,IAAI,oBAAoB,GAAG,KAAK,CAAC;AACjC,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAuB,EACvB,IAAgC;IAEhC,IAAI,oBAAoB;QAAE,OAAO;IACjC,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;QAAE,OAAO;IAChD,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU;QAAE,OAAO;IACxB,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvD,IAAI,CAAC,GAAG;QAAE,OAAO;IACjB,MAAM,QAAQ,GAAG,sBAAsB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACzD,IAAI,CAAC,QAAQ;QAAE,OAAO;IACtB,oBAAoB,GAAG,IAAI,CAAC;IAC5B,IAAI,IAAI;QAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SAC5B,IAAI,OAAO,OAAO,KAAK,WAAW;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;AACpF,CAAC;AAED,+EAA+E;AAC/E,0DAA0D;AAC1D,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAEhH,MAAM,UAAU,cAAc,CAAC,KAAuB;IACpD,OAAO,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,IAAI,qBAAqB,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;GAOG;AACH;;;;;;GAMG;AACH,MAAM,UAAU,8BAA8B,CAAC,OAAe;IAC5D,MAAM,WAAW,GAAY,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACjE,IAAI,WAAW,IAAI,IAAI;QAAE,OAAO;IAChC,MAAM,IAAI,mBAAmB,CAC3B,uEAAuE;QACrE,yEAAyE;QACzE,qEAAqE;QACrE,gEAAgE,EAClE,EAAE,IAAI,EAAE,cAAc,EAAE,CACzB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAA0C;IAE1C,IAAI,MAAM,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,OAAO,MAAM,KAAK,UAAU;QAAE,OAAO,eAAe,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAGvC;IACC,0EAA0E;IAC1E,+EAA+E;IAC/E,+EAA+E;IAC/E,yEAAyE;IACzE,8EAA8E;IAC9E,gBAAgB;IAChB,2EAA2E;IAC3E,qEAAqE;IACrE,OAAO,eAAe,CAAC,oBAAoB,CAAC,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AACpF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,eAAe,CAAC,QAAgB;IACvC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,KAAK;YAAE,OAAO,OAAO,CAAC;QAC5D,CAAC,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC;QACrD,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,sEAAsE;QACtE,OAAO,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,MAAM,CAAC;IAC/D,CAAC;AACH,CAAC"}

package/dist/auth/baseUrl.d.ts

@@ -0,0 +1,38 @@
+/**
+ * The base URL every credential is sent to, and the rules it has to satisfy.
+ *
+ * `baseURL` is the only client option that decides *where* an API key travels.
+ * Every request the SDK makes attaches the resolved credential as a bearer
+ * token against this origin, so an unchecked value here is an exfiltration
+ * primitive: one stray environment variable and a live `sk_` is posted to
+ * somebody else's host, in cleartext if the scheme says so.
+ *
+ * That check belongs beside the option, not in each application that sets it.
+ * A consumer who has to re-derive "must be HTTPS, must not embed credentials,
+ * must not carry a query" writes it once per codebase at best, and never at
+ * worst. Normalization and validation are therefore the same pass, at the one
+ * point both transports funnel through.
+ */
+/**
+ * Resolves a caller-supplied base URL to the absolute origin the SDK will send
+ * credentials to, refusing the values that would leak one.
+ *
+ * Accepted: an absolute `http`, `https`, `ws`, or `wss` URL, or a bare host
+ * name that is treated as `https`. A path prefix is preserved, so a
+ * self-hosted deployment mounted at `https://internal.example/ablo` works.
+ *
+ * Refused, each because the request that followed would be wrong rather than
+ * merely unusual:
+ *
+ *   - an unparseable value, which today fails later as an opaque fetch error;
+ *   - a scheme outside the HTTP family;
+ *   - plaintext `http` to anywhere but the local machine, which puts the key
+ *     on the wire in clear;
+ *   - an embedded `user:password`, which is both a credential in the wrong
+ *     place and the shape a lookalike host uses to read as a familiar one;
+ *   - a query string or fragment, which cannot survive having a path appended;
+ *   - a trailing-dot host, which reaches the same server as the name without it
+ *     while comparing unequal to every check that names the host.
+ */
+export declare function normalizeAbloBaseUrl(rawUrl: string): string;
+//# sourceMappingURL=baseUrl.d.ts.map

package/dist/auth/baseUrl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseUrl.d.ts","sourceRoot":"","sources":["../../src/auth/baseUrl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAiCH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CA2E3D"}

package/dist/auth/baseUrl.js

@@ -0,0 +1,126 @@
+/**
+ * The base URL every credential is sent to, and the rules it has to satisfy.
+ *
+ * `baseURL` is the only client option that decides *where* an API key travels.
+ * Every request the SDK makes attaches the resolved credential as a bearer
+ * token against this origin, so an unchecked value here is an exfiltration
+ * primitive: one stray environment variable and a live `sk_` is posted to
+ * somebody else's host, in cleartext if the scheme says so.
+ *
+ * That check belongs beside the option, not in each application that sets it.
+ * A consumer who has to re-derive "must be HTTPS, must not embed credentials,
+ * must not carry a query" writes it once per codebase at best, and never at
+ * worst. Normalization and validation are therefore the same pass, at the one
+ * point both transports funnel through.
+ */
+import { AbloValidationError } from '../errors.js';
+import { ABLO_DEFAULT_BASE_URL } from './hostedEndpoints.js';
+/**
+ * Is this host the local machine?
+ *
+ * Loopback is the one place plaintext carries no risk: the request never
+ * reaches a network, so there is nothing between the process and the server to
+ * read the token. This is the same boundary browsers draw when they decide
+ * which plaintext origins count as trustworthy, which is why `ablo dev` can
+ * serve `http://127.0.0.1:8080` without an override while any other host has
+ * to prove itself with TLS.
+ *
+ * `.localhost` names are included because they are reserved to resolve to the
+ * loopback interface and are a common local-development convention.
+ */
+function isLoopbackHostname(hostname) {
+    const host = hostname.toLowerCase();
+    if (host === 'localhost' || host.endsWith('.localhost'))
+        return true;
+    if (host === '[::1]' || host === '::1')
+        return true;
+    // The whole 127.0.0.0/8 block is loopback, not just 127.0.0.1.
+    return /^127\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(host);
+}
+function reject(message) {
+    throw new AbloValidationError(message, {
+        code: 'invalid_options',
+        param: 'baseURL',
+    });
+}
+/**
+ * Resolves a caller-supplied base URL to the absolute origin the SDK will send
+ * credentials to, refusing the values that would leak one.
+ *
+ * Accepted: an absolute `http`, `https`, `ws`, or `wss` URL, or a bare host
+ * name that is treated as `https`. A path prefix is preserved, so a
+ * self-hosted deployment mounted at `https://internal.example/ablo` works.
+ *
+ * Refused, each because the request that followed would be wrong rather than
+ * merely unusual:
+ *
+ *   - an unparseable value, which today fails later as an opaque fetch error;
+ *   - a scheme outside the HTTP family;
+ *   - plaintext `http` to anywhere but the local machine, which puts the key
+ *     on the wire in clear;
+ *   - an embedded `user:password`, which is both a credential in the wrong
+ *     place and the shape a lookalike host uses to read as a familiar one;
+ *   - a query string or fragment, which cannot survive having a path appended;
+ *   - a trailing-dot host, which reaches the same server as the name without it
+ *     while comparing unequal to every check that names the host.
+ */
+export function normalizeAbloBaseUrl(rawUrl) {
+    const trimmed = rawUrl.trim();
+    // An empty override is an unset override. Returning it verbatim would hand
+    // the transports a base no request can be built against.
+    if (!trimmed)
+        return ABLO_DEFAULT_BASE_URL;
+    // A scheme-less value (e.g. `api-staging.abloatai.com`) is treated as a
+    // relative URL: `new URL()` throws on it, and a later `fetch` would resolve it
+    // against the current page, producing a 404 from the app's own origin.
+    // Prepending a scheme makes the base absolute, and `https` is the only safe
+    // guess; the socket layer derives `wss` from it. An existing scheme (ws, wss,
+    // http, or https) is preserved untouched.
+    const schemed = /^[a-z][a-z0-9+.-]*:\/\//i.test(trimmed) ? trimmed : `https://${trimmed}`;
+    let url;
+    try {
+        url = new URL(schemed);
+    }
+    catch {
+        reject(`\`baseURL\` is not a valid URL: ${JSON.stringify(rawUrl)}. ` +
+            `Pass an absolute origin such as ${ABLO_DEFAULT_BASE_URL}.`);
+    }
+    // Canonicalize the scheme to the HTTP family: accept all four schemes
+    // (http, https, ws, wss), normalize at this single entry point, and let
+    // each layer derive its own protocol (the socket layer maps http to ws and
+    // https to wss; fetch uses the URL as-is). Without this, a `ws://` base URL
+    // reaches HTTP consumers un-normalized and the client fails at startup
+    // instead of connecting.
+    if (url.protocol === 'ws:')
+        url.protocol = 'http:';
+    if (url.protocol === 'wss:')
+        url.protocol = 'https:';
+    if (url.protocol !== 'http:' && url.protocol !== 'https:') {
+        reject(`\`baseURL\` must be an https URL. ${JSON.stringify(rawUrl)} uses ` +
+            `${url.protocol.replace(':', '')}, which Ablo cannot send a request over.`);
+    }
+    if (url.username || url.password) {
+        reject('`baseURL` must not embed a username or password. Ablo authenticates ' +
+            'with the credential you pass as `apiKey`; a URL that carries its own ' +
+            'is either a mistake or a host impersonating a familiar one.');
+    }
+    if (url.search || url.hash) {
+        reject('`baseURL` must not carry a query string or fragment. Ablo appends its ' +
+            'own path to this value, so anything after it would be discarded or ' +
+            'would swallow the path. Pass the origin, and the path prefix if you ' +
+            'self-host behind one.');
+    }
+    if (url.hostname.endsWith('.')) {
+        reject('`baseURL` must not end its host in a dot. That name reaches the same ' +
+            'server as the one without it, but compares unequal everywhere the ' +
+            'host is checked.');
+    }
+    if (url.protocol === 'http:' && !isLoopbackHostname(url.hostname)) {
+        reject(`\`baseURL\` must use https. Ablo sends your API key with every ` +
+            `request, and ${url.hostname} over plain http would expose it to ` +
+            `anything on the path. Plain http is accepted only for the local ` +
+            `machine during development.`);
+    }
+    return url.toString().replace(/\/+$/, '');
+}
+//# sourceMappingURL=baseUrl.js.map

package/dist/auth/baseUrl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseUrl.js","sourceRoot":"","sources":["../../src/auth/baseUrl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D;;;;;;;;;;;;GAYG;AACH,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACpD,+DAA+D;IAC/D,OAAO,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,MAAM,CAAC,OAAe;IAC7B,MAAM,IAAI,mBAAmB,CAAC,OAAO,EAAE;QACrC,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,2EAA2E;IAC3E,yDAAyD;IACzD,IAAI,CAAC,OAAO;QAAE,OAAO,qBAAqB,CAAC;IAE3C,wEAAwE;IACxE,+EAA+E;IAC/E,uEAAuE;IACvE,4EAA4E;IAC5E,8EAA8E;IAC9E,0CAA0C;IAC1C,MAAM,OAAO,GAAG,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,OAAO,EAAE,CAAC;IAE1F,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CACJ,mCAAmC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI;YAC3D,mCAAmC,qBAAqB,GAAG,CAC9D,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,wEAAwE;IACxE,2EAA2E;IAC3E,4EAA4E;IAC5E,uEAAuE;IACvE,yBAAyB;IACzB,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK;QAAE,GAAG,CAAC,QAAQ,GAAG,OAAO,CAAC;IACnD,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM;QAAE,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAErD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,CACJ,qCAAqC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ;YACjE,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,0CAA0C,CAC7E,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,CACJ,sEAAsE;YACpE,uEAAuE;YACvE,6DAA6D,CAChE,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,MAAM,CACJ,wEAAwE;YACtE,qEAAqE;YACrE,sEAAsE;YACtE,uBAAuB,CAC1B,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,CACJ,uEAAuE;YACrE,oEAAoE;YACpE,kBAAkB,CACrB,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClE,MAAM,CACJ,iEAAiE;YAC/D,gBAAgB,GAAG,CAAC,QAAQ,sCAAsC;YAClE,kEAAkE;YAClE,6BAA6B,CAChC,CAAC;IACJ,CAAC;IAED,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC5C,CAAC"}

package/dist/auth/capability.d.ts

@@ -67,8 +67,8 @@ export type NonEmptyCapabilityOperations = readonly [
 /**
  * `can`, narrowed to one schema's model names. A projection of
  * {@link capabilityCanSchema} — the value type is the operation enum, the key
- * domain is the schema's models, so `can: { tasks: ['update'] }` fails to
- * compile against a schema with no `tasks` model.
+ * domain is the schema's models, so `can: { items: ['update'] }` fails to
+ * compile against a schema with no `items` model.
  */
 export type CapabilityCan<S> = {
     [K in keyof S & string]: Readonly<Record<K, NonEmptyCapabilityOperations>> & Partial<Record<Exclude<keyof S & string, K>, NonEmptyCapabilityOperations>>;

package/dist/auth/capability.js

@@ -244,7 +244,7 @@ export const capabilityRequestSchema = z.object({
      * time, so it is rejected loudly at the boundary.
      */
     syncGroups: z.array(syncGroupInputSchema).readonly().optional(),
-    /** The VERB axis, as `model.verb` — e.g. `tasks.update`. */
+    /** The VERB axis, as `model.verb` — e.g. `items.update`. */
     operations: z.array(grantedOperationSchema).readonly().optional(),
     ttlSeconds: z.number().int().positive(),
     label: z.string().min(1).optional(),

package/dist/auth/index.d.ts

@@ -12,14 +12,24 @@ import { type EphemeralKeyResponse, type IdentityResolveResponse } from './schem
 import type { ParticipantKind } from '../types/participant.js';
 import type { CapabilityMintResponse, GrantedOperation } from './capability.js';
 export { ABLO_DEFAULT_BASE_URL, ABLO_HOSTED_API_DOMAIN, ABLO_HOSTED_HTTP_BASE_URL, } from './hostedEndpoints.js';
-export { normalizeAbloHostedBaseUrl } from './apiKey.js';
+export { normalizeAbloBaseUrl } from './baseUrl.js';
+import { normalizeAbloBaseUrl } from './baseUrl.js';
+/**
+ * @deprecated Renamed to {@link normalizeAbloBaseUrl}. Removed in 0.54.0.
+ * The "hosted" spelling named a rewrite of retired hosted hostnames that no
+ * longer exists; both spellings resolve through the one function, so a caller
+ * on the old name gets the same refusals of unsafe credential destinations.
+ */
+export declare const normalizeAbloHostedBaseUrl: typeof normalizeAbloBaseUrl;
 /**
  * @deprecated Use {@link CapabilityMintResponse}. This is a type-only,
  * one-release rename bridge; both names resolve to the same canonical Zod
  * contract and no runtime parser or schema is duplicated.
  */
 export type CapabilityExchangeResponse = CapabilityMintResponse;
-export type { EphemeralKeyResponse, IdentityResolveResponse, } from './schemas.js';
+export type { EphemeralKeyResponse, IdentityResolveResponse, SessionCredentialMetadata, SessionCredentialRevocationRequest, } from './schemas.js';
+export { buildSessionIssuanceMacMessage, canonicalizeSessionIssuanceBody, opaqueSessionFingerprintSchema, sha256HexSchema, SESSION_ISSUANCE_HEADERS, SESSION_ISSUANCE_MAC_VERSION, SESSION_ISSUANCE_PATHS, SESSION_ISSUANCE_SLOT_VERSION, sessionIssuanceMacHeadersSchema, sessionIssuanceMacMessageSchema, type SessionIssuanceMacHeaders, type SessionIssuanceMacMessage, } from './sessionIssuanceProtocol.js';
+export { SessionCredentialMetadataSchema, SessionCredentialRevocationRequestSchema, } from './schemas.js';
 export { parseCapabilityMintResponse } from './schemas.js';
 export { credentialEndpointErrorSchema, credentialEndpointKindSchema, credentialEndpointSuccessSchema, credentialEndpointErrorCode, parseCredentialEndpointSuccess, } from './credentialEndpointProtocol.js';
 export type { CredentialEndpointError, CredentialEndpointSuccess, } from './credentialEndpointProtocol.js';
@@ -29,6 +39,7 @@ export type { RevokeCapabilityRequest, RotateCapabilityRequest, } from './capabi
 export { capabilityOperationSchema, capabilityCanSchema, capabilityCanSchemaFor, effectiveAuthoritySchema, capabilityScopeSchema, capabilityRequestSchema, capabilityMintResponseSchema, grantedOperationSchema, grantedOperations, expandReadYourWrites, modelWireNames, capabilityModelAliases, unresolvableOperations, } from './capability.js';
 export type { CapabilityOperation, CapabilityCan, CapabilityGrant, EffectiveAuthority, CapabilityScope, CapabilityMintResponse, CapabilityRequest, CapabilityModelShape, GrantedOperation, } from './capability.js';
 import type { CapabilityOperation } from './capability.js';
+import { type EphemeralKeyRequest } from '../wire/auth.js';
 export interface ExchangeApiKeyRequest {
     readonly apiKey: string;
     readonly baseUrl: string;
@@ -112,6 +123,8 @@ export type MintUserSessionRequest = MintUserSessionBase & {
      */
     readonly controlPlaneOnly?: true;
 };
+/** Canonical wire projection shared by the SDK and first-party issuer. */
+export declare function buildMintUserSessionRequest(options: MintUserSessionRequest): EphemeralKeyRequest;
 /**
  * Mints an end-user session key (an `ek_` key) by calling
  * `POST /v1/ephemeral_keys`, using your secret key as authorization. Your

package/dist/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAI7B,MAAM,cAAc,CAAC;AAEtB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EACV,sBAAsB,EACtB,gBAAgB,EACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAEzD;;;;GAIG;AACH,MAAM,MAAM,0BAA0B,GAAG,sBAAsB,CAAC;AAEhE,YAAY,EACV,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EACL,6BAA6B,EAC7B,4BAA4B,EAC5B,+BAA+B,EAC/B,2BAA2B,EAC3B,8BAA8B,GAC/B,MAAM,iCAAiC,CAAC;AACzC,YAAY,EACV,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,iCAAiC,CAAC;AACzC,YAAY,EACV,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,+BAA+B,EAC/B,gCAAgC,EAChC,+BAA+B,EAC/B,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,0BAA0B,CAAC;AAIlC,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,EACxB,qBAAqB,EACrB,uBAAuB,EACvB,4BAA4B,EAC5B,sBAAsB,EACtB,iBAAiB,EACjB,oBAAoB,EACpB,cAAc,EACd,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,mBAAmB,EACnB,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,sBAAsB,EACtB,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAE3D,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC;gFAC4E;IAC5E,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAClD;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,wBAAsB,cAAc,CAClC,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,sBAAsB,CAAC,CA0EjC;AAID,UAAU,mBAAmB;IAC3B;;mBAEe;IACf,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;qCACiC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;oEAEgE;IAChE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;;;;;;;iFAO6E;IAC7E,QAAQ,CAAC,aAAa,CAAC,EAAE;QACvB,4DAA4D;QAC5D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,+CAA+C;QAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,sBAAsB,GAAG,mBAAmB,GAAG;IACzD,2EAA2E;IAC3E,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAClD;;;OAGG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACjE;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC;CAClC,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,oBAAoB,CAAC,CA8F/B;AAID,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,uBAAuB,CAAC,CAuDlC;AAID;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,MAAM,WAAW,uBAAuB;IACtC,iEAAiE;IACjE,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IAEpC;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEzD,0CAA0C;IAC1C,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAE/D,uCAAuC;IACvC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IAE1C;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAE3B;;;;;OAKG;IACH,QAAQ,CAAC,wBAAwB,CAAC,EAAE,OAAO,CAAC;IAE5C,8DAA8D;IAC9D,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAE5B,qCAAqC;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,KAAK,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC;IAClF,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,KAAK,IAAI,CAAC;CACvE;AAED,MAAM,WAAW,gBAAgB;IAC/B,4EAA4E;IAC5E,UAAU,IAAI,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAE/C,oDAAoD;IACpD,OAAO,IAAI,IAAI,CAAC;IAEhB,sEAAsE;IACtE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAKD,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,uBAAuB,GAC/B,gBAAgB,CAwGlB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAM7B,MAAM,cAAc,CAAC;AAEtB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EACV,sBAAsB,EACtB,gBAAgB,EACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,6BAAuB,CAAC;AAE/D;;;;GAIG;AACH,MAAM,MAAM,0BAA0B,GAAG,sBAAsB,CAAC;AAEhE,YAAY,EACV,oBAAoB,EACpB,uBAAuB,EACvB,yBAAyB,EACzB,kCAAkC,GACnC,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,8BAA8B,EAC9B,+BAA+B,EAC/B,8BAA8B,EAC9B,eAAe,EACf,wBAAwB,EACxB,4BAA4B,EAC5B,sBAAsB,EACtB,6BAA6B,EAC7B,+BAA+B,EAC/B,+BAA+B,EAC/B,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,GAC/B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,+BAA+B,EAC/B,wCAAwC,GACzC,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EACL,6BAA6B,EAC7B,4BAA4B,EAC5B,+BAA+B,EAC/B,2BAA2B,EAC3B,8BAA8B,GAC/B,MAAM,iCAAiC,CAAC;AACzC,YAAY,EACV,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,iCAAiC,CAAC;AACzC,YAAY,EACV,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,+BAA+B,EAC/B,gCAAgC,EAChC,+BAA+B,EAC/B,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,0BAA0B,CAAC;AAIlC,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,EACxB,qBAAqB,EACrB,uBAAuB,EACvB,4BAA4B,EAC5B,sBAAsB,EACtB,iBAAiB,EACjB,oBAAoB,EACpB,cAAc,EACd,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,mBAAmB,EACnB,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,sBAAsB,EACtB,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC;gFAC4E;IAC5E,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAClD;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,wBAAsB,cAAc,CAClC,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,sBAAsB,CAAC,CA0EjC;AAID,UAAU,mBAAmB;IAC3B;;mBAEe;IACf,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;qCACiC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;oEAEgE;IAChE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;;;;;;;iFAO6E;IAC7E,QAAQ,CAAC,aAAa,CAAC,EAAE;QACvB,4DAA4D;QAC5D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,+CAA+C;QAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,sBAAsB,GAAG,mBAAmB,GAAG;IACzD,2EAA2E;IAC3E,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAClD;;;OAGG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACjE;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC;CAClC,CAAC;AAEF,0EAA0E;AAC1E,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,sBAAsB,GAC9B,mBAAmB,CAmBrB;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,oBAAoB,CAAC,CA2E/B;AAID,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,uBAAuB,CAAC,CAuDlC;AAID;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,MAAM,WAAW,uBAAuB;IACtC,iEAAiE;IACjE,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IAEpC;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEzD,0CAA0C;IAC1C,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAE/D,uCAAuC;IACvC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IAE1C;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAE3B;;;;;OAKG;IACH,QAAQ,CAAC,wBAAwB,CAAC,EAAE,OAAO,CAAC;IAE5C,8DAA8D;IAC9D,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAE5B,qCAAqC;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,KAAK,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC;IAClF,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,KAAK,IAAI,CAAC;CACvE;AAED,MAAM,WAAW,gBAAgB;IAC/B,4EAA4E;IAC5E,UAAU,IAAI,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAE/C,oDAAoD;IACpD,OAAO,IAAI,IAAI,CAAC;IAEhB,sEAAsE;IACtE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAKD,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,uBAAuB,GAC/B,gBAAgB,CAwGlB"}

package/dist/auth/index.js

@@ -11,13 +11,25 @@
 import { parseCapabilityMintResponse, parseEphemeralKeyResponse, parseIdentityResolveResponse, } from './schemas.js';
 import { AbloAuthenticationError, hasWireCode, translateHttpError } from '../errors.js';
 export { ABLO_DEFAULT_BASE_URL, ABLO_HOSTED_API_DOMAIN, ABLO_HOSTED_HTTP_BASE_URL, } from './hostedEndpoints.js';
-export { normalizeAbloHostedBaseUrl } from './apiKey.js';
+export { normalizeAbloBaseUrl } from './baseUrl.js';
+// A re-export does not bind the name in this module; the alias below needs it.
+import { normalizeAbloBaseUrl } from './baseUrl.js';
+/**
+ * @deprecated Renamed to {@link normalizeAbloBaseUrl}. Removed in 0.54.0.
+ * The "hosted" spelling named a rewrite of retired hosted hostnames that no
+ * longer exists; both spellings resolve through the one function, so a caller
+ * on the old name gets the same refusals of unsafe credential destinations.
+ */
+export const normalizeAbloHostedBaseUrl = normalizeAbloBaseUrl;
+export { buildSessionIssuanceMacMessage, canonicalizeSessionIssuanceBody, opaqueSessionFingerprintSchema, sha256HexSchema, SESSION_ISSUANCE_HEADERS, SESSION_ISSUANCE_MAC_VERSION, SESSION_ISSUANCE_PATHS, SESSION_ISSUANCE_SLOT_VERSION, sessionIssuanceMacHeadersSchema, sessionIssuanceMacMessageSchema, } from './sessionIssuanceProtocol.js';
+export { SessionCredentialMetadataSchema, SessionCredentialRevocationRequestSchema, } from './schemas.js';
 export { parseCapabilityMintResponse } from './schemas.js';
 export { credentialEndpointErrorSchema, credentialEndpointKindSchema, credentialEndpointSuccessSchema, credentialEndpointErrorCode, parseCredentialEndpointSuccess, } from './credentialEndpointProtocol.js';
 export { capabilityRotationRequestSchema, capabilityRotationResponseSchema, sessionRevocationResponseSchema, revokeCapability, rotateCapability, } from './capabilityLifecycle.js';
 // The capability vocabulary — what a grant is, on both axes, in one place.
 // Served from this barrel so every minter reaches it through one import.
 export { capabilityOperationSchema, capabilityCanSchema, capabilityCanSchemaFor, effectiveAuthoritySchema, capabilityScopeSchema, capabilityRequestSchema, capabilityMintResponseSchema, grantedOperationSchema, grantedOperations, expandReadYourWrites, modelWireNames, capabilityModelAliases, unresolvableOperations, } from './capability.js';
+import { ephemeralKeyRequestSchema, } from '../wire/auth.js';
 export async function exchangeApiKey(options) {
     if (!options.apiKey) {
         throw new AbloAuthenticationError('No API key found. Set ABLO_API_KEY in your environment — `npx ablo login` ' +
@@ -79,6 +91,27 @@ export async function exchangeApiKey(options) {
     }
     return parseCapabilityMintResponse(await response.json());
 }
+/** Canonical wire projection shared by the SDK and first-party issuer. */
+export function buildMintUserSessionRequest(options) {
+    return ephemeralKeyRequestSchema.parse({
+        user: { id: options.userId },
+        ...(options.organizationId ? { organizationId: options.organizationId } : {}),
+        ...(options.schemaProject
+            ? {
+                schemaProjectId: options.schemaProject.projectId,
+                schemaOwnerOrgId: options.schemaProject.organizationId,
+            }
+            : {}),
+        ...(options.syncGroups ? { syncGroups: options.syncGroups } : {}),
+        ...(options.controlPlaneOnly
+            ? { controlPlaneOnly: true }
+            : options.operations
+                ? { operations: options.operations }
+                : { activeSchemaOperations: options.activeSchemaOperations }),
+        ttlSeconds: options.ttlSeconds,
+        ...(options.label ? { label: options.label } : {}),
+    });
+}
 /**
  * Mints an end-user session key (an `ek_` key) by calling
  * `POST /v1/ephemeral_keys`, using your secret key as authorization. Your
@@ -122,26 +155,7 @@ export async function mintUserSessionKey(options) {
                 'Content-Type': 'application/json',
                 Authorization: `Bearer ${options.apiKey}`,
             },
-            body: JSON.stringify({
-                user: { id: options.userId },
-                ...(options.organizationId ? { organizationId: options.organizationId } : {}),
-                // The public option is project-centric; map it to the flat wire keys the
-                // endpoint expects.
-                ...(options.schemaProject
-                    ? {
-                        schemaProjectId: options.schemaProject.projectId,
-                        schemaOwnerOrgId: options.schemaProject.organizationId,
-                    }
-                    : {}),
-                ...(options.syncGroups ? { syncGroups: options.syncGroups } : {}),
-                ...(options.controlPlaneOnly
-                    ? { controlPlaneOnly: true }
-                    : options.operations
-                        ? { operations: options.operations }
-                        : { activeSchemaOperations: options.activeSchemaOperations }),
-                ttlSeconds: options.ttlSeconds,
-                ...(options.label ? { label: options.label } : {}),
-            }),
+            body: JSON.stringify(buildMintUserSessionRequest(options)),
             signal: controller.signal,
         });
     }