@atlasauth/backend 0.18.0 → 0.19.0

package/dist/client/platform.d.ts

@@ -1,3 +1,5 @@
+import { type ProvisioningFields, type ProvisioningInput, type ProvisioningMetadata } from './compliance';
+import type { KeyKind, StandardKey, Whoami } from './credentials';
 import { type AtlasRequestSettings, type RequestFn, type UnknownFieldsEvent } from './request';
 import type { ListPage } from './types';
 import type { BackchannelDeliveriesQuery, BackchannelLogoutDeliveryPage, BackchannelLogoutTest } from './oauth-clients';
@@ -13,6 +15,28 @@ export interface AtlasIdAppPreflight {
     checked_at: number;
     user_count: number;
     findings: PreflightFinding[];
+    /** The page origins the Sign in with Atlas button script ran on in the last 7 days. */
+    button_rendered_origins?: {
+        origin: string;
+        last_seen_at: number;
+        requests: number;
+    }[];
+    /** How the last 7 days' sign-ins started: the rendered button, the script API, One Tap, the no-script fallback, or unmarked. */
+    authorize_requests_7d?: {
+        button: number;
+        js: number;
+        fedcm: number;
+        fallback: number;
+        unmarked: number;
+    };
+    /** Origins of sign-ins that came through the no-script fallback link (`?atlasid_fallback=1`). */
+    fallback_origins?: {
+        origin: string;
+        last_seen_at: number;
+        requests: number;
+    }[];
+    /** Whether the app's homepage references the button script (null = could not check). */
+    homepage_includes_script?: boolean | null;
 }
 /**
  * The platform client: the platform-key (`psk_...`) surface for provisioning and
@@ -22,8 +46,14 @@ export interface AtlasIdAppPreflight {
  * platform key manages many apps, a secret key manages exactly one instance.
  */
 export interface AtlasPlatformClientConfig {
-    /** The platform key (`psk_...`). Sent as `Authorization: Bearer <key>`; never logged. */
+    /**
+     * The platform key (`atlas_live_psk_…` or legacy `psk_…`), or a one-hour
+     * platform-bound access token from `exchangeOperatorToken`. Sent as
+     * `Authorization: Bearer <key>`; never logged.
+     */
     platformKey: string;
+    /** Sealed secret delivery (`x25519:<public key>`); see AtlasClientConfig.secretRecipient. */
+    secretRecipient?: string;
     /** Base URL of the API, e.g. `https://api.atlasauth.net`. */
     apiUrl?: string;
     /** Injectable `fetch`, for tests and non-global-fetch runtimes. */
@@ -34,7 +64,7 @@ export interface AtlasPlatformClientConfig {
     onUnknownFields?: (event: UnknownFieldsEvent) => void;
 }
 /** An app (instance) a platform owns. Never carries a secret. */
-export interface PlatformApp {
+export interface PlatformApp extends ProvisioningFields {
     object: 'app';
     id: string;
     name: string;
@@ -86,12 +116,17 @@ export interface CreatePlatformAppBody {
     /** Default true: also provision a test-mode sibling instance. */
     create_development_sibling?: boolean;
     tags?: string[];
+    metadata?: ProvisioningMetadata;
+    /** A stable key of your own: a repeat create with it returns the existing app (200, no secret). */
+    external_ref?: string;
 }
 export interface UpdatePlatformAppBody {
     name?: string;
     /** Origin strings, or `{ origin, integration }` entries (`redirect` | `embedded` | `auto`). */
     allowed_origins?: AllowedOriginInput[];
     tags?: string[];
+    /** Replaces the provisioning metadata. */
+    metadata?: ProvisioningMetadata;
 }
 export interface ListPlatformAppsParams {
     /** Only apps carrying this tag. */
@@ -100,8 +135,10 @@ export interface ListPlatformAppsParams {
     archived?: boolean;
     /** `true`: include archived apps alongside active ones. */
     include_archived?: boolean;
+    /** Only apps whose provisioning metadata matches every pair. */
+    metadata?: ProvisioningMetadata;
 }
-export interface CreatePlatformInstanceBody {
+export interface CreatePlatformInstanceBody extends ProvisioningInput {
     environment?: 'production' | 'development';
     /** Origin strings, or `{ origin, integration }` entries (`redirect` | `embedded` | `auto`). */
     allowed_origins?: AllowedOriginInput[];
@@ -145,9 +182,10 @@ export interface RotateAtlasIdAppSecretBody {
     overlap_seconds?: number;
 }
 /** Metadata of a currently-valid secret key. Never the secret itself. */
-export interface PlatformSecretKey {
+export interface PlatformSecretKey extends ProvisioningFields {
     object: 'secret_key';
     id: string;
+    name?: string | null;
     prefix: string;
     created_at: number;
     expires_at?: number | null;
@@ -162,11 +200,70 @@ export interface PlatformAppTransfer {
 }
 export interface PlatformAppBulkDeleteResult {
     object: 'bulk_delete_result';
+    /** `disable` (ids) or `hard_delete` (a sandbox metadata selection). */
+    mode?: 'disable' | 'hard_delete';
+    dry_run?: boolean;
     results: Array<{
         id: string;
+        type?: string;
+        instance_id?: string;
         deleted: boolean;
         reason?: string;
     }>;
+    changes?: Array<{
+        section: string;
+        before: unknown;
+        after: unknown;
+    }>;
+}
+/** A sandbox teardown selection: must carry `sandbox: true`. */
+export interface SandboxTeardownBody {
+    metadata: ProvisioningMetadata;
+    dry_run?: boolean;
+}
+/** A named, tagged extra secret key for an app. */
+export interface CreatePlatformSecretKeyBody extends ProvisioningInput {
+    name?: string;
+    /** Any instance of the same app; default the app's own. */
+    instance_id?: string;
+}
+export interface CreatedPlatformSecretKey extends PlatformSecretKey {
+    app_id: string;
+    instance_id: string;
+    /** Present only on a fresh create (never on an idempotent replay). */
+    secret?: string;
+    note?: string;
+}
+export interface CloneConfigBody {
+    /** Default `development`. */
+    to_environment?: 'development' | 'production';
+    target_instance_id?: string;
+    /** Default auth_config, roles, redirect_urls. */
+    sections?: Array<'auth_config' | 'allowed_origins' | 'roles' | 'redirect_urls'>;
+    include_origins?: boolean;
+    dry_run?: boolean;
+}
+export interface CloneConfigResult {
+    object: 'clone_config_result' | 'dry_run';
+    source_instance_id: string;
+    target_instance_id: string | null;
+    to_environment: string;
+    created_target: boolean;
+    sections: string[];
+    excluded: Array<{
+        path: string;
+        reason: 'secret' | 'instance_specific';
+    }>;
+    never_copied: string[];
+    changes: Array<{
+        section: string;
+        before: unknown;
+        after: unknown;
+    }>;
+    target?: PlatformApp | null;
+    /** When a new instance was created for the clone: its secret key, shown once. */
+    secret?: string;
+    note?: string;
 }
 export interface AccountlessApp {
     object: 'accountless_app';
@@ -231,7 +328,7 @@ export interface AtlasIdAppBrandingInput {
     copy?: AtlasIdAppCopy;
 }
 /** A Sign in with Atlas app: an OpenID Connect client on the Atlas issuer. */
-export interface AtlasIdApp {
+export interface AtlasIdApp extends ProvisioningFields {
     object: 'atlas_id_app';
     id: string;
     client_id: string;
@@ -346,7 +443,7 @@ interface AtlasIdAppFields {
     allowed_scopes?: string[];
     branding?: AtlasIdAppBrandingInput | null;
 }
-export interface CreateAtlasIdAppBody extends AtlasIdAppFields {
+export interface CreateAtlasIdAppBody extends AtlasIdAppFields, ProvisioningInput {
     name: string;
     redirect_uris: string[];
     /** Default `confidential`. */
@@ -354,6 +451,8 @@ export interface CreateAtlasIdAppBody extends AtlasIdAppFields {
 }
 export interface UpdateAtlasIdAppBody extends AtlasIdAppFields {
     name?: string;
+    /** Replaces the provisioning metadata. */
+    metadata?: ProvisioningMetadata;
     redirect_uris?: string[];
     /**
      * Per-app webhook (public https): user.updated, user.deleted and grant.revoked for
@@ -361,7 +460,117 @@ export interface UpdateAtlasIdAppBody extends AtlasIdAppFields {
      */
     webhook_url?: string | null;
 }
+export interface AccountAuditRecord {
+    object: 'account_audit_log';
+    id: string;
+    account_id: string;
+    actor: {
+        type: string;
+        id: string | null;
+    };
+    action: string;
+    target: {
+        type: string | null;
+        id: string | null;
+    };
+    instance_id: string | null;
+    ip: string | null;
+    user_agent: string | null;
+    metadata: Record<string, unknown>;
+    created_at: number;
+}
+export interface AccountAuditStream {
+    object: 'account_audit_stream';
+    id: string;
+    url: string;
+    format: 'atlas' | 'cloudevents';
+    active: boolean;
+    has_secret: true;
+    cursor: string | null;
+    consecutive_failures: number;
+    failing_since: number | null;
+    next_attempt_at: number | null;
+    last_delivered_at: number | null;
+    last_error: string | null;
+    created_at: number;
+    updated_at: number;
+}
 declare function platformNamespaces(request: RequestFn): {
+    /** Introspect the platform key / token this client uses. */
+    whoami(): Promise<Whoami>;
+    /** Every credential on the account (incl. revoked), and minting/revoking them. */
+    keys: {
+        list(params?: {
+            kind?: KeyKind;
+            status?: StandardKey["status"];
+            instance_id?: string;
+        }): Promise<ListPage<StandardKey>>;
+        /** Scopes ⊆ the caller's; per-app grant scopes `atlas_id_apps:<app id>:grants:read|write` allowed. */
+        create(body: {
+            scopes: string[];
+            name?: string;
+            application_ids?: string[];
+            expires_at?: number | string;
+            ip_allowlist?: string[];
+            owner?: string;
+            key_format?: "atlas" | "legacy";
+        }): Promise<{
+            object: "platform_api_key";
+            id: string;
+            prefix: string;
+            scopes: string[];
+            secret?: string;
+            sealed_secret?: string;
+        }>;
+        update(id: string, body: {
+            name?: string | null;
+            owner?: string | null;
+            expires_at?: number | string | null;
+        }): Promise<{
+            object: "platform_api_key";
+            id: string;
+        }>;
+        revoke(id: string): Promise<{
+            object: "key";
+            id: string;
+            kind: KeyKind;
+            revoked: true;
+        }>;
+    };
+    /** The account audit log and its streams. */
+    audit: {
+        list(params?: {
+            limit?: number;
+            starting_after?: string;
+            action?: string;
+        }): Promise<ListPage<AccountAuditRecord>>;
+        streams: {
+            list(): Promise<ListPage<AccountAuditStream>>;
+            create(body: {
+                url: string;
+                format?: "atlas" | "cloudevents";
+            }): Promise<AccountAuditStream & {
+                secret?: string;
+                sealed_secret?: string;
+            }>;
+            update(id: string, body: {
+                url?: string;
+                format?: "atlas" | "cloudevents";
+                active?: boolean;
+            }): Promise<AccountAuditStream>;
+            delete(id: string): Promise<{
+                object: "account_audit_stream";
+                id: string;
+                deleted: true;
+            }>;
+            test(id: string): Promise<{
+                id: string;
+                ok: boolean;
+                status: number | null;
+                error?: string;
+            }>;
+        };
+    };
     apps: {
         /** Archived apps are hidden unless `include_archived` or `archived` is set. */
         list(params?: ListPlatformAppsParams): Promise<ListPage<PlatformApp>>;
@@ -377,7 +586,18 @@ declare function platformNamespaces(request: RequestFn): {
             note: string;
         }>;
         /** Disable up to 100 apps; ids you do not own are skipped as `not_found`. */
-        bulkDelete(ids: string[]): Promise<PlatformAppBulkDeleteResult>;
+        bulkDelete(ids: string[] | SandboxTeardownBody): Promise<PlatformAppBulkDeleteResult>;
+        /**
+         * Hard delete every sandbox-tagged app and resource of this platform
+         * (`{ sandbox: true }` must be in the selection). `dry_run` lists what would go.
+         */
+        sandboxTeardown(metadata?: ProvisioningMetadata, opts?: {
+            dryRun?: boolean;
+        }): Promise<PlatformAppBulkDeleteResult>;
+        /** Copy an app's configuration into its development (or another) instance, secrets excluded. */
+        cloneConfig(id: string, body?: CloneConfigBody, idempotencyKey?: string): Promise<CloneConfigResult>;
+        /** Mint an additional named, taggable secret key (shown once; `external_ref` makes it idempotent). */
+        createSecretKey(id: string, body?: CreatePlatformSecretKeyBody, idempotencyKey?: string): Promise<CreatedPlatformSecretKey>;
         /** Hide from the default listing. Does not disable the app. */
         archive(id: string): Promise<PlatformApp>;
         unarchive(id: string): Promise<PlatformApp>;
@@ -387,7 +607,9 @@ declare function platformNamespaces(request: RequestFn): {
          */
         rotateSecret(id: string, body?: RotatePlatformSecretBody, idempotencyKey?: string): Promise<PlatformAppSecretRotation>;
         /** Currently-valid secret keys (metadata only). */
-        secretKeys(id: string): Promise<ListPage<PlatformSecretKey>>;
+        secretKeys(id: string, params?: {
+            metadata?: ProvisioningMetadata;
+        }): Promise<ListPage<PlatformSecretKey>>;
         instances: {
             list(appId: string): Promise<ListPage<PlatformApp>>;
             /** Add an instance (e.g. development beside production); secret revealed once. */
@@ -415,7 +637,9 @@ declare function platformNamespaces(request: RequestFn): {
     };
     /** Sign in with Atlas apps registered to the platform's account. */
     atlasIdApps: {
-        list(): Promise<AtlasIdAppList>;
+        list(params?: {
+            metadata?: ProvisioningMetadata;
+        }): Promise<AtlasIdAppList>;
         /** Register an app. A confidential app's `client_secret` is returned exactly once. */
         create(body: CreateAtlasIdAppBody, idempotencyKey?: string): Promise<AtlasIdAppWithSecret>;
         get(id: string): Promise<AtlasIdApp>;

package/dist/client/platform.js

@@ -1,14 +1,59 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createAtlasPlatformClient = createAtlasPlatformClient;
+const compliance_1 = require("./compliance");
 const request_1 = require("./request");
 // ---- the client ----------------------------------------------------------------
 function platformNamespaces(request) {
     return {
+        /** Introspect the platform key / token this client uses. */
+        whoami() {
+            return request({ method: 'GET', path: '/v1/platform/whoami' });
+        },
+        /** Every credential on the account (incl. revoked), and minting/revoking them. */
+        keys: {
+            list(params = {}) {
+                return request({ method: 'GET', path: '/v1/platform/keys', query: { ...params } });
+            },
+            /** Scopes ⊆ the caller's; per-app grant scopes `atlas_id_apps:<app id>:grants:read|write` allowed. */
+            create(body) {
+                return request({ method: 'POST', path: '/v1/platform/keys', body });
+            },
+            update(id, body) {
+                return request({ method: 'PATCH', path: `/v1/platform/keys/${(0, request_1.enc)(id)}`, body });
+            },
+            revoke(id) {
+                return request({ method: 'POST', path: `/v1/platform/keys/${(0, request_1.enc)(id)}/revoke` });
+            },
+        },
+        /** The account audit log and its streams. */
+        audit: {
+            list(params = {}) {
+                return request({ method: 'GET', path: '/v1/platform/audit_logs', query: { ...params } });
+            },
+            streams: {
+                list() {
+                    return request({ method: 'GET', path: '/v1/platform/audit_streams' });
+                },
+                create(body) {
+                    return request({ method: 'POST', path: '/v1/platform/audit_streams', body });
+                },
+                update(id, body) {
+                    return request({ method: 'PATCH', path: `/v1/platform/audit_streams/${(0, request_1.enc)(id)}`, body });
+                },
+                delete(id) {
+                    return request({ method: 'DELETE', path: `/v1/platform/audit_streams/${(0, request_1.enc)(id)}` });
+                },
+                test(id) {
+                    return request({ method: 'POST', path: `/v1/platform/audit_streams/${(0, request_1.enc)(id)}/test` });
+                },
+            },
+        },
         apps: {
             /** Archived apps are hidden unless `include_archived` or `archived` is set. */
             list(params = {}) {
-                return request({ method: 'GET', path: '/v1/platform/apps', query: { ...params } });
+                const { metadata, ...rest } = params;
+                return request({ method: 'GET', path: '/v1/platform/apps', query: { ...rest, ...(0, compliance_1.metadataQuery)(metadata) } });
             },
             /** Provision an app; its secret key is revealed exactly once. */
             create(body = {}, idempotencyKey) {
@@ -26,7 +71,30 @@ function platformNamespaces(request) {
             },
             /** Disable up to 100 apps; ids you do not own are skipped as `not_found`. */
             bulkDelete(ids) {
-                return request({ method: 'POST', path: '/v1/platform/apps/bulk_delete', body: { ids } });
+                return request({
+                    method: 'POST',
+                    path: '/v1/platform/apps/bulk_delete',
+                    body: Array.isArray(ids) ? { ids } : ids,
+                });
+            },
+            /**
+             * Hard delete every sandbox-tagged app and resource of this platform
+             * (`{ sandbox: true }` must be in the selection). `dry_run` lists what would go.
+             */
+            sandboxTeardown(metadata = { sandbox: true }, opts = {}) {
+                return request({
+                    method: 'POST',
+                    path: '/v1/platform/apps/bulk_delete',
+                    body: { metadata, ...(opts.dryRun ? { dry_run: true } : {}) },
+                });
+            },
+            /** Copy an app's configuration into its development (or another) instance, secrets excluded. */
+            cloneConfig(id, body = {}, idempotencyKey) {
+                return request({ method: 'POST', path: `/v1/platform/apps/${(0, request_1.enc)(id)}/clone_config`, body, idempotencyKey });
+            },
+            /** Mint an additional named, taggable secret key (shown once; `external_ref` makes it idempotent). */
+            createSecretKey(id, body = {}, idempotencyKey) {
+                return request({ method: 'POST', path: `/v1/platform/apps/${(0, request_1.enc)(id)}/secret_keys`, body, idempotencyKey });
             },
             /** Hide from the default listing. Does not disable the app. */
             archive(id) {
@@ -48,8 +116,8 @@ function platformNamespaces(request) {
                 });
             },
             /** Currently-valid secret keys (metadata only). */
-            secretKeys(id) {
-                return request({ method: 'GET', path: `/v1/platform/apps/${(0, request_1.enc)(id)}/secret_keys` });
+            secretKeys(id, params = {}) {
+                return request({ method: 'GET', path: `/v1/platform/apps/${(0, request_1.enc)(id)}/secret_keys`, query: (0, compliance_1.metadataQuery)(params.metadata) });
             },
             instances: {
                 list(appId) {
@@ -120,8 +188,8 @@ function platformNamespaces(request) {
         },
         /** Sign in with Atlas apps registered to the platform's account. */
         atlasIdApps: {
-            list() {
-                return request({ method: 'GET', path: '/v1/platform/atlas_id_apps' });
+            list(params = {}) {
+                return request({ method: 'GET', path: '/v1/platform/atlas_id_apps', query: (0, compliance_1.metadataQuery)(params.metadata) });
             },
             /** Register an app. A confidential app's `client_secret` is returned exactly once. */
             create(body, idempotencyKey) {

package/dist/client/platform.js.map

@@ -1 +1 @@
-{"version":3,"file":"platform.js","sourceRoot":"","sources":["../../src/client/platform.ts"],"names":[],"mappings":";;AAwsBA,8DAWC;AAntBD,uCAMmB;AAoZnB,mFAAmF;AAEnF,SAAS,kBAAkB,CAAC,OAAkB;IAC5C,OAAO;QACL,IAAI,EAAE;YACJ,+EAA+E;YAC/E,IAAI,CAAC,SAAiC,EAAE;gBACtC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;YACrF,CAAC;YACD,iEAAiE;YACjE,MAAM,CAAC,OAA8B,EAAE,EAAE,cAAuB;gBAC9D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,GAAG,CAAC,EAAU;gBACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,CAAC,EAAU,EAAE,IAA2B;gBAC5C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAClF,CAAC;YACD,4EAA4E;YAC5E,MAAM,CACJ,EAAU;gBAEV,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7E,CAAC;YACD,6EAA6E;YAC7E,UAAU,CAAC,GAAa;gBACtB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,+BAA+B,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,+DAA+D;YAC/D,OAAO,CAAC,EAAU;gBAChB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,SAAS,CAAC,EAAU;gBAClB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;YACrF,CAAC;YACD;;;eAGG;YACH,YAAY,CACV,EAAU,EACV,OAAiC,EAAE,EACnC,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,gBAAgB;oBAClD,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,mDAAmD;YACnD,UAAU,CAAC,EAAU;gBACnB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,SAAS,EAAE;gBACT,IAAI,CAAC,KAAa;oBAChB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;gBACvF,CAAC;gBACD,kFAAkF;gBAClF,MAAM,CACJ,KAAa,EACb,OAAmC,EAAE,EACrC,cAAuB;oBAEvB,OAAO,OAAO,CAAC;wBACb,MAAM,EAAE,MAAM;wBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,YAAY;wBACjD,IAAI;wBACJ,cAAc;qBACf,CAAC,CAAC;gBACL,CAAC;gBACD;;;;;mBAKG;gBACH,YAAY,CACV,KAAa,EACb,UAAkB,EAClB,oBAAwD,EACxD,cAAuB;oBAEvB,MAAM,SAAS,GAAG,OAAO,oBAAoB,KAAK,QAAQ,CAAC;oBAC3D,OAAO,OAAO,CAAC;wBACb,MAAM,EAAE,MAAM;wBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,cAAc,IAAA,aAAG,EAAC,UAAU,CAAC,gBAAgB;wBAClF,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB;wBAClD,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,cAAc;qBAClE,CAAC,CAAC;gBACL,CAAC;aACF;YACD,yEAAyE;YACzE,QAAQ,CAAC,EAAU,EAAE,cAAuB;gBAC1C,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,WAAW;oBAC7C,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,sDAAsD;YACtD,cAAc,CACZ,aAAqB,EACrB,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,mCAAmC;oBACzC,IAAI,EAAE,EAAE,cAAc,EAAE,aAAa,EAAE;oBACvC,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,+EAA+E;YAC/E,KAAK,CAAC,UAAkB,EAAE,cAAuB;gBAC/C,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,yBAAyB;oBAC/B,IAAI,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE;oBACjC,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;SACF;QACD,eAAe,EAAE;YACf,8FAA8F;YAC9F,MAAM,CAAC,OAAiC,EAAE,EAAE,cAAuB;gBACjE,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,+BAA+B;oBACrC,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;SACF;QACD,oEAAoE;QACpE,WAAW,EAAE;YACX,IAAI;gBACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC;YACxE,CAAC;YACD,sFAAsF;YACtF,MAAM,CAAC,IAA0B,EAAE,cAAuB;gBACxD,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,4BAA4B;oBAClC,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,GAAG,CAAC,EAAU;gBACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,0DAA0D;YAC1D,MAAM,CAAC,EAAU,EAAE,IAA0B;gBAC3C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,+CAA+C;YAC/C,MAAM,CAAC,EAAU;gBACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACtF,CAAC;YACD;;;eAGG;YACH,YAAY,CAAC,EAAU,EAAE,IAAiC;gBACxD,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,gBAAgB;oBAC3D,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD,gEAAgE;YAChE,yBAAyB,CACvB,EAAU,EACV,QAAoC,EAAE;gBAEtC,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,yBAAyB;oBACpE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE;iBACpB,CAAC,CAAC;YACL,CAAC;YACD,kFAAkF;YAClF,qBAAqB,CAAC,EAAU;gBAC9B,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,0BAA0B;iBACtE,CAAC,CAAC;YACL,CAAC;YACD,mGAAmG;YACnG,SAAS,CAAC,EAAU;gBAClB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;YAC7F,CAAC;YACD;;;eAGG;YACH,SAAS,CAAC,EAAU,EAAE,KAAa;gBACjC,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,QAAQ;oBACnD,KAAK,EAAE,EAAE,KAAK,EAAE;iBACjB,CAAC,CAAC;YACL,CAAC;YACD,oGAAoG;YACpG,WAAW,CAAC,EAAU,EAAE,OAAe;gBACrC,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,WAAW,IAAA,aAAG,EAAC,OAAO,CAAC,EAAE;iBACrE,CAAC,CAAC;YACL,CAAC;YACD,sFAAsF;YACtF,UAAU,CAAC,EAAU,EAAE,IAAuB;gBAC5C,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,cAAc;oBACzD,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD;;;;eAIG;YACH,mBAAmB,CAAC,EAAU,EAAE,IAAiC;gBAC/D,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,wBAAwB;oBACnE,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD,yEAAyE;YACzE,aAAa,CAAC,MAAmB;gBAC/B,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,2CAA2C;oBACjD,IAAI,EAAE,EAAE,MAAM,EAAE;iBACjB,CAAC,CAAC;YACL,CAAC;SACF;QACD,2EAA2E;QAC3E,gBAAgB,EAAE;YAChB,yBAAyB;YACzB,GAAG;gBACD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iCAAiC,EAAE,CAAC,CAAC;YAC7E,CAAC;YACD,4EAA4E;YAC5E,GAAG,CAAC,IAA6B;gBAC/B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,6CAA6C;YAC7C,MAAM,CAAC,IAA+B;gBACpC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE,CAAC,CAAC;YACrF,CAAC;YACD,MAAM;gBACJ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,iCAAiC,EAAE,CAAC,CAAC;YAChF,CAAC;YACD,mDAAmD;YACnD,MAAM;gBACJ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,wCAAwC,EAAE,CAAC,CAAC;YACrF,CAAC;SACF;QACD,uEAAuE;QACvE,eAAe,EAAE;YACf,IAAI,CAAC,SAAoC,EAAE;gBAMzC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,+BAA+B,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;YACjG,CAAC;SACF;QACD,yFAAyF;QACzF,YAAY,EAAE;YACZ,MAAM,CAAC,IAAqB,EAAE,UAAoC,EAAE;gBAClE,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,4BAA4B;oBAClC,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE;oBAC7B,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE;iBACpD,CAAC,CAAC;YACL,CAAC;YACD,IAAI;gBACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC;YACxE,CAAC;YACD,+DAA+D;YAC/D,MAAM,CAAC,OAAe;gBACpB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3F,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAUD,SAAgB,yBAAyB,CAAC,MAAiC;IACzE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,OAAO,GAAG,IAAA,4BAAkB,EAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC/D,OAAO;QACL,GAAG,kBAAkB,CAAC,OAAO,CAAC;QAC9B,WAAW,CAAC,SAA+B;YACzC,OAAO,yBAAyB,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;QAChE,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"platform.js","sourceRoot":"","sources":["../../src/client/platform.ts"],"names":[],"mappings":";;AAi4BA,8DAWC;AA54BD,6CAAyH;AAEzH,uCAMmB;AAggBnB,mFAAmF;AAEnF,SAAS,kBAAkB,CAAC,OAAkB;IAC5C,OAAO;QACL,4DAA4D;QAC5D,MAAM;YACJ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,kFAAkF;QAClF,IAAI,EAAE;YACJ,IAAI,CAAC,SAAmF,EAAE;gBACxF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;YACrF,CAAC;YACD,sGAAsG;YACtG,MAAM,CAAC,IAQN;gBACC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;YACtE,CAAC;YACD,MAAM,CAAC,EAAU,EAAE,IAA0F;gBAC3G,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAClF,CAAC;YACD,MAAM,CAAC,EAAU;gBACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;YAClF,CAAC;SACF;QACD,6CAA6C;QAC7C,KAAK,EAAE;YACL,IAAI,CAAC,SAAuE,EAAE;gBAC5E,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,OAAO,EAAE;gBACP,IAAI;oBACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC;gBACxE,CAAC;gBACD,MAAM,CAAC,IAAuD;oBAC5D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/E,CAAC;gBACD,MAAM,CAAC,EAAU,EAAE,IAA0E;oBAC3F,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3F,CAAC;gBACD,MAAM,CAAC,EAAU;oBACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtF,CAAC;gBACD,IAAI,CAAC,EAAU;oBACb,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;gBACzF,CAAC;aACF;SACF;QACD,IAAI,EAAE;YACJ,+EAA+E;YAC/E,IAAI,CAAC,SAAiC,EAAE;gBACtC,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;gBACrC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,IAAA,0BAAa,EAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/G,CAAC;YACD,iEAAiE;YACjE,MAAM,CAAC,OAA8B,EAAE,EAAE,cAAuB;gBAC9D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,GAAG,CAAC,EAAU;gBACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,CAAC,EAAU,EAAE,IAA2B;gBAC5C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAClF,CAAC;YACD,4EAA4E;YAC5E,MAAM,CACJ,EAAU;gBAEV,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7E,CAAC;YACD,6EAA6E;YAC7E,UAAU,CAAC,GAAmC;gBAC5C,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,+BAA+B;oBACrC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG;iBACzC,CAAC,CAAC;YACL,CAAC;YACD;;;eAGG;YACH,eAAe,CAAC,WAAiC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,OAA6B,EAAE;gBACjG,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,+BAA+B;oBACrC,IAAI,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;iBAC9D,CAAC,CAAC;YACL,CAAC;YACD,gGAAgG;YAChG,WAAW,CAAC,EAAU,EAAE,OAAwB,EAAE,EAAE,cAAuB;gBACzE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,eAAe,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;YAC9G,CAAC;YACD,sGAAsG;YACtG,eAAe,CAAC,EAAU,EAAE,OAAoC,EAAE,EAAE,cAAuB;gBACzF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;YAC7G,CAAC;YACD,+DAA+D;YAC/D,OAAO,CAAC,EAAU;gBAChB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,SAAS,CAAC,EAAU;gBAClB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;YACrF,CAAC;YACD;;;eAGG;YACH,YAAY,CACV,EAAU,EACV,OAAiC,EAAE,EACnC,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,gBAAgB;oBAClD,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,mDAAmD;YACnD,UAAU,CAAC,EAAU,EAAE,SAA8C,EAAE;gBACrE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,cAAc,EAAE,KAAK,EAAE,IAAA,0BAAa,EAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC7H,CAAC;YACD,SAAS,EAAE;gBACT,IAAI,CAAC,KAAa;oBAChB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;gBACvF,CAAC;gBACD,kFAAkF;gBAClF,MAAM,CACJ,KAAa,EACb,OAAmC,EAAE,EACrC,cAAuB;oBAEvB,OAAO,OAAO,CAAC;wBACb,MAAM,EAAE,MAAM;wBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,YAAY;wBACjD,IAAI;wBACJ,cAAc;qBACf,CAAC,CAAC;gBACL,CAAC;gBACD;;;;;mBAKG;gBACH,YAAY,CACV,KAAa,EACb,UAAkB,EAClB,oBAAwD,EACxD,cAAuB;oBAEvB,MAAM,SAAS,GAAG,OAAO,oBAAoB,KAAK,QAAQ,CAAC;oBAC3D,OAAO,OAAO,CAAC;wBACb,MAAM,EAAE,MAAM;wBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,KAAK,CAAC,cAAc,IAAA,aAAG,EAAC,UAAU,CAAC,gBAAgB;wBAClF,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB;wBAClD,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,cAAc;qBAClE,CAAC,CAAC;gBACL,CAAC;aACF;YACD,yEAAyE;YACzE,QAAQ,CAAC,EAAU,EAAE,cAAuB;gBAC1C,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,qBAAqB,IAAA,aAAG,EAAC,EAAE,CAAC,WAAW;oBAC7C,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,sDAAsD;YACtD,cAAc,CACZ,aAAqB,EACrB,cAAuB;gBAEvB,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,mCAAmC;oBACzC,IAAI,EAAE,EAAE,cAAc,EAAE,aAAa,EAAE;oBACvC,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,+EAA+E;YAC/E,KAAK,CAAC,UAAkB,EAAE,cAAuB;gBAC/C,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,yBAAyB;oBAC/B,IAAI,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE;oBACjC,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;SACF;QACD,eAAe,EAAE;YACf,8FAA8F;YAC9F,MAAM,CAAC,OAAiC,EAAE,EAAE,cAAuB;gBACjE,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,+BAA+B;oBACrC,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;SACF;QACD,oEAAoE;QACpE,WAAW,EAAE;YACX,IAAI,CAAC,SAA8C,EAAE;gBACnD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,KAAK,EAAE,IAAA,0BAAa,EAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC/G,CAAC;YACD,sFAAsF;YACtF,MAAM,CAAC,IAA0B,EAAE,cAAuB;gBACxD,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,4BAA4B;oBAClC,IAAI;oBACJ,cAAc;iBACf,CAAC,CAAC;YACL,CAAC;YACD,GAAG,CAAC,EAAU;gBACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,0DAA0D;YAC1D,MAAM,CAAC,EAAU,EAAE,IAA0B;gBAC3C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,+CAA+C;YAC/C,MAAM,CAAC,EAAU;gBACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACtF,CAAC;YACD;;;eAGG;YACH,YAAY,CAAC,EAAU,EAAE,IAAiC;gBACxD,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,gBAAgB;oBAC3D,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD,gEAAgE;YAChE,yBAAyB,CACvB,EAAU,EACV,QAAoC,EAAE;gBAEtC,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,yBAAyB;oBACpE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE;iBACpB,CAAC,CAAC;YACL,CAAC;YACD,kFAAkF;YAClF,qBAAqB,CAAC,EAAU;gBAC9B,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,0BAA0B;iBACtE,CAAC,CAAC;YACL,CAAC;YACD,mGAAmG;YACnG,SAAS,CAAC,EAAU;gBAClB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;YAC7F,CAAC;YACD;;;eAGG;YACH,SAAS,CAAC,EAAU,EAAE,KAAa;gBACjC,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,QAAQ;oBACnD,KAAK,EAAE,EAAE,KAAK,EAAE;iBACjB,CAAC,CAAC;YACL,CAAC;YACD,oGAAoG;YACpG,WAAW,CAAC,EAAU,EAAE,OAAe;gBACrC,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,WAAW,IAAA,aAAG,EAAC,OAAO,CAAC,EAAE;iBACrE,CAAC,CAAC;YACL,CAAC;YACD,sFAAsF;YACtF,UAAU,CAAC,EAAU,EAAE,IAAuB;gBAC5C,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,cAAc;oBACzD,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD;;;;eAIG;YACH,mBAAmB,CAAC,EAAU,EAAE,IAAiC;gBAC/D,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,EAAE,CAAC,wBAAwB;oBACnE,IAAI;iBACL,CAAC,CAAC;YACL,CAAC;YACD,yEAAyE;YACzE,aAAa,CAAC,MAAmB;gBAC/B,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,2CAA2C;oBACjD,IAAI,EAAE,EAAE,MAAM,EAAE;iBACjB,CAAC,CAAC;YACL,CAAC;SACF;QACD,2EAA2E;QAC3E,gBAAgB,EAAE;YAChB,yBAAyB;YACzB,GAAG;gBACD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iCAAiC,EAAE,CAAC,CAAC;YAC7E,CAAC;YACD,4EAA4E;YAC5E,GAAG,CAAC,IAA6B;gBAC/B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,6CAA6C;YAC7C,MAAM,CAAC,IAA+B;gBACpC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE,CAAC,CAAC;YACrF,CAAC;YACD,MAAM;gBACJ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,iCAAiC,EAAE,CAAC,CAAC;YAChF,CAAC;YACD,mDAAmD;YACnD,MAAM;gBACJ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,wCAAwC,EAAE,CAAC,CAAC;YACrF,CAAC;SACF;QACD,uEAAuE;QACvE,eAAe,EAAE;YACf,IAAI,CAAC,SAAoC,EAAE;gBAMzC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,+BAA+B,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;YACjG,CAAC;SACF;QACD,yFAAyF;QACzF,YAAY,EAAE;YACZ,MAAM,CAAC,IAAqB,EAAE,UAAoC,EAAE;gBAClE,OAAO,OAAO,CAAC;oBACb,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,4BAA4B;oBAClC,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE;oBAC7B,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE;iBACpD,CAAC,CAAC;YACL,CAAC;YACD,IAAI;gBACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC;YACxE,CAAC;YACD,+DAA+D;YAC/D,MAAM,CAAC,OAAe;gBACpB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,8BAA8B,IAAA,aAAG,EAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3F,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAUD,SAAgB,yBAAyB,CAAC,MAAiC;IACzE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,OAAO,GAAG,IAAA,4BAAkB,EAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC/D,OAAO;QACL,GAAG,kBAAkB,CAAC,OAAO,CAAC;QAC9B,WAAW,CAAC,SAA+B;YACzC,OAAO,yBAAyB,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;QAChE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/client/privacy.d.ts

@@ -0,0 +1,127 @@
+import { type RequestFn } from './request';
+/**
+ * The data-rights executor protocol (v2) — the routes any DSAR orchestrator
+ * calls to find a person and carry out a request against their identity data
+ * (needs a key with `privacy:execute`) — and the instance's own data-rights
+ * orchestrator, where Atlas opens a case when an account deletion is scheduled
+ * (needs `instance:read` / `instance:write`).
+ */
+export type PrivacyCanonicalType = 'access' | 'deletion' | 'closure' | 'restriction' | 'rectification';
+export type PrivacyRequestStatus = 'pending' | 'scheduled' | 'processing' | 'completed' | 'completed_with_retention' | 'rejected' | 'no_match' | 'cancelled';
+export interface PrivacySubject {
+    iss?: string;
+    sub?: string;
+    ext?: string;
+    principal?: string;
+}
+export interface PrivacyLookupResult {
+    object: 'privacy_lookup';
+    status: 'found' | 'no_match';
+    subjectId: string | null;
+    matchedBy: 'atlas.sub' | 'atlas.ext' | 'email' | 'email_unverified' | null;
+    detail: string | null;
+    principal?: string;
+}
+export interface PrivacyRequest {
+    object: 'privacy_request';
+    id: string;
+    type: PrivacyCanonicalType;
+    canonicalType: PrivacyCanonicalType;
+    requestedType: string;
+    status: PrivacyRequestStatus;
+    subjectId: string;
+    caseId: string | null;
+    executeAfter: string | null;
+    eta: string | null;
+    detail: string | null;
+    retention: Array<{
+        category: string;
+        basis: string;
+        until: string;
+    }>;
+    steps: Array<{
+        name: string;
+        status: string;
+        reason?: string;
+        at?: number;
+    }>;
+    trace: string | null;
+    createdAt: string;
+    updatedAt: string;
+    completedAt: string | null;
+    /** On `getRequest` once done. */
+    result?: unknown;
+}
+export interface CreatePrivacyRequestBody {
+    subjectId: string;
+    type: PrivacyCanonicalType | 'export' | 'erasure' | 'erase';
+    caseId: string;
+    /** ISO 8601 or epoch ms: nothing is erased before it. */
+    executeAfter?: string | number;
+    reason?: string;
+}
+export interface PrivacyOrchestrator {
+    object: 'privacy_orchestrator';
+    configured: boolean;
+    enabled: boolean;
+    provider: string | null;
+    name: string | null;
+    case_url: string | null;
+    cancel_url: string | null;
+    auth_header: string;
+    auth_scheme: string;
+    api_key_set: boolean;
+    signing_secret_set: boolean;
+    use_partner_link: boolean;
+    open_closure_cases: boolean;
+    completion_webhook: Record<string, unknown> | null;
+    last_case_at: number | null;
+    last_error: string | null;
+    last_error_at: number | null;
+    presets: Array<Record<string, unknown>>;
+    /** Only on the write that minted it. */
+    signing_secret?: string;
+    /** Only on the write that created the completion endpoint. */
+    completion_webhook_secret?: string;
+}
+export interface PrivacyOrchestratorInput {
+    /** A preset id (`cookiemunch`, `custom`) or your own lower-case id. */
+    provider?: string;
+    name?: string;
+    enabled?: boolean;
+    case_url?: string | null;
+    /** Must contain `{id}`. */
+    cancel_url?: string | null;
+    auth_header?: string;
+    auth_scheme?: 'bearer' | 'raw';
+    api_key?: string | null;
+    /** Call through the partner link the orchestrator granted Atlas (partner id = provider). */
+    use_partner_link?: boolean;
+    open_closure_cases?: boolean;
+    sign_requests?: boolean;
+    completion_webhook_url?: string | null;
+}
+export declare function privacyResource(request: RequestFn): {
+    /** What this executor speaks (public). */
+    discover(): Promise<Record<string, unknown>>;
+    /** A ready-made orchestrator connection profile, e.g. `cookiemunch` (public). */
+    preset(id: string): Promise<Record<string, unknown>>;
+    /** Find a person: `atlas.sub` alone when present, then `atlas.ext`, then emails. */
+    lookup(body: {
+        emails?: string[];
+        atlas?: PrivacySubject;
+    }): Promise<PrivacyLookupResult>;
+    /** Open a request (or get the existing one for the same case). */
+    createRequest(body: CreatePrivacyRequestBody, idempotencyKey?: string): Promise<PrivacyRequest>;
+    getRequest(id: string): Promise<PrivacyRequest>;
+    /** Cancel before it runs: nothing is erased, the account stays. */
+    cancelRequest(id: string, idempotencyKey?: string): Promise<PrivacyRequest>;
+    orchestrator: {
+        get(): Promise<PrivacyOrchestrator>;
+        /** Connect or update; new secrets come back once. */
+        set(body: PrivacyOrchestratorInput): Promise<PrivacyOrchestrator>;
+        delete(): Promise<PrivacyOrchestrator & {
+            deleted: boolean;
+        }>;
+    };
+};