@axonflow/sdk 9.0.0 → 9.2.0

package/dist/cjs/types/authzen.gen.d.ts

@@ -0,0 +1,405 @@
+/**
+ * AuthZEN wire types and validators. GENERATED FILE — DO NOT EDIT.
+ *
+ * Source: tests/fixtures/authzen-surface.json
+ *   artifact:        axonflow-authzen-surface v1
+ *   profile:         axonflow-authzen-profile-2026-08-29
+ *   contract schema: 2026-08-29
+ *   schema digest:   sha256:647e16f769766f0ee8cf4913aaf5ac5c4567660fd2903da6766eead5db279efe
+ *
+ * Regenerate with:
+ *
+ *   node scripts/gen-authzen-types/generate.js
+ *
+ * Editing this file by hand is pointless: tests/authzen-generator.test.ts
+ * regenerates it in memory and compares bytes, so a hand edit fails CI on the
+ * next run.
+ */
+export declare const AUTHZEN_PROFILE_V1 = "axonflow-authzen-profile-2026-08-29";
+export declare const AUTHZEN_CONTRACT_SCHEMA_VERSION = "2026-08-29";
+export declare const AUTHZEN_SOURCE_SCHEMA_SHA256 = "sha256:647e16f769766f0ee8cf4913aaf5ac5c4567660fd2903da6766eead5db279efe";
+/**
+ * Raised when a value does not match the AuthZEN contract. The message always
+ * names a JSON Pointer, because on this surface the pointer IS the diagnosis:
+ * "unsupported_subject" without the offending member is a puzzle.
+ */
+export declare class AuthZENSchemaError extends Error {
+    readonly pointer: string;
+    constructor(pointer: string, detail: string);
+}
+export declare function authzenFail(pointer: string, detail: string): never;
+export declare function authzenObject(value: unknown, at: string): Record<string, unknown>;
+export declare function authzenString(value: unknown, at: string): string;
+export declare function authzenBoolean(value: unknown, at: string): boolean;
+export declare function authzenInteger(value: unknown, at: string): number;
+export declare function authzenArray(value: unknown, at: string): unknown[];
+/**
+ * Refuse a member the contract does not declare.
+ *
+ * On the RESPONSE path this is the whole strictness argument: a member this
+ * build has never heard of means the server is speaking a profile it cannot
+ * fully read, and dropping it silently would mean acting on a partial reading
+ * of an authorization decision. On the REQUEST path it catches a member the
+ * caller invented before it becomes a 422.
+ */
+export declare function authzenNoExtraMembers(obj: Record<string, unknown>, at: string, known: readonly string[]): void;
+/**
+ * AuthZENErrorCode is a closed set of values the server may send. The trailing
+ * `(string & {})` keeps an unrecognised value from a newer server assignable instead
+ * of a compile error, while the named members still autocomplete. Use
+ * AUTHZEN_ERROR_CODE_VALUES to tell a value this build knows from one it does not.
+ */
+export type AuthZENErrorCode = 'malformed_envelope' | 'incomplete_evaluation' | 'unsupported_subject' | 'unsupported_action' | 'unsupported_resource' | 'unevaluable_attribute' | 'missing_evaluable_content' | 'evaluation_unavailable' | (string & {});
+export declare const AUTHZEN_ERROR_CODE_MALFORMED_ENVELOPE: AuthZENErrorCode;
+export declare const AUTHZEN_ERROR_CODE_INCOMPLETE_EVALUATION: AuthZENErrorCode;
+export declare const AUTHZEN_ERROR_CODE_UNSUPPORTED_SUBJECT: AuthZENErrorCode;
+export declare const AUTHZEN_ERROR_CODE_UNSUPPORTED_ACTION: AuthZENErrorCode;
+export declare const AUTHZEN_ERROR_CODE_UNSUPPORTED_RESOURCE: AuthZENErrorCode;
+export declare const AUTHZEN_ERROR_CODE_UNEVALUABLE_ATTRIBUTE: AuthZENErrorCode;
+export declare const AUTHZEN_ERROR_CODE_MISSING_EVALUABLE_CONTENT: AuthZENErrorCode;
+export declare const AUTHZEN_ERROR_CODE_EVALUATION_UNAVAILABLE: AuthZENErrorCode;
+export declare const AUTHZEN_ERROR_CODE_VALUES: readonly AuthZENErrorCode[];
+/**
+ * AuthZENCategory is a closed set of values the server may send. The trailing `(string
+ * & {})` keeps an unrecognised value from a newer server assignable instead of a
+ * compile error, while the named members still autocomplete. Use
+ * AUTHZEN_CATEGORY_VALUES to tell a value this build knows from one it does not.
+ */
+export type AuthZENCategory = 'allowed' | 'not_permitted' | 'approval_required' | 'temporarily_unavailable' | 'invalid_request' | (string & {});
+export declare const AUTHZEN_CATEGORY_ALLOWED: AuthZENCategory;
+export declare const AUTHZEN_CATEGORY_NOT_PERMITTED: AuthZENCategory;
+export declare const AUTHZEN_CATEGORY_APPROVAL_REQUIRED: AuthZENCategory;
+export declare const AUTHZEN_CATEGORY_TEMPORARILY_UNAVAILABLE: AuthZENCategory;
+export declare const AUTHZEN_CATEGORY_INVALID_REQUEST: AuthZENCategory;
+export declare const AUTHZEN_CATEGORY_VALUES: readonly AuthZENCategory[];
+/**
+ * AuthZENIdentifierKind is a closed set of values the server may send. The trailing
+ * `(string & {})` keeps an unrecognised value from a newer server assignable instead
+ * of a compile error, while the named members still autocomplete. Use
+ * AUTHZEN_IDENTIFIER_KIND_VALUES to tell a value this build knows from one it does
+ * not.
+ */
+export type AuthZENIdentifierKind = 'organization' | 'principal' | 'group' | 'resource' | 'action' | 'tool' | 'client' | 'session' | (string & {});
+export declare const AUTHZEN_IDENTIFIER_KIND_ORGANIZATION: AuthZENIdentifierKind;
+export declare const AUTHZEN_IDENTIFIER_KIND_PRINCIPAL: AuthZENIdentifierKind;
+export declare const AUTHZEN_IDENTIFIER_KIND_GROUP: AuthZENIdentifierKind;
+export declare const AUTHZEN_IDENTIFIER_KIND_RESOURCE: AuthZENIdentifierKind;
+export declare const AUTHZEN_IDENTIFIER_KIND_ACTION: AuthZENIdentifierKind;
+export declare const AUTHZEN_IDENTIFIER_KIND_TOOL: AuthZENIdentifierKind;
+export declare const AUTHZEN_IDENTIFIER_KIND_CLIENT: AuthZENIdentifierKind;
+export declare const AUTHZEN_IDENTIFIER_KIND_SESSION: AuthZENIdentifierKind;
+export declare const AUTHZEN_IDENTIFIER_KIND_VALUES: readonly AuthZENIdentifierKind[];
+/**
+ * AuthZENObligationType is a closed set of values the server may send. The trailing
+ * `(string & {})` keeps an unrecognised value from a newer server assignable instead
+ * of a compile error, while the named members still autocomplete. Use
+ * AUTHZEN_OBLIGATION_TYPE_VALUES to tell a value this build knows from one it does
+ * not.
+ */
+export type AuthZENObligationType = 'approval_challenge' | 'field_remove' | 'field_redact' | 'field_hash' | 'field_mask' | 'field_annotate' | 'field_tokenize' | 'schema_transform' | 'response_filter' | 'route_restriction' | 'step_up_authentication' | 'quota_reservation' | 'immutable_audit' | 'notification' | (string & {});
+export declare const AUTHZEN_OBLIGATION_TYPE_APPROVAL_CHALLENGE: AuthZENObligationType;
+export declare const AUTHZEN_OBLIGATION_TYPE_FIELD_REMOVE: AuthZENObligationType;
+export declare const AUTHZEN_OBLIGATION_TYPE_FIELD_REDACT: AuthZENObligationType;
+export declare const AUTHZEN_OBLIGATION_TYPE_FIELD_HASH: AuthZENObligationType;
+export declare const AUTHZEN_OBLIGATION_TYPE_FIELD_MASK: AuthZENObligationType;
+export declare const AUTHZEN_OBLIGATION_TYPE_FIELD_ANNOTATE: AuthZENObligationType;
+export declare const AUTHZEN_OBLIGATION_TYPE_FIELD_TOKENIZE: AuthZENObligationType;
+export declare const AUTHZEN_OBLIGATION_TYPE_SCHEMA_TRANSFORM: AuthZENObligationType;
+export declare const AUTHZEN_OBLIGATION_TYPE_RESPONSE_FILTER: AuthZENObligationType;
+export declare const AUTHZEN_OBLIGATION_TYPE_ROUTE_RESTRICTION: AuthZENObligationType;
+export declare const AUTHZEN_OBLIGATION_TYPE_STEP_UP_AUTHENTICATION: AuthZENObligationType;
+export declare const AUTHZEN_OBLIGATION_TYPE_QUOTA_RESERVATION: AuthZENObligationType;
+export declare const AUTHZEN_OBLIGATION_TYPE_IMMUTABLE_AUDIT: AuthZENObligationType;
+export declare const AUTHZEN_OBLIGATION_TYPE_NOTIFICATION: AuthZENObligationType;
+export declare const AUTHZEN_OBLIGATION_TYPE_VALUES: readonly AuthZENObligationType[];
+/**
+ * AuthZENOperationalState is a closed set of values the server may send. The trailing
+ * `(string & {})` keeps an unrecognised value from a newer server assignable instead
+ * of a compile error, while the named members still autocomplete. Use
+ * AUTHZEN_OPERATIONAL_STATE_VALUES to tell a value this build knows from one it does
+ * not.
+ */
+export type AuthZENOperationalState = 'ALLOW' | 'DENY' | 'CHALLENGE' | 'ERROR' | (string & {});
+export declare const AUTHZEN_OPERATIONAL_STATE_ALLOW: AuthZENOperationalState;
+export declare const AUTHZEN_OPERATIONAL_STATE_DENY: AuthZENOperationalState;
+export declare const AUTHZEN_OPERATIONAL_STATE_CHALLENGE: AuthZENOperationalState;
+export declare const AUTHZEN_OPERATIONAL_STATE_ERROR: AuthZENOperationalState;
+export declare const AUTHZEN_OPERATIONAL_STATE_VALUES: readonly AuthZENOperationalState[];
+/**
+ * AuthZENReasonCode is a closed set of values the server may send. The trailing
+ * `(string & {})` keeps an unrecognised value from a newer server assignable instead
+ * of a compile error, while the named members still autocomplete. Use
+ * AUTHZEN_REASON_CODE_VALUES to tell a value this build knows from one it does not.
+ */
+export type AuthZENReasonCode = 'permitted' | 'approval_required' | 'explicit_constraint' | 'no_matching_permission' | 'unknown_constraint' | 'unknown_permission' | 'unknown_requirement' | 'invalid_input' | 'evaluation_error' | 'unsupported_obligation' | 'obligation_conflict' | 'unknown_action' | 'unknown_realm' | 'schema_violation' | 'delegation_depth_exceeded' | 'budget_exhausted' | 'binding_mismatch' | 'approval_unsatisfiable' | 'approval_expired' | 'authoring_rejected' | (string & {});
+export declare const AUTHZEN_REASON_CODE_PERMITTED: AuthZENReasonCode;
+export declare const AUTHZEN_REASON_CODE_APPROVAL_REQUIRED: AuthZENReasonCode;
+export declare const AUTHZEN_REASON_CODE_EXPLICIT_CONSTRAINT: AuthZENReasonCode;
+export declare const AUTHZEN_REASON_CODE_NO_MATCHING_PERMISSION: AuthZENReasonCode;
+export declare const AUTHZEN_REASON_CODE_UNKNOWN_CONSTRAINT: AuthZENReasonCode;
+export declare const AUTHZEN_REASON_CODE_UNKNOWN_PERMISSION: AuthZENReasonCode;
+export declare const AUTHZEN_REASON_CODE_UNKNOWN_REQUIREMENT: AuthZENReasonCode;
+export declare const AUTHZEN_REASON_CODE_INVALID_INPUT: AuthZENReasonCode;
+export declare const AUTHZEN_REASON_CODE_EVALUATION_ERROR: AuthZENReasonCode;
+export declare const AUTHZEN_REASON_CODE_UNSUPPORTED_OBLIGATION: AuthZENReasonCode;
+export declare const AUTHZEN_REASON_CODE_OBLIGATION_CONFLICT: AuthZENReasonCode;
+export declare const AUTHZEN_REASON_CODE_UNKNOWN_ACTION: AuthZENReasonCode;
+export declare const AUTHZEN_REASON_CODE_UNKNOWN_REALM: AuthZENReasonCode;
+export declare const AUTHZEN_REASON_CODE_SCHEMA_VIOLATION: AuthZENReasonCode;
+export declare const AUTHZEN_REASON_CODE_DELEGATION_DEPTH_EXCEEDED: AuthZENReasonCode;
+export declare const AUTHZEN_REASON_CODE_BUDGET_EXHAUSTED: AuthZENReasonCode;
+export declare const AUTHZEN_REASON_CODE_BINDING_MISMATCH: AuthZENReasonCode;
+export declare const AUTHZEN_REASON_CODE_APPROVAL_UNSATISFIABLE: AuthZENReasonCode;
+export declare const AUTHZEN_REASON_CODE_APPROVAL_EXPIRED: AuthZENReasonCode;
+export declare const AUTHZEN_REASON_CODE_AUTHORING_REJECTED: AuthZENReasonCode;
+export declare const AUTHZEN_REASON_CODE_VALUES: readonly AuthZENReasonCode[];
+/**
+ * One immutable threshold clause: a quorum of distinct approvers drawn from a named
+ * eligible set. It is named here rather than inlined under approval_requirement so it
+ * corresponds one-to-one with the Go ApprovalClause, which is what lets the drift
+ * guard compare it and every SDK generate it as a type rather than an anonymous shape.
+ */
+export interface AuthZENApprovalClause {
+    quorum: number;
+    eligible: AuthZENIdentifier[];
+}
+/**
+ * A conjunction of immutable threshold clauses. Clauses are never collapsed by pool
+ * intersection or union.
+ */
+export interface AuthZENApprovalRequirement {
+    all_of: AuthZENApprovalClause[];
+    separation_of_duties: boolean;
+    expires_at: string;
+}
+/**
+ * The AuthZEN action object.
+ */
+export interface AuthZENAction {
+    name: string;
+    properties?: Record<string, unknown>;
+}
+/**
+ * The plural envelope: a shared subject, action, resource and context at the top
+ * level, with one entry per decision. The number of decisions is fixed by the MAPPING,
+ * never by argument data, so an empty evaluations array is malformed rather than a
+ * request for zero decisions.
+ */
+export interface AuthZENBulk {
+    subject?: AuthZENSubject;
+    action?: AuthZENAction;
+    resource?: AuthZENResource;
+    context?: Record<string, unknown>;
+    evaluations: AuthZENRequest[];
+}
+/**
+ * The top level. Exactly two members are defined and exactly one may be PRESENT.
+ * Presence is decided on the KEY SET, not on a decoded pointer, so {"evaluation":
+ * {...}, "evaluations": null} carries both declared members and is malformed.
+ */
+export interface AuthZENEnvelope {
+    /**
+     * The singular member. Unlike a plural entry it has no shared base to inherit from,
+     * so it must carry its own subject, action and resource.
+     */
+    evaluation?: AuthZENRequest;
+    evaluations?: AuthZENBulk;
+}
+/**
+ * The structured refusal body, returned when a request could not be EVALUATED. It is a
+ * separate shape from the response rather than an extra member on it, because a
+ * refusal is not a decision: a response carrying decision=false says the request was
+ * evaluated and denied, and returning that for a request that was never evaluated
+ * would make 'denied' and 'unevaluable' the same event in every audit and every client
+ * branch.
+ */
+export interface AuthZENError {
+    code: AuthZENErrorCode;
+    pointer?: string;
+    message: string;
+    supported?: string[];
+    request_id?: string;
+}
+/**
+ * One subject-action-resource-context evaluation. Every member is structurally
+ * OPTIONAL here because a plural-envelope entry inherits any member it omits from the
+ * envelope's shared base. The completeness invariant - that the MERGED entry carries a
+ * subject, an action and a resource - is a cross-object property this document cannot
+ * express, and AuthZENEnvelope.Project enforces it. A validator that passes this
+ * schema has therefore NOT established completeness, which is why the singular member
+ * below carries its own required list.
+ */
+export interface AuthZENRequest {
+    subject?: AuthZENSubject;
+    action?: AuthZENAction;
+    resource?: AuthZENResource;
+    context?: Record<string, unknown>;
+}
+/**
+ * The AuthZEN resource object.
+ */
+export interface AuthZENResource {
+    type: string;
+    id: string;
+    properties?: Record<string, unknown>;
+}
+/**
+ * The AuthZEN reply. `decision` is the collapsed boolean: ALLOW is true and every
+ * other state is false. It is the only member an un-negotiated enforcement point
+ * receives.
+ */
+export interface AuthZENResponse {
+    decision: boolean;
+    context?: AuthZENResponseContext;
+}
+/**
+ * The versioned AxonFlow profile payload. It is present only for a Policy Enforcement
+ * Point that NEGOTIATED the profile; one that did not receives the boolean alone,
+ * because handing a partial interpretation to a plane that cannot act on it is the
+ * failure ADR-065 invariant 12 forbids.
+ */
+export interface AuthZENResponseContext {
+    profile: string;
+    state: AuthZENOperationalState;
+    category: AuthZENCategory;
+    reason?: AuthZENReasonCode;
+    obligations?: AuthZENObligation[];
+    approval?: AuthZENApprovalRequirement;
+    decision_id: string;
+    schema_version: string;
+}
+/**
+ * The AuthZEN subject object. type and id are canonical identifier components; a
+ * display name, an email or a token claim is never one of them.
+ */
+export interface AuthZENSubject {
+    type: string;
+    id: string;
+    properties?: Record<string, unknown>;
+}
+/**
+ * A canonical identifier. Display names, emails, token claims, connector names and
+ * aliases are never identifiers.
+ */
+export interface AuthZENIdentifier {
+    kind: AuthZENIdentifierKind;
+    type: string;
+    qualifier?: string;
+    local: string;
+}
+/**
+ * One typed instruction owned by a named enforcement component.
+ */
+export interface AuthZENObligation {
+    type: AuthZENObligationType;
+    target?: string;
+    params?: Record<string, string>;
+    mandatory: boolean;
+    source_policy: string;
+    schema_version: number;
+}
+/**
+ * Validate an unknown value as AuthZENApprovalClause, or throw naming the member at
+ * fault. Unknown members are REFUSED rather than dropped: on the response path an
+ * unrecognised member is a server speaking a profile this build does not understand,
+ * and quietly ignoring it would mean acting on a partial reading of an authorization
+ * decision.
+ */
+export declare function validateAuthZENApprovalClause(value: unknown, at: string): AuthZENApprovalClause;
+/**
+ * Validate an unknown value as AuthZENApprovalRequirement, or throw naming the member
+ * at fault. Unknown members are REFUSED rather than dropped: on the response path an
+ * unrecognised member is a server speaking a profile this build does not understand,
+ * and quietly ignoring it would mean acting on a partial reading of an authorization
+ * decision.
+ */
+export declare function validateAuthZENApprovalRequirement(value: unknown, at: string): AuthZENApprovalRequirement;
+/**
+ * Validate an unknown value as AuthZENAction, or throw naming the member at fault.
+ * Unknown members are REFUSED rather than dropped: on the response path an
+ * unrecognised member is a server speaking a profile this build does not understand,
+ * and quietly ignoring it would mean acting on a partial reading of an authorization
+ * decision.
+ */
+export declare function validateAuthZENAction(value: unknown, at: string): AuthZENAction;
+/**
+ * Validate an unknown value as AuthZENBulk, or throw naming the member at fault.
+ * Unknown members are REFUSED rather than dropped: on the response path an
+ * unrecognised member is a server speaking a profile this build does not understand,
+ * and quietly ignoring it would mean acting on a partial reading of an authorization
+ * decision.
+ */
+export declare function validateAuthZENBulk(value: unknown, at: string): AuthZENBulk;
+/**
+ * Validate an unknown value as AuthZENEnvelope, or throw naming the member at fault.
+ * Unknown members are REFUSED rather than dropped: on the response path an
+ * unrecognised member is a server speaking a profile this build does not understand,
+ * and quietly ignoring it would mean acting on a partial reading of an authorization
+ * decision.
+ */
+export declare function validateAuthZENEnvelope(value: unknown, at: string): AuthZENEnvelope;
+/**
+ * Validate an unknown value as AuthZENError, or throw naming the member at fault.
+ * Unknown members are REFUSED rather than dropped: on the response path an
+ * unrecognised member is a server speaking a profile this build does not understand,
+ * and quietly ignoring it would mean acting on a partial reading of an authorization
+ * decision.
+ */
+export declare function validateAuthZENError(value: unknown, at: string): AuthZENError;
+/**
+ * Validate an unknown value as AuthZENRequest, or throw naming the member at fault.
+ * Unknown members are REFUSED rather than dropped: on the response path an
+ * unrecognised member is a server speaking a profile this build does not understand,
+ * and quietly ignoring it would mean acting on a partial reading of an authorization
+ * decision.
+ */
+export declare function validateAuthZENRequest(value: unknown, at: string): AuthZENRequest;
+/**
+ * Validate an unknown value as AuthZENResource, or throw naming the member at fault.
+ * Unknown members are REFUSED rather than dropped: on the response path an
+ * unrecognised member is a server speaking a profile this build does not understand,
+ * and quietly ignoring it would mean acting on a partial reading of an authorization
+ * decision.
+ */
+export declare function validateAuthZENResource(value: unknown, at: string): AuthZENResource;
+/**
+ * Validate an unknown value as AuthZENResponse, or throw naming the member at fault.
+ * Unknown members are REFUSED rather than dropped: on the response path an
+ * unrecognised member is a server speaking a profile this build does not understand,
+ * and quietly ignoring it would mean acting on a partial reading of an authorization
+ * decision.
+ */
+export declare function validateAuthZENResponse(value: unknown, at: string): AuthZENResponse;
+/**
+ * Validate an unknown value as AuthZENResponseContext, or throw naming the member at
+ * fault. Unknown members are REFUSED rather than dropped: on the response path an
+ * unrecognised member is a server speaking a profile this build does not understand,
+ * and quietly ignoring it would mean acting on a partial reading of an authorization
+ * decision.
+ */
+export declare function validateAuthZENResponseContext(value: unknown, at: string): AuthZENResponseContext;
+/**
+ * Validate an unknown value as AuthZENSubject, or throw naming the member at fault.
+ * Unknown members are REFUSED rather than dropped: on the response path an
+ * unrecognised member is a server speaking a profile this build does not understand,
+ * and quietly ignoring it would mean acting on a partial reading of an authorization
+ * decision.
+ */
+export declare function validateAuthZENSubject(value: unknown, at: string): AuthZENSubject;
+/**
+ * Validate an unknown value as AuthZENIdentifier, or throw naming the member at fault.
+ * Unknown members are REFUSED rather than dropped: on the response path an
+ * unrecognised member is a server speaking a profile this build does not understand,
+ * and quietly ignoring it would mean acting on a partial reading of an authorization
+ * decision.
+ */
+export declare function validateAuthZENIdentifier(value: unknown, at: string): AuthZENIdentifier;
+/**
+ * Validate an unknown value as AuthZENObligation, or throw naming the member at fault.
+ * Unknown members are REFUSED rather than dropped: on the response path an
+ * unrecognised member is a server speaking a profile this build does not understand,
+ * and quietly ignoring it would mean acting on a partial reading of an authorization
+ * decision.
+ */
+export declare function validateAuthZENObligation(value: unknown, at: string): AuthZENObligation;
+//# sourceMappingURL=authzen.gen.d.ts.map

package/dist/cjs/types/authzen.gen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authzen.gen.d.ts","sourceRoot":"","sources":["../../../src/types/authzen.gen.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAMH,eAAO,MAAM,kBAAkB,wCAAwC,CAAC;AAIxE,eAAO,MAAM,+BAA+B,eAAe,CAAC;AAK5D,eAAO,MAAM,4BAA4B,4EACkC,CAAC;AAE5E;;;;GAIG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,SAAgB,OAAO,EAAE,MAAM,CAAC;gBAEpB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAM5C;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,KAAK,CAElE;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAKjF;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAKhE;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAKlE;AAID,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAKjE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,EAAE,CAKlE;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,SAAS,MAAM,EAAE,GACvB,IAAI,CAON;AAED;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GACxB,oBAAoB,GACpB,uBAAuB,GACvB,qBAAqB,GACrB,oBAAoB,GACpB,sBAAsB,GACtB,uBAAuB,GACvB,2BAA2B,GAC3B,wBAAwB,GACxB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,eAAO,MAAM,qCAAqC,EAAE,gBAAuC,CAAC;AAC5F,eAAO,MAAM,wCAAwC,EAAE,gBAA0C,CAAC;AAClG,eAAO,MAAM,sCAAsC,EAAE,gBAAwC,CAAC;AAC9F,eAAO,MAAM,qCAAqC,EAAE,gBAAuC,CAAC;AAC5F,eAAO,MAAM,uCAAuC,EAAE,gBAAyC,CAAC;AAChG,eAAO,MAAM,wCAAwC,EAAE,gBAA0C,CAAC;AAClG,eAAO,MAAM,4CAA4C,EAAE,gBAC9B,CAAC;AAC9B,eAAO,MAAM,yCAAyC,EAAE,gBAA2C,CAAC;AAGpG,eAAO,MAAM,yBAAyB,EAAE,SAAS,gBAAgB,EAShE,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GACvB,SAAS,GACT,eAAe,GACf,mBAAmB,GACnB,yBAAyB,GACzB,iBAAiB,GACjB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,eAAO,MAAM,wBAAwB,EAAE,eAA2B,CAAC;AACnE,eAAO,MAAM,8BAA8B,EAAE,eAAiC,CAAC;AAC/E,eAAO,MAAM,kCAAkC,EAAE,eAAqC,CAAC;AACvF,eAAO,MAAM,wCAAwC,EAAE,eAA2C,CAAC;AACnG,eAAO,MAAM,gCAAgC,EAAE,eAAmC,CAAC;AAGnF,eAAO,MAAM,uBAAuB,EAAE,SAAS,eAAe,EAM7D,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,qBAAqB,GAC7B,cAAc,GACd,WAAW,GACX,OAAO,GACP,UAAU,GACV,QAAQ,GACR,MAAM,GACN,QAAQ,GACR,SAAS,GACT,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,eAAO,MAAM,oCAAoC,EAAE,qBAAsC,CAAC;AAC1F,eAAO,MAAM,iCAAiC,EAAE,qBAAmC,CAAC;AACpF,eAAO,MAAM,6BAA6B,EAAE,qBAA+B,CAAC;AAC5E,eAAO,MAAM,gCAAgC,EAAE,qBAAkC,CAAC;AAClF,eAAO,MAAM,8BAA8B,EAAE,qBAAgC,CAAC;AAC9E,eAAO,MAAM,4BAA4B,EAAE,qBAA8B,CAAC;AAC1E,eAAO,MAAM,8BAA8B,EAAE,qBAAgC,CAAC;AAC9E,eAAO,MAAM,+BAA+B,EAAE,qBAAiC,CAAC;AAGhF,eAAO,MAAM,8BAA8B,EAAE,SAAS,qBAAqB,EAS1E,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,qBAAqB,GAC7B,oBAAoB,GACpB,cAAc,GACd,cAAc,GACd,YAAY,GACZ,YAAY,GACZ,gBAAgB,GAChB,gBAAgB,GAChB,kBAAkB,GAClB,iBAAiB,GACjB,mBAAmB,GACnB,wBAAwB,GACxB,mBAAmB,GACnB,iBAAiB,GACjB,cAAc,GACd,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,eAAO,MAAM,0CAA0C,EAAE,qBACnC,CAAC;AACvB,eAAO,MAAM,oCAAoC,EAAE,qBAAsC,CAAC;AAC1F,eAAO,MAAM,oCAAoC,EAAE,qBAAsC,CAAC;AAC1F,eAAO,MAAM,kCAAkC,EAAE,qBAAoC,CAAC;AACtF,eAAO,MAAM,kCAAkC,EAAE,qBAAoC,CAAC;AACtF,eAAO,MAAM,sCAAsC,EAAE,qBAAwC,CAAC;AAC9F,eAAO,MAAM,sCAAsC,EAAE,qBAAwC,CAAC;AAC9F,eAAO,MAAM,wCAAwC,EAAE,qBAA0C,CAAC;AAClG,eAAO,MAAM,uCAAuC,EAAE,qBAAyC,CAAC;AAChG,eAAO,MAAM,yCAAyC,EAAE,qBAA2C,CAAC;AACpG,eAAO,MAAM,8CAA8C,EAAE,qBACnC,CAAC;AAC3B,eAAO,MAAM,yCAAyC,EAAE,qBAA2C,CAAC;AACpG,eAAO,MAAM,uCAAuC,EAAE,qBAAyC,CAAC;AAChG,eAAO,MAAM,oCAAoC,EAAE,qBAAsC,CAAC;AAG1F,eAAO,MAAM,8BAA8B,EAAE,SAAS,qBAAqB,EAe1E,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,uBAAuB,GAAG,OAAO,GAAG,MAAM,GAAG,WAAW,GAAG,OAAO,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAE/F,eAAO,MAAM,+BAA+B,EAAE,uBAAiC,CAAC;AAChF,eAAO,MAAM,8BAA8B,EAAE,uBAAgC,CAAC;AAC9E,eAAO,MAAM,mCAAmC,EAAE,uBAAqC,CAAC;AACxF,eAAO,MAAM,+BAA+B,EAAE,uBAAiC,CAAC;AAGhF,eAAO,MAAM,gCAAgC,EAAE,SAAS,uBAAuB,EAK9E,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GACzB,WAAW,GACX,mBAAmB,GACnB,qBAAqB,GACrB,wBAAwB,GACxB,oBAAoB,GACpB,oBAAoB,GACpB,qBAAqB,GACrB,eAAe,GACf,kBAAkB,GAClB,wBAAwB,GACxB,qBAAqB,GACrB,gBAAgB,GAChB,eAAe,GACf,kBAAkB,GAClB,2BAA2B,GAC3B,kBAAkB,GAClB,kBAAkB,GAClB,wBAAwB,GACxB,kBAAkB,GAClB,oBAAoB,GACpB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,eAAO,MAAM,6BAA6B,EAAE,iBAA+B,CAAC;AAC5E,eAAO,MAAM,qCAAqC,EAAE,iBAAuC,CAAC;AAC5F,eAAO,MAAM,uCAAuC,EAAE,iBAAyC,CAAC;AAChG,eAAO,MAAM,0CAA0C,EAAE,iBAC/B,CAAC;AAC3B,eAAO,MAAM,sCAAsC,EAAE,iBAAwC,CAAC;AAC9F,eAAO,MAAM,sCAAsC,EAAE,iBAAwC,CAAC;AAC9F,eAAO,MAAM,uCAAuC,EAAE,iBAAyC,CAAC;AAChG,eAAO,MAAM,iCAAiC,EAAE,iBAAmC,CAAC;AACpF,eAAO,MAAM,oCAAoC,EAAE,iBAAsC,CAAC;AAC1F,eAAO,MAAM,0CAA0C,EAAE,iBAC/B,CAAC;AAC3B,eAAO,MAAM,uCAAuC,EAAE,iBAAyC,CAAC;AAChG,eAAO,MAAM,kCAAkC,EAAE,iBAAoC,CAAC;AACtF,eAAO,MAAM,iCAAiC,EAAE,iBAAmC,CAAC;AACpF,eAAO,MAAM,oCAAoC,EAAE,iBAAsC,CAAC;AAC1F,eAAO,MAAM,6CAA6C,EAAE,iBAC/B,CAAC;AAC9B,eAAO,MAAM,oCAAoC,EAAE,iBAAsC,CAAC;AAC1F,eAAO,MAAM,oCAAoC,EAAE,iBAAsC,CAAC;AAC1F,eAAO,MAAM,0CAA0C,EAAE,iBAC/B,CAAC;AAC3B,eAAO,MAAM,oCAAoC,EAAE,iBAAsC,CAAC;AAC1F,eAAO,MAAM,sCAAsC,EAAE,iBAAwC,CAAC;AAG9F,eAAO,MAAM,0BAA0B,EAAE,SAAS,iBAAiB,EAqBlE,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IAEf,QAAQ,EAAE,iBAAiB,EAAE,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,qBAAqB,EAAE,CAAC;IAEhC,oBAAoB,EAAE,OAAO,CAAC;IAE9B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IAEb,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,cAAc,CAAC;IAEzB,MAAM,CAAC,EAAE,aAAa,CAAC;IAEvB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAE3B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAElC,WAAW,EAAE,cAAc,EAAE,CAAC;CAC/B;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,UAAU,CAAC,EAAE,cAAc,CAAC;IAE5B,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,gBAAgB,CAAC;IAEvB,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,OAAO,EAAE,MAAM,CAAC;IAEhB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IAErB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,cAAc,CAAC;IAEzB,MAAM,CAAC,EAAE,aAAa,CAAC;IAEvB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAE3B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IAEb,EAAE,EAAE,MAAM,CAAC;IAEX,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,OAAO,CAAC;IAElB,OAAO,CAAC,EAAE,sBAAsB,CAAC;CAClC;AAED;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IAErC,OAAO,EAAE,MAAM,CAAC;IAEhB,KAAK,EAAE,uBAAuB,CAAC;IAE/B,QAAQ,EAAE,eAAe,CAAC;IAE1B,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAE3B,WAAW,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAElC,QAAQ,CAAC,EAAE,0BAA0B,CAAC;IAEtC,WAAW,EAAE,MAAM,CAAC;IAEpB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IAEb,EAAE,EAAE,MAAM,CAAC;IAEX,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,qBAAqB,CAAC;IAE5B,IAAI,EAAE,MAAM,CAAC;IAEb,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,qBAAqB,CAAC;IAE5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEhC,SAAS,EAAE,OAAO,CAAC;IAEnB,aAAa,EAAE,MAAM,CAAC;IAEtB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,qBAAqB,CAoB/F;AAED;;;;;;GAMG;AACH,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,OAAO,EACd,EAAE,EAAE,MAAM,GACT,0BAA0B,CAyB5B;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,aAAa,CAiB/E;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,WAAW,CAmC3E;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,eAAe,CAwCnF;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,YAAY,CAmC7E;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,cAAc,CAwBjF;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,eAAe,CAyBnF;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,eAAe,CAcnF;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,sBAAsB,CAoEjG;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,cAAc,CAyBjF;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,iBAAiB,CA2BvF;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,iBAAiB,CAqDvF"}