@homeflare/distilled-opnsense 0.2.0

package/dist/index.js

@@ -0,0 +1,29 @@
+/**
+ * @distilled.cloud/opnsense — OPNsense firewall API SDK for Effect.
+ *
+ * `./services` is generated by `scripts/generate.ts` from the Smithy models
+ * in `.generated-specs` (written by `scripts/convert.ts` from OPNsense's own
+ * model XML + API controller PHP, mirrored under `specs/`). Everything else
+ * in this folder is hand-written.
+ *
+ * One module per API controller in scope — `firewall_alias`,
+ * `firewall_category`, `firewall_group`, `firewall_filter`,
+ * `routing_settings`, `quagga_general`, `quagga_bgp`, `quagga_service` — see
+ * the package README for what each one covers and what was left out.
+ *
+ * @example
+ * ```ts
+ * import * as Opnsense from "@distilled.cloud/opnsense";
+ *
+ * const alias = yield* Opnsense.Services.firewall_alias.addAlias({
+ *   alias: { name: "homeflare_edge", type: "host", content: "10.20.10.1" },
+ * });
+ * ```
+ */
+export * from "./credentials.js";
+export * from "./errors.js";
+export * as T from "./traits.js";
+export { OpnsenseProtocol, } from "./protocol.js";
+export * as Retry from "./retry.js";
+export * as Services from "./services/index.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EACL,gBAAgB,GAGjB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AACpC,OAAO,KAAK,QAAQ,MAAM,qBAAqB,CAAC"}

package/dist/protocol.d.ts

@@ -0,0 +1,13 @@
+import * as Layer from "effect/Layer";
+import type * as HttpClient from "effect/unstable/http/HttpClient";
+import type * as HttpClientError from "effect/unstable/http/HttpClientError";
+import * as API from "@distilled.cloud/core/api";
+import { ConfigError } from "@distilled.cloud/core/errors";
+import { Credentials } from "./credentials.ts";
+import { type DefaultErrors } from "./errors.ts";
+/** Error channel shared by every generated OPNsense operation. */
+export type OpnsenseOpError = DefaultErrors | ConfigError | HttpClientError.HttpClientError;
+/** Context (requirements) shared by every generated OPNsense operation. */
+export type OpnsenseOpContext = Credentials | HttpClient.HttpClient;
+export declare const OpnsenseProtocol: Layer.Layer<API.Protocol>;
+//# sourceMappingURL=protocol.d.ts.map

package/dist/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAGtC,OAAO,KAAK,KAAK,UAAU,MAAM,iCAAiC,CAAC;AACnE,OAAO,KAAK,KAAK,eAAe,MAAM,sCAAsC,CAAC;AAE7E,OAAO,KAAK,GAAG,MAAM,2BAA2B,CAAC;AAEjD,OAAO,EAAE,WAAW,EAAmB,MAAM,8BAA8B,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAe,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAML,KAAK,aAAa,EACnB,MAAM,aAAa,CAAC;AAErB,kEAAkE;AAClE,MAAM,MAAM,eAAe,GACvB,aAAa,GACb,WAAW,GACX,eAAe,CAAC,eAAe,CAAC;AAEpC,2EAA2E;AAC3E,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC;AA4HpE,eAAO,MAAM,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAMtD,CAAC"}

package/dist/protocol.js

@@ -0,0 +1,115 @@
+/**
+ * OpnsenseProtocol — hand-written.
+ *
+ * OPNsense is a 200-with-failure vendor: `ApiMutableModelControllerBase`'s
+ * `set/add/del/toggleBase` (mirrored at `specs/core/models/Base/
+ * ApiMutableModelControllerBase.php`) answer HTTP 200 with
+ * `{"result":"failed", "validations"?: {...}}` on a validation error, and a
+ * plain `UserException`/`UserWarningException`/`UserInformationalException`
+ * thrown anywhere in a controller answers `{errorMessage, errorTitle?,
+ * errorLevel}` at 500/200/200 respectively (`src/opnsense/www/api.php`'s
+ * `catch` chain — see `errors.ts`'s module doc for the exact mapping this
+ * mirrors). `@distilled.cloud/core/protocol-rest`'s generic REST decode
+ * only ever branches on `response.status >= 400`, which is wrong for every
+ * one of those in-band failures — so, like `cloudflare` (the other
+ * envelope-with-embedded-failure provider in this monorepo), this package
+ * hand-rolls `decode` instead of calling `makeRestProtocol`. `encode` has
+ * no such quirk (OPNsense's request shape is plain REST) and reuses core's
+ * `buildRequest` directly.
+ */
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import * as Redacted from "effect/Redacted";
+import * as API from "@distilled.cloud/core/api";
+import { buildRequest, mapKeys } from "@distilled.cloud/core/protocol-http";
+import { ConfigError, HTTP_STATUS_MAP } from "@distilled.cloud/core/errors";
+import { Credentials } from "./credentials.js";
+import { ValidationFailed, OpnsenseUserError, OpnsenseUserWarning, OpnsenseUserNotice, UnknownOpnsenseError, } from "./errors.js";
+const fail = (e) => Effect.fail(e);
+/** `{status: 401|403|400, message}` from `ApiControllerBase::beforeExecuteRoute` — the ONE OPNsense shape with a genuine (numeric) `status` field and a non-2xx HTTP status to match it. */
+const isAuthGateBody = (body) => typeof body === "object" &&
+    body !== null &&
+    typeof body.status === "number" &&
+    typeof body.message === "string";
+/** `{errorMessage, errorTitle?, errorLevel?}` from `api.php`'s `UserException`/`DispatchException`/generic-`Exception` catch chain. */
+const isVendorExceptionBody = (body) => typeof body === "object" &&
+    body !== null &&
+    typeof body.errorMessage === "string";
+/** `{result:"failed", validations?}` from `ApiMutableModelControllerBase::validate/set/add/del/toggleBase`. */
+const isResultFailedBody = (body) => typeof body === "object" &&
+    body !== null &&
+    body.result === "failed";
+const classifyFailure = (status, body) => {
+    if (isAuthGateBody(body)) {
+        if (body.status === 401 || body.status === 403 || body.status === 400) {
+            const Cls = HTTP_STATUS_MAP[body.status];
+            return new Cls({ message: body.message });
+        }
+    }
+    if (isVendorExceptionBody(body)) {
+        const { errorMessage: message, errorTitle: title, errorLevel } = body;
+        if (errorLevel === "warning")
+            return new OpnsenseUserWarning({ title, message });
+        if (errorLevel === "info")
+            return new OpnsenseUserNotice({ title, message });
+        if (status === 404) {
+            const Cls = HTTP_STATUS_MAP[404];
+            return new Cls({ message });
+        }
+        if (errorLevel === "error" || title !== undefined)
+            return new OpnsenseUserError({ title, message });
+        const Cls = HTTP_STATUS_MAP[500];
+        return new Cls({ message, code: undefined, retryAfter: undefined });
+    }
+    if (isResultFailedBody(body)) {
+        const validations = (body.validations ?? {});
+        return new ValidationFailed({ validations });
+    }
+    const StatusCls = HTTP_STATUS_MAP[status];
+    if (status >= 400 && StatusCls)
+        return new StatusCls({ message: `HTTP ${status}` });
+    return new UnknownOpnsenseError({ status, body });
+};
+const encode = ({ input, inputAst, }) => Effect.gen(function* () {
+    const resolve = yield* Credentials;
+    const creds = yield* resolve;
+    return buildRequest({
+        input,
+        inputAst,
+        baseUrl: creds.apiBaseUrl,
+        headers: {
+            Authorization: `Basic ${Buffer.from(`${creds.apiKey}:${Redacted.value(creds.apiSecret)}`).toString("base64")}`,
+            Accept: "application/json",
+        },
+    });
+});
+const decode = ({ response, outputAst, }) => Effect.gen(function* () {
+    const text = (yield* response.text.pipe(Effect.orDie)) ?? "";
+    let json;
+    let nonJson = false;
+    if (text.trim().length > 0) {
+        try {
+            json = JSON.parse(text);
+        }
+        catch {
+            nonJson = true;
+        }
+    }
+    const status = response.status;
+    const body = nonJson ? text : (json ?? {});
+    // Success is NOT simply `status < 400` here: `{result:"failed"}` and the
+    // UserWarning/UserInformational vendor-exception shapes are failures at
+    // HTTP 200 (see module doc) — checked FIRST, before falling through to
+    // "this 2xx body is the payload".
+    if (status >= 400 ||
+        isResultFailedBody(body) ||
+        isVendorExceptionBody(body)) {
+        return yield* fail(classifyFailure(status, body));
+    }
+    return mapKeys(outputAst, body, "decode");
+});
+export const OpnsenseProtocol = Layer.succeed(API.Protocol, API.Protocol.of({
+    encode: (args) => encode(args),
+    decode,
+}));
+//# sourceMappingURL=protocol.js.map

package/dist/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAK5C,OAAO,KAAK,GAAG,MAAM,2BAA2B,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAe,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,GAErB,MAAM,aAAa,CAAC;AAWrB,MAAM,IAAI,GAAG,CAAC,CAAU,EAAwB,EAAE,CAChD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAyB,CAAC;AAEzC,4LAA4L;AAC5L,MAAM,cAAc,GAAG,CACrB,IAAa,EACgC,EAAE,CAC/C,OAAO,IAAI,KAAK,QAAQ;IACxB,IAAI,KAAK,IAAI;IACb,OAAQ,IAAY,CAAC,MAAM,KAAK,QAAQ;IACxC,OAAQ,IAAY,CAAC,OAAO,KAAK,QAAQ,CAAC;AAE5C,uIAAuI;AACvI,MAAM,qBAAqB,GAAG,CAC5B,IAAa,EAC+D,EAAE,CAC9E,OAAO,IAAI,KAAK,QAAQ;IACxB,IAAI,KAAK,IAAI;IACb,OAAQ,IAAY,CAAC,YAAY,KAAK,QAAQ,CAAC;AAEjD,+GAA+G;AAC/G,MAAM,kBAAkB,GAAG,CACzB,IAAa,EACsC,EAAE,CACrD,OAAO,IAAI,KAAK,QAAQ;IACxB,IAAI,KAAK,IAAI;IACZ,IAAY,CAAC,MAAM,KAAK,QAAQ,CAAC;AAEpC,MAAM,eAAe,GAAG,CAAC,MAAc,EAAE,IAAa,EAAW,EAAE;IACjE,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACtE,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,MAAyB,CAAC,CAAC;YAC5D,OAAO,IAAI,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QACtE,IAAI,UAAU,KAAK,SAAS;YAC1B,OAAO,IAAI,mBAAmB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACrD,IAAI,UAAU,KAAK,MAAM;YACvB,OAAO,IAAI,kBAAkB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACpD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;YACjC,OAAO,IAAI,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,UAAU,KAAK,OAAO,IAAI,KAAK,KAAK,SAAS;YAC/C,OAAO,IAAI,iBAAiB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACjC,OAAO,IAAI,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAG1C,CAAC;QACF,OAAO,IAAI,gBAAgB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,SAAS,GACb,eACD,CAAC,MAAM,CAAC,CAAC;IACV,IAAI,MAAM,IAAI,GAAG,IAAI,SAAS;QAC5B,OAAO,IAAI,SAAS,CAAC,EAAE,OAAO,EAAE,QAAQ,MAAM,EAAE,EAAE,CAAC,CAAC;IACtD,OAAO,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AACpD,CAAC,CAAC;AAEF,MAAM,MAAM,GAAG,CAAC,EACd,KAAK,EACL,QAAQ,GAIT,EAAE,EAAE,CACH,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;IACnC,MAAM,KAAK,GAAW,KAAK,CAAC,CAAC,OAAO,CAAC;IACrC,OAAO,YAAY,CAAC;QAClB,KAAK;QACL,QAAQ;QACR,OAAO,EAAE,KAAK,CAAC,UAAU;QACzB,OAAO,EAAE;YACP,aAAa,EAAE,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;YAC9G,MAAM,EAAE,kBAAkB;SAC3B;KACF,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,MAAM,GAAG,CAAC,EACd,QAAQ,EACR,SAAS,GAKV,EAAE,EAAE,CACH,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7D,IAAI,IAAa,CAAC;IAClB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAE3C,yEAAyE;IACzE,wEAAwE;IACxE,uEAAuE;IACvE,kCAAkC;IAClC,IACE,MAAM,IAAI,GAAG;QACb,kBAAkB,CAAC,IAAI,CAAC;QACxB,qBAAqB,CAAC,IAAI,CAAC,EAC3B,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC5C,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,gBAAgB,GAA8B,KAAK,CAAC,OAAO,CACtE,GAAG,CAAC,QAAQ,EACZ,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;IACd,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAuB;IACpD,MAAM;CACP,CAAC,CACH,CAAC"}

package/dist/retry.d.ts

@@ -0,0 +1,56 @@
+/**
+ * OPNsense retry surface — a veneer over `@distilled.cloud/core/retry`.
+ *
+ * The `Retry` service tag is threaded into every generated operation via
+ * `API.make({ retry: Retry })`, so a caller-installed policy applies to all
+ * OPNsense calls below it and core's `makeDefault` is the fallback when none
+ * is provided.
+ *
+ * @example
+ * ```ts
+ * import * as Opnsense from "@distilled.cloud/opnsense";
+ *
+ * myEffect.pipe(Opnsense.Retry.transient);
+ * ```
+ */
+import * as Context from "effect/Context";
+import * as Effect from "effect/Effect";
+import * as Retries from "@distilled.cloud/core/retry";
+export type Options = Retries.Options;
+export type Factory = Retries.Factory;
+export type Policy = Retries.Policy;
+declare const Retry_base: Context.ServiceClass<Retry, "OpnsenseRetry", Retries.Policy>;
+/** Context tag for configuring retry behavior of OPNsense API calls. */
+export declare class Retry extends Retry_base {
+}
+/** Provides a custom retry policy to every OPNsense API call below it. */
+export declare const policy: {
+    (options: Options): <A, E, R>(effect: Effect.Effect<A, E, R>) => Effect.Effect<A, E, Exclude<R, Retry>>;
+    (factory: Factory): <A, E, R>(effect: Effect.Effect<A, E, R>) => Effect.Effect<A, E, Exclude<R, Retry>>;
+};
+/** Disables all automatic retries. */
+export declare const none: <A, E, R>(effect: Effect.Effect<A, E, R>) => Effect.Effect<A, E, Exclude<R, Retry>>;
+/**
+ * The default retry policy (core's): transient/throttling/retryable errors,
+ * capped exponential backoff with jitter, server `retryAfter` hints honored
+ * with precedence.
+ *
+ * OPNsense has no rate-limit surface of its own to honor a hint FROM — this
+ * is here purely for the transient network/5xx case (a PHP fault, a proxy
+ * hiccup in front of the box). A `ValidationFailed`/`OpnsenseUserError`
+ * business-rule denial is never retryable and this policy will not retry
+ * it (see `errors.ts`'s `Category.withBadRequestError` categorization).
+ */
+export declare const makeDefault: Factory;
+export declare const jittered: <Error, Env>(self: import("effect/Schedule").Schedule<unknown, unknown, Error, Env>) => import("effect/Schedule").Schedule<unknown, unknown, Error, Env>;
+export declare const capped: (max: import("effect/Duration").Duration) => <Error, Env>(self: import("effect/Schedule").Schedule<unknown, unknown, Error, Env>) => import("effect/Schedule").Schedule<unknown, unknown, Error, Env>;
+/** Retry options that retry all throttling errors indefinitely. */
+export declare const throttlingOptions: Options;
+/** Retries all throttling errors indefinitely (honoring server hints). */
+export declare const throttling: <A, E, R>(effect: Effect.Effect<A, E, R>) => Effect.Effect<A, E, Exclude<R, Retry>>;
+/** Retry options that retry all transient errors indefinitely. */
+export declare const transientOptions: Options;
+/** Retries all transient errors indefinitely (honoring server hints). */
+export declare const transient: <A, E, R>(effect: Effect.Effect<A, E, R>) => Effect.Effect<A, E, Exclude<R, Retry>>;
+export {};
+//# sourceMappingURL=retry.d.ts.map

package/dist/retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.d.ts","sourceRoot":"","sources":["../src/retry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,KAAK,OAAO,MAAM,6BAA6B,CAAC;AAEvD,MAAM,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;AACtC,MAAM,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;AACtC,MAAM,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;;AAEpC,wEAAwE;AACxE,qBAAa,KAAM,SAAQ,UAAiD;CAAG;AAE/E,0EAA0E;AAC1E,eAAO,MAAM,MAAM,EAAE;IACnB,CACE,OAAO,EAAE,OAAO,GACf,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EACT,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAC3B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5C,CACE,OAAO,EAAE,OAAO,GACf,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EACT,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAC3B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;CAEU,CAAC;AAEzD,sCAAsC;AACtC,eAAO,MAAM,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EACzB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAC3B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAEzC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,WAAW,EAAE,OAA6B,CAAC;AAExD,eAAO,MAAM,QAAQ,0JAAmB,CAAC;AACzC,eAAO,MAAM,MAAM,uMAAiB,CAAC;AAErC,mEAAmE;AACnE,eAAO,MAAM,iBAAiB,EAAE,OAAmC,CAAC;AAEpE,0EAA0E;AAC1E,eAAO,MAAM,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAC3B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAqC,CAAC;AAEhF,kEAAkE;AAClE,eAAO,MAAM,gBAAgB,EAAE,OAAkC,CAAC;AAElE,yEAAyE;AACzE,eAAO,MAAM,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAC9B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAC3B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAoC,CAAC"}

package/dist/retry.js

@@ -0,0 +1,49 @@
+/**
+ * OPNsense retry surface — a veneer over `@distilled.cloud/core/retry`.
+ *
+ * The `Retry` service tag is threaded into every generated operation via
+ * `API.make({ retry: Retry })`, so a caller-installed policy applies to all
+ * OPNsense calls below it and core's `makeDefault` is the fallback when none
+ * is provided.
+ *
+ * @example
+ * ```ts
+ * import * as Opnsense from "@distilled.cloud/opnsense";
+ *
+ * myEffect.pipe(Opnsense.Retry.transient);
+ * ```
+ */
+import * as Context from "effect/Context";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import * as Retries from "@distilled.cloud/core/retry";
+/** Context tag for configuring retry behavior of OPNsense API calls. */
+export class Retry extends Context.Service()("OpnsenseRetry") {
+}
+/** Provides a custom retry policy to every OPNsense API call below it. */
+export const policy = (optionsOrFactory) => Effect.provide(Layer.succeed(Retry, optionsOrFactory));
+/** Disables all automatic retries. */
+export const none = Effect.provide(Layer.succeed(Retry, { while: () => false }));
+/**
+ * The default retry policy (core's): transient/throttling/retryable errors,
+ * capped exponential backoff with jitter, server `retryAfter` hints honored
+ * with precedence.
+ *
+ * OPNsense has no rate-limit surface of its own to honor a hint FROM — this
+ * is here purely for the transient network/5xx case (a PHP fault, a proxy
+ * hiccup in front of the box). A `ValidationFailed`/`OpnsenseUserError`
+ * business-rule denial is never retryable and this policy will not retry
+ * it (see `errors.ts`'s `Category.withBadRequestError` categorization).
+ */
+export const makeDefault = Retries.makeDefault;
+export const jittered = Retries.jittered;
+export const capped = Retries.capped;
+/** Retry options that retry all throttling errors indefinitely. */
+export const throttlingOptions = Retries.throttlingOptions;
+/** Retries all throttling errors indefinitely (honoring server hints). */
+export const throttling = policy(Retries.throttlingFactory);
+/** Retry options that retry all transient errors indefinitely. */
+export const transientOptions = Retries.transientOptions;
+/** Retries all transient errors indefinitely (honoring server hints). */
+export const transient = policy(Retries.transientFactory);
+//# sourceMappingURL=retry.js.map

package/dist/retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.js","sourceRoot":"","sources":["../src/retry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,OAAO,MAAM,6BAA6B,CAAC;AAMvD,wEAAwE;AACxE,MAAM,OAAO,KAAM,SAAQ,OAAO,CAAC,OAAO,EAAiB,CAAC,eAAe,CAAC;CAAG;AAE/E,0EAA0E;AAC1E,MAAM,CAAC,MAAM,MAAM,GAWf,CAAC,gBAAmC,EAAE,EAAE,CAC1C,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAEzD,sCAAsC;AACtC,MAAM,CAAC,MAAM,IAAI,GAE6B,MAAM,CAAC,OAAO,CAC1D,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,CAC7C,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,WAAW,GAAY,OAAO,CAAC,WAAW,CAAC;AAExD,MAAM,CAAC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;AACzC,MAAM,CAAC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;AAErC,mEAAmE;AACnE,MAAM,CAAC,MAAM,iBAAiB,GAAY,OAAO,CAAC,iBAAiB,CAAC;AAEpE,0EAA0E;AAC1E,MAAM,CAAC,MAAM,UAAU,GAEuB,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAEhF,kEAAkE;AAClE,MAAM,CAAC,MAAM,gBAAgB,GAAY,OAAO,CAAC,gBAAgB,CAAC;AAElE,yEAAyE;AACzE,MAAM,CAAC,MAAM,SAAS,GAEwB,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC"}

package/dist/services/firewall_alias.d.ts

@@ -0,0 +1,243 @@
+import * as S from "@distilled.cloud/core/schema";
+import * as API from "@distilled.cloud/core/api";
+import { type OpnsenseOpError, type OpnsenseOpContext } from "../protocol.ts";
+export type { OpnsenseOpError, OpnsenseOpContext };
+export type AliasItemType = "host" | "network" | "port" | "url" | "urltable" | "urljson" | "geoip" | "networkgroup" | "mac" | "asn" | "dynipv6host" | "authgroup" | "internal" | "external";
+export declare const AliasItemType: any;
+export type AliasItemProto = "IPv4" | "IPv6";
+export declare const AliasItemProto: any;
+export type AliasItemAuthtype = "Basic" | "Bearer" | "Header";
+export declare const AliasItemAuthtype: any;
+export interface AliasItem {
+    /** Item id, assigned by OPNsense on creation. */
+    uuid?: string;
+    /** OPNsense FieldType: BooleanField */
+    enabled: string;
+    /** OPNsense FieldType: .\AliasNameField */
+    name: string;
+    /** OPNsense FieldType: OptionField */
+    type: AliasItemType | (string & {});
+    /** OPNsense FieldType: TextField */
+    path_expression?: string;
+    /** OPNsense FieldType: OptionField; multi-select: wire value is a single comma-joined string, not a JSON array */
+    proto?: AliasItemProto | (string & {});
+    /** OPNsense FieldType: InterfaceField */
+    interface?: string;
+    /** OPNsense FieldType: BooleanField */
+    counters?: string;
+    /** OPNsense FieldType: NumericField */
+    updatefreq?: string;
+    /** OPNsense FieldType: .\AliasContentField */
+    content?: string;
+    /** OPNsense FieldType: TextField */
+    password?: string;
+    /** OPNsense FieldType: TextField */
+    username?: string;
+    /** OPNsense FieldType: OptionField */
+    authtype?: AliasItemAuthtype | (string & {});
+    /** OPNsense FieldType: IntegerField; range 60..999999999 (as text) */
+    expire?: string;
+    /** OPNsense FieldType: ModelRelationField; multi-select: wire value is a single comma-joined string, not a JSON array */
+    categories?: string;
+    /** OPNsense FieldType: IntegerField */
+    current_items?: string;
+    /** OPNsense FieldType: TextField */
+    last_updated?: string;
+    /** OPNsense FieldType: IntegerField */
+    eval_nomatch?: string;
+    /** OPNsense FieldType: IntegerField */
+    eval_match?: string;
+    /** OPNsense FieldType: IntegerField */
+    in_block_p?: string;
+    /** OPNsense FieldType: IntegerField */
+    in_block_b?: string;
+    /** OPNsense FieldType: IntegerField */
+    in_pass_p?: string;
+    /** OPNsense FieldType: IntegerField */
+    in_pass_b?: string;
+    /** OPNsense FieldType: IntegerField */
+    out_block_p?: string;
+    /** OPNsense FieldType: IntegerField */
+    out_block_b?: string;
+    /** OPNsense FieldType: IntegerField */
+    out_pass_p?: string;
+    /** OPNsense FieldType: IntegerField */
+    out_pass_b?: string;
+    /** OPNsense FieldType: DescriptionField */
+    description?: string;
+}
+export declare const AliasItem: S.Schema<AliasItem>;
+export interface AddAliasRequest {
+    alias?: AliasItem;
+}
+export declare const AddAliasRequest: S.Schema<AddAliasRequest>;
+export type AddAliasResult = "saved";
+export declare const AddAliasResult: any;
+export interface AddAliasResponse {
+    result?: AddAliasResult;
+    /** The new item's uuid. */
+    uuid?: string;
+}
+export declare const AddAliasResponse: S.Schema<AddAliasResponse>;
+export interface DelAliasRequest {
+    uuids: string;
+}
+export declare const DelAliasRequest: S.Schema<DelAliasRequest>;
+export type DelAliasResult = "deleted" | "not found";
+export declare const DelAliasResult: any;
+export interface DelAliasResponse {
+    result?: DelAliasResult;
+}
+export declare const DelAliasResponse: S.Schema<DelAliasResponse>;
+export interface GetRequest {
+}
+export declare const GetRequest: S.Schema<GetRequest>;
+export type ModelAliasItemType = "host" | "network" | "port" | "url" | "urltable" | "urljson" | "geoip" | "networkgroup" | "mac" | "asn" | "dynipv6host" | "authgroup" | "internal" | "external";
+export declare const ModelAliasItemType: any;
+export type ModelAliasItemProto = "IPv4" | "IPv6";
+export declare const ModelAliasItemProto: any;
+export type ModelAliasItemAuthtype = "Basic" | "Bearer" | "Header";
+export declare const ModelAliasItemAuthtype: any;
+export interface ModelAliasItem {
+    /** Item id, assigned by OPNsense on creation. */
+    uuid?: string;
+    /** OPNsense FieldType: BooleanField */
+    enabled: string;
+    /** OPNsense FieldType: .\AliasNameField */
+    name: string;
+    /** OPNsense FieldType: OptionField */
+    type: ModelAliasItemType | (string & {});
+    /** OPNsense FieldType: TextField */
+    path_expression?: string;
+    /** OPNsense FieldType: OptionField; multi-select: wire value is a single comma-joined string, not a JSON array */
+    proto?: ModelAliasItemProto | (string & {});
+    /** OPNsense FieldType: InterfaceField */
+    interface?: string;
+    /** OPNsense FieldType: BooleanField */
+    counters?: string;
+    /** OPNsense FieldType: NumericField */
+    updatefreq?: string;
+    /** OPNsense FieldType: .\AliasContentField */
+    content?: string;
+    /** OPNsense FieldType: TextField */
+    password?: string;
+    /** OPNsense FieldType: TextField */
+    username?: string;
+    /** OPNsense FieldType: OptionField */
+    authtype?: ModelAliasItemAuthtype | (string & {});
+    /** OPNsense FieldType: IntegerField; range 60..999999999 (as text) */
+    expire?: string;
+    /** OPNsense FieldType: ModelRelationField; multi-select: wire value is a single comma-joined string, not a JSON array */
+    categories?: string;
+    /** OPNsense FieldType: IntegerField */
+    current_items?: string;
+    /** OPNsense FieldType: TextField */
+    last_updated?: string;
+    /** OPNsense FieldType: IntegerField */
+    eval_nomatch?: string;
+    /** OPNsense FieldType: IntegerField */
+    eval_match?: string;
+    /** OPNsense FieldType: IntegerField */
+    in_block_p?: string;
+    /** OPNsense FieldType: IntegerField */
+    in_block_b?: string;
+    /** OPNsense FieldType: IntegerField */
+    in_pass_p?: string;
+    /** OPNsense FieldType: IntegerField */
+    in_pass_b?: string;
+    /** OPNsense FieldType: IntegerField */
+    out_block_p?: string;
+    /** OPNsense FieldType: IntegerField */
+    out_block_b?: string;
+    /** OPNsense FieldType: IntegerField */
+    out_pass_p?: string;
+    /** OPNsense FieldType: IntegerField */
+    out_pass_b?: string;
+    /** OPNsense FieldType: DescriptionField */
+    description?: string;
+}
+export declare const ModelAliasItem: S.Schema<ModelAliasItem>;
+export type ModelAliasItemMap = {
+    [key: string]: ModelAliasItem | undefined;
+};
+export declare const ModelAliasItemMap: S.Schema<ModelAliasItemMap>;
+export interface ModelAliases {
+    alias?: ModelAliasItemMap;
+}
+export declare const ModelAliases: S.Schema<ModelAliases>;
+export interface Model {
+    aliases?: ModelAliases;
+}
+export declare const Model: S.Schema<Model>;
+export interface GetResponse {
+    alias?: Model;
+}
+export declare const GetResponse: S.Schema<GetResponse>;
+export interface SearchAliasRequest {
+}
+export declare const SearchAliasRequest: S.Schema<SearchAliasRequest>;
+export type AliasList = Array<AliasItem>;
+export declare const AliasList: S.Schema<AliasList>;
+export interface SearchAliasResponse {
+    /** Total matching items before pagination. */
+    total?: number;
+    rowCount?: number;
+    /** Current page number. */
+    current?: number;
+    rows?: AliasList;
+}
+export declare const SearchAliasResponse: S.Schema<SearchAliasResponse>;
+export interface SetRequest {
+    alias?: Model;
+}
+export declare const SetRequest: S.Schema<SetRequest>;
+export type SetResult = "saved";
+export declare const SetResult: any;
+export interface SetResponse {
+    result?: SetResult;
+}
+export declare const SetResponse: S.Schema<SetResponse>;
+export interface SetAliasRequest {
+    uuid: string;
+    alias?: AliasItem;
+}
+export declare const SetAliasRequest: S.Schema<SetAliasRequest>;
+export type SetAliasResult = "saved";
+export declare const SetAliasResult: any;
+export interface SetAliasResponse {
+    result?: SetAliasResult;
+}
+export declare const SetAliasResponse: S.Schema<SetAliasResponse>;
+export interface ToggleAliasRequest {
+    uuid: string;
+}
+export declare const ToggleAliasRequest: S.Schema<ToggleAliasRequest>;
+export type ToggleAliasResult = "Enabled" | "Disabled" | "failed";
+export declare const ToggleAliasResult: any;
+export interface ToggleAliasResponse {
+    result?: ToggleAliasResult;
+    changed?: boolean;
+}
+export declare const ToggleAliasResponse: S.Schema<ToggleAliasResponse>;
+export type AddAliasError = OpnsenseOpError;
+/** Add a new aliases.alias item. On a validation failure the call fails with ValidationFailed instead of decoding this response. */
+export declare const addAlias: API.OperationMethod<AddAliasRequest, AddAliasResponse, AddAliasError, OpnsenseOpContext>;
+export type DelAliasError = OpnsenseOpError;
+/** Delete a aliases.alias item by uuid. */
+export declare const delAlias: API.OperationMethod<DelAliasRequest, DelAliasResponse, DelAliasError, OpnsenseOpContext>;
+export type GetError = OpnsenseOpError;
+/** Fetch the entire model tree (every section and array collection). */
+export declare const get: API.OperationMethod<GetRequest, GetResponse, GetError, OpnsenseOpContext>;
+export type SearchAliasError = OpnsenseOpError;
+/** Search aliases.alias items (paginated). */
+export declare const searchAlias: API.OperationMethod<SearchAliasRequest, SearchAliasResponse, SearchAliasError, OpnsenseOpContext>;
+export type SetError = OpnsenseOpError;
+/** Replace the entire model tree in one call. On a validation failure the call fails with ValidationFailed instead of decoding this response. */
+export declare const set: API.OperationMethod<SetRequest, SetResponse, SetError, OpnsenseOpContext>;
+export type SetAliasError = OpnsenseOpError;
+/** Update an existing aliases.alias item. On a validation failure the call fails with ValidationFailed instead of decoding this response. */
+export declare const setAlias: API.OperationMethod<SetAliasRequest, SetAliasResponse, SetAliasError, OpnsenseOpContext>;
+export type ToggleAliasError = OpnsenseOpError;
+/** Flip a aliases.alias item's enabled flag by uuid. */
+export declare const toggleAlias: API.OperationMethod<ToggleAliasRequest, ToggleAliasResponse, ToggleAliasError, OpnsenseOpContext>;
+//# sourceMappingURL=firewall_alias.d.ts.map

package/dist/services/firewall_alias.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"firewall_alias.d.ts","sourceRoot":"","sources":["../../src/services/firewall_alias.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,8BAA8B,CAAC;AAClD,OAAO,KAAK,GAAG,MAAM,2BAA2B,CAAC;AAEjD,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACvB,MAAM,gBAAgB,CAAC;AAGxB,YAAY,EAAE,eAAe,EAAE,iBAAiB,EAAE,CAAC;AAEnD,MAAM,MAAM,aAAa,GACrB,MAAM,GACN,SAAS,GACT,MAAM,GACN,KAAK,GACL,UAAU,GACV,SAAS,GACT,OAAO,GACP,cAAc,GACd,KAAK,GACL,KAAK,GACL,aAAa,GACb,WAAW,GACX,UAAU,GACV,UAAU,CAAC;AACf,eAAO,MAAM,aAAa,KAAW,CAAC;AAEtC,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,MAAM,CAAC;AAC7C,eAAO,MAAM,cAAc,KAAW,CAAC;AAEvC,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAC9D,eAAO,MAAM,iBAAiB,KAAW,CAAC;AAE1C,MAAM,WAAW,SAAS;IACxB,iDAAiD;IACjD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,sCAAsC;IACtC,IAAI,EAAE,aAAa,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACpC,oCAAoC;IACpC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kHAAkH;IAClH,KAAK,CAAC,EAAE,cAAc,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACvC,yCAAyC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uCAAuC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,QAAQ,CAAC,EAAE,iBAAiB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAC7C,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yHAAyH;IACzH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oCAAoC;IACpC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uCAAuC;IACvC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uCAAuC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uCAAuC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2CAA2C;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AACD,eAAO,MAAM,SAAS,EA+B4B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAEtE,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB;AACD,eAAO,MAAM,eAAe,EAQf,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;AAEvC,MAAM,MAAM,cAAc,GAAG,OAAO,CAAC;AACrC,eAAO,MAAM,cAAc,KAAW,CAAC;AAEvC,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,2BAA2B;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AACD,eAAO,MAAM,gBAAgB,EAOhB,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAExC,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;CACf;AACD,eAAO,MAAM,eAAe,EAYf,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;AAEvC,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,WAAW,CAAC;AACrD,eAAO,MAAM,cAAc,KAAW,CAAC;AAEvC,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB;AACD,eAAO,MAAM,gBAAgB,EAMhB,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAExC,MAAM,WAAW,UAAU;CAAG;AAC9B,eAAO,MAAM,UAAU,EAI4B,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AAExE,MAAM,MAAM,kBAAkB,GAC1B,MAAM,GACN,SAAS,GACT,MAAM,GACN,KAAK,GACL,UAAU,GACV,SAAS,GACT,OAAO,GACP,cAAc,GACd,KAAK,GACL,KAAK,GACL,aAAa,GACb,WAAW,GACX,UAAU,GACV,UAAU,CAAC;AACf,eAAO,MAAM,kBAAkB,KAAW,CAAC;AAE3C,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,MAAM,CAAC;AAClD,eAAO,MAAM,mBAAmB,KAAW,CAAC;AAE5C,MAAM,MAAM,sBAAsB,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;AACnE,eAAO,MAAM,sBAAsB,KAAW,CAAC;AAE/C,MAAM,WAAW,cAAc;IAC7B,iDAAiD;IACjD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,sCAAsC;IACtC,IAAI,EAAE,kBAAkB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACzC,oCAAoC;IACpC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kHAAkH;IAClH,KAAK,CAAC,EAAE,mBAAmB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAC5C,yCAAyC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uCAAuC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,QAAQ,CAAC,EAAE,sBAAsB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAClD,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yHAAyH;IACzH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oCAAoC;IACpC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uCAAuC;IACvC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uCAAuC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uCAAuC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2CAA2C;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AACD,eAAO,MAAM,cAAc,EA+B4B,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;AAEhF,MAAM,MAAM,iBAAiB,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAA;CAAE,CAAC;AAC9E,eAAO,MAAM,iBAAiB,EAGlB,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;AAExC,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,iBAAiB,CAAC;CAC3B;AACD,eAAO,MAAM,YAAY,EAI4B,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AAE5E,MAAM,WAAW,KAAK;IACpB,OAAO,CAAC,EAAE,YAAY,CAAC;CACxB;AACD,eAAO,MAAM,KAAK,EAI4B,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAE9D,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,EAAE,KAAK,CAAC;CACf;AACD,eAAO,MAAM,WAAW,EAI4B,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAE1E,MAAM,WAAW,kBAAkB;CAAG;AACtC,eAAO,MAAM,kBAAkB,EAUlB,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;AAE1C,MAAM,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;AACzC,eAAO,MAAM,SAAS,EAEV,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAEhC,MAAM,WAAW,mBAAmB;IAClC,8CAA8C;IAC9C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2BAA2B;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,SAAS,CAAC;CAClB;AACD,eAAO,MAAM,mBAAmB,EASnB,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;AAE3C,MAAM,WAAW,UAAU;IACzB,KAAK,CAAC,EAAE,KAAK,CAAC;CACf;AACD,eAAO,MAAM,UAAU,EAM4B,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AAExE,MAAM,MAAM,SAAS,GAAG,OAAO,CAAC;AAChC,eAAO,MAAM,SAAS,KAAW,CAAC;AAElC,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,SAAS,CAAC;CACpB;AACD,eAAO,MAAM,WAAW,EAI4B,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAE1E,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB;AACD,eAAO,MAAM,eAAe,EAaf,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;AAEvC,MAAM,MAAM,cAAc,GAAG,OAAO,CAAC;AACrC,eAAO,MAAM,cAAc,KAAW,CAAC;AAEvC,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB;AACD,eAAO,MAAM,gBAAgB,EAMhB,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;AAExC,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;CACd;AACD,eAAO,MAAM,kBAAkB,EAYlB,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;AAE1C,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;AAClE,eAAO,MAAM,iBAAiB,KAAW,CAAC;AAE1C,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AACD,eAAO,MAAM,mBAAmB,EAOnB,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;AAE3C,MAAM,MAAM,aAAa,GAAG,eAAe,CAAC;AAC5C,oIAAoI;AACpI,eAAO,MAAM,QAAQ,EAAE,GAAG,CAAC,eAAe,CACxC,eAAe,EACf,gBAAgB,EAChB,aAAa,EACb,iBAAiB,CAOhB,CAAC;AAEJ,MAAM,MAAM,aAAa,GAAG,eAAe,CAAC;AAC5C,2CAA2C;AAC3C,eAAO,MAAM,QAAQ,EAAE,GAAG,CAAC,eAAe,CACxC,eAAe,EACf,gBAAgB,EAChB,aAAa,EACb,iBAAiB,CAOhB,CAAC;AAEJ,MAAM,MAAM,QAAQ,GAAG,eAAe,CAAC;AACvC,wEAAwE;AACxE,eAAO,MAAM,GAAG,EAAE,GAAG,CAAC,eAAe,CACnC,UAAU,EACV,WAAW,EACX,QAAQ,EACR,iBAAiB,CAOhB,CAAC;AAEJ,MAAM,MAAM,gBAAgB,GAAG,eAAe,CAAC;AAC/C,8CAA8C;AAC9C,eAAO,MAAM,WAAW,EAAE,GAAG,CAAC,eAAe,CAC3C,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,CAOhB,CAAC;AAEJ,MAAM,MAAM,QAAQ,GAAG,eAAe,CAAC;AACvC,iJAAiJ;AACjJ,eAAO,MAAM,GAAG,EAAE,GAAG,CAAC,eAAe,CACnC,UAAU,EACV,WAAW,EACX,QAAQ,EACR,iBAAiB,CAOhB,CAAC;AAEJ,MAAM,MAAM,aAAa,GAAG,eAAe,CAAC;AAC5C,6IAA6I;AAC7I,eAAO,MAAM,QAAQ,EAAE,GAAG,CAAC,eAAe,CACxC,eAAe,EACf,gBAAgB,EAChB,aAAa,EACb,iBAAiB,CAOhB,CAAC;AAEJ,MAAM,MAAM,gBAAgB,GAAG,eAAe,CAAC;AAC/C,wDAAwD;AACxD,eAAO,MAAM,WAAW,EAAE,GAAG,CAAC,eAAe,CAC3C,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,CAOhB,CAAC"}