@inf-monkeys-tech/monkeys-cli 0.12.13 → 0.12.14

package/dist/identity-governance/client.d.ts

@@ -0,0 +1,217 @@
+import { z } from 'zod';
+import { type PaginationInput } from '../pagination/index.js';
+import type { HttpRequest } from '../transport/types.js';
+import { type IdentityOperation } from './definitions.js';
+import type { IdentityRuntime } from './runtime.js';
+export declare class IdentityClient {
+    readonly runtime: IdentityRuntime;
+    constructor(runtime: IdentityRuntime);
+    binding(key: IdentityOperation): {
+        adapter: string;
+        method: string;
+        operationId?: string;
+        pathTemplate: string;
+        schemaSource: 'builtin' | 'openapi';
+        operation: {
+            authSurfaces?: ("kernel" | "studio")[] | undefined;
+            deprecated?: boolean | undefined;
+            idempotency?: "idempotency-key" | "idempotent" | "non-idempotent" | "safe" | undefined;
+            longRunning?: boolean | undefined;
+            method: string;
+            operationId?: string | undefined;
+            parameters?: unknown;
+            pathTemplate: string;
+            published?: boolean | undefined;
+            requestBodyMode?: "none" | undefined;
+            requiredPermissions?: string[] | undefined;
+            resourcePolicyEnforced?: boolean | undefined;
+            requestBody?: unknown;
+            responses?: unknown;
+            risk?: "bounded-write" | "credential" | "destructive" | "privileged" | "read" | undefined;
+            stability?: "deprecated" | "experimental" | "legacy" | "stable" | undefined;
+            summary?: string | undefined;
+            tags: string[];
+        };
+    };
+    validateRequest(key: IdentityOperation, id?: string, body?: unknown): {
+        adapter: string;
+        method: string;
+        operationId?: string;
+        pathTemplate: string;
+        schemaSource: 'builtin' | 'openapi';
+        operation: {
+            authSurfaces?: ("kernel" | "studio")[] | undefined;
+            deprecated?: boolean | undefined;
+            idempotency?: "idempotency-key" | "idempotent" | "non-idempotent" | "safe" | undefined;
+            longRunning?: boolean | undefined;
+            method: string;
+            operationId?: string | undefined;
+            parameters?: unknown;
+            pathTemplate: string;
+            published?: boolean | undefined;
+            requestBodyMode?: "none" | undefined;
+            requiredPermissions?: string[] | undefined;
+            resourcePolicyEnforced?: boolean | undefined;
+            requestBody?: unknown;
+            responses?: unknown;
+            risk?: "bounded-write" | "credential" | "destructive" | "privileged" | "read" | undefined;
+            stability?: "deprecated" | "experimental" | "legacy" | "stable" | undefined;
+            summary?: string | undefined;
+            tags: string[];
+        };
+    };
+    call<T>(key: IdentityOperation, schema: z.ZodType<T>, input?: {
+        id?: string;
+        body?: unknown;
+        query?: HttpRequest['query'];
+    }): Promise<{
+        data: T;
+        requestId: string | undefined;
+    }>;
+    list<T extends {
+        id: string;
+    }>(key: IdentityOperation, item: z.ZodType<T>, input: PaginationInput, id?: string, filters?: Record<string, string>): Promise<{
+        items: T[];
+        pageInfo: import("../pagination/index.js").PageInfo;
+    }>;
+    users(input: PaginationInput, filters?: Record<string, string>): Promise<{
+        items: {
+            id: string;
+            name?: string | null | undefined;
+            email?: string | null | undefined;
+            nickname?: string | null | undefined;
+            departmentName?: string | null | undefined;
+            verified?: boolean | null | undefined;
+            isBlocked?: boolean | undefined;
+            blockStateVersion?: string | undefined;
+            blockReasons?: {
+                code: string;
+            }[] | undefined;
+            groups: {
+                id: string;
+                code: string;
+                name: string;
+            }[];
+            createdTimestamp?: string | number | undefined;
+            updatedTimestamp?: string | number | undefined;
+        }[];
+        pageInfo: import("../pagination/index.js").PageInfo;
+    }>;
+    groups(input: PaginationInput): Promise<{
+        items: {
+            id: string;
+            code: string;
+            name: string;
+            description?: string | null | undefined;
+            isSystem: boolean;
+            membershipEditable: boolean;
+            permissions: {
+                id: string;
+                code: string;
+                name: string;
+                resource: string;
+                action: string;
+                description?: string | null | undefined;
+                createdTimestamp?: string | number | undefined;
+                updatedTimestamp?: string | number | undefined;
+            }[];
+            createdTimestamp?: string | number | undefined;
+            updatedTimestamp?: string | number | undefined;
+        }[];
+        pageInfo: import("../pagination/index.js").PageInfo;
+    }>;
+    permissions(input: PaginationInput): Promise<{
+        items: {
+            id: string;
+            code: string;
+            name: string;
+            resource: string;
+            action: string;
+            description?: string | null | undefined;
+            createdTimestamp?: string | number | undefined;
+            updatedTimestamp?: string | number | undefined;
+        }[];
+        pageInfo: import("../pagination/index.js").PageInfo;
+    }>;
+    members(id: string, input: PaginationInput, keyword?: string): Promise<{
+        items: {
+            id: string;
+            name: string;
+            email: string;
+            source: "direct";
+        }[];
+        pageInfo: import("../pagination/index.js").PageInfo;
+    }>;
+    user(id: string): Promise<{
+        id: string;
+        name?: string | null | undefined;
+        email?: string | null | undefined;
+        nickname?: string | null | undefined;
+        departmentName?: string | null | undefined;
+        verified?: boolean | null | undefined;
+        isBlocked?: boolean | undefined;
+        blockStateVersion?: string | undefined;
+        blockReasons?: {
+            code: string;
+        }[] | undefined;
+        groups: {
+            id: string;
+            code: string;
+            name: string;
+        }[];
+        createdTimestamp?: string | number | undefined;
+        updatedTimestamp?: string | number | undefined;
+    }>;
+    group(id: string): Promise<{
+        id: string;
+        code: string;
+        name: string;
+        description?: string | null | undefined;
+        isSystem: boolean;
+        membershipEditable: boolean;
+        permissions: {
+            id: string;
+            code: string;
+            name: string;
+            resource: string;
+            action: string;
+            description?: string | null | undefined;
+            createdTimestamp?: string | number | undefined;
+            updatedTimestamp?: string | number | undefined;
+        }[];
+        createdTimestamp?: string | number | undefined;
+        updatedTimestamp?: string | number | undefined;
+    }>;
+    userGroups(id: string): Promise<{
+        userId: string;
+        direct: {
+            id: string;
+            code: string;
+            name: string;
+            protected: boolean;
+        }[];
+        mapped: {
+            id: string;
+            code: string;
+            name: string;
+            protected: boolean;
+        }[];
+    }>;
+    change(body: unknown): Promise<{
+        data: {
+            changed: number;
+            scope: {
+                kind: "group" | "user";
+                id: string;
+            };
+        };
+        requestId: string | undefined;
+    }>;
+}
+export declare function requireComplete<T>(page: {
+    items: T[];
+    pageInfo: {
+        hasMore: boolean;
+    };
+}): T[];
+//# sourceMappingURL=client.d.ts.map

package/dist/identity-governance/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/identity-governance/client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAA2C,KAAK,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEvG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAuB,KAAK,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAa/E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEpD,qBAAa,cAAc;IACb,QAAQ,CAAC,OAAO,EAAE,eAAe;IAA7C,YAAqB,OAAO,EAAE,eAAe,EAAI;IAEjD,OAAO,CAAC,GAAG,EAAE,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;MA8B7B;IAED,eAAe,CAAC,GAAG,EAAE,iBAAiB,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;MAiClE;IAEK,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,GAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAA;KAAO;;;OAmCpI;IAEK,IAAI,CAAC,CAAC,SAAS;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,EACjC,GAAG,EAAE,iBAAiB,EACtB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAClB,KAAK,EAAE,eAAe,EACtB,EAAE,CAAC,EAAE,MAAM,EACX,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM;;;OAsCrC;IAED,KAAK,CAAC,KAAK,EAAE,eAAe,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM;;;;;;;;;;;;;;;;;;;;;;OAEjE;IACD,MAAM,CAAC,KAAK,EAAE,eAAe;;;;;;;;;;;;;;;;;;;;;;OAE5B;IACD,WAAW,CAAC,KAAK,EAAE,eAAe;;;;;;;;;;;;OAEjC;IACD,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,CAAC,EAAE,MAAM;;;;;;;;OAE3D;IACK,IAAI,CAAC,EAAE,EAAE,MAAM;;;;;;;;;;;;;;;;;;;OAIpB;IACK,KAAK,CAAC,EAAE,EAAE,MAAM;;;;;;;;;;;;;;;;;;;OAIrB;IACK,UAAU,CAAC,EAAE,EAAE,MAAM;;;;;;;;;;;;;;OAK1B;IACD,MAAM,CAAC,IAAI,EAAE,OAAO;;;;;;;;;OAEnB;CACF;AAED,wBAAgB,eAAe,CAAC,CAAC,EAAE,IAAI,EAAE;IAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAAC,QAAQ,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAA;CAAE,GAAG,CAAC,EAAE,CAQ5F"}

package/dist/identity-governance/client.js

@@ -0,0 +1,185 @@
+import { Ajv } from 'ajv';
+import { resolveApiOperation } from '../api-operation/resolver.js';
+import { CliError, EXIT_CODES } from '../errors/cli-error.js';
+import { collectPaginated, paginationFingerprint } from '../pagination/index.js';
+import { bindSemanticPath, unwrapServerData } from '../semantic/runtime.js';
+import { IDENTITY_OPERATIONS } from './definitions.js';
+import { fail, groupSchema, idSchema, memberSchema, membershipResultSchema, pageSchema, parse, permissionSchema, userGroupsSchema, userSchema, } from './contracts.js';
+export class IdentityClient {
+    runtime;
+    constructor(runtime) {
+        this.runtime = runtime;
+    }
+    binding(key) {
+        const definition = IDENTITY_OPERATIONS[key];
+        if (!this.runtime.context.expectedSurfaces.includes('kernel') || this.runtime.context.team || !this.runtime.principalId)
+            fail('IDENTITY_KERNEL_CONTEXT_REQUIRED', 'An authenticated Kernel/global context is required.', EXIT_CODES.authorization);
+        const matches = this.runtime.index.operations.filter((op) => op.operationId === definition.id);
+        const operation = matches[0];
+        if (matches.length !== 1 ||
+            !operation ||
+            operation.method !== definition.method ||
+            operation.published !== true ||
+            operation.stability !== 'stable' ||
+            operation.authSurfaces?.join(',') !== 'kernel' ||
+            operation.risk !== definition.risk ||
+            [...(operation.requiredPermissions ?? [])].sort().join(',') !== [...definition.permissions].sort().join(',')) {
+            fail('IDENTITY_OPERATION_UNAVAILABLE', 'The deployment must publish the exact compatible Kernel identity-management operation. Refresh the contract after deployment.', EXIT_CODES.compatibility, { operationId: definition.id, requestState: 'not_sent' });
+        }
+        if (definition.method !== 'GET' && (!this.runtime.schemaFresh || !this.runtime.document || !this.runtime.digest))
+            fail('IDENTITY_FRESH_CONTRACT_REQUIRED', 'Identity writes require a fresh published API contract. Retry preflight with --refresh.', EXIT_CODES.compatibility);
+        return { ...resolveApiOperation(definition, this.runtime.index), operation };
+    }
+    validateRequest(key, id, body) {
+        const binding = this.binding(key);
+        if (id !== undefined)
+            parse(idSchema, id);
+        if (binding.method !== 'GET') {
+            if (binding.operation.requestBodyMode === 'none') {
+                if (body !== undefined)
+                    fail('IDENTITY_INPUT_INVALID', 'This operation does not accept a request body.');
+            }
+            else {
+                const request = binding.operation.requestBody;
+                const schema = request?.content?.['application/json']?.schema;
+                if (!schema || request?.required !== true)
+                    fail('IDENTITY_SCHEMA_MISSING', 'The published operation is missing its required JSON request schema.', EXIT_CODES.compatibility);
+                let validate;
+                try {
+                    validate = new Ajv({ strict: false, allErrors: true }).compile({
+                        ...schema,
+                        components: this.runtime.document?.components,
+                    });
+                }
+                catch (cause) {
+                    throw new CliError('The published request schema cannot be validated. Refresh after the deployment contract is corrected.', {
+                        cause,
+                        code: 'IDENTITY_SCHEMA_INCOMPATIBLE',
+                        exitCode: EXIT_CODES.compatibility,
+                        safeDetails: { operationId: binding.operationId, requestState: 'not_sent' },
+                    });
+                }
+                if (!validate(body))
+                    fail('IDENTITY_INPUT_INVALID', 'Input does not match the deployment request schema.', EXIT_CODES.validation, {
+                        issues: validate.errors?.map((error) => ({ keyword: error.keyword, path: error.instancePath })),
+                    });
+            }
+        }
+        return binding;
+    }
+    async call(key, schema, input = {}) {
+        const binding = this.validateRequest(key, input.id, input.body);
+        const path = bindSemanticPath(binding.pathTemplate, input.id === undefined ? {} : { id: input.id });
+        const write = binding.method !== 'GET';
+        let response;
+        try {
+            response = await this.runtime.client.request({
+                method: IDENTITY_OPERATIONS[key].method,
+                path,
+                ...(input.body === undefined ? {} : { body: input.body }),
+                ...(input.query ? { query: input.query } : {}),
+            });
+        }
+        catch (cause) {
+            if (!write || (cause instanceof CliError && /^HTTP_4\d\d$/.test(cause.code)))
+                throw cause;
+            throw new CliError('The write outcome is unknown. Do not replay it; inspect the exact target first.', {
+                cause,
+                code: 'IDENTITY_MUTATION_OUTCOME_UNKNOWN',
+                exitCode: EXIT_CODES.partial,
+                safeDetails: { operationId: binding.operationId, targetId: input.id, requestState: 'result_unknown' },
+            });
+        }
+        try {
+            const expectedStatus = key === 'create' ? 201 : key === 'delete' ? 204 : 200;
+            if (response.status !== expectedStatus)
+                fail('IDENTITY_RESPONSE_INCOMPATIBLE', 'Unexpected success status.', EXIT_CODES.compatibility);
+            return { data: parse(schema, unwrapServerData(response.data), true), requestId: response.requestId };
+        }
+        catch (cause) {
+            if (!write)
+                throw cause;
+            throw new CliError('The write was sent but its response cannot be verified. Do not replay it.', {
+                cause,
+                code: 'IDENTITY_MUTATION_OUTCOME_UNKNOWN',
+                exitCode: EXIT_CODES.partial,
+                safeDetails: { operationId: binding.operationId, targetId: input.id, requestId: response.requestId, requestState: 'sent' },
+            });
+        }
+    }
+    async list(key, item, input, id, filters = {}) {
+        const seen = new Set();
+        const tokens = new Set();
+        let total;
+        const result = await collectPaginated(input, paginationFingerprint({
+            operation: key,
+            context: this.runtime.context.fingerprint,
+            principal: this.runtime.principalId,
+            id,
+            filters,
+        }), async (cursor) => {
+            if (cursor) {
+                if (tokens.has(cursor))
+                    fail('IDENTITY_PAGINATION_INVALID', 'Repeated continuation token.', EXIT_CODES.compatibility);
+                tokens.add(cursor);
+            }
+            const { data } = await this.call(key, pageSchema(item), {
+                ...(id === undefined ? {} : { id }),
+                query: { ...filters, pageSize: input.pageSize, ...(cursor ? { pageToken: cursor } : {}) },
+            });
+            if (data.pageInfo.pageSize !== input.pageSize || (total !== undefined && data.pageInfo.total !== total))
+                fail('IDENTITY_PAGINATION_INVALID', 'Pagination count or total changed while reading.', EXIT_CODES.compatibility);
+            total ??= data.pageInfo.total;
+            for (const entry of data.items) {
+                if (seen.has(entry.id))
+                    fail('IDENTITY_PAGINATION_INVALID', 'Duplicate identity in paginated results.', EXIT_CODES.compatibility);
+                seen.add(entry.id);
+            }
+            if (data.pageInfo.nextPageToken && tokens.has(data.pageInfo.nextPageToken))
+                fail('IDENTITY_PAGINATION_INVALID', 'Repeated continuation token.', EXIT_CODES.compatibility);
+            return { items: data.items, nextCursor: data.pageInfo.nextPageToken, total: data.pageInfo.total };
+        });
+        if (input.pageAll && !input.pageToken && !result.pageInfo.hasMore && total !== undefined && result.items.length !== total)
+            fail('IDENTITY_PAGINATION_INVALID', 'The complete enumeration does not match its total.', EXIT_CODES.compatibility);
+        return result;
+    }
+    users(input, filters = {}) {
+        return this.list('users', userSchema, input, undefined, filters);
+    }
+    groups(input) {
+        return this.list('groups', groupSchema, input);
+    }
+    permissions(input) {
+        return this.list('permissions', permissionSchema, input);
+    }
+    members(id, input, keyword) {
+        return this.list('members', memberSchema, input, id, keyword ? { keyword } : {});
+    }
+    async user(id) {
+        const { data } = await this.call('user', userSchema, { id });
+        if (data.id !== id)
+            fail('IDENTITY_TARGET_MISMATCH', 'User response does not match the requested ID.', EXIT_CODES.compatibility);
+        return data;
+    }
+    async group(id) {
+        const { data } = await this.call('group', groupSchema, { id });
+        if (data.id !== id)
+            fail('IDENTITY_TARGET_MISMATCH', 'Group response does not match the requested ID.', EXIT_CODES.compatibility);
+        return data;
+    }
+    async userGroups(id) {
+        const { data } = await this.call('userGroups', userGroupsSchema, { id });
+        if (data.userId !== id)
+            fail('IDENTITY_TARGET_MISMATCH', 'Membership response does not match the requested user.', EXIT_CODES.compatibility);
+        return data;
+    }
+    change(body) {
+        return this.call('change', membershipResultSchema, { body });
+    }
+}
+export function requireComplete(page) {
+    if (page.pageInfo.hasMore)
+        fail('IDENTITY_ENUMERATION_INCOMPLETE', 'The page limit was reached before enumeration completed. Increase the bounded page limit and repeat preflight.', EXIT_CODES.validation);
+    return page.items;
+}
+//# sourceMappingURL=client.js.map

package/dist/identity-governance/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/identity-governance/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAkB,MAAM,KAAK,CAAC;AAE1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAwB,MAAM,wBAAwB,CAAC;AACvG,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE5E,OAAO,EAAE,mBAAmB,EAA0B,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EACL,IAAI,EACJ,WAAW,EACX,QAAQ,EACR,YAAY,EACZ,sBAAsB,EACtB,UAAU,EACV,KAAK,EACL,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,GACX,MAAM,gBAAgB,CAAC;AAGxB,MAAM,OAAO,cAAc;IACJ,OAAO;IAA5B,YAAqB,OAAwB;uBAAxB,OAAO;IAAoB,CAAC;IAEjD,OAAO,CAAC,GAAsB;QAC5B,MAAM,UAAU,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW;YACrH,IAAI,CAAC,kCAAkC,EAAE,qDAAqD,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;QAC5H,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,KAAK,UAAU,CAAC,EAAE,CAAC,CAAC;QAC/F,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7B,IACE,OAAO,CAAC,MAAM,KAAK,CAAC;YACpB,CAAC,SAAS;YACV,SAAS,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;YACtC,SAAS,CAAC,SAAS,KAAK,IAAI;YAC5B,SAAS,CAAC,SAAS,KAAK,QAAQ;YAChC,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,QAAQ;YAC9C,SAAS,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI;YAClC,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAC5G,CAAC;YACD,IAAI,CACF,gCAAgC,EAChC,+HAA+H,EAC/H,UAAU,CAAC,aAAa,EACxB,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,CACzD,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YAC9G,IAAI,CACF,kCAAkC,EAClC,yFAAyF,EACzF,UAAU,CAAC,aAAa,CACzB,CAAC;QACJ,OAAO,EAAE,GAAG,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;IAC/E,CAAC;IAED,eAAe,CAAC,GAAsB,EAAE,EAAW,EAAE,IAAc;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,EAAE,KAAK,SAAS;YAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC7B,IAAI,OAAO,CAAC,SAAS,CAAC,eAAe,KAAK,MAAM,EAAE,CAAC;gBACjD,IAAI,IAAI,KAAK,SAAS;oBAAE,IAAI,CAAC,wBAAwB,EAAE,gDAAgD,CAAC,CAAC;YAC3G,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,WAC0D,CAAC;gBAC7F,MAAM,MAAM,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;gBAC9D,IAAI,CAAC,MAAM,IAAI,OAAO,EAAE,QAAQ,KAAK,IAAI;oBACvC,IAAI,CAAC,yBAAyB,EAAE,sEAAsE,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;gBACpI,IAAI,QAAQ,CAAC;gBACb,IAAI,CAAC;oBACH,QAAQ,GAAG,IAAI,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;wBAC7D,GAAG,MAAM;wBACT,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU;qBACjC,CAAC,CAAC;gBAClB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,IAAI,QAAQ,CAAC,uGAAuG,EAAE;wBAC1H,KAAK;wBACL,IAAI,EAAE,8BAA8B;wBACpC,QAAQ,EAAE,UAAU,CAAC,aAAa;wBAClC,WAAW,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE;qBAC5E,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACjB,IAAI,CAAC,wBAAwB,EAAE,qDAAqD,EAAE,UAAU,CAAC,UAAU,EAAE;wBAC3G,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;qBAChG,CAAC,CAAC;YACP,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,IAAI,CAAI,GAAsB,EAAE,MAAoB,EAAE,KAAK,GAAkE,EAAE;QACnI,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACpG,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC;QACvC,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;gBAC3C,MAAM,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,MAAM;gBACvC,IAAI;gBACJ,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;gBACzD,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,YAAY,QAAQ,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC1F,MAAM,IAAI,QAAQ,CAAC,iFAAiF,EAAE;gBACpG,KAAK;gBACL,IAAI,EAAE,mCAAmC;gBACzC,QAAQ,EAAE,UAAU,CAAC,OAAO;gBAC5B,WAAW,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,YAAY,EAAE,gBAAgB,EAAE;aACtG,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAC7E,IAAI,QAAQ,CAAC,MAAM,KAAK,cAAc;gBACpC,IAAI,CAAC,gCAAgC,EAAE,4BAA4B,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;YACjG,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;QACvG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK;gBAAE,MAAM,KAAK,CAAC;YACxB,MAAM,IAAI,QAAQ,CAAC,2EAA2E,EAAE;gBAC9F,KAAK;gBACL,IAAI,EAAE,mCAAmC;gBACzC,QAAQ,EAAE,UAAU,CAAC,OAAO;gBAC5B,WAAW,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE;aAC3H,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CACR,GAAsB,EACtB,IAAkB,EAClB,KAAsB,EACtB,EAAW,EACX,OAAO,GAA2B,EAAE;QAEpC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,IAAI,KAAyB,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,KAAK,EACL,qBAAqB,CAAC;YACpB,SAAS,EAAE,GAAG;YACd,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW;YACzC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;YACnC,EAAE;YACF,OAAO;SACR,CAAC,EACF,KAAK,EAAE,MAAM,EAAE,EAAE;YACf,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;oBAAE,IAAI,CAAC,6BAA6B,EAAE,8BAA8B,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;gBACtH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACrB,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE;gBACtD,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;gBACnC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;aAC1F,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,KAAK,CAAC;gBACrG,IAAI,CAAC,6BAA6B,EAAE,kDAAkD,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;YACpH,KAAK,KAAK,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC9B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBAAE,IAAI,CAAC,6BAA6B,EAAE,0CAA0C,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;gBAClI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACrB,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;gBACxE,IAAI,CAAC,6BAA6B,EAAE,8BAA8B,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;YAChG,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACpG,CAAC,CACF,CAAC;QACF,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK;YACvH,IAAI,CAAC,6BAA6B,EAAE,oDAAoD,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;QACtH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,KAAsB,EAAE,OAAO,GAA2B,EAAE;QAChE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,CAAC,KAAsB;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;IACjD,CAAC;IACD,WAAW,CAAC,KAAsB;QAChC,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,gBAAgB,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,CAAC,EAAU,EAAE,KAAsB,EAAE,OAAgB;QAC1D,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAU;QACnB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7D,IAAI,IAAI,CAAC,EAAE,KAAK,EAAE;YAAE,IAAI,CAAC,0BAA0B,EAAE,gDAAgD,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;QACjI,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,EAAU;QACpB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,EAAE,KAAK,EAAE;YAAE,IAAI,CAAC,0BAA0B,EAAE,iDAAiD,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;QAClI,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,EAAU;QACzB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE;YACpB,IAAI,CAAC,0BAA0B,EAAE,wDAAwD,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;QACvH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,CAAC,IAAa;QAClB,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,sBAAsB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;CACF;AAED,MAAM,UAAU,eAAe,CAAI,IAAoD;IACrF,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO;QACvB,IAAI,CACF,iCAAiC,EACjC,gHAAgH,EAChH,UAAU,CAAC,UAAU,CACtB,CAAC;IACJ,OAAO,IAAI,CAAC,KAAK,CAAC;AACpB,CAAC"}

package/dist/identity-governance/contracts.d.ts

@@ -0,0 +1,142 @@
+import { z } from 'zod';
+import { type ExitCode } from '../errors/cli-error.js';
+export declare const MAX_MEMBERSHIP_TARGETS = 10000;
+export declare const idSchema: z.ZodString;
+export declare const groupRefSchema: z.ZodObject<{
+    id: z.ZodString;
+    code: z.ZodString;
+    name: z.ZodString;
+}, z.core.$strip>;
+export declare const membershipGroupSchema: z.ZodObject<{
+    id: z.ZodString;
+    code: z.ZodString;
+    name: z.ZodString;
+    protected: z.ZodBoolean;
+}, z.core.$strip>;
+export declare const permissionSchema: z.ZodObject<{
+    id: z.ZodString;
+    code: z.ZodString;
+    name: z.ZodString;
+    resource: z.ZodString;
+    action: z.ZodString;
+    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    createdTimestamp: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+    updatedTimestamp: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+}, z.core.$strip>;
+export declare const groupSchema: z.ZodObject<{
+    id: z.ZodString;
+    code: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    isSystem: z.ZodBoolean;
+    membershipEditable: z.ZodBoolean;
+    permissions: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        code: z.ZodString;
+        name: z.ZodString;
+        resource: z.ZodString;
+        action: z.ZodString;
+        description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        createdTimestamp: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+        updatedTimestamp: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+    }, z.core.$strip>>;
+    createdTimestamp: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+    updatedTimestamp: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+}, z.core.$strip>;
+export declare const userSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    email: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    nickname: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    departmentName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    verified: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+    isBlocked: z.ZodOptional<z.ZodBoolean>;
+    blockStateVersion: z.ZodOptional<z.ZodString>;
+    blockReasons: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        code: z.ZodString;
+    }, z.core.$strip>>>;
+    groups: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        code: z.ZodString;
+        name: z.ZodString;
+    }, z.core.$strip>>;
+    createdTimestamp: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+    updatedTimestamp: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+}, z.core.$strip>;
+export declare const userGroupsSchema: z.ZodObject<{
+    userId: z.ZodString;
+    direct: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        code: z.ZodString;
+        name: z.ZodString;
+        protected: z.ZodBoolean;
+    }, z.core.$strip>>;
+    mapped: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        code: z.ZodString;
+        name: z.ZodString;
+        protected: z.ZodBoolean;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const memberSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    email: z.ZodString;
+    source: z.ZodLiteral<"direct">;
+}, z.core.$strip>;
+export declare const scopeSchema: z.ZodObject<{
+    kind: z.ZodEnum<{
+        group: "group";
+        user: "user";
+    }>;
+    id: z.ZodString;
+}, z.core.$strict>;
+export declare const changeSchema: z.ZodObject<{
+    userId: z.ZodString;
+    groupId: z.ZodString;
+    action: z.ZodEnum<{
+        add: "add";
+        remove: "remove";
+    }>;
+}, z.core.$strict>;
+export declare const membershipResultSchema: z.ZodObject<{
+    changed: z.ZodNumber;
+    scope: z.ZodObject<{
+        kind: z.ZodEnum<{
+            group: "group";
+            user: "user";
+        }>;
+        id: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strip>;
+export declare const groupCreateSchema: z.ZodObject<{
+    code: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const groupUpdateSchema: z.ZodObject<{
+    code: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+}, z.core.$strict>;
+export declare const permissionSetSchema: z.ZodObject<{
+    permissionIds: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export type Group = z.infer<typeof groupSchema>;
+export type UserGroups = z.infer<typeof userGroupsSchema>;
+export type MembershipScope = z.infer<typeof scopeSchema>;
+export type MembershipChange = z.infer<typeof changeSchema>;
+export declare function fail(code: string, message: string, exitCode?: ExitCode, safeDetails?: unknown): never;
+export declare function parse<T>(schema: z.ZodType<T>, value: unknown, response?: boolean): T;
+export declare function pageSchema<T>(item: z.ZodType<T>): z.ZodObject<{
+    items: z.ZodArray<z.ZodType<T, unknown, z.core.$ZodTypeInternals<T, unknown>>>;
+    pageInfo: z.ZodObject<{
+        hasMore: z.ZodBoolean;
+        nextPageToken: z.ZodOptional<z.ZodString>;
+        pageSize: z.ZodNumber;
+        returned: z.ZodNumber;
+        total: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export declare function requireCustomGroup(group: Group): void;
+//# sourceMappingURL=contracts.d.ts.map

package/dist/identity-governance/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../src/identity-governance/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAwB,KAAK,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAE7E,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAC7C,eAAO,MAAM,QAAQ,aAMmB,CAAC;AAIzC,eAAO,MAAM,cAAc;;;;iBAAqD,CAAC;AACjF,eAAO,MAAM,qBAAqB;;;;;iBAAoD,CAAC;AACvF,eAAO,MAAM,gBAAgB;;;;;;;;;iBAS3B,CAAC;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;iBAOtB,CAAC;AACH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;iBAarB,CAAC;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;iBAI3B,CAAC;AACH,eAAO,MAAM,YAAY;;;;;iBAAmF,CAAC;AAC7G,eAAO,MAAM,WAAW;;;;;;kBAAuE,CAAC;AAChG,eAAO,MAAM,YAAY;;;;;;;kBAAgG,CAAC;AAC1H,eAAO,MAAM,sBAAsB;;;;;;;;;iBAA8E,CAAC;AAClH,eAAO,MAAM,iBAAiB;;;;kBAUnB,CAAC;AACZ,eAAO,MAAM,iBAAiB;;;;kBAEqD,CAAC;AACpF,eAAO,MAAM,mBAAmB;;kBAAsF,CAAC;AACvH,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAChD,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAC1D,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAE5D,wBAAgB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,GAAE,QAAgC,EAAE,WAAW,CAAC,EAAE,OAAO,GAAG,KAAK,CAE5H;AAED,wBAAgB,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,UAAQ,GAAG,CAAC,CAYlF;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;;;;;;;;;kBAqB/C;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAKrD"}