@kortix/sdk 0.10.15 → 0.11.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (285) hide show
  1. package/README.md +17 -2
  2. package/dist/browser/session-sync/session-sync-registry.d.ts +3 -0
  3. package/dist/browser/session-sync/session-sync-registry.d.ts.map +1 -1
  4. package/dist/browser/session-sync/session-sync-registry.js +31 -2
  5. package/dist/browser/session-sync/session-sync-registry.js.map +1 -1
  6. package/dist/core/acp/client.d.ts +45 -0
  7. package/dist/core/acp/client.d.ts.map +1 -0
  8. package/dist/core/acp/client.js +277 -0
  9. package/dist/core/acp/client.js.map +1 -0
  10. package/dist/core/acp/index.d.ts +5 -0
  11. package/dist/core/acp/index.d.ts.map +1 -0
  12. package/dist/core/acp/index.js +5 -0
  13. package/dist/core/acp/index.js.map +1 -0
  14. package/dist/core/acp/projection.d.ts +23 -0
  15. package/dist/core/acp/projection.d.ts.map +1 -0
  16. package/dist/core/acp/projection.js +603 -0
  17. package/dist/core/acp/projection.js.map +1 -0
  18. package/dist/core/acp/session-controller.d.ts +90 -0
  19. package/dist/core/acp/session-controller.d.ts.map +1 -0
  20. package/dist/core/acp/session-controller.js +530 -0
  21. package/dist/core/acp/session-controller.js.map +1 -0
  22. package/dist/core/acp/types.d.ts +66 -0
  23. package/dist/core/acp/types.d.ts.map +1 -0
  24. package/dist/core/acp/types.js +21 -0
  25. package/dist/core/acp/types.js.map +1 -0
  26. package/dist/core/client/kortix.d.ts +141 -14
  27. package/dist/core/client/kortix.d.ts.map +1 -1
  28. package/dist/core/client/kortix.js +40 -7
  29. package/dist/core/client/kortix.js.map +1 -1
  30. package/dist/core/http/api-client.d.ts.map +1 -1
  31. package/dist/core/http/api-client.js +48 -68
  32. package/dist/core/http/api-client.js.map +1 -1
  33. package/dist/core/rest/platform-client/host-boundary.d.ts +114 -0
  34. package/dist/core/rest/platform-client/host-boundary.d.ts.map +1 -0
  35. package/dist/core/rest/platform-client/host-boundary.js +229 -0
  36. package/dist/core/rest/platform-client/host-boundary.js.map +1 -0
  37. package/dist/core/rest/platform-client/index.d.ts +1 -0
  38. package/dist/core/rest/platform-client/index.d.ts.map +1 -1
  39. package/dist/core/rest/platform-client/index.js +1 -0
  40. package/dist/core/rest/platform-client/index.js.map +1 -1
  41. package/dist/core/rest/projects-client/account-lifecycle.d.ts +22 -0
  42. package/dist/core/rest/projects-client/account-lifecycle.d.ts.map +1 -0
  43. package/dist/core/rest/projects-client/account-lifecycle.js +26 -0
  44. package/dist/core/rest/projects-client/account-lifecycle.js.map +1 -0
  45. package/dist/core/rest/projects-client/admin-providers.d.ts +10 -0
  46. package/dist/core/rest/projects-client/admin-providers.d.ts.map +1 -0
  47. package/dist/core/rest/projects-client/admin-providers.js +34 -0
  48. package/dist/core/rest/projects-client/admin-providers.js.map +1 -0
  49. package/dist/core/rest/projects-client/agent-config.d.ts +7 -0
  50. package/dist/core/rest/projects-client/agent-config.d.ts.map +1 -1
  51. package/dist/core/rest/projects-client/agent-config.js.map +1 -1
  52. package/dist/core/rest/projects-client/billing.d.ts +89 -0
  53. package/dist/core/rest/projects-client/billing.d.ts.map +1 -1
  54. package/dist/core/rest/projects-client/billing.js +43 -0
  55. package/dist/core/rest/projects-client/billing.js.map +1 -1
  56. package/dist/core/rest/projects-client/channels.d.ts +8 -27
  57. package/dist/core/rest/projects-client/channels.d.ts.map +1 -1
  58. package/dist/core/rest/projects-client/channels.js +12 -23
  59. package/dist/core/rest/projects-client/channels.js.map +1 -1
  60. package/dist/core/rest/projects-client/connectors.d.ts +162 -13
  61. package/dist/core/rest/projects-client/connectors.d.ts.map +1 -1
  62. package/dist/core/rest/projects-client/connectors.js +64 -2
  63. package/dist/core/rest/projects-client/connectors.js.map +1 -1
  64. package/dist/core/rest/projects-client/gateway.d.ts +1 -0
  65. package/dist/core/rest/projects-client/gateway.d.ts.map +1 -1
  66. package/dist/core/rest/projects-client/gateway.js.map +1 -1
  67. package/dist/core/rest/projects-client/iam.d.ts +492 -0
  68. package/dist/core/rest/projects-client/iam.d.ts.map +1 -0
  69. package/dist/core/rest/projects-client/iam.js +287 -0
  70. package/dist/core/rest/projects-client/iam.js.map +1 -0
  71. package/dist/core/rest/projects-client/index.d.ts +6 -0
  72. package/dist/core/rest/projects-client/index.d.ts.map +1 -1
  73. package/dist/core/rest/projects-client/index.js +6 -0
  74. package/dist/core/rest/projects-client/index.js.map +1 -1
  75. package/dist/core/rest/projects-client/marketplace-catalog.d.ts +9 -2
  76. package/dist/core/rest/projects-client/marketplace-catalog.d.ts.map +1 -1
  77. package/dist/core/rest/projects-client/marketplace-catalog.js +7 -0
  78. package/dist/core/rest/projects-client/marketplace-catalog.js.map +1 -1
  79. package/dist/core/rest/projects-client/presentations.d.ts +12 -0
  80. package/dist/core/rest/projects-client/presentations.d.ts.map +1 -0
  81. package/dist/core/rest/projects-client/presentations.js +9 -0
  82. package/dist/core/rest/projects-client/presentations.js.map +1 -0
  83. package/dist/core/rest/projects-client/projects.d.ts +55 -10
  84. package/dist/core/rest/projects-client/projects.d.ts.map +1 -1
  85. package/dist/core/rest/projects-client/projects.js +14 -7
  86. package/dist/core/rest/projects-client/projects.js.map +1 -1
  87. package/dist/core/rest/projects-client/public-voice-join.d.ts +59 -0
  88. package/dist/core/rest/projects-client/public-voice-join.d.ts.map +1 -0
  89. package/dist/core/rest/projects-client/public-voice-join.js +64 -0
  90. package/dist/core/rest/projects-client/public-voice-join.js.map +1 -0
  91. package/dist/core/rest/projects-client/referrals.d.ts +53 -0
  92. package/dist/core/rest/projects-client/referrals.d.ts.map +1 -0
  93. package/dist/core/rest/projects-client/referrals.js +27 -0
  94. package/dist/core/rest/projects-client/referrals.js.map +1 -0
  95. package/dist/core/rest/projects-client/session-sandbox.d.ts +2 -0
  96. package/dist/core/rest/projects-client/session-sandbox.d.ts.map +1 -1
  97. package/dist/core/rest/projects-client/session-sandbox.js +10 -0
  98. package/dist/core/rest/projects-client/session-sandbox.js.map +1 -1
  99. package/dist/core/rest/projects-client/sessions.d.ts +89 -0
  100. package/dist/core/rest/projects-client/sessions.d.ts.map +1 -1
  101. package/dist/core/rest/projects-client/sessions.js +49 -1
  102. package/dist/core/rest/projects-client/sessions.js.map +1 -1
  103. package/dist/core/session/index.d.ts +2 -0
  104. package/dist/core/session/index.d.ts.map +1 -1
  105. package/dist/core/session/index.js +2 -0
  106. package/dist/core/session/index.js.map +1 -1
  107. package/dist/core/session/presentation.d.ts +12 -0
  108. package/dist/core/session/presentation.d.ts.map +1 -0
  109. package/dist/core/session/presentation.js +70 -0
  110. package/dist/core/session/presentation.js.map +1 -0
  111. package/dist/core/session/rewind.d.ts +18 -0
  112. package/dist/core/session/rewind.d.ts.map +1 -0
  113. package/dist/core/session/rewind.js +17 -0
  114. package/dist/core/session/rewind.js.map +1 -0
  115. package/dist/core/session/runtime-transport.d.ts +16 -0
  116. package/dist/core/session/runtime-transport.d.ts.map +1 -0
  117. package/dist/core/session/runtime-transport.js +30 -0
  118. package/dist/core/session/runtime-transport.js.map +1 -0
  119. package/dist/core/session/url.d.ts +43 -0
  120. package/dist/core/session/url.d.ts.map +1 -1
  121. package/dist/core/session/url.js +81 -0
  122. package/dist/core/session/url.js.map +1 -1
  123. package/dist/core/session-sync/session-sync-controller.d.ts +28 -0
  124. package/dist/core/session-sync/session-sync-controller.d.ts.map +1 -1
  125. package/dist/core/session-sync/session-sync-controller.js +127 -4
  126. package/dist/core/session-sync/session-sync-controller.js.map +1 -1
  127. package/dist/core/stream/fetch-sse.d.ts +23 -0
  128. package/dist/core/stream/fetch-sse.d.ts.map +1 -0
  129. package/dist/core/stream/fetch-sse.js +119 -0
  130. package/dist/core/stream/fetch-sse.js.map +1 -0
  131. package/dist/core/turns/state.d.ts.map +1 -1
  132. package/dist/core/turns/state.js +11 -4
  133. package/dist/core/turns/state.js.map +1 -1
  134. package/dist/core/turns/types.d.ts +6 -0
  135. package/dist/core/turns/types.d.ts.map +1 -1
  136. package/dist/index.d.ts +6 -1
  137. package/dist/index.d.ts.map +1 -1
  138. package/dist/index.js +6 -1
  139. package/dist/index.js.map +1 -1
  140. package/dist/kortix.esm.min.js +24 -16
  141. package/dist/kortix.global.js +24 -16
  142. package/dist/node/server.d.ts +14 -0
  143. package/dist/node/server.d.ts.map +1 -1
  144. package/dist/node/server.js +42 -0
  145. package/dist/node/server.js.map +1 -1
  146. package/dist/platform/auth-core.d.ts +3 -5
  147. package/dist/platform/auth-core.d.ts.map +1 -1
  148. package/dist/platform/auth-core.js +4 -6
  149. package/dist/platform/auth-core.js.map +1 -1
  150. package/dist/react/agent-selection-scope.d.ts +8 -0
  151. package/dist/react/agent-selection-scope.d.ts.map +1 -0
  152. package/dist/react/agent-selection-scope.js +4 -0
  153. package/dist/react/agent-selection-scope.js.map +1 -0
  154. package/dist/react/index.d.ts +13 -0
  155. package/dist/react/index.d.ts.map +1 -1
  156. package/dist/react/index.js +13 -0
  157. package/dist/react/index.js.map +1 -1
  158. package/dist/react/initial-session-pin.d.ts +8 -0
  159. package/dist/react/initial-session-pin.d.ts.map +1 -0
  160. package/dist/react/initial-session-pin.js +4 -0
  161. package/dist/react/initial-session-pin.js.map +1 -0
  162. package/dist/react/opencode.d.ts +25 -2
  163. package/dist/react/opencode.d.ts.map +1 -1
  164. package/dist/react/opencode.js +24 -1
  165. package/dist/react/opencode.js.map +1 -1
  166. package/dist/react/provider-selection.d.ts +1 -0
  167. package/dist/react/provider-selection.d.ts.map +1 -1
  168. package/dist/react/provider-selection.js +22 -0
  169. package/dist/react/provider-selection.js.map +1 -1
  170. package/dist/react/run-pty-command.d.ts +5 -0
  171. package/dist/react/run-pty-command.d.ts.map +1 -0
  172. package/dist/react/run-pty-command.js +42 -0
  173. package/dist/react/run-pty-command.js.map +1 -0
  174. package/dist/react/runtime-actions.d.ts +51 -0
  175. package/dist/react/runtime-actions.d.ts.map +1 -0
  176. package/dist/react/runtime-actions.js +105 -0
  177. package/dist/react/runtime-actions.js.map +1 -0
  178. package/dist/react/session-agent-name-guard.d.ts +16 -0
  179. package/dist/react/session-agent-name-guard.d.ts.map +1 -0
  180. package/dist/react/session-agent-name-guard.js +22 -0
  181. package/dist/react/session-agent-name-guard.js.map +1 -0
  182. package/dist/react/session-busy.d.ts +8 -0
  183. package/dist/react/session-busy.d.ts.map +1 -0
  184. package/dist/react/session-busy.js +4 -0
  185. package/dist/react/session-busy.js.map +1 -0
  186. package/dist/react/session-title-sync.d.ts +19 -0
  187. package/dist/react/session-title-sync.d.ts.map +1 -0
  188. package/dist/react/session-title-sync.js +81 -0
  189. package/dist/react/session-title-sync.js.map +1 -0
  190. package/dist/react/use-acp-session-runtime.d.ts +34 -0
  191. package/dist/react/use-acp-session-runtime.d.ts.map +1 -0
  192. package/dist/react/use-acp-session-runtime.js +84 -0
  193. package/dist/react/use-acp-session-runtime.js.map +1 -0
  194. package/dist/react/use-admin-accounts.d.ts +122 -0
  195. package/dist/react/use-admin-accounts.d.ts.map +1 -0
  196. package/dist/react/use-admin-accounts.js +146 -0
  197. package/dist/react/use-admin-accounts.js.map +1 -0
  198. package/dist/react/use-admin-analytics.d.ts +332 -0
  199. package/dist/react/use-admin-analytics.d.ts.map +1 -0
  200. package/dist/react/use-admin-analytics.js +518 -0
  201. package/dist/react/use-admin-analytics.js.map +1 -0
  202. package/dist/react/use-admin-billing.d.ts +27 -0
  203. package/dist/react/use-admin-billing.d.ts.map +1 -0
  204. package/dist/react/use-admin-billing.js +61 -0
  205. package/dist/react/use-admin-billing.js.map +1 -0
  206. package/dist/react/use-admin-feedback.d.ts +119 -0
  207. package/dist/react/use-admin-feedback.d.ts.map +1 -0
  208. package/dist/react/use-admin-feedback.js +148 -0
  209. package/dist/react/use-admin-feedback.js.map +1 -0
  210. package/dist/react/use-admin-sandboxes.d.ts +157 -0
  211. package/dist/react/use-admin-sandboxes.d.ts.map +1 -0
  212. package/dist/react/use-admin-sandboxes.js +145 -0
  213. package/dist/react/use-admin-sandboxes.js.map +1 -0
  214. package/dist/react/use-admin-users.d.ts +98 -0
  215. package/dist/react/use-admin-users.d.ts.map +1 -0
  216. package/dist/react/use-admin-users.js +121 -0
  217. package/dist/react/use-admin-users.js.map +1 -0
  218. package/dist/react/use-authenticated-preview-url.d.ts +24 -0
  219. package/dist/react/use-authenticated-preview-url.d.ts.map +1 -0
  220. package/dist/react/use-authenticated-preview-url.js +137 -0
  221. package/dist/react/use-authenticated-preview-url.js.map +1 -0
  222. package/dist/react/use-canonical-opencode-session.d.ts +4 -0
  223. package/dist/react/use-canonical-opencode-session.d.ts.map +1 -1
  224. package/dist/react/use-canonical-opencode-session.js +9 -4
  225. package/dist/react/use-canonical-opencode-session.js.map +1 -1
  226. package/dist/react/use-model-defaults.d.ts +22 -0
  227. package/dist/react/use-model-defaults.d.ts.map +1 -0
  228. package/dist/react/use-model-defaults.js +104 -0
  229. package/dist/react/use-model-defaults.js.map +1 -0
  230. package/dist/react/use-model-store.d.ts.map +1 -1
  231. package/dist/react/use-model-store.js +11 -0
  232. package/dist/react/use-model-store.js.map +1 -1
  233. package/dist/react/use-opencode-events/index.d.ts +3 -1
  234. package/dist/react/use-opencode-events/index.d.ts.map +1 -1
  235. package/dist/react/use-opencode-events/index.js +6 -2
  236. package/dist/react/use-opencode-events/index.js.map +1 -1
  237. package/dist/react/use-opencode-local.d.ts.map +1 -1
  238. package/dist/react/use-opencode-local.js +10 -1
  239. package/dist/react/use-opencode-local.js.map +1 -1
  240. package/dist/react/use-opencode-sessions/agents.d.ts.map +1 -1
  241. package/dist/react/use-opencode-sessions/agents.js +5 -3
  242. package/dist/react/use-opencode-sessions/agents.js.map +1 -1
  243. package/dist/react/use-opencode-sessions/commands.d.ts +7 -2
  244. package/dist/react/use-opencode-sessions/commands.d.ts.map +1 -1
  245. package/dist/react/use-opencode-sessions/commands.js +13 -9
  246. package/dist/react/use-opencode-sessions/commands.js.map +1 -1
  247. package/dist/react/use-opencode-sessions/provider-load-plan.d.ts +6 -0
  248. package/dist/react/use-opencode-sessions/provider-load-plan.d.ts.map +1 -0
  249. package/dist/react/use-opencode-sessions/provider-load-plan.js +4 -0
  250. package/dist/react/use-opencode-sessions/provider-load-plan.js.map +1 -0
  251. package/dist/react/use-opencode-sessions/providers.d.ts.map +1 -1
  252. package/dist/react/use-opencode-sessions/providers.js +39 -27
  253. package/dist/react/use-opencode-sessions/providers.js.map +1 -1
  254. package/dist/react/use-opencode-sessions/sessions.d.ts +1 -1
  255. package/dist/react/use-opencode-sessions/sessions.d.ts.map +1 -1
  256. package/dist/react/use-opencode-sessions/sessions.js +2 -2
  257. package/dist/react/use-opencode-sessions/sessions.js.map +1 -1
  258. package/dist/react/use-ops-overview.d.ts +64 -0
  259. package/dist/react/use-ops-overview.d.ts.map +1 -0
  260. package/dist/react/use-ops-overview.js +16 -0
  261. package/dist/react/use-ops-overview.js.map +1 -0
  262. package/dist/react/use-session-model-selection.d.ts +15 -0
  263. package/dist/react/use-session-model-selection.d.ts.map +1 -0
  264. package/dist/react/use-session-model-selection.js +27 -0
  265. package/dist/react/use-session-model-selection.js.map +1 -0
  266. package/dist/react/use-session-sync.d.ts.map +1 -1
  267. package/dist/react/use-session-sync.js +3 -1
  268. package/dist/react/use-session-sync.js.map +1 -1
  269. package/dist/react/use-session.d.ts +78 -4
  270. package/dist/react/use-session.d.ts.map +1 -1
  271. package/dist/react/use-session.js +329 -34
  272. package/dist/react/use-session.js.map +1 -1
  273. package/dist/react/use-system-status.d.ts +39 -0
  274. package/dist/react/use-system-status.d.ts.map +1 -0
  275. package/dist/react/use-system-status.js +68 -0
  276. package/dist/react/use-system-status.js.map +1 -0
  277. package/dist/react/use-teams-installations.d.ts +36 -0
  278. package/dist/react/use-teams-installations.d.ts.map +1 -0
  279. package/dist/react/use-teams-installations.js +94 -0
  280. package/dist/react/use-teams-installations.js.map +1 -0
  281. package/dist/react/use-tunnel.d.ts +120 -0
  282. package/dist/react/use-tunnel.d.ts.map +1 -0
  283. package/dist/react/use-tunnel.js +268 -0
  284. package/dist/react/use-tunnel.js.map +1 -0
  285. package/package.json +2 -2
@@ -0,0 +1,492 @@
1
+ export type ResourceType = 'account' | 'project' | 'sandbox' | 'trigger' | 'channel' | 'member' | 'group';
2
+ /** Scope a policy can target. Superset of ResourceType — adds container
3
+ * scopes the engine resolves at match time (currently: project_group). */
4
+ export type PolicyScopeType = ResourceType | 'project_group';
5
+ export type PrincipalType = 'member' | 'group' | 'token';
6
+ export interface AccountGroup {
7
+ group_id: string;
8
+ name: string;
9
+ description: string | null;
10
+ source: 'manual' | 'scim';
11
+ external_id?: string | null;
12
+ member_count?: number;
13
+ /** Number of project_group_grants for this group. */
14
+ project_count?: number;
15
+ created_at: string;
16
+ updated_at: string;
17
+ }
18
+ export interface GroupMember {
19
+ user_id: string;
20
+ added_at: string;
21
+ added_by: string | null;
22
+ }
23
+ export interface IamRole {
24
+ role_id: string;
25
+ key: string;
26
+ name: string;
27
+ description: string | null;
28
+ resource_type: ResourceType;
29
+ is_system: boolean;
30
+ account_id: string | null;
31
+ }
32
+ export type IamPolicyEffect = 'allow' | 'deny';
33
+ /**
34
+ * Optional gating conditions on a policy. The engine evaluates these at
35
+ * request time — a policy whose conditions don't pass is silent (acts as
36
+ * if it didn't exist). Keys compose with AND.
37
+ *
38
+ * ip_cidrs: request IP must fall in one of these CIDRs / bare IPs.
39
+ * require_mfa: session must be MFA-verified (Supabase aal2).
40
+ *
41
+ * Empty object means "no conditions" (always applies).
42
+ */
43
+ export interface PolicyConditions {
44
+ ip_cidrs?: string[];
45
+ require_mfa?: boolean;
46
+ }
47
+ export interface IamPolicy {
48
+ policy_id: string;
49
+ principal_type: PrincipalType;
50
+ principal_id: string;
51
+ scope_type: PolicyScopeType;
52
+ scope_id: string | null;
53
+ role_id: string;
54
+ effect: IamPolicyEffect;
55
+ conditions: PolicyConditions;
56
+ /** Optional hard expiry. ISO-8601 string. NULL = permanent. */
57
+ expires_at?: string | null;
58
+ created_by: string | null;
59
+ created_at: string;
60
+ }
61
+ export interface EffectivePermissionProbe {
62
+ allowed: boolean;
63
+ reason: string | null;
64
+ action: string;
65
+ resource_type: ResourceType;
66
+ }
67
+ export declare function listGroups(accountId: string): Promise<AccountGroup[]>;
68
+ export declare function getGroup(accountId: string, groupId: string): Promise<AccountGroup>;
69
+ export declare function createGroup(accountId: string, input: {
70
+ name: string;
71
+ description?: string;
72
+ }): Promise<AccountGroup>;
73
+ export declare function updateGroup(accountId: string, groupId: string, patch: {
74
+ name?: string;
75
+ description?: string | null;
76
+ }): Promise<AccountGroup>;
77
+ export declare function deleteGroup(accountId: string, groupId: string): Promise<{
78
+ deleted: boolean;
79
+ }>;
80
+ export declare function listGroupMembers(accountId: string, groupId: string): Promise<GroupMember[]>;
81
+ export declare function addGroupMembers(accountId: string, groupId: string, userIds: string[]): Promise<{
82
+ added: number;
83
+ }>;
84
+ export interface GroupProjectGrant {
85
+ project_id: string;
86
+ project_name: string;
87
+ role: 'manager' | 'editor' | 'member';
88
+ granted_by: string | null;
89
+ created_at: string;
90
+ /** Auto-revoke timestamp (ISO). null = permanent. Surfaced from the
91
+ * backend's project_group_grants.expires_at. */
92
+ expires_at?: string | null;
93
+ }
94
+ export declare function listGroupProjectGrants(accountId: string, groupId: string): Promise<GroupProjectGrant[]>;
95
+ export declare function removeGroupMember(accountId: string, groupId: string, userId: string): Promise<{
96
+ removed: boolean;
97
+ }>;
98
+ export interface MemberGroupSummary {
99
+ group_id: string;
100
+ name: string;
101
+ added_at: string;
102
+ }
103
+ /** Groups the given user belongs to within the account. Reverse of
104
+ * listGroupMembers — backs the "via groups" panel on member detail. */
105
+ export declare function listMemberGroups(accountId: string, userId: string): Promise<MemberGroupSummary[]>;
106
+ export interface MemberProjectAccess {
107
+ project_id: string;
108
+ project_name: string;
109
+ role: 'manager' | 'editor' | 'member';
110
+ sources: Array<'implicit' | 'direct' | 'group'>;
111
+ }
112
+ export declare function listMemberProjectAccess(accountId: string, userId: string): Promise<MemberProjectAccess[]>;
113
+ export interface ListPoliciesFilter {
114
+ principalType?: PrincipalType;
115
+ principalId?: string;
116
+ scopeType?: ResourceType;
117
+ scopeId?: string | null;
118
+ }
119
+ export declare function listPolicies(accountId: string, filter?: ListPoliciesFilter): Promise<IamPolicy[]>;
120
+ export declare function createPolicy(accountId: string, input: {
121
+ principalType: PrincipalType;
122
+ principalId: string;
123
+ scopeType: PolicyScopeType;
124
+ scopeId?: string | null;
125
+ roleId: string;
126
+ effect?: IamPolicyEffect;
127
+ /** Optional gating conditions. Omit for an unconditional policy. */
128
+ conditions?: PolicyConditions;
129
+ /** Optional hard expiry (ISO-8601). Omit for permanent. */
130
+ expires_at?: string | null;
131
+ }): Promise<IamPolicy>;
132
+ export declare function updatePolicy(accountId: string, policyId: string, input: {
133
+ scopeType: PolicyScopeType;
134
+ scopeId?: string | null;
135
+ roleId: string;
136
+ effect: IamPolicyEffect;
137
+ /** Omit to leave existing conditions untouched. Pass `{}` to clear. */
138
+ conditions?: PolicyConditions;
139
+ /** Undefined = leave untouched; null = clear expiry; ISO = set. */
140
+ expires_at?: string | null;
141
+ }): Promise<IamPolicy>;
142
+ export declare function deletePolicy(accountId: string, policyId: string): Promise<{
143
+ deleted: boolean;
144
+ }>;
145
+ export interface BulkDeleteResult {
146
+ deleted: number;
147
+ }
148
+ export declare function bulkDeletePolicies(accountId: string, policyIds: string[]): Promise<BulkDeleteResult>;
149
+ export interface BulkImportEntry {
150
+ principal_type: PrincipalType;
151
+ principal_id: string;
152
+ scope_type: PolicyScopeType;
153
+ scope_id?: string | null;
154
+ /** Reference by role key (not id) so exported JSON is portable
155
+ * across accounts. */
156
+ role_key: string;
157
+ effect?: IamPolicyEffect;
158
+ conditions?: PolicyConditions;
159
+ expires_at?: string | null;
160
+ }
161
+ export interface BulkImportResult {
162
+ attempted: number;
163
+ created: number;
164
+ skipped: number;
165
+ errors: Array<{
166
+ index: number;
167
+ error: string;
168
+ }>;
169
+ }
170
+ export declare function bulkImportPolicies(accountId: string, policies: BulkImportEntry[]): Promise<BulkImportResult>;
171
+ export declare function listRoles(accountId: string): Promise<IamRole[]>;
172
+ /** Auto-provisioned agent (service-account) identities — the principal picker for
173
+ * binding a role to an agent, promoting it to a standing teammate. */
174
+ export interface AgentIdentity {
175
+ service_account_id: string;
176
+ name: string;
177
+ project_id: string | null;
178
+ agent_name: string | null;
179
+ }
180
+ export declare function listAgentIdentities(accountId: string): Promise<AgentIdentity[]>;
181
+ export declare function getRolePermissions(accountId: string, roleId: string): Promise<{
182
+ role_id: string;
183
+ key: string;
184
+ actions: string[];
185
+ }>;
186
+ export interface ActionCatalogEntry {
187
+ action: string;
188
+ label: string;
189
+ resource_type: ResourceType;
190
+ }
191
+ export declare function listActions(accountId: string): Promise<ActionCatalogEntry[]>;
192
+ export declare function getRoleUsage(accountId: string, roleId: string): Promise<{
193
+ role_id: string;
194
+ policy_count: number;
195
+ }>;
196
+ export declare function createRole(accountId: string, input: {
197
+ key: string;
198
+ name: string;
199
+ description?: string;
200
+ resourceType: ResourceType;
201
+ actions: string[];
202
+ }): Promise<IamRole>;
203
+ export declare function updateRole(accountId: string, roleId: string, patch: {
204
+ name?: string;
205
+ description?: string | null;
206
+ }): Promise<IamRole>;
207
+ export declare function updateRolePermissions(accountId: string, roleId: string, actions: string[]): Promise<{
208
+ role_id: string;
209
+ actions: string[];
210
+ }>;
211
+ export declare function deleteRole(accountId: string, roleId: string): Promise<{
212
+ deleted: boolean;
213
+ }>;
214
+ export declare function setMemberSuperAdmin(accountId: string, userId: string, isSuperAdmin: boolean): Promise<{
215
+ user_id: string;
216
+ is_super_admin: boolean;
217
+ }>;
218
+ export interface ScimToken {
219
+ token_id: string;
220
+ name: string;
221
+ public_prefix: string;
222
+ status: 'active' | 'expired' | 'revoked';
223
+ created_at: string;
224
+ last_used_at: string | null;
225
+ expires_at: string | null;
226
+ revoked_at: string | null;
227
+ }
228
+ export interface CreatedScimToken extends Omit<ScimToken, 'last_used_at' | 'revoked_at' | 'status'> {
229
+ /** Plaintext bearer — shown ONCE at creation. Never logged or returned again. */
230
+ secret: string;
231
+ /** Path the IdP should configure as its SCIM base URL. */
232
+ scim_base_url: string;
233
+ }
234
+ export declare function listScimTokens(accountId: string): Promise<ScimToken[]>;
235
+ export declare function createScimToken(accountId: string, input: {
236
+ name: string;
237
+ expires_at?: string;
238
+ }): Promise<CreatedScimToken>;
239
+ export declare function revokeScimToken(accountId: string, tokenId: string): Promise<{
240
+ revoked: boolean;
241
+ }>;
242
+ export interface MfaRequiredStatus {
243
+ enabled: boolean;
244
+ }
245
+ export interface MfaRequiredPreview {
246
+ total_members: number;
247
+ members_with_mfa: number;
248
+ /** Members without a verified MFA factor. Super-admins are still listed
249
+ * (so admins can nudge them) but flagged so the UI can soften the
250
+ * warning — super-admins remain exempt from enforcement. */
251
+ losers: Array<{
252
+ user_id: string;
253
+ account_role: 'owner' | 'admin' | 'member';
254
+ is_super_admin: boolean;
255
+ }>;
256
+ /** True when nobody would retain access — UI uses this to refuse the
257
+ * flip before round-tripping to the API. */
258
+ will_lock_out_account: boolean;
259
+ }
260
+ export declare function getMfaRequired(accountId: string): Promise<MfaRequiredStatus>;
261
+ export declare function previewMfaRequired(accountId: string): Promise<MfaRequiredPreview>;
262
+ export declare function setMfaRequired(accountId: string, enabled: boolean): Promise<{
263
+ enabled: boolean;
264
+ unchanged?: boolean;
265
+ }>;
266
+ export interface SsoProvider {
267
+ sso_provider_id: string;
268
+ supabase_sso_provider_id: string;
269
+ name: string;
270
+ primary_domain: string;
271
+ group_claim_name: string;
272
+ auto_create_members: boolean;
273
+ auto_provision_groups: boolean;
274
+ /** When true, the unified auth flow refuses the password/email-code paths
275
+ * for this provider's primary domain — the IdP becomes the only door. */
276
+ enforce_sso: boolean;
277
+ created_at: string;
278
+ updated_at: string;
279
+ }
280
+ export interface SsoGroupMapping {
281
+ mapping_id: string;
282
+ claim_value: string;
283
+ group_id: string;
284
+ group_name: string;
285
+ created_at: string;
286
+ }
287
+ export declare function getSsoProvider(accountId: string): Promise<SsoProvider | null>;
288
+ export declare function upsertSsoProvider(accountId: string, input: {
289
+ supabase_sso_provider_id: string;
290
+ name: string;
291
+ primary_domain: string;
292
+ group_claim_name?: string;
293
+ auto_create_members?: boolean;
294
+ auto_provision_groups?: boolean;
295
+ enforce_sso?: boolean;
296
+ }): Promise<SsoProvider>;
297
+ /**
298
+ * Self-serve: register an IdP's SAML metadata (Entra "App Federation Metadata
299
+ * XML", or its URL) with Supabase server-side and store the resulting provider.
300
+ * The admin never touches Supabase. One IdP per account — the API 409s if one
301
+ * already exists.
302
+ */
303
+ export declare function importSsoProviderFromMetadata(accountId: string, input: {
304
+ name: string;
305
+ primary_domain: string;
306
+ metadata_xml?: string;
307
+ metadata_url?: string;
308
+ group_claim_name?: string;
309
+ auto_create_members?: boolean;
310
+ auto_provision_groups?: boolean;
311
+ enforce_sso?: boolean;
312
+ domains?: string[];
313
+ }): Promise<SsoProvider>;
314
+ export declare function deleteSsoProvider(accountId: string): Promise<{
315
+ deleted: boolean;
316
+ }>;
317
+ export declare function listSsoGroupMappings(accountId: string): Promise<SsoGroupMapping[]>;
318
+ export declare function createSsoGroupMapping(accountId: string, input: {
319
+ claim_value: string;
320
+ group_id: string;
321
+ }): Promise<SsoGroupMapping>;
322
+ export declare function deleteSsoGroupMapping(accountId: string, mappingId: string): Promise<{
323
+ deleted: boolean;
324
+ }>;
325
+ export interface SessionPolicy {
326
+ /** Null = no max; positive integer = minutes. */
327
+ max_lifetime_minutes: number | null;
328
+ /** Null = no idle gate; positive integer = minutes. */
329
+ idle_timeout_minutes: number | null;
330
+ }
331
+ export interface ActiveSession {
332
+ user_id: string;
333
+ session_id: string;
334
+ first_seen_at: string;
335
+ last_seen_at: string;
336
+ revoked_at: string | null;
337
+ revoked_reason: string | null;
338
+ ip: string | null;
339
+ user_agent: string | null;
340
+ }
341
+ export declare function getSessionPolicy(accountId: string): Promise<SessionPolicy>;
342
+ export declare function updateSessionPolicy(accountId: string, patch: Partial<SessionPolicy>): Promise<SessionPolicy>;
343
+ export declare function listAccountSessions(accountId: string): Promise<ActiveSession[]>;
344
+ export declare function revokeAccountSession(accountId: string, sessionId: string): Promise<{
345
+ revoked: boolean;
346
+ }>;
347
+ export interface PatPolicy {
348
+ /** Null = no cap; positive integer = days from now. */
349
+ max_lifetime_days: number | null;
350
+ /** When true, minting without expires_at is refused. */
351
+ require_expiry: boolean;
352
+ /** Null = no idle revoke; positive integer = days. */
353
+ idle_revoke_days: number | null;
354
+ }
355
+ export declare function getPatPolicy(accountId: string): Promise<PatPolicy>;
356
+ export declare function updatePatPolicy(accountId: string, patch: Partial<PatPolicy>): Promise<PatPolicy>;
357
+ export interface ServiceAccount {
358
+ service_account_id: string;
359
+ name: string;
360
+ description: string | null;
361
+ public_prefix: string;
362
+ status: 'active' | 'disabled';
363
+ last_used_at: string | null;
364
+ expires_at: string | null;
365
+ created_at: string;
366
+ disabled_at: string | null;
367
+ }
368
+ export interface CreatedServiceAccount extends ServiceAccount {
369
+ /** Plaintext bearer — shown ONCE at create. Store it now or rotate. */
370
+ secret: string;
371
+ }
372
+ export declare function listServiceAccountsApi(accountId: string): Promise<ServiceAccount[]>;
373
+ export declare function createServiceAccountApi(accountId: string, input: {
374
+ name: string;
375
+ description?: string;
376
+ expires_at?: string;
377
+ }): Promise<CreatedServiceAccount>;
378
+ export declare function disableServiceAccountApi(accountId: string, saId: string): Promise<{
379
+ disabled: boolean;
380
+ }>;
381
+ export declare function deleteServiceAccountApi(accountId: string, saId: string): Promise<{
382
+ deleted: boolean;
383
+ }>;
384
+ export interface IamAuditWebhook {
385
+ webhook_id: string;
386
+ name: string;
387
+ url: string;
388
+ enabled: boolean;
389
+ action_prefix: string | null;
390
+ last_delivered_at: string | null;
391
+ last_error_at: string | null;
392
+ last_error: string | null;
393
+ created_at: string;
394
+ updated_at: string;
395
+ }
396
+ export interface CreatedAuditWebhook extends IamAuditWebhook {
397
+ /** Plaintext HMAC signing secret — returned ONCE on create. Use it to
398
+ * verify the X-Kortix-Signature header in your receiver. */
399
+ secret: string;
400
+ /** Outcome of the one-shot test delivery fired at creation — lets the UI warn
401
+ * on an unreachable URL immediately instead of after silent audit-event loss. */
402
+ test?: {
403
+ ok: boolean;
404
+ status?: number;
405
+ error?: string;
406
+ };
407
+ }
408
+ export declare function listAuditWebhooks(accountId: string): Promise<IamAuditWebhook[]>;
409
+ export declare function createAuditWebhook(accountId: string, input: {
410
+ name: string;
411
+ url: string;
412
+ action_prefix?: string;
413
+ }): Promise<CreatedAuditWebhook>;
414
+ export declare function updateAuditWebhook(accountId: string, webhookId: string, patch: {
415
+ name?: string;
416
+ enabled?: boolean;
417
+ action_prefix?: string | null;
418
+ }): Promise<IamAuditWebhook>;
419
+ export declare function deleteAuditWebhook(accountId: string, webhookId: string): Promise<{
420
+ deleted: boolean;
421
+ }>;
422
+ export interface IamAuditEvent {
423
+ event_id: string;
424
+ occurred_at: string;
425
+ actor_user_id: string | null;
426
+ action: string;
427
+ resource_type: string;
428
+ resource_id: string | null;
429
+ before: Record<string, unknown> | null;
430
+ after: Record<string, unknown> | null;
431
+ ip: string | null;
432
+ user_agent: string | null;
433
+ metadata: Record<string, unknown>;
434
+ }
435
+ export interface ListAuditFilter {
436
+ /** Prefix or exact match on action string ("iam.policy" matches every
437
+ * iam.policy.* event; "iam.policy.create" matches exact). */
438
+ action?: string;
439
+ /** Only events performed by this user_id. */
440
+ actor?: string;
441
+ /** Prefix match on resource_type (e.g. "project_session"). */
442
+ resource_type?: string;
443
+ /** ISO datetime — events at or after. */
444
+ since?: string;
445
+ /** ISO datetime — events at or before. */
446
+ until?: string;
447
+ /** Case-insensitive substring over action / resource_type / resource_id. */
448
+ q?: string;
449
+ /** Cursor from a previous response's next_cursor. */
450
+ cursor?: string;
451
+ /** 1..200, default 50. */
452
+ limit?: number;
453
+ }
454
+ export declare function listAuditEvents(accountId: string, filter?: ListAuditFilter): Promise<{
455
+ events: IamAuditEvent[];
456
+ next_cursor: string | null;
457
+ }>;
458
+ export declare function probeEffectivePermission(accountId: string, userId: string, args: PermissionProbeInput): Promise<EffectivePermissionProbe>;
459
+ type NonAccountPermissionProbeTarget = {
460
+ [Type in Exclude<ResourceType, 'account'>]: {
461
+ resourceType: Type;
462
+ resourceId: string;
463
+ };
464
+ }[Exclude<ResourceType, 'account'>];
465
+ export type PermissionProbeTarget = {
466
+ resourceType: 'account';
467
+ resourceId?: never;
468
+ } | NonAccountPermissionProbeTarget;
469
+ export type PermissionProbeInput = {
470
+ action: string;
471
+ } & ({
472
+ resourceType?: never;
473
+ resourceId?: never;
474
+ } | PermissionProbeTarget);
475
+ export interface PermissionProbeResult {
476
+ action: string;
477
+ resource_type: ResourceType;
478
+ resource_id: string | null;
479
+ allowed: boolean;
480
+ reason: string | null;
481
+ }
482
+ /**
483
+ * Batch variant — answers come back in the same order as the input. Use this
484
+ * when a single render needs more than ~3 probes (capabilities panel,
485
+ * multi-button gating on the same page). The server dedupes duplicate
486
+ * (action, target) pairs internally.
487
+ */
488
+ export declare function probeEffectivePermissions(accountId: string, userId: string, probes: PermissionProbeInput[]): Promise<PermissionProbeResult[]>;
489
+ export declare function getEnterpriseDemo(accountId: string): Promise<boolean>;
490
+ export declare function setEnterpriseDemo(accountId: string, enabled: boolean): Promise<boolean>;
491
+ export {};
492
+ //# sourceMappingURL=iam.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"iam.d.ts","sourceRoot":"","sources":["../../../../src/core/rest/projects-client/iam.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,YAAY,GACpB,SAAS,GACT,SAAS,GACT,SAAS,GACT,SAAS,GACT,SAAS,GACT,QAAQ,GACR,OAAO,CAAC;AAEZ;2EAC2E;AAC3E,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,eAAe,CAAC;AAE7D,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC;AAEzD,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,YAAY,CAAC;IAC5B,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,MAAM,CAAC;AAE/C;;;;;;;;;GASG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,aAAa,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,eAAe,CAAC;IAC5B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,eAAe,CAAC;IACxB,UAAU,EAAE,gBAAgB,CAAC;IAC7B,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,YAAY,CAAC;CAC7B;AAyBD,wBAAsB,UAAU,CAAC,SAAS,EAAE,MAAM,2BAGjD;AAED,wBAAsB,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,yBAEhE;AAED,wBAAsB,WAAW,CAC/B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,yBAO9C;AAED,wBAAsB,WAAW,CAC/B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,yBAKtD;AAED,wBAAsB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;aAE7B,OAAO;GAE7C;AAED,wBAAsB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,0BAMxE;AAED,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE;WAExD,MAAM;GAKxC;AAMD,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACtC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB;qDACiD;IACjD,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,wBAAsB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,gCAM9E;AAED,wBAAsB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;aAEnD,OAAO;GAI7C;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;wEACwE;AACxE,wBAAsB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,iCAMvE;AAOD,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACtC,OAAO,EAAE,KAAK,CAAC,UAAU,GAAG,QAAQ,GAAG,OAAO,CAAC,CAAC;CACjD;AAED,wBAAsB,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kCAM9E;AAID,MAAM,WAAW,kBAAkB;IACjC,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,wBAAsB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,GAAE,kBAAuB,wBAcpF;AAED,wBAAsB,YAAY,CAChC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;IACL,aAAa,EAAE,aAAa,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,eAAe,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,oEAAoE;IACpE,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,2DAA2D;IAC3D,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,sBAOF;AAED,wBAAsB,YAAY,CAChC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE;IACL,SAAS,EAAE,eAAe,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,eAAe,CAAC;IACxB,uEAAuE;IACvE,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,sBAOF;AAED,wBAAsB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;aAE/B,OAAO;GAI7C;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,6BAQ9E;AAED,MAAM,WAAW,eAAe;IAC9B,cAAc,EAAE,aAAa,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,eAAe,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB;2BACuB;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjD;AAED,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,6BAQtF;AAID,wBAAsB,SAAS,CAAC,SAAS,EAAE,MAAM,sBAEhD;AAED;uEACuE;AACvE,MAAM,WAAW,aAAa;IAC5B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,wBAAsB,mBAAmB,CAAC,SAAS,EAAE,MAAM,4BAI1D;AAED,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;aAE9C,MAAM;SAAO,MAAM;aAAW,MAAM,EAAE;GAIjE;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,YAAY,CAAC;CAC7B;AAED,wBAAsB,WAAW,CAAC,SAAS,EAAE,MAAM,iCAIlD;AAED,wBAAsB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;aAExC,MAAM;kBAAgB,MAAM;GAIvD;AAED,wBAAsB,UAAU,CAC9B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;IACL,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,YAAY,CAAC;IAC3B,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB,oBAOF;AAED,wBAAsB,UAAU,CAC9B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,oBAOtD;AAED,wBAAsB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE;aAE5D,MAAM;aAAW,MAAM,EAAE;GAM5D;AAED,wBAAsB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;aAE3B,OAAO;GAI7C;AAID,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,OAAO;aAGe,MAAM;oBAAkB,OAAO;GAKpE;AAID,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,gBACf,SAAQ,IAAI,CAAC,SAAS,EAAE,cAAc,GAAG,YAAY,GAAG,QAAQ,CAAC;IACjE,iFAAiF;IACjF,MAAM,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,wBAAsB,cAAc,CAAC,SAAS,EAAE,MAAM,wBAGrD;AAED,wBAAsB,eAAe,CACnC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,6BAO7C;AAED,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;aAEjC,OAAO;GAI7C;AAID,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB;;iEAE6D;IAC7D,MAAM,EAAE,KAAK,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;QAC3C,cAAc,EAAE,OAAO,CAAC;KACzB,CAAC,CAAC;IACH;iDAC6C;IAC7C,qBAAqB,EAAE,OAAO,CAAC;CAChC;AAED,wBAAsB,cAAc,CAAC,SAAS,EAAE,MAAM,8BAErD;AAED,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,+BAIzD;AAED,wBAAsB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO;aAElC,OAAO;gBAAc,OAAO;GAMjE;AAID,MAAM,WAAW,WAAW;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,wBAAwB,EAAE,MAAM,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,qBAAqB,EAAE,OAAO,CAAC;IAC/B;8EAC0E;IAC1E,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wBAAsB,cAAc,CAAC,SAAS,EAAE,MAAM,+BAIrD;AAED,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;IACL,wBAAwB,EAAE,MAAM,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,wBASF;AAED;;;;;GAKG;AACH,wBAAsB,6BAA6B,CACjD,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;IACL,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB,wBASF;AAED,wBAAsB,iBAAiB,CAAC,SAAS,EAAE,MAAM;aAElB,OAAO;GAE7C;AAED,wBAAsB,oBAAoB,CAAC,SAAS,EAAE,MAAM,8BAI3D;AAED,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,4BAOjD;AAED,wBAAsB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;aAEzC,OAAO;GAI7C;AAID,MAAM,WAAW,aAAa;IAC5B,iDAAiD;IACjD,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,uDAAuD;IACvD,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,wBAAsB,gBAAgB,CAAC,SAAS,EAAE,MAAM,0BAEvD;AAED,wBAAsB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,0BAMzF;AAED,wBAAsB,mBAAmB,CAAC,SAAS,EAAE,MAAM,4BAG1D;AAED,wBAAsB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;aAE1C,OAAO;GAM3C;AAID,MAAM,WAAW,SAAS;IACxB,uDAAuD;IACvD,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,wDAAwD;IACxD,cAAc,EAAE,OAAO,CAAC;IACxB,sDAAsD;IACtD,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,wBAAsB,YAAY,CAAC,SAAS,EAAE,MAAM,sBAEnD;AAED,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,sBAMjF;AAID,MAAM,WAAW,cAAc;IAC7B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAsB,SAAQ,cAAc;IAC3D,uEAAuE;IACvE,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,sBAAsB,CAAC,SAAS,EAAE,MAAM,6BAM7D;AAED,wBAAsB,uBAAuB,CAC3C,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,kCASnE;AAED,wBAAsB,wBAAwB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;cAExC,OAAO;GAM5C;AAED,wBAAsB,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;aAEtC,OAAO;GAI7C;AAID,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAoB,SAAQ,eAAe;IAC1D;iEAC6D;IAC7D,MAAM,EAAE,MAAM,CAAC;IACf;sFACkF;IAClF,IAAI,CAAC,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACzD;AAED,wBAAsB,iBAAiB,CAAC,SAAS,EAAE,MAAM,8BAIxD;AAED,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,gCAO7D;AAED,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,4BAQ3E;AAED,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;aAEtC,OAAO;GAI7C;AAID,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACvC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACtC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,eAAe;IAC9B;kEAC8D;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6CAA6C;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,yCAAyC;IACzC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,qDAAqD;IACrD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0BAA0B;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,GAAE,eAAoB;YAY1D,aAAa,EAAE;iBAAe,MAAM,GAAG,IAAI;GAIrE;AAID,wBAAsB,wBAAwB,CAC5C,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,oBAAoB,qCAW3B;AAED,KAAK,+BAA+B,GAAG;KACpC,IAAI,IAAI,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,GAAG;QAC1C,YAAY,EAAE,IAAI,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;KACpB;CACF,CAAC,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC;AAEpC,MAAM,MAAM,qBAAqB,GAC7B;IAAE,YAAY,EAAE,SAAS,CAAC;IAAC,UAAU,CAAC,EAAE,KAAK,CAAA;CAAE,GAC/C,+BAA+B,CAAC;AAEpC,MAAM,MAAM,oBAAoB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,CACpD;IAAE,YAAY,CAAC,EAAE,KAAK,CAAC;IAAC,UAAU,CAAC,EAAE,KAAK,CAAA;CAAE,GAC5C,qBAAqB,CACxB,CAAC;AAEF,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,YAAY,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAC7C,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,oBAAoB,EAAE,oCAS/B;AAOD,wBAAsB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAG3E;AAED,wBAAsB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAM7F"}