@intutic/clawde 2.2.0 → 2.4.0

package/dist/control-plane.d.ts

@@ -1,6 +1,6 @@
-import type { ControlPlaneClientOptions, WhoamiResult, OrgSignupParams, OrgSignupResult, StartDomainVerificationResult, CheckDomainVerificationResult, CreateOrgParams, CreateOrgResult, Team, Workspace, GatewayRegisterParams, GatewayRegisterResult, Gateway, GatewayRotateResult, GatewayStatus, GatewayConfigUpdate, GatewayConfigResult, GatewayResolution, ProviderCredentialStatus } from './types';
+import type { ControlPlaneClientOptions, WhoamiResult, OrgSignupParams, OrgSignupResult, StartDomainVerificationResult, CheckDomainVerificationResult, CreateOrgParams, CreateOrgResult, Team, Workspace, GatewayRegisterParams, GatewayRegisterResult, Gateway, GatewayRotateResult, GatewayStatus, GatewayConfigUpdate, GatewayConfigResult, GatewayResolution, ProviderCredentialStatus, ProviderModelList, WorkspaceSettings, WorkspaceSettingsUpdateResult, McpServerList, McpServerDecision, NotificationRule, NotificationRuleInput, NotificationRuleUpdate, NotificationSecretRotation, SiemDestination, SiemDestinationList, SiemSources, SiemDestinationInput, SiemDestinationUpdate, SiemSecretRotation, UsageOptions, MemberUsageResponse, TeamUsageResponse, BranchUsageResponse, CommitUsageResponse, PullRequestUsageResponse, PullRequestRefreshResult, InventorySummary, InventoryDevice, InventoryHarness, InventoryMcpServer, InventorySkill, DeviceDisconnect, InventoryFilters, InventorySkillFilters, CoverageFormat, FrameworkCoverage, EvidenceCollectOptions, EvidenceCollectResult, SigningJwks, GateLiveness, GitHubWebhookInfo, GitHubWebhookSecret, PolicySource, PolicySourceInput, PolicySourceSyncResult, PolicyDocumentSummary, PolicyDocumentDetail, ExtractDocumentResult, ExtractOptions, TokenCoverage, PassageSearchResult, GuardrailImpactSeed, LedgerImpact, DuplicatesOptions, LedgerDuplicates, GuardrailFilters, GuardrailSummary, GuardrailDetail, GuardrailReadiness, GuardrailTransitionResult, PromoteOptions, AuthoredGuardrailInput, AuthoredGuardrailUpdate, AuthoredGuardrailWriteResult, GuardrailDeleteResult, GuardrailReplay, GuardrailConflict, ReviewOptions, DecisionReviewResult, LoopRun, StartLoopRunOptions, CompleteLoopRunOptions, LoopRunReviewOptions, LoopRunActionResult, Finding, FindingFilters, FindingOutcome, AdjudicateOptions, FindingAdjudication, FindingStats, ResponseEchoReportOptions, ResponseEchoReport, TraceFilters, TraceList, IncidentFilters, Incident, IncidentList, TraceDetail, IntegrityRootList, IntegrityRootDetail, IntegrityRecompute, IntegrityChain, ConfigChain, CompliancePolicy, PolicyChangeResult, RuleCandidateSource, BundleUploadOptions, BundleUploadResult, WasmReplayOptions, WasmReplayResult, SopSummary, SopDetail, SopInput, SopCreateResult, OrgSop, OrgSopInput, AttenuateOptions, AttenuationResult, AttenuationChainLink, PredictCostParams, CostPrediction, MirrorAdoptionReport } from './types';
 /**
- * Control-plane management client (LLD #69) — org/team/gateway/credentials
+ * Control-plane management client — org/team/gateway/credentials
  * administration, as distinct from `ClawdeClient`'s data-plane chat calls.
  *
  * Deliberately a separate class, not new methods on `ClawdeClient`:
@@ -10,14 +10,25 @@ import type { ControlPlaneClientOptions, WhoamiResult, OrgSignupParams, OrgSignu
  * management calls onto `ClawdeClient` would silently need a second base URL
  * on a class whose whole contract today is "one client, one proxy."
  *
- * Every endpoint here is mirrored 1:1 from `tools/cli/src/commands/{org,
- * team,gateway,credentials,whoami}.ts` — the CLI's own already-tested
- * contracts, not re-derived. Endpoints deliberately NOT included: session
- * establishment (`login`/`logout` — an SDK caller supplies `apiKey`
- * directly), and local-environment/terminal concerns (`init`, `doctor`,
- * `install-daemon`, `integrity`, `rollback`, `connect`, `exec`, `start`,
- * `syncContext`, `skill`) that have no meaning for a library embedded in
- * someone else's process.
+ * Every endpoint here comes from the control-plane calls in
+ * `tools/cli/src/commands/*` — the CLI's own already-tested contracts, not
+ * re-derived — and the Python SDK's `control_plane.py` has the same methods
+ * in snake_case. `packages/shared-types/fixtures/control-plane-operations.json`
+ * lists every method with the request it makes and the answer it returns, and
+ * both SDKs' tests run against it, so neither can grow a method the other
+ * lacks. Method names follow one pattern for whatever is added next: a verb
+ * (`list`, `get`, `create`, `update`, `delete`, `rotate…Secret`, `download`,
+ * or the CLI subcommand's own verb, such as `approve` or `promote`), then the
+ * resource.
+ *
+ * Not included: session establishment (`login`/`logout`; an SDK caller
+ * supplies `apiKey` directly, and `ClawdeClient` registers its own session),
+ * the CLI's workspace budget (`ClawdeClient.checkBudget()`), and commands
+ * that act on the machine they run on: `init`, `setup`, `doctor`,
+ * `install-daemon`, `connect`, `disconnect`, `exec`, `start`, `syncContext`,
+ * `rollback`, `enforce`, `rules`, `judge`, `skill` (its loop commands are
+ * here), `sops status`, `guardrails pull`, and `policy
+ * compile|install|snapshot|list-local`.
  *
  * Works unmodified against a self-hosted control plane — there is no
  * SaaS-vs-self-hosted branch anywhere in this file. An open-core user who
@@ -29,15 +40,23 @@ import type { ControlPlaneClientOptions, WhoamiResult, OrgSignupParams, OrgSignu
  *
  * Auth: the same `apiKey` type `ClawdeClient` accepts — a `vk_` token or a
  * JWT both satisfy `services/control-plane/src/middleware/auth.ts`, which
- * resolves either to an `AuthContext` with a role; endpoints gated
- * `requireRole('OWNER','ADMIN')` server-side reject an under-privileged
- * token exactly as they would for the CLI using the same token.
+ * resolves either to an `AuthContext` with a role. A call the role may not
+ * make throws `ClawdeConnectionError` with the control plane's answer; for a
+ * 403 that names the roles allowed (`detail`), the message is that sentence,
+ * as the CLI prints it.
  */
 export declare class ControlPlaneClient {
     private apiKey;
     private baseUrl;
     constructor(options: ControlPlaneClientOptions);
+    private send;
+    /**
+     * A JSON call. `answers` lists the error statuses whose body is the answer
+     * rather than a failure: the integrity chain walk answers a break with 409.
+     */
     private request;
+    /** A file download: the body as bytes. Its errors are JSON, as every other call's. */
+    private download;
     /** GET /api/v1/auth/me */
     whoami(): Promise<WhoamiResult>;
     /**
@@ -91,6 +110,8 @@ export declare class ControlPlaneClient {
     rotateGatewayToken(gatewayId: string): Promise<GatewayRotateResult>;
     /** DELETE /api/v1/gateways/:id */
     revokeGateway(gatewayId: string, reason?: string): Promise<void>;
+    /** GET /api/v1/gateways/:id/config — the flags set on the gateway and their version, as the gateway pulls them. */
+    getGatewayConfig(gatewayId: string): Promise<GatewayConfigResult>;
     /** PATCH /api/v1/gateways/:id/config */
     setGatewayConfig(gatewayId: string, config: GatewayConfigUpdate): Promise<GatewayConfigResult>;
     /** PATCH /api/v1/workspace/gateway — pass null to clear the override. */
@@ -103,11 +124,291 @@ export declare class ControlPlaneClient {
     }>;
     /** GET /api/v1/workspace/gateway-resolution */
     resolveGateway(): Promise<GatewayResolution>;
+    /** GET /api/v1/workspace/settings — every setting, resolved with its default. */
+    getWorkspaceSettings(): Promise<WorkspaceSettings>;
+    /**
+     * PUT /api/v1/workspace/settings — the route `intutic settings set` calls.
+     *
+     * Only the keys given change; the rest are kept (`featureFlags` merges one
+     * level deeper, so one flag does not switch the others off). The control
+     * plane is the authority on which keys exist and what each accepts: an
+     * unknown key or a bad value is refused with a 400 naming it, a setting the
+     * workspace's plan does not include (the group policy below Biz Org) with a
+     * 403 "Upgrade required", and a member below OWNER or ADMIN with a 403. Each
+     * refusal throws `ClawdeConnectionError` carrying the server's answer.
+     */
+    updateWorkspaceSettings(settings: Record<string, unknown>): Promise<WorkspaceSettingsUpdateResult>;
     /** GET /api/v1/workspace/provider-credentials */
     listProviderCredentials(): Promise<ProviderCredentialStatus[]>;
     /** PUT /api/v1/workspace/provider-credentials/:provider */
     setProviderCredential(provider: string, fields: Record<string, string>): Promise<ProviderCredentialStatus>;
     /** DELETE /api/v1/workspace/provider-credentials/:provider */
     unsetProviderCredential(provider: string): Promise<void>;
+    /** GET /api/v1/workspace/provider-credentials/:provider/models */
+    listProviderModels(provider: string): Promise<ProviderModelList>;
+    /** GET /api/v1/mcp/servers — every server the workspace's MCP proxies have reported, and the registry-wide policy. */
+    listMcpServers(): Promise<McpServerList>;
+    /** POST /api/v1/mcp/servers/:serverId/status — approve a server (OWNER, ADMIN). */
+    approveMcpServer(serverId: string): Promise<McpServerDecision>;
+    /** POST /api/v1/mcp/servers/:serverId/status — block a server (OWNER, ADMIN). */
+    blockMcpServer(serverId: string): Promise<McpServerDecision>;
+    /** POST /api/v1/mcp/servers/:serverId/status — return a server to the approval queue (OWNER, ADMIN). */
+    resetMcpServer(serverId: string): Promise<McpServerDecision>;
+    /** POST /api/v1/mcp/servers/:serverId/tools — switch one tool on (OWNER, ADMIN). */
+    enableMcpTool(serverId: string, tool: string): Promise<McpServerDecision>;
+    /** POST /api/v1/mcp/servers/:serverId/tools — switch one tool off (OWNER, ADMIN). */
+    disableMcpTool(serverId: string, tool: string): Promise<McpServerDecision>;
+    private setMcpServerStatus;
+    /** GET /api/v1/notifications/rules */
+    listNotificationRules(): Promise<NotificationRule[]>;
+    /**
+     * POST /api/v1/notifications/rules. A webhook rule comes back with its
+     * `signingSecret`, which is not shown again.
+     */
+    createNotificationRule(rule: NotificationRuleInput): Promise<NotificationRule>;
+    /**
+     * PUT /api/v1/notifications/rules/:ruleId — only the fields given change.
+     * A switch to the webhook channel comes back with the new `signingSecret`.
+     */
+    updateNotificationRule(ruleId: string, changes: NotificationRuleUpdate): Promise<NotificationRule>;
+    /** DELETE /api/v1/notifications/rules/:ruleId */
+    deleteNotificationRule(ruleId: string): Promise<void>;
+    /** POST /api/v1/notifications/rules/:ruleId/signing-secret — deliveries are signed with the new secret from now on. */
+    rotateNotificationRuleSecret(ruleId: string): Promise<NotificationSecretRotation>;
+    /** GET /api/v1/siem/destinations — the destinations and the event sources they can receive. */
+    listSiemDestinations(): Promise<SiemDestinationList>;
+    /** GET /api/v1/siem/destinations/:destinationId */
+    getSiemDestination(destinationId: string): Promise<SiemDestination>;
+    /** The event sources a destination can receive; `defaults` are the ones an empty `sourceTables` means. */
+    listSiemSources(): Promise<SiemSources>;
+    /**
+     * POST /api/v1/siem/destinations (OWNER, ADMIN). The control plane refuses
+     * a destination that points at an internal address. A webhook destination
+     * comes back with its `signingSecret`, which is not shown again.
+     */
+    createSiemDestination(destination: SiemDestinationInput): Promise<SiemDestination>;
+    /** PUT /api/v1/siem/destinations/:destinationId (OWNER, ADMIN) — only the fields given change. */
+    updateSiemDestination(destinationId: string, changes: SiemDestinationUpdate): Promise<SiemDestination>;
+    /** DELETE /api/v1/siem/destinations/:destinationId (OWNER, ADMIN) — deactivates it; `updateSiemDestination(id, { isActive: true })` turns it back on. */
+    deleteSiemDestination(destinationId: string): Promise<void>;
+    /** POST /api/v1/siem/destinations/:destinationId/signing-secret (OWNER, ADMIN) */
+    rotateSiemDestinationSecret(destinationId: string): Promise<SiemSecretRotation>;
+    /** GET /api/v1/usage/members */
+    getMemberUsage(options?: UsageOptions): Promise<MemberUsageResponse>;
+    /** GET /api/v1/usage/teams — per SCIM group. */
+    getTeamUsage(options?: UsageOptions): Promise<TeamUsageResponse>;
+    /** GET /api/v1/usage/branches */
+    getBranchUsage(options?: UsageOptions): Promise<BranchUsageResponse>;
+    /** GET /api/v1/usage/commits */
+    getCommitUsage(options?: UsageOptions): Promise<CommitUsageResponse>;
+    /** GET /api/v1/usage/pull-requests */
+    getPullRequestUsage(options?: UsageOptions): Promise<PullRequestUsageResponse>;
+    /** POST /api/v1/usage/pull-requests/refresh — look the branches up on GitHub now (OWNER, ADMIN, EM). */
+    refreshPullRequestUsage(): Promise<PullRequestRefreshResult>;
+    /** GET /api/v1/inventory/summary */
+    getInventorySummary(): Promise<InventorySummary>;
+    /** GET /api/v1/inventory/devices — one row per machine. */
+    listInventoryDevices(): Promise<InventoryDevice[]>;
+    /** GET /api/v1/inventory/harnesses */
+    listInventoryHarnesses(filters?: InventoryFilters): Promise<InventoryHarness[]>;
+    /** GET /api/v1/inventory/mcp-servers */
+    listInventoryMcpServers(filters?: InventoryFilters): Promise<InventoryMcpServer[]>;
+    /** GET /api/v1/inventory/skills */
+    listInventorySkills(filters?: InventorySkillFilters): Promise<InventorySkill[]>;
+    /** GET /api/v1/inventory/disconnects — machines that ran `intutic disconnect`, newest first (default 100, at most 500). */
+    listInventoryDisconnects(options?: {
+        limit?: number;
+    }): Promise<DeviceDisconnect[]>;
+    /** GET /api/v1/inventory/harnesses?format=csv — the CSV the dashboard downloads. */
+    downloadInventoryHarnessesCsv(filters?: InventoryFilters): Promise<Uint8Array>;
+    /** GET /api/v1/inventory/mcp-servers?format=csv */
+    downloadInventoryMcpServersCsv(filters?: InventoryFilters): Promise<Uint8Array>;
+    private listData;
+    /** GET /api/v1/compliance/frameworks/:frameworkId/coverage — `eu_ai_act`, `iso_42001`, `nist_ai_rmf` or `mitre_atlas`. */
+    getFrameworkCoverage(frameworkId: string): Promise<FrameworkCoverage>;
+    /**
+     * GET /api/v1/compliance/frameworks/:frameworkId/coverage?format= — the
+     * report as a file. Unsigned: the signed copies are the ones sealed in the
+     * evidence archive.
+     */
+    downloadFrameworkCoverage(frameworkId: string, format: CoverageFormat): Promise<Uint8Array>;
+    /** POST /api/v1/compliance/soc2-collect (OWNER, ADMIN) — run a fresh evidence collection and seal it. */
+    collectEvidence(options?: EvidenceCollectOptions): Promise<EvidenceCollectResult>;
+    /** GET /api/v1/compliance/soc2-export/:runId (OWNER, ADMIN) — a stored archive, as the file. Check it with `verifyEvidenceArchive`. */
+    downloadEvidence(runId: string): Promise<Uint8Array>;
+    /**
+     * GET /.well-known/intutic-trace-signing.json — the published signing keys,
+     * fetched without credentials. `verifyEvidenceArchive` takes them.
+     */
+    getSigningKeys(): Promise<SigningJwks>;
+    /** GET /api/v1/governance/gate-liveness (OWNER, ADMIN, EM) — whether each installed harness's gate is reporting. */
+    getGateLiveness(): Promise<GateLiveness>;
+    /** GET /api/v1/integrations/github/webhook (OWNER, ADMIN) — the payload URL; never the secret. */
+    getGithubWebhook(): Promise<GitHubWebhookInfo>;
+    /**
+     * POST /api/v1/integrations/github/webhook/secret (OWNER, ADMIN) — make the
+     * webhook, or replace its secret. Deliveries signed with an earlier secret
+     * are refused from then on.
+     */
+    rotateGithubWebhookSecret(): Promise<GitHubWebhookSecret>;
+    /** GET /api/v1/connectors — the workspace's policy sources (Notion, Confluence, GitHub, Google Drive). */
+    listPolicySources(): Promise<PolicySource[]>;
+    /** POST /api/v1/connectors */
+    addPolicySource(source: PolicySourceInput): Promise<PolicySource>;
+    /** POST /api/v1/connectors/:connectorId/sync */
+    syncPolicySource(connectorId: string): Promise<PolicySourceSyncResult>;
+    /** GET /api/v1/policy-guardrails/documents */
+    listPolicyDocuments(): Promise<PolicyDocumentSummary[]>;
+    /** GET /api/v1/policy-guardrails/documents/:docId — passages, clauses and extraction runs. */
+    getPolicyDocument(docId: string): Promise<PolicyDocumentDetail>;
+    /** POST /api/v1/policy-guardrails/documents/:docId/extract — propose guardrails from the document's clauses. */
+    extractPolicyDocument(docId: string, options?: ExtractOptions): Promise<ExtractDocumentResult>;
+    /** GET /api/v1/policy-guardrails/coverage?token= — the passages that mention a tool or action, and the guardrails on them. */
+    getGuardrailCoverage(token: string): Promise<TokenCoverage>;
+    /** GET /api/v1/policy-guardrails/search?q= — full-text search over live passages, best match first. */
+    searchPolicyPassages(text: string): Promise<PassageSearchResult>;
+    /** GET /api/v1/policy-guardrails/impact — what a change to a document or a passage reaches. Name one of them. */
+    getGuardrailImpact(seed: GuardrailImpactSeed): Promise<LedgerImpact>;
+    /** GET /api/v1/policy-guardrails/duplicates — overlapping passages and rules cited more than once. */
+    listGuardrailDuplicates(options?: DuplicatesOptions): Promise<LedgerDuplicates>;
+    /** GET /api/v1/policy-guardrails/guardrails */
+    listGuardrails(filters?: GuardrailFilters): Promise<GuardrailSummary[]>;
+    /** GET /api/v1/policy-guardrails/guardrails/:guardrailId */
+    getGuardrail(guardrailId: string): Promise<GuardrailDetail>;
+    /** GET /api/v1/policy-guardrails/guardrails/:guardrailId/readiness — whether a SHADOW guardrail's evidence clears promotion. */
+    getGuardrailReadiness(guardrailId: string): Promise<GuardrailReadiness>;
+    /** POST …/guardrails/:guardrailId/approve-shadow — into SHADOW: distributed as warn, measuring, enforcing nothing. */
+    approveGuardrailShadow(guardrailId: string): Promise<GuardrailTransitionResult>;
+    /**
+     * POST …/guardrails/:guardrailId/promote — into ENFORCING. Refused with a
+     * 409 until the shadow evidence clears the thresholds; a guardrail that
+     * never fired needs `acknowledgeNoTraffic`.
+     */
+    promoteGuardrail(guardrailId: string, options?: PromoteOptions): Promise<GuardrailTransitionResult>;
+    /** POST …/guardrails/:guardrailId/reject — recorded with the reason. */
+    rejectGuardrail(guardrailId: string, reason: string): Promise<GuardrailTransitionResult>;
+    /** POST …/guardrails/:guardrailId/retire — gone from every rule endpoint on the next poll. */
+    retireGuardrail(guardrailId: string): Promise<GuardrailTransitionResult>;
+    /** POST …/guardrails/:guardrailId/reconfirm — re-confirm a stale citation against a live passage. */
+    reconfirmGuardrail(guardrailId: string): Promise<GuardrailTransitionResult>;
+    /**
+     * POST /api/v1/policy-guardrails/guardrails (OWNER, ADMIN) — an authored
+     * guardrail, created PROPOSED. An IR a check refuses is a 400 naming the
+     * check.
+     */
+    createGuardrail(guardrail: AuthoredGuardrailInput): Promise<AuthoredGuardrailWriteResult>;
+    /**
+     * PUT /api/v1/policy-guardrails/guardrails/:guardrailId (OWNER, ADMIN). A
+     * changed IR creates the next version (`forked`), PROPOSED with no
+     * evidence; a name or description edit keeps the evidence.
+     */
+    updateGuardrail(guardrailId: string, changes: AuthoredGuardrailUpdate): Promise<AuthoredGuardrailWriteResult>;
+    /** DELETE /api/v1/policy-guardrails/guardrails/:guardrailId (OWNER, ADMIN) — retires it; its history is kept. */
+    deleteGuardrail(guardrailId: string): Promise<GuardrailDeleteResult>;
+    /** POST …/guardrails/:guardrailId/replay — what the guardrail would have done on captured traffic. */
+    replayGuardrail(guardrailId: string): Promise<GuardrailReplay>;
+    /** GET /api/v1/policy-guardrails/conflicts — live guardrails and front-matter rules that contradict each other. */
+    listGuardrailConflicts(): Promise<GuardrailConflict[]>;
+    private transitionGuardrail;
+    /** POST /api/v1/decisions/:holdId/review (OWNER, ADMIN, EM) — approve a held call. */
+    approveDecision(holdId: string, options?: ReviewOptions): Promise<DecisionReviewResult>;
+    /** POST /api/v1/decisions/:holdId/review (OWNER, ADMIN, EM) — reject a held call. */
+    rejectDecision(holdId: string, options?: ReviewOptions): Promise<DecisionReviewResult>;
+    /**
+     * POST /api/v1/loops/start — register a loop run. Send its id with the run's
+     * requests (`INTUTIC_LOOP_RUN_ID`, as `intutic loop exec` sets it) so the
+     * proxy files them under it.
+     */
+    startLoopRun(name: string, options?: StartLoopRunOptions): Promise<LoopRun>;
+    /** GET /api/v1/loops/:loopRunId */
+    getLoopRun(loopRunId: string): Promise<LoopRun>;
+    /** GET /api/v1/loops */
+    listLoopRuns(): Promise<LoopRun[]>;
+    /** POST /api/v1/loops/:loopRunId/complete — `outcome` records how the run ended. */
+    completeLoopRun(loopRunId: string, options?: CompleteLoopRunOptions): Promise<LoopRunActionResult>;
+    /** POST /api/v1/loops/:loopRunId/kill */
+    killLoopRun(loopRunId: string): Promise<LoopRunActionResult>;
+    /** POST /api/v1/loops/:loopRunId/review (OWNER, ADMIN, EM) — approve a run held for review; it is ACTIVE again. */
+    approveLoopRun(loopRunId: string, options?: LoopRunReviewOptions): Promise<LoopRunActionResult>;
+    /** POST /api/v1/loops/:loopRunId/review (OWNER, ADMIN, EM) — reject a run held for review; it is KILLED. */
+    rejectLoopRun(loopRunId: string, options?: LoopRunReviewOptions): Promise<LoopRunActionResult>;
+    /** GET /api/v1/findings — detector findings, newest first. */
+    listFindings(filters?: FindingFilters): Promise<Finding[]>;
+    /** POST /api/v1/findings/:findingId/adjudicate — the ruling is recorded under the key's member. */
+    adjudicateFinding(findingId: string, outcome: FindingOutcome, options?: AdjudicateOptions): Promise<FindingAdjudication>;
+    /** GET /api/v1/findings/stats — false-positive rate per detector, over adjudicated findings. */
+    getFindingStats(): Promise<FindingStats>;
+    /** GET /api/v1/findings/response-echo/report */
+    getResponseEchoReport(options?: ResponseEchoReportOptions): Promise<ResponseEchoReport>;
+    /** GET /api/v1/incidents — ranked by review priority; filter by status, severity and type. */
+    listIncidents(filters?: IncidentFilters): Promise<IncidentList>;
+    /** GET /api/v1/incidents/:incidentId */
+    getIncident(incidentId: string): Promise<Incident>;
+    /** GET /api/v1/traces — newest first. */
+    listTraces(filters?: TraceFilters): Promise<TraceList>;
+    /** GET /api/v1/traces/:traceId */
+    getTrace(traceId: string): Promise<TraceDetail>;
+    /** GET /api/v1/integrity/roots — the sealed trace roots. */
+    listIntegrityRoots(options?: {
+        loopRunId?: string;
+    }): Promise<IntegrityRootList>;
+    /** GET /api/v1/integrity/roots/:rootId — the root, its signature and its leaves. */
+    getIntegrityRoot(rootId: string): Promise<IntegrityRootDetail>;
+    /** POST /api/v1/integrity/roots/:rootId/recompute — re-derive the root from the stored traces. */
+    recomputeIntegrityRoot(rootId: string): Promise<IntegrityRecompute>;
+    /** GET /api/v1/integrity/chain — the root chain walk; `intact: false` lists the breaks. */
+    getIntegrityChain(): Promise<IntegrityChain>;
+    /** GET /api/v1/integrity/config-chain — the harness config snapshot chain walk. */
+    getIntegrityConfigChain(): Promise<ConfigChain>;
+    /** GET /api/v1/policies */
+    listPolicies(): Promise<CompliancePolicy[]>;
+    /** POST /api/v1/policies/:policyId/enable */
+    enablePolicy(policyId: string): Promise<PolicyChangeResult>;
+    /** POST /api/v1/policies/:policyId/disable */
+    disablePolicy(policyId: string): Promise<PolicyChangeResult>;
+    /** POST /api/v1/policies/:policyId/rollback */
+    rollbackPolicy(policyId: string, version: number): Promise<PolicyChangeResult>;
+    /**
+     * GET /api/v1/rule-candidates/:candidateId/source — the source of record a
+     * candidate's bundle must be compiled from. A source that does not hash to
+     * the `sourceSha256` served with it is refused (`ClawdeConnectionError`):
+     * something between the control plane and this process changed it.
+     */
+    getRuleCandidateSource(candidateId: string): Promise<RuleCandidateSource>;
+    /**
+     * POST /api/v1/rule-candidates/:candidateId/bundle (OWNER, ADMIN) — upload
+     * a compiled rule with the hash of the source it was compiled from. The
+     * control plane runs its gates; `accepted` says whether the rule went into
+     * shadow, and `gates` why.
+     */
+    uploadRuleCandidateBundle(candidateId: string, wasm: Uint8Array, sourceSha256: string, options?: BundleUploadOptions): Promise<BundleUploadResult>;
+    /** POST /api/v1/wasm-rules/:ruleId/replay — what a rule would have done on sampled traffic, without enforcing. */
+    replayWasmRule(ruleId: string, options?: WasmReplayOptions): Promise<WasmReplayResult>;
+    /** GET /api/v1/sops */
+    listSops(options?: {
+        limit?: number;
+    }): Promise<SopSummary[]>;
+    /** GET /api/v1/sops/:sopId */
+    getSop(sopId: string): Promise<SopDetail>;
+    /** POST /api/v1/sops — one workspace SOP; `markdown_content` without front matter. */
+    createSop(sop: SopInput): Promise<SopCreateResult>;
+    /** GET /api/v1/workspace/org-sops — the org-wide SOP floors of the key's org. */
+    listOrgSops(): Promise<OrgSop[]>;
+    /** POST /api/v1/workspace/org-sops — a mandatory org-wide floor (OWNER, ADMIN of a workspace in the org). */
+    createOrgSop(sop: OrgSopInput): Promise<OrgSop>;
+    /** DELETE /api/v1/workspace/org-sops/:orgSopId — answers 404 both for no such SOP and for a member without admin access. */
+    deleteOrgSop(orgSopId: string): Promise<void>;
+    /**
+     * POST /api/v1/attenuate — a child key narrowed to a subset of the parent
+     * key's capabilities. The child key is in the response once and never
+     * stored.
+     */
+    attenuateKey(parentKeyId: string, requestedCaps: string[], options?: AttenuateOptions): Promise<AttenuationResult>;
+    /** GET /api/v1/attenuate/chain/:chainId (OWNER, ADMIN) — the delegation lineage. */
+    getAttenuationChain(chainId: string): Promise<AttenuationChainLink[]>;
+    /** POST /api/v1/predict-cost — estimate a call's cost before it runs. Size the input with a token count or the text. */
+    predictCost(params: PredictCostParams): Promise<CostPrediction>;
+    /** GET /api/v1/routing/mirror-adoption-report — how a mirror-tested candidate model compared. Reported only; changes nothing. */
+    getMirrorAdoptionReport(candidateModel: string): Promise<MirrorAdoptionReport>;
 }
 //# sourceMappingURL=control-plane.d.ts.map

package/dist/control-plane.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"control-plane.d.ts","sourceRoot":"","sources":["../src/control-plane.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,yBAAyB,EACzB,YAAY,EACZ,eAAe,EACf,eAAe,EACf,6BAA6B,EAC7B,6BAA6B,EAC7B,eAAe,EACf,eAAe,EACf,IAAI,EACJ,SAAS,EACT,qBAAqB,EACrB,qBAAqB,EACrB,OAAO,EACP,mBAAmB,EACnB,aAAa,EACb,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,wBAAwB,EACzB,MAAM,SAAS,CAAA;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAQ;IACtB,OAAO,CAAC,OAAO,CAAQ;gBAEX,OAAO,EAAE,yBAAyB;YAShC,OAAO;IAuBrB,0BAA0B;IACb,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC;IAI5C;;;;;;;;;;;;OAYG;IACU,SAAS,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;IAIzE;;;;;OAKG;IACU,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAI5F;;;OAGG;IACU,uBAAuB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAIpG;;;;;OAKG;IACU,SAAS,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;IAIzE,oCAAoC;IACvB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAKtD,qCAAqC;IACxB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAInE,2CAA2C;IAC9B,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAQrE,4CAA4C;IAC/B,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAI9E,4BAA4B;IACf,eAAe,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAI3F,2BAA2B;IACd,YAAY,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAK/C,sCAAsC;IACzB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAIxE,uCAAuC;IAC1B,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAIhF,kCAAkC;IACrB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7E,wCAAwC;IAC3B,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAI3G,yEAAyE;IAC5D,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAIpG,8EAA8E;IACjE,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAI7G,+CAA+C;IAClC,cAAc,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAIzD,iDAAiD;IACpC,uBAAuB,IAAI,OAAO,CAAC,wBAAwB,EAAE,CAAC;IAQ3E,2DAA2D;IAC9C,qBAAqB,CAChC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,OAAO,CAAC,wBAAwB,CAAC;IAIpC,8DAA8D;IACjD,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGtE"}
+{"version":3,"file":"control-plane.d.ts","sourceRoot":"","sources":["../src/control-plane.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,yBAAyB,EACzB,YAAY,EACZ,eAAe,EACf,eAAe,EACf,6BAA6B,EAC7B,6BAA6B,EAC7B,eAAe,EACf,eAAe,EACf,IAAI,EACJ,SAAS,EACT,qBAAqB,EACrB,qBAAqB,EACrB,OAAO,EACP,mBAAmB,EACnB,aAAa,EACb,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,wBAAwB,EACxB,iBAAiB,EACjB,iBAAiB,EACjB,6BAA6B,EAC7B,aAAa,EACb,iBAAiB,EACjB,gBAAgB,EAChB,qBAAqB,EACrB,sBAAsB,EACtB,0BAA0B,EAC1B,eAAe,EACf,mBAAmB,EACnB,WAAW,EACX,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,wBAAwB,EACxB,wBAAwB,EACxB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,qBAAqB,EACrB,cAAc,EACd,iBAAiB,EACjB,sBAAsB,EACtB,qBAAqB,EACrB,WAAW,EACX,YAAY,EACZ,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,EACZ,iBAAiB,EACjB,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,cAAc,EACd,aAAa,EACb,mBAAmB,EACnB,mBAAmB,EACnB,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,yBAAyB,EACzB,cAAc,EACd,sBAAsB,EACtB,uBAAuB,EACvB,4BAA4B,EAC5B,qBAAqB,EACrB,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,oBAAoB,EACpB,OAAO,EACP,mBAAmB,EACnB,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,OAAO,EACP,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,EACZ,yBAAyB,EACzB,kBAAkB,EAClB,YAAY,EACZ,SAAS,EACT,eAAe,EACf,QAAQ,EACR,YAAY,EACZ,WAAW,EACX,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EACd,WAAW,EACX,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,UAAU,EACV,SAAS,EACT,QAAQ,EACR,eAAe,EACf,MAAM,EACN,WAAW,EACX,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,EACjB,cAAc,EACd,oBAAoB,EACrB,MAAM,SAAS,CAAA;AAQhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,MAAM,CAAQ;IACtB,OAAO,CAAC,OAAO,CAAQ;gBAEX,OAAO,EAAE,yBAAyB;YAShC,IAAI;IAmBlB;;;OAGG;YACW,OAAO;IAcrB,sFAAsF;YACxE,QAAQ;IAUtB,0BAA0B;IACb,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC;IAI5C;;;;;;;;;;;;OAYG;IACU,SAAS,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;IAIzE;;;;;OAKG;IACU,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAI5F;;;OAGG;IACU,uBAAuB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAIpG;;;;;OAKG;IACU,SAAS,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;IAIzE,oCAAoC;IACvB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAKtD,qCAAqC;IACxB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAInE,2CAA2C;IAC9B,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAQrE,4CAA4C;IAC/B,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAI9E,4BAA4B;IACf,eAAe,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAI3F,2BAA2B;IACd,YAAY,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAK/C,sCAAsC;IACzB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAIxE,uCAAuC;IAC1B,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAIhF,kCAAkC;IACrB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7E,mHAAmH;IACtG,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAI9E,wCAAwC;IAC3B,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAI3G,yEAAyE;IAC5D,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAIpG,8EAA8E;IACjE,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAI7G,+CAA+C;IAClC,cAAc,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAIzD,iFAAiF;IACpE,oBAAoB,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAI/D;;;;;;;;;;OAUG;IACU,uBAAuB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAI/G,iDAAiD;IACpC,uBAAuB,IAAI,OAAO,CAAC,wBAAwB,EAAE,CAAC;IAQ3E,2DAA2D;IAC9C,qBAAqB,CAChC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,OAAO,CAAC,wBAAwB,CAAC;IAIpC,8DAA8D;IACjD,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrE,kEAAkE;IACrD,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAM7E,sHAAsH;IACzG,cAAc,IAAI,OAAO,CAAC,aAAa,CAAC;IAIrD,mFAAmF;IACtE,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAI3E,iFAAiF;IACpE,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAIzE,wGAAwG;IAC3F,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAIzE,oFAAoF;IACvE,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAItF,qFAAqF;IACxE,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;YAIzE,kBAAkB;IAMhC,sCAAsC;IACzB,qBAAqB,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAKjE;;;OAGG;IACU,sBAAsB,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI3F;;;OAGG;IACU,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI/G,iDAAiD;IACpC,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlE,uHAAuH;IAC1G,4BAA4B,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAM9F,+FAA+F;IAClF,oBAAoB,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAIjE,mDAAmD;IACtC,kBAAkB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAIhF,0GAA0G;IAC7F,eAAe,IAAI,OAAO,CAAC,WAAW,CAAC;IAIpD;;;;OAIG;IACU,qBAAqB,CAAC,WAAW,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC;IAI/F,kGAAkG;IACrF,qBAAqB,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,eAAe,CAAC;IAInH,yJAAyJ;IAC5I,qBAAqB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxE,kFAAkF;IACrE,2BAA2B,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAS5F,gCAAgC;IACnB,cAAc,CAAC,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAIrF,gDAAgD;IACnC,YAAY,CAAC,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAIjF,iCAAiC;IACpB,cAAc,CAAC,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAIrF,gCAAgC;IACnB,cAAc,CAAC,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAIrF,sCAAsC;IACzB,mBAAmB,CAAC,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAI/F,wGAAwG;IAC3F,uBAAuB,IAAI,OAAO,CAAC,wBAAwB,CAAC;IAQzE,oCAAoC;IACvB,mBAAmB,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAI7D,2DAA2D;IAC9C,oBAAoB,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAI/D,sCAAsC;IACzB,sBAAsB,CAAC,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAIhG,wCAAwC;IAC3B,uBAAuB,CAAC,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAInG,mCAAmC;IACtB,mBAAmB,CAAC,OAAO,GAAE,qBAA0B,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAIhG,2HAA2H;IAC9G,wBAAwB,CAAC,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAIpG,oFAAoF;IACvE,6BAA6B,CAAC,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC;IAI/F,mDAAmD;IACtC,8BAA8B,CAAC,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC;YAIlF,QAAQ;IAMtB,0HAA0H;IAC7G,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAIlF;;;;OAIG;IACU,yBAAyB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC;IAMxG,yGAAyG;IAC5F,eAAe,CAAC,OAAO,GAAE,sBAA2B,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAIlG,uIAAuI;IAC1H,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAIjE;;;OAGG;IACU,cAAc,IAAI,OAAO,CAAC,WAAW,CAAC;IAMnD,oHAAoH;IACvG,eAAe,IAAI,OAAO,CAAC,YAAY,CAAC;IAIrD,kGAAkG;IACrF,gBAAgB,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAI3D;;;;OAIG;IACU,yBAAyB,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAMtE,0GAA0G;IAC7F,iBAAiB,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;IAKzD,8BAA8B;IACjB,eAAe,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC;IAI9E,gDAAgD;IACnC,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAInF,8CAA8C;IACjC,mBAAmB,IAAI,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAIpE,8FAA8F;IACjF,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAI5E,gHAAgH;IACnG,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAO/G,8HAA8H;IACjH,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAIxE,uGAAuG;IAC1F,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAI7E,iHAAiH;IACpG,kBAAkB,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,YAAY,CAAC;IAKjF,sGAAsG;IACzF,uBAAuB,CAAC,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAKhG,+CAA+C;IAClC,cAAc,CAAC,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAWxF,4DAA4D;IAC/C,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAIxE,gIAAgI;IACnH,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAKpF,sHAAsH;IACzG,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAI5F;;;;OAIG;IACU,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAIpH,wEAAwE;IAC3D,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAIrG,8FAA8F;IACjF,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAIrF,qGAAqG;IACxF,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAIxF;;;;OAIG;IACU,eAAe,CAAC,SAAS,EAAE,sBAAsB,GAAG,OAAO,CAAC,4BAA4B,CAAC;IAItG;;;;OAIG;IACU,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,4BAA4B,CAAC;IAI1H,iHAAiH;IACpG,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAIjF,sGAAsG;IACzF,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAI3E,mHAAmH;IACtG,sBAAsB,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAIrD,mBAAmB;IAMjC,sFAAsF;IACzE,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,aAAkB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAIxG,qFAAqF;IACxE,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,aAAkB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAIvG;;;;OAIG;IACU,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,OAAO,CAAC;IAK5F,mCAAmC;IACtB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI5D,wBAAwB;IACX,YAAY,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAI/C,oFAAoF;IACvE,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,sBAA2B,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAKnH,yCAAyC;IAC5B,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAIzE,mHAAmH;IACtG,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,oBAAyB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAIhH,4GAA4G;IAC/F,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,oBAAyB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAM/G,8DAA8D;IACjD,YAAY,CAAC,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IAS3E,mGAAmG;IACtF,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAIzI,gGAAgG;IACnF,eAAe,IAAI,OAAO,CAAC,YAAY,CAAC;IAIrD,gDAAgD;IACnC,qBAAqB,CAAC,OAAO,GAAE,yBAA8B,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAQxG,8FAA8F;IACjF,aAAa,CAAC,OAAO,GAAE,eAAoB,GAAG,OAAO,CAAC,YAAY,CAAC;IAWhF,wCAAwC;IAC3B,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAM/D,yCAAyC;IAC5B,UAAU,CAAC,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,SAAS,CAAC;IAWvE,kCAAkC;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAM5D,4DAA4D;IAC/C,kBAAkB,CAAC,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAIjG,oFAAoF;IACvE,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAI3E,kGAAkG;IACrF,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAIhF,2FAA2F;IAC9E,iBAAiB,IAAI,OAAO,CAAC,cAAc,CAAC;IAIzD,mFAAmF;IACtE,uBAAuB,IAAI,OAAO,CAAC,WAAW,CAAC;IAM5D,2BAA2B;IACd,YAAY,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAIxD,6CAA6C;IAChC,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAIxE,8CAA8C;IACjC,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAIzE,+CAA+C;IAClC,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAI3F;;;;;OAKG;IACU,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAUtF;;;;;OAKG;IACU,yBAAyB,CACpC,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,UAAU,EAChB,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,kBAAkB,CAAC;IAO9B,kHAAkH;IACrG,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAMvG,uBAAuB;IACV,QAAQ,CAAC,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAI9E,8BAA8B;IACjB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAItD,sFAAsF;IACzE,SAAS,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,eAAe,CAAC;IAI/D,iFAAiF;IACpE,WAAW,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAI7C,6GAA6G;IAChG,YAAY,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;IAI5D,4HAA4H;IAC/G,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM1D;;;;OAIG;IACU,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAInI,oFAAoF;IACvE,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAIlF,wHAAwH;IAC3G,WAAW,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,cAAc,CAAC;IAI5E,iIAAiI;IACpH,uBAAuB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;CAG5F"}