@de-otio/trellis 0.6.0 → 0.7.0

package/dist/lib/tenant/idp-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"idp-handler.js","sourceRoot":"","sources":["../../../src/lib/tenant/idp-handler.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuBA,gGAA0F;AAG1F,6DAAgF;AAChF,6CAAgE;AAChE,uDAAgE;AAChE,wCAAkD;AAClD,sDAAsD;AACtD,yCAA4C;AAC5C,gDAK4B;AAC5B,0DAA0D;AAC1D,wDAA0D;AAC1D,4EAAuE;AAEvE,MAAM,YAAY,GAAG,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;AAE5D,SAAS,YAAY,CAAC,MAAc,EAAE,IAAa;IACjD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,IAAI,GAAG,kBAAkB;IAC5D,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,aAAa,CAAC,OAAe,EAAE,WAAoB;IAC1D,OAAO,YAAY,CAAC,GAAG,EAAE;QACvB,KAAK,EAAE,eAAe;QACtB,OAAO;QACP,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,YAAY,CAAC,GAAG,EAAE;QACvB,KAAK,EAAE,eAAe;QACtB,OAAO,EAAE,uEAAuE;KACjF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,YAAY,GAAG,IAAI,wBAAiB,EAAE,CAAC;AAmC7C,MAAa,UAAU;IACQ;IAA7B,YAA6B,OAA+B,EAAE;QAAjC,SAAI,GAAJ,IAAI,CAA6B;IAAG,CAAC;IAElE,8EAA8E;IACtE,MAAM,CAAC,GAAQ;QACrB,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QACxC,OAAO,IAAI,uBAAa,CACtB,IAAI,gEAA6B,CAAC;YAChC,MAAM,EAAE,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU;SACrD,CAAC,CACH,CAAC;IACJ,CAAC;IAEO,UAAU,CAAC,GAAQ;QACzB,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;QAChD,OAAO,IAAI,8BAAgB,CACzB,IAAI,6CAAoB,CAAC;YACvB,MAAM,EAAE,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU;SACrD,CAAC,CACH,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,yBAAyB,CAAC,QAAgB,EAAE,GAAQ;QAChE,MAAM,EAAE,YAAY,EAAE,GAAG,wDAAa,UAAU,GAAC,CAAC;QAClD,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC;YAC7C,KAAK,EAAE,EAAE,QAAQ,EAAE;YACnB,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE;SACnD,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnF,IAAI,IAAI,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC;YACtC,MAAM,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC9B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAA,uCAAwB,GAAE,CAAC;YACzC,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACjF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,MAAM;gBACb,GAAG,EAAE,oCAAoC;gBACzC,QAAQ;gBACR,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;aACnB,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,YAAY,CAChB,QAAgB,EAChB,OAAgB,EAChB,IAAiB,EACjB,GAAQ;QAER,MAAM,MAAM,GACV,IAAA,qCAAmB,EAAC,IAAI,EAAE,QAAQ,CAAC;YACnC,IAAA,2BAAiB,EAAC,IAAI,EAAE,oBAAU,CAAC,YAAY,CAAC,CAAC;QACnD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAE1B,MAAM,EAAE,CAAC,EAAE,GAAG,wDAAa,KAAK,GAAC,CAAC;QAClC,IAAI,GAAY,CAAC;QACjB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,UAAU,CAAC,yBAAyB,EAAE,cAAc,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,IAAI,GAAI,GAAgC,EAAE,IAAI,CAAC;QACrD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,OAAO,YAAY,CAAC,GAAG,EAAE;gBACvB,KAAK,EAAE,2BAA2B;gBAClC,OAAO,EAAE,6DAA6D;aACvE,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,OAAO,UAAU,CAAC,qBAAqB,CAAC,CAAC;QAC3C,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;YACtB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;YACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;YACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;YACpC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;YACzC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;YAC5D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;YACvC,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;SAC9D,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,eAAe,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAsB,CAAC;QAE3C,MAAM,EAAE,YAAY,EAAE,GAAG,wDAAa,UAAU,GAAC,CAAC;QAClD,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAE7B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC;YACxC,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE;YACvB,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;SACrB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YAAE,OAAO,QAAQ,EAAE,CAAC;QAE/B,MAAM,eAAe,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC;YACrD,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC9C,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;YACxB,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;SAC3B,CAAC,CAAC;QACH,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,aAAa,CAClB,wEAAwE,EACxE,qBAAqB,QAAQ,UAAU,CACxC,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,sBAAsB,CAAC,UAAU,CAAC;YAC1D,KAAK,EAAE,EAAE,QAAQ,EAAE;YACnB,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;SACrB,CAAC,CAAC;QACH,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,YAAY,CAAC,GAAG,EAAE;gBACvB,KAAK,EAAE,YAAY;gBACnB,OAAO,EAAE,yCAAyC;gBAClD,WAAW,EAAE,gCAAgC,QAAQ,oBAAoB;aAC1E,CAAC,CAAC;QACL,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAA,8BAAe,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,OAAO,YAAY,CAAC,GAAG,EAAE;gBACvB,KAAK,EAAE,oBAAoB;gBAC3B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,WAAW,EACT,mGAAmG;aACtG,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,CAAC,oBAAoB,CAAC;QAC5C,MAAM,gBAAgB,GAAG,GAAG,CAAC,qBAAqB,CAAC;QACnD,IAAI,CAAC,UAAU,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACrC,OAAO,UAAU,EAAE,CAAC;QACtB,CAAC;QAED,MAAM,YAAY,GAAG,IAAA,yBAAc,EAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,gBAAgB,GAAwB;YAC5C,GAAG,IAAA,qCAA2B,GAAE;YAChC,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC;SACjC,CAAC;QACF,MAAM,cAAc,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAE7B,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YACjE,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAI,GAAyB,CAAC,IAAI,CAAC;YAChD,IAAI,OAAO,KAAK,yBAAyB,EAAE,CAAC;gBAC1C,OAAO,YAAY,CAAC,GAAG,EAAE;oBACvB,KAAK,EAAE,YAAY;oBACnB,OAAO,EAAE,8CAA8C;oBACvD,WAAW,EAAE,gCAAgC,QAAQ,oBAAoB;iBAC1E,CAAC,CAAC;YACL,CAAC;YACD,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,MAAM;gBACb,GAAG,EAAE,0BAA0B;gBAC/B,QAAQ;gBACR,OAAO;aACR,CAAC,CACH,CAAC;YACF,OAAO,UAAU,EAAE,CAAC;QACtB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,kBAAkB,CAAC;gBAC3B,UAAU;gBACV,YAAY;gBACZ,OAAO,EAAE;oBACP,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAChD;gBACD,gBAAgB;gBAChB,cAAc;aACf,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACtD,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,MAAM;gBACb,GAAG,EAAE,2DAA2D;gBAChE,QAAQ;gBACR,OAAO,EAAG,GAAyB,CAAC,IAAI;aACzC,CAAC,CACH,CAAC;YACF,OAAO,UAAU,EAAE,CAAC;QACtB,CAAC;QAED,IAAI,GAgBF,CAAC;QACH,IAAI,CAAC;YACH,uEAAuE;YACvE,mEAAmE;YACnE,sDAAsD;YACtD,GAAG,GAAG,MAAM,EAAE,CAAC,YAAY,CACzB,KAAK,EAAE,EAAE,EAAE,EAAE;gBACX,MAAM,IAAA,gCAAsB,EAAC,EAAE,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE;oBACtD,MAAM,GAAG,CAAC,4BAA4B,CACpC,UAAU,EACV,gBAAgB,EAChB,YAAY,EACZ,KAAK,CACN,CAAC;gBACJ,CAAC,CAAC,CAAC;gBACH,OAAO,EAAE,CAAC,sBAAsB,CAAC,MAAM,CAAC;oBACtC,IAAI,EAAE;wBACJ,QAAQ;wBACR,IAAI,EAAE,MAAiB;wBACvB,cAAc,EAAE,YAAY;wBAC5B,SAAS,EAAE,IAAI,CAAC,SAAS;wBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,eAAe,EAAE,SAAS;wBAC1B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,6BAA6B;wBACpD,gBAAgB,EAAE,gBAAyC;wBAC3D,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;wBACrC,MAAM,EAAE,QAAqB;wBAC7B,SAAS,EAAE,IAAI,IAAI,EAAE;qBACtB;oBACD,MAAM,EAAE;wBACN,EAAE,EAAE,IAAI;wBACR,QAAQ,EAAE,IAAI;wBACd,IAAI,EAAE,IAAI;wBACV,MAAM,EAAE,IAAI;wBACZ,cAAc,EAAE,IAAI;wBACpB,SAAS,EAAE,IAAI;wBACf,QAAQ,EAAE,IAAI;wBACd,WAAW,EAAE,IAAI;wBACjB,gBAAgB,EAAE,IAAI;wBACtB,MAAM,EAAE,IAAI;wBACZ,SAAS,EAAE,IAAI;wBACf,SAAS,EAAE,IAAI;wBACf,SAAS,EAAE,IAAI;qBAChB;iBACF,CAAC,CAAC;YACL,CAAC,EACD,EAAE,OAAO,EAAE,KAAK,EAAE,CACnB,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,CAAC,cAAc,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1E,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACtD,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,MAAM;gBACb,GAAG,EAAE,iDAAiD;gBACtD,QAAQ;gBACR,OAAO,EAAG,GAAyB,CAAC,IAAI;aACzC,CAAC,CACH,CAAC;YACF,OAAO,UAAU,EAAE,CAAC;QACtB,CAAC;QAED,KAAK,YAAY;aACd,IAAI,CACH;YACE,IAAI,EAAE,4BAAc,CAAC,oBAAoB;YACzC,QAAQ;YACR,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,OAAO,EAAE;gBACP,OAAO,EAAE,MAAM;gBACf,MAAM,EAAE,IAAI,CAAC,SAAS;gBACtB,SAAS,EAAE,QAAQ;aACpB;SACF,EACD,EAAE,CACH;aACA,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE,CACtB,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,mBAAmB;YAC1B,KAAK,EAAG,GAA4B,EAAE,OAAO,IAAI,SAAS;SAC3D,CAAC,CACH,CACF,CAAC;QAEJ,OAAO,YAAY,CAAC,GAAG,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,SAAS,CAAC,QAAgB,EAAE,IAAiB,EAAE,GAAQ;QAC3D,MAAM,MAAM,GACV,IAAA,kCAAgB,EAAC,IAAI,EAAE,QAAQ,CAAC;YAChC,IAAA,2BAAiB,EAAC,IAAI,EAAE,oBAAU,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAE1B,MAAM,EAAE,YAAY,EAAE,GAAG,wDAAa,UAAU,GAAC,CAAC;QAClD,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAE7B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,sBAAsB,CAAC,UAAU,CAAC;YACrD,KAAK,EAAE,EAAE,QAAQ,EAAE;YACnB,MAAM,EAAE;gBACN,EAAE,EAAE,IAAI;gBACR,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,IAAI;gBACZ,cAAc,EAAE,IAAI;gBACpB,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,IAAI;gBACjB,gBAAgB,EAAE,IAAI;gBACtB,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,IAAI;gBACf,SAAS,EAAE,IAAI;gBACf,SAAS,EAAE,IAAI;aAChB;SACF,CAAC,CAAC;QACH,IAAI,CAAC,GAAG;YAAE,OAAO,QAAQ,EAAE,CAAC;QAC5B,OAAO,YAAY,CAAC,GAAG,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,WAAW,CACf,QAAgB,EAChB,OAAgB,EAChB,IAAiB,EACjB,GAAQ;QAER,MAAM,MAAM,GACV,IAAA,qCAAmB,EAAC,IAAI,EAAE,QAAQ,CAAC;YACnC,IAAA,2BAAiB,EAAC,IAAI,EAAE,oBAAU,CAAC,YAAY,CAAC,CAAC;QACnD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAE1B,MAAM,EAAE,CAAC,EAAE,GAAG,wDAAa,KAAK,GAAC,CAAC;QAClC,IAAI,GAAY,CAAC;QACjB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,UAAU,CAAC,yBAAyB,EAAE,cAAc,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,QAAQ,GAAG,OAAQ,GAA4B,EAAE,MAAM,KAAK,QAAQ,CAAC;QAE3E,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC;YACpE,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,OAAO,UAAU,CAAC,mCAAmC,CAAC,CAAC;YACzD,CAAC;YACD,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAuB,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;YACtB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;YACpD,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YAC7D,WAAW,EAAE,CAAC;iBACX,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;iBAClC,QAAQ,EAAE;iBACV,QAAQ,EAAE;YACb,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;SACxC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,eAAe,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAuB,CAAC;QAE5C,IACE,IAAI,CAAC,YAAY,KAAK,SAAS;YAC/B,IAAI,CAAC,gBAAgB,KAAK,SAAS;YACnC,IAAI,CAAC,WAAW,KAAK,SAAS;YAC9B,IAAI,CAAC,MAAM,KAAK,SAAS,EACzB,CAAC;YACD,OAAO,UAAU,CAAC,mFAAmF,CAAC,CAAC;QACzG,CAAC;QAED,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACrD,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,QAAgB,EAChB,IAAqB,EACrB,IAAiB,EACjB,GAAQ;QAER,MAAM,EAAE,YAAY,EAAE,GAAG,wDAAa,UAAU,GAAC,CAAC;QAClD,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAE7B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,sBAAsB,CAAC,UAAU,CAAC;YACrD,KAAK,EAAE,EAAE,QAAQ,EAAE;YACnB,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE;SACzD,CAAC,CAAC;QACH,IAAI,CAAC,GAAG;YAAE,OAAO,QAAQ,EAAE,CAAC;QAE5B,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/B,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,CAAC,oBAAoB,CAAC;QAC5C,MAAM,gBAAgB,GAAG,GAAG,CAAC,qBAAqB,CAAC;QACnD,IAAI,CAAC,UAAU,IAAI,CAAC,gBAAgB;YAAE,OAAO,UAAU,EAAE,CAAC;QAE1D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;QACvD,IAAI,CAAC;YACH,gEAAgE;YAChE,gDAAgD;YAChD,MAAM,EAAE,CAAC,YAAY,CACnB,KAAK,EAAE,EAAE,EAAE,EAAE;gBACX,MAAM,IAAA,gCAAsB,EAAC,EAAE,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE;oBACtD,MAAM,GAAG,CAAC,4BAA4B,CACpC,UAAU,EACV,gBAAgB,EAChB,GAAG,CAAC,cAAc,EAClB,EAAE,CACH,CAAC;gBACJ,CAAC,CAAC,CAAC;gBACH,MAAM,EAAE,CAAC,sBAAsB,CAAC,MAAM,CAAC;oBACrC,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE;oBACrB,IAAI,EAAE;wBACJ,MAAM,EAAE,IAAI,CAAC,MAAmB;wBAChC,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC/D;iBACF,CAAC,CAAC;YACL,CAAC,EACD,EAAE,OAAO,EAAE,KAAK,EAAE,CACnB,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,MAAM;gBACb,GAAG,EAAE,0BAA0B;gBAC/B,QAAQ;gBACR,OAAO,EAAG,GAAyB,CAAC,IAAI;aACzC,CAAC,CACH,CAAC;YACF,OAAO,UAAU,EAAE,CAAC;QACtB,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC/B,MAAM,IAAI,CAAC,yBAAyB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACtD,CAAC;QAED,KAAK,YAAY;aACd,IAAI,CACH;YACE,IAAI,EACF,IAAI,CAAC,MAAM,KAAK,UAAU;gBACxB,CAAC,CAAC,4BAAc,CAAC,mBAAmB;gBACpC,CAAC,CAAC,4BAAc,CAAC,mBAAmB;YACxC,QAAQ;YACR,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE;SACpC,EACD,EAAE,CACH;aACA,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE,CACtB,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,mBAAmB;YAC1B,KAAK,EAAG,GAA4B,EAAE,OAAO,IAAI,SAAS;SAC3D,CAAC,CACH,CACF,CAAC;QAEJ,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAChE,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,QAAgB,EAChB,IAAqB,EACrB,IAAiB,EACjB,GAAQ;QAER,MAAM,EAAE,YAAY,EAAE,GAAG,wDAAa,UAAU,GAAC,CAAC;QAClD,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAE7B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,sBAAsB,CAAC,UAAU,CAAC;YACrD,KAAK,EAAE,EAAE,QAAQ,EAAE;YACnB,MAAM,EAAE;gBACN,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,IAAI;gBACV,cAAc,EAAE,IAAI;gBACpB,gBAAgB,EAAE,IAAI;gBACtB,MAAM,EAAE,IAAI;aACb;SACF,CAAC,CAAC;QACH,IAAI,CAAC,GAAG;YAAE,OAAO,QAAQ,EAAE,CAAC;QAC5B,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACxB,OAAO,YAAY,CAAC,GAAG,EAAE;gBACvB,KAAK,EAAE,2BAA2B;gBAClC,OAAO,EAAE,0CAA0C;aACpD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,CAAC,oBAAoB,CAAC;QAC5C,IAAI,CAAC,UAAU;YAAE,OAAO,UAAU,EAAE,CAAC;QAErC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAErC,MAAM,mBAAmB,GAAG,IAAI,CAAC,gBAAgB;YAC/C,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,CAAC;YACpE,CAAC,CAAC,SAAS,CAAC;QAEd,0EAA0E;QAC1E,0EAA0E;QAC1E,qEAAqE;QACrE,0EAA0E;QAC1E,uBAAuB;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,kBAAkB,CAAC;gBAC3B,UAAU;gBACV,YAAY,EAAE,GAAG,CAAC,cAAc;gBAChC,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS;oBACjC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;oBACnG,CAAC,CAAC,IAAI,CAAC,MAAM;wBACX,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE;wBACtC,CAAC,CAAC,EAAE,CAAC;gBACT,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1E,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,MAAM;gBACb,GAAG,EAAE,uCAAuC;gBAC5C,QAAQ;gBACR,OAAO,EAAG,GAAyB,CAAC,IAAI;aACzC,CAAC,CACH,CAAC;YACF,OAAO,UAAU,EAAE,CAAC;QACtB,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YACpD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;oBACb,KAAK,EAAE,MAAM;oBACb,GAAG,EAAE,0BAA0B;oBAC/B,QAAQ;oBACR,OAAO,EAAG,GAAyB,CAAC,IAAI;iBACzC,CAAC,CACH,CAAC;gBACF,OAAO,UAAU,EAAE,CAAC;YACtB,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAA6C,EAAE,CAAC;QAC1D,IAAI,mBAAmB;YAAE,IAAI,CAAC,gBAAgB,GAAG,mBAA4C,CAAC;QAC9F,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;YAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACxE,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAEzD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,sBAAsB,CAAC,MAAM,CAAC;YACrD,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE;YACrB,IAAI;YACJ,MAAM,EAAE;gBACN,EAAE,EAAE,IAAI;gBACR,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,IAAI;gBACZ,cAAc,EAAE,IAAI;gBACpB,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,IAAI;gBACjB,gBAAgB,EAAE,IAAI;gBACtB,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,IAAI;gBACf,SAAS,EAAE,IAAI;gBACf,SAAS,EAAE,IAAI;aAChB;SACF,CAAC,CAAC;QAEH,KAAK,YAAY;aACd,IAAI,CACH;YACE,IAAI,EAAE,4BAAc,CAAC,mBAAmB;YACxC,QAAQ;YACR,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,OAAO,EAAE;gBACP,OAAO,EAAE,GAAG,CAAC,IAAI;gBACjB,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;aACrC;SACF,EACD,EAAE,CACH;aACA,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE,CACtB,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,mBAAmB;YAC1B,KAAK,EAAG,GAA4B,EAAE,OAAO,IAAI,SAAS;SAC3D,CAAC,CACH,CACF,CAAC;QAEJ,OAAO,YAAY,CAAC,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,YAAY,CAChB,QAAgB,EAChB,GAAQ,EACR,IAAiB,EACjB,GAAQ;QAER,MAAM,MAAM,GACV,IAAA,qCAAmB,EAAC,IAAI,EAAE,QAAQ,CAAC;YACnC,IAAA,2BAAiB,EAAC,IAAI,EAAE,oBAAU,CAAC,YAAY,CAAC,CAAC;QACnD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAE1B,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,MAAM,EAAE,CAAC;YAC/C,OAAO,YAAY,CAAC,GAAG,EAAE;gBACvB,KAAK,EAAE,kBAAkB;gBACzB,OAAO,EAAE,4CAA4C;gBACrD,WAAW,EAAE,uBAAuB,QAAQ,iCAAiC;aAC9E,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,YAAY,EAAE,GAAG,wDAAa,UAAU,GAAC,CAAC;QAClD,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAE7B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,sBAAsB,CAAC,UAAU,CAAC;YACrD,KAAK,EAAE,EAAE,QAAQ,EAAE;YACnB,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;SACvD,CAAC,CAAC;QACH,IAAI,CAAC,GAAG;YAAE,OAAO,QAAQ,EAAE,CAAC;QAE5B,MAAM,UAAU,GAAG,GAAG,CAAC,oBAAoB,CAAC;QAC5C,MAAM,gBAAgB,GAAG,GAAG,CAAC,qBAAqB,CAAC;QACnD,IAAI,CAAC,UAAU,IAAI,CAAC,gBAAgB;YAAE,OAAO,UAAU,EAAE,CAAC;QAE1D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAErC,IAAI,CAAC;YACH,uEAAuE;YACvE,2CAA2C;YAC3C,MAAM,EAAE,CAAC,YAAY,CACnB,KAAK,EAAE,EAAE,EAAE,EAAE;gBACX,MAAM,IAAA,gCAAsB,EAAC,EAAE,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE;oBACtD,MAAM,GAAG,CAAC,4BAA4B,CACpC,UAAU,EACV,gBAAgB,EAChB,GAAG,CAAC,cAAc,EAClB,QAAQ,CACT,CAAC;gBACJ,CAAC,CAAC,CAAC;gBACH,MAAM,GAAG,CAAC,cAAc,CAAC,UAAU,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC;gBACzD,MAAM,EAAE,CAAC,sBAAsB,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACpE,CAAC,EACD,EAAE,OAAO,EAAE,KAAK,EAAE,CACnB,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,MAAM;gBACb,GAAG,EAAE,mBAAmB;gBACxB,QAAQ;gBACR,OAAO,EAAG,GAAyB,CAAC,IAAI;aACzC,CAAC,CACH,CAAC;YACF,OAAO,UAAU,EAAE,CAAC;QACtB,CAAC;QAED,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACtD,MAAM,IAAI,CAAC,yBAAyB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAEpD,MAAM,iCAAiC,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAE3D,KAAK,YAAY;aACd,IAAI,CACH;YACE,IAAI,EAAE,4BAAc,CAAC,kBAAkB;YACvC,QAAQ;YACR,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE;SAC/B,EACD,EAAE,CACH;aACA,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE,CACtB,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,mBAAmB;YAC1B,KAAK,EAAG,GAA4B,EAAE,OAAO,IAAI,SAAS;SAC3D,CAAC,CACH,CACF,CAAC;QAEJ,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;CACF;AAvsBD,gCAusBC;AAED,SAAS,qBAAqB,CAC5B,QAAiB,EACjB,QAA6B;IAE7B,MAAM,IAAI,GACR,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAClE,CAAC,CAAE,QAAgC;QACnC,CAAC,CAAC,IAAA,qCAA2B,GAAE,CAAC;IACpC,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,EAAE,CAAC;AAClC,CAAC;AAkBD,SAAS,eAAe,CAAC,GAAiB;IACxC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iCAAiC,CAC9C,GAAQ,EACR,QAAgB,EAChB,EAAgB;IAEhB,MAAM,UAAU,GAAG,GAAG,CAAC,oBAAoB,CAAC;IAC5C,IAAI,CAAC,UAAU;QAAE,OAAO;IACxB,IAAI,SAAS,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC;YAC7C,KAAK,EAAE,EAAE,QAAQ,EAAE;YACnB,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;SAC9C,CAAC,CAAC;QACH,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACnC,IAAI,CAAC;QACH,MAAM,EAAE,6BAA6B,EAAE,GAAG,EAAE,6BAA6B,EAAE,GACzE,wDAAa,2CAA2C,GAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC;YACrB,MAAM,EAAE,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU;SACrD,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,GAAG,CACf,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAClB,MAAM;aACH,IAAI,CAAC,IAAI,6BAA6B,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;aAChF,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,MAAM;gBACb,GAAG,EAAE,6CAA6C;gBAClD,QAAQ;gBACR,OAAO,EAAG,GAAyB,CAAC,IAAI;aACzC,CAAC,CACH,CAAC;QACJ,CAAC,CAAC,CACL,CACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;AACH,CAAC"}

package/dist/lib/tenant/idp-name.d.ts

@@ -0,0 +1,2 @@
+export declare function cognitoIdpName(tenantId: string): string;
+//# sourceMappingURL=idp-name.d.ts.map

package/dist/lib/tenant/idp-name.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"idp-name.d.ts","sourceRoot":"","sources":["../../../src/lib/tenant/idp-name.ts"],"names":[],"mappings":"AAaA,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAGvD"}

package/dist/lib/tenant/idp-name.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.cognitoIdpName = cognitoIdpName;
+/**
+ * Cognito IdP-name derivation. Cognito's user-pool quota limits provider names
+ * to 32 characters. We use `tenant-{cuid}` so each tenant gets a unique
+ * Cognito identity-provider name. cuid v1 is 25 chars which fits the 32-char
+ * limit (`tenant-` is 7 chars). Tenants whose IDs exceed 25 chars are
+ * truncated to 25 — collision is theoretically possible only between IDs
+ * sharing a 25-char prefix, which is astronomically unlikely for cuid.
+ *
+ * T5 (IdP CRUD) consumes this to populate `ProviderName` on `CreateIdentityProviderCommand`;
+ * T8 (sign-in discovery) consumes it to build the Cognito Hosted UI redirect URL.
+ */
+const TENANT_ID_MAX = 25;
+function cognitoIdpName(tenantId) {
+    const id = tenantId.length > TENANT_ID_MAX ? tenantId.slice(0, TENANT_ID_MAX) : tenantId;
+    return `tenant-${id}`;
+}
+//# sourceMappingURL=idp-name.js.map

package/dist/lib/tenant/idp-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"idp-name.js","sourceRoot":"","sources":["../../../src/lib/tenant/idp-name.ts"],"names":[],"mappings":";;AAaA,wCAGC;AAhBD;;;;;;;;;;GAUG;AACH,MAAM,aAAa,GAAG,EAAE,CAAC;AAEzB,SAAgB,cAAc,CAAC,QAAgB;IAC7C,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACzF,OAAO,UAAU,EAAE,EAAE,CAAC;AACxB,CAAC"}

package/dist/lib/tenant/member-handler.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Member CRUD handler — list, change role, delete.
+ *
+ * Endpoints (wired in routes/tenant-members.ts):
+ *   GET    /api/tenants/:id/members
+ *   PATCH  /api/tenants/:id/members/:memberId   { role }
+ *   DELETE /api/tenants/:id/members/:memberId
+ *   POST   /api/tenants/:id/transfer-ownership  { newOwnerUserId }
+ *
+ * Invariants enforced here:
+ *  - Cross-tenant: every Prisma query includes `tenantId: auth.activeTenantId`.
+ *  - Single-OWNER: PATCH cannot promote anyone to OWNER (transfer-ownership only).
+ *  - Self-demotion: OWNER cannot lose their own role via PATCH or DELETE.
+ *  - Cache invalidation: every mutation invalidates the affected user's claims
+ *    cache before returning.
+ *  - AdminUserGlobalSignOut on member removal is best-effort; log + continue.
+ *  - Audit emit: stub call site for T7 to replace.
+ */
+import type { Env } from "../../env";
+import type { AuthContext } from "../auth/auth-context";
+export declare class MemberHandler {
+    /** GET /api/tenants/:id/members — paginated. */
+    handleList(tenantId: string, request: Request, auth: AuthContext, env: Env): Promise<Response>;
+    /** PATCH /api/tenants/:id/members/:memberId — change role. */
+    handlePatchRole(tenantId: string, memberId: string, request: Request, auth: AuthContext, env: Env): Promise<Response>;
+    /** DELETE /api/tenants/:id/members/:memberId — soft-delete + sign-out. */
+    handleRemove(tenantId: string, memberId: string, auth: AuthContext, env: Env): Promise<Response>;
+    /** POST /api/tenants/:id/transfer-ownership { newOwnerUserId }. */
+    handleTransferOwnership(tenantId: string, request: Request, auth: AuthContext, env: Env): Promise<Response>;
+}
+//# sourceMappingURL=member-handler.d.ts.map

package/dist/lib/tenant/member-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"member-handler.d.ts","sourceRoot":"","sources":["../../../src/lib/tenant/member-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAOH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAqExD,qBAAa,aAAa;IACxB,gDAAgD;IAC1C,UAAU,CACd,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,WAAW,EACjB,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,QAAQ,CAAC;IAkDpB,8DAA8D;IACxD,eAAe,CACnB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,WAAW,EACjB,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,QAAQ,CAAC;IAyFpB,0EAA0E;IACpE,YAAY,CAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,WAAW,EACjB,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,QAAQ,CAAC;IA8DpB,mEAAmE;IAC7D,uBAAuB,CAC3B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,WAAW,EACjB,GAAG,EAAE,GAAG,GACP,OAAO,CAAC,QAAQ,CAAC;CA2ErB"}

package/dist/lib/tenant/member-handler.js

@@ -0,0 +1,343 @@
+"use strict";
+/**
+ * Member CRUD handler — list, change role, delete.
+ *
+ * Endpoints (wired in routes/tenant-members.ts):
+ *   GET    /api/tenants/:id/members
+ *   PATCH  /api/tenants/:id/members/:memberId   { role }
+ *   DELETE /api/tenants/:id/members/:memberId
+ *   POST   /api/tenants/:id/transfer-ownership  { newOwnerUserId }
+ *
+ * Invariants enforced here:
+ *  - Cross-tenant: every Prisma query includes `tenantId: auth.activeTenantId`.
+ *  - Single-OWNER: PATCH cannot promote anyone to OWNER (transfer-ownership only).
+ *  - Self-demotion: OWNER cannot lose their own role via PATCH or DELETE.
+ *  - Cache invalidation: every mutation invalidates the affected user's claims
+ *    cache before returning.
+ *  - AdminUserGlobalSignOut on member removal is best-effort; log + continue.
+ *  - Audit emit: stub call site for T7 to replace.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MemberHandler = void 0;
+const client_cognito_identity_provider_1 = require("@aws-sdk/client-cognito-identity-provider");
+const auth_middleware_1 = require("../auth/auth-middleware");
+const require_1 = require("../auth/require");
+const claims_cache_1 = require("../auth/claims-cache");
+const audit_emit_1 = require("./audit-emit");
+const transfer_ownership_1 = require("./transfer-ownership");
+const JSON_HEADERS = { "content-type": "application/json" };
+function jsonResponse(status, body) {
+    return new Response(JSON.stringify(body), { status, headers: JSON_HEADERS });
+}
+function unprocessable(message, remediation) {
+    return jsonResponse(422, {
+        error: "UNPROCESSABLE",
+        message,
+        ...(remediation ? { remediation } : {}),
+    });
+}
+async function invalidateCache(env, cognitoSub) {
+    if (!cognitoSub)
+        return;
+    try {
+        const cache = (0, claims_cache_1.createClaimsCacheFromEnv)();
+        await cache.invalidate(cognitoSub);
+    }
+    catch (err) {
+        console.warn(JSON.stringify({
+            level: "warn",
+            msg: "Cache invalidation failed",
+            cognitoSub,
+            error: String(err),
+        }));
+    }
+    // env is unused but kept in the signature in case T7 wants to read DDB
+    // table name from env directly rather than via the factory.
+    void env;
+}
+async function bestEffortGlobalSignOut(env, username) {
+    const userPoolId = env.COGNITO_USER_POOL_ID;
+    if (!userPoolId || !username)
+        return;
+    try {
+        const client = new client_cognito_identity_provider_1.CognitoIdentityProviderClient({
+            region: env.COGNITO_REGION ?? process.env.AWS_REGION,
+        });
+        await client.send(new client_cognito_identity_provider_1.AdminUserGlobalSignOutCommand({
+            UserPoolId: userPoolId,
+            Username: username,
+        }));
+    }
+    catch (err) {
+        console.warn(JSON.stringify({
+            level: "warn",
+            msg: "AdminUserGlobalSignOut failed",
+            username,
+            error: String(err),
+        }));
+    }
+}
+class MemberHandler {
+    /** GET /api/tenants/:id/members — paginated. */
+    async handleList(tenantId, request, auth, env) {
+        const denied = (0, auth_middleware_1.requireActiveTenant)(auth, tenantId) ??
+            (0, require_1.requireCapability)(auth, require_1.Capability.MemberView);
+        if (denied)
+            return denied;
+        const url = new URL(request.url);
+        const limit = Math.min(Math.max(Number(url.searchParams.get("limit") ?? "50"), 1), 200);
+        const cursor = url.searchParams.get("cursor") ?? undefined;
+        const { createPrisma } = await Promise.resolve().then(() => __importStar(require("../../db")));
+        const db = createPrisma(env);
+        const where = { tenantId };
+        const members = await db.tenantMember.findMany({
+            where,
+            take: limit + 1,
+            ...(cursor ? { cursor: { id: cursor }, skip: 1 } : {}),
+            orderBy: { id: "asc" },
+            select: {
+                id: true,
+                userId: true,
+                role: true,
+                status: true,
+                joinedAt: true,
+                invitedAt: true,
+                lastActiveAt: true,
+                user: { select: { id: true, email: true, handle: true } },
+            },
+        });
+        const hasMore = members.length > limit;
+        const page = hasMore ? members.slice(0, limit) : members;
+        const nextCursor = hasMore ? page[page.length - 1]?.id : null;
+        return jsonResponse(200, {
+            members: page.map((m) => ({
+                id: m.id,
+                userId: m.userId,
+                role: m.role,
+                status: m.status,
+                joinedAt: m.joinedAt,
+                invitedAt: m.invitedAt,
+                lastActiveAt: m.lastActiveAt,
+                user: m.user,
+            })),
+            nextCursor,
+        });
+    }
+    /** PATCH /api/tenants/:id/members/:memberId — change role. */
+    async handlePatchRole(tenantId, memberId, request, auth, env) {
+        const denied = (0, auth_middleware_1.requireActiveTenant)(auth, tenantId) ??
+            (0, require_1.requireCapability)(auth, require_1.Capability.MemberChangeRole);
+        if (denied)
+            return denied;
+        const { z } = await Promise.resolve().then(() => __importStar(require("zod")));
+        let body;
+        try {
+            body = await request.json();
+        }
+        catch {
+            return jsonResponse(400, { error: "INVALID_JSON", message: "Body must be valid JSON" });
+        }
+        const schema = z.object({
+            role: z.enum(["ADMIN", "MEMBER", "GUEST"]),
+        });
+        const parsed = schema.safeParse(body);
+        if (!parsed.success) {
+            const msg = parsed.error.issues[0]?.message ?? "Invalid role";
+            const isOwner = typeof body === "object" &&
+                body !== null &&
+                body.role === "OWNER";
+            if (isOwner) {
+                return unprocessable("OWNER cannot be assigned via PATCH", `POST /api/tenants/${tenantId}/transfer-ownership`);
+            }
+            return jsonResponse(400, { error: "VALIDATION_ERROR", message: msg });
+        }
+        const { createPrisma } = await Promise.resolve().then(() => __importStar(require("../../db")));
+        const db = createPrisma(env);
+        const target = await db.tenantMember.findFirst({
+            where: { id: memberId, tenantId },
+            select: {
+                id: true,
+                userId: true,
+                role: true,
+                status: true,
+                user: { select: { cognitoSub: true } },
+            },
+        });
+        if (!target) {
+            return jsonResponse(404, { error: "NOT_FOUND", message: "Member not found" });
+        }
+        if (target.role === "OWNER") {
+            return unprocessable("Cannot demote OWNER via PATCH", `POST /api/tenants/${tenantId}/transfer-ownership`);
+        }
+        if (target.userId === auth.userId && auth.tenantRole === "OWNER") {
+            return unprocessable("OWNER cannot self-demote", `POST /api/tenants/${tenantId}/transfer-ownership`);
+        }
+        if (target.role === parsed.data.role) {
+            return jsonResponse(200, { id: target.id, role: target.role, unchanged: true });
+        }
+        const updated = await db.tenantMember.update({
+            where: { id: target.id },
+            data: { role: parsed.data.role },
+            select: { id: true, userId: true, role: true, status: true },
+        });
+        await invalidateCache(env, target.user.cognitoSub);
+        (0, audit_emit_1.emitTenantAudit)({
+            tenantId,
+            actorUserId: auth.userId,
+            action: "member.change_role",
+            targetType: "member",
+            targetId: target.id,
+            metadata: { previousRole: target.role, newRole: updated.role },
+        });
+        return jsonResponse(200, updated);
+    }
+    /** DELETE /api/tenants/:id/members/:memberId — soft-delete + sign-out. */
+    async handleRemove(tenantId, memberId, auth, env) {
+        const denied = (0, auth_middleware_1.requireActiveTenant)(auth, tenantId) ??
+            (0, require_1.requireCapability)(auth, require_1.Capability.MemberRemove);
+        if (denied)
+            return denied;
+        const { createPrisma } = await Promise.resolve().then(() => __importStar(require("../../db")));
+        const db = createPrisma(env);
+        const target = await db.tenantMember.findFirst({
+            where: { id: memberId, tenantId },
+            select: {
+                id: true,
+                userId: true,
+                role: true,
+                status: true,
+                user: { select: { cognitoSub: true, email: true } },
+            },
+        });
+        if (!target) {
+            return jsonResponse(404, { error: "NOT_FOUND", message: "Member not found" });
+        }
+        if (target.role === "OWNER") {
+            return unprocessable("OWNER cannot be removed", `POST /api/tenants/${tenantId}/transfer-ownership`);
+        }
+        if (target.userId === auth.userId && auth.tenantRole === "OWNER") {
+            return unprocessable("OWNER cannot remove themselves", `POST /api/tenants/${tenantId}/transfer-ownership`);
+        }
+        if (target.status === "REMOVED") {
+            return jsonResponse(200, { id: target.id, status: "REMOVED", unchanged: true });
+        }
+        await db.tenantMember.update({
+            where: { id: target.id },
+            data: { status: "REMOVED", removedAt: new Date() },
+        });
+        await invalidateCache(env, target.user.cognitoSub);
+        await bestEffortGlobalSignOut(env, target.user.email);
+        (0, audit_emit_1.emitTenantAudit)({
+            tenantId,
+            actorUserId: auth.userId,
+            action: "member.remove",
+            targetType: "member",
+            targetId: target.id,
+            metadata: { userId: target.userId },
+        });
+        return jsonResponse(200, { id: target.id, status: "REMOVED" });
+    }
+    /** POST /api/tenants/:id/transfer-ownership { newOwnerUserId }. */
+    async handleTransferOwnership(tenantId, request, auth, env) {
+        const denied = (0, auth_middleware_1.requireActiveTenant)(auth, tenantId);
+        if (denied)
+            return denied;
+        if (auth.tenantRole !== "OWNER" && auth.globalRole !== "SUPER_ADMIN") {
+            return jsonResponse(403, {
+                error: "FORBIDDEN",
+                message: "Only the current OWNER can transfer ownership",
+            });
+        }
+        const { z } = await Promise.resolve().then(() => __importStar(require("zod")));
+        let body;
+        try {
+            body = await request.json();
+        }
+        catch {
+            return jsonResponse(400, { error: "INVALID_JSON", message: "Body must be valid JSON" });
+        }
+        const parsed = z.object({ newOwnerUserId: z.string().min(1) }).safeParse(body);
+        if (!parsed.success) {
+            return jsonResponse(400, {
+                error: "VALIDATION_ERROR",
+                message: "newOwnerUserId is required",
+            });
+        }
+        if (parsed.data.newOwnerUserId === auth.userId) {
+            return jsonResponse(400, {
+                error: "VALIDATION_ERROR",
+                message: "New owner must be a different user",
+            });
+        }
+        const { createPrisma } = await Promise.resolve().then(() => __importStar(require("../../db")));
+        const db = createPrisma(env);
+        const result = await (0, transfer_ownership_1.transferOwnership)({
+            db,
+            tenantId,
+            currentOwnerUserId: auth.userId,
+            newOwnerUserId: parsed.data.newOwnerUserId,
+        });
+        if (!result.ok) {
+            const code = result.code;
+            if (code === "NOT_MEMBER" || code === "INACTIVE") {
+                return jsonResponse(404, {
+                    error: "NOT_FOUND",
+                    message: "New owner must be an active member of this tenant",
+                });
+            }
+            if (code === "ALREADY_OWNER") {
+                return jsonResponse(400, {
+                    error: "VALIDATION_ERROR",
+                    message: "New owner must be a different user",
+                });
+            }
+            return jsonResponse(409, { error: "CONFLICT", message: "OWNER row not found" });
+        }
+        await invalidateCache(env, result.oldOwnerCognitoSub);
+        await invalidateCache(env, result.newOwnerCognitoSub);
+        (0, audit_emit_1.emitTenantAudit)({
+            tenantId,
+            actorUserId: auth.userId,
+            action: "tenant.transfer_ownership",
+            targetType: "tenant",
+            targetId: tenantId,
+            metadata: { newOwnerUserId: parsed.data.newOwnerUserId },
+        });
+        return jsonResponse(200, { ok: true, newOwnerId: parsed.data.newOwnerUserId });
+    }
+}
+exports.MemberHandler = MemberHandler;
+//# sourceMappingURL=member-handler.js.map

package/dist/lib/tenant/member-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"member-handler.js","sourceRoot":"","sources":["../../../src/lib/tenant/member-handler.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAGH,gGAGmD;AAGnD,6DAA8D;AAC9D,6CAAgE;AAChE,uDAAgE;AAChE,6CAA+C;AAC/C,6DAAyD;AAEzD,MAAM,YAAY,GAAG,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;AAE5D,SAAS,YAAY,CAAC,MAAc,EAAE,IAAa;IACjD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,aAAa,CAAC,OAAe,EAAE,WAAoB;IAC1D,OAAO,YAAY,CAAC,GAAG,EAAE;QACvB,KAAK,EAAE,eAAe;QACtB,OAAO;QACP,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,GAAQ,EAAE,UAAqC;IAC5E,IAAI,CAAC,UAAU;QAAE,OAAO;IACxB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAA,uCAAwB,GAAE,CAAC;QACzC,MAAM,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,MAAM;YACb,GAAG,EAAE,2BAA2B;YAChC,UAAU;YACV,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;SACnB,CAAC,CACH,CAAC;IACJ,CAAC;IACD,uEAAuE;IACvE,4DAA4D;IAC5D,KAAK,GAAG,CAAC;AACX,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,GAAQ,EACR,QAAgB;IAEhB,MAAM,UAAU,GAAG,GAAG,CAAC,oBAAoB,CAAC;IAC5C,IAAI,CAAC,UAAU,IAAI,CAAC,QAAQ;QAAE,OAAO;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,gEAA6B,CAAC;YAC/C,MAAM,EAAE,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU;SACrD,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,gEAA6B,CAAC;YAChC,UAAU,EAAE,UAAU;YACtB,QAAQ,EAAE,QAAQ;SACnB,CAAC,CACH,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,MAAM;YACb,GAAG,EAAE,+BAA+B;YACpC,QAAQ;YACR,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;SACnB,CAAC,CACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAa,aAAa;IACxB,gDAAgD;IAChD,KAAK,CAAC,UAAU,CACd,QAAgB,EAChB,OAAgB,EAChB,IAAiB,EACjB,GAAQ;QAER,MAAM,MAAM,GACV,IAAA,qCAAmB,EAAC,IAAI,EAAE,QAAQ,CAAC;YACnC,IAAA,2BAAiB,EAAC,IAAI,EAAE,oBAAU,CAAC,UAAU,CAAC,CAAC;QACjD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAE1B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACxF,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;QAE3D,MAAM,EAAE,YAAY,EAAE,GAAG,wDAAa,UAAU,GAAC,CAAC;QAClD,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAE7B,MAAM,KAAK,GAAkC,EAAE,QAAQ,EAAE,CAAC;QAC1D,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC;YAC7C,KAAK;YACL,IAAI,EAAE,KAAK,GAAG,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE;YACtB,MAAM,EAAE;gBACN,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE,IAAI;gBACZ,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,IAAI;gBACf,YAAY,EAAE,IAAI;gBAClB,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;aAC1D;SACF,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC;QACvC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACzD,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAE9D,OAAO,YAAY,CAAC,GAAG,EAAE;YACvB,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACxB,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,IAAI,EAAE,CAAC,CAAC,IAAI;aACb,CAAC,CAAC;YACH,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAED,8DAA8D;IAC9D,KAAK,CAAC,eAAe,CACnB,QAAgB,EAChB,QAAgB,EAChB,OAAgB,EAChB,IAAiB,EACjB,GAAQ;QAER,MAAM,MAAM,GACV,IAAA,qCAAmB,EAAC,IAAI,EAAE,QAAQ,CAAC;YACnC,IAAA,2BAAiB,EAAC,IAAI,EAAE,oBAAU,CAAC,gBAAgB,CAAC,CAAC;QACvD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAE1B,MAAM,EAAE,CAAC,EAAE,GAAG,wDAAa,KAAK,GAAC,CAAC;QAClC,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAC1F,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;YACtB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;SAC3C,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,cAAc,CAAC;YAC9D,MAAM,OAAO,GACX,OAAO,IAAI,KAAK,QAAQ;gBACxB,IAAI,KAAK,IAAI;gBACZ,IAA0B,CAAC,IAAI,KAAK,OAAO,CAAC;YAC/C,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,aAAa,CAClB,oCAAoC,EACpC,qBAAqB,QAAQ,qBAAqB,CACnD,CAAC;YACJ,CAAC;YACD,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,EAAE,YAAY,EAAE,GAAG,wDAAa,UAAU,GAAC,CAAC;QAClD,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAE7B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC;YAC7C,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE;YACjC,MAAM,EAAE;gBACN,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE,IAAI;gBACZ,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,IAAI;gBACZ,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE;aACvC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5B,OAAO,aAAa,CAClB,+BAA+B,EAC/B,qBAAqB,QAAQ,qBAAqB,CACnD,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;YACjE,OAAO,aAAa,CAClB,0BAA0B,EAC1B,qBAAqB,QAAQ,qBAAqB,CACnD,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACrC,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC;YAC3C,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE;YACxB,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAkB,EAAE;YAC9C,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE;SAC7D,CAAC,CAAC;QAEH,MAAM,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAEnD,IAAA,4BAAe,EAAC;YACd,QAAQ;YACR,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,MAAM,EAAE,oBAAoB;YAC5B,UAAU,EAAE,QAAQ;YACpB,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,QAAQ,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;SAC/D,CAAC,CAAC;QAEH,OAAO,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,YAAY,CAChB,QAAgB,EAChB,QAAgB,EAChB,IAAiB,EACjB,GAAQ;QAER,MAAM,MAAM,GACV,IAAA,qCAAmB,EAAC,IAAI,EAAE,QAAQ,CAAC;YACnC,IAAA,2BAAiB,EAAC,IAAI,EAAE,oBAAU,CAAC,YAAY,CAAC,CAAC;QACnD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAE1B,MAAM,EAAE,YAAY,EAAE,GAAG,wDAAa,UAAU,GAAC,CAAC;QAClD,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAE7B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC;YAC7C,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE;YACjC,MAAM,EAAE;gBACN,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE,IAAI;gBACZ,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,IAAI;gBACZ,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;aACpD;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5B,OAAO,aAAa,CAClB,yBAAyB,EACzB,qBAAqB,QAAQ,qBAAqB,CACnD,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;YACjE,OAAO,aAAa,CAClB,gCAAgC,EAChC,qBAAqB,QAAQ,qBAAqB,CACnD,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAM,SAAuC,EAAE,CAAC;YAC/D,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC;YAC3B,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE;YACxB,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE;SACnD,CAAC,CAAC;QAEH,MAAM,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEtD,IAAA,4BAAe,EAAC;YACd,QAAQ;YACR,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,MAAM,EAAE,eAAe;YACvB,UAAU,EAAE,QAAQ;YACpB,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;SACpC,CAAC,CAAC;QAEH,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,mEAAmE;IACnE,KAAK,CAAC,uBAAuB,CAC3B,QAAgB,EAChB,OAAgB,EAChB,IAAiB,EACjB,GAAQ;QAER,MAAM,MAAM,GAAG,IAAA,qCAAmB,EAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACnD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAE1B,IAAI,IAAI,CAAC,UAAU,KAAK,OAAO,IAAI,IAAI,CAAC,UAAU,KAAK,aAAa,EAAE,CAAC;YACrE,OAAO,YAAY,CAAC,GAAG,EAAE;gBACvB,KAAK,EAAE,WAAW;gBAClB,OAAO,EAAE,+CAA+C;aACzD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,CAAC,EAAE,GAAG,wDAAa,KAAK,GAAC,CAAC;QAClC,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAC1F,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,YAAY,CAAC,GAAG,EAAE;gBACvB,KAAK,EAAE,kBAAkB;gBACzB,OAAO,EAAE,4BAA4B;aACtC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/C,OAAO,YAAY,CAAC,GAAG,EAAE;gBACvB,KAAK,EAAE,kBAAkB;gBACzB,OAAO,EAAE,oCAAoC;aAC9C,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,YAAY,EAAE,GAAG,wDAAa,UAAU,GAAC,CAAC;QAClD,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAE7B,MAAM,MAAM,GAAG,MAAM,IAAA,sCAAiB,EAAC;YACrC,EAAE;YACF,QAAQ;YACR,kBAAkB,EAAE,IAAI,CAAC,MAAM;YAC/B,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc;SAC3C,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YACzB,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;gBACjD,OAAO,YAAY,CAAC,GAAG,EAAE;oBACvB,KAAK,EAAE,WAAW;oBAClB,OAAO,EAAE,mDAAmD;iBAC7D,CAAC,CAAC;YACL,CAAC;YACD,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;gBAC7B,OAAO,YAAY,CAAC,GAAG,EAAE;oBACvB,KAAK,EAAE,kBAAkB;oBACzB,OAAO,EAAE,oCAAoC;iBAC9C,CAAC,CAAC;YACL,CAAC;YACD,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACtD,MAAM,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAEtD,IAAA,4BAAe,EAAC;YACd,QAAQ;YACR,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,MAAM,EAAE,2BAA2B;YACnC,UAAU,EAAE,QAAQ;YACpB,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE;SACzD,CAAC,CAAC;QAEH,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;IACjF,CAAC;CACF;AA9SD,sCA8SC"}

package/dist/lib/tenant/reserved-slugs.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Reserved tenant slugs — values that may not be used as a Tenant.slug.
+ *
+ * Categories:
+ *  - Platform terms (paths reachable on api.skybber.com / app.skybber.com).
+ *  - Brand-protection placeholders (top consumer brands and the trellis-org).
+ *  - Generic legal / system terms.
+ *
+ * The list is conservative; expand over time. Slugs that pass {@link SLUG_REGEX}
+ * but appear in this set are rejected at tenant-creation time.
+ *
+ * See plans/mvp/10-trellis-stages/01-schema-migration.md §slug-reservation-list.
+ */
+export declare const RESERVED_SLUGS: ReadonlySet<string>;
+/**
+ * Validates the *format* of a tenant slug.
+ *
+ * Rules:
+ *  - 3–40 characters.
+ *  - Lowercase ASCII letters, digits, and hyphens only.
+ *  - Must start and end with an alphanumeric character (no leading/trailing hyphens).
+ *  - No two consecutive hyphens (avoids confusion with punycode `xn--`).
+ *
+ * The 40-char ceiling accommodates auto-generated personal-tenant slugs of
+ * the form `personal-{userId}` where userId is a 25-char cuid (T2 — JIT
+ * provisioning). User-claimed organization slugs typically stay well under
+ * the Cognito `tenantSlug` claim limit of 32 chars.
+ *
+ * Format-only — does not check the reserved list. Combine with
+ * {@link isReservedSlug} for the full admission test.
+ */
+export declare const SLUG_REGEX: RegExp;
+/** Returns true if `slug` exactly matches a reserved value (case-insensitive). */
+export declare function isReservedSlug(slug: string): boolean;
+/** Combined check: format + reservation. Returns null if valid, an error code otherwise. */
+export declare function validateSlug(slug: string): "INVALID_FORMAT" | "RESERVED" | null;
+//# sourceMappingURL=reserved-slugs.d.ts.map

package/dist/lib/tenant/reserved-slugs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reserved-slugs.d.ts","sourceRoot":"","sources":["../../../src/lib/tenant/reserved-slugs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,cAAc,EAAE,WAAW,CAAC,MAAM,CAqE7C,CAAC;AAEH;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,UAAU,QAA8C,CAAC;AAEtE,kFAAkF;AAClF,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED,4FAA4F;AAC5F,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,GACX,gBAAgB,GAAG,UAAU,GAAG,IAAI,CAItC"}

package/dist/lib/tenant/reserved-slugs.js

@@ -0,0 +1,116 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SLUG_REGEX = exports.RESERVED_SLUGS = void 0;
+exports.isReservedSlug = isReservedSlug;
+exports.validateSlug = validateSlug;
+/**
+ * Reserved tenant slugs — values that may not be used as a Tenant.slug.
+ *
+ * Categories:
+ *  - Platform terms (paths reachable on api.skybber.com / app.skybber.com).
+ *  - Brand-protection placeholders (top consumer brands and the trellis-org).
+ *  - Generic legal / system terms.
+ *
+ * The list is conservative; expand over time. Slugs that pass {@link SLUG_REGEX}
+ * but appear in this set are rejected at tenant-creation time.
+ *
+ * See plans/mvp/10-trellis-stages/01-schema-migration.md §slug-reservation-list.
+ */
+exports.RESERVED_SLUGS = new Set([
+    // Platform / routing terms
+    "admin",
+    "agent",
+    "agents",
+    "api",
+    "app",
+    "apps",
+    "auth",
+    "billing",
+    "cdn",
+    "console",
+    "dashboard",
+    "docs",
+    "help",
+    "login",
+    "logout",
+    "mail",
+    "media",
+    "oauth",
+    "openid",
+    "register",
+    "settings",
+    "signin",
+    "signup",
+    "sso",
+    "staff",
+    "static",
+    "status",
+    "support",
+    "system",
+    "team",
+    "test",
+    "tenant",
+    "tenants",
+    "user",
+    "users",
+    "well-known",
+    "www",
+    // Skybber / de otio / trellis specific
+    "deotio",
+    "de-otio",
+    "skybber",
+    "trellis",
+    // Top consumer brands (illustrative — extend as squatting attempts surface)
+    "amazon",
+    "apple",
+    "facebook",
+    "google",
+    "instagram",
+    "meta",
+    "microsoft",
+    "openai",
+    "twitter",
+    "whatsapp",
+    "youtube",
+    // Note: 1-char brand "x" is not listed — SLUG_REGEX enforces a 3-char minimum,
+    // so 1-char slugs are unclaimable by format anyway.
+    // Generic legal/product terms
+    "about",
+    "contact",
+    "legal",
+    "privacy",
+    "security",
+    "terms",
+    "tos",
+]);
+/**
+ * Validates the *format* of a tenant slug.
+ *
+ * Rules:
+ *  - 3–40 characters.
+ *  - Lowercase ASCII letters, digits, and hyphens only.
+ *  - Must start and end with an alphanumeric character (no leading/trailing hyphens).
+ *  - No two consecutive hyphens (avoids confusion with punycode `xn--`).
+ *
+ * The 40-char ceiling accommodates auto-generated personal-tenant slugs of
+ * the form `personal-{userId}` where userId is a 25-char cuid (T2 — JIT
+ * provisioning). User-claimed organization slugs typically stay well under
+ * the Cognito `tenantSlug` claim limit of 32 chars.
+ *
+ * Format-only — does not check the reserved list. Combine with
+ * {@link isReservedSlug} for the full admission test.
+ */
+exports.SLUG_REGEX = /^(?!.*--)[a-z0-9][a-z0-9-]{1,38}[a-z0-9]$/;
+/** Returns true if `slug` exactly matches a reserved value (case-insensitive). */
+function isReservedSlug(slug) {
+    return exports.RESERVED_SLUGS.has(slug.toLowerCase());
+}
+/** Combined check: format + reservation. Returns null if valid, an error code otherwise. */
+function validateSlug(slug) {
+    if (!exports.SLUG_REGEX.test(slug))
+        return "INVALID_FORMAT";
+    if (isReservedSlug(slug))
+        return "RESERVED";
+    return null;
+}
+//# sourceMappingURL=reserved-slugs.js.map

package/dist/lib/tenant/reserved-slugs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reserved-slugs.js","sourceRoot":"","sources":["../../../src/lib/tenant/reserved-slugs.ts"],"names":[],"mappings":";;;AAwGA,wCAEC;AAGD,oCAMC;AAnHD;;;;;;;;;;;;GAYG;AACU,QAAA,cAAc,GAAwB,IAAI,GAAG,CAAC;IACzD,2BAA2B;IAC3B,OAAO;IACP,OAAO;IACP,QAAQ;IACR,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,SAAS;IACT,KAAK;IACL,SAAS;IACT,WAAW;IACX,MAAM;IACN,MAAM;IACN,OAAO;IACP,QAAQ;IACR,MAAM;IACN,OAAO;IACP,OAAO;IACP,QAAQ;IACR,UAAU;IACV,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,KAAK;IACL,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,MAAM;IACN,MAAM;IACN,QAAQ;IACR,SAAS;IACT,MAAM;IACN,OAAO;IACP,YAAY;IACZ,KAAK;IAEL,uCAAuC;IACvC,QAAQ;IACR,SAAS;IACT,SAAS;IACT,SAAS;IAET,4EAA4E;IAC5E,QAAQ;IACR,OAAO;IACP,UAAU;IACV,QAAQ;IACR,WAAW;IACX,MAAM;IACN,WAAW;IACX,QAAQ;IACR,SAAS;IACT,UAAU;IACV,SAAS;IACT,+EAA+E;IAC/E,oDAAoD;IAEpD,8BAA8B;IAC9B,OAAO;IACP,SAAS;IACT,OAAO;IACP,SAAS;IACT,UAAU;IACV,OAAO;IACP,KAAK;CACN,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;GAgBG;AACU,QAAA,UAAU,GAAG,2CAA2C,CAAC;AAEtE,kFAAkF;AAClF,SAAgB,cAAc,CAAC,IAAY;IACzC,OAAO,sBAAc,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,4FAA4F;AAC5F,SAAgB,YAAY,CAC1B,IAAY;IAEZ,IAAI,CAAC,kBAAU,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,gBAAgB,CAAC;IACpD,IAAI,cAAc,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IAC5C,OAAO,IAAI,CAAC;AACd,CAAC"}