@knpkv/control-center 0.1.0

package/dist/server/server/api/ApplicationServices.d.ts

@@ -0,0 +1,320 @@
+import * as Context from "effect/Context";
+import type * as Effect from "effect/Effect";
+import * as Schema from "effect/Schema";
+import type * as Scope from "effect/Scope";
+import type * as Stream from "effect/Stream";
+import type { AgentHistoryMessage, AgentPrompt, AgentProvider, EnqueueReleaseAgentJobRequest, EnqueueReleaseAgentJobResponse, ReleaseAgentThreadCursor, ReleaseAgentThreadPage, ReleaseAgentTurnResponse } from "../../api/agent.js";
+import type { ApplyRelationshipRepairProposalResponse, CreateRelationshipRepairProposalRequest, EvidenceInspection, RelationshipHistoryInspection, RelationshipRepairCandidates, RelationshipRepairProposalDraft, RelationshipRepairProposalList, ReleaseDeliveryGraphInspection, ReviewRelationshipRepairProposalRequest, WorkspaceEntityInspection, WorkspaceEntityProjectionIndex } from "../../api/deliveryGraph.js";
+import type { ControlCenterLiveEvent } from "../../api/liveEvents.js";
+import type { OpaqueMediaId, SafeMediaContentType } from "../../api/media.js";
+import type { AtlassianOAuthClientConfiguration, AtlassianOAuthGrantExchangeResponse, AtlassianOAuthGrantId, AtlassianOAuthGrantStartResponse, AtlassianOAuthProviderIntent, AtlassianProfileDiscoveryResponse, AwsProfileDiscoveryResponse, AwsResourceDiscoveryRequest, AwsResourceDiscoveryResponse, CreatePluginConnectionRequest, CreatePluginConnectionResponse, CreatePluginConnectionsResponse, DiscoveredAtlassianProfile, PatchPluginConfigurationRequest, PluginConfiguration, PluginConfigurationMetadata, PluginConnectionSummary, PluginConnectionTestResult, PluginHealthResponse, PluginSynchronizationState, ProviderAccountSummary } from "../../api/plugins.js";
+import type { PortfolioSnapshot } from "../../api/portfolio.js";
+import type { AuthorizedShareResolution, AuthorizedShareSummary, CreateAuthorizedShareRequest } from "../../api/shares.js";
+import type { Actor } from "../../domain/actors.js";
+import type { DeliveryEntityKind, DeliveryEntityService, DeliveryEntityStatusGroup, DeliveryRelationship, LedgerRevision } from "../../domain/deliveryGraph.js";
+import type { EntityId, EnvironmentId, EventCursor, EvidenceId, PersonId, PluginConnectionId, RelationshipId, RelationshipRepairProposalId, ReleaseId, SessionId, ShareId, WorkspaceId } from "../../domain/identifiers.js";
+import type { RelationshipRepairProposal } from "../../domain/relationshipRepair.js";
+import type { TimelineActorKind, TimelineCursor, TimelineEventDetail, TimelinePage } from "../../domain/timeline.js";
+import { UtcTimestamp } from "../../domain/utcTimestamp.js";
+declare const ApplicationResourceNotFound_base: Schema.Class<ApplicationResourceNotFound, Schema.TaggedStruct<"ApplicationResourceNotFound", {}>, import("effect/Cause").YieldableError>;
+/** An authenticated resource does not exist within the caller's workspace. */
+export declare class ApplicationResourceNotFound extends ApplicationResourceNotFound_base {
+}
+declare const ApplicationServiceUnavailable_base: Schema.Class<ApplicationServiceUnavailable, Schema.TaggedStruct<"ApplicationServiceUnavailable", {
+    readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+}>, import("effect/Cause").YieldableError>;
+/** A bounded application operation cannot currently be served. */
+export declare class ApplicationServiceUnavailable extends ApplicationServiceUnavailable_base {
+}
+declare const ApplicationRateLimited_base: Schema.Class<ApplicationRateLimited, Schema.TaggedStruct<"ApplicationRateLimited", {
+    readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+}>, import("effect/Cause").YieldableError>;
+/** A provider-specific read budget was exhausted. */
+export declare class ApplicationRateLimited extends ApplicationRateLimited_base {
+}
+declare const ApplicationConflict_base: Schema.Class<ApplicationConflict, Schema.TaggedStruct<"ApplicationConflict", {}>, import("effect/Cause").YieldableError>;
+/** Durable state changed since the caller read its compare-and-swap revision. */
+export declare class ApplicationConflict extends ApplicationConflict_base {
+}
+declare const ApplicationInvalidRequest_base: Schema.Class<ApplicationInvalidRequest, Schema.TaggedStruct<"ApplicationInvalidRequest", {}>, import("effect/Cause").YieldableError>;
+/** An application-level mutation failed validation after transport decoding. */
+export declare class ApplicationInvalidRequest extends ApplicationInvalidRequest_base {
+}
+export type PluginAdministrationError = ApplicationRateLimited | ApplicationResourceNotFound | ApplicationServiceUnavailable;
+/** Secret-free plugin administration seam. Executor processes are deliberately absent. */
+export interface PluginAdministrationService {
+    readonly list: (workspaceId: WorkspaceId) => Effect.Effect<ReadonlyArray<PluginConnectionSummary>, ApplicationServiceUnavailable>;
+    readonly accounts?: (workspaceId: WorkspaceId) => Effect.Effect<ReadonlyArray<ProviderAccountSummary>, ApplicationServiceUnavailable>;
+    readonly discoverAwsProfiles?: () => Effect.Effect<AwsProfileDiscoveryResponse, ApplicationServiceUnavailable>;
+    readonly discoverAwsResources?: (request: AwsResourceDiscoveryRequest) => Effect.Effect<AwsResourceDiscoveryResponse, ApplicationInvalidRequest | ApplicationRateLimited | ApplicationServiceUnavailable>;
+    readonly discoverAtlassianProfiles?: () => Effect.Effect<AtlassianProfileDiscoveryResponse, ApplicationServiceUnavailable>;
+    readonly startAtlassianOAuthGrant?: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly sessionId: SessionId;
+        readonly providers: AtlassianOAuthProviderIntent;
+        readonly configuration?: AtlassianOAuthClientConfiguration;
+    }) => Effect.Effect<AtlassianOAuthGrantStartResponse, ApplicationConflict | ApplicationServiceUnavailable>;
+    readonly exchangeAtlassianOAuthGrant?: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly sessionId: SessionId;
+        readonly grantId: AtlassianOAuthGrantId;
+        readonly code: string;
+    }) => Effect.Effect<AtlassianOAuthGrantExchangeResponse, ApplicationInvalidRequest | PluginAdministrationError>;
+    readonly completeAtlassianOAuthGrant?: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly sessionId: SessionId;
+        readonly grantId: AtlassianOAuthGrantId;
+        readonly cloudId: string;
+    }) => Effect.Effect<DiscoveredAtlassianProfile, ApplicationInvalidRequest | PluginAdministrationError>;
+    readonly connectAndTest?: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly request: CreatePluginConnectionRequest;
+    }) => Effect.Effect<CreatePluginConnectionResponse, ApplicationConflict | ApplicationInvalidRequest | PluginAdministrationError>;
+    readonly connectAndTestBatch?: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly requests: ReadonlyArray<CreatePluginConnectionRequest>;
+    }) => Effect.Effect<CreatePluginConnectionsResponse>;
+    readonly setConnectionEnabled?: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly pluginConnectionId: PluginConnectionId;
+        readonly isEnabled: boolean;
+    }) => Effect.Effect<PluginConnectionSummary, ApplicationConflict | ApplicationInvalidRequest | PluginAdministrationError>;
+    readonly health: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly pluginConnectionId: PluginConnectionId;
+    }) => Effect.Effect<typeof PluginHealthResponse.Type, PluginAdministrationError>;
+    readonly testConnection: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly pluginConnectionId: PluginConnectionId;
+    }) => Effect.Effect<PluginConnectionTestResult, PluginAdministrationError>;
+    readonly synchronization?: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly pluginConnectionId: PluginConnectionId;
+    }) => Effect.Effect<PluginSynchronizationState, ApplicationInvalidRequest | PluginAdministrationError>;
+    readonly synchronizeConnection?: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly pluginConnectionId: PluginConnectionId;
+    }) => Effect.Effect<PluginSynchronizationState, ApplicationInvalidRequest | PluginAdministrationError>;
+    readonly configurationMetadata: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly pluginConnectionId: PluginConnectionId;
+    }) => Effect.Effect<PluginConfigurationMetadata, PluginAdministrationError>;
+    readonly configuration: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly pluginConnectionId: PluginConnectionId;
+    }) => Effect.Effect<typeof PluginConfiguration.Type, PluginAdministrationError>;
+    readonly patchConfiguration: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly pluginConnectionId: PluginConnectionId;
+        readonly patch: typeof PatchPluginConfigurationRequest.Type;
+    }) => Effect.Effect<typeof PluginConfiguration.Type, ApplicationConflict | ApplicationInvalidRequest | PluginAdministrationError>;
+}
+declare const PluginAdministration_base: Context.ServiceClass<PluginAdministration, "@knpkv/control-center/server/api/PluginAdministration", PluginAdministrationService>;
+/** Injectable plugin query boundary used by the HTTP handlers. */
+export declare class PluginAdministration extends PluginAdministration_base {
+}
+declare const PortfolioSnapshots_base: Context.ServiceClass<PortfolioSnapshots, "@knpkv/control-center/server/api/PortfolioSnapshots", {
+    readonly snapshot: (workspaceId: WorkspaceId) => Effect.Effect<PortfolioSnapshot, ApplicationServiceUnavailable>;
+}>;
+/** Injectable bird's-eye portfolio projection boundary. */
+export declare class PortfolioSnapshots extends PortfolioSnapshots_base {
+}
+declare const TimelineReads_base: Context.ServiceClass<TimelineReads, "@knpkv/control-center/server/api/TimelineReads", {
+    readonly page: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly actorKind: TimelineActorKind | null;
+        readonly before: TimelineCursor | null;
+        readonly from: UtcTimestamp | null;
+        readonly limit: number;
+        readonly to: UtcTimestamp | null;
+    }) => Effect.Effect<TimelinePage, ApplicationServiceUnavailable>;
+    readonly detail: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly eventKey: string;
+    }) => Effect.Effect<TimelineEventDetail, ApplicationResourceNotFound | ApplicationServiceUnavailable>;
+}>;
+/** Injectable, default-redacted workspace Timeline read boundary. */
+export declare class TimelineReads extends TimelineReads_base {
+}
+declare const TimelineExportAudits_base: Context.ServiceClass<TimelineExportAudits, "@knpkv/control-center/server/api/TimelineExportAudits", {
+    readonly record: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly personId: PersonId;
+        readonly sessionId: SessionId;
+        readonly format: "csv" | "json";
+        readonly actorKind: TimelineActorKind | null;
+        readonly from: UtcTimestamp | null;
+        readonly to: UtcTimestamp | null;
+        readonly requestedLimit: number;
+        readonly returnedCount: number;
+        readonly truncated: boolean;
+    }) => Effect.Effect<void, ApplicationServiceUnavailable>;
+}>;
+/** Durable attribution boundary for successfully collected Timeline downloads. */
+export declare class TimelineExportAudits extends TimelineExportAudits_base {
+}
+declare const AuthorizedShares_base: Context.ServiceClass<AuthorizedShares, "@knpkv/control-center/server/api/AuthorizedShares", {
+    readonly create: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly request: CreateAuthorizedShareRequest;
+        readonly createdByPersonId: PersonId;
+        readonly sessionId: SessionId;
+    }) => Effect.Effect<AuthorizedShareSummary, ApplicationConflict | ApplicationInvalidRequest | ApplicationResourceNotFound | ApplicationServiceUnavailable>;
+    readonly resolve: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly shareId: ShareId;
+        readonly actor: Actor;
+    }) => Effect.Effect<AuthorizedShareResolution, ApplicationResourceNotFound | ApplicationServiceUnavailable>;
+    readonly revoke: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly shareId: ShareId;
+        readonly revokedByPersonId: PersonId;
+        readonly sessionId: SessionId;
+    }) => Effect.Effect<void, ApplicationResourceNotFound | ApplicationServiceUnavailable>;
+}>;
+/** Exact-entity authenticated share creation, resolution, and revocation boundary. */
+export declare class AuthorizedShares extends AuthorizedShares_base {
+}
+declare const DeliveryGraphInspection_base: Context.ServiceClass<DeliveryGraphInspection, "@knpkv/control-center/server/api/DeliveryGraphInspection", {
+    readonly workspaceEntity: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly entityId: EntityId;
+    }) => Effect.Effect<WorkspaceEntityInspection, ApplicationResourceNotFound | ApplicationServiceUnavailable>;
+    readonly workspaceEntityProjections: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly owner: PersonId | null;
+        readonly query: string | null;
+        readonly service: DeliveryEntityService | null;
+        readonly status: DeliveryEntityStatusGroup | null;
+        readonly type: DeliveryEntityKind | null;
+    }) => Effect.Effect<WorkspaceEntityProjectionIndex, ApplicationResourceNotFound | ApplicationServiceUnavailable>;
+    readonly releaseSlice: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly releaseId: ReleaseId;
+        readonly environmentId: EnvironmentId | null;
+    }) => Effect.Effect<ReleaseDeliveryGraphInspection, ApplicationResourceNotFound | ApplicationServiceUnavailable>;
+    readonly repairCandidates: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly releaseId: ReleaseId;
+        readonly environmentId: EnvironmentId | null;
+    }) => Effect.Effect<RelationshipRepairCandidates, ApplicationResourceNotFound | ApplicationServiceUnavailable>;
+    readonly repairProposalDraft: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly releaseId: ReleaseId;
+        readonly environmentId: EnvironmentId | null;
+        readonly relationshipId: RelationshipId;
+        readonly revision: LedgerRevision;
+    }) => Effect.Effect<RelationshipRepairProposalDraft, ApplicationResourceNotFound | ApplicationServiceUnavailable>;
+    readonly relationship: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly relationshipId: RelationshipId;
+        readonly revision: LedgerRevision | null;
+    }) => Effect.Effect<DeliveryRelationship, ApplicationResourceNotFound | ApplicationServiceUnavailable>;
+    readonly relationshipHistory: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly relationshipId: RelationshipId;
+    }) => Effect.Effect<RelationshipHistoryInspection, ApplicationResourceNotFound | ApplicationServiceUnavailable>;
+    readonly evidence: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly evidenceId: EvidenceId;
+    }) => Effect.Effect<EvidenceInspection, ApplicationResourceNotFound | ApplicationServiceUnavailable>;
+}>;
+/** Workspace-scoped read boundary for relationship, lifecycle, and evidence inspection. */
+export declare class DeliveryGraphInspection extends DeliveryGraphInspection_base {
+}
+declare const RelationshipRepairProposals_base: Context.ServiceClass<RelationshipRepairProposals, "@knpkv/control-center/server/api/RelationshipRepairProposals", {
+    readonly create: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly releaseId: ReleaseId;
+        readonly relationshipId: RelationshipId;
+        readonly request: CreateRelationshipRepairProposalRequest;
+        readonly actor: Actor;
+        readonly sessionId: SessionId;
+    }) => Effect.Effect<RelationshipRepairProposal, ApplicationConflict | ApplicationInvalidRequest | ApplicationResourceNotFound | ApplicationServiceUnavailable>;
+    readonly get: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly proposalId: RelationshipRepairProposalId;
+    }) => Effect.Effect<RelationshipRepairProposal, ApplicationResourceNotFound | ApplicationServiceUnavailable>;
+    readonly list: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly releaseId: ReleaseId;
+        readonly environmentId: EnvironmentId | null;
+        readonly status: RelationshipRepairProposal["status"] | null;
+    }) => Effect.Effect<RelationshipRepairProposalList, ApplicationResourceNotFound | ApplicationServiceUnavailable>;
+    readonly review: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly proposalId: RelationshipRepairProposalId;
+        readonly request: ReviewRelationshipRepairProposalRequest;
+        readonly actor: Actor;
+        readonly sessionId: SessionId;
+    }) => Effect.Effect<RelationshipRepairProposal, ApplicationConflict | ApplicationInvalidRequest | ApplicationResourceNotFound | ApplicationServiceUnavailable>;
+    readonly apply: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly proposalId: RelationshipRepairProposalId;
+        readonly actor: Actor;
+        readonly sessionId: SessionId;
+    }) => Effect.Effect<ApplyRelationshipRepairProposalResponse, ApplicationConflict | ApplicationInvalidRequest | ApplicationResourceNotFound | ApplicationServiceUnavailable>;
+}>;
+/** Authenticated mutation boundary for durable relationship-repair proposals. */
+export declare class RelationshipRepairProposals extends RelationshipRepairProposals_base {
+}
+declare const ReleaseAgentTurns_base: Context.ServiceClass<ReleaseAgentTurns, "@knpkv/control-center/server/api/ReleaseAgentTurns", {
+    readonly runTurn: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly releaseId: ReleaseId;
+        readonly provider: AgentProvider;
+        readonly prompt: AgentPrompt;
+        readonly history: ReadonlyArray<AgentHistoryMessage>;
+    }) => Effect.Effect<ReleaseAgentTurnResponse, ApplicationResourceNotFound | ApplicationServiceUnavailable>;
+}>;
+/**
+ * Release-aware conversational boundary. Implementations own context projection,
+ * provider selection, prompt hardening, cancellation, and provider error redaction.
+ */
+export declare class ReleaseAgentTurns extends ReleaseAgentTurns_base {
+}
+declare const ReleaseAgentJobs_base: Context.ServiceClass<ReleaseAgentJobs, "@knpkv/control-center/server/api/ReleaseAgentJobs", {
+    readonly enqueue: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly releaseId: ReleaseId;
+        readonly request: EnqueueReleaseAgentJobRequest;
+    }) => Effect.Effect<EnqueueReleaseAgentJobResponse, ApplicationResourceNotFound | ApplicationServiceUnavailable>;
+    readonly replay: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly releaseId: ReleaseId;
+        readonly after: ReleaseAgentThreadCursor;
+        readonly limit: number;
+    }) => Effect.Effect<ReleaseAgentThreadPage, ApplicationResourceNotFound | ApplicationServiceUnavailable>;
+}>;
+/**
+ * Provider-neutral durable release-agent boundary. Implementations derive job,
+ * context, and workspace ownership server-side and return only browser-safe events.
+ */
+export declare class ReleaseAgentJobs extends ReleaseAgentJobs_base {
+}
+declare const LiveEvents_base: Context.ServiceClass<LiveEvents, "@knpkv/control-center/server/api/LiveEvents", {
+    readonly open: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly after: EventCursor | undefined;
+    }) => Effect.Effect<Stream.Stream<ControlCenterLiveEvent>, ApplicationServiceUnavailable, Scope.Scope>;
+}>;
+/** Injectable durable replay boundary used by the authenticated SSE handler. */
+export declare class LiveEvents extends LiveEvents_base {
+}
+/** Fully authorized media stream whose provider address and storage key remain private. */
+export interface MediaRead {
+    readonly body: Stream.Stream<Uint8Array>;
+    readonly contentLength: number;
+    readonly contentType: SafeMediaContentType;
+}
+declare const MediaReads_base: Context.ServiceClass<MediaReads, "@knpkv/control-center/server/api/MediaReads", {
+    readonly read: (input: {
+        readonly workspaceId: WorkspaceId;
+        readonly mediaId: OpaqueMediaId;
+    }) => Effect.Effect<MediaRead, ApplicationResourceNotFound | ApplicationServiceUnavailable>;
+}>;
+/** Injectable opaque media boundary; implementations must authorize before returning a stream. */
+export declare class MediaReads extends MediaReads_base {
+}
+export {};
+//# sourceMappingURL=ApplicationServices.d.ts.map

package/dist/server/server/api/ApplicationServices.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApplicationServices.d.ts","sourceRoot":"","sources":["../../../../src/server/api/ApplicationServices.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAA;AACzC,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAA;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,KAAK,KAAK,MAAM,cAAc,CAAA;AAC1C,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAA;AAE5C,OAAO,KAAK,EACV,mBAAmB,EACnB,WAAW,EACX,aAAa,EACb,6BAA6B,EAC7B,8BAA8B,EAC9B,wBAAwB,EACxB,sBAAsB,EACtB,wBAAwB,EACzB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,KAAK,EACV,uCAAuC,EACvC,uCAAuC,EACvC,kBAAkB,EAClB,6BAA6B,EAC7B,4BAA4B,EAC5B,+BAA+B,EAC/B,8BAA8B,EAC9B,8BAA8B,EAC9B,uCAAuC,EACvC,yBAAyB,EACzB,8BAA8B,EAC/B,MAAM,4BAA4B,CAAA;AACnC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AACrE,OAAO,KAAK,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAC7E,OAAO,KAAK,EACV,iCAAiC,EACjC,mCAAmC,EACnC,qBAAqB,EACrB,gCAAgC,EAChC,4BAA4B,EAC5B,iCAAiC,EACjC,2BAA2B,EAC3B,2BAA2B,EAC3B,4BAA4B,EAC5B,6BAA6B,EAC7B,8BAA8B,EAC9B,+BAA+B,EAC/B,0BAA0B,EAC1B,+BAA+B,EAC/B,mBAAmB,EACnB,2BAA2B,EAC3B,uBAAuB,EACvB,0BAA0B,EAC1B,oBAAoB,EACpB,0BAA0B,EAC1B,sBAAsB,EACvB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC/D,OAAO,KAAK,EACV,yBAAyB,EACzB,sBAAsB,EACtB,4BAA4B,EAC7B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,KAAK,EACV,kBAAkB,EAClB,qBAAqB,EACrB,yBAAyB,EACzB,oBAAoB,EACpB,cAAc,EACf,MAAM,+BAA+B,CAAA;AACtC,OAAO,KAAK,EACV,QAAQ,EACR,aAAa,EACb,WAAW,EACX,UAAU,EACV,QAAQ,EACR,kBAAkB,EAClB,cAAc,EACd,4BAA4B,EAC5B,SAAS,EACT,SAAS,EACT,OAAO,EACP,WAAW,EACZ,MAAM,6BAA6B,CAAA;AACpC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAA;AACpF,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACpH,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAA;;AAE3D,8EAA8E;AAC9E,qBAAa,2BAA4B,SAAQ,gCAGhD;CAAG;;;;AAEJ,kEAAkE;AAClE,qBAAa,6BAA8B,SAAQ,kCAGlD;CAAG;;;;AAEJ,qDAAqD;AACrD,qBAAa,sBAAuB,SAAQ,2BAG3C;CAAG;;AAEJ,iFAAiF;AACjF,qBAAa,mBAAoB,SAAQ,wBAGxC;CAAG;;AAEJ,gFAAgF;AAChF,qBAAa,yBAA0B,SAAQ,8BAG9C;CAAG;AAEJ,MAAM,MAAM,yBAAyB,GACjC,sBAAsB,GACtB,2BAA2B,GAC3B,6BAA6B,CAAA;AAEjC,0FAA0F;AAC1F,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,IAAI,EAAE,CACb,WAAW,EAAE,WAAW,KACrB,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,uBAAuB,CAAC,EAAE,6BAA6B,CAAC,CAAA;IACzF,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAClB,WAAW,EAAE,WAAW,KACrB,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,sBAAsB,CAAC,EAAE,6BAA6B,CAAC,CAAA;IACxF,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,MAAM,CAAC,MAAM,CAAC,2BAA2B,EAAE,6BAA6B,CAAC,CAAA;IAC9G,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAC9B,OAAO,EAAE,2BAA2B,KACjC,MAAM,CAAC,MAAM,CAChB,4BAA4B,EAC5B,yBAAyB,GAAG,sBAAsB,GAAG,6BAA6B,CACnF,CAAA;IACD,QAAQ,CAAC,yBAAyB,CAAC,EAAE,MAAM,MAAM,CAAC,MAAM,CACtD,iCAAiC,EACjC,6BAA6B,CAC9B,CAAA;IACD,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC,KAAK,EAAE;QAC1C,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;QAC7B,QAAQ,CAAC,SAAS,EAAE,4BAA4B,CAAA;QAChD,QAAQ,CAAC,aAAa,CAAC,EAAE,iCAAiC,CAAA;KAC3D,KAAK,MAAM,CAAC,MAAM,CACjB,gCAAgC,EAChC,mBAAmB,GAAG,6BAA6B,CACpD,CAAA;IACD,QAAQ,CAAC,2BAA2B,CAAC,EAAE,CAAC,KAAK,EAAE;QAC7C,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;QAC7B,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAA;QACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KACtB,KAAK,MAAM,CAAC,MAAM,CACjB,mCAAmC,EACnC,yBAAyB,GAAG,yBAAyB,CACtD,CAAA;IACD,QAAQ,CAAC,2BAA2B,CAAC,EAAE,CAAC,KAAK,EAAE;QAC7C,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;QAC7B,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAA;QACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KACzB,KAAK,MAAM,CAAC,MAAM,CACjB,0BAA0B,EAC1B,yBAAyB,GAAG,yBAAyB,CACtD,CAAA;IACD,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE;QAChC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAA;KAChD,KAAK,MAAM,CAAC,MAAM,CACjB,8BAA8B,EAC9B,mBAAmB,GAAG,yBAAyB,GAAG,yBAAyB,CAC5E,CAAA;IACD,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC,KAAK,EAAE;QACrC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,6BAA6B,CAAC,CAAA;KAChE,KAAK,MAAM,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAA;IACpD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE;QACtC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAA;QAC/C,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;KAC5B,KAAK,MAAM,CAAC,MAAM,CACjB,uBAAuB,EACvB,mBAAmB,GAAG,yBAAyB,GAAG,yBAAyB,CAC5E,CAAA;IACD,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACvB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAA;KAChD,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,oBAAoB,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAA;IAChF,QAAQ,CAAC,cAAc,EAAE,CAAC,KAAK,EAAE;QAC/B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAA;KAChD,KAAK,MAAM,CAAC,MAAM,CAAC,0BAA0B,EAAE,yBAAyB,CAAC,CAAA;IAC1E,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE;QACjC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAA;KAChD,KAAK,MAAM,CAAC,MAAM,CACjB,0BAA0B,EAC1B,yBAAyB,GAAG,yBAAyB,CACtD,CAAA;IACD,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC,KAAK,EAAE;QACvC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAA;KAChD,KAAK,MAAM,CAAC,MAAM,CACjB,0BAA0B,EAC1B,yBAAyB,GAAG,yBAAyB,CACtD,CAAA;IACD,QAAQ,CAAC,qBAAqB,EAAE,CAAC,KAAK,EAAE;QACtC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAA;KAChD,KAAK,MAAM,CAAC,MAAM,CAAC,2BAA2B,EAAE,yBAAyB,CAAC,CAAA;IAC3E,QAAQ,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE;QAC9B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAA;KAChD,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,mBAAmB,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAA;IAC/E,QAAQ,CAAC,kBAAkB,EAAE,CAAC,KAAK,EAAE;QACnC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAA;QAC/C,QAAQ,CAAC,KAAK,EAAE,OAAO,+BAA+B,CAAC,IAAI,CAAA;KAC5D,KAAK,MAAM,CAAC,MAAM,CACjB,OAAO,mBAAmB,CAAC,IAAI,EAC7B,mBAAmB,GACnB,yBAAyB,GACzB,yBAAyB,CAC5B,CAAA;CACF;;AAED,kEAAkE;AAClE,qBAAa,oBAAqB,SAAQ,yBAGkB;CAAG;;uBAI1C,CACjB,WAAW,EAAE,WAAW,KACrB,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,6BAA6B,CAAC;;AAJtE,2DAA2D;AAC3D,qBAAa,kBAAmB,SAAQ,uBAImB;CAAG;;mBAI7C,CAAC,KAAK,EAAE;QACrB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,GAAG,IAAI,CAAA;QAC5C,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAAA;QACtC,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,CAAA;QAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;QACtB,QAAQ,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CAAA;KACjC,KAAK,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,6BAA6B,CAAC;qBAC/C,CAAC,KAAK,EAAE;QACvB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAC1B,KAAK,MAAM,CAAC,MAAM,CACjB,mBAAmB,EACnB,2BAA2B,GAAG,6BAA6B,CAC5D;;AAhBH,qEAAqE;AACrE,qBAAa,aAAc,SAAQ,kBAgBmB;CAAG;;qBAItC,CAAC,KAAK,EAAE;QACvB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;QAC3B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;QAC7B,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,CAAA;QAC/B,QAAQ,CAAC,SAAS,EAAE,iBAAiB,GAAG,IAAI,CAAA;QAC5C,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,CAAA;QAClC,QAAQ,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CAAA;QAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;QAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;QAC9B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;KAC5B,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,6BAA6B,CAAC;;AAb1D,kFAAkF;AAClF,qBAAa,oBAAqB,SAAQ,yBAamB;CAAG;;qBAI7C,CAAC,KAAK,EAAE;QACvB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,OAAO,EAAE,4BAA4B,CAAA;QAC9C,QAAQ,CAAC,iBAAiB,EAAE,QAAQ,CAAA;QACpC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;KAC9B,KAAK,MAAM,CAAC,MAAM,CACjB,sBAAsB,EACtB,mBAAmB,GAAG,yBAAyB,GAAG,2BAA2B,GAAG,6BAA6B,CAC9G;sBACiB,CAAC,KAAK,EAAE;QACxB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;QACzB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;KACtB,KAAK,MAAM,CAAC,MAAM,CACjB,yBAAyB,EACzB,2BAA2B,GAAG,6BAA6B,CAC5D;qBACgB,CAAC,KAAK,EAAE;QACvB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;QACzB,QAAQ,CAAC,iBAAiB,EAAE,QAAQ,CAAA;QACpC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;KAC9B,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,2BAA2B,GAAG,6BAA6B,CAAC;;AAxBxF,sFAAsF;AACtF,qBAAa,gBAAiB,SAAQ,qBAwBmB;CAAG;;8BAIhC,CAAC,KAAK,EAAE;QAChC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;KAC5B,KAAK,MAAM,CAAC,MAAM,CACjB,yBAAyB,EACzB,2BAA2B,GAAG,6BAA6B,CAC5D;yCACoC,CACnC,KAAK,EAAE;QACL,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,IAAI,CAAA;QAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;QAC7B,QAAQ,CAAC,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAAA;QAC9C,QAAQ,CAAC,MAAM,EAAE,yBAAyB,GAAG,IAAI,CAAA;QACjD,QAAQ,CAAC,IAAI,EAAE,kBAAkB,GAAG,IAAI,CAAA;KACzC,KACE,MAAM,CAAC,MAAM,CAChB,8BAA8B,EAC9B,2BAA2B,GAAG,6BAA6B,CAC5D;2BACsB,CAAC,KAAK,EAAE;QAC7B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;QAC7B,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,IAAI,CAAA;KAC7C,KAAK,MAAM,CAAC,MAAM,CACjB,8BAA8B,EAC9B,2BAA2B,GAAG,6BAA6B,CAC5D;+BAC0B,CAAC,KAAK,EAAE;QACjC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;QAC7B,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,IAAI,CAAA;KAC7C,KAAK,MAAM,CAAC,MAAM,CACjB,4BAA4B,EAC5B,2BAA2B,GAAG,6BAA6B,CAC5D;kCAC6B,CAAC,KAAK,EAAE;QACpC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;QAC7B,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,IAAI,CAAA;QAC5C,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAA;QACvC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAA;KAClC,KAAK,MAAM,CAAC,MAAM,CACjB,+BAA+B,EAC/B,2BAA2B,GAAG,6BAA6B,CAC5D;2BACsB,CAAC,KAAK,EAAE;QAC7B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAA;QACvC,QAAQ,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,CAAA;KACzC,KAAK,MAAM,CAAC,MAAM,CACjB,oBAAoB,EACpB,2BAA2B,GAAG,6BAA6B,CAC5D;kCAC6B,CAAC,KAAK,EAAE;QACpC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAA;KACxC,KAAK,MAAM,CAAC,MAAM,CACjB,6BAA6B,EAC7B,2BAA2B,GAAG,6BAA6B,CAC5D;uBACkB,CAAC,KAAK,EAAE;QACzB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;KAChC,KAAK,MAAM,CAAC,MAAM,CACjB,kBAAkB,EAClB,2BAA2B,GAAG,6BAA6B,CAC5D;;AArEH,2FAA2F;AAC3F,qBAAa,uBAAwB,SAAQ,4BAqEmB;CAAG;;qBAIhD,CAAC,KAAK,EAAE;QACvB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;QAC7B,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAA;QACvC,QAAQ,CAAC,OAAO,EAAE,uCAAuC,CAAA;QACzD,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;QACrB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;KAC9B,KAAK,MAAM,CAAC,MAAM,CACjB,0BAA0B,EAC1B,mBAAmB,GAAG,yBAAyB,GAAG,2BAA2B,GAAG,6BAA6B,CAC9G;kBACa,CAAC,KAAK,EAAE;QACpB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,UAAU,EAAE,4BAA4B,CAAA;KAClD,KAAK,MAAM,CAAC,MAAM,CACjB,0BAA0B,EAC1B,2BAA2B,GAAG,6BAA6B,CAC5D;mBACc,CAAC,KAAK,EAAE;QACrB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;QAC7B,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,IAAI,CAAA;QAC5C,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAA;KAC7D,KAAK,MAAM,CAAC,MAAM,CACjB,8BAA8B,EAC9B,2BAA2B,GAAG,6BAA6B,CAC5D;qBACgB,CAAC,KAAK,EAAE;QACvB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,UAAU,EAAE,4BAA4B,CAAA;QACjD,QAAQ,CAAC,OAAO,EAAE,uCAAuC,CAAA;QACzD,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;QACrB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;KAC9B,KAAK,MAAM,CAAC,MAAM,CACjB,0BAA0B,EAC1B,mBAAmB,GAAG,yBAAyB,GAAG,2BAA2B,GAAG,6BAA6B,CAC9G;oBACe,CAAC,KAAK,EAAE;QACtB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,UAAU,EAAE,4BAA4B,CAAA;QACjD,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;QACrB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;KAC9B,KAAK,MAAM,CAAC,MAAM,CACjB,uCAAuC,EACvC,mBAAmB,GAAG,yBAAyB,GAAG,2BAA2B,GAAG,6BAA6B,CAC9G;;AA/CH,iFAAiF;AACjF,qBAAa,2BAA4B,SAAQ,gCA+CmB;CAAG;;sBAOnD,CAAC,KAAK,EAAE;QACxB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;QAC7B,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAA;QAChC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;QAC5B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,mBAAmB,CAAC,CAAA;KACrD,KAAK,MAAM,CAAC,MAAM,CACjB,wBAAwB,EACxB,2BAA2B,GAAG,6BAA6B,CAC5D;;AAdH;;;GAGG;AACH,qBAAa,iBAAkB,SAAQ,sBAWmB;CAAG;;sBAOzC,CAAC,KAAK,EAAE;QACxB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;QAC7B,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAA;KAChD,KAAK,MAAM,CAAC,MAAM,CACjB,8BAA8B,EAC9B,2BAA2B,GAAG,6BAA6B,CAC5D;qBACgB,CAAC,KAAK,EAAE;QACvB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;QAC7B,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAA;QACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KACvB,KAAK,MAAM,CAAC,MAAM,CACjB,sBAAsB,EACtB,2BAA2B,GAAG,6BAA6B,CAC5D;;AArBH;;;GAGG;AACH,qBAAa,gBAAiB,SAAQ,qBAkBmB;CAAG;;mBAI3C,CAAC,KAAK,EAAE;QACrB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,SAAS,CAAA;KACxC,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,EAAE,6BAA6B,EAAE,KAAK,CAAC,KAAK,CAAC;;AALxG,gFAAgF;AAChF,qBAAa,UAAW,SAAQ,eAKmB;CAAG;AAEtD,2FAA2F;AAC3F,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IACxC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAA;CAC3C;;mBAIgB,CAAC,KAAK,EAAE;QACrB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;QACjC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAA;KAChC,KAAK,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,2BAA2B,GAAG,6BAA6B,CAAC;;AAL7F,kGAAkG;AAClG,qBAAa,UAAW,SAAQ,eAKmB;CAAG"}

package/dist/server/server/api/ControlCenterApiServer.d.ts

@@ -0,0 +1,11 @@
+import * as Layer from "effect/Layer";
+import { ServerLifecycle } from "../runtime/ServerLifecycle.js";
+/** Standalone middleware composition with an isolated accepting lifecycle. */
+export declare const controlCenterApiMiddlewareLayer: Layer.Layer<import("../../index.ts").SessionCookieAuth | import("../../index.ts").SessionMutationAuth, never, import("../index.ts").Auth | import("./ApiConfiguration.ts").ApiBindConfiguration>;
+/** Standalone handler composition with an isolated accepting lifecycle. */
+export declare const controlCenterApiHandlersLayer: Layer.Layer<import("effect/unstable/httpapi/HttpApiGroup").Service<"ControlCenterApi", "session"> | import("effect/unstable/httpapi/HttpApiGroup").Service<"ControlCenterApi", "shares"> | import("effect/unstable/httpapi/HttpApiGroup").Service<"ControlCenterApi", "plugins"> | import("effect/unstable/httpapi/HttpApiGroup").Service<"ControlCenterApi", "portfolio"> | import("effect/unstable/httpapi/HttpApiGroup").Service<"ControlCenterApi", "timeline"> | import("effect/unstable/httpapi/HttpApiGroup").Service<"ControlCenterApi", "deliveryGraph"> | import("effect/unstable/httpapi/HttpApiGroup").Service<"ControlCenterApi", "agent"> | import("effect/unstable/httpapi/HttpApiGroup").Service<"ControlCenterApi", "liveEvents"> | import("effect/unstable/httpapi/HttpApiGroup").Service<"ControlCenterApi", "media">, never, import("../index.ts").Auth | import("./ApiConfiguration.ts").ApiBindConfiguration | import("./ApplicationServices.ts").PluginAdministration | import("./ApplicationServices.ts").PortfolioSnapshots | import("./ApplicationServices.ts").TimelineReads | import("./ApplicationServices.ts").TimelineExportAudits | import("./ApplicationServices.ts").AuthorizedShares | import("./ApplicationServices.ts").DeliveryGraphInspection | import("./ApplicationServices.ts").RelationshipRepairProposals | import("./ApplicationServices.ts").ReleaseAgentTurns | import("./ApplicationServices.ts").ReleaseAgentJobs | import("./ApplicationServices.ts").LiveEvents | import("./ApplicationServices.ts").MediaReads | import("effect/unstable/http/HttpRouter").Request<"Requires", import("./ApiConfiguration.ts").ApiBindConfiguration>>;
+/** API routes requiring the process lifecycle supplied by the runnable server. */
+export declare const controlCenterApiLayerWithLifecycle: Layer.Layer<never, never, import("effect/FileSystem").FileSystem | import("effect/Path").Path | import("../index.ts").Auth | import("./ApiConfiguration.ts").ApiBindConfiguration | import("./ApplicationServices.ts").PluginAdministration | import("./ApplicationServices.ts").PortfolioSnapshots | import("./ApplicationServices.ts").TimelineReads | import("./ApplicationServices.ts").TimelineExportAudits | import("./ApplicationServices.ts").AuthorizedShares | import("./ApplicationServices.ts").DeliveryGraphInspection | import("./ApplicationServices.ts").RelationshipRepairProposals | import("./ApplicationServices.ts").ReleaseAgentTurns | import("./ApplicationServices.ts").ReleaseAgentJobs | import("./ApplicationServices.ts").LiveEvents | import("./ApplicationServices.ts").MediaReads | ServerLifecycle | import("effect/unstable/http/HttpRouter").Request<"Requires", import("./ApiConfiguration.ts").ApiBindConfiguration> | import("effect/unstable/http/Etag").Generator | import("effect/unstable/http/HttpRouter").HttpRouter | import("effect/unstable/http/HttpPlatform").HttpPlatform>;
+/** Routes for the browser-safe ControlCenterApi contract. */
+export declare const controlCenterApiLayer: Layer.Layer<never, never, import("effect/FileSystem").FileSystem | import("effect/Path").Path | import("../index.ts").Auth | import("./ApiConfiguration.ts").ApiBindConfiguration | import("./ApplicationServices.ts").PluginAdministration | import("./ApplicationServices.ts").PortfolioSnapshots | import("./ApplicationServices.ts").TimelineReads | import("./ApplicationServices.ts").TimelineExportAudits | import("./ApplicationServices.ts").AuthorizedShares | import("./ApplicationServices.ts").DeliveryGraphInspection | import("./ApplicationServices.ts").RelationshipRepairProposals | import("./ApplicationServices.ts").ReleaseAgentTurns | import("./ApplicationServices.ts").ReleaseAgentJobs | import("./ApplicationServices.ts").LiveEvents | import("./ApplicationServices.ts").MediaReads | import("effect/unstable/http/HttpRouter").Request<"Requires", import("./ApiConfiguration.ts").ApiBindConfiguration> | import("effect/unstable/http/Etag").Generator | import("effect/unstable/http/HttpRouter").HttpRouter | import("effect/unstable/http/HttpPlatform").HttpPlatform>;
+//# sourceMappingURL=ControlCenterApiServer.d.ts.map

package/dist/server/server/api/ControlCenterApiServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ControlCenterApiServer.d.ts","sourceRoot":"","sources":["../../../../src/server/api/ControlCenterApiServer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AAIrC,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAqB/D,8EAA8E;AAC9E,eAAO,MAAM,+BAA+B,kMAE3C,CAAA;AAkBD,2EAA2E;AAC3E,eAAO,MAAM,6BAA6B,2lDAEzC,CAAA;AAED,kFAAkF;AAClF,eAAO,MAAM,kCAAkC,8jCAE9C,CAAA;AAED,6DAA6D;AAC7D,eAAO,MAAM,qBAAqB,4iCAEjC,CAAA"}

package/dist/server/server/api/ErrorMapping.d.ts

@@ -0,0 +1,29 @@
+import * as Effect from "effect/Effect";
+import { ConflictApiError, ForbiddenApiError, InvalidRequestApiError, NotFoundApiError, PayloadTooLargeApiError, RateLimitedApiError, RequestTimedOutApiError, ServiceUnavailableApiError, UnauthorizedApiError } from "../../api/errors.js";
+import type { AuthCryptoError, AuthPermissionDeniedError, AuthPersistenceError, CredentialRejectedError } from "../auth/errors.js";
+import type { RequestSecurityError } from "../security/RequestSecurity.js";
+import type { ApplicationConflict, ApplicationInvalidRequest, ApplicationRateLimited, ApplicationResourceNotFound, ApplicationServiceUnavailable } from "./ApplicationServices.js";
+import type { RequestRateLimitExceeded, RequestRateLimitUnavailable, RequestTimeLimitExceeded } from "./RequestLimits.js";
+export declare const unauthorizedApiError: Effect.Effect<UnauthorizedApiError, never, never>;
+export declare const forbiddenApiError: Effect.Effect<ForbiddenApiError, never, never>;
+export declare const invalidRequestApiError: Effect.Effect<InvalidRequestApiError, never, never>;
+/** Public capacity response for an authenticated live stream rejected before subscription. */
+export declare const liveStreamCapacityApiError: Effect.Effect<RateLimitedApiError, never, never>;
+export declare const serviceUnavailableApiError: (retryAt?: ApplicationServiceUnavailable["retryAt"]) => Effect.Effect<ServiceUnavailableApiError, never, never>;
+export declare const notFoundApiError: Effect.Effect<NotFoundApiError, never, never>;
+export declare const payloadTooLargeApiError: (maximumBytes: number) => Effect.Effect<PayloadTooLargeApiError, never, never>;
+export declare const mapAuthenticationFailures: <A, R>(effect: Effect.Effect<A, AuthCryptoError | AuthPermissionDeniedError | AuthPersistenceError | CredentialRejectedError, R>) => Effect.Effect<A, UnauthorizedApiError | ForbiddenApiError | ServiceUnavailableApiError, R>;
+export declare const mapCredentialAuthenticationFailures: <A, R>(effect: Effect.Effect<A, AuthCryptoError | AuthPersistenceError | CredentialRejectedError, R>) => Effect.Effect<A, UnauthorizedApiError | ServiceUnavailableApiError, R>;
+/** Map centralized transport-policy failures without exposing allow-list details. */
+export declare const mapPairingSecurityFailure: (_error: RequestSecurityError) => Effect.Effect<never, InvalidRequestApiError, never>;
+export declare const mapReadSecurityFailure: (_error: RequestSecurityError) => Effect.Effect<never, ForbiddenApiError, never>;
+export declare const mapMutationSecurityFailure: (error: RequestSecurityError) => Effect.Effect<never, ForbiddenApiError | InvalidRequestApiError>;
+export declare const mapApplicationUnavailable: (error: ApplicationServiceUnavailable) => Effect.Effect<never, ServiceUnavailableApiError, never>;
+export declare const mapApplicationNotFound: (_error: ApplicationResourceNotFound) => Effect.Effect<never, NotFoundApiError, never>;
+export declare const mapApplicationRateLimited: (error: ApplicationRateLimited) => Effect.Effect<never, RateLimitedApiError, never>;
+export declare const mapApplicationConflict: (_error: ApplicationConflict) => Effect.Effect<never, ConflictApiError, never>;
+export declare const mapApplicationInvalidRequest: (_error: ApplicationInvalidRequest) => Effect.Effect<never, InvalidRequestApiError, never>;
+export declare const mapRequestRateLimitFailure: (_error: RequestRateLimitExceeded) => Effect.Effect<never, RateLimitedApiError, never>;
+export declare const mapRequestRateLimitUnavailable: (_error: RequestRateLimitUnavailable) => Effect.Effect<never, ServiceUnavailableApiError, never>;
+export declare const mapRequestTimeLimitFailure: (_error: RequestTimeLimitExceeded) => Effect.Effect<never, RequestTimedOutApiError, never>;
+//# sourceMappingURL=ErrorMapping.d.ts.map

package/dist/server/server/api/ErrorMapping.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ErrorMapping.d.ts","sourceRoot":"","sources":["../../../../src/server/api/ErrorMapping.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAGvC,OAAO,EACL,gBAAgB,EAEhB,iBAAiB,EACjB,sBAAsB,EACtB,gBAAgB,EAChB,uBAAuB,EACvB,mBAAmB,EACnB,uBAAuB,EACvB,0BAA0B,EAC1B,oBAAoB,EACrB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EACV,eAAe,EACf,yBAAyB,EACzB,oBAAoB,EACpB,uBAAuB,EACxB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAA;AAC1E,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EACzB,sBAAsB,EACtB,2BAA2B,EAC3B,6BAA6B,EAC9B,MAAM,0BAA0B,CAAA;AAEjC,OAAO,KAAK,EACV,wBAAwB,EACxB,2BAA2B,EAC3B,wBAAwB,EACzB,MAAM,oBAAoB,CAAA;AAW3B,eAAO,MAAM,oBAAoB,mDAMhC,CAAA;AAED,eAAO,MAAM,iBAAiB,gDAM7B,CAAA;AAED,eAAO,MAAM,sBAAsB,qDAMlC,CAAA;AAED,8FAA8F;AAC9F,eAAO,MAAM,0BAA0B,kDAOtC,CAAA;AAED,eAAO,MAAM,0BAA0B,GACrC,UAAS,6BAA6B,CAAC,SAAS,CAAQ,4DASvD,CAAA;AAEH,eAAO,MAAM,gBAAgB,+CAM5B,CAAA;AAED,eAAO,MAAM,uBAAuB,GAAI,cAAc,MAAM,yDAOzD,CAAA;AAEH,eAAO,MAAM,yBAAyB,GAAI,CAAC,EAAE,CAAC,EAC5C,QAAQ,MAAM,CAAC,MAAM,CACnB,CAAC,EACD,eAAe,GAAG,yBAAyB,GAAG,oBAAoB,GAAG,uBAAuB,EAC5F,CAAC,CACF,+FASA,CAAA;AAEH,eAAO,MAAM,mCAAmC,GAAI,CAAC,EAAE,CAAC,EACtD,QAAQ,MAAM,CAAC,MAAM,CACnB,CAAC,EACD,eAAe,GAAG,oBAAoB,GAAG,uBAAuB,EAChE,CAAC,CACF,2EAQA,CAAA;AAEH,qFAAqF;AACrF,eAAO,MAAM,yBAAyB,GAAI,QAAQ,oBAAoB,wDACjB,CAAA;AAErD,eAAO,MAAM,sBAAsB,GAAI,QAAQ,oBAAoB,mDAAmD,CAAA;AAEtH,eAAO,MAAM,0BAA0B,GACrC,OAAO,oBAAoB,KAC1B,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,iBAAiB,GAAG,sBAAsB,CAGd,CAAA;AAEpD,eAAO,MAAM,yBAAyB,GAAI,OAAO,6BAA6B,4DACN,CAAA;AAExE,eAAO,MAAM,sBAAsB,GAAI,QAAQ,2BAA2B,kDAC3B,CAAA;AAE/C,eAAO,MAAM,yBAAyB,GAAI,OAAO,sBAAsB,qDAWpE,CAAA;AAEH,eAAO,MAAM,sBAAsB,GAAI,QAAQ,mBAAmB,kDAU/D,CAAA;AAEH,eAAO,MAAM,4BAA4B,GAAI,QAAQ,yBAAyB,wDACzB,CAAA;AAErD,eAAO,MAAM,0BAA0B,GAAI,QAAQ,wBAAwB,qDAWxE,CAAA;AAEH,eAAO,MAAM,8BAA8B,GAAI,QAAQ,2BAA2B,4DACvB,CAAA;AAE3D,eAAO,MAAM,0BAA0B,GAAI,QAAQ,wBAAwB,yDAUxE,CAAA"}

package/dist/server/server/api/Handlers.d.ts

@@ -0,0 +1,24 @@
+import { Auth } from "../auth/Auth.js";
+import { ServerLifecycle } from "../runtime/ServerLifecycle.js";
+import { ApiBindConfiguration } from "./ApiConfiguration.js";
+import { AuthorizedShares, DeliveryGraphInspection, LiveEvents, MediaReads, PluginAdministration, PortfolioSnapshots, RelationshipRepairProposals, ReleaseAgentJobs, ReleaseAgentTurns, TimelineExportAudits, TimelineReads } from "./ApplicationServices.js";
+import { LiveStreamAdmission } from "./LiveStreamAdmission.js";
+/** Session pairing, inspection, administration, and logout handlers. */
+export declare const sessionHandlersLayer: import("effect/Layer").Layer<import("effect/unstable/httpapi/HttpApiGroup").Service<"ControlCenterApi", "session">, never, import("../../api/session.js").SessionCookieAuth | import("../../api/session.js").SessionMutationAuth | Auth | ApiBindConfiguration | ServerLifecycle | import("effect/unstable/http/HttpRouter").Request<"Requires", ApiBindConfiguration>>;
+/** Exact-scope authenticated entity-share handlers. */
+export declare const shareHandlersLayer: import("effect/Layer").Layer<import("effect/unstable/httpapi/HttpApiGroup").Service<"ControlCenterApi", "shares">, never, import("../../api/session.js").SessionCookieAuth | import("../../api/session.js").SessionMutationAuth | AuthorizedShares>;
+/** Secret-free plugin list, health, and configuration metadata handlers. */
+export declare const pluginHandlersLayer: import("effect/Layer").Layer<import("effect/unstable/httpapi/HttpApiGroup").Service<"ControlCenterApi", "plugins">, never, import("../../api/session.js").SessionCookieAuth | import("../../api/session.js").SessionMutationAuth | PluginAdministration>;
+/** Authenticated bird's-eye portfolio snapshot handler. */
+export declare const portfolioHandlersLayer: import("effect/Layer").Layer<import("effect/unstable/httpapi/HttpApiGroup").Service<"ControlCenterApi", "portfolio">, never, import("../../api/session.js").SessionCookieAuth | PortfolioSnapshots>;
+/** Authenticated, default-redacted durable activity Timeline handler. */
+export declare const timelineHandlersLayer: import("effect/Layer").Layer<import("effect/unstable/httpapi/HttpApiGroup").Service<"ControlCenterApi", "timeline">, never, import("../../api/session.js").SessionCookieAuth | TimelineReads | TimelineExportAudits>;
+/** Authenticated workspace-scoped delivery relationship and evidence handlers. */
+export declare const deliveryGraphHandlersLayer: import("effect/Layer").Layer<import("effect/unstable/httpapi/HttpApiGroup").Service<"ControlCenterApi", "deliveryGraph">, never, DeliveryGraphInspection | RelationshipRepairProposals | (import("../../api/session.js").SessionCookieAuth | import("../../api/session.js").SessionMutationAuth)>;
+/** Authenticated, workspace-scoped local model turn for one exact release. */
+export declare const agentHandlersLayer: import("effect/Layer").Layer<import("effect/unstable/httpapi/HttpApiGroup").Service<"ControlCenterApi", "agent">, never, import("../../api/session.js").SessionCookieAuth | import("../../api/session.js").SessionMutationAuth | ReleaseAgentTurns | ReleaseAgentJobs>;
+/** Authenticated durable event replay with bounded wakeups and periodic session revalidation. */
+export declare const liveEventHandlersLayer: import("effect/Layer").Layer<import("effect/unstable/httpapi/HttpApiGroup").Service<"ControlCenterApi", "liveEvents">, never, import("../../api/session.js").SessionCookieAuth | Auth | LiveEvents | ServerLifecycle | LiveStreamAdmission>;
+/** Authenticated opaque media handler with no-store and nosniff response policy. */
+export declare const mediaHandlersLayer: import("effect/Layer").Layer<import("effect/unstable/httpapi/HttpApiGroup").Service<"ControlCenterApi", "media">, never, import("../../api/session.js").SessionCookieAuth | MediaReads>;
+//# sourceMappingURL=Handlers.d.ts.map

package/dist/server/server/api/Handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Handlers.d.ts","sourceRoot":"","sources":["../../../../src/server/api/Handlers.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAA;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAE/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AAE5D,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,UAAU,EACV,UAAU,EACV,oBAAoB,EACpB,kBAAkB,EAClB,2BAA2B,EAC3B,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,aAAa,EACd,MAAM,0BAA0B,CAAA;AAejC,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AA+E9D,wEAAwE;AACxE,eAAO,MAAM,oBAAoB,yWA4DhC,CAAA;AAED,uDAAuD;AACvD,eAAO,MAAM,kBAAkB,qPA+D9B,CAAA;AAED,4EAA4E;AAC5E,eAAO,MAAM,mBAAmB,0PAkT/B,CAAA;AAED,2DAA2D;AAC3D,eAAO,MAAM,sBAAsB,qMAelC,CAAA;AAED,yEAAyE;AACzE,eAAO,MAAM,qBAAqB,sNA8EjC,CAAA;AAED,kFAAkF;AAClF,eAAO,MAAM,0BAA0B,mSA2MtC,CAAA;AAED,8EAA8E;AAC9E,eAAO,MAAM,kBAAkB,wQAuD9B,CAAA;AAED,iGAAiG;AACjG,eAAO,MAAM,sBAAsB,6OA8ClC,CAAA;AAOD,oFAAoF;AACpF,eAAO,MAAM,kBAAkB,yLA+B9B,CAAA"}

package/dist/server/server/api/LiveStreamAdmission.d.ts

@@ -0,0 +1,34 @@
+import * as Context from "effect/Context";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import * as Schema from "effect/Schema";
+import type * as Scope from "effect/Scope";
+import type { SessionId } from "../../api/session.js";
+/** Default maximum number of live streams retained by one server process. */
+export declare const DEFAULT_MAXIMUM_LIVE_STREAMS = 128;
+/** Default maximum number of live streams retained by one browser session. */
+export declare const DEFAULT_MAXIMUM_LIVE_STREAMS_PER_SESSION = 4;
+declare const LiveStreamAdmissionExceeded_base: Schema.Class<LiveStreamAdmissionExceeded, Schema.TaggedStruct<"LiveStreamAdmissionExceeded", {
+    readonly scope: Schema.Literals<readonly ["process", "session"]>;
+}>, import("effect/Cause").YieldableError>;
+/** Internal live-stream capacity was exhausted before subscription acquisition. */
+export declare class LiveStreamAdmissionExceeded extends LiveStreamAdmissionExceeded_base {
+}
+/** Fixed process-local admission limits for authenticated live streams. */
+export interface LiveStreamAdmissionLimits {
+    readonly maximumActiveStreams: number;
+    readonly maximumActiveStreamsPerSession: number;
+}
+interface LiveStreamAdmissionService {
+    readonly acquire: (sessionId: SessionId) => Effect.Effect<void, LiveStreamAdmissionExceeded, Scope.Scope>;
+}
+declare const LiveStreamAdmission_base: Context.ServiceClass<LiveStreamAdmission, "@knpkv/control-center/server/api/LiveStreamAdmission", LiveStreamAdmissionService>;
+/** Scoped process-local admission boundary for authenticated live streams. */
+export declare class LiveStreamAdmission extends LiveStreamAdmission_base {
+    /** Default runtime layer with both process-wide and per-session limits. */
+    static readonly layer: Layer.Layer<LiveStreamAdmission, never, never>;
+    /** Construct a deterministic admission layer for lifecycle and capacity tests. */
+    static layerWith(limits: LiveStreamAdmissionLimits): Layer.Layer<LiveStreamAdmission>;
+}
+export {};
+//# sourceMappingURL=LiveStreamAdmission.d.ts.map

package/dist/server/server/api/LiveStreamAdmission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LiveStreamAdmission.d.ts","sourceRoot":"","sources":["../../../../src/server/api/LiveStreamAdmission.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAA;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AAGrC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,KAAK,KAAK,MAAM,cAAc,CAAA;AAE1C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAErD,6EAA6E;AAC7E,eAAO,MAAM,4BAA4B,MAAM,CAAA;AAE/C,8EAA8E;AAC9E,eAAO,MAAM,wCAAwC,IAAI,CAAA;;;;AAEzD,mFAAmF;AACnF,qBAAa,2BAA4B,SAAQ,gCAGhD;CAAG;AAEJ,2EAA2E;AAC3E,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAA;IACrC,QAAQ,CAAC,8BAA8B,EAAE,MAAM,CAAA;CAChD;AASD,UAAU,0BAA0B;IAClC,QAAQ,CAAC,OAAO,EAAE,CAChB,SAAS,EAAE,SAAS,KACjB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,2BAA2B,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;CACnE;;AA6DD,8EAA8E;AAC9E,qBAAa,mBAAoB,SAAQ,wBAGkB;IACzD,2EAA2E;IAC3E,MAAM,CAAC,QAAQ,CAAC,KAAK,iDAA4E;IAEjG,kFAAkF;IAClF,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,yBAAyB,GAAG,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC;CAGtF"}

package/dist/server/server/api/RequestBoundary.d.ts

@@ -0,0 +1,17 @@
+import * as Crypto from "effect/Crypto";
+import * as HttpRouter from "effect/unstable/http/HttpRouter";
+import * as RateLimiter from "effect/unstable/persistence/RateLimiter";
+import { ApiBindConfiguration } from "./ApiConfiguration.js";
+import { RequestLimitPolicy } from "./RequestLimits.js";
+/**
+ * Select the rate-limit identity at the last trusted hop. The forwarding header
+ * must contain exactly one IP because a configured proxy is required to
+ * overwrite, rather than append to, `X-Forwarded-For`.
+ */
+export declare const clientRateLimitKey: (trustedProxyAddresses: ReadonlyArray<string>, immediatePeer: string | null, forwardedFor: string | undefined) => string;
+/**
+ * Global boundary: correlation and browser headers everywhere, plus body policy,
+ * rate budgets, bounded execution, and typed failures only under `/api`.
+ */
+export declare const requestBoundaryLayer: import("effect/Layer").Layer<never, never, Crypto.Crypto | ApiBindConfiguration | RequestLimitPolicy | RateLimiter.RateLimiter | HttpRouter.HttpRouter | HttpRouter.Request<"GlobalError", import("./RequestContext.js").RequestContextUnavailable>>;
+//# sourceMappingURL=RequestBoundary.d.ts.map

package/dist/server/server/api/RequestBoundary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RequestBoundary.d.ts","sourceRoot":"","sources":["../../../../src/server/api/RequestBoundary.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAMvC,OAAO,KAAK,UAAU,MAAM,iCAAiC,CAAA;AAI7D,OAAO,KAAK,WAAW,MAAM,yCAAyC,CAAA;AAWtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AAU5D,OAAO,EAEL,kBAAkB,EAInB,MAAM,oBAAoB,CAAA;AAyC3B;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,GAC7B,uBAAuB,aAAa,CAAC,MAAM,CAAC,EAC5C,eAAe,MAAM,GAAG,IAAI,EAC5B,cAAc,MAAM,GAAG,SAAS,KAC/B,MAQF,CAAA;AAiED;;;GAGG;AACH,eAAO,MAAM,oBAAoB,sPAsEhC,CAAA"}

package/dist/server/server/api/RequestContext.d.ts

@@ -0,0 +1,38 @@
+import * as Context from "effect/Context";
+import * as Crypto from "effect/Crypto";
+import * as DateTime from "effect/DateTime";
+import * as Effect from "effect/Effect";
+import * as Schema from "effect/Schema";
+import * as HttpServerRequest from "effect/unstable/http/HttpServerRequest";
+import type { CorrelationId as CorrelationIdType } from "../../api/errors.js";
+import type { UtcTimestamp } from "../../domain/utcTimestamp.js";
+/** Request-scoped, secret-free metadata safe for structured logs. */
+export interface CurrentRequestContextValue {
+    readonly correlationId: CorrelationIdType;
+    readonly method: string;
+    readonly remoteAddress: string | null;
+    readonly startedAt: UtcTimestamp;
+    readonly url: string;
+}
+declare const CurrentRequestContext_base: Context.ServiceClass<CurrentRequestContext, "@knpkv/control-center/server/api/CurrentRequestContext", CurrentRequestContextValue>;
+/** Request-scoped metadata shared by API middleware and handlers. */
+export declare class CurrentRequestContext extends CurrentRequestContext_base {
+}
+declare const RequestContextUnavailable_base: Schema.Class<RequestContextUnavailable, Schema.TaggedStruct<"RequestContextUnavailable", {}>, import("effect/Cause").YieldableError>;
+/** Correlation ID generation failed before a request context could be established. */
+export declare class RequestContextUnavailable extends RequestContextUnavailable_base {
+}
+/** Build validated metadata for the current HTTP request. */
+export declare const makeCurrentRequestContext: () => Effect.Effect<{
+    correlationId: string & import("effect/Brand").Brand<"CorrelationId">;
+    method: import("effect/unstable/http/HttpMethod").HttpMethod;
+    remoteAddress: string | null;
+    startedAt: DateTime.Utc;
+    url: string;
+}, RequestContextUnavailable, Crypto.Crypto | HttpServerRequest.HttpServerRequest>;
+/** Attach the current correlation ID to successes and failures before sending. */
+export declare const withCorrelationResponse: <A, E, R>(effect: Effect.Effect<A, E, R>, correlationId: CorrelationIdType) => Effect.Effect<A, E, R | HttpServerRequest.HttpServerRequest>;
+/** Provide request metadata to an inner API operation and annotate its logs. */
+export declare const provideCurrentRequest: <A, E, R>(effect: Effect.Effect<A, E, R>, context: CurrentRequestContextValue) => Effect.Effect<A, E, Exclude<R, CurrentRequestContext>>;
+export {};
+//# sourceMappingURL=RequestContext.d.ts.map

package/dist/server/server/api/RequestContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RequestContext.d.ts","sourceRoot":"","sources":["../../../../src/server/api/RequestContext.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAA;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAA;AAC3C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAGvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,KAAK,iBAAiB,MAAM,wCAAwC,CAAA;AAI3E,OAAO,KAAK,EAAE,aAAa,IAAI,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAC7E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAA;AAEhE,qEAAqE;AACrE,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,aAAa,EAAE,iBAAiB,CAAA;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAA;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB;;AAED,qEAAqE;AACrE,qBAAa,qBAAsB,SAAQ,0BAGkB;CAAG;;AAEhE,sFAAsF;AACtF,qBAAa,yBAA0B,SAAQ,8BAG9C;CAAG;AAOJ,6DAA6D;AAC7D,eAAO,MAAM,yBAAyB;;;;;;kFAgBpC,CAAA;AAEF,kFAAkF;AAClF,eAAO,MAAM,uBAAuB,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAC7C,QAAQ,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAC9B,eAAe,iBAAiB,KAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,iBAAiB,CAAC,iBAAiB,CAI3D,CAAA;AAEH,gFAAgF;AAChF,eAAO,MAAM,qBAAqB,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAC3C,QAAQ,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAC9B,SAAS,0BAA0B,KAClC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAQrD,CAAA"}