@homeflare/distilled-unifi-network 0.2.0 → 0.4.0

package/README.md

@@ -30,9 +30,21 @@ and relicensing a copy would misstate what it is. See `LICENSE`.
 `trafficMatchingLists`, `supportingResources`, plus the single-endpoint
 `applicationInfo` — an Effect-typed operation per API endpoint (73 total
 across 44 paths), with `catchTag`-able errors for every HTTP status the
-protocol layer dispatches on (the spec documents **zero** error responses
-on any operation — see `docs/codegen-notes.md#typed-errors` for what that
-means for this package's error channel).
+protocol layer dispatches on. No OPERATION documents an error response, but
+the spec's own `components.schemas["Error Message"]` — `{code, message,
+requestId, requestPath, statusCode, statusName, timestamp}`, unreferenced
+by any operation — is decoded by `src/protocol.ts`'s `errorEnvelope`: a
+mapped status (e.g. `NotFound`) gets the vendor's own `message` text
+instead of a bare `HTTP <status>`, but NOT `code`/`requestId`/`statusName`/
+`timestamp` — core's shared `HTTP_STATUS_MAP` dispatch keeps only
+`message` for a mapped class. Those extra fields survive only on
+`UnknownUnifiNetworkError`, the fallback for any status the map doesn't
+cover. `requestPath` is not modeled as its own field anywhere and never
+reaches a `message` (see `src/errors.ts`'s doc comment) — it does still
+sit, un-plucked, inside `UnknownUnifiNetworkError.body` for anyone who
+reads that raw value on purpose. See the distilled clone's
+`packages/unifi-network/docs/codegen-notes.md#typed-errors` (not shipped in
+this package — `src/` is the only thing copied here) for the full account.
 
 ```ts
 import * as UnifiNetwork from '@distilled.cloud/unifi-network'; // aliased onto this package — see docs/distilled-interim.md
@@ -57,20 +69,25 @@ always `@distilled.cloud/unifi-network`, aliased in the consuming package's
 so the eventual cutover to the real published package is a one-line alias
 swap with no import changes anywhere in the kit.
 
-### Authentication is NOT documented in the spec
+### Authentication is NOT documented in the spec, but is measured for reads
 
 `components.securitySchemes` is absent and no operation carries a
 `security` requirement. The `X-API-KEY` header this SDK sends comes from
 [Ubiquiti's own Integration API guide](https://developer.ui.com/unifi-integration-api-guide/),
-not the machine-readable description — **unverified against a live
-console as of this package's creation**; see the auth-probe handoff this
-package shipped alongside, and re-verify before depending on it for
-anything that writes.
+not the machine-readable description. The auth-probe handoff this package
+shipped alongside was **run live, read-only, on 2026-09-24**: `X-API-KEY`
+against a local console returned HTTP 200 on `GET /v1/info` and
+`GET /v1/sites`; the same key against the cloud-connector shape returned
+401 (the wrong door for a key minted on a local console, not evidence the
+cloud shape rejects `X-API-KEY` outright). Only reads were probed —
+re-verify before depending on this header for anything that writes.
 
 ## Resource-level traps a future provider must not ignore
 
-These are NOT solved in this SDK. Full detail in `src/credentials.ts`'s
-own doc comment and `docs/codegen-notes.md`; the headlines:
+These are NOT solved in this SDK. Full detail in `src/credentials.ts`'s own
+doc comment and the distilled clone's
+`packages/unifi-network/docs/codegen-notes.md` (not shipped here — see
+"What's in it" above); the headlines:
 
 - **Whole-object PUT.** Nine endpoints (`updateNetwork`,
   `updateFirewallPolicy`, `updateAclRule`, …) silently _disable_ any field
@@ -86,10 +103,22 @@ own doc comment and `docs/codegen-notes.md`; the headlines:
 - **Writes that power-cycle or reboot hardware** hide behind ordinary
   verbs (`executeAdoptedDeviceAction`'s `RESTART`, `executePortAction`'s
   `POWER_CYCLE`) — treat as gated commands, never declared props.
-- **Secrets never become attributes.** The controller API key and the WLAN
-  pre-shared key (`passphrase` — not caught by core's generic
-  `SENSITIVE_FIELD_PATTERNS`) are both write-only, sourced from OpenBao at
-  call time, never read back as plan attributes.
+- **Secrets never become attributes.** The controller API key is one. The
+  WLAN pre-shared key (`passphrase`) is **not write-only** — the WiFi
+  details GET returns it in the clear, so this SDK now decodes it as
+  `Redacted.Redacted<string>` (its name doesn't match core's generic
+  `SENSITIVE_FIELD_PATTERNS`, so `sensitivePatterns` is extended
+  per-package — see the distilled clone's `scripts/convert.ts`). Both must
+  still be sourced from OpenBao at call time and never read back as plan
+  attributes — `Redacted` only guards against an accidental log/print, not
+  against a provider persisting the unwrapped value into state. A
+  `DISTILLED_DEBUG_HTTP=1` session bypasses the guard entirely — core
+  prints the raw response body to stderr before any decode runs — never
+  set that flag against a real console. A Hotspot voucher's `code` is the
+  same shape (`components.schemas["Hotspot voucher details"].properties.code`,
+  "Secret code to active the voucher") and now decodes `Redacted` too, via
+  a targeted spec patch rather than a name pattern (`code` also names two
+  harmless schemas) — no kit provider reads this family yet.
 
 ## Scope and next steps
 

package/dist/credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AA0CA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAG5C,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3C;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;;AAaD,qBAAa,WAAY,SAAQ,gBAGH;CAAG;AAOjC,eAAO,MAAM,kBAAkB,wCAgB9B,CAAC;AAEF,qFAAqF;AACrF,eAAO,MAAM,WAAW,WAAY;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,KAAG,KAAK,CAAC,KAAK,CAAC,WAAW,CAUxB,CAAC"}
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AA4CA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAG5C,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3C;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;;AAaD,qBAAa,WAAY,SAAQ,gBAGH;CAAG;AAOjC,eAAO,MAAM,kBAAkB,wCAgB9B,CAAC;AAEF,qFAAqF;AACrF,eAAO,MAAM,WAAW,WAAY;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,KAAG,KAAK,CAAC,KAAK,CAAC,WAAW,CAUxB,CAAC"}

package/dist/credentials.js

@@ -18,13 +18,15 @@
  * persist an `apiBaseUrl` that contains one outside of the caller's own
  * runtime configuration.
  *
- * ⛔ AUTHENTICATION IS NOT DOCUMENTED IN THE SPEC: `network_v10.4.57_openapi.json`
- * declares no `components.securitySchemes` and no operation carries a
- * `security` requirement — the `X-API-KEY` header below comes from
- * Ubiquiti's own Integration API guide (https://developer.ui.com/unifi-integration-api-guide/),
- * not from the machine-readable description. Re-verify this against a live
- * console (a request without it should 401) before depending on it in
- * anything that writes.
+ * ⚠️ AUTHENTICATION IS NOT DOCUMENTED IN THE SPEC, BUT IS MEASURED FOR READS (2026-09-24):
+ * `network_v10.4.57_openapi.json` declares no `components.securitySchemes` and no operation
+ * carries a `security` requirement — the `X-API-KEY` header below comes from Ubiquiti's own
+ * Integration API guide (https://developer.ui.com/unifi-integration-api-guide/), not from the
+ * machine-readable description. A hand-run, read-only probe against a live local console
+ * confirmed it: `X-API-KEY` on the local shape above returns HTTP 200 on `GET /v1/info` and
+ * `GET /v1/sites`. The SAME key returned 401 against the cloud-connector shape — the wrong door
+ * for a key minted on a local console, not evidence the cloud shape rejects `X-API-KEY` outright.
+ * Only reads were probed: re-verify before depending on this header in anything that writes.
  *
  * The key itself is an Integrations → API Key created in the console's own
  * UI (Settings → Control Plane → Integrations on a local console). It is a

package/dist/credentials.js.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,OAAO,KAAK,YAAY,MAAM,eAAe,CAAC;AAC9C,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAY3D;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,CAAC,OAAe,EAAU,EAAE;IACnD,IAAI,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;IACzB,OAAO,GAAG,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE;QAAE,GAAG,EAAE,CAAC;IAC5D,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC/B,CAAC,CAAC;AAEF,MAAM,OAAO,WAAY,SAAQ,OAAO,CAAC,OAAO,EAG7C,CAAC,yBAAyB,CAAC;CAAG;AAEjC,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC;IACjC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,uBAAuB,CAAC;IACpD,UAAU,EAAE,YAAY,CAAC,MAAM,CAAC,4BAA4B,CAAC;CAC9D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAC7C,WAAW,EACX,SAAS,CAAC,IAAI,CACZ,MAAM,CAAC,QAAQ,CACb,GAAG,EAAE,CACH,IAAI,WAAW,CAAC;IACd,OAAO,EACL,yFAAyF;CAC5F,CAAC,CACL,EACD,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;IACtC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;IAC7B,UAAU,EAAE,gBAAgB,CAAC,UAAU,CAAC;CACzC,CAAC,CAAC,EACH,MAAM,CAAC,KAAK,CACb,CACF,CAAC;AAEF,qFAAqF;AACrF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,MAG3B,EAA4B,EAAE,CAC7B,KAAK,CAAC,OAAO,CACX,WAAW,EACX,MAAM,CAAC,OAAO,CAAC;IACb,MAAM,EACJ,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QAC/B,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAC9B,CAAC,CAAC,MAAM,CAAC,MAAM;IACnB,UAAU,EAAE,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC;CAChD,CAAC,CACH,CAAC"}
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,OAAO,KAAK,YAAY,MAAM,eAAe,CAAC;AAC9C,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAY3D;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,CAAC,OAAe,EAAU,EAAE;IACnD,IAAI,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;IACzB,OAAO,GAAG,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE;QAAE,GAAG,EAAE,CAAC;IAC5D,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC/B,CAAC,CAAC;AAEF,MAAM,OAAO,WAAY,SAAQ,OAAO,CAAC,OAAO,EAG7C,CAAC,yBAAyB,CAAC;CAAG;AAEjC,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC;IACjC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,uBAAuB,CAAC;IACpD,UAAU,EAAE,YAAY,CAAC,MAAM,CAAC,4BAA4B,CAAC;CAC9D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAC7C,WAAW,EACX,SAAS,CAAC,IAAI,CACZ,MAAM,CAAC,QAAQ,CACb,GAAG,EAAE,CACH,IAAI,WAAW,CAAC;IACd,OAAO,EACL,yFAAyF;CAC5F,CAAC,CACL,EACD,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;IACtC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;IAC7B,UAAU,EAAE,gBAAgB,CAAC,UAAU,CAAC;CACzC,CAAC,CAAC,EACH,MAAM,CAAC,KAAK,CACb,CACF,CAAC;AAEF,qFAAqF;AACrF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,MAG3B,EAA4B,EAAE,CAC7B,KAAK,CAAC,OAAO,CACX,WAAW,EACX,MAAM,CAAC,OAAO,CAAC;IACb,MAAM,EACJ,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QAC/B,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAC9B,CAAC,CAAC,MAAM,CAAC,MAAM;IACnB,UAAU,EAAE,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC;CAChD,CAAC,CACH,CAAC"}

package/dist/errors.d.ts

@@ -1,7 +1,7 @@
 /**
  * UniFi Network-specific error types.
  *
- * ⛔ THE SPEC DOCUMENTS ZERO ERROR RESPONSES. Every one of the 73 operations
+ * ⛔ NO OPERATION DOCUMENTS AN ERROR RESPONSE. Every one of the 73 operations
  * in `network_v10.4.57_openapi.json` declares only its success status (65
  * carry `200`, 8 carry `201`) — there is no per-operation 4xx/5xx, and
  * unlike Hetzner's spec there isn't even a blanket `4xx`/`5xx` wildcard to
@@ -13,14 +13,27 @@
  * exactly the situation core's shared map exists for, just with less
  * upstream signal than usual to say which statuses are actually reachable.
  *
+ * The FAILURE BODY *is* documented, though, just never `$ref`'d from an
+ * operation: `components.schemas["Error Message"]` (`{code, message,
+ * requestId, requestPath, statusCode, statusName, timestamp}`, T8) sits in
+ * the pinned spec with zero references. `src/protocol.ts`'s `errorEnvelope`
+ * decodes it, so `message` below is the vendor's own text instead of a bare
+ * `HTTP <status>`. `UnknownUnifiNetworkError` carries the matching
+ * `requestId`/`statusCode`/`statusName` alongside the raw `body` — every
+ * field from that schema EXCEPT `requestPath`, which is dropped rather than
+ * surfaced as a first-class field (T3: like the console id/endpoint in
+ * `src/credentials.ts`, a request path is caller/console-shaped and must
+ * never end up somewhere it gets logged as if it were plain diagnostic
+ * text; it is still present, un-plucked, inside `body` for anyone who reads
+ * that raw value on purpose).
+ *
  * Re-exports the common HTTP errors from core (nothing UniFi-specific to
- * add to the status→class mapping — no documented error envelope shape,
- * either, so `UnknownUnifiNetworkError` below carries the raw body rather
- * than any parsed `code`/`message` pair) plus the unknown-error and
- * parse-error wrappers every package needs.
+ * add to the status→class mapping) plus the unknown-error and parse-error
+ * wrappers every package needs.
  *
  * Known unknowns — confirm against a live console before hardening on them:
- *   - Exact body shape of a failure (no operation's `responses` gives one).
+ *   - The `Error Message` schema itself, UNCONFIRMED by any real capture yet
+ *     (no live call has been made against a console for this work — T8/T16).
  *   - Whether 429 carries `Retry-After` (assume not; see `src/retry.ts`).
  *   - Whether a bad/missing `X-API-KEY` answers 401 or 403 (both are wired
  *     through `HTTP_STATUS_MAP`; only one will actually fire).
@@ -31,6 +44,10 @@ import * as Schema from "effect/Schema";
 declare const UnknownUnifiNetworkError_base: Schema.Class<UnknownUnifiNetworkError, Schema.TaggedStruct<"UnknownUnifiNetworkError", {
     readonly code: Schema.optional<Schema.String>;
     readonly message: Schema.optional<Schema.String>;
+    readonly requestId: Schema.optional<Schema.String>;
+    readonly statusCode: Schema.optional<Schema.Number>;
+    readonly statusName: Schema.optional<Schema.String>;
+    readonly timestamp: Schema.optional<Schema.String>;
     readonly body: Schema.Unknown;
 }>, import("effect/Cause").YieldableError> & (new (...args: any[]) => {
     "@distilled.cloud/error/categories": {
@@ -39,9 +56,16 @@ declare const UnknownUnifiNetworkError_base: Schema.Class<UnknownUnifiNetworkErr
 });
 /**
  * Unknown UniFi Network error — returned when a failed response's HTTP
- * status has no mapped error class, OR (given the spec's total silence on
- * error shapes) as the fallback for any status this SDK has not been told
- * about by a real failure yet. Carries the raw body for later cataloging.
+ * status has no mapped error class (every status `HTTP_STATUS_MAP` does
+ * cover surfaces as that mapped class instead, e.g. `NotFound`, and only
+ * carries `message` — core's classes are shared across every provider and
+ * are never given UniFi-specific fields). `code`/`requestId`/`statusCode`/
+ * `statusName`/`timestamp` come from the vendor's own `Error Message` envelope
+ * (`src/protocol.ts`'s `errorEnvelope`, T8) when the failure body parsed as
+ * JSON in that shape; `requestPath` is deliberately NOT modeled as a field
+ * here (T3) — see the module doc comment. `body` carries the raw parsed
+ * JSON (or raw text) for later cataloging regardless of whether it matched
+ * the envelope shape.
  */
 export declare class UnknownUnifiNetworkError extends UnknownUnifiNetworkError_base {
 }

package/dist/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EACL,UAAU,EACV,UAAU,EACV,QAAQ,EACR,WAAW,EACX,SAAS,EACT,cAAc,EACd,mBAAmB,EACnB,QAAQ,EACR,kBAAkB,EAClB,eAAe,EACf,YAAY,EACZ,mBAAmB,EACnB,eAAe,EACf,cAAc,EACd,UAAU,GACX,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EACV,UAAU,IAAI,cAAc,EAC5B,QAAQ,IAAI,YAAY,EACxB,aAAa,IAAI,iBAAiB,EAClC,SAAS,IAAI,aAAa,EAC1B,QAAQ,IAAI,YAAY,EACxB,mBAAmB,IAAI,uBAAuB,EAC/C,MAAM,8BAA8B,CAAC;AAEtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;;;;;;;;;;AAGxC;;;;;GAKG;AACH,qBAAa,wBAAyB,SAAQ,6BAOd;CAAG;;;;;;;;;AAEnC,kCAAkC;AAClC,qBAAa,sBAAuB,SAAQ,2BAMb;CAAG;AAElC;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,wBAAwB,GAAG,sBAAsB,CAAC;AAE7E;;;;;;;;GAQG;AACH,MAAM,MAAM,aAAa,GACrB,iBAAiB,GACjB,cAAc,GACd,aAAa,GACb,YAAY,GACZ,YAAY,GACZ,uBAAuB,GACvB,YAAY,CAAC"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,OAAO,EACL,UAAU,EACV,UAAU,EACV,QAAQ,EACR,WAAW,EACX,SAAS,EACT,cAAc,EACd,mBAAmB,EACnB,QAAQ,EACR,kBAAkB,EAClB,eAAe,EACf,YAAY,EACZ,mBAAmB,EACnB,eAAe,EACf,cAAc,EACd,UAAU,GACX,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EACV,UAAU,IAAI,cAAc,EAC5B,QAAQ,IAAI,YAAY,EACxB,aAAa,IAAI,iBAAiB,EAClC,SAAS,IAAI,aAAa,EAC1B,QAAQ,IAAI,YAAY,EACxB,mBAAmB,IAAI,uBAAuB,EAC/C,MAAM,8BAA8B,CAAC;AAEtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;;;;;;;;;;;;;;AAGxC;;;;;;;;;;;;GAYG;AACH,qBAAa,wBAAyB,SAAQ,6BAWd;CAAG;;;;;;;;;AAEnC,kCAAkC;AAClC,qBAAa,sBAAuB,SAAQ,2BAMb;CAAG;AAElC;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,wBAAwB,GAAG,sBAAsB,CAAC;AAE7E;;;;;;;;GAQG;AACH,MAAM,MAAM,aAAa,GACrB,iBAAiB,GACjB,cAAc,GACd,aAAa,GACb,YAAY,GACZ,YAAY,GACZ,uBAAuB,GACvB,YAAY,CAAC"}

package/dist/errors.js

@@ -1,7 +1,7 @@
 /**
  * UniFi Network-specific error types.
  *
- * ⛔ THE SPEC DOCUMENTS ZERO ERROR RESPONSES. Every one of the 73 operations
+ * ⛔ NO OPERATION DOCUMENTS AN ERROR RESPONSE. Every one of the 73 operations
  * in `network_v10.4.57_openapi.json` declares only its success status (65
  * carry `200`, 8 carry `201`) — there is no per-operation 4xx/5xx, and
  * unlike Hetzner's spec there isn't even a blanket `4xx`/`5xx` wildcard to
@@ -13,14 +13,27 @@
  * exactly the situation core's shared map exists for, just with less
  * upstream signal than usual to say which statuses are actually reachable.
  *
+ * The FAILURE BODY *is* documented, though, just never `$ref`'d from an
+ * operation: `components.schemas["Error Message"]` (`{code, message,
+ * requestId, requestPath, statusCode, statusName, timestamp}`, T8) sits in
+ * the pinned spec with zero references. `src/protocol.ts`'s `errorEnvelope`
+ * decodes it, so `message` below is the vendor's own text instead of a bare
+ * `HTTP <status>`. `UnknownUnifiNetworkError` carries the matching
+ * `requestId`/`statusCode`/`statusName` alongside the raw `body` — every
+ * field from that schema EXCEPT `requestPath`, which is dropped rather than
+ * surfaced as a first-class field (T3: like the console id/endpoint in
+ * `src/credentials.ts`, a request path is caller/console-shaped and must
+ * never end up somewhere it gets logged as if it were plain diagnostic
+ * text; it is still present, un-plucked, inside `body` for anyone who reads
+ * that raw value on purpose).
+ *
  * Re-exports the common HTTP errors from core (nothing UniFi-specific to
- * add to the status→class mapping — no documented error envelope shape,
- * either, so `UnknownUnifiNetworkError` below carries the raw body rather
- * than any parsed `code`/`message` pair) plus the unknown-error and
- * parse-error wrappers every package needs.
+ * add to the status→class mapping) plus the unknown-error and parse-error
+ * wrappers every package needs.
  *
  * Known unknowns — confirm against a live console before hardening on them:
- *   - Exact body shape of a failure (no operation's `responses` gives one).
+ *   - The `Error Message` schema itself, UNCONFIRMED by any real capture yet
+ *     (no live call has been made against a console for this work — T8/T16).
  *   - Whether 429 carries `Retry-After` (assume not; see `src/retry.ts`).
  *   - Whether a bad/missing `X-API-KEY` answers 401 or 403 (both are wired
  *     through `HTTP_STATUS_MAP`; only one will actually fire).
@@ -30,13 +43,24 @@ import * as Schema from "effect/Schema";
 import * as Category from "@distilled.cloud/core/category";
 /**
  * Unknown UniFi Network error — returned when a failed response's HTTP
- * status has no mapped error class, OR (given the spec's total silence on
- * error shapes) as the fallback for any status this SDK has not been told
- * about by a real failure yet. Carries the raw body for later cataloging.
+ * status has no mapped error class (every status `HTTP_STATUS_MAP` does
+ * cover surfaces as that mapped class instead, e.g. `NotFound`, and only
+ * carries `message` — core's classes are shared across every provider and
+ * are never given UniFi-specific fields). `code`/`requestId`/`statusCode`/
+ * `statusName`/`timestamp` come from the vendor's own `Error Message` envelope
+ * (`src/protocol.ts`'s `errorEnvelope`, T8) when the failure body parsed as
+ * JSON in that shape; `requestPath` is deliberately NOT modeled as a field
+ * here (T3) — see the module doc comment. `body` carries the raw parsed
+ * JSON (or raw text) for later cataloging regardless of whether it matched
+ * the envelope shape.
  */
 export class UnknownUnifiNetworkError extends Schema.TaggedError()("UnknownUnifiNetworkError", {
     code: Schema.optional(Schema.String),
     message: Schema.optional(Schema.String),
+    requestId: Schema.optional(Schema.String),
+    statusCode: Schema.optional(Schema.Number),
+    statusName: Schema.optional(Schema.String),
+    timestamp: Schema.optional(Schema.String),
     body: Schema.Unknown,
 }).pipe(Category.withServerError) {
 }

package/dist/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EACL,UAAU,EACV,UAAU,EACV,QAAQ,EACR,WAAW,EACX,SAAS,EACT,cAAc,EACd,mBAAmB,EACnB,QAAQ,EACR,kBAAkB,EAClB,eAAe,EACf,YAAY,EACZ,mBAAmB,EACnB,eAAe,EACf,cAAc,EACd,UAAU,GACX,MAAM,8BAA8B,CAAC;AAUtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,gCAAgC,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,OAAO,wBAAyB,SAAQ,MAAM,CAAC,WAAW,EAA4B,CAC1F,0BAA0B,EAC1B;IACE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,MAAM,CAAC,OAAO;CACrB,CACF,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;CAAG;AAEnC,kCAAkC;AAClC,MAAM,OAAO,sBAAuB,SAAQ,MAAM,CAAC,WAAW,EAA0B,CACtF,wBAAwB,EACxB;IACE,IAAI,EAAE,MAAM,CAAC,OAAO;IACpB,KAAK,EAAE,MAAM,CAAC,OAAO;CACtB,CACF,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;CAAG"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,OAAO,EACL,UAAU,EACV,UAAU,EACV,QAAQ,EACR,WAAW,EACX,SAAS,EACT,cAAc,EACd,mBAAmB,EACnB,QAAQ,EACR,kBAAkB,EAClB,eAAe,EACf,YAAY,EACZ,mBAAmB,EACnB,eAAe,EACf,cAAc,EACd,UAAU,GACX,MAAM,8BAA8B,CAAC;AAUtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,gCAAgC,CAAC;AAE3D;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,wBAAyB,SAAQ,MAAM,CAAC,WAAW,EAA4B,CAC1F,0BAA0B,EAC1B;IACE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACzC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IAC1C,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,MAAM,CAAC,OAAO;CACrB,CACF,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;CAAG;AAEnC,kCAAkC;AAClC,MAAM,OAAO,sBAAuB,SAAQ,MAAM,CAAC,WAAW,EAA0B,CACtF,wBAAwB,EACxB;IACE,IAAI,EAAE,MAAM,CAAC,OAAO;IACpB,KAAK,EAAE,MAAM,CAAC,OAAO;CACtB,CACF,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;CAAG"}

package/dist/protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,KAAK,KAAK,MAAM,cAAc,CAAC;AAE3C,OAAO,KAAK,KAAK,UAAU,MAAM,iCAAiC,CAAC;AACnE,OAAO,KAAK,KAAK,eAAe,MAAM,sCAAsC,CAAC;AAC7E,OAAO,KAAK,KAAK,GAAG,MAAM,2BAA2B,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAKhE,OAAO,EAAE,WAAW,EAAe,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAA4B,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAE3E;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAC3B,aAAa,GACb,WAAW,GACX,eAAe,CAAC,eAAe,CAAC;AAEpC,gFAAgF;AAChF,MAAM,MAAM,qBAAqB,GAAG,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC;AAUxE,eAAO,MAAM,oBAAoB,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CA0BvD,CAAC"}
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAiCA,OAAO,KAAK,KAAK,KAAK,MAAM,cAAc,CAAC;AAE3C,OAAO,KAAK,KAAK,UAAU,MAAM,iCAAiC,CAAC;AACnE,OAAO,KAAK,KAAK,eAAe,MAAM,sCAAsC,CAAC;AAC7E,OAAO,KAAK,KAAK,GAAG,MAAM,2BAA2B,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAKhE,OAAO,EAAE,WAAW,EAAe,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAA4B,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAE3E;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAC3B,aAAa,GACb,WAAW,GACX,eAAe,CAAC,eAAe,CAAC;AAEpC,gFAAgF;AAChF,MAAM,MAAM,qBAAqB,GAAG,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC;AAgDxE,eAAO,MAAM,oBAAoB,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CA2BvD,CAAC"}

package/dist/protocol.js

@@ -14,12 +14,21 @@
  * return the object directly; mutations return the created/updated object
  * (`200`/`201`), never `204`.
  *
- * FAILURE ENVELOPE IS UNKNOWN: no operation in the spec documents an error
- * response, so there is no field to read a machine-readable code or message
- * from (`errorEnvelope` below always returns undefined, meaning every
- * failure falls through to the protocol's raw-text / `HTTP <status>`
- * default and `unknownError`). Replace this the first time a real console
- * failure is captured and its body shape is known.
+ * FAILURE ENVELOPE (T8): no OPERATION documents an error response, but the
+ * pinned spec's own `components.schemas["Error Message"]` — `{code,
+ * message, requestId, requestPath, statusCode, statusName, timestamp}`,
+ * referenced by zero operations — is the vendor's real failure shape.
+ * `errorEnvelope` below decodes `code`/`message` from it, which the shared
+ * REST protocol folds into every status-mapped error's `message` (so a
+ * `NotFound`, say, carries the vendor's own text instead of a bare `HTTP
+ * 404`); `unknownError` additionally reads `requestId`/`statusCode`/
+ * `statusName`/`timestamp` straight off the parsed body for the fallback
+ * `UnknownUnifiNetworkError`. `requestPath` is READ NOWHERE below — it is
+ * deliberately excluded from both the envelope and the error's fields (T3;
+ * see `src/errors.ts`'s doc comment) — never let it reach a `message`. This
+ * is derived from the spec, not yet confirmed against a real captured
+ * failure (no live call has been made for this work); the shape may need a
+ * correction once one is.
  */
 import * as Effect from "effect/Effect";
 import * as Redacted from "effect/Redacted";
@@ -27,11 +36,43 @@ import { makeRestProtocol, } from "@distilled.cloud/core/protocol-rest";
 import { Credentials } from "./credentials.js";
 import { UnknownUnifiNetworkError } from "./errors.js";
 /**
- * No documented failure envelope to parse (see module docs) — every failure
- * falls through to the protocol's status-derived default and
- * {@link UnknownUnifiNetworkError}.
+ * Decode the spec's `Error Message` schema (see module docs, T8): `code` is
+ * a dotted string (e.g. `"api.authentication.missing-credentials"`, never
+ * numeric in this spec — {@link RestErrorEnvelope}'s `code` allows both
+ * because other providers' envelopes use numeric codes), `message` a plain
+ * string. Anything else — a non-JSON body, or JSON that isn't this shape —
+ * returns `undefined` and the shared protocol falls back to its own
+ * `HTTP <status>` default. `requestPath` is READ HERE ON PURPOSE ONLY TO
+ * SKIP IT: it is never assigned to `code`/`message`, so it can never reach
+ * the `message` string every status-mapped error surfaces (T3).
  */
-const errorEnvelope = (_body) => undefined;
+const errorEnvelope = (body) => {
+    if (body === null || typeof body !== "object")
+        return undefined;
+    const b = body;
+    const code = typeof b.code === "string" ? b.code : undefined;
+    const message = typeof b.message === "string" ? b.message : undefined;
+    if (code === undefined && message === undefined)
+        return undefined;
+    return { code, message };
+};
+/**
+ * The rest of the `Error Message` envelope beyond `code`/`message` —
+ * {@link RestErrorEnvelope} has no room for it, so `unknownError` below
+ * reads it straight off the parsed body it already receives. Never reads
+ * `requestPath` (T3).
+ */
+const restEnvelopeFields = (body) => {
+    const b = body !== null && typeof body === "object"
+        ? body
+        : undefined;
+    return {
+        requestId: typeof b?.requestId === "string" ? b.requestId : undefined,
+        statusCode: typeof b?.statusCode === "number" ? b.statusCode : undefined,
+        statusName: typeof b?.statusName === "string" ? b.statusName : undefined,
+        timestamp: typeof b?.timestamp === "string" ? b.timestamp : undefined,
+    };
+};
 export const UnifiNetworkProtocol = makeRestProtocol({
     // Resolved on the CALLING fiber per request (the layer is memoized per
     // process); the Credentials service holds an effect, so a key rotated
@@ -53,6 +94,7 @@ export const UnifiNetworkProtocol = makeRestProtocol({
                 ? String(code)
                 : undefined,
         message,
+        ...restEnvelopeFields(body),
         body,
     }),
 });

package/dist/protocol.js.map

@@ -1 +1 @@
-{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAK5C,OAAO,EACL,gBAAgB,GAEjB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAe,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,wBAAwB,EAAsB,MAAM,aAAa,CAAC;AAgB3E;;;;GAIG;AACH,MAAM,aAAa,GAAG,CAAC,KAAc,EAAiC,EAAE,CACtE,SAAS,CAAC;AAEZ,MAAM,CAAC,MAAM,oBAAoB,GAC/B,gBAAgB,CAAS;IACvB,uEAAuE;IACvE,sEAAsE;IACtE,2DAA2D;IAC3D,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;QACnC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC;IACxB,CAAC,CAAC;IACF,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU;IACpC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnB,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;QACzC,MAAM,EAAE,kBAAkB;KAC3B,CAAC;IACF,aAAa;IACb,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CACxC,IAAI,wBAAwB,CAAC;QAC3B,IAAI,EACF,OAAO,IAAI,KAAK,QAAQ;YACtB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,IAAI,KAAK,SAAS;gBAClB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;gBACd,CAAC,CAAC,SAAS;QACjB,OAAO;QACP,IAAI;KACL,CAAC;CACL,CAAC,CAAC"}
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAK5C,OAAO,EACL,gBAAgB,GAEjB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAe,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,wBAAwB,EAAsB,MAAM,aAAa,CAAC;AAgB3E;;;;;;;;;;GAUG;AACH,MAAM,aAAa,GAAG,CAAC,IAAa,EAAiC,EAAE;IACrE,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChE,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAClE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,kBAAkB,GAAG,CACzB,IAAa,EAMb,EAAE;IACF,MAAM,CAAC,GACL,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QACvC,CAAC,CAAE,IAAgC;QACnC,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACrE,UAAU,EAAE,OAAO,CAAC,EAAE,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QACxE,UAAU,EAAE,OAAO,CAAC,EAAE,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QACxE,SAAS,EAAE,OAAO,CAAC,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;KACtE,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAC/B,gBAAgB,CAAS;IACvB,uEAAuE;IACvE,sEAAsE;IACtE,2DAA2D;IAC3D,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;QACnC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC;IACxB,CAAC,CAAC;IACF,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU;IACpC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnB,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;QACzC,MAAM,EAAE,kBAAkB;KAC3B,CAAC;IACF,aAAa;IACb,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CACxC,IAAI,wBAAwB,CAAC;QAC3B,IAAI,EACF,OAAO,IAAI,KAAK,QAAQ;YACtB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,IAAI,KAAK,SAAS;gBAClB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;gBACd,CAAC,CAAC,SAAS;QACjB,OAAO;QACP,GAAG,kBAAkB,CAAC,IAAI,CAAC;QAC3B,IAAI;KACL,CAAC;CACL,CAAC,CAAC"}

package/dist/services/access_control_acl_rules.d.ts

@@ -5,6 +5,39 @@ export type { UnifiNetworkOpError, UnifiNetworkOpContext };
 /** ACL rule action */
 export type CreateAclRuleRequestAction = "ALLOW" | "BLOCK";
 export declare const CreateAclRuleRequestAction: any;
+/** IP addresses or subnets */
+export type IPACLRuleEndpointIpAddressesOrSubnetsList = Array<string>;
+export declare const IPACLRuleEndpointIpAddressesOrSubnetsList: S.Schema<IPACLRuleEndpointIpAddressesOrSubnetsList>;
+/** Ports this ACL rule will be applied to. If null, all the rule will be applied to all ports. */
+export type IPACLRuleEndpointPortFilterList = Array<number>;
+export declare const IPACLRuleEndpointPortFilterList: S.Schema<IPACLRuleEndpointPortFilterList>;
+/** Network IDs */
+export type IPACLRuleEndpointNetworkIdsList = Array<string>;
+export declare const IPACLRuleEndpointNetworkIdsList: S.Schema<IPACLRuleEndpointNetworkIdsList>;
+export interface IPACLRuleEndpoint {
+    type: string;
+    /** IP addresses or subnets */
+    ipAddressesOrSubnets?: IPACLRuleEndpointIpAddressesOrSubnetsList;
+    /** Ports this ACL rule will be applied to. If null, all the rule will be applied to all ports. */
+    portFilter?: IPACLRuleEndpointPortFilterList;
+    /** Network IDs */
+    networkIds?: IPACLRuleEndpointNetworkIdsList;
+}
+export declare const IPACLRuleEndpoint: S.Schema<IPACLRuleEndpoint>;
+/** Source/destination MAC addresses this ACL rule will apply to. */
+export type MACACLRuleEndpointMacAddressesList = Array<string>;
+export declare const MACACLRuleEndpointMacAddressesList: S.Schema<MACACLRuleEndpointMacAddressesList>;
+export interface MACACLRuleEndpoint {
+    type: string;
+    /** Source/destination MAC addresses this ACL rule will apply to. */
+    macAddresses?: MACACLRuleEndpointMacAddressesList;
+    /** MAC address prefix length. When null, full MAC address(-es) will be used. */
+    prefixLength?: number;
+}
+export declare const MACACLRuleEndpoint: S.Schema<MACACLRuleEndpoint>;
+/** Shape depends on the sibling discriminator value — see docs/codegen-notes.md. */
+export type CreateAclRuleRequestDestinationFilter = IPACLRuleEndpoint | MACACLRuleEndpoint;
+export declare const CreateAclRuleRequestDestinationFilter: S.Schema<CreateAclRuleRequestDestinationFilter>;
 /** List of Switch capable device IDs to which the ACL rule will be provisioned. */
 export type ACLRuleDeviceFilterDeviceIdsList = Array<string>;
 export declare const ACLRuleDeviceFilterDeviceIdsList: S.Schema<ACLRuleDeviceFilterDeviceIdsList>;
@@ -14,6 +47,9 @@ export interface ACLRuleDeviceFilter {
     deviceIds?: ACLRuleDeviceFilterDeviceIdsList;
 }
 export declare const ACLRuleDeviceFilter: S.Schema<ACLRuleDeviceFilter>;
+/** Shape depends on the sibling discriminator value — see docs/codegen-notes.md. */
+export type CreateAclRuleRequestSourceFilter = IPACLRuleEndpoint | MACACLRuleEndpoint;
+export declare const CreateAclRuleRequestSourceFilter: S.Schema<CreateAclRuleRequestSourceFilter>;
 export type CreateAclRuleRequestProtocolFilterItem = "TCP" | "UDP";
 export declare const CreateAclRuleRequestProtocolFilterItem: any;
 /** Protocols this ACL rule will be applied to. When null, the rule will be applied to all protocols. */
@@ -25,8 +61,8 @@ export interface CreateAclRuleRequest {
     action: CreateAclRuleRequestAction | (string & {});
     /** ACL rule description */
     description?: string;
-    /** Shape varies by variant — widened by scripts/convert.ts; see README. */
-    destinationFilter?: unknown;
+    /** Shape depends on the sibling discriminator value — see docs/codegen-notes.md. */
+    destinationFilter?: CreateAclRuleRequestDestinationFilter;
     enabled: boolean;
     /** IDs of the Switch-capable devices used to enforce the ACL rule. When null, the rule will be provisioned to all switches on the site. */
     enforcingDeviceFilter?: ACLRuleDeviceFilter;
@@ -34,8 +70,8 @@ export interface CreateAclRuleRequest {
     index?: number;
     /** ACL rule name */
     name: string;
-    /** Shape varies by variant — widened by scripts/convert.ts; see README. */
-    sourceFilter?: unknown;
+    /** Shape depends on the sibling discriminator value — see docs/codegen-notes.md. */
+    sourceFilter?: CreateAclRuleRequestSourceFilter;
     type: string;
     /** Protocols this ACL rule will be applied to. When null, the rule will be applied to all protocols. */
     protocolFilter?: CreateAclRuleRequestProtocolFilterList;
@@ -46,6 +82,9 @@ export declare const CreateAclRuleRequest: S.Schema<CreateAclRuleRequest>;
 /** ACL rule action */
 export type ACLRuleAction = "ALLOW" | "BLOCK";
 export declare const ACLRuleAction: any;
+/** Shape depends on the sibling discriminator value — see docs/codegen-notes.md. */
+export type ACLRuleDestinationFilter = IPACLRuleEndpoint | MACACLRuleEndpoint;
+export declare const ACLRuleDestinationFilter: S.Schema<ACLRuleDestinationFilter>;
 export type UserDefinedOrDerivedEntityMetadataSource = "SDWAN";
 export declare const UserDefinedOrDerivedEntityMetadataSource: any;
 export interface UserDefinedOrDerivedEntityMetadata {
@@ -53,6 +92,9 @@ export interface UserDefinedOrDerivedEntityMetadata {
     source?: UserDefinedOrDerivedEntityMetadataSource;
 }
 export declare const UserDefinedOrDerivedEntityMetadata: S.Schema<UserDefinedOrDerivedEntityMetadata>;
+/** Shape depends on the sibling discriminator value — see docs/codegen-notes.md. */
+export type ACLRuleSourceFilter = IPACLRuleEndpoint | MACACLRuleEndpoint;
+export declare const ACLRuleSourceFilter: S.Schema<ACLRuleSourceFilter>;
 export type ACLRuleProtocolFilterItem = "TCP" | "UDP";
 export declare const ACLRuleProtocolFilterItem: any;
 /** Protocols this ACL rule will be applied to. When null, the rule will be applied to all protocols. */
@@ -63,8 +105,8 @@ export interface ACLRule {
     action: ACLRuleAction;
     /** ACL rule description */
     description?: string;
-    /** Traffic destination filter */
-    destinationFilter?: unknown;
+    /** Shape depends on the sibling discriminator value — see docs/codegen-notes.md. */
+    destinationFilter?: ACLRuleDestinationFilter;
     enabled: boolean;
     /** IDs of the Switch-capable devices used to enforce the ACL rule. When null, the rule will be provisioned to all switches on the site. */
     enforcingDeviceFilter?: ACLRuleDeviceFilter;
@@ -75,8 +117,8 @@ export interface ACLRule {
     metadata: UserDefinedOrDerivedEntityMetadata;
     /** ACL rule name */
     name: string;
-    /** Traffic source filter */
-    sourceFilter?: unknown;
+    /** Shape depends on the sibling discriminator value — see docs/codegen-notes.md. */
+    sourceFilter?: ACLRuleSourceFilter;
     type: string;
     /** Protocols this ACL rule will be applied to. When null, the rule will be applied to all protocols. */
     protocolFilter?: ACLRuleProtocolFilterList;
@@ -117,6 +159,12 @@ export declare const GetAclRulePageRequest: S.Schema<GetAclRulePageRequest>;
 /** ACL rule action */
 export type ACLRuleObjectAction = "ALLOW" | "BLOCK";
 export declare const ACLRuleObjectAction: any;
+/** Shape depends on the sibling discriminator value — see docs/codegen-notes.md. */
+export type ACLRuleObjectDestinationFilter = IPACLRuleEndpoint | MACACLRuleEndpoint;
+export declare const ACLRuleObjectDestinationFilter: S.Schema<ACLRuleObjectDestinationFilter>;
+/** Shape depends on the sibling discriminator value — see docs/codegen-notes.md. */
+export type ACLRuleObjectSourceFilter = IPACLRuleEndpoint | MACACLRuleEndpoint;
+export declare const ACLRuleObjectSourceFilter: S.Schema<ACLRuleObjectSourceFilter>;
 export type ACLRuleObjectProtocolFilterItem = "TCP" | "UDP";
 export declare const ACLRuleObjectProtocolFilterItem: any;
 /** Protocols this ACL rule will be applied to. When null, the rule will be applied to all protocols. */
@@ -127,8 +175,8 @@ export interface ACLRuleObject {
     action: ACLRuleObjectAction;
     /** ACL rule description */
     description?: string;
-    /** Traffic destination filter */
-    destinationFilter?: unknown;
+    /** Shape depends on the sibling discriminator value — see docs/codegen-notes.md. */
+    destinationFilter?: ACLRuleObjectDestinationFilter;
     enabled: boolean;
     /** IDs of the Switch-capable devices used to enforce the ACL rule. When null, the rule will be provisioned to all switches on the site. */
     enforcingDeviceFilter?: ACLRuleDeviceFilter;
@@ -139,8 +187,8 @@ export interface ACLRuleObject {
     metadata: UserDefinedOrDerivedEntityMetadata;
     /** ACL rule name */
     name: string;
-    /** Traffic source filter */
-    sourceFilter?: unknown;
+    /** Shape depends on the sibling discriminator value — see docs/codegen-notes.md. */
+    sourceFilter?: ACLRuleObjectSourceFilter;
     type: string;
     /** Protocols this ACL rule will be applied to. When null, the rule will be applied to all protocols. */
     protocolFilter?: ACLRuleObjectProtocolFilterList;
@@ -161,6 +209,12 @@ export declare const IntegrationAclRulePageDto: S.Schema<IntegrationAclRulePageD
 /** ACL rule action */
 export type UpdateAclRuleRequestAction = "ALLOW" | "BLOCK";
 export declare const UpdateAclRuleRequestAction: any;
+/** Shape depends on the sibling discriminator value — see docs/codegen-notes.md. */
+export type UpdateAclRuleRequestDestinationFilter = IPACLRuleEndpoint | MACACLRuleEndpoint;
+export declare const UpdateAclRuleRequestDestinationFilter: S.Schema<UpdateAclRuleRequestDestinationFilter>;
+/** Shape depends on the sibling discriminator value — see docs/codegen-notes.md. */
+export type UpdateAclRuleRequestSourceFilter = IPACLRuleEndpoint | MACACLRuleEndpoint;
+export declare const UpdateAclRuleRequestSourceFilter: S.Schema<UpdateAclRuleRequestSourceFilter>;
 export type UpdateAclRuleRequestProtocolFilterItem = "TCP" | "UDP";
 export declare const UpdateAclRuleRequestProtocolFilterItem: any;
 /** Protocols this ACL rule will be applied to. When null, the rule will be applied to all protocols. */
@@ -173,8 +227,8 @@ export interface UpdateAclRuleRequest {
     action: UpdateAclRuleRequestAction | (string & {});
     /** ACL rule description */
     description?: string;
-    /** Shape varies by variant — widened by scripts/convert.ts; see README. */
-    destinationFilter?: unknown;
+    /** Shape depends on the sibling discriminator value — see docs/codegen-notes.md. */
+    destinationFilter?: UpdateAclRuleRequestDestinationFilter;
     enabled: boolean;
     /** IDs of the Switch-capable devices used to enforce the ACL rule. When null, the rule will be provisioned to all switches on the site. */
     enforcingDeviceFilter?: ACLRuleDeviceFilter;
@@ -182,8 +236,8 @@ export interface UpdateAclRuleRequest {
     index?: number;
     /** ACL rule name */
     name: string;
-    /** Shape varies by variant — widened by scripts/convert.ts; see README. */
-    sourceFilter?: unknown;
+    /** Shape depends on the sibling discriminator value — see docs/codegen-notes.md. */
+    sourceFilter?: UpdateAclRuleRequestSourceFilter;
     type: string;
     /** Protocols this ACL rule will be applied to. When null, the rule will be applied to all protocols. */
     protocolFilter?: UpdateAclRuleRequestProtocolFilterList;

package/dist/services/access_control_acl_rules.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"access_control_acl_rules.d.ts","sourceRoot":"","sources":["../../src/services/access_control_acl_rules.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,8BAA8B,CAAC;AAClD,OAAO,KAAK,GAAG,MAAM,2BAA2B,CAAC;AAEjD,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC3B,MAAM,gBAAgB,CAAC;AAIxB,YAAY,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,CAAC;AAE3D,sBAAsB;AACtB,MAAM,MAAM,0BAA0B,GAAG,OAAO,GAAG,OAAO,CAAC;AAC3D,eAAO,MAAM,0BAA0B,KAAW,CAAC;AAEnD,mFAAmF;AACnF,MAAM,MAAM,gCAAgC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;AAC7D,eAAO,MAAM,gCAAgC,EAEjC,CAAC,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAAC;AAEvD,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,mFAAmF;IACnF,SAAS,CAAC,EAAE,gCAAgC,CAAC;CAC9C;AACD,eAAO,MAAM,mBAAmB,EAOnB,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;AAE3C,MAAM,MAAM,sCAAsC,GAAG,KAAK,GAAG,KAAK,CAAC;AACnE,eAAO,MAAM,sCAAsC,KAAW,CAAC;AAE/D,wGAAwG;AACxG,MAAM,MAAM,sCAAsC,GAAG,KAAK,CACxD,sCAAsC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CACvD,CAAC;AACF,eAAO,MAAM,sCAAsC,EAEvC,CAAC,CAAC,MAAM,CAAC,sCAAsC,CAAC,CAAC;AAE7D,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,sBAAsB;IACtB,MAAM,EAAE,0BAA0B,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACnD,2BAA2B;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,2IAA2I;IAC3I,qBAAqB,CAAC,EAAE,mBAAmB,CAAC;IAC5C,qHAAqH;IACrH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,wGAAwG;IACxG,cAAc,CAAC,EAAE,sCAAsC,CAAC;IACxD,gDAAgD;IAChD,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AACD,eAAO,MAAM,oBAAoB,EAmBpB,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;AAE5C,sBAAsB;AACtB,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,OAAO,CAAC;AAC9C,eAAO,MAAM,aAAa,KAAW,CAAC;AAEtC,MAAM,MAAM,wCAAwC,GAAG,OAAO,CAAC;AAC/D,eAAO,MAAM,wCAAwC,KAAW,CAAC;AAEjE,MAAM,WAAW,kCAAkC;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,wCAAwC,CAAC;CACnD;AACD,eAAO,MAAM,kCAAkC,EAOlC,CAAC,CAAC,MAAM,CAAC,kCAAkC,CAAC,CAAC;AAE1D,MAAM,MAAM,yBAAyB,GAAG,KAAK,GAAG,KAAK,CAAC;AACtD,eAAO,MAAM,yBAAyB,KAAW,CAAC;AAElD,wGAAwG;AACxG,MAAM,MAAM,yBAAyB,GAAG,KAAK,CAAC,yBAAyB,CAAC,CAAC;AACzE,eAAO,MAAM,yBAAyB,EAE1B,CAAC,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;AAEhD,MAAM,WAAW,OAAO;IACtB,sBAAsB;IACtB,MAAM,EAAE,aAAa,CAAC;IACtB,2BAA2B;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iCAAiC;IACjC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,2IAA2I;IAC3I,qBAAqB,CAAC,EAAE,mBAAmB,CAAC;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,sDAAsD;IACtD,KAAK,EAAE,MAAM,CAAC;IACd,yDAAyD;IACzD,QAAQ,EAAE,kCAAkC,CAAC;IAC7C,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,4BAA4B;IAC5B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,wGAAwG;IACxG,cAAc,CAAC,EAAE,yBAAyB,CAAC;IAC3C,gDAAgD;IAChD,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AACD,eAAO,MAAM,OAAO,EAgB4B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAElE,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,eAAO,MAAM,oBAAoB,EAapB,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;AAE5C,MAAM,WAAW,qBAAqB;CAAG;AACzC,eAAO,MAAM,qBAAqB,EAIrB,CAAC,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAE7C,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,eAAO,MAAM,iBAAiB,EAajB,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;AAEzC,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,MAAM,CAAC;CAChB;AACD,eAAO,MAAM,yBAAyB,EAYzB,CAAC,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;AAEjD,MAAM,MAAM,oCAAoC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;AACjE,eAAO,MAAM,oCAAoC,EAErC,CAAC,CAAC,MAAM,CAAC,oCAAoC,CAAC,CAAC;AAE3D,MAAM,WAAW,eAAe;IAC9B,iBAAiB,EAAE,oCAAoC,CAAC;CACzD;AACD,eAAO,MAAM,eAAe,EAMf,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;AAEvC,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AACD,eAAO,MAAM,qBAAqB,EAWrB,CAAC,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAE7C,sBAAsB;AACtB,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,OAAO,CAAC;AACpD,eAAO,MAAM,mBAAmB,KAAW,CAAC;AAE5C,MAAM,MAAM,+BAA+B,GAAG,KAAK,GAAG,KAAK,CAAC;AAC5D,eAAO,MAAM,+BAA+B,KAAW,CAAC;AAExD,wGAAwG;AACxG,MAAM,MAAM,+BAA+B,GACzC,KAAK,CAAC,+BAA+B,CAAC,CAAC;AACzC,eAAO,MAAM,+BAA+B,EAEhC,CAAC,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAC;AAEtD,MAAM,WAAW,aAAa;IAC5B,sBAAsB;IACtB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,2BAA2B;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iCAAiC;IACjC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,2IAA2I;IAC3I,qBAAqB,CAAC,EAAE,mBAAmB,CAAC;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,sDAAsD;IACtD,KAAK,EAAE,MAAM,CAAC;IACd,yDAAyD;IACzD,QAAQ,EAAE,kCAAkC,CAAC;IAC7C,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,4BAA4B;IAC5B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,wGAAwG;IACxG,cAAc,CAAC,EAAE,+BAA+B,CAAC;IACjD,gDAAgD;IAChD,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AACD,eAAO,MAAM,aAAa,EAgB4B,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;AAE9E,MAAM,MAAM,iCAAiC,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;AACrE,eAAO,MAAM,iCAAiC,EAElC,CAAC,CAAC,MAAM,CAAC,iCAAiC,CAAC,CAAC;AAExD,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,iCAAiC,CAAC;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AACD,eAAO,MAAM,yBAAyB,EAUzB,CAAC,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;AAEjD,sBAAsB;AACtB,MAAM,MAAM,0BAA0B,GAAG,OAAO,GAAG,OAAO,CAAC;AAC3D,eAAO,MAAM,0BAA0B,KAAW,CAAC;AAEnD,MAAM,MAAM,sCAAsC,GAAG,KAAK,GAAG,KAAK,CAAC;AACnE,eAAO,MAAM,sCAAsC,KAAW,CAAC;AAE/D,wGAAwG;AACxG,MAAM,MAAM,sCAAsC,GAAG,KAAK,CACxD,sCAAsC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CACvD,CAAC;AACF,eAAO,MAAM,sCAAsC,EAEvC,CAAC,CAAC,MAAM,CAAC,sCAAsC,CAAC,CAAC;AAE7D,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,sBAAsB;IACtB,MAAM,EAAE,0BAA0B,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACnD,2BAA2B;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,2IAA2I;IAC3I,qBAAqB,CAAC,EAAE,mBAAmB,CAAC;IAC5C,qHAAqH;IACrH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,wGAAwG;IACxG,cAAc,CAAC,EAAE,sCAAsC,CAAC;IACxD,gDAAgD;IAChD,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AACD,eAAO,MAAM,oBAAoB,EAwBpB,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;AAE5C,MAAM,MAAM,iDAAiD,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;AAC9E,eAAO,MAAM,iDAAiD,EAGhD,CAAC,CAAC,MAAM,CAAC,iDAAiD,CAAC,CAAC;AAE1E,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,iDAAiD,CAAC;CACtE;AACD,eAAO,MAAM,4BAA4B,EAa5B,CAAC,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAEpD,MAAM,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AACrD,oEAAoE;AACpE,eAAO,MAAM,aAAa,EAAE,GAAG,CAAC,eAAe,CAC7C,oBAAoB,EACpB,OAAO,EACP,kBAAkB,EAClB,qBAAqB,CAOpB,CAAC;AAEJ,MAAM,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AACrD,0EAA0E;AAC1E,eAAO,MAAM,aAAa,EAAE,GAAG,CAAC,eAAe,CAC7C,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,qBAAqB,CAOpB,CAAC;AAEJ,MAAM,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAClD,mBAAmB;AACnB,eAAO,MAAM,UAAU,EAAE,GAAG,CAAC,eAAe,CAC1C,iBAAiB,EACjB,OAAO,EACP,eAAe,EACf,qBAAqB,CAOpB,CAAC;AAEJ,MAAM,MAAM,uBAAuB,GAAG,mBAAmB,CAAC;AAC1D,4FAA4F;AAC5F,eAAO,MAAM,kBAAkB,EAAE,GAAG,CAAC,eAAe,CAClD,yBAAyB,EACzB,eAAe,EACf,uBAAuB,EACvB,qBAAqB,CAOpB,CAAC;AAEJ,MAAM,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AACtD,2JAA2J;AAC3J,eAAO,MAAM,cAAc,EAAE,GAAG,CAAC,eAAe,CAC9C,qBAAqB,EACrB,yBAAyB,EACzB,mBAAmB,EACnB,qBAAqB,CAOpB,CAAC;AAEJ,MAAM,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AACrD,0EAA0E;AAC1E,eAAO,MAAM,aAAa,EAAE,GAAG,CAAC,eAAe,CAC7C,oBAAoB,EACpB,OAAO,EACP,kBAAkB,EAClB,qBAAqB,CAOpB,CAAC;AAEJ,MAAM,MAAM,0BAA0B,GAAG,mBAAmB,CAAC;AAC7D,+EAA+E;AAC/E,eAAO,MAAM,qBAAqB,EAAE,GAAG,CAAC,eAAe,CACrD,4BAA4B,EAC5B,eAAe,EACf,0BAA0B,EAC1B,qBAAqB,CAOpB,CAAC"}
+{"version":3,"file":"access_control_acl_rules.d.ts","sourceRoot":"","sources":["../../src/services/access_control_acl_rules.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,8BAA8B,CAAC;AAClD,OAAO,KAAK,GAAG,MAAM,2BAA2B,CAAC;AAEjD,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC3B,MAAM,gBAAgB,CAAC;AAIxB,YAAY,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,CAAC;AAE3D,sBAAsB;AACtB,MAAM,MAAM,0BAA0B,GAAG,OAAO,GAAG,OAAO,CAAC;AAC3D,eAAO,MAAM,0BAA0B,KAAW,CAAC;AAEnD,8BAA8B;AAC9B,MAAM,MAAM,yCAAyC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;AACtE,eAAO,MAAM,yCAAyC,EAE1C,CAAC,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAC;AAEhE,kGAAkG;AAClG,MAAM,MAAM,+BAA+B,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;AAC5D,eAAO,MAAM,+BAA+B,EAEhC,CAAC,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAC;AAEtD,kBAAkB;AAClB,MAAM,MAAM,+BAA+B,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;AAC5D,eAAO,MAAM,+BAA+B,EAEhC,CAAC,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAC;AAEtD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,8BAA8B;IAC9B,oBAAoB,CAAC,EAAE,yCAAyC,CAAC;IACjE,kGAAkG;IAClG,UAAU,CAAC,EAAE,+BAA+B,CAAC;IAC7C,kBAAkB;IAClB,UAAU,CAAC,EAAE,+BAA+B,CAAC;CAC9C;AACD,eAAO,MAAM,iBAAiB,EASjB,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;AAEzC,oEAAoE;AACpE,MAAM,MAAM,kCAAkC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;AAC/D,eAAO,MAAM,kCAAkC,EAEnC,CAAC,CAAC,MAAM,CAAC,kCAAkC,CAAC,CAAC;AAEzD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,YAAY,CAAC,EAAE,kCAAkC,CAAC;IAClD,gFAAgF;IAChF,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AACD,eAAO,MAAM,kBAAkB,EAQlB,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;AAE1C,oFAAoF;AACpF,MAAM,MAAM,qCAAqC,GAC7C,iBAAiB,GACjB,kBAAkB,CAAC;AACvB,eAAO,MAAM,qCAAqC,EAC5B,CAAC,CAAC,MAAM,CAAC,qCAAqC,CAAC,CAAC;AAEtE,mFAAmF;AACnF,MAAM,MAAM,gCAAgC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;AAC7D,eAAO,MAAM,gCAAgC,EAEjC,CAAC,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAAC;AAEvD,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,mFAAmF;IACnF,SAAS,CAAC,EAAE,gCAAgC,CAAC;CAC9C;AACD,eAAO,MAAM,mBAAmB,EAOnB,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;AAE3C,oFAAoF;AACpF,MAAM,MAAM,gCAAgC,GACxC,iBAAiB,GACjB,kBAAkB,CAAC;AACvB,eAAO,MAAM,gCAAgC,EACvB,CAAC,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAAC;AAEjE,MAAM,MAAM,sCAAsC,GAAG,KAAK,GAAG,KAAK,CAAC;AACnE,eAAO,MAAM,sCAAsC,KAAW,CAAC;AAE/D,wGAAwG;AACxG,MAAM,MAAM,sCAAsC,GAAG,KAAK,CACxD,sCAAsC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CACvD,CAAC;AACF,eAAO,MAAM,sCAAsC,EAEvC,CAAC,CAAC,MAAM,CAAC,sCAAsC,CAAC,CAAC;AAE7D,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,sBAAsB;IACtB,MAAM,EAAE,0BAA0B,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACnD,2BAA2B;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,iBAAiB,CAAC,EAAE,qCAAqC,CAAC;IAC1D,OAAO,EAAE,OAAO,CAAC;IACjB,2IAA2I;IAC3I,qBAAqB,CAAC,EAAE,mBAAmB,CAAC;IAC5C,qHAAqH;IACrH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,YAAY,CAAC,EAAE,gCAAgC,CAAC;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,wGAAwG;IACxG,cAAc,CAAC,EAAE,sCAAsC,CAAC;IACxD,gDAAgD;IAChD,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AACD,eAAO,MAAM,oBAAoB,EAmBpB,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;AAE5C,sBAAsB;AACtB,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,OAAO,CAAC;AAC9C,eAAO,MAAM,aAAa,KAAW,CAAC;AAEtC,oFAAoF;AACpF,MAAM,MAAM,wBAAwB,GAAG,iBAAiB,GAAG,kBAAkB,CAAC;AAC9E,eAAO,MAAM,wBAAwB,EACf,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAEzD,MAAM,MAAM,wCAAwC,GAAG,OAAO,CAAC;AAC/D,eAAO,MAAM,wCAAwC,KAAW,CAAC;AAEjE,MAAM,WAAW,kCAAkC;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,wCAAwC,CAAC;CACnD;AACD,eAAO,MAAM,kCAAkC,EAOlC,CAAC,CAAC,MAAM,CAAC,kCAAkC,CAAC,CAAC;AAE1D,oFAAoF;AACpF,MAAM,MAAM,mBAAmB,GAAG,iBAAiB,GAAG,kBAAkB,CAAC;AACzE,eAAO,MAAM,mBAAmB,EACV,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;AAEpD,MAAM,MAAM,yBAAyB,GAAG,KAAK,GAAG,KAAK,CAAC;AACtD,eAAO,MAAM,yBAAyB,KAAW,CAAC;AAElD,wGAAwG;AACxG,MAAM,MAAM,yBAAyB,GAAG,KAAK,CAAC,yBAAyB,CAAC,CAAC;AACzE,eAAO,MAAM,yBAAyB,EAE1B,CAAC,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;AAEhD,MAAM,WAAW,OAAO;IACtB,sBAAsB;IACtB,MAAM,EAAE,aAAa,CAAC;IACtB,2BAA2B;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;IAC7C,OAAO,EAAE,OAAO,CAAC;IACjB,2IAA2I;IAC3I,qBAAqB,CAAC,EAAE,mBAAmB,CAAC;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,sDAAsD;IACtD,KAAK,EAAE,MAAM,CAAC;IACd,yDAAyD;IACzD,QAAQ,EAAE,kCAAkC,CAAC;IAC7C,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,wGAAwG;IACxG,cAAc,CAAC,EAAE,yBAAyB,CAAC;IAC3C,gDAAgD;IAChD,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AACD,eAAO,MAAM,OAAO,EAgB4B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAElE,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,eAAO,MAAM,oBAAoB,EAapB,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;AAE5C,MAAM,WAAW,qBAAqB;CAAG;AACzC,eAAO,MAAM,qBAAqB,EAIrB,CAAC,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAE7C,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,eAAO,MAAM,iBAAiB,EAajB,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;AAEzC,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,MAAM,CAAC;CAChB;AACD,eAAO,MAAM,yBAAyB,EAYzB,CAAC,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;AAEjD,MAAM,MAAM,oCAAoC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;AACjE,eAAO,MAAM,oCAAoC,EAErC,CAAC,CAAC,MAAM,CAAC,oCAAoC,CAAC,CAAC;AAE3D,MAAM,WAAW,eAAe;IAC9B,iBAAiB,EAAE,oCAAoC,CAAC;CACzD;AACD,eAAO,MAAM,eAAe,EAMf,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;AAEvC,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AACD,eAAO,MAAM,qBAAqB,EAWrB,CAAC,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAE7C,sBAAsB;AACtB,MAAM,MAAM,mBAAmB,GAAG,OAAO,GAAG,OAAO,CAAC;AACpD,eAAO,MAAM,mBAAmB,KAAW,CAAC;AAE5C,oFAAoF;AACpF,MAAM,MAAM,8BAA8B,GACtC,iBAAiB,GACjB,kBAAkB,CAAC;AACvB,eAAO,MAAM,8BAA8B,EACrB,CAAC,CAAC,MAAM,CAAC,8BAA8B,CAAC,CAAC;AAE/D,oFAAoF;AACpF,MAAM,MAAM,yBAAyB,GAAG,iBAAiB,GAAG,kBAAkB,CAAC;AAC/E,eAAO,MAAM,yBAAyB,EAChB,CAAC,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;AAE1D,MAAM,MAAM,+BAA+B,GAAG,KAAK,GAAG,KAAK,CAAC;AAC5D,eAAO,MAAM,+BAA+B,KAAW,CAAC;AAExD,wGAAwG;AACxG,MAAM,MAAM,+BAA+B,GACzC,KAAK,CAAC,+BAA+B,CAAC,CAAC;AACzC,eAAO,MAAM,+BAA+B,EAEhC,CAAC,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAC;AAEtD,MAAM,WAAW,aAAa;IAC5B,sBAAsB;IACtB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,2BAA2B;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,iBAAiB,CAAC,EAAE,8BAA8B,CAAC;IACnD,OAAO,EAAE,OAAO,CAAC;IACjB,2IAA2I;IAC3I,qBAAqB,CAAC,EAAE,mBAAmB,CAAC;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,sDAAsD;IACtD,KAAK,EAAE,MAAM,CAAC;IACd,yDAAyD;IACzD,QAAQ,EAAE,kCAAkC,CAAC;IAC7C,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,YAAY,CAAC,EAAE,yBAAyB,CAAC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,wGAAwG;IACxG,cAAc,CAAC,EAAE,+BAA+B,CAAC;IACjD,gDAAgD;IAChD,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AACD,eAAO,MAAM,aAAa,EAgB4B,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;AAE9E,MAAM,MAAM,iCAAiC,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;AACrE,eAAO,MAAM,iCAAiC,EAElC,CAAC,CAAC,MAAM,CAAC,iCAAiC,CAAC,CAAC;AAExD,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,iCAAiC,CAAC;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AACD,eAAO,MAAM,yBAAyB,EAUzB,CAAC,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;AAEjD,sBAAsB;AACtB,MAAM,MAAM,0BAA0B,GAAG,OAAO,GAAG,OAAO,CAAC;AAC3D,eAAO,MAAM,0BAA0B,KAAW,CAAC;AAEnD,oFAAoF;AACpF,MAAM,MAAM,qCAAqC,GAC7C,iBAAiB,GACjB,kBAAkB,CAAC;AACvB,eAAO,MAAM,qCAAqC,EAC5B,CAAC,CAAC,MAAM,CAAC,qCAAqC,CAAC,CAAC;AAEtE,oFAAoF;AACpF,MAAM,MAAM,gCAAgC,GACxC,iBAAiB,GACjB,kBAAkB,CAAC;AACvB,eAAO,MAAM,gCAAgC,EACvB,CAAC,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAAC;AAEjE,MAAM,MAAM,sCAAsC,GAAG,KAAK,GAAG,KAAK,CAAC;AACnE,eAAO,MAAM,sCAAsC,KAAW,CAAC;AAE/D,wGAAwG;AACxG,MAAM,MAAM,sCAAsC,GAAG,KAAK,CACxD,sCAAsC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CACvD,CAAC;AACF,eAAO,MAAM,sCAAsC,EAEvC,CAAC,CAAC,MAAM,CAAC,sCAAsC,CAAC,CAAC;AAE7D,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,sBAAsB;IACtB,MAAM,EAAE,0BAA0B,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACnD,2BAA2B;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,iBAAiB,CAAC,EAAE,qCAAqC,CAAC;IAC1D,OAAO,EAAE,OAAO,CAAC;IACjB,2IAA2I;IAC3I,qBAAqB,CAAC,EAAE,mBAAmB,CAAC;IAC5C,qHAAqH;IACrH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,YAAY,CAAC,EAAE,gCAAgC,CAAC;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,wGAAwG;IACxG,cAAc,CAAC,EAAE,sCAAsC,CAAC;IACxD,gDAAgD;IAChD,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AACD,eAAO,MAAM,oBAAoB,EAwBpB,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;AAE5C,MAAM,MAAM,iDAAiD,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;AAC9E,eAAO,MAAM,iDAAiD,EAGhD,CAAC,CAAC,MAAM,CAAC,iDAAiD,CAAC,CAAC;AAE1E,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,iDAAiD,CAAC;CACtE;AACD,eAAO,MAAM,4BAA4B,EAa5B,CAAC,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAEpD,MAAM,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AACrD,oEAAoE;AACpE,eAAO,MAAM,aAAa,EAAE,GAAG,CAAC,eAAe,CAC7C,oBAAoB,EACpB,OAAO,EACP,kBAAkB,EAClB,qBAAqB,CAOpB,CAAC;AAEJ,MAAM,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AACrD,0EAA0E;AAC1E,eAAO,MAAM,aAAa,EAAE,GAAG,CAAC,eAAe,CAC7C,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,qBAAqB,CAOpB,CAAC;AAEJ,MAAM,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAClD,mBAAmB;AACnB,eAAO,MAAM,UAAU,EAAE,GAAG,CAAC,eAAe,CAC1C,iBAAiB,EACjB,OAAO,EACP,eAAe,EACf,qBAAqB,CAOpB,CAAC;AAEJ,MAAM,MAAM,uBAAuB,GAAG,mBAAmB,CAAC;AAC1D,4FAA4F;AAC5F,eAAO,MAAM,kBAAkB,EAAE,GAAG,CAAC,eAAe,CAClD,yBAAyB,EACzB,eAAe,EACf,uBAAuB,EACvB,qBAAqB,CAOpB,CAAC;AAEJ,MAAM,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AACtD,2JAA2J;AAC3J,eAAO,MAAM,cAAc,EAAE,GAAG,CAAC,eAAe,CAC9C,qBAAqB,EACrB,yBAAyB,EACzB,mBAAmB,EACnB,qBAAqB,CAOpB,CAAC;AAEJ,MAAM,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AACrD,0EAA0E;AAC1E,eAAO,MAAM,aAAa,EAAE,GAAG,CAAC,eAAe,CAC7C,oBAAoB,EACpB,OAAO,EACP,kBAAkB,EAClB,qBAAqB,CAOpB,CAAC;AAEJ,MAAM,MAAM,0BAA0B,GAAG,mBAAmB,CAAC;AAC7D,+EAA+E;AAC/E,eAAO,MAAM,qBAAqB,EAAE,GAAG,CAAC,eAAe,CACrD,4BAA4B,EAC5B,eAAe,EACf,0BAA0B,EAC1B,qBAAqB,CAOpB,CAAC"}