@atlasauth/backend 0.17.0 → 0.19.0

package/dist/client/operator.js

@@ -0,0 +1,132 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.openSealedBox = exports.sealBox = exports.OAuthFlowError = void 0;
+exports.operatorConfiguration = operatorConfiguration;
+exports.startOperatorLogin = startOperatorLogin;
+exports.pollOperatorLogin = pollOperatorLogin;
+exports.exchangeOperatorToken = exchangeOperatorToken;
+exports.partnerLinkToken = partnerLinkToken;
+exports.generateSealKeyPair = generateSealKeyPair;
+exports.openSealedSecret = openSealedSecret;
+exports.revokeLeakedKeys = revokeLeakedKeys;
+const sealed_box_1 = require("./sealed-box");
+const toB64 = (b) => btoa(String.fromCharCode(...b));
+const fromB64 = (s) => Uint8Array.from(atob(s), (c) => c.charCodeAt(0));
+class OAuthFlowError extends Error {
+    error;
+    status;
+    constructor(error, message, status) {
+        super(message);
+        this.error = error;
+        this.status = status;
+        this.name = 'OAuthFlowError';
+    }
+}
+exports.OAuthFlowError = OAuthFlowError;
+const DEFAULT_API = 'https://api.atlasauth.net';
+async function form(fetchImpl, url, body) {
+    const res = await fetchImpl(url, {
+        method: 'POST',
+        headers: { 'content-type': 'application/x-www-form-urlencoded', accept: 'application/json' },
+        body: new URLSearchParams(body).toString(),
+    });
+    const json = (await res.json().catch(() => ({})));
+    return { ...json, _status: res.status };
+}
+/** GET /v1/operator — where the operator device flow and token exchange live. */
+async function operatorConfiguration(opts = {}) {
+    const f = opts.fetch ?? globalThis.fetch;
+    const res = await f(`${(opts.apiUrl ?? DEFAULT_API).replace(/\/+$/, '')}/v1/operator`, { headers: { accept: 'application/json' } });
+    if (!res.ok)
+        throw new OAuthFlowError('not_configured', 'The operator issuer is not configured on this deployment.', res.status);
+    return (await res.json());
+}
+async function startOperatorLogin(opts = {}) {
+    const config = opts.config ?? (await operatorConfiguration(opts));
+    const out = await form(opts.fetch ?? globalThis.fetch, config.device_authorization_endpoint, { client_id: config.client_id, scope: config.scope });
+    if (out._status !== 200)
+        throw new OAuthFlowError(String(out.error ?? 'error'), String(out.error_description ?? 'Device authorization failed.'), out._status);
+    return { ...out, config };
+}
+/**
+ * Poll until the person approves (resolves the operator token), denies or the
+ * code expires (throws). Honours `interval` and `slow_down`.
+ */
+async function pollOperatorLogin(start, opts = {}) {
+    const f = opts.fetch ?? globalThis.fetch;
+    const sleep = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+    let interval = Math.max(1, start.interval) * 1000;
+    const deadline = Date.now() + start.expires_in * 1000;
+    while (Date.now() < deadline) {
+        if (opts.signal?.aborted)
+            throw new OAuthFlowError('aborted', 'Sign-in was cancelled.', 0);
+        await sleep(interval);
+        const out = await form(f, start.config.token_endpoint, {
+            grant_type: 'urn:ietf:params:oauth:grant-type:device_code',
+            device_code: start.device_code,
+            client_id: start.config.client_id,
+        });
+        if (out._status === 200)
+            return out;
+        if (out.error === 'authorization_pending')
+            continue;
+        if (out.error === 'slow_down') {
+            interval += 5000;
+            continue;
+        }
+        throw new OAuthFlowError(String(out.error ?? 'error'), String(out.error_description ?? 'Sign-in failed.'), out._status);
+    }
+    throw new OAuthFlowError('expired_token', 'The sign-in code expired. Run the login again.', 400);
+}
+/** RFC 8693: swap an operator token for a one-hour, resource-bound Atlas token. */
+async function exchangeOperatorToken(subjectToken, params, opts = {}) {
+    const out = await form(opts.fetch ?? globalThis.fetch, `${(opts.apiUrl ?? DEFAULT_API).replace(/\/+$/, '')}/v1/oauth/token`, {
+        grant_type: 'urn:ietf:params:oauth:grant-type:token-exchange',
+        subject_token: subjectToken,
+        subject_token_type: 'urn:ietf:params:oauth:token-type:access_token',
+        audience: 'atlas',
+        resource: params.resource,
+        scope: Array.isArray(params.scope) ? params.scope.join(' ') : params.scope,
+    });
+    if (out._status !== 200) {
+        const err = out.error ?? (Array.isArray(out.errors) ? out.errors[0].code : 'error');
+        const msg = out.error_description ?? (Array.isArray(out.errors) ? out.errors[0].message : 'Token exchange failed.');
+        throw new OAuthFlowError(String(err), String(msg), out._status);
+    }
+    return out;
+}
+/** client_credentials with a partner link's credentials (a partner calling an instance). */
+async function partnerLinkToken(clientId, clientSecret, opts = {}) {
+    const body = { grant_type: 'client_credentials', client_id: clientId, client_secret: clientSecret };
+    if (opts.scope)
+        body.scope = opts.scope;
+    const out = await form(opts.fetch ?? globalThis.fetch, `${(opts.apiUrl ?? DEFAULT_API).replace(/\/+$/, '')}/v1/oauth/token`, body);
+    if (out._status !== 200)
+        throw new OAuthFlowError(String(out.error ?? 'error'), String(out.error_description ?? 'Token request failed.'), out._status);
+    return out;
+}
+/** A key pair for sealed secret delivery; pass `secretRecipient` to the client. */
+function generateSealKeyPair() {
+    const pair = (0, sealed_box_1.generateSealKeyPair)();
+    return { ...pair, secretRecipient: `x25519:${toB64(pair.publicKey)}` };
+}
+/** Open a `sealed_*` field (base64 libsodium sealed box) from an Atlas response. */
+function openSealedSecret(sealedBase64, keyPair) {
+    return new TextDecoder().decode((0, sealed_box_1.openSealedBox)(fromB64(sealedBase64), keyPair.publicKey, keyPair.secretKey));
+}
+/** POST /v1/keys/revoke_leaked — revoke leaked Atlas credentials (no key needed). */
+async function revokeLeakedKeys(secrets, opts = {}) {
+    const f = opts.fetch ?? globalThis.fetch;
+    const res = await f(`${(opts.apiUrl ?? DEFAULT_API).replace(/\/+$/, '')}/v1/keys/revoke_leaked`, {
+        method: 'POST',
+        headers: { 'content-type': 'application/json', accept: 'application/json' },
+        body: JSON.stringify({ secrets, ...(opts.url ? { url: opts.url } : {}) }),
+    });
+    if (!res.ok)
+        throw new OAuthFlowError('request_failed', `revoke_leaked failed (${res.status}).`, res.status);
+    return (await res.json());
+}
+var sealed_box_2 = require("./sealed-box");
+Object.defineProperty(exports, "sealBox", { enumerable: true, get: function () { return sealed_box_2.sealBox; } });
+Object.defineProperty(exports, "openSealedBox", { enumerable: true, get: function () { return sealed_box_2.openSealedBox; } });
+//# sourceMappingURL=operator.js.map

package/dist/client/operator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator.js","sourceRoot":"","sources":["../../src/client/operator.ts"],"names":[],"mappings":";;;AA+EA,sDAKC;AAED,gDAKC;AAMD,8CAyBC;AAGD,sDAmBC;AAGD,4CAUC;AAGD,kDAGC;AAGD,4CAEC;AAGD,4CAYC;AAvLD,6CAAiF;AAEjF,MAAM,KAAK,GAAG,CAAC,CAAa,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACjE,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AA+ChF,MAAa,cAAe,SAAQ,KAAK;IAE5B;IAEA;IAHX,YACW,KAAa,EACtB,OAAe,EACN,MAAc;QAEvB,KAAK,CAAC,OAAO,CAAC,CAAC;QAJN,UAAK,GAAL,KAAK,CAAQ;QAEb,WAAM,GAAN,MAAM,CAAQ;QAGvB,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AATD,wCASC;AAOD,MAAM,WAAW,GAAG,2BAA2B,CAAC;AAEhD,KAAK,UAAU,IAAI,CAAC,SAAuB,EAAE,GAAW,EAAE,IAA4B;IACpF,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;QAC/B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE,MAAM,EAAE,kBAAkB,EAAE;QAC5F,IAAI,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;KAC3C,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAA4B,CAAC;IAC7E,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;AAC1C,CAAC;AAED,iFAAiF;AAC1E,KAAK,UAAU,qBAAqB,CAAC,OAAa,EAAE;IACzD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACzC,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACpI,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,cAAc,CAAC,gBAAgB,EAAE,2DAA2D,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACjI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0B,CAAC;AACrD,CAAC;AAEM,KAAK,UAAU,kBAAkB,CAAC,OAAkD,EAAE;IAC3F,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,6BAA6B,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACnJ,IAAI,GAAG,CAAC,OAAO,KAAK,GAAG;QAAE,MAAM,IAAI,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,iBAAiB,IAAI,8BAA8B,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9J,OAAO,EAAE,GAAI,GAAsC,EAAE,MAAM,EAAE,CAAC;AAChE,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,iBAAiB,CACrC,KAA8D,EAC9D,OAA+E,EAAE;IAEjF,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACpF,IAAI,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC;IACtD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,cAAc,CAAC,SAAS,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC;QAC3F,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE;YACrD,UAAU,EAAE,8CAA8C;YAC1D,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS;SAClC,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,OAAO,KAAK,GAAG;YAAE,OAAO,GAAoC,CAAC;QACrE,IAAI,GAAG,CAAC,KAAK,KAAK,uBAAuB;YAAE,SAAS;QACpD,IAAI,GAAG,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAC9B,QAAQ,IAAI,IAAI,CAAC;YACjB,SAAS;QACX,CAAC;QACD,MAAM,IAAI,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,iBAAiB,IAAI,iBAAiB,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IAC1H,CAAC;IACD,MAAM,IAAI,cAAc,CAAC,eAAe,EAAE,gDAAgD,EAAE,GAAG,CAAC,CAAC;AACnG,CAAC;AAED,mFAAmF;AAC5E,KAAK,UAAU,qBAAqB,CACzC,YAAoB,EACpB,MAAsD,EACtD,OAAa,EAAE;IAEf,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,iBAAiB,EAAE;QAC3H,UAAU,EAAE,iDAAiD;QAC7D,aAAa,EAAE,YAAY;QAC3B,kBAAkB,EAAE,+CAA+C;QACnE,QAAQ,EAAE,OAAO;QACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK;KAC3E,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,OAAO,KAAK,GAAG,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC3G,MAAM,GAAG,GAAG,GAAG,CAAC,iBAAiB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAA0B,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC;QAC9I,MAAM,IAAI,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,GAA2D,CAAC;AACrE,CAAC;AAED,4FAA4F;AACrF,KAAK,UAAU,gBAAgB,CACpC,QAAgB,EAChB,YAAoB,EACpB,OAAkC,EAAE;IAEpC,MAAM,IAAI,GAA2B,EAAE,UAAU,EAAE,oBAAoB,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;IAC5H,IAAI,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACxC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;IACnI,IAAI,GAAG,CAAC,OAAO,KAAK,GAAG;QAAE,MAAM,IAAI,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,iBAAiB,IAAI,uBAAuB,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IACvJ,OAAO,GAAoC,CAAC;AAC9C,CAAC;AAED,mFAAmF;AACnF,SAAgB,mBAAmB;IACjC,MAAM,IAAI,GAAG,IAAA,gCAAG,GAAE,CAAC;IACnB,OAAO,EAAE,GAAG,IAAI,EAAE,eAAe,EAAE,UAAU,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;AACzE,CAAC;AAED,oFAAoF;AACpF,SAAgB,gBAAgB,CAAC,YAAoB,EAAE,OAAyD;IAC9G,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAA,0BAAI,EAAC,OAAO,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;AACrG,CAAC;AAED,qFAAqF;AAC9E,KAAK,UAAU,gBAAgB,CACpC,OAAiB,EACjB,OAAgC,EAAE;IAElC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACzC,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,wBAAwB,EAAE;QAC/F,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE;QAC3E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;KAC1E,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,cAAc,CAAC,gBAAgB,EAAE,yBAAyB,GAAG,CAAC,MAAM,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7G,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA8G,CAAC;AACzI,CAAC;AACD,2CAAsD;AAA7C,qGAAA,OAAO,OAAA;AAAE,2GAAA,aAAa,OAAA"}

package/dist/client/platform.d.ts

@@ -1,3 +1,5 @@
+import { type ProvisioningFields, type ProvisioningInput, type ProvisioningMetadata } from './compliance';
+import type { KeyKind, StandardKey, Whoami } from './credentials';
 import { type AtlasRequestSettings, type RequestFn, type UnknownFieldsEvent } from './request';
 import type { ListPage } from './types';
 import type { BackchannelDeliveriesQuery, BackchannelLogoutDeliveryPage, BackchannelLogoutTest } from './oauth-clients';
@@ -13,6 +15,28 @@ export interface AtlasIdAppPreflight {
     checked_at: number;
     user_count: number;
     findings: PreflightFinding[];
+    /** The page origins the Sign in with Atlas button script ran on in the last 7 days. */
+    button_rendered_origins?: {
+        origin: string;
+        last_seen_at: number;
+        requests: number;
+    }[];
+    /** How the last 7 days' sign-ins started: the rendered button, the script API, One Tap, the no-script fallback, or unmarked. */
+    authorize_requests_7d?: {
+        button: number;
+        js: number;
+        fedcm: number;
+        fallback: number;
+        unmarked: number;
+    };
+    /** Origins of sign-ins that came through the no-script fallback link (`?atlasid_fallback=1`). */
+    fallback_origins?: {
+        origin: string;
+        last_seen_at: number;
+        requests: number;
+    }[];
+    /** Whether the app's homepage references the button script (null = could not check). */
+    homepage_includes_script?: boolean | null;
 }
 /**
  * The platform client: the platform-key (`psk_...`) surface for provisioning and
@@ -22,8 +46,14 @@ export interface AtlasIdAppPreflight {
  * platform key manages many apps, a secret key manages exactly one instance.
  */
 export interface AtlasPlatformClientConfig {
-    /** The platform key (`psk_...`). Sent as `Authorization: Bearer <key>`; never logged. */
+    /**
+     * The platform key (`atlas_live_psk_…` or legacy `psk_…`), or a one-hour
+     * platform-bound access token from `exchangeOperatorToken`. Sent as
+     * `Authorization: Bearer <key>`; never logged.
+     */
     platformKey: string;
+    /** Sealed secret delivery (`x25519:<public key>`); see AtlasClientConfig.secretRecipient. */
+    secretRecipient?: string;
     /** Base URL of the API, e.g. `https://api.atlasauth.net`. */
     apiUrl?: string;
     /** Injectable `fetch`, for tests and non-global-fetch runtimes. */
@@ -34,7 +64,7 @@ export interface AtlasPlatformClientConfig {
     onUnknownFields?: (event: UnknownFieldsEvent) => void;
 }
 /** An app (instance) a platform owns. Never carries a secret. */
-export interface PlatformApp {
+export interface PlatformApp extends ProvisioningFields {
     object: 'app';
     id: string;
     name: string;
@@ -86,12 +116,17 @@ export interface CreatePlatformAppBody {
     /** Default true: also provision a test-mode sibling instance. */
     create_development_sibling?: boolean;
     tags?: string[];
+    metadata?: ProvisioningMetadata;
+    /** A stable key of your own: a repeat create with it returns the existing app (200, no secret). */
+    external_ref?: string;
 }
 export interface UpdatePlatformAppBody {
     name?: string;
     /** Origin strings, or `{ origin, integration }` entries (`redirect` | `embedded` | `auto`). */
     allowed_origins?: AllowedOriginInput[];
     tags?: string[];
+    /** Replaces the provisioning metadata. */
+    metadata?: ProvisioningMetadata;
 }
 export interface ListPlatformAppsParams {
     /** Only apps carrying this tag. */
@@ -100,8 +135,10 @@ export interface ListPlatformAppsParams {
     archived?: boolean;
     /** `true`: include archived apps alongside active ones. */
     include_archived?: boolean;
+    /** Only apps whose provisioning metadata matches every pair. */
+    metadata?: ProvisioningMetadata;
 }
-export interface CreatePlatformInstanceBody {
+export interface CreatePlatformInstanceBody extends ProvisioningInput {
     environment?: 'production' | 'development';
     /** Origin strings, or `{ origin, integration }` entries (`redirect` | `embedded` | `auto`). */
     allowed_origins?: AllowedOriginInput[];
@@ -145,9 +182,10 @@ export interface RotateAtlasIdAppSecretBody {
     overlap_seconds?: number;
 }
 /** Metadata of a currently-valid secret key. Never the secret itself. */
-export interface PlatformSecretKey {
+export interface PlatformSecretKey extends ProvisioningFields {
     object: 'secret_key';
     id: string;
+    name?: string | null;
     prefix: string;
     created_at: number;
     expires_at?: number | null;
@@ -162,11 +200,70 @@ export interface PlatformAppTransfer {
 }
 export interface PlatformAppBulkDeleteResult {
     object: 'bulk_delete_result';
+    /** `disable` (ids) or `hard_delete` (a sandbox metadata selection). */
+    mode?: 'disable' | 'hard_delete';
+    dry_run?: boolean;
     results: Array<{
         id: string;
+        type?: string;
+        instance_id?: string;
         deleted: boolean;
         reason?: string;
     }>;
+    changes?: Array<{
+        section: string;
+        before: unknown;
+        after: unknown;
+    }>;
+}
+/** A sandbox teardown selection: must carry `sandbox: true`. */
+export interface SandboxTeardownBody {
+    metadata: ProvisioningMetadata;
+    dry_run?: boolean;
+}
+/** A named, tagged extra secret key for an app. */
+export interface CreatePlatformSecretKeyBody extends ProvisioningInput {
+    name?: string;
+    /** Any instance of the same app; default the app's own. */
+    instance_id?: string;
+}
+export interface CreatedPlatformSecretKey extends PlatformSecretKey {
+    app_id: string;
+    instance_id: string;
+    /** Present only on a fresh create (never on an idempotent replay). */
+    secret?: string;
+    note?: string;
+}
+export interface CloneConfigBody {
+    /** Default `development`. */
+    to_environment?: 'development' | 'production';
+    target_instance_id?: string;
+    /** Default auth_config, roles, redirect_urls. */
+    sections?: Array<'auth_config' | 'allowed_origins' | 'roles' | 'redirect_urls'>;
+    include_origins?: boolean;
+    dry_run?: boolean;
+}
+export interface CloneConfigResult {
+    object: 'clone_config_result' | 'dry_run';
+    source_instance_id: string;
+    target_instance_id: string | null;
+    to_environment: string;
+    created_target: boolean;
+    sections: string[];
+    excluded: Array<{
+        path: string;
+        reason: 'secret' | 'instance_specific';
+    }>;
+    never_copied: string[];
+    changes: Array<{
+        section: string;
+        before: unknown;
+        after: unknown;
+    }>;
+    target?: PlatformApp | null;
+    /** When a new instance was created for the clone: its secret key, shown once. */
+    secret?: string;
+    note?: string;
 }
 export interface AccountlessApp {
     object: 'accountless_app';
@@ -231,7 +328,7 @@ export interface AtlasIdAppBrandingInput {
     copy?: AtlasIdAppCopy;
 }
 /** A Sign in with Atlas app: an OpenID Connect client on the Atlas issuer. */
-export interface AtlasIdApp {
+export interface AtlasIdApp extends ProvisioningFields {
     object: 'atlas_id_app';
     id: string;
     client_id: string;
@@ -346,7 +443,7 @@ interface AtlasIdAppFields {
     allowed_scopes?: string[];
     branding?: AtlasIdAppBrandingInput | null;
 }
-export interface CreateAtlasIdAppBody extends AtlasIdAppFields {
+export interface CreateAtlasIdAppBody extends AtlasIdAppFields, ProvisioningInput {
     name: string;
     redirect_uris: string[];
     /** Default `confidential`. */
@@ -354,6 +451,8 @@ export interface CreateAtlasIdAppBody extends AtlasIdAppFields {
 }
 export interface UpdateAtlasIdAppBody extends AtlasIdAppFields {
     name?: string;
+    /** Replaces the provisioning metadata. */
+    metadata?: ProvisioningMetadata;
     redirect_uris?: string[];
     /**
      * Per-app webhook (public https): user.updated, user.deleted and grant.revoked for
@@ -361,7 +460,117 @@ export interface UpdateAtlasIdAppBody extends AtlasIdAppFields {
      */
     webhook_url?: string | null;
 }
+export interface AccountAuditRecord {
+    object: 'account_audit_log';
+    id: string;
+    account_id: string;
+    actor: {
+        type: string;
+        id: string | null;
+    };
+    action: string;
+    target: {
+        type: string | null;
+        id: string | null;
+    };
+    instance_id: string | null;
+    ip: string | null;
+    user_agent: string | null;
+    metadata: Record<string, unknown>;
+    created_at: number;
+}
+export interface AccountAuditStream {
+    object: 'account_audit_stream';
+    id: string;
+    url: string;
+    format: 'atlas' | 'cloudevents';
+    active: boolean;
+    has_secret: true;
+    cursor: string | null;
+    consecutive_failures: number;
+    failing_since: number | null;
+    next_attempt_at: number | null;
+    last_delivered_at: number | null;
+    last_error: string | null;
+    created_at: number;
+    updated_at: number;
+}
 declare function platformNamespaces(request: RequestFn): {
+    /** Introspect the platform key / token this client uses. */
+    whoami(): Promise<Whoami>;
+    /** Every credential on the account (incl. revoked), and minting/revoking them. */
+    keys: {
+        list(params?: {
+            kind?: KeyKind;
+            status?: StandardKey["status"];
+            instance_id?: string;
+        }): Promise<ListPage<StandardKey>>;
+        /** Scopes ⊆ the caller's; per-app grant scopes `atlas_id_apps:<app id>:grants:read|write` allowed. */
+        create(body: {
+            scopes: string[];
+            name?: string;
+            application_ids?: string[];
+            expires_at?: number | string;
+            ip_allowlist?: string[];
+            owner?: string;
+            key_format?: "atlas" | "legacy";
+        }): Promise<{
+            object: "platform_api_key";
+            id: string;
+            prefix: string;
+            scopes: string[];
+            secret?: string;
+            sealed_secret?: string;
+        }>;
+        update(id: string, body: {
+            name?: string | null;
+            owner?: string | null;
+            expires_at?: number | string | null;
+        }): Promise<{
+            object: "platform_api_key";
+            id: string;
+        }>;
+        revoke(id: string): Promise<{
+            object: "key";
+            id: string;
+            kind: KeyKind;
+            revoked: true;
+        }>;
+    };
+    /** The account audit log and its streams. */
+    audit: {
+        list(params?: {
+            limit?: number;
+            starting_after?: string;
+            action?: string;
+        }): Promise<ListPage<AccountAuditRecord>>;
+        streams: {
+            list(): Promise<ListPage<AccountAuditStream>>;
+            create(body: {
+                url: string;
+                format?: "atlas" | "cloudevents";
+            }): Promise<AccountAuditStream & {
+                secret?: string;
+                sealed_secret?: string;
+            }>;
+            update(id: string, body: {
+                url?: string;
+                format?: "atlas" | "cloudevents";
+                active?: boolean;
+            }): Promise<AccountAuditStream>;
+            delete(id: string): Promise<{
+                object: "account_audit_stream";
+                id: string;
+                deleted: true;
+            }>;
+            test(id: string): Promise<{
+                id: string;
+                ok: boolean;
+                status: number | null;
+                error?: string;
+            }>;
+        };
+    };
     apps: {
         /** Archived apps are hidden unless `include_archived` or `archived` is set. */
         list(params?: ListPlatformAppsParams): Promise<ListPage<PlatformApp>>;
@@ -377,7 +586,18 @@ declare function platformNamespaces(request: RequestFn): {
             note: string;
         }>;
         /** Disable up to 100 apps; ids you do not own are skipped as `not_found`. */
-        bulkDelete(ids: string[]): Promise<PlatformAppBulkDeleteResult>;
+        bulkDelete(ids: string[] | SandboxTeardownBody): Promise<PlatformAppBulkDeleteResult>;
+        /**
+         * Hard delete every sandbox-tagged app and resource of this platform
+         * (`{ sandbox: true }` must be in the selection). `dry_run` lists what would go.
+         */
+        sandboxTeardown(metadata?: ProvisioningMetadata, opts?: {
+            dryRun?: boolean;
+        }): Promise<PlatformAppBulkDeleteResult>;
+        /** Copy an app's configuration into its development (or another) instance, secrets excluded. */
+        cloneConfig(id: string, body?: CloneConfigBody, idempotencyKey?: string): Promise<CloneConfigResult>;
+        /** Mint an additional named, taggable secret key (shown once; `external_ref` makes it idempotent). */
+        createSecretKey(id: string, body?: CreatePlatformSecretKeyBody, idempotencyKey?: string): Promise<CreatedPlatformSecretKey>;
         /** Hide from the default listing. Does not disable the app. */
         archive(id: string): Promise<PlatformApp>;
         unarchive(id: string): Promise<PlatformApp>;
@@ -387,7 +607,9 @@ declare function platformNamespaces(request: RequestFn): {
          */
         rotateSecret(id: string, body?: RotatePlatformSecretBody, idempotencyKey?: string): Promise<PlatformAppSecretRotation>;
         /** Currently-valid secret keys (metadata only). */
-        secretKeys(id: string): Promise<ListPage<PlatformSecretKey>>;
+        secretKeys(id: string, params?: {
+            metadata?: ProvisioningMetadata;
+        }): Promise<ListPage<PlatformSecretKey>>;
         instances: {
             list(appId: string): Promise<ListPage<PlatformApp>>;
             /** Add an instance (e.g. development beside production); secret revealed once. */
@@ -415,7 +637,9 @@ declare function platformNamespaces(request: RequestFn): {
     };
     /** Sign in with Atlas apps registered to the platform's account. */
     atlasIdApps: {
-        list(): Promise<AtlasIdAppList>;
+        list(params?: {
+            metadata?: ProvisioningMetadata;
+        }): Promise<AtlasIdAppList>;
         /** Register an app. A confidential app's `client_secret` is returned exactly once. */
         create(body: CreateAtlasIdAppBody, idempotencyKey?: string): Promise<AtlasIdAppWithSecret>;
         get(id: string): Promise<AtlasIdApp>;

package/dist/client/platform.js

@@ -1,14 +1,59 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createAtlasPlatformClient = createAtlasPlatformClient;
+const compliance_1 = require("./compliance");
 const request_1 = require("./request");
 // ---- the client ----------------------------------------------------------------
 function platformNamespaces(request) {
     return {
+        /** Introspect the platform key / token this client uses. */
+        whoami() {
+            return request({ method: 'GET', path: '/v1/platform/whoami' });
+        },
+        /** Every credential on the account (incl. revoked), and minting/revoking them. */
+        keys: {
+            list(params = {}) {
+                return request({ method: 'GET', path: '/v1/platform/keys', query: { ...params } });
+            },
+            /** Scopes ⊆ the caller's; per-app grant scopes `atlas_id_apps:<app id>:grants:read|write` allowed. */
+            create(body) {
+                return request({ method: 'POST', path: '/v1/platform/keys', body });
+            },
+            update(id, body) {
+                return request({ method: 'PATCH', path: `/v1/platform/keys/${(0, request_1.enc)(id)}`, body });
+            },
+            revoke(id) {
+                return request({ method: 'POST', path: `/v1/platform/keys/${(0, request_1.enc)(id)}/revoke` });
+            },
+        },
+        /** The account audit log and its streams. */
+        audit: {
+            list(params = {}) {
+                return request({ method: 'GET', path: '/v1/platform/audit_logs', query: { ...params } });
+            },
+            streams: {
+                list() {
+                    return request({ method: 'GET', path: '/v1/platform/audit_streams' });
+                },
+                create(body) {
+                    return request({ method: 'POST', path: '/v1/platform/audit_streams', body });
+                },
+                update(id, body) {
+                    return request({ method: 'PATCH', path: `/v1/platform/audit_streams/${(0, request_1.enc)(id)}`, body });
+                },
+                delete(id) {
+                    return request({ method: 'DELETE', path: `/v1/platform/audit_streams/${(0, request_1.enc)(id)}` });
+                },
+                test(id) {
+                    return request({ method: 'POST', path: `/v1/platform/audit_streams/${(0, request_1.enc)(id)}/test` });
+                },
+            },
+        },
         apps: {
             /** Archived apps are hidden unless `include_archived` or `archived` is set. */
             list(params = {}) {
-                return request({ method: 'GET', path: '/v1/platform/apps', query: { ...params } });
+                const { metadata, ...rest } = params;
+                return request({ method: 'GET', path: '/v1/platform/apps', query: { ...rest, ...(0, compliance_1.metadataQuery)(metadata) } });
             },
             /** Provision an app; its secret key is revealed exactly once. */
             create(body = {}, idempotencyKey) {
@@ -26,7 +71,30 @@ function platformNamespaces(request) {
             },
             /** Disable up to 100 apps; ids you do not own are skipped as `not_found`. */
             bulkDelete(ids) {
-                return request({ method: 'POST', path: '/v1/platform/apps/bulk_delete', body: { ids } });
+                return request({
+                    method: 'POST',
+                    path: '/v1/platform/apps/bulk_delete',
+                    body: Array.isArray(ids) ? { ids } : ids,
+                });
+            },
+            /**
+             * Hard delete every sandbox-tagged app and resource of this platform
+             * (`{ sandbox: true }` must be in the selection). `dry_run` lists what would go.
+             */
+            sandboxTeardown(metadata = { sandbox: true }, opts = {}) {
+                return request({
+                    method: 'POST',
+                    path: '/v1/platform/apps/bulk_delete',
+                    body: { metadata, ...(opts.dryRun ? { dry_run: true } : {}) },
+                });
+            },
+            /** Copy an app's configuration into its development (or another) instance, secrets excluded. */
+            cloneConfig(id, body = {}, idempotencyKey) {
+                return request({ method: 'POST', path: `/v1/platform/apps/${(0, request_1.enc)(id)}/clone_config`, body, idempotencyKey });
+            },
+            /** Mint an additional named, taggable secret key (shown once; `external_ref` makes it idempotent). */
+            createSecretKey(id, body = {}, idempotencyKey) {
+                return request({ method: 'POST', path: `/v1/platform/apps/${(0, request_1.enc)(id)}/secret_keys`, body, idempotencyKey });
             },
             /** Hide from the default listing. Does not disable the app. */
             archive(id) {
@@ -48,8 +116,8 @@ function platformNamespaces(request) {
                 });
             },
             /** Currently-valid secret keys (metadata only). */
-            secretKeys(id) {
-                return request({ method: 'GET', path: `/v1/platform/apps/${(0, request_1.enc)(id)}/secret_keys` });
+            secretKeys(id, params = {}) {
+                return request({ method: 'GET', path: `/v1/platform/apps/${(0, request_1.enc)(id)}/secret_keys`, query: (0, compliance_1.metadataQuery)(params.metadata) });
             },
             instances: {
                 list(appId) {
@@ -120,8 +188,8 @@ function platformNamespaces(request) {
         },
         /** Sign in with Atlas apps registered to the platform's account. */
         atlasIdApps: {
-            list() {
-                return request({ method: 'GET', path: '/v1/platform/atlas_id_apps' });
+            list(params = {}) {
+                return request({ method: 'GET', path: '/v1/platform/atlas_id_apps', query: (0, compliance_1.metadataQuery)(params.metadata) });
             },
             /** Register an app. A confidential app's `client_secret` is returned exactly once. */
             create(body, idempotencyKey) {

package/dist/client/platform.js.map

@@ -1 +1 @@
-{"version":3,"file":"platform.js","sourceRoot":"","sources":["../../src/client/platform.ts"],"names":[],"mappings":";;AAwsBA,8DAWC;AAntBD,uCAMmB;AAoZnB,mFAAmF;AAEnF,SAAS,kBAAkB,CAAC,OAAkB;IAC5C,OAAO;QACL,IAAI,EAAE;YACJ,+EAA+E;YAC/E,IAAI,CAAC,SAAiC,EAAE;gBACtC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;YACrF,CAAC;YACD,iEAAiE;YACjE,MAAM,CAAC,OAA8B,EAAE,EAAE,cAAuB;gBAC9D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,GAAG,CAAC,EAAU;gBACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,CAAC,EAAU,EAAE,IAA2B;gBAC5C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAClF,CAAC;YACD,4EAA4E;YAC5E,MAAM,CACJ,EAAU;gBAEV,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7E,CAAC;YACD,6EAA6E;YAC7E,UAAU,CAAC,GAAa;gBACtB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,+BAA+B,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,+DAA+D;YAC/D,OAAO,CAAC,EAAU;gBAChB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,SAAS,CAAC,EAAU;gBAClB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;YACrF,CAAC;YACD;;;eAGG;YACH,YAAY,CACV,EAAU,EACV,OAAiC,EAAE,EACnC,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,gBAAgB;oBAClD,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,mDAAmD;YACnD,UAAU,CAAC,EAAU;gBACnB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,SAAS,EAAE;gBACT,IAAI,CAAC,KAAa;oBAChB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;gBACvF,CAAC;gBACD,kFAAkF;gBAClF,MAAM,CACJ,KAAa,EACb,OAAmC,EAAE,EACrC,cAAuB;oBAEvB,OAAO,OAAO,CAAC;wBACb,MAAM,EAAE,MAAM;wBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,YAAY;wBACjD,IAAI;wBACJ,cAAc;qBACf,CAAC,CAAC;gBACL,CAAC;gBACD;;;;;mBAKG;gBACH,YAAY,CACV,KAAa,EACb,UAAkB,EAClB,oBAAwD,EACxD,cAAuB;oBAEvB,MAAM,SAAS,GAAG,OAAO,oBAAoB,KAAK,QAAQ,CAAC;oBAC3D,OAAO,OAAO,CAAC;wBACb,MAAM,EAAE,MAAM;wBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,cAAc,IAAA,aAAG,EAAC,UAAU,CAAC,gBAAgB;wBAClF,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB;wBAClD,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,cAAc;qBAClE,CAAC,CAAC;gBACL,CAAC;aACF;YACD,yEAAyE;YACzE,QAAQ,CAAC,EAAU,EAAE,cAAuB;gBAC1C,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,WAAW;oBAC7C,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,sDAAsD;YACtD,cAAc,CACZ,aAAqB,EACrB,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,mCAAmC;oBACzC,IAAI,EAAE,EAAE,cAAc,EAAE,aAAa,EAAE;oBACvC,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,+EAA+E;YAC/E,KAAK,CAAC,UAAkB,EAAE,cAAuB;gBAC/C,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,yBAAyB;oBAC/B,IAAI,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE;oBACjC,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;SACF;QACD,eAAe,EAAE;YACf,8FAA8F;YAC9F,MAAM,CAAC,OAAiC,EAAE,EAAE,cAAuB;gBACjE,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,+BAA+B;oBACrC,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;SACF;QACD,oEAAoE;QACpE,WAAW,EAAE;YACX,IAAI;gBACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC;YACxE,CAAC;YACD,sFAAsF;YACtF,MAAM,CAAC,IAA0B,EAAE,cAAuB;gBACxD,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,4BAA4B;oBAClC,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,GAAG,CAAC,EAAU;gBACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,0DAA0D;YAC1D,MAAM,CAAC,EAAU,EAAE,IAA0B;gBAC3C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,+CAA+C;YAC/C,MAAM,CAAC,EAAU;gBACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACtF,CAAC;YACD;;;eAGG;YACH,YAAY,CAAC,EAAU,EAAE,IAAiC;gBACxD,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,gBAAgB;oBAC3D,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD,gEAAgE;YAChE,yBAAyB,CACvB,EAAU,EACV,QAAoC,EAAE;gBAEtC,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,yBAAyB;oBACpE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE;iBACpB,CAAC,CAAC;YACL,CAAC;YACD,kFAAkF;YAClF,qBAAqB,CAAC,EAAU;gBAC9B,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,0BAA0B;iBACtE,CAAC,CAAC;YACL,CAAC;YACD,mGAAmG;YACnG,SAAS,CAAC,EAAU;gBAClB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;YAC7F,CAAC;YACD;;;eAGG;YACH,SAAS,CAAC,EAAU,EAAE,KAAa;gBACjC,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,QAAQ;oBACnD,KAAK,EAAE,EAAE,KAAK,EAAE;iBACjB,CAAC,CAAC;YACL,CAAC;YACD,oGAAoG;YACpG,WAAW,CAAC,EAAU,EAAE,OAAe;gBACrC,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,WAAW,IAAA,aAAG,EAAC,OAAO,CAAC,EAAE;iBACrE,CAAC,CAAC;YACL,CAAC;YACD,sFAAsF;YACtF,UAAU,CAAC,EAAU,EAAE,IAAuB;gBAC5C,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,cAAc;oBACzD,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD;;;;eAIG;YACH,mBAAmB,CAAC,EAAU,EAAE,IAAiC;gBAC/D,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,wBAAwB;oBACnE,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD,yEAAyE;YACzE,aAAa,CAAC,MAAmB;gBAC/B,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,2CAA2C;oBACjD,IAAI,EAAE,EAAE,MAAM,EAAE;iBACjB,CAAC,CAAC;YACL,CAAC;SACF;QACD,2EAA2E;QAC3E,gBAAgB,EAAE;YAChB,yBAAyB;YACzB,GAAG;gBACD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iCAAiC,EAAE,CAAC,CAAC;YAC7E,CAAC;YACD,4EAA4E;YAC5E,GAAG,CAAC,IAA6B;gBAC/B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,6CAA6C;YAC7C,MAAM,CAAC,IAA+B;gBACpC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE,CAAC,CAAC;YACrF,CAAC;YACD,MAAM;gBACJ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,iCAAiC,EAAE,CAAC,CAAC;YAChF,CAAC;YACD,mDAAmD;YACnD,MAAM;gBACJ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,wCAAwC,EAAE,CAAC,CAAC;YACrF,CAAC;SACF;QACD,uEAAuE;QACvE,eAAe,EAAE;YACf,IAAI,CAAC,SAAoC,EAAE;gBAMzC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,+BAA+B,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;YACjG,CAAC;SACF;QACD,yFAAyF;QACzF,YAAY,EAAE;YACZ,MAAM,CAAC,IAAqB,EAAE,UAAoC,EAAE;gBAClE,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,4BAA4B;oBAClC,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE;oBAC7B,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE;iBACpD,CAAC,CAAC;YACL,CAAC;YACD,IAAI;gBACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC;YACxE,CAAC;YACD,+DAA+D;YAC/D,MAAM,CAAC,OAAe;gBACpB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3F,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAUD,SAAgB,yBAAyB,CAAC,MAAiC;IACzE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,OAAO,GAAG,IAAA,4BAAkB,EAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC/D,OAAO;QACL,GAAG,kBAAkB,CAAC,OAAO,CAAC;QAC9B,WAAW,CAAC,SAA+B;YACzC,OAAO,yBAAyB,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;QAChE,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"platform.js","sourceRoot":"","sources":["../../src/client/platform.ts"],"names":[],"mappings":";;AAi4BA,8DAWC;AA54BD,6CAAyH;AAEzH,uCAMmB;AAggBnB,mFAAmF;AAEnF,SAAS,kBAAkB,CAAC,OAAkB;IAC5C,OAAO;QACL,4DAA4D;QAC5D,MAAM;YACJ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,kFAAkF;QAClF,IAAI,EAAE;YACJ,IAAI,CAAC,SAAmF,EAAE;gBACxF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;YACrF,CAAC;YACD,sGAAsG;YACtG,MAAM,CAAC,IAQN;gBACC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;YACtE,CAAC;YACD,MAAM,CAAC,EAAU,EAAE,IAA0F;gBAC3G,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAClF,CAAC;YACD,MAAM,CAAC,EAAU;gBACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;YAClF,CAAC;SACF;QACD,6CAA6C;QAC7C,KAAK,EAAE;YACL,IAAI,CAAC,SAAuE,EAAE;gBAC5E,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,OAAO,EAAE;gBACP,IAAI;oBACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC;gBACxE,CAAC;gBACD,MAAM,CAAC,IAAuD;oBAC5D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/E,CAAC;gBACD,MAAM,CAAC,EAAU,EAAE,IAA0E;oBAC3F,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3F,CAAC;gBACD,MAAM,CAAC,EAAU;oBACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtF,CAAC;gBACD,IAAI,CAAC,EAAU;oBACb,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;gBACzF,CAAC;aACF;SACF;QACD,IAAI,EAAE;YACJ,+EAA+E;YAC/E,IAAI,CAAC,SAAiC,EAAE;gBACtC,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;gBACrC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,IAAA,0BAAa,EAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/G,CAAC;YACD,iEAAiE;YACjE,MAAM,CAAC,OAA8B,EAAE,EAAE,cAAuB;gBAC9D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,GAAG,CAAC,EAAU;gBACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,CAAC,EAAU,EAAE,IAA2B;gBAC5C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAClF,CAAC;YACD,4EAA4E;YAC5E,MAAM,CACJ,EAAU;gBAEV,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7E,CAAC;YACD,6EAA6E;YAC7E,UAAU,CAAC,GAAmC;gBAC5C,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,+BAA+B;oBACrC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG;iBACzC,CAAC,CAAC;YACL,CAAC;YACD;;;eAGG;YACH,eAAe,CAAC,WAAiC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,OAA6B,EAAE;gBACjG,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,+BAA+B;oBACrC,IAAI,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;iBAC9D,CAAC,CAAC;YACL,CAAC;YACD,gGAAgG;YAChG,WAAW,CAAC,EAAU,EAAE,OAAwB,EAAE,EAAE,cAAuB;gBACzE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,eAAe,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;YAC9G,CAAC;YACD,sGAAsG;YACtG,eAAe,CAAC,EAAU,EAAE,OAAoC,EAAE,EAAE,cAAuB;gBACzF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;YAC7G,CAAC;YACD,+DAA+D;YAC/D,OAAO,CAAC,EAAU;gBAChB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,SAAS,CAAC,EAAU;gBAClB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;YACrF,CAAC;YACD;;;eAGG;YACH,YAAY,CACV,EAAU,EACV,OAAiC,EAAE,EACnC,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,gBAAgB;oBAClD,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,mDAAmD;YACnD,UAAU,CAAC,EAAU,EAAE,SAA8C,EAAE;gBACrE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,cAAc,EAAE,KAAK,EAAE,IAAA,0BAAa,EAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC7H,CAAC;YACD,SAAS,EAAE;gBACT,IAAI,CAAC,KAAa;oBAChB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;gBACvF,CAAC;gBACD,kFAAkF;gBAClF,MAAM,CACJ,KAAa,EACb,OAAmC,EAAE,EACrC,cAAuB;oBAEvB,OAAO,OAAO,CAAC;wBACb,MAAM,EAAE,MAAM;wBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,YAAY;wBACjD,IAAI;wBACJ,cAAc;qBACf,CAAC,CAAC;gBACL,CAAC;gBACD;;;;;mBAKG;gBACH,YAAY,CACV,KAAa,EACb,UAAkB,EAClB,oBAAwD,EACxD,cAAuB;oBAEvB,MAAM,SAAS,GAAG,OAAO,oBAAoB,KAAK,QAAQ,CAAC;oBAC3D,OAAO,OAAO,CAAC;wBACb,MAAM,EAAE,MAAM;wBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,cAAc,IAAA,aAAG,EAAC,UAAU,CAAC,gBAAgB;wBAClF,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB;wBAClD,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,cAAc;qBAClE,CAAC,CAAC;gBACL,CAAC;aACF;YACD,yEAAyE;YACzE,QAAQ,CAAC,EAAU,EAAE,cAAuB;gBAC1C,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,WAAW;oBAC7C,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,sDAAsD;YACtD,cAAc,CACZ,aAAqB,EACrB,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,mCAAmC;oBACzC,IAAI,EAAE,EAAE,cAAc,EAAE,aAAa,EAAE;oBACvC,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,+EAA+E;YAC/E,KAAK,CAAC,UAAkB,EAAE,cAAuB;gBAC/C,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,yBAAyB;oBAC/B,IAAI,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE;oBACjC,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;SACF;QACD,eAAe,EAAE;YACf,8FAA8F;YAC9F,MAAM,CAAC,OAAiC,EAAE,EAAE,cAAuB;gBACjE,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,+BAA+B;oBACrC,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;SACF;QACD,oEAAoE;QACpE,WAAW,EAAE;YACX,IAAI,CAAC,SAA8C,EAAE;gBACnD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,KAAK,EAAE,IAAA,0BAAa,EAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC/G,CAAC;YACD,sFAAsF;YACtF,MAAM,CAAC,IAA0B,EAAE,cAAuB;gBACxD,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,4BAA4B;oBAClC,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,GAAG,CAAC,EAAU;gBACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,0DAA0D;YAC1D,MAAM,CAAC,EAAU,EAAE,IAA0B;gBAC3C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,+CAA+C;YAC/C,MAAM,CAAC,EAAU;gBACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACtF,CAAC;YACD;;;eAGG;YACH,YAAY,CAAC,EAAU,EAAE,IAAiC;gBACxD,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,gBAAgB;oBAC3D,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD,gEAAgE;YAChE,yBAAyB,CACvB,EAAU,EACV,QAAoC,EAAE;gBAEtC,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,yBAAyB;oBACpE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE;iBACpB,CAAC,CAAC;YACL,CAAC;YACD,kFAAkF;YAClF,qBAAqB,CAAC,EAAU;gBAC9B,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,0BAA0B;iBACtE,CAAC,CAAC;YACL,CAAC;YACD,mGAAmG;YACnG,SAAS,CAAC,EAAU;gBAClB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;YAC7F,CAAC;YACD;;;eAGG;YACH,SAAS,CAAC,EAAU,EAAE,KAAa;gBACjC,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,QAAQ;oBACnD,KAAK,EAAE,EAAE,KAAK,EAAE;iBACjB,CAAC,CAAC;YACL,CAAC;YACD,oGAAoG;YACpG,WAAW,CAAC,EAAU,EAAE,OAAe;gBACrC,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,WAAW,IAAA,aAAG,EAAC,OAAO,CAAC,EAAE;iBACrE,CAAC,CAAC;YACL,CAAC;YACD,sFAAsF;YACtF,UAAU,CAAC,EAAU,EAAE,IAAuB;gBAC5C,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,cAAc;oBACzD,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD;;;;eAIG;YACH,mBAAmB,CAAC,EAAU,EAAE,IAAiC;gBAC/D,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,wBAAwB;oBACnE,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD,yEAAyE;YACzE,aAAa,CAAC,MAAmB;gBAC/B,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,2CAA2C;oBACjD,IAAI,EAAE,EAAE,MAAM,EAAE;iBACjB,CAAC,CAAC;YACL,CAAC;SACF;QACD,2EAA2E;QAC3E,gBAAgB,EAAE;YAChB,yBAAyB;YACzB,GAAG;gBACD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iCAAiC,EAAE,CAAC,CAAC;YAC7E,CAAC;YACD,4EAA4E;YAC5E,GAAG,CAAC,IAA6B;gBAC/B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,6CAA6C;YAC7C,MAAM,CAAC,IAA+B;gBACpC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE,CAAC,CAAC;YACrF,CAAC;YACD,MAAM;gBACJ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,iCAAiC,EAAE,CAAC,CAAC;YAChF,CAAC;YACD,mDAAmD;YACnD,MAAM;gBACJ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,wCAAwC,EAAE,CAAC,CAAC;YACrF,CAAC;SACF;QACD,uEAAuE;QACvE,eAAe,EAAE;YACf,IAAI,CAAC,SAAoC,EAAE;gBAMzC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,+BAA+B,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;YACjG,CAAC;SACF;QACD,yFAAyF;QACzF,YAAY,EAAE;YACZ,MAAM,CAAC,IAAqB,EAAE,UAAoC,EAAE;gBAClE,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,4BAA4B;oBAClC,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE;oBAC7B,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE;iBACpD,CAAC,CAAC;YACL,CAAC;YACD,IAAI;gBACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC;YACxE,CAAC;YACD,+DAA+D;YAC/D,MAAM,CAAC,OAAe;gBACpB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3F,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAUD,SAAgB,yBAAyB,CAAC,MAAiC;IACzE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,OAAO,GAAG,IAAA,4BAAkB,EAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC/D,OAAO;QACL,GAAG,kBAAkB,CAAC,OAAO,CAAC;QAC9B,WAAW,CAAC,SAA+B;YACzC,OAAO,yBAAyB,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;QAChE,CAAC;KACF,CAAC;AACJ,CAAC"}