@antasphere/chassis-sdk 0.0.0-stage → 1.0.0

package/LICENSE

@@ -0,0 +1,82 @@
+# License
+
+The Antasphere chassis
+Copyright (c) 2026 Antasphere
+
+The Antasphere chassis is made available by Antasphere, the licensor, under the "Sustainable Use License" as
+defined below. All third party components incorporated into the Antasphere chassis are licensed under the
+original license provided by the owner of the applicable component.
+
+## Sustainable Use License
+
+Version 1.0
+
+### Acceptance
+
+By using the software, you agree to all of the terms and conditions below.
+
+### Copyright License
+
+The licensor grants you a non-exclusive, royalty-free, worldwide, non-sublicensable, non-transferable license
+to use, copy, distribute, make available, and prepare derivative works of the software, in each case subject
+to the limitations below.
+
+### Limitations
+
+You may use or modify the software only for your own internal business purposes or for non-commercial or
+personal use. You may distribute the software or provide it to others only if you do so free of charge for
+non-commercial purposes. You may not alter, remove, or obscure any licensing, copyright, or other notices of
+the licensor in the software. Any use of the licensor’s trademarks is subject to applicable law.
+
+### Patents
+
+The licensor grants you a license, under any patent claims the licensor can license, or becomes able to
+license, to make, have made, use, sell, offer for sale, import and have imported the software, in each case
+subject to the limitations and conditions in this license. This license does not cover any patent claims that
+you cause to be infringed by modifications or additions to the software. If you or your company make any
+written claim that the software infringes or contributes to infringement of any patent, your patent license
+for the software granted under these terms ends immediately. If your company makes such a claim, your patent
+license ends immediately for work on behalf of your company.
+
+### Notices
+
+You must ensure that anyone who gets a copy of any part of the software from you also gets a copy of these
+terms. If you modify the software, you must include in any modified copies of the software a prominent notice
+stating that you have modified the software.
+
+### No Other Rights
+
+These terms do not imply any licenses other than those expressly granted in these terms.
+
+### Termination
+
+If you use the software in violation of these terms, such use is not licensed, and your license will
+automatically terminate. If the licensor provides you with a notice of your violation, and you cease all
+violation of this license no later than 30 days after you receive that notice, your license will be reinstated
+retroactively. However, if you violate these terms after such reinstatement, any additional violation of these
+terms will cause your license to terminate automatically and permanently.
+
+### No Liability
+
+As far as the law allows, the software comes as is, without any warranty or condition, and the licensor will
+not be liable to you for any damages arising out of these terms or the use or nature of the software, under
+any kind of legal claim.
+
+### Definitions
+
+The “licensor” is the entity offering these terms.
+
+The “software” is the software the licensor makes available under these terms, including any portion of it.
+
+“You” refers to the individual or entity agreeing to these terms.
+
+“Your company” is any legal entity, sole proprietorship, or other kind of organization that you work for, plus
+all organizations that have control over, are under the control of, or are under common control with that
+organization. Control means ownership of substantially all the assets of an entity, or the power to direct its
+management and policies by vote, contract, or otherwise. Control can be direct or indirect.
+
+“Your license” is the license granted to you for the software under these terms.
+
+“Use” means anything you do with the software requiring your license.
+
+“Trademark” means trademarks, service marks, and similar rights.

package/dist/index.d.ts

@@ -0,0 +1,363 @@
+import type { ApiKeyCreateOf, ApiKeyCreatedOf, ApiKeyInfoOf, AuditEntry, AuditVia, BreakGlassClaimOwnership, BreakGlassClaimOwnershipRequest, BreakGlassResetTwoFactor, BreakGlassResetTwoFactorRequest, ChassisContract, CliAuthComplete, CliAuthCompletedOf, CliAuthRequest, CliAuthRequested, CliAuthRevoked, DefaultWorkspace, DemoPass, DemoPassesList, DemoPassMint, DemoPassMinted, DemoPassRedeemed, FileInfo, InstanceInfo, InvitationAccept, InvitationCreate, InvitationCreated, InvitationInfo, InvitationLookup, MeResponseOf, Member, MemberChangeEmailLink, MemberChangeEmailLinkRequest, MemberResetLink, MemberUpdate, OnboardingDismissed, Project, ProjectCreate, ProjectMember, ProjectMemberAdd, ProjectMembersList, ProjectPersonMember, ProjectRole, ProjectsArchivedFilter, ProjectsList, ProjectTeamMember, ProjectUpdate, SetupRequest, SetupResponse, SsoCliConnect, SsoLogoutResponse, Team, TeamCreate, TeamMemberAdd, TeamMemberInfo, TeamMembersList, TeamsList, TeamUpdate, WorkspaceCreated, WorkspaceLook, WorkspaceRole, WorkspaceUpdate, WorkspaceUpdated } from '@antasphere/chassis-contract';
+/**
+ * The scope-carrying wire types, read off the chassis contract a tool instantiates
+ * with its own scopes: `ChassisClient<Scope>` types them exactly as the tool's own
+ * `ApiKeyInfo`, `MeResponse`… (same `z.infer` over the same `ChassisContract<Scope>`).
+ */
+type ApiKeyInfo<TScope extends string> = ApiKeyInfoOf<ChassisContract<TScope>>;
+type ApiKeyCreate<TScope extends string> = ApiKeyCreateOf<ChassisContract<TScope>>;
+type ApiKeyCreated<TScope extends string> = ApiKeyCreatedOf<ChassisContract<TScope>>;
+type CliAuthCompleted<TScope extends string> = CliAuthCompletedOf<ChassisContract<TScope>>;
+type MeResponse<TScope extends string> = MeResponseOf<ChassisContract<TScope>>;
+/**
+ * Thin typed client over /api/v1. Isomorphic: in the dashboard it rides the
+ * same-origin session cookie; in Node/CLI contexts pass an API key.
+ */
+export declare class PlatformApiError extends Error {
+    readonly status: number;
+    readonly code: string;
+    readonly details?: unknown | undefined;
+    constructor(status: number, code: string, message: string, details?: unknown | undefined);
+}
+export interface ClientOptions {
+    /** Origin of the instance; '' (default) = same-origin (dashboard). */
+    baseUrl?: string;
+    /** API key (`<prefix>_<keyid>_<secret>`) for machine callers. */
+    apiKey?: string;
+    /**
+     * Active workspace for EVERY credential kind (sent as X-Workspace-Id —
+     * the user-scoped credential model): a caller in several workspaces names
+     * which one their requests target; absent, the user's default membership
+     * applies. Meaningful with the session cookie AND with user-scoped API
+     * keys/OAuth tokens; a PINNED key rejects a mismatching value server-side
+     * (403 workspace_mismatch). Mutable later via setWorkspace().
+     */
+    workspaceId?: string;
+    fetch?: typeof globalThis.fetch;
+    /**
+     * Deadline for the JSON API calls, in milliseconds (default 30 000; 0
+     * disables). Without one, a hung or throttling instance parks a CLI
+     * invocation — or a dashboard request — forever: `fetch` has no default
+     * timeout in Node or the browser.
+     */
+    timeoutMs?: number;
+    /**
+     * Deadline for the byte-streaming calls — a tool's assets, file content, the
+     * workspace export (default 600 000; 0 disables). Separate because it
+     * covers the whole body transfer, and an export is legitimately slow.
+     */
+    downloadTimeoutMs?: number;
+    /**
+     * Headers sent on EVERY call, merged in before the credential and the
+     * workspace are set (so they can never replace either). For a Node caller
+     * that holds a browser-style session: the CLI's owner-only commands send
+     * the session `cookie` and the `origin` the server checks, and no key.
+     */
+    headers?: Record<string, string>;
+}
+/** Cursor-pagination params shared by every list endpoint. */
+export interface ListParams {
+    /** `nextCursor` from the previous page; omit for page 1. */
+    cursor?: string;
+    /** Page size (server default 50, max 100). */
+    limit?: number;
+}
+export interface AuditListResponse {
+    entries: AuditEntry[];
+    nextCursor: string | null;
+    /** How many entries match in all; counted on the first page only, null after it. */
+    total: number | null;
+}
+/** Cursor pagination + the audit log's filters (every one optional, combined with AND). */
+export interface AuditListParams extends ListParams {
+    /** Free text, matched case-insensitively against the actor's email and the action. */
+    q?: string;
+    /** Actions or families: an item ending in `.` matches the family (`apikey.`). */
+    action?: string[];
+    /** How the actor authenticated. */
+    actorVia?: AuditVia[];
+    /** One user id, or `system` for the rows nobody signed. */
+    actor?: string;
+    resourceType?: string;
+    resourceId?: string;
+    /** ISO datetime: entries created at or after this instant. */
+    from?: string;
+    /** ISO datetime: entries created at or before this instant. */
+    to?: string;
+}
+export interface InvitationAccepted {
+    workspaceId: string;
+    userId: string;
+    role: WorkspaceRole;
+}
+export interface FileUploaded {
+    file: FileInfo;
+    deduplicated: boolean;
+}
+/**
+ * Options for the non-idempotent create calls. Setting `idempotencyKey`
+ * (any client-chosen string ≤200 chars, e.g. a UUID) makes a retried create
+ * replay the original response instead of double-creating (docs/security/security.md).
+ */
+export interface IdempotentRequestOptions {
+    idempotencyKey?: string;
+}
+export declare function idempotencyHeader(opts: IdempotentRequestOptions): Record<string, string> | undefined;
+/** Default deadline for the JSON API calls (ms). */
+export declare const DEFAULT_TIMEOUT_MS = 30000;
+/** Default deadline for the streaming download calls (ms). */
+export declare const DEFAULT_DOWNLOAD_TIMEOUT_MS = 600000;
+export declare class ChassisClient<TScope extends string> {
+    protected readonly baseUrl: string;
+    private readonly apiKey;
+    private workspaceId;
+    protected readonly fetchImpl: typeof globalThis.fetch;
+    private readonly timeoutMs;
+    private readonly downloadTimeoutMs;
+    private readonly extraHeaders;
+    constructor(options?: ClientOptions);
+    /**
+     * The abort signal every call carries. `fetch` never times out on its
+     * own, so a silent peer (or a hostile one holding the socket open) would
+     * otherwise hang the caller indefinitely.
+     */
+    protected signal(kind: 'api' | 'download'): AbortSignal | undefined;
+    /** Set (or clear) the active workspace all subsequent requests target. */
+    setWorkspace(workspaceId: string | null): void;
+    /** Base headers shared by every call: the caller's own, then credential + active workspace. */
+    protected baseHeaders(): Record<string, string>;
+    protected parse<T>(res: Response): Promise<T>;
+    /** Append cursor-pagination params to a list path. */
+    protected pathWithQuery(base: string, params: ListParams, extra?: Record<string, string | undefined>): string;
+    protected request<T>(method: string, path: string, body?: unknown, extraHeaders?: Record<string, string>): Promise<T>;
+    instance(): Promise<InstanceInfo>;
+    setup(req: SetupRequest): Promise<SetupResponse>;
+    me(): Promise<MeResponse<TScope>>;
+    /**
+     * CLOUD EDITION only (404 on oss); sessions only (machines 403): record
+     * the explicit first-run-welcome dismissal — flips /me's
+     * `firstRunPending` to false, permanently. Idempotent.
+     */
+    dismissOnboarding(): Promise<OnboardingDismissed>;
+    /**
+     * Choose the workspace a request naming none resolves to, or clear the
+     * choice with `null` (the oldest active membership answers again). The
+     * person's own setting, open to their keys under the write scope; a key
+     * pinned to one workspace answers 403 `key_pinned`. On the cloud edition
+     * the default is set on the account site: 403 `hub_managed` with
+     * `details.manageUrl`. 404 for a workspace the caller is no active member of.
+     */
+    setDefaultWorkspace(workspaceId: string | null): Promise<DefaultWorkspace>;
+    /**
+     * Create ANOTHER workspace with the caller as its owner. Sessions only
+     * (API keys and OAuth bearers answer 403); offer it only while `/me`'s
+     * `canCreateWorkspace` is true. Self-hosted creates it locally under the
+     * operator's per-person cap; cloud creates the organization at Antasphere
+     * as the caller. Either way `workspace.id` is the id to pass as
+     * `X-Workspace-Id` (`setWorkspace`). Refusals (403 unless noted):
+     * `session_required`, `guest_forbidden`, `workspace_creation_disabled`,
+     * `workspace_limit_reached`, `hub_link_required`, `hub_unavailable`,
+     * `hub_refused`, 401 `hub_grant_expired`, 401 `hub_reauth_required` (both
+     * healed by signing in again), 400 `validation_error`, 429 `rate_limited`.
+     */
+    createWorkspace(name: string, opts?: IdempotentRequestOptions & {
+        look?: Partial<WorkspaceLook>;
+    }): Promise<WorkspaceCreated>;
+    /**
+     * PATCH /workspace — the ACTIVE workspace's name and look (owner/admin,
+     * sessions only). A rename of a hub-origin workspace answers 403
+     * `hub_managed` with `details.manageUrl`; its look is accepted.
+     */
+    updateWorkspace(body: WorkspaceUpdate): Promise<WorkspaceUpdated>;
+    /** Better Auth session probe — null when signed out. */
+    session(): Promise<{
+        user: {
+            id: string;
+            email: string;
+            name: string;
+        };
+    } | null>;
+    signInEmail(email: string, password: string): Promise<{
+        user: {
+            id: string;
+        };
+    }>;
+    signOut(): Promise<void>;
+    /** Public: email a sign-in code. Generic success — silent about account existence. */
+    cliAuthRequest(req: CliAuthRequest): Promise<CliAuthRequested>;
+    /**
+     * Public: verify the code and mint an API key (the tool's read + write
+     * scopes). The returned `key` appears only here.
+     */
+    cliAuthComplete(req: CliAuthComplete): Promise<CliAuthCompleted<TScope>>;
+    /**
+     * Revoke the PRESENTING API key (CLI logout). Self-revocation only: the
+     * route names no key, so the credential can kill exactly itself. Requires
+     * an API-key credential with the tool's write scope (sessions and OAuth
+     * bearers are refused — the dashboard is their key-management surface).
+     */
+    cliAuthRevoke(): Promise<CliAuthRevoked>;
+    /**
+     * Public, CLOUD EDITION only (404 on oss): exchange a hub-minted 120 s
+     * connect JWT (the hub's /sso/tool-token response) for an API key
+     * bound to the projected workspace — same grant and one-shot response
+     * shape as cliAuthComplete. Each token works exactly once (jti).
+     */
+    ssoCliConnect(req: SsoCliConnect): Promise<CliAuthCompleted<TScope>>;
+    /**
+     * CLOUD EDITION only (404 on oss); sessions only (machines 403 — the
+     * path is unlisted in the scope allowlist): single logout. The server
+     * revokes the local session and clears the SSO hint cookie in this very
+     * response; `url` is the hub end-session URL the browser must then VISIT
+     * to end the hub anchor session (null = local signout only — go straight
+     * to /login?signed_out=1).
+     */
+    ssoLogout(): Promise<SsoLogoutResponse>;
+    members(params?: ListParams): Promise<{
+        members: Member[];
+        nextCursor: string | null;
+    }>;
+    updateMember(id: string, patch: MemberUpdate): Promise<Member>;
+    /**
+     * Admin: delete a member's account (GDPR erasure). Sessions only — the
+     * endpoint is unlisted in the machine scope allowlist, so API keys 403.
+     * Files the member uploaded stay with the workspace.
+     */
+    deleteMember(id: string): Promise<Member>;
+    /**
+     * Remove a member from the workspace (admin+, sessions only): the
+     * membership is switched off and their project grants and team seats are
+     * deleted; the account stays. Invited back, the person starts with none.
+     * Refused `hub_managed` on a hub-origin workspace (removal is the hub's).
+     */
+    removeMember(id: string): Promise<Member>;
+    /**
+     * Owner: mint a one-time password reset link for a member (SMTP-free
+     * recovery). Refused for a per-resource guest and for anyone who also belongs
+     * to another workspace — the minted credential is global (PRDCT-1354).
+     */
+    createMemberResetLink(id: string, opts?: IdempotentRequestOptions): Promise<MemberResetLink>;
+    /**
+     * Owner: mint a one-time email change link for a member (SMTP-free email
+     * change). ⚠️ The link updates the email AND signs the member in — share
+     * it with the target member only. Same refusals as the reset link (guest
+     * targets, cross-workspace targets), plus the cloud edition closure.
+     */
+    createMemberChangeEmailLink(id: string, req: MemberChangeEmailLinkRequest, opts?: IdempotentRequestOptions): Promise<MemberChangeEmailLink>;
+    /** The caller's projects (every project for a workspace owner or admin). `archived`: `false` by default. */
+    projects(params?: ListParams & {
+        archived?: ProjectsArchivedFilter;
+    }): Promise<ProjectsList>;
+    /** The caller becomes the project's first manager. */
+    createProject(req: ProjectCreate, opts?: IdempotentRequestOptions): Promise<Project>;
+    project(id: string): Promise<Project>;
+    updateProject(id: string, patch: ProjectUpdate): Promise<Project>;
+    archiveProject(id: string): Promise<Project>;
+    unarchiveProject(id: string): Promise<Project>;
+    projectMembers(id: string, params?: ListParams): Promise<ProjectMembersList>;
+    /**
+     * Adds one of the workspace's own active members, by user id or by email,
+     * or one of its teams by `teamId`: exactly one of the three. A team entry
+     * gives every member of the team the role.
+     */
+    addProjectMember(id: string, req: ProjectMemberAdd, opts?: IdempotentRequestOptions): Promise<ProjectMember>;
+    setProjectMemberRole(id: string, userId: string, role: ProjectRole): Promise<ProjectPersonMember>;
+    /** A manager removes anyone; any member removes themselves. */
+    removeProjectMember(id: string, userId: string): Promise<ProjectPersonMember>;
+    /** Changes the role a team holds on a project (manager). */
+    setProjectTeamRole(projectId: string, teamId: string, role: ProjectRole): Promise<ProjectTeamMember>;
+    /** Removes a team from a project (manager); its people keep their own entries. */
+    removeProjectTeam(projectId: string, teamId: string): Promise<ProjectTeamMember>;
+    /** The workspace's teams, newest first. */
+    teams(params?: ListParams): Promise<TeamsList>;
+    team(id: string): Promise<Team>;
+    /** Owner or admin. The slug is derived from the name when absent. */
+    createTeam(req: TeamCreate, opts?: IdempotentRequestOptions): Promise<Team>;
+    updateTeam(id: string, patch: TeamUpdate): Promise<Team>;
+    /** The memberships stay; answers the team's final snapshot. */
+    deleteTeam(id: string): Promise<Team>;
+    teamMembers(id: string, params?: ListParams): Promise<TeamMembersList>;
+    /** Seats one of the workspace's own active members, by user id or by email. */
+    addTeamMember(id: string, req: TeamMemberAdd, opts?: IdempotentRequestOptions): Promise<TeamMemberInfo>;
+    /** Unseats a member; the workspace membership stays. */
+    removeTeamMember(id: string, userId: string): Promise<TeamMemberInfo>;
+    /** Owner: the workspace's passes, newest first. Never carries a secret. */
+    demoPasses(): Promise<DemoPassesList>;
+    /**
+     * Owner: mint a pass for a member by address. The `secret` and the `url`
+     * (`<instance>/demo#pass=…&to=…`) appear in this answer only. Refusals, in
+     * this order: 404 `no_such_member`, 403 `owner_target`,
+     * `demo_address_required`, `two_factor_enrolled`, `guest_target`,
+     * `cross_workspace_target`, then 400 `invalid_demo_path` or
+     * `validation_error` (a lifetime outside 1 to 10080 minutes).
+     */
+    mintDemoPass(req: DemoPassMint): Promise<DemoPassMinted>;
+    /** Owner: revoke a pass; revoking a revoked pass answers it again. */
+    revokeDemoPass(id: string): Promise<DemoPass>;
+    /**
+     * Anyone holding a pass's secret: sign in as its person. Served by the
+     * sign-in library (like `signInEmail`, no route contract), which sets the
+     * session cookie on this very answer; in a browser, call it same-origin.
+     * Every refusal of a pass is one 401 `invalid_demo_pass`, whatever the
+     * reason; 429 `rate_limited` past 20 REFUSED tries in 15 minutes from one address.
+     */
+    redeemDemoPass(secret: string): Promise<DemoPassRedeemed>;
+    /**
+     * Superadmin: make the caller (or a named existing user) an ACTIVE OWNER
+     * of the workspace — creating, reactivating, or promoting the membership.
+     * Adds an owner, never removes one. Sessions only: the endpoint is
+     * unlisted in the machine scope allowlist (API keys/tokens 403), and the
+     * calling session's VERIFIED email must be on SUPERADMIN_EMAILS.
+     */
+    breakGlassClaimOwnership(req?: BreakGlassClaimOwnershipRequest): Promise<BreakGlassClaimOwnership>;
+    /** Superadmin: clear a locked-out user's 2FA (sessions only, audited). */
+    breakGlassResetTwoFactor(req: BreakGlassResetTwoFactorRequest): Promise<BreakGlassResetTwoFactor>;
+    apiKeys(params?: ListParams): Promise<{
+        apiKeys: ApiKeyInfo<TScope>[];
+        nextCursor: string | null;
+    }>;
+    /** The returned `key` is the full secret — shown once, never retrievable. */
+    createApiKey(req: ApiKeyCreate<TScope>, opts?: IdempotentRequestOptions): Promise<ApiKeyCreated<TScope>>;
+    revokeApiKey(id: string): Promise<ApiKeyInfo<TScope>>;
+    invitations(params?: ListParams): Promise<{
+        invitations: InvitationInfo[];
+        nextCursor: string | null;
+    }>;
+    /** `acceptUrl` is always returned — email delivery is best-effort on top. */
+    createInvitation(req: InvitationCreate, opts?: IdempotentRequestOptions): Promise<InvitationCreated>;
+    revokeInvitation(id: string): Promise<InvitationInfo>;
+    /** Public: resolves an invitation token for the acceptance page. */
+    lookupInvitation(token: string): Promise<InvitationLookup>;
+    /** Public: accepts an invitation (creates the account when needed). */
+    acceptInvitation(req: InvitationAccept): Promise<InvitationAccepted>;
+    audit(params?: AuditListParams): Promise<AuditListResponse>;
+    files(params?: ListParams): Promise<{
+        files: FileInfo[];
+        nextCursor: string | null;
+    }>;
+    /** Uploads raw bytes; the filename travels as a query param. */
+    uploadFile(name: string, body: Blob | ArrayBuffer | Uint8Array, contentType?: string): Promise<FileUploaded>;
+    deleteFile(id: string): Promise<FileInfo>;
+    file(id: string): Promise<FileInfo>;
+    /** URL of the streamed (Range-capable) content endpoint for a file. */
+    fileContentUrl(id: string): string;
+    /**
+     * Downloads a file's bytes with the client's own headers (credential and
+     * active workspace). Raw Response so callers can stream it; a non-2xx
+     * answer throws PlatformApiError like every other method. A browser anchor
+     * on `fileContentUrl` cannot carry `X-Workspace-Id` (PRDCT-2426).
+     */
+    downloadFileContent(id: string): Promise<Response>;
+    /** The shared body of the streamed-download methods (the asset download's shape). */
+    protected rawDownload(url: string): Promise<Response>;
+    /** URL of the workspace export endpoint (admin+; keys need the tool's export scope). */
+    workspaceExportUrl(): string;
+    /**
+     * Downloads the full workspace export. Returns the raw Response so callers
+     * can stream the zip (exports can be large — never buffer by default);
+     * a non-2xx answer throws PlatformApiError like every other method.
+     */
+    downloadExport(): Promise<Response>;
+}
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,eAAe,EACf,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,wBAAwB,EACxB,+BAA+B,EAC/B,wBAAwB,EACxB,+BAA+B,EAC/B,eAAe,EACf,eAAe,EACf,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,QAAQ,EACR,cAAc,EACd,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,QAAQ,EACR,YAAY,EACZ,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,MAAM,EACN,qBAAqB,EACrB,4BAA4B,EAC5B,eAAe,EACf,YAAY,EACZ,mBAAmB,EACnB,OAAO,EACP,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACnB,WAAW,EACX,sBAAsB,EACtB,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,YAAY,EACZ,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,IAAI,EACJ,UAAU,EACV,aAAa,EACb,cAAc,EACd,eAAe,EACf,SAAS,EACT,UAAU,EACV,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,eAAe,EACf,gBAAgB,EACjB,MAAM,8BAA8B,CAAC;AAEtC;;;;GAIG;AACH,KAAK,UAAU,CAAC,MAAM,SAAS,MAAM,IAAI,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;AAC/E,KAAK,YAAY,CAAC,MAAM,SAAS,MAAM,IAAI,cAAc,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;AACnF,KAAK,aAAa,CAAC,MAAM,SAAS,MAAM,IAAI,eAAe,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;AACrF,KAAK,gBAAgB,CAAC,MAAM,SAAS,MAAM,IAAI,kBAAkB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3F,KAAK,UAAU,CAAC,MAAM,SAAS,MAAM,IAAI,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;AAE/E;;;GAGG;AAEH,qBAAa,gBAAiB,SAAQ,KAAK;aAEvB,MAAM,EAAE,MAAM;aACd,IAAI,EAAE,MAAM;aAEZ,OAAO,CAAC,EAAE,OAAO;gBAHjB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EAC5B,OAAO,EAAE,MAAM,EACC,OAAO,CAAC,EAAE,OAAO,YAAA;CAKpC;AAED,MAAM,WAAW,aAAa;IAC5B,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAChC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,8DAA8D;AAC9D,MAAM,WAAW,UAAU;IACzB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,oFAAoF;IACpF,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,2FAA2F;AAC3F,MAAM,WAAW,eAAgB,SAAQ,UAAU;IACjD,sFAAsF;IACtF,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,iFAAiF;IACjF,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,mCAAmC;IACnC,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC;IACtB,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,aAAa,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,QAAQ,CAAC;IACf,YAAY,EAAE,OAAO,CAAC;CACvB;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,wBAAwB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAEpG;AAED,oDAAoD;AACpD,eAAO,MAAM,kBAAkB,QAAS,CAAC;AACzC,8DAA8D;AAC9D,eAAO,MAAM,2BAA2B,SAAU,CAAC;AAEnD,qBAAa,aAAa,CAAC,MAAM,SAAS,MAAM;IAC9C,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,WAAW,CAAqB;IACxC,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IACtD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAyB;gBAE1C,OAAO,GAAE,aAAkB;IAUvC;;;;OAIG;IACH,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,GAAG,UAAU,GAAG,WAAW,GAAG,SAAS;IAKnE,0EAA0E;IAC1E,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAI9C,+FAA+F;IAC/F,SAAS,CAAC,WAAW,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;cAO/B,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC;IAkBnD,sDAAsD;IACtD,SAAS,CAAC,aAAa,CACrB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,UAAU,EAClB,KAAK,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAM,GAC7C,MAAM;cASO,OAAO,CAAC,CAAC,EACvB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,CAAC,EAAE,OAAO,EACd,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACpC,OAAO,CAAC,CAAC,CAAC;IAoBb,QAAQ,IAAI,OAAO,CAAC,YAAY,CAAC;IAIjC,KAAK,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC;IAIhD,EAAE,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAIjC;;;;OAIG;IACH,iBAAiB,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAIjD;;;;;;;OAOG;IACH,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI1E;;;;;;;;;;;OAWG;IACH,eAAe,CACb,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,wBAAwB,GAAG;QAAE,IAAI,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAA;KAAO,GACtE,OAAO,CAAC,gBAAgB,CAAC;IAK5B;;;;OAIG;IACH,eAAe,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAIjE,wDAAwD;IAClD,OAAO,IAAI,OAAO,CAAC;QAAE,IAAI,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,GAAG,IAAI,CAAC;IAItF,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IAI/E,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAMxB,sFAAsF;IACtF,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI9D;;;OAGG;IACH,eAAe,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAIxE;;;;;OAKG;IACH,aAAa,IAAI,OAAO,CAAC,cAAc,CAAC;IAIxC;;;;;OAKG;IACH,aAAa,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAIpE;;;;;;;OAOG;IACH,SAAS,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAMvC,OAAO,CAAC,MAAM,GAAE,UAAe,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAI3F,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IAI9D;;;;OAIG;IACH,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIzC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIzC;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,GAAE,wBAA6B,GAAG,OAAO,CAAC,eAAe,CAAC;IAShG;;;;;OAKG;IACH,2BAA2B,CACzB,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,4BAA4B,EACjC,IAAI,GAAE,wBAA6B,GAClC,OAAO,CAAC,qBAAqB,CAAC;IAejC,4GAA4G;IAC5G,QAAQ,CAAC,MAAM,GAAE,UAAU,GAAG;QAAE,QAAQ,CAAC,EAAE,sBAAsB,CAAA;KAAO,GAAG,OAAO,CAAC,YAAY,CAAC;IAIhG,sDAAsD;IACtD,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,IAAI,GAAE,wBAA6B,GAAG,OAAO,CAAC,OAAO,CAAC;IAIxF,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIrC,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC;IAIjE,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI5C,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI9C,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,GAAE,UAAe,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAIhF;;;;OAIG;IACH,gBAAgB,CACd,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,gBAAgB,EACrB,IAAI,GAAE,wBAA6B,GAClC,OAAO,CAAC,aAAa,CAAC;IAIzB,oBAAoB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAQjG,+DAA+D;IAC/D,mBAAmB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAO7E,4DAA4D;IAC5D,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAQpG,kFAAkF;IAClF,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAahF,2CAA2C;IAC3C,KAAK,CAAC,MAAM,GAAE,UAAe,GAAG,OAAO,CAAC,SAAS,CAAC;IAIlD,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/B,qEAAqE;IACrE,UAAU,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,GAAE,wBAA6B,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/E,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxD,+DAA+D;IAC/D,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,GAAE,UAAe,GAAG,OAAO,CAAC,eAAe,CAAC;IAI1E,+EAA+E;IAC/E,aAAa,CACX,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,aAAa,EAClB,IAAI,GAAE,wBAA6B,GAClC,OAAO,CAAC,cAAc,CAAC;IAI1B,wDAAwD;IACxD,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAWrE,2EAA2E;IAC3E,UAAU,IAAI,OAAO,CAAC,cAAc,CAAC;IAIrC;;;;;;;OAOG;IACH,YAAY,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC;IAIxD,sEAAsE;IACtE,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAI7C;;;;;;OAMG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAMzD;;;;;;OAMG;IACH,wBAAwB,CAAC,GAAG,GAAE,+BAAoC,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAItG,0EAA0E;IAC1E,wBAAwB,CAAC,GAAG,EAAE,+BAA+B,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAMjG,OAAO,CAAC,MAAM,GAAE,UAAe,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAIvG,6EAA6E;IAC7E,YAAY,CACV,GAAG,EAAE,YAAY,CAAC,MAAM,CAAC,EACzB,IAAI,GAAE,wBAA6B,GAClC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAIjC,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAMrD,WAAW,CACT,MAAM,GAAE,UAAe,GACtB,OAAO,CAAC;QAAE,WAAW,EAAE,cAAc,EAAE,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAIxE,6EAA6E;IAC7E,gBAAgB,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,GAAE,wBAA6B,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAIxG,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAIrD,oEAAoE;IACpE,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI1D,uEAAuE;IACvE,gBAAgB,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAMpE,KAAK,CAAC,MAAM,GAAE,eAAoB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAkB/D,KAAK,CAAC,MAAM,GAAE,UAAe,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAIzF,gEAAgE;IAC1D,UAAU,CACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,IAAI,GAAG,WAAW,GAAG,UAAU,EACrC,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,YAAY,CAAC;IAkBxB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAIzC,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAInC,uEAAuE;IACvE,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM;IAIlC;;;;;OAKG;IACG,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAIxD,qFAAqF;cACrE,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAkB3D,wFAAwF;IACxF,kBAAkB,IAAI,MAAM;IAI5B;;;;OAIG;IACG,cAAc,IAAI,OAAO,CAAC,QAAQ,CAAC;CAe1C"}