@atlasauth/backend 0.26.0 → 0.27.1

package/dist/client/agent-platform.d.ts

@@ -0,0 +1,294 @@
+import { type RequestFn } from './request';
+import type { ListPage } from './types';
+/** An action over a connection: a typed provider operation. */
+export interface ConnectionAction {
+    object: 'connection_action';
+    provider: string;
+    name: string;
+    description: string;
+    input_schema: Record<string, unknown>;
+    method: string;
+    mutating: boolean;
+    scopes: string[];
+    source: 'first_party' | 'custom';
+}
+export interface ConnectionActionResult {
+    object: 'connection_action_result';
+    action: string;
+    connection_id: string;
+    ok: boolean;
+    status: number | null;
+    data: unknown;
+    error: string | null;
+    truncated: boolean;
+    attempts: number;
+    dry_run?: Record<string, unknown>;
+}
+/** A custom action definition: data only (input schema, request template, response mapping). */
+export interface ConnectionActionDefinition {
+    description: string;
+    input?: Record<string, unknown>;
+    request: {
+        method: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
+        base_url: string;
+        path: string;
+        query?: Record<string, string>;
+        body?: unknown;
+        headers?: Record<string, string>;
+    };
+    response?: {
+        path?: string;
+        ok_field?: string;
+        error_field?: string;
+    };
+    scopes?: string[];
+    paginate?: Record<string, unknown>;
+    mutating?: boolean;
+}
+export interface ConnectionTrigger {
+    object: 'connection_trigger';
+    id: string;
+    connection_id: string;
+    event: string;
+    mode: 'webhook' | 'poll';
+    filter: Record<string, string>;
+    target_url: string | null;
+    status: 'active' | 'paused' | 'failed';
+    provider_registered: boolean;
+    ingress_url: string | null;
+    poll: Record<string, unknown> | null;
+    next_poll_at: number | null;
+    last_error: string | null;
+    last_fired_at: number | null;
+    fired_count: number;
+    /** Shown once on creation of a webhook trigger. */
+    forward_secret?: string;
+    created_at: number;
+}
+export interface CreateConnectionTriggerBody {
+    event: string;
+    mode?: 'webhook' | 'poll';
+    filter?: Record<string, string>;
+    target_url?: string;
+    scheme?: string;
+    signing_secret?: string;
+    options?: Record<string, string>;
+    poll?: {
+        action: string;
+        input?: Record<string, unknown>;
+        items_path?: string;
+        id_field: string;
+        interval_seconds?: number;
+    };
+}
+/** Typed actions over connections, provider event triggers, scoped relay tokens and usage records. */
+export declare function connectionActionsResource(request: RequestFn): {
+    catalog: {
+        list(query?: {
+            provider?: string;
+        }): Promise<ListPage<ConnectionAction>>;
+        get(provider: string, name: string): Promise<ConnectionAction>;
+        /** Define or replace a custom action (data, never code). */
+        define(provider: string, name: string, body: ConnectionActionDefinition): Promise<ConnectionAction>;
+        delete(provider: string, name: string): Promise<void>;
+    };
+    /** The actions available on one connection. */
+    list(connectionId: string): Promise<ListPage<ConnectionAction>>;
+    run(connectionId: string, name: string, body?: {
+        input?: Record<string, unknown>;
+        dry_run?: boolean;
+        all_pages?: boolean;
+        redirect_url?: string;
+        connect_user_id?: string;
+    }): Promise<ConnectionActionResult>;
+    triggers: {
+        list(connectionId: string): Promise<ListPage<ConnectionTrigger>>;
+        create(connectionId: string, body: CreateConnectionTriggerBody): Promise<ConnectionTrigger>;
+        get(connectionId: string, triggerId: string): Promise<ConnectionTrigger>;
+        setStatus(connectionId: string, triggerId: string, status: "active" | "paused"): Promise<ConnectionTrigger>;
+        delete(connectionId: string, triggerId: string): Promise<{
+            object: "connection_trigger";
+            id: string;
+            deleted: true;
+            provider_unregistered: boolean | null;
+        }>;
+    };
+    /** A signed credential for one connection that only works through the relay, for listed methods and URL prefixes. */
+    mintScopedToken(connectionId: string, body: {
+        url_prefixes: string[];
+        methods?: string[];
+        ttl_seconds?: number;
+    }): Promise<{
+        object: "connection_scoped_token";
+        connection_id: string;
+        token: string;
+        expires_at: number;
+        methods: string[];
+        url_prefixes: string[];
+    }>;
+    /** Calls through connections, agent connection use and gateway calls, counted from the audit trail. */
+    usage(query?: {
+        from?: string | number;
+        to?: string | number;
+        group_by?: "action" | "day" | "agent" | "connection";
+    }): Promise<{
+        object: "list";
+        from: number;
+        to: number;
+        group_by: string;
+        data: Array<{
+            object: "connection_usage";
+            key: string | null;
+            calls: number;
+        }>;
+    }>;
+};
+export interface AgentLifecycle {
+    object: 'agent_lifecycle';
+    agent_id: string;
+    sponsor_user_id: string | null;
+    backup_sponsor_user_id: string | null;
+    expires_at: number | null;
+    renewed_at: number | null;
+    renewal_count: number;
+}
+export interface AgentAccessReview {
+    object: 'agent_access_review';
+    id: string;
+    name: string;
+    status: 'open' | 'closed';
+    due_at: number | null;
+    created_at: number;
+    closed_at: number | null;
+    item_count?: number;
+}
+export interface AgentAccessReviewItem {
+    object: 'agent_access_review_item';
+    id: string;
+    review_id: string;
+    agent_id: string;
+    kind: string;
+    resource: string;
+    reviewer_user_id: string | null;
+    decision: 'pending' | 'certified' | 'revoked';
+    decided_by: string | null;
+    decided_at: number | null;
+    comment: string | null;
+    revoked_applied: boolean;
+}
+/** Agent governance: sponsors, expiry and renewal, the activity log, and access reviews of agents' grants. */
+export declare function agentGovernanceResource(request: RequestFn): {
+    lifecycle: {
+        get(agentId: string): Promise<AgentLifecycle>;
+        set(agentId: string, body: {
+            sponsor_user_id?: string | null;
+            backup_sponsor_user_id?: string | null;
+            expires_at?: number | string | null;
+        }): Promise<AgentLifecycle>;
+        renew(agentId: string, extendDays: number): Promise<AgentLifecycle>;
+    };
+    activity(agentId: string, query?: {
+        since?: string | number;
+        before?: string | number;
+        limit?: number;
+    }): Promise<ListPage<{
+        object: "agent_activity";
+        id: string;
+        action: string;
+        target_type: string | null;
+        target_id: string | null;
+        metadata: Record<string, unknown>;
+        at: number;
+    }>>;
+    reviews: {
+        list(): Promise<ListPage<AgentAccessReview>>;
+        start(body: {
+            name: string;
+            due_at?: number | string | null;
+            tier?: "trusted" | "untrusted";
+            kind?: "tool" | "connection";
+        }): Promise<AgentAccessReview>;
+        get(id: string, query?: {
+            decision?: "pending" | "certified" | "revoked";
+            reviewer_user_id?: string;
+        }): Promise<AgentAccessReview & {
+            items: AgentAccessReviewItem[];
+        }>;
+        decide(id: string, itemId: string, body: {
+            decision: "certified" | "revoked";
+            comment?: string;
+            decided_by?: string;
+        }): Promise<AgentAccessReviewItem>;
+        close(id: string): Promise<AgentAccessReview>;
+    };
+};
+export interface McpRegistryEntry {
+    object: 'mcp_registry_entry';
+    id: string;
+    name: string;
+    url: string;
+    description: string | null;
+    status: 'pending' | 'approved' | 'rejected';
+    requested_by: string | null;
+    decided_by: string | null;
+    decided_at: number | null;
+    created_at: number;
+}
+/** The registry of approved upstream MCP servers, and write elevations for the admin MCP server. */
+export declare function mcpRegistryResource(request: RequestFn): {
+    list(query?: {
+        status?: "pending" | "approved" | "rejected";
+    }): Promise<ListPage<McpRegistryEntry>>;
+    add(body: {
+        name: string;
+        url: string;
+        description?: string;
+        status?: "approved" | "pending";
+    }): Promise<McpRegistryEntry>;
+    decide(id: string, status: "approved" | "rejected"): Promise<McpRegistryEntry>;
+    remove(id: string): Promise<{
+        object: "mcp_registry_entry";
+        id: string;
+        deleted: true;
+    }>;
+    /** Grant another API key a short write elevation over the admin MCP server. */
+    elevate(body: {
+        api_key_id: string;
+        ttl_seconds?: number;
+        reason?: string;
+    }): Promise<{
+        object: "mcp_elevation";
+        api_key_id: string;
+        token: string;
+        expires_at: number;
+        header: string;
+    }>;
+};
+export interface TelemetryExport {
+    object: 'telemetry_export';
+    enabled: boolean;
+    endpoint: string | null;
+    /** Headers are write-only. */
+    has_headers: boolean;
+    service_name: string;
+    traces: boolean;
+    metrics: boolean;
+}
+/** OTLP/HTTP export of gateway and relay calls (spans and metrics) to your collector. */
+export declare function telemetryExportResource(request: RequestFn): {
+    get(): Promise<TelemetryExport>;
+    update(body: {
+        enabled?: boolean;
+        endpoint?: string;
+        headers?: Record<string, string> | null;
+        service_name?: string;
+        traces?: boolean;
+        metrics?: boolean;
+    }): Promise<TelemetryExport>;
+    /** Send one test span now. */
+    test(): Promise<{
+        object: "telemetry_export_test";
+        ok: boolean;
+        error: string | null;
+    }>;
+};

package/dist/client/agent-platform.js

@@ -0,0 +1,132 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.connectionActionsResource = connectionActionsResource;
+exports.agentGovernanceResource = agentGovernanceResource;
+exports.mcpRegistryResource = mcpRegistryResource;
+exports.telemetryExportResource = telemetryExportResource;
+const request_1 = require("./request");
+/** Typed actions over connections, provider event triggers, scoped relay tokens and usage records. */
+function connectionActionsResource(request) {
+    return {
+        catalog: {
+            list(query = {}) {
+                return request({ method: 'GET', path: '/v1/connection_actions', query: { ...query } });
+            },
+            get(provider, name) {
+                return request({ method: 'GET', path: `/v1/connection_actions/${(0, request_1.enc)(provider)}/${(0, request_1.enc)(name)}` });
+            },
+            /** Define or replace a custom action (data, never code). */
+            define(provider, name, body) {
+                return request({ method: 'PUT', path: `/v1/connection_actions/${(0, request_1.enc)(provider)}/${(0, request_1.enc)(name)}`, body });
+            },
+            delete(provider, name) {
+                return request({ method: 'DELETE', path: `/v1/connection_actions/${(0, request_1.enc)(provider)}/${(0, request_1.enc)(name)}` });
+            },
+        },
+        /** The actions available on one connection. */
+        list(connectionId) {
+            return request({ method: 'GET', path: `/v1/connections/${(0, request_1.enc)(connectionId)}/actions` });
+        },
+        run(connectionId, name, body = {}) {
+            return request({ method: 'POST', path: `/v1/connections/${(0, request_1.enc)(connectionId)}/actions/${(0, request_1.enc)(name)}`, body });
+        },
+        triggers: {
+            list(connectionId) {
+                return request({ method: 'GET', path: `/v1/connections/${(0, request_1.enc)(connectionId)}/triggers` });
+            },
+            create(connectionId, body) {
+                return request({ method: 'POST', path: `/v1/connections/${(0, request_1.enc)(connectionId)}/triggers`, body });
+            },
+            get(connectionId, triggerId) {
+                return request({ method: 'GET', path: `/v1/connections/${(0, request_1.enc)(connectionId)}/triggers/${(0, request_1.enc)(triggerId)}` });
+            },
+            setStatus(connectionId, triggerId, status) {
+                return request({ method: 'PATCH', path: `/v1/connections/${(0, request_1.enc)(connectionId)}/triggers/${(0, request_1.enc)(triggerId)}`, body: { status } });
+            },
+            delete(connectionId, triggerId) {
+                return request({ method: 'DELETE', path: `/v1/connections/${(0, request_1.enc)(connectionId)}/triggers/${(0, request_1.enc)(triggerId)}` });
+            },
+        },
+        /** A signed credential for one connection that only works through the relay, for listed methods and URL prefixes. */
+        mintScopedToken(connectionId, body) {
+            return request({ method: 'POST', path: `/v1/connections/${(0, request_1.enc)(connectionId)}/scoped_tokens`, body });
+        },
+        /** Calls through connections, agent connection use and gateway calls, counted from the audit trail. */
+        usage(query = {}) {
+            return request({ method: 'GET', path: '/v1/usage/connections', query: { ...query } });
+        },
+    };
+}
+/** Agent governance: sponsors, expiry and renewal, the activity log, and access reviews of agents' grants. */
+function agentGovernanceResource(request) {
+    return {
+        lifecycle: {
+            get(agentId) {
+                return request({ method: 'GET', path: `/v1/agents/${(0, request_1.enc)(agentId)}/lifecycle` });
+            },
+            set(agentId, body) {
+                return request({ method: 'PUT', path: `/v1/agents/${(0, request_1.enc)(agentId)}/lifecycle`, body });
+            },
+            renew(agentId, extendDays) {
+                return request({ method: 'POST', path: `/v1/agents/${(0, request_1.enc)(agentId)}/renew`, body: { extend_days: extendDays } });
+            },
+        },
+        activity(agentId, query = {}) {
+            return request({ method: 'GET', path: `/v1/agents/${(0, request_1.enc)(agentId)}/activity`, query: { ...query } });
+        },
+        reviews: {
+            list() {
+                return request({ method: 'GET', path: '/v1/agent_access_reviews' });
+            },
+            start(body) {
+                return request({ method: 'POST', path: '/v1/agent_access_reviews', body });
+            },
+            get(id, query = {}) {
+                return request({ method: 'GET', path: `/v1/agent_access_reviews/${(0, request_1.enc)(id)}`, query: { ...query } });
+            },
+            decide(id, itemId, body) {
+                return request({ method: 'POST', path: `/v1/agent_access_reviews/${(0, request_1.enc)(id)}/items/${(0, request_1.enc)(itemId)}/decide`, body });
+            },
+            close(id) {
+                return request({ method: 'POST', path: `/v1/agent_access_reviews/${(0, request_1.enc)(id)}/close` });
+            },
+        },
+    };
+}
+/** The registry of approved upstream MCP servers, and write elevations for the admin MCP server. */
+function mcpRegistryResource(request) {
+    return {
+        list(query = {}) {
+            return request({ method: 'GET', path: '/v1/mcp_registry', query: { ...query } });
+        },
+        add(body) {
+            return request({ method: 'POST', path: '/v1/mcp_registry', body });
+        },
+        decide(id, status) {
+            return request({ method: 'POST', path: `/v1/mcp_registry/${(0, request_1.enc)(id)}/decide`, body: { status } });
+        },
+        remove(id) {
+            return request({ method: 'DELETE', path: `/v1/mcp_registry/${(0, request_1.enc)(id)}` });
+        },
+        /** Grant another API key a short write elevation over the admin MCP server. */
+        elevate(body) {
+            return request({ method: 'POST', path: '/v1/mcp/elevations', body });
+        },
+    };
+}
+/** OTLP/HTTP export of gateway and relay calls (spans and metrics) to your collector. */
+function telemetryExportResource(request) {
+    return {
+        get() {
+            return request({ method: 'GET', path: '/v1/telemetry_export' });
+        },
+        update(body) {
+            return request({ method: 'PUT', path: '/v1/telemetry_export', body });
+        },
+        /** Send one test span now. */
+        test() {
+            return request({ method: 'POST', path: '/v1/telemetry_export/test' });
+        },
+    };
+}
+//# sourceMappingURL=agent-platform.js.map

package/dist/client/agent-platform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-platform.js","sourceRoot":"","sources":["../../src/client/agent-platform.ts"],"names":[],"mappings":";;AAyEA,8DAkDC;AAuCD,0DAkCC;AAgBD,kDAmBC;AAcD,0DAaC;AAlQD,uCAAgD;AAwEhD,sGAAsG;AACtG,SAAgB,yBAAyB,CAAC,OAAkB;IAC1D,OAAO;QACL,OAAO,EAAE;YACP,IAAI,CAAC,QAA+B,EAAE;gBACpC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;YACzF,CAAC;YACD,GAAG,CAAC,QAAgB,EAAE,IAAY;gBAChC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,IAAA,aAAG,EAAC,QAAQ,CAAC,IAAI,IAAA,aAAG,EAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YAClG,CAAC;YACD,4DAA4D;YAC5D,MAAM,CAAC,QAAgB,EAAE,IAAY,EAAE,IAAgC;gBACrE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,IAAA,aAAG,EAAC,QAAQ,CAAC,IAAI,IAAA,aAAG,EAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACxG,CAAC;YACD,MAAM,CAAC,QAAgB,EAAE,IAAY;gBACnC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,0BAA0B,IAAA,aAAG,EAAC,QAAQ,CAAC,IAAI,IAAA,aAAG,EAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YACrG,CAAC;SACF;QACD,+CAA+C;QAC/C,IAAI,CAAC,YAAoB;YACvB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,YAAY,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,GAAG,CAAC,YAAoB,EAAE,IAAY,EAAE,OAAqI,EAAE;YAC7K,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,YAAY,CAAC,YAAY,IAAA,aAAG,EAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9G,CAAC;QACD,QAAQ,EAAE;YACR,IAAI,CAAC,YAAoB;gBACvB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,MAAM,CAAC,YAAoB,EAAE,IAAiC;gBAC5D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,YAAY,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;YAClG,CAAC;YACD,GAAG,CAAC,YAAoB,EAAE,SAAiB;gBACzC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,YAAY,CAAC,aAAa,IAAA,aAAG,EAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7G,CAAC;YACD,SAAS,CAAC,YAAoB,EAAE,SAAiB,EAAE,MAA2B;gBAC5E,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,YAAY,CAAC,aAAa,IAAA,aAAG,EAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YACjI,CAAC;YACD,MAAM,CAAC,YAAoB,EAAE,SAAiB;gBAC5C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,YAAY,CAAC,aAAa,IAAA,aAAG,EAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;YAChH,CAAC;SACF;QACD,qHAAqH;QACrH,eAAe,CAAC,YAAoB,EAAE,IAA0E;YAC9G,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,YAAY,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;QACvG,CAAC;QACD,uGAAuG;QACvG,KAAK,CAAC,QAAgH,EAAE;YACtH,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;QACxF,CAAC;KACF,CAAC;AACJ,CAAC;AAsCD,8GAA8G;AAC9G,SAAgB,uBAAuB,CAAC,OAAkB;IACxD,OAAO;QACL,SAAS,EAAE;YACT,GAAG,CAAC,OAAe;gBACjB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,IAAA,aAAG,EAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;YAClF,CAAC;YACD,GAAG,CAAC,OAAe,EAAE,IAAsH;gBACzI,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,IAAA,aAAG,EAAC,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;YACxF,CAAC;YACD,KAAK,CAAC,OAAe,EAAE,UAAkB;gBACvC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,IAAA,aAAG,EAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;YAClH,CAAC;SACF;QACD,QAAQ,CAAC,OAAe,EAAE,QAA+E,EAAE;YACzG,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,IAAA,aAAG,EAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;QACtG,CAAC;QACD,OAAO,EAAE;YACP,IAAI;gBACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC,CAAC;YACtE,CAAC;YACD,KAAK,CAAC,IAAqH;gBACzH,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7E,CAAC;YACD,GAAG,CAAC,EAAU,EAAE,QAAuF,EAAE;gBACvG,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;YACtG,CAAC;YACD,MAAM,CAAC,EAAU,EAAE,MAAc,EAAE,IAAkF;gBACnH,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,IAAA,aAAG,EAAC,EAAE,CAAC,UAAU,IAAA,aAAG,EAAC,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACpH,CAAC;YACD,KAAK,CAAC,EAAU;gBACd,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,IAAA,aAAG,EAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;YACxF,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAeD,oGAAoG;AACpG,SAAgB,mBAAmB,CAAC,OAAkB;IACpD,OAAO;QACL,IAAI,CAAC,QAA0D,EAAE;YAC/D,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,GAAG,CAAC,IAA0F;YAC5F,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,CAAC,EAAU,EAAE,MAA+B;YAChD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACnG,CAAC;QACD,MAAM,CAAC,EAAU;YACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,oBAAoB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,+EAA+E;QAC/E,OAAO,CAAC,IAAmE;YACzE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC;QACvE,CAAC;KACF,CAAC;AACJ,CAAC;AAaD,yFAAyF;AACzF,SAAgB,uBAAuB,CAAC,OAAkB;IACxD,OAAO;QACL,GAAG;YACD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,CAAC,IAAmJ;YACxJ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,8BAA8B;QAC9B,IAAI;YACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC;QACxE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/client/app-catalog.d.ts

@@ -10,6 +10,8 @@ export interface AppPreset {
     verified: boolean;
     /** The vendor SSO documentation the values come from. */
     source_url: string | null;
+    /** A private preset of this instance. */
+    custom?: boolean;
     params: Array<{
         key: string;
         label: string;
@@ -38,6 +40,20 @@ export interface InstalledApp {
     allowed_email_domains: string[];
     assignment: Required<AppAssignment>;
 }
+export type AppRequestStatus = 'open' | 'building' | 'available' | 'declined';
+export interface AppRequest {
+    object: 'app_request';
+    id: string;
+    name: string;
+    protocol: 'saml' | 'oidc';
+    docs_url: string | null;
+    note: string | null;
+    status: AppRequestStatus;
+    requested_by: string | null;
+    votes: number;
+    created_at: number;
+    updated_at: number;
+}
 export interface InstallAppBody {
     params?: Record<string, string>;
     installed_id?: string;
@@ -48,9 +64,52 @@ export interface InstallAppBody {
 /** The app catalog: SAML and OpenID Connect presets, installs, and who may open each app. */
 export declare function appCatalogResource(request: RequestFn): {
     /** `GET /v1/app_catalog` — every preset with its protocol and parameters. */
-    presets(): Promise<{
+    presets(query?: {
+        q?: string;
+        category?: string;
+        protocol?: "saml" | "oidc";
+        verified?: boolean;
+        limit?: number;
+        offset?: number;
+    }): Promise<{
         object: "list";
         data: AppPreset[];
+        total: number;
+        has_more: boolean;
+    }>;
+    /** `GET /v1/app_catalog/custom_presets` — this instance's private presets in portable form. */
+    customPresets(): Promise<{
+        object: "list";
+        data: Array<Record<string, unknown>>;
+    }>;
+    /** `POST /v1/app_catalog/custom_presets` — save (or replace) a private SAML preset. */
+    saveCustomPreset(preset: Record<string, unknown>): Promise<Record<string, unknown>>;
+    deleteCustomPreset(id: string): Promise<{
+        object: "app_custom_preset";
+        id: string;
+        deleted: true;
+    }>;
+    /** `GET /v1/app_catalog/requests` — apps people asked for, most wanted first. */
+    requests(status?: AppRequestStatus): Promise<{
+        object: "list";
+        data: AppRequest[];
+    }>;
+    /** `POST /v1/app_catalog/requests` — ask for an app; asking again for an open one adds a vote. */
+    requestApp(body: {
+        name: string;
+        protocol?: "saml" | "oidc";
+        docs_url?: string;
+        note?: string;
+        requested_by?: string;
+    }): Promise<AppRequest>;
+    updateRequest(id: string, body: {
+        status?: AppRequestStatus;
+        note?: string;
+    }): Promise<AppRequest>;
+    deleteRequest(id: string): Promise<{
+        object: "app_request";
+        id: string;
+        deleted: true;
     }>;
     /** `GET /v1/app_catalog/installed` */
     installed(): Promise<{

package/dist/client/app-catalog.js

@@ -6,8 +6,38 @@ const request_1 = require("./request");
 function appCatalogResource(request) {
     return {
         /** `GET /v1/app_catalog` — every preset with its protocol and parameters. */
-        presets() {
-            return request({ method: 'GET', path: '/v1/app_catalog' });
+        presets(query = {}) {
+            const p = new URLSearchParams();
+            for (const [k, v] of Object.entries(query))
+                if (v !== undefined)
+                    p.set(k, String(v));
+            const qs = p.toString();
+            return request({ method: 'GET', path: `/v1/app_catalog${qs ? `?${qs}` : ''}` });
+        },
+        /** `GET /v1/app_catalog/custom_presets` — this instance's private presets in portable form. */
+        customPresets() {
+            return request({ method: 'GET', path: '/v1/app_catalog/custom_presets' });
+        },
+        /** `POST /v1/app_catalog/custom_presets` — save (or replace) a private SAML preset. */
+        saveCustomPreset(preset) {
+            return request({ method: 'POST', path: '/v1/app_catalog/custom_presets', body: { preset } });
+        },
+        deleteCustomPreset(id) {
+            return request({ method: 'DELETE', path: `/v1/app_catalog/custom_presets/${(0, request_1.enc)(id)}` });
+        },
+        /** `GET /v1/app_catalog/requests` — apps people asked for, most wanted first. */
+        requests(status) {
+            return request({ method: 'GET', path: `/v1/app_catalog/requests${status ? `?status=${status}` : ''}` });
+        },
+        /** `POST /v1/app_catalog/requests` — ask for an app; asking again for an open one adds a vote. */
+        requestApp(body) {
+            return request({ method: 'POST', path: '/v1/app_catalog/requests', body });
+        },
+        updateRequest(id, body) {
+            return request({ method: 'PATCH', path: `/v1/app_catalog/requests/${(0, request_1.enc)(id)}`, body });
+        },
+        deleteRequest(id) {
+            return request({ method: 'DELETE', path: `/v1/app_catalog/requests/${(0, request_1.enc)(id)}` });
         },
         /** `GET /v1/app_catalog/installed` */
         installed() {

package/dist/client/app-catalog.js.map

@@ -1 +1 @@
-{"version":3,"file":"app-catalog.js","sourceRoot":"","sources":["../../src/client/app-catalog.ts"],"names":[],"mappings":";;AAkDA,gDAuBC;AAzED,uCAAgD;AAiDhD,6FAA6F;AAC7F,SAAgB,kBAAkB,CAAC,OAAkB;IACnD,OAAO;QACL,6EAA6E;QAC7E,OAAO;YACL,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,sCAAsC;QACtC,SAAS;YACP,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,yGAAyG;QACzG,OAAO,CAAC,QAAgB,EAAE,OAAuB,EAAE,EAAE,cAAuB;YAC1E,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QAC7G,CAAC;QACD,uFAAuF;QACvF,MAAM,CAAC,EAAU,EAAE,IAA2E;YAC5F,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,6BAA6B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,6CAA6C;QAC7C,SAAS,CAAC,EAAU;YAClB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,6BAA6B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACrF,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"app-catalog.js","sourceRoot":"","sources":["../../src/client/app-catalog.ts"],"names":[],"mappings":";;AAmEA,gDAmDC;AAtHD,uCAAgD;AAkEhD,6FAA6F;AAC7F,SAAgB,kBAAkB,CAAC,OAAkB;IACnD,OAAO;QACL,6EAA6E;QAC7E,OAAO,CAAC,QAA4H,EAAE;YACpI,MAAM,CAAC,GAAG,IAAI,eAAe,EAAE,CAAC;YAChC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,IAAI,CAAC,KAAK,SAAS;oBAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACrF,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;YACxB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,+FAA+F;QAC/F,aAAa;YACX,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,gCAAgC,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,uFAAuF;QACvF,gBAAgB,CAAC,MAA+B;YAC9C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gCAAgC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,kBAAkB,CAAC,EAAU;YAC3B,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,kCAAkC,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,iFAAiF;QACjF,QAAQ,CAAC,MAAyB;YAChC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,2BAA2B,MAAM,CAAC,CAAC,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1G,CAAC;QACD,kGAAkG;QAClG,UAAU,CAAC,IAA2G;YACpH,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,aAAa,CAAC,EAAU,EAAE,IAAkD;YAC1E,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,4BAA4B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,aAAa,CAAC,EAAU;YACtB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,4BAA4B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,sCAAsC;QACtC,SAAS;YACP,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,yGAAyG;QACzG,OAAO,CAAC,QAAgB,EAAE,OAAuB,EAAE,EAAE,cAAuB;YAC1E,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,IAAA,aAAG,EAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QAC7G,CAAC;QACD,uFAAuF;QACvF,MAAM,CAAC,EAAU,EAAE,IAA2E;YAC5F,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,6BAA6B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,6CAA6C;QAC7C,SAAS,CAAC,EAAU;YAClB,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,6BAA6B,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACrF,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/client/authz-decisions.d.ts

@@ -100,9 +100,55 @@ export declare function authzDecisionsResource(request: RequestFn): {
         since?: string | number;
         until?: string | number;
     }): Promise<AuthzDecisionStats>;
+    /** A local PDP ships a batch of decisions (max 500) and checks in; also its heartbeat. */
+    ingest(body: {
+        pdp: {
+            id: string;
+            name?: string;
+            version?: string;
+            bundle_revision?: string;
+        };
+        decisions?: Array<{
+            decision: "allow" | "deny";
+            principal?: string;
+            action?: string;
+            resource?: string;
+            input?: Record<string, unknown>;
+            result?: Record<string, unknown>;
+            latency_ms?: number;
+        }>;
+    }): Promise<{
+        object: "authz_decision_ingest";
+        accepted: number;
+        enabled: boolean;
+        pdp: AuthzPdp;
+    }>;
+    /** The fleet of local PDPs that have checked in. */
+    pdps: {
+        list(): Promise<{
+            object: "list";
+            data: AuthzPdp[];
+            has_more: boolean;
+        }>;
+        remove(id: string): Promise<{
+            object: "authz_pdp";
+            id: string;
+            deleted: boolean;
+        }>;
+    };
     settings: {
         get(): Promise<AuthzDecisionSettings>;
         /** Fields you omit keep their value. */
         update(body: UpdateAuthzDecisionSettingsBody): Promise<AuthzDecisionSettings>;
     };
 };
+export interface AuthzPdp {
+    object: 'authz_pdp';
+    id: string;
+    name: string | null;
+    version: string | null;
+    bundle_revision: string | null;
+    decisions_total: number;
+    first_seen_at: number;
+    last_seen_at: number;
+}

package/dist/client/authz-decisions.js

@@ -26,6 +26,19 @@ function authzDecisionsResource(request) {
         stats(params = {}) {
             return request({ method: 'GET', path: '/v1/authz_decisions/stats', query: { ...params } });
         },
+        /** A local PDP ships a batch of decisions (max 500) and checks in; also its heartbeat. */
+        ingest(body) {
+            return request({ method: 'POST', path: '/v1/authz_decisions/ingest', body });
+        },
+        /** The fleet of local PDPs that have checked in. */
+        pdps: {
+            list() {
+                return request({ method: 'GET', path: '/v1/authz_pdps' });
+            },
+            remove(id) {
+                return request({ method: 'DELETE', path: `/v1/authz_pdps/${(0, request_1.enc)(id)}` });
+            },
+        },
         settings: {
             get() {
                 return request({ method: 'GET', path: '/v1/authz_decision_settings' });

package/dist/client/authz-decisions.js.map

@@ -1 +1 @@
-{"version":3,"file":"authz-decisions.js","sourceRoot":"","sources":["../../src/client/authz-decisions.ts"],"names":[],"mappings":";;AA0FA,wDAiCC;AA3HD,uCAAgD;AA0FhD,SAAgB,sBAAsB,CAAC,OAAkB;IACvD,OAAO;QACL,4CAA4C;QAC5C,IAAI,CAAC,SAAmC,EAAE;YACxC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,8DAA8D;QAC9D,KAAK,CAAC,CAAC,OAAO,CAAC,SAA2D,EAAE;YAC1E,IAAI,KAAyB,CAAC;YAC9B,SAAS,CAAC;gBACR,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;gBACnE,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBACjB,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,WAAW;oBAAE,OAAO;gBAChD,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC;YAC3B,CAAC;QACH,CAAC;QACD,GAAG,CAAC,EAAU;YACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,kHAAkH;QAClH,KAAK,CAAC,SAA+D,EAAE;YACrE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,2BAA2B,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,QAAQ,EAAE;YACR,GAAG;gBACD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC,CAAC;YACzE,CAAC;YACD,wCAAwC;YACxC,MAAM,CAAC,IAAqC;gBAC1C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/E,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"authz-decisions.js","sourceRoot":"","sources":["../../src/client/authz-decisions.ts"],"names":[],"mappings":";;AA0FA,wDA8CC;AAxID,uCAAgD;AA0FhD,SAAgB,sBAAsB,CAAC,OAAkB;IACvD,OAAO;QACL,4CAA4C;QAC5C,IAAI,CAAC,SAAmC,EAAE;YACxC,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,8DAA8D;QAC9D,KAAK,CAAC,CAAC,OAAO,CAAC,SAA2D,EAAE;YAC1E,IAAI,KAAyB,CAAC;YAC9B,SAAS,CAAC;gBACR,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;gBACnE,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBACjB,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,WAAW;oBAAE,OAAO;gBAChD,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC;YAC3B,CAAC;QACH,CAAC;QACD,GAAG,CAAC,EAAU;YACZ,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,kHAAkH;QAClH,KAAK,CAAC,SAA+D,EAAE;YACrE,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,2BAA2B,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,0FAA0F;QAC1F,MAAM,CAAC,IAA2R;YAChS,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,oDAAoD;QACpD,IAAI,EAAE;YACJ,IAAI;gBACF,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC5D,CAAC;YACD,MAAM,CAAC,EAAU;gBACf,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,kBAAkB,IAAA,aAAG,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1E,CAAC;SACF;QACD,QAAQ,EAAE;YACR,GAAG;gBACD,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC,CAAC;YACzE,CAAC;YACD,wCAAwC;YACxC,MAAM,CAAC,IAAqC;gBAC1C,OAAO,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/E,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}