@ninedeploy/schemas 0.10.6 → 0.16.1

package/dist/terminals.js

@@ -0,0 +1,177 @@
+import { z } from 'zod';
+import { id } from './common.js';
+// ── Terminals (0.15) ────────────────────────────────────────────────────────
+// Request and response shapes for `/v1/terminals`: interactive shells into a
+// service replica, a managed database, any managed container, or (off by
+// default, owner decision O1) the host of a server. A session is created over
+// HTTP and attached over a WebSocket with a single-use ticket. Metadata only:
+// no transcript is ever recorded (O2). These are SHAPE checks; the server
+// resolves and authorises every target. Design: DESIGN.md §1.
+export const TERMINAL_COLS_MIN = 10;
+export const TERMINAL_COLS_MAX = 500;
+export const TERMINAL_ROWS_MIN = 5;
+export const TERMINAL_ROWS_MAX = 200;
+/** Per-frame cap of the attach socket (protocol v1); a larger frame closes 1009. */
+export const TERMINAL_FRAME_MAX_BYTES = 64 * 1024;
+export const TERMINAL_HISTORY_LIMIT_MAX = 200;
+/** Mirrors `terminalTargetKind` in `@ninedeploy/db`. */
+export const terminalTargetKind = z.enum(['service', 'database', 'container', 'host']);
+/** Mirrors `terminalSessionStatus` in `@ninedeploy/db`. */
+export const terminalSessionStatus = z.enum(['pending', 'active', 'ended', 'failed', 'expired']);
+/** A managed container name (`isManagedContainer` is checked server side). */
+export const terminalContainerName = z.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9_.-]{1,127}$/, 'must be a container name');
+export const terminalTarget = z.discriminatedUnion('kind', [
+    z
+        .object({
+        kind: z.literal('service'),
+        serviceId: id,
+        /** 1-based replica index; omitted = the primary container. */
+        replica: z.number().int().min(1).max(50).optional(),
+        /** A node the service runs on (primary or fan-out target); omitted = its primary. */
+        serverId: id.optional(),
+    })
+        .strict(),
+    z
+        .object({
+        kind: z.literal('database'),
+        databaseId: id,
+        /** `client` runs the engine CLI with the stored credentials. */
+        mode: z.enum(['shell', 'client']).default('shell'),
+    })
+        .strict(),
+    z.object({ kind: z.literal('container'), name: terminalContainerName }).strict(),
+    z
+        .object({
+        kind: z.literal('host'),
+        /** null = the panel host. */
+        serverId: id.nullable(),
+    })
+        .strict(),
+]);
+export const terminalCols = z.number().int().min(TERMINAL_COLS_MIN).max(TERMINAL_COLS_MAX);
+export const terminalRows = z.number().int().min(TERMINAL_ROWS_MIN).max(TERMINAL_ROWS_MAX);
+/** POST /v1/terminals (operator). `password` is the step-up for host shells. */
+export const createTerminalSession = z
+    .object({
+    target: terminalTarget,
+    cols: terminalCols.default(120),
+    rows: terminalRows.default(32),
+    password: z.string().min(1).max(1024).optional(),
+})
+    .strict();
+/** One session row as the API returns it (history, detail, create). */
+export const terminalSession = z.object({
+    id,
+    status: terminalSessionStatus,
+    targetKind: terminalTargetKind,
+    targetLabel: z.string(),
+    /** null = the panel host. */
+    serverId: id.nullable(),
+    userId: id.nullable(),
+    userEmail: z.string().nullable(),
+    createdAt: z.string(),
+    startedAt: z.string().nullable(),
+    endedAt: z.string().nullable(),
+    durationMs: z.number().int().nonnegative().nullable(),
+    bytesIn: z.number().int().nonnegative(),
+    bytesOut: z.number().int().nonnegative(),
+    endReason: z.string().nullable(),
+    exitCode: z.number().int().nullable(),
+    clientIp: z.string().nullable(),
+});
+/** 201 answer of POST /v1/terminals. The ticket is single use and valid for 30s. */
+export const terminalSessionCreated = z.object({
+    session: terminalSession,
+    ticket: z.string().min(1),
+    ticketExpiresAt: z.string(),
+    /** `/v1/terminals/:id/attach`. */
+    attachPath: z.string().regex(/^\/v1\/terminals\/\d+\/attach$/),
+});
+/** GET /v1/terminals answer: newest first; `nextBefore` pages further back (null = no more). */
+export const terminalSessionList = z.object({
+    items: z.array(terminalSession),
+    nextBefore: id.nullable(),
+});
+/** DELETE /v1/terminals/:id answer. `wasLive`: a running shell was closed (otherwise a pending ticket was revoked). */
+export const terminalTerminateResult = z.object({
+    ok: z.literal(true),
+    wasLive: z.boolean(),
+});
+/** GET /v1/terminals query (history). Query strings arrive as text. */
+export const terminalSessionListQuery = z
+    .object({
+    status: terminalSessionStatus.optional(),
+    userId: z.coerce.number().int().positive().optional(),
+    targetKind: terminalTargetKind.optional(),
+    limit: z.coerce.number().int().min(1).max(TERMINAL_HISTORY_LIMIT_MAX).default(50),
+    /** Page backwards from this session id. */
+    before: z.coerce.number().int().positive().optional(),
+})
+    .strict();
+/**
+ * PUT /v1/terminals/settings (operator). Partial: only the named keys change.
+ * Turning `hostTerminalEnabled` on needs step-up (`password`, or a sign-in
+ * less than 10 minutes old) and an interactive session.
+ */
+export const terminalSettings = z
+    .object({
+    hostTerminalEnabled: z.boolean(),
+    idleTimeoutMinutes: z.number().int().min(1).max(240),
+    maxSessionMinutes: z.number().int().min(5).max(1440),
+    maxConcurrent: z.number().int().min(1).max(50),
+    retentionDays: z.number().int().min(30).max(3650),
+    password: z.string().max(1024).optional(),
+})
+    .partial()
+    .strict();
+/** GET /v1/terminals/settings: the stored values (defaults when unset). */
+export const terminalSettingsView = z.object({
+    hostTerminalEnabled: z.boolean(),
+    /** `NINEDEPLOY_HOST_TERMINAL=off` forbids host shells whatever the setting says. */
+    hostTerminalForbiddenByEnv: z.boolean(),
+    idleTimeoutMinutes: z.number().int(),
+    maxSessionMinutes: z.number().int(),
+    maxConcurrent: z.number().int(),
+    retentionDays: z.number().int(),
+});
+/** Defaults applied when a settings key is absent (fresh and upgraded installs alike). */
+export const TERMINAL_SETTINGS_DEFAULTS = {
+    hostTerminalEnabled: false,
+    idleTimeoutMinutes: 15,
+    maxSessionMinutes: 240,
+    maxConcurrent: 10,
+    retentionDays: 180,
+};
+// ── attach protocol v1 (`ninedeploy.terminal.v1`) ──────────────────────────
+// Binary frames carry stdin / output. Text frames carry these JSON messages.
+/** Client → server text frames. */
+export const terminalClientMessage = z.discriminatedUnion('t', [
+    z.object({ t: z.literal('resize'), cols: terminalCols, rows: terminalRows }).strict(),
+    z.object({ t: z.literal('ping') }).strict(),
+]);
+/** Server → client text frames. */
+export const terminalServerMessage = z.discriminatedUnion('t', [
+    z.object({
+        t: z.literal('ready'),
+        sessionId: id,
+        target: z.object({ kind: terminalTargetKind, label: z.string(), serverId: id.nullable() }),
+    }),
+    z.object({ t: z.literal('notice'), message: z.string() }),
+    z.object({ t: z.literal('exit'), code: z.number().int().nullable(), reason: z.string() }),
+]);
+/** WebSocket close codes of the attach socket. */
+export const TERMINAL_CLOSE = {
+    shellExited: 1000,
+    frameTooLarge: 1009,
+    badTicket: 4401,
+    forbidden: 4403,
+    idle: 4408,
+    maxDuration: 4409,
+    terminated: 4410,
+    tooManySessions: 4429,
+    targetUnreachable: 4502,
+};
+/** Subprotocols of the attach socket: the protocol name, then the ticket. */
+export const TERMINAL_PROTOCOL = 'ninedeploy.terminal.v1';
+export const TERMINAL_TICKET_PROTOCOL_PREFIX = 'ninedeploy.ticket.';
+//# sourceMappingURL=terminals.js.map

package/dist/terminals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminals.js","sourceRoot":"","sources":["../src/terminals.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEjC,+EAA+E;AAC/E,6EAA6E;AAC7E,yEAAyE;AACzE,8EAA8E;AAC9E,8EAA8E;AAC9E,0EAA0E;AAC1E,8DAA8D;AAE9D,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AACrC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AACnC,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AACrC,oFAAoF;AACpF,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,CAAC;AAClD,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAE9C,wDAAwD;AACxD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;AAGvF,2DAA2D;AAC3D,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAGjG,8EAA8E;AAC9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oCAAoC,EAAE,0BAA0B,CAAC,CAAC;AAExH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACzD,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC1B,SAAS,EAAE,EAAE;QACb,8DAA8D;QAC9D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;QACnD,qFAAqF;QACrF,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE;KACxB,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC3B,UAAU,EAAE,EAAE;QACd,gEAAgE;QAChE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;KACnD,CAAC;SACD,MAAM,EAAE;IACX,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE;IAChF,CAAC;SACE,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACvB,6BAA6B;QAC7B,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE;KACxB,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;AAC3F,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;AAE3F,gFAAgF;AAChF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,MAAM,EAAE,cAAc;IACtB,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC;IAC/B,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,uEAAuE;AACvE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,EAAE;IACF,MAAM,EAAE,qBAAqB;IAC7B,UAAU,EAAE,kBAAkB;IAC9B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,6BAA6B;IAC7B,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE;IACvB,MAAM,EAAE,EAAE,CAAC,QAAQ,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACrD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAGH,oFAAoF;AACpF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,OAAO,EAAE,eAAe;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,kCAAkC;IAClC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gCAAgC,CAAC;CAC/D,CAAC,CAAC;AAGH,gGAAgG;AAChG,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;IAC/B,UAAU,EAAE,EAAE,CAAC,QAAQ,EAAE;CAC1B,CAAC,CAAC;AAGH,uHAAuH;AACvH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACnB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AAGH,uEAAuE;AACvE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,MAAM,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IACxC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACrD,UAAU,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACzC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjF,2CAA2C;IAC3C,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACtD,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE;IAChC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACpD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACjD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CAC1C,CAAC;KACD,OAAO,EAAE;KACT,MAAM,EAAE,CAAC;AAGZ,2EAA2E;AAC3E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE;IAChC,oFAAoF;IACpF,0BAA0B,EAAE,CAAC,CAAC,OAAO,EAAE;IACvC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACpC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACnC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC/B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CAChC,CAAC,CAAC;AAGH,0FAA0F;AAC1F,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,mBAAmB,EAAE,KAAK;IAC1B,kBAAkB,EAAE,EAAE;IACtB,iBAAiB,EAAE,GAAG;IACtB,aAAa,EAAE,EAAE;IACjB,aAAa,EAAE,GAAG;CACV,CAAC;AAEX,8EAA8E;AAC9E,6EAA6E;AAE7E,mCAAmC;AACnC,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE;IAC7D,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACrF,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;CAC5C,CAAC,CAAC;AAGH,mCAAmC;AACnC,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE;IAC7D,CAAC,CAAC,MAAM,CAAC;QACP,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACrB,SAAS,EAAE,EAAE;QACb,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;KAC3F,CAAC;IACF,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACzD,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CAC1F,CAAC,CAAC;AAGH,kDAAkD;AAClD,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,WAAW,EAAE,IAAI;IACjB,aAAa,EAAE,IAAI;IACnB,SAAS,EAAE,IAAI;IACf,SAAS,EAAE,IAAI;IACf,IAAI,EAAE,IAAI;IACV,WAAW,EAAE,IAAI;IACjB,UAAU,EAAE,IAAI;IAChB,eAAe,EAAE,IAAI;IACrB,iBAAiB,EAAE,IAAI;CACf,CAAC;AAEX,6EAA6E;AAC7E,MAAM,CAAC,MAAM,iBAAiB,GAAG,wBAAwB,CAAC;AAC1D,MAAM,CAAC,MAAM,+BAA+B,GAAG,oBAAoB,CAAC"}

package/dist/traffic.d.ts

@@ -0,0 +1,276 @@
+import { z } from 'zod';
+export declare const TRAFFIC_RETENTION_DAYS_MIN = 1;
+export declare const TRAFFIC_RETENTION_DAYS_MAX = 400;
+export declare const TRAFFIC_RETENTION_DAYS_DEFAULT = 30;
+export declare const TRAFFIC_TOP_MAX = 50;
+/** Bucket widths in seconds: minute rows and hour rows. */
+export declare const TRAFFIC_GRANULARITIES: readonly [60, 3600];
+export declare const trafficGranularity: z.ZodUnion<readonly [z.ZodLiteral<60>, z.ZodLiteral<3600>]>;
+export type TrafficGranularity = z.infer<typeof trafficGranularity>;
+/** Upper edges (ms) of the latency histogram; one overflow bucket follows. */
+export declare const TRAFFIC_LATENCY_EDGES_MS: readonly [5, 10, 25, 50, 100, 250, 500, 1000, 2500, 5000, 10000];
+/** Buckets in `latencyHist`: one per edge plus the overflow. */
+export declare const TRAFFIC_LATENCY_BUCKETS: number;
+export declare const trafficRange: z.ZodEnum<{
+    "1h": "1h";
+    "24h": "24h";
+    "30d": "30d";
+    "7d": "7d";
+}>;
+export type TrafficRange = z.infer<typeof trafficRange>;
+/** Minute buckets for 1h/24h, hour buckets for 7d/30d. */
+export declare function trafficRangeGranularity(range: TrafficRange): TrafficGranularity;
+export declare const trafficStatus: z.ZodEnum<{
+    error: "error";
+    off: "off";
+    running: "running";
+    starting: "starting";
+}>;
+export type TrafficStatus = z.infer<typeof trafficStatus>;
+/** PUT /v1/traffic/settings (operator). Enabling or disabling recreates Traefik once. */
+export declare const trafficSettingsUpdate: z.ZodObject<{
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    retentionDays: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+export type TrafficSettingsUpdate = z.infer<typeof trafficSettingsUpdate>;
+/** GET /v1/traffic/settings, and the PUT answer. */
+export declare const trafficSettingsView: z.ZodObject<{
+    enabled: z.ZodBoolean;
+    retentionDays: z.ZodNumber;
+    status: z.ZodEnum<{
+        error: "error";
+        off: "off";
+        running: "running";
+        starting: "starting";
+    }>;
+    lastError: z.ZodNullable<z.ZodString>;
+    lastIngestAt: z.ZodNullable<z.ZodString>;
+    logBytes: z.ZodNumber;
+    malformedLines: z.ZodNumber;
+    dockerLogDriver: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type TrafficSettingsView = z.infer<typeof trafficSettingsView>;
+/** GET /v1/traffic/summary and /v1/services/:id/traffic query. */
+export declare const trafficSummaryQuery: z.ZodObject<{
+    range: z.ZodDefault<z.ZodEnum<{
+        "1h": "1h";
+        "24h": "24h";
+        "30d": "30d";
+        "7d": "7d";
+    }>>;
+    top: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+}, z.core.$strict>;
+export type TrafficSummaryQuery = z.infer<typeof trafficSummaryQuery>;
+/** Counters shared by a bucket, a domain row and the totals. */
+export declare const trafficCounters: z.ZodObject<{
+    requests: z.ZodNumber;
+    status1xx: z.ZodNumber;
+    status2xx: z.ZodNumber;
+    status3xx: z.ZodNumber;
+    status4xx: z.ZodNumber;
+    status5xx: z.ZodNumber;
+    statusOther: z.ZodNumber;
+    bytesOut: z.ZodNumber;
+    durationSumMs: z.ZodNumber;
+    durationMaxMs: z.ZodNumber;
+}, z.core.$strip>;
+export type TrafficCounters = z.infer<typeof trafficCounters>;
+/** Percentiles estimated from the histogram; null when there were no requests. */
+export declare const trafficPercentiles: z.ZodObject<{
+    p50Ms: z.ZodNullable<z.ZodNumber>;
+    p95Ms: z.ZodNullable<z.ZodNumber>;
+    p99Ms: z.ZodNullable<z.ZodNumber>;
+}, z.core.$strip>;
+export type TrafficPercentiles = z.infer<typeof trafficPercentiles>;
+export declare const trafficBucket: z.ZodObject<{
+    requests: z.ZodNumber;
+    status1xx: z.ZodNumber;
+    status2xx: z.ZodNumber;
+    status3xx: z.ZodNumber;
+    status4xx: z.ZodNumber;
+    status5xx: z.ZodNumber;
+    statusOther: z.ZodNumber;
+    bytesOut: z.ZodNumber;
+    durationSumMs: z.ZodNumber;
+    durationMaxMs: z.ZodNumber;
+    t: z.ZodString;
+}, z.core.$strip>;
+export type TrafficBucket = z.infer<typeof trafficBucket>;
+/** One domain (or the panel / custom / other bucket) over the range. */
+export declare const trafficScopeTotal: z.ZodObject<{
+    requests: z.ZodNumber;
+    status1xx: z.ZodNumber;
+    status2xx: z.ZodNumber;
+    status3xx: z.ZodNumber;
+    status4xx: z.ZodNumber;
+    status5xx: z.ZodNumber;
+    statusOther: z.ZodNumber;
+    bytesOut: z.ZodNumber;
+    durationSumMs: z.ZodNumber;
+    durationMaxMs: z.ZodNumber;
+    p50Ms: z.ZodNullable<z.ZodNumber>;
+    p95Ms: z.ZodNullable<z.ZodNumber>;
+    p99Ms: z.ZodNullable<z.ZodNumber>;
+    scopeKey: z.ZodString;
+    domainId: z.ZodNullable<z.ZodNumber>;
+    serviceId: z.ZodNullable<z.ZodNumber>;
+    host: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type TrafficScopeTotal = z.infer<typeof trafficScopeTotal>;
+/** GET /v1/traffic/summary (operator): the whole instance. */
+export declare const trafficSummary: z.ZodObject<{
+    enabled: z.ZodBoolean;
+    range: z.ZodEnum<{
+        "1h": "1h";
+        "24h": "24h";
+        "30d": "30d";
+        "7d": "7d";
+    }>;
+    granularity: z.ZodUnion<readonly [z.ZodLiteral<60>, z.ZodLiteral<3600>]>;
+    totals: z.ZodObject<{
+        requests: z.ZodNumber;
+        status1xx: z.ZodNumber;
+        status2xx: z.ZodNumber;
+        status3xx: z.ZodNumber;
+        status4xx: z.ZodNumber;
+        status5xx: z.ZodNumber;
+        statusOther: z.ZodNumber;
+        bytesOut: z.ZodNumber;
+        durationSumMs: z.ZodNumber;
+        durationMaxMs: z.ZodNumber;
+        p50Ms: z.ZodNullable<z.ZodNumber>;
+        p95Ms: z.ZodNullable<z.ZodNumber>;
+        p99Ms: z.ZodNullable<z.ZodNumber>;
+    }, z.core.$strip>;
+    series: z.ZodArray<z.ZodObject<{
+        requests: z.ZodNumber;
+        status1xx: z.ZodNumber;
+        status2xx: z.ZodNumber;
+        status3xx: z.ZodNumber;
+        status4xx: z.ZodNumber;
+        status5xx: z.ZodNumber;
+        statusOther: z.ZodNumber;
+        bytesOut: z.ZodNumber;
+        durationSumMs: z.ZodNumber;
+        durationMaxMs: z.ZodNumber;
+        t: z.ZodString;
+    }, z.core.$strip>>;
+    topDomains: z.ZodArray<z.ZodObject<{
+        requests: z.ZodNumber;
+        status1xx: z.ZodNumber;
+        status2xx: z.ZodNumber;
+        status3xx: z.ZodNumber;
+        status4xx: z.ZodNumber;
+        status5xx: z.ZodNumber;
+        statusOther: z.ZodNumber;
+        bytesOut: z.ZodNumber;
+        durationSumMs: z.ZodNumber;
+        durationMaxMs: z.ZodNumber;
+        p50Ms: z.ZodNullable<z.ZodNumber>;
+        p95Ms: z.ZodNullable<z.ZodNumber>;
+        p99Ms: z.ZodNullable<z.ZodNumber>;
+        scopeKey: z.ZodString;
+        domainId: z.ZodNullable<z.ZodNumber>;
+        serviceId: z.ZodNullable<z.ZodNumber>;
+        host: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+    panel: z.ZodNullable<z.ZodObject<{
+        requests: z.ZodNumber;
+        status1xx: z.ZodNumber;
+        status2xx: z.ZodNumber;
+        status3xx: z.ZodNumber;
+        status4xx: z.ZodNumber;
+        status5xx: z.ZodNumber;
+        statusOther: z.ZodNumber;
+        bytesOut: z.ZodNumber;
+        durationSumMs: z.ZodNumber;
+        durationMaxMs: z.ZodNumber;
+        p50Ms: z.ZodNullable<z.ZodNumber>;
+        p95Ms: z.ZodNullable<z.ZodNumber>;
+        p99Ms: z.ZodNullable<z.ZodNumber>;
+        scopeKey: z.ZodString;
+        domainId: z.ZodNullable<z.ZodNumber>;
+        serviceId: z.ZodNullable<z.ZodNumber>;
+        host: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+    custom: z.ZodNullable<z.ZodObject<{
+        requests: z.ZodNumber;
+        status1xx: z.ZodNumber;
+        status2xx: z.ZodNumber;
+        status3xx: z.ZodNumber;
+        status4xx: z.ZodNumber;
+        status5xx: z.ZodNumber;
+        statusOther: z.ZodNumber;
+        bytesOut: z.ZodNumber;
+        durationSumMs: z.ZodNumber;
+        durationMaxMs: z.ZodNumber;
+        p50Ms: z.ZodNullable<z.ZodNumber>;
+        p95Ms: z.ZodNullable<z.ZodNumber>;
+        p99Ms: z.ZodNullable<z.ZodNumber>;
+        scopeKey: z.ZodString;
+        domainId: z.ZodNullable<z.ZodNumber>;
+        serviceId: z.ZodNullable<z.ZodNumber>;
+        host: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type TrafficSummary = z.infer<typeof trafficSummary>;
+/** GET /v1/services/:id/traffic (any seat on the service). Empty series, never 404, without data. */
+export declare const serviceTrafficSummary: z.ZodObject<{
+    enabled: z.ZodBoolean;
+    range: z.ZodEnum<{
+        "1h": "1h";
+        "24h": "24h";
+        "30d": "30d";
+        "7d": "7d";
+    }>;
+    granularity: z.ZodUnion<readonly [z.ZodLiteral<60>, z.ZodLiteral<3600>]>;
+    totals: z.ZodObject<{
+        requests: z.ZodNumber;
+        status1xx: z.ZodNumber;
+        status2xx: z.ZodNumber;
+        status3xx: z.ZodNumber;
+        status4xx: z.ZodNumber;
+        status5xx: z.ZodNumber;
+        statusOther: z.ZodNumber;
+        bytesOut: z.ZodNumber;
+        durationSumMs: z.ZodNumber;
+        durationMaxMs: z.ZodNumber;
+        p50Ms: z.ZodNullable<z.ZodNumber>;
+        p95Ms: z.ZodNullable<z.ZodNumber>;
+        p99Ms: z.ZodNullable<z.ZodNumber>;
+    }, z.core.$strip>;
+    series: z.ZodArray<z.ZodObject<{
+        requests: z.ZodNumber;
+        status1xx: z.ZodNumber;
+        status2xx: z.ZodNumber;
+        status3xx: z.ZodNumber;
+        status4xx: z.ZodNumber;
+        status5xx: z.ZodNumber;
+        statusOther: z.ZodNumber;
+        bytesOut: z.ZodNumber;
+        durationSumMs: z.ZodNumber;
+        durationMaxMs: z.ZodNumber;
+        t: z.ZodString;
+    }, z.core.$strip>>;
+    domains: z.ZodArray<z.ZodObject<{
+        requests: z.ZodNumber;
+        status1xx: z.ZodNumber;
+        status2xx: z.ZodNumber;
+        status3xx: z.ZodNumber;
+        status4xx: z.ZodNumber;
+        status5xx: z.ZodNumber;
+        statusOther: z.ZodNumber;
+        bytesOut: z.ZodNumber;
+        durationSumMs: z.ZodNumber;
+        durationMaxMs: z.ZodNumber;
+        p50Ms: z.ZodNullable<z.ZodNumber>;
+        p95Ms: z.ZodNullable<z.ZodNumber>;
+        p99Ms: z.ZodNullable<z.ZodNumber>;
+        scopeKey: z.ZodString;
+        domainId: z.ZodNullable<z.ZodNumber>;
+        serviceId: z.ZodNullable<z.ZodNumber>;
+        host: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type ServiceTrafficSummary = z.infer<typeof serviceTrafficSummary>;
+//# sourceMappingURL=traffic.d.ts.map

package/dist/traffic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"traffic.d.ts","sourceRoot":"","sources":["../src/traffic.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAC5C,eAAO,MAAM,0BAA0B,MAAM,CAAC;AAC9C,eAAO,MAAM,8BAA8B,KAAK,CAAC;AACjD,eAAO,MAAM,eAAe,KAAK,CAAC;AAElC,2DAA2D;AAC3D,eAAO,MAAM,qBAAqB,YAAI,EAAE,EAAE,IAAI,CAAU,CAAC;AACzD,eAAO,MAAM,kBAAkB,6DAA4C,CAAC;AAC5E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE,8EAA8E;AAC9E,eAAO,MAAM,wBAAwB,YAAI,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAU,CAAC;AACzG,gEAAgE;AAChE,eAAO,MAAM,uBAAuB,QAAsC,CAAC;AAE3E,eAAO,MAAM,YAAY;;;;;EAAqC,CAAC;AAC/D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,0DAA0D;AAC1D,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,YAAY,GAAG,kBAAkB,CAE/E;AAED,eAAO,MAAM,aAAa;;;;;EAAkD,CAAC;AAC7E,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,yFAAyF;AACzF,eAAO,MAAM,qBAAqB;;;kBAKvB,CAAC;AACZ,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE1E,oDAAoD;AACpD,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;iBAU9B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,kEAAkE;AAClE,eAAO,MAAM,mBAAmB;;;;;;;;kBAKrB,CAAC;AACZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,gEAAgE;AAChE,eAAO,MAAM,eAAe;;;;;;;;;;;iBAW1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,kFAAkF;AAClF,eAAO,MAAM,kBAAkB;;;;iBAI7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE,eAAO,MAAM,aAAa;;;;;;;;;;;;iBAGxB,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D,wEAAwE;AACxE,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;iBAO5B,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,8DAA8D;AAC9D,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBASzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,qGAAqG;AACrG,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAOhC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/traffic.js

@@ -0,0 +1,103 @@
+import { z } from 'zod';
+// ── Traffic analytics (0.15) ────────────────────────────────────────────────
+// Request and response shapes for `/v1/traffic` and
+// `/v1/services/:id/traffic`. Analytics is opt-in everywhere (owner decision
+// O3): with it off, Traefik's static config is byte-identical to 0.14. Only
+// aggregate counters are kept — no client IP, path, query string or header.
+// Design: DESIGN.md §2.
+export const TRAFFIC_RETENTION_DAYS_MIN = 1;
+export const TRAFFIC_RETENTION_DAYS_MAX = 400;
+export const TRAFFIC_RETENTION_DAYS_DEFAULT = 30;
+export const TRAFFIC_TOP_MAX = 50;
+/** Bucket widths in seconds: minute rows and hour rows. */
+export const TRAFFIC_GRANULARITIES = [60, 3600];
+export const trafficGranularity = z.union([z.literal(60), z.literal(3600)]);
+/** Upper edges (ms) of the latency histogram; one overflow bucket follows. */
+export const TRAFFIC_LATENCY_EDGES_MS = [5, 10, 25, 50, 100, 250, 500, 1000, 2500, 5000, 10000];
+/** Buckets in `latencyHist`: one per edge plus the overflow. */
+export const TRAFFIC_LATENCY_BUCKETS = TRAFFIC_LATENCY_EDGES_MS.length + 1;
+export const trafficRange = z.enum(['1h', '24h', '7d', '30d']);
+/** Minute buckets for 1h/24h, hour buckets for 7d/30d. */
+export function trafficRangeGranularity(range) {
+    return range === '1h' || range === '24h' ? 60 : 3600;
+}
+export const trafficStatus = z.enum(['off', 'starting', 'running', 'error']);
+/** PUT /v1/traffic/settings (operator). Enabling or disabling recreates Traefik once. */
+export const trafficSettingsUpdate = z
+    .object({
+    enabled: z.boolean().optional(),
+    retentionDays: z.number().int().min(TRAFFIC_RETENTION_DAYS_MIN).max(TRAFFIC_RETENTION_DAYS_MAX).optional(),
+})
+    .strict();
+/** GET /v1/traffic/settings, and the PUT answer. */
+export const trafficSettingsView = z.object({
+    enabled: z.boolean(),
+    retentionDays: z.number().int(),
+    status: trafficStatus,
+    lastError: z.string().nullable(),
+    lastIngestAt: z.string().nullable(),
+    logBytes: z.number().int().nonnegative(),
+    malformedLines: z.number().int().nonnegative(),
+    /** `docker info` LoggingDriver; null when Docker did not answer. */
+    dockerLogDriver: z.string().nullable(),
+});
+/** GET /v1/traffic/summary and /v1/services/:id/traffic query. */
+export const trafficSummaryQuery = z
+    .object({
+    range: trafficRange.default('24h'),
+    top: z.coerce.number().int().min(1).max(TRAFFIC_TOP_MAX).default(10),
+})
+    .strict();
+/** Counters shared by a bucket, a domain row and the totals. */
+export const trafficCounters = z.object({
+    requests: z.number().int().nonnegative(),
+    status1xx: z.number().int().nonnegative(),
+    status2xx: z.number().int().nonnegative(),
+    status3xx: z.number().int().nonnegative(),
+    status4xx: z.number().int().nonnegative(),
+    status5xx: z.number().int().nonnegative(),
+    statusOther: z.number().int().nonnegative(),
+    bytesOut: z.number().int().nonnegative(),
+    durationSumMs: z.number().int().nonnegative(),
+    durationMaxMs: z.number().int().nonnegative(),
+});
+/** Percentiles estimated from the histogram; null when there were no requests. */
+export const trafficPercentiles = z.object({
+    p50Ms: z.number().nonnegative().nullable(),
+    p95Ms: z.number().nonnegative().nullable(),
+    p99Ms: z.number().nonnegative().nullable(),
+});
+export const trafficBucket = trafficCounters.extend({
+    /** Bucket start, ISO 8601. */
+    t: z.string(),
+});
+/** One domain (or the panel / custom / other bucket) over the range. */
+export const trafficScopeTotal = trafficCounters.extend(trafficPercentiles.shape).extend({
+    /** `d:<domainId>` | `panel` | `custom` | `other`. */
+    scopeKey: z.string(),
+    domainId: z.number().int().positive().nullable(),
+    serviceId: z.number().int().positive().nullable(),
+    /** The host as recorded, kept after the domain is deleted. */
+    host: z.string().nullable(),
+});
+/** GET /v1/traffic/summary (operator): the whole instance. */
+export const trafficSummary = z.object({
+    enabled: z.boolean(),
+    range: trafficRange,
+    granularity: trafficGranularity,
+    totals: trafficCounters.extend(trafficPercentiles.shape),
+    series: z.array(trafficBucket),
+    topDomains: z.array(trafficScopeTotal),
+    panel: trafficScopeTotal.nullable(),
+    custom: trafficScopeTotal.nullable(),
+});
+/** GET /v1/services/:id/traffic (any seat on the service). Empty series, never 404, without data. */
+export const serviceTrafficSummary = z.object({
+    enabled: z.boolean(),
+    range: trafficRange,
+    granularity: trafficGranularity,
+    totals: trafficCounters.extend(trafficPercentiles.shape),
+    series: z.array(trafficBucket),
+    domains: z.array(trafficScopeTotal),
+});
+//# sourceMappingURL=traffic.js.map

package/dist/traffic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"traffic.js","sourceRoot":"","sources":["../src/traffic.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,+EAA+E;AAC/E,oDAAoD;AACpD,6EAA6E;AAC7E,4EAA4E;AAC5E,4EAA4E;AAC5E,wBAAwB;AAExB,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAC5C,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAC9C,MAAM,CAAC,MAAM,8BAA8B,GAAG,EAAE,CAAC;AACjD,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAElC,2DAA2D;AAC3D,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,EAAE,EAAE,IAAI,CAAU,CAAC;AACzD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAG5E,8EAA8E;AAC9E,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAU,CAAC;AACzG,gEAAgE;AAChE,MAAM,CAAC,MAAM,uBAAuB,GAAG,wBAAwB,CAAC,MAAM,GAAG,CAAC,CAAC;AAE3E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;AAG/D,0DAA0D;AAC1D,MAAM,UAAU,uBAAuB,CAAC,KAAmB;IACzD,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;AAG7E,yFAAyF;AACzF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,QAAQ,EAAE;CAC3G,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,oDAAoD;AACpD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC/B,MAAM,EAAE,aAAa;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC9C,oEAAoE;IACpE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAGH,kEAAkE;AAClE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC;IAClC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACrE,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,gEAAgE;AAChE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACzC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC3C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC7C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CAC9C,CAAC,CAAC;AAGH,kFAAkF;AAClF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC1C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC1C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,aAAa,GAAG,eAAe,CAAC,MAAM,CAAC;IAClD,8BAA8B;IAC9B,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;CACd,CAAC,CAAC;AAGH,wEAAwE;AACxE,MAAM,CAAC,MAAM,iBAAiB,GAAG,eAAe,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IACvF,qDAAqD;IACrD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAChD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjD,8DAA8D;IAC9D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAGH,8DAA8D;AAC9D,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,KAAK,EAAE,YAAY;IACnB,WAAW,EAAE,kBAAkB;IAC/B,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC;IACxD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;IAC9B,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;IACtC,KAAK,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACnC,MAAM,EAAE,iBAAiB,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAGH,qGAAqG;AACrG,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,KAAK,EAAE,YAAY;IACnB,WAAW,EAAE,kBAAkB;IAC/B,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC;IACxD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;CACpC,CAAC,CAAC"}

package/dist/workspaces.d.ts

@@ -123,6 +123,11 @@ export interface WorkspaceInvitationPublic {
     invitedByName: string | null;
     expiresAt: string;
 }
+/**
+ * r507: one allowed email domain for an SSO provider (`corp.com`; a leading
+ * `@` is tolerated and dropped). Matching is exact — list subdomains you mean.
+ */
+export declare const oidcAllowedDomain: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
 export declare const oidcProviderCreate: z.ZodObject<{
     name: z.ZodString;
     slug: z.ZodString;
@@ -136,9 +141,15 @@ export declare const oidcProviderCreate: z.ZodObject<{
         admin: "admin";
         member: "member";
     }>>;
+    allowedDomains: z.ZodOptional<z.ZodArray<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>>;
 }, z.core.$strip>;
 export type OidcProviderCreate = z.infer<typeof oidcProviderCreate>;
-export type OidcProviderCreateInput = OidcProviderCreate;
+/**
+ * What a client sends: fields with a server-side default are optional (F1014:
+ * so a caller never has to send the deprecated `defaultRole`). Same shape as
+ * the other `*Input` aliases (`z.input`).
+ */
+export type OidcProviderCreateInput = z.input<typeof oidcProviderCreate>;
 export declare const oidcProviderUpdate: z.ZodObject<{
     name: z.ZodOptional<z.ZodString>;
     issuerUrl: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -151,6 +162,7 @@ export declare const oidcProviderUpdate: z.ZodObject<{
         admin: "admin";
         member: "member";
     }>>;
+    allowedDomains: z.ZodOptional<z.ZodArray<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>>;
 }, z.core.$strip>;
 export type OidcProviderUpdate = z.infer<typeof oidcProviderUpdate>;
 export type OidcProviderUpdateInput = OidcProviderUpdate;
@@ -163,7 +175,13 @@ export interface OidcProviderEntry {
     scopes: string;
     enabled: boolean;
     autoEnroll: boolean;
+    /**
+     * @deprecated F1014: the stored value, echoed for compatibility. It has no
+     * effect on OIDC sign-ins; see oidcProviderCreate.defaultRole.
+     */
     defaultRole: 'admin' | 'member';
+    /** r507: email domains allowed to sign in / enroll; empty = unrestricted. */
+    allowedDomains: string[];
     createdAt: string;
     updatedAt: string;
 }

package/dist/workspaces.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspaces.d.ts","sourceRoot":"","sources":["../src/workspaces.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,iBAAiB;;;;;EAAiD,CAAC;AAChF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE9D;;;;8EAI8E;AAC9E,eAAO,MAAM,2BAA2B;;;;EAAwC,CAAC;AACjF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAElF,eAAO,MAAM,eAAe;;;;iBAI1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAC9D,MAAM,MAAM,oBAAoB,GAAG,eAAe,CAAC;AAEnD,eAAO,MAAM,eAAe;;;iBAKiD,CAAC;AAC9E,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAC9D,MAAM,MAAM,oBAAoB,GAAG,eAAe,CAAC;AAEnD,eAAO,MAAM,kBAAkB;;;;;;;iBAG7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACpE,MAAM,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AAEzD,eAAO,MAAM,yBAAyB;;;;;;;iBAEpC,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAClF,MAAM,MAAM,8BAA8B,GAAG,yBAAyB,CAAC;AAEvE,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,aAAa,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,YAAY,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,aAAa,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,aAAa,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,MAAM,MAAM,SAAS,GAAG,cAAc,CAAC;AAEvC,MAAM,WAAW,eAAgB,SAAQ,cAAc;IACrD,OAAO,EAAE,oBAAoB,EAAE,CAAC;CACjC;AAOD,eAAO,MAAM,yBAAyB;;;;;;;iBAGpC,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAClF,MAAM,MAAM,8BAA8B,GAAG,yBAAyB,CAAC;AAEvE,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,aAAa,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,iFAAiF;AACjF,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,aAAa,CAAC;IACpB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;CACnB;AAGD,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;iBAU7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACpE,MAAM,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AAEzD,eAAO,MAAM,kBAAkB;;;;;;;;;;;;iBAW8C,CAAC;AAC9E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACpE,MAAM,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AAEzD,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,EAAE,OAAO,GAAG,QAAQ,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB"}
+{"version":3,"file":"workspaces.d.ts","sourceRoot":"","sources":["../src/workspaces.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,iBAAiB;;;;;EAAiD,CAAC;AAChF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE9D;;;;8EAI8E;AAC9E,eAAO,MAAM,2BAA2B;;;;EAAwC,CAAC;AACjF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAElF,eAAO,MAAM,eAAe;;;;iBAI1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAC9D,MAAM,MAAM,oBAAoB,GAAG,eAAe,CAAC;AAEnD,eAAO,MAAM,eAAe;;;iBAKiD,CAAC;AAC9E,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAC9D,MAAM,MAAM,oBAAoB,GAAG,eAAe,CAAC;AAEnD,eAAO,MAAM,kBAAkB;;;;;;;iBAG7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACpE,MAAM,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AAEzD,eAAO,MAAM,yBAAyB;;;;;;;iBAEpC,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAClF,MAAM,MAAM,8BAA8B,GAAG,yBAAyB,CAAC;AAEvE,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,aAAa,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,YAAY,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,aAAa,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,aAAa,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,MAAM,MAAM,SAAS,GAAG,cAAc,CAAC;AAEvC,MAAM,WAAW,eAAgB,SAAQ,cAAc;IACrD,OAAO,EAAE,oBAAoB,EAAE,CAAC;CACjC;AAOD,eAAO,MAAM,yBAAyB;;;;;;;iBAGpC,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAClF,MAAM,MAAM,8BAA8B,GAAG,yBAAyB,CAAC;AAEvE,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,aAAa,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,iFAAiF;AACjF,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,aAAa,CAAC;IACpB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;CACnB;AAGD;;;GAGG;AACH,eAAO,MAAM,iBAAiB,gFAW3B,CAAC;AAGJ,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;iBAmB7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACpE;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEzE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;iBAa8C,CAAC;AAC9E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACpE,MAAM,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AAEzD,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,OAAO,CAAC;IACpB;;;OAGG;IACH,WAAW,EAAE,OAAO,GAAG,QAAQ,CAAC;IAChC,6EAA6E;IAC7E,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB"}