@noresponse/node 8.4.1 → 9.1.0

package/dist/commonjs/sdk/exports.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Exports = void 0;
+const exports_cancel_js_1 = require("../funcs/exports-cancel.js");
+const exports_create_js_1 = require("../funcs/exports-create.js");
+const exports_download_chunk_js_1 = require("../funcs/exports-download-chunk.js");
+const exports_get_js_1 = require("../funcs/exports-get.js");
+const exports_list_js_1 = require("../funcs/exports-list.js");
+const exports_retry_js_1 = require("../funcs/exports-retry.js");
+const sdks_js_1 = require("../lib/sdks.js");
+const fp_js_1 = require("../types/fp.js");
+const operations_js_1 = require("../types/operations.js");
+class Exports extends sdks_js_1.ClientSDK {
+    /**
+     * Request an asynchronous customer export.
+     *
+     * @remarks
+     * Request an encrypted JSON Lines snapshot of retained account or audit records. Requires exports plus history or audit scope; detailed account data also needs evidence or detailed scope. Criteria are frozen and hashed. Each environment permits four active jobs, 64 MiB per artifact, and 256 KiB per chunk. Artifacts expire after 24 hours. Send an Idempotency-Key to safely repeat a request. Every operation checks current permissions and source retention.
+     */
+    async create(request, options) {
+        return (0, fp_js_1.unwrapAsync)((0, exports_create_js_1.exportsCreate)(this, request, options));
+    }
+    /**
+     * List exports for one collection.
+     *
+     * @remarks
+     * List authorised jobs for one kind and environment. Detailed jobs require current detailed-data permission and are filtered before pagination. Keep the kind and environment unchanged when following next_cursor.
+     */
+    async list(request, options) {
+        return (0, operations_js_1.unwrapResultIterator)((0, exports_list_js_1.exportsList)(this, request, options));
+    }
+    /**
+     * Read export state and progress.
+     *
+     * @remarks
+     * Read the status of an authorised export. Records and bytes describe committed progress in the current generation. Only completed, unexpired artifacts can be downloaded. Source erasure, retention changes and workspace removal can invalidate a job.
+     */
+    async get(request, options) {
+        return (0, fp_js_1.unwrapAsync)((0, exports_get_js_1.exportsGet)(this, request, options));
+    }
+    /**
+     * Cancel and remove an export artifact.
+     *
+     * @remarks
+     * Cancel an export and remove its stored chunks. Repeating cancellation is safe. An already admitted download may finish; bytes already returned cannot be recalled. Send an empty JSON object.
+     */
+    async cancel(request, options) {
+        return (0, fp_js_1.unwrapAsync)((0, exports_cancel_js_1.exportsCancel)(this, request, options));
+    }
+    /**
+     * Retry a failed export.
+     *
+     * @remarks
+     * Start a new generation of a failed export before its original expiry, up to ten generations. The request criteria stay fixed and the new generation takes a fresh source snapshot. Cancelled, erased and expired jobs cannot be retried. Send an empty JSON object.
+     */
+    async retry(request, options) {
+        return (0, fp_js_1.unwrapAsync)((0, exports_retry_js_1.exportsRetry)(this, request, options));
+    }
+    /**
+     * Download one authorized export chunk.
+     *
+     * @remarks
+     * Download one chunk of a completed, unexpired export after a fresh permission and privacy check. The response contains base64-encoded JSON Lines, a SHA-256, generation and next index. Decode and concatenate chunks in order from one generation. Audit storage failure withholds the bytes.
+     */
+    async downloadChunk(request, options) {
+        return (0, fp_js_1.unwrapAsync)((0, exports_download_chunk_js_1.exportsDownloadChunk)(this, request, options));
+    }
+}
+exports.Exports = Exports;
+//# sourceMappingURL=exports.js.map

package/dist/commonjs/sdk/exports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exports.js","sourceRoot":"","sources":["../../../src/sdk/exports.ts"],"names":[],"mappings":";;;AAAA,kEAA2D;AAC3D,kEAA2D;AAC3D,kFAA0E;AAC1E,4DAAqD;AACrD,8DAAuD;AACvD,gEAAyD;AACzD,4CAA2D;AAE3D,0CAA6C;AAC7C,0DAA4E;AAE5E,aAAqB,SAAQ,mBAAS;IACpC;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAA+C,EAC/C,OAAwB,EAC0B;QAClD,OAAO,IAAA,mBAAW,EAAC,IAAA,iCAAa,EAC9B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CACR,OAA8C,EAC9C,OAAwB,EAGxB;QACA,OAAO,IAAA,oCAAoB,EAAC,IAAA,6BAAW,EACrC,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,GAAG,CACP,OAA4C,EAC5C,OAAwB,EACuB;QAC/C,OAAO,IAAA,mBAAW,EAAC,IAAA,2BAAU,EAC3B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAA+C,EAC/C,OAAwB,EAC0B;QAClD,OAAO,IAAA,mBAAW,EAAC,IAAA,iCAAa,EAC9B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,KAAK,CACT,OAA8C,EAC9C,OAAwB,EACyB;QACjD,OAAO,IAAA,mBAAW,EAAC,IAAA,+BAAY,EAC7B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CACjB,OAAsD,EACtD,OAAwB,EACiC;QACzD,OAAO,IAAA,mBAAW,EAAC,IAAA,gDAAoB,EACrC,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;CACF"}

package/dist/commonjs/sdk/invites.d.ts

@@ -0,0 +1,33 @@
+import { ClientSDK, RequestOptions } from "../lib/sdks.js";
+import * as operations from "../models/operations/index.js";
+export declare class Invites extends ClientSDK {
+    /**
+     * Invite a member.
+     *
+     * @remarks
+     * Create a workspace-bound invite for a non-owner role with a live members_manage key. The new token is returned once. Set external_user_id to bind acceptance to an exact verified provider subject; email is contact information. Creating a token does not send an email.
+     */
+    create(request: operations.CreateInviteRequest, options?: RequestOptions): Promise<operations.CreateInviteResponse>;
+    /**
+     * List pending invites.
+     *
+     * @remarks
+     * Read pending workspace invitations with a live members_manage key. Tokens are excluded. Expiry and token reissue timestamps describe invitation state; they do not establish email delivery.
+     */
+    list(request: operations.ListInvitesRequest, options?: RequestOptions): Promise<operations.ListInvitesResponse>;
+    /**
+     * Revoke an invite.
+     *
+     * @remarks
+     * Revoke a pending invitation with a live members_manage key. A revoked token cannot be accepted. Owner-role invitations remain outside machine delegation.
+     */
+    revoke(request: operations.RevokeInviteRequest, options?: RequestOptions): Promise<operations.RevokeInviteResponse | undefined>;
+    /**
+     * Reissue an invitation for delivery.
+     *
+     * @remarks
+     * Reissue a pending non-owner invitation with a live members_manage key. The old token is invalidated and the new token is returned once with renewed expiry. Its role and permissions are preserved. This operation does not prove email delivery and is not automatically retried.
+     */
+    resend(request: operations.ResendInviteRequest, options?: RequestOptions): Promise<operations.ResendInviteResponse>;
+}
+//# sourceMappingURL=invites.d.ts.map

package/dist/commonjs/sdk/invites.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invites.d.ts","sourceRoot":"","sources":["../../../src/sdk/invites.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAG5D,qBAAa,OAAQ,SAAQ,SAAS;IACpC;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,UAAU,CAAC,mBAAmB,EACvC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAM1C;IAED;;;;;OAKG;IACG,IAAI,CACR,OAAO,EAAE,UAAU,CAAC,kBAAkB,EACtC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAMzC;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,UAAU,CAAC,mBAAmB,EACvC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAMtD;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,UAAU,CAAC,mBAAmB,EACvC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAM1C;CACF"}

package/dist/commonjs/sdk/invites.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Invites = void 0;
+const invites_create_js_1 = require("../funcs/invites-create.js");
+const invites_list_js_1 = require("../funcs/invites-list.js");
+const invites_resend_js_1 = require("../funcs/invites-resend.js");
+const invites_revoke_js_1 = require("../funcs/invites-revoke.js");
+const sdks_js_1 = require("../lib/sdks.js");
+const fp_js_1 = require("../types/fp.js");
+class Invites extends sdks_js_1.ClientSDK {
+    /**
+     * Invite a member.
+     *
+     * @remarks
+     * Create a workspace-bound invite for a non-owner role with a live members_manage key. The new token is returned once. Set external_user_id to bind acceptance to an exact verified provider subject; email is contact information. Creating a token does not send an email.
+     */
+    async create(request, options) {
+        return (0, fp_js_1.unwrapAsync)((0, invites_create_js_1.invitesCreate)(this, request, options));
+    }
+    /**
+     * List pending invites.
+     *
+     * @remarks
+     * Read pending workspace invitations with a live members_manage key. Tokens are excluded. Expiry and token reissue timestamps describe invitation state; they do not establish email delivery.
+     */
+    async list(request, options) {
+        return (0, fp_js_1.unwrapAsync)((0, invites_list_js_1.invitesList)(this, request, options));
+    }
+    /**
+     * Revoke an invite.
+     *
+     * @remarks
+     * Revoke a pending invitation with a live members_manage key. A revoked token cannot be accepted. Owner-role invitations remain outside machine delegation.
+     */
+    async revoke(request, options) {
+        return (0, fp_js_1.unwrapAsync)((0, invites_revoke_js_1.invitesRevoke)(this, request, options));
+    }
+    /**
+     * Reissue an invitation for delivery.
+     *
+     * @remarks
+     * Reissue a pending non-owner invitation with a live members_manage key. The old token is invalidated and the new token is returned once with renewed expiry. Its role and permissions are preserved. This operation does not prove email delivery and is not automatically retried.
+     */
+    async resend(request, options) {
+        return (0, fp_js_1.unwrapAsync)((0, invites_resend_js_1.invitesResend)(this, request, options));
+    }
+}
+exports.Invites = Invites;
+//# sourceMappingURL=invites.js.map

package/dist/commonjs/sdk/invites.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invites.js","sourceRoot":"","sources":["../../../src/sdk/invites.ts"],"names":[],"mappings":";;;AAAA,kEAA2D;AAC3D,8DAAuD;AACvD,kEAA2D;AAC3D,kEAA2D;AAC3D,4CAA2D;AAE3D,0CAA6C;AAE7C,aAAqB,SAAQ,mBAAS;IACpC;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAAuC,EACvC,OAAwB,EACkB;QAC1C,OAAO,IAAA,mBAAW,EAAC,IAAA,iCAAa,EAC9B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CACR,OAAsC,EACtC,OAAwB,EACiB;QACzC,OAAO,IAAA,mBAAW,EAAC,IAAA,6BAAW,EAC5B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAAuC,EACvC,OAAwB,EAC8B;QACtD,OAAO,IAAA,mBAAW,EAAC,IAAA,iCAAa,EAC9B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAAuC,EACvC,OAAwB,EACkB;QAC1C,OAAO,IAAA,mBAAW,EAAC,IAAA,iCAAa,EAC9B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;CACF"}

package/dist/commonjs/sdk/keys.d.ts

@@ -13,7 +13,7 @@ export declare class Keys extends ClientSDK {
      * Create an API key.
      *
      * @remarks
-     * Creates an API key in the environment of the key that signs the request, with scopes that key holds itself, and returns its secret once in key. Requires the management scope; the new key may hold it too. A scope the signing key lacks answers 403 workspace_forbidden, and the other environment 404 not_found. An environment holds at most 100 keys that authenticate (409 key_limit_reached). created_by is the signing key's prefix. Not idempotent: a retry after a lost answer creates a second key, which you can list and revoke.
+     * Create an API key in the signing key environment with authority no greater than the issuer holds. Requires management. Optional name, purpose, kind and expiry describe its lifecycle. Send request_id for safe issuance retries: the first successful response returns the secret once; a repeat returns existing metadata without the secret, and changed parameters conflict. Without request_id a retry can create another key. A service credential is independent of its issuer; personal credentials require an authenticated member and retire when that member loses authority.
      */
     create(request: operations.CreateKeyRequest, options?: RequestOptions): Promise<operations.CreateKeyResponse>;
     /**

package/dist/commonjs/sdk/keys.js

@@ -21,7 +21,7 @@ class Keys extends sdks_js_1.ClientSDK {
      * Create an API key.
      *
      * @remarks
-     * Creates an API key in the environment of the key that signs the request, with scopes that key holds itself, and returns its secret once in key. Requires the management scope; the new key may hold it too. A scope the signing key lacks answers 403 workspace_forbidden, and the other environment 404 not_found. An environment holds at most 100 keys that authenticate (409 key_limit_reached). created_by is the signing key's prefix. Not idempotent: a retry after a lost answer creates a second key, which you can list and revoke.
+     * Create an API key in the signing key environment with authority no greater than the issuer holds. Requires management. Optional name, purpose, kind and expiry describe its lifecycle. Send request_id for safe issuance retries: the first successful response returns the secret once; a repeat returns existing metadata without the secret, and changed parameters conflict. Without request_id a retry can create another key. A service credential is independent of its issuer; personal credentials require an authenticated member and retire when that member loses authority.
      */
     async create(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, keys_create_js_1.keysCreate)(this, request, options));

package/dist/commonjs/sdk/lists.d.ts

@@ -1,26 +1,50 @@
 import { ClientSDK, RequestOptions } from "../lib/sdks.js";
 import * as operations from "../models/operations/index.js";
+import { PageIterator } from "../types/operations.js";
 export declare class Lists extends ClientSDK {
     /**
      * List an environment's list entries.
      *
      * @remarks
-     * Lists every entry of the signing key's environment's list, newest first: each an email or an email domain that decides the accounts it matches, block or allow, whatever their score. Requires the management scope; the other environment answers 404 not_found. Read-only and safe to retry.
+     * Page through this environment allow and block entries, with canonical values, reasons and optional expiry. Requires settings or management. Follow the returned cursor until exhausted; a page is not the complete list. The cursor is bound to the environment and current filters.
      */
-    list(request: operations.ListListEntriesRequest, options?: RequestOptions): Promise<operations.ListListEntriesResponse>;
+    list(request: operations.ListListEntriesRequest, options?: RequestOptions): Promise<PageIterator<operations.ListListEntriesResponse, {
+        cursor: string;
+    }>>;
     /**
      * Add an entry to an environment's list.
      *
      * @remarks
-     * Adds an exact email (kind email) or an email domain (kind email_domain) to the signing key's environment's list with the action block or allow, and answers the entry with its value in canonical form. An account matches when one of its assessments sent the email, or an email of the domain: a block entry decides block for every flow and an allow entry allow, block winning when both match, and the account's risk carries list_match with the entry's id while its score is unchanged. Every matching account is re-decided at once and sends account.risk_changed when its decision changes. A value already on the list answers 409 list_entry_exists, a full list 409 list_limit_reached, and an entry matching more than 5,000 accounts 409 list_entry_too_broad. Requires the management scope; the other environment answers 404 not_found.
+     * Add a canonical email or email-domain override with a reason and optional expiry. Requires settings plus policy_publish, or legacy management. Block wins over allow when both match. A small single-entry change retains the documented synchronous match budget; use lists.change for larger changes, whose account propagation is durable and resumable.
      */
     create(request: operations.CreateListEntryRequest, options?: RequestOptions): Promise<operations.CreateListEntryResponse>;
     /**
      * Remove an entry from an environment's list.
      *
      * @remarks
-     * Removes an entry from the signing key's environment's list and re-decides the accounts it matched, the 5,000 most recently assessed at most, each sending account.risk_changed when its decision changes. An unknown or already removed entry answers 404 not_found. Requires the management scope.
+     * Remove an override with settings plus policy_publish, or legacy management. The removal takes effect for new decisions and schedules resumable propagation across matching retained accounts. An unknown or already removed entry answers404. Account risk events announce changed decisions as propagation runs.
      */
     delete(request: operations.DeleteListEntryRequest, options?: RequestOptions): Promise<operations.DeleteListEntryResponse | undefined>;
+    /**
+     * Preview a list override change without side effects.
+     *
+     * @remarks
+     * Preview canonical list matches and current override effects with settings or management. The result states its bounded coverage and changes no list entries.
+     */
+    preview(request: operations.PreviewListRequest, options?: RequestOptions): Promise<operations.PreviewListResponse>;
+    /**
+     * Apply an idempotent atomic bulk list change.
+     *
+     * @remarks
+     * Atomically add and remove a bounded batch of entries with an idempotency key. Requires settings plus policy_publish, or legacy management. The receipt exposes durable account propagation beyond the synchronous single-entry budget; poll lists.getChange until completion.
+     */
+    change(request: operations.ChangeListsRequest, options?: RequestOptions): Promise<operations.ChangeListsResponse>;
+    /**
+     * Read a bulk list change and propagation progress.
+     *
+     * @remarks
+     * Read retained propagation progress for a list change with settings or management.
+     */
+    getChange(request: operations.GetListChangeRequest, options?: RequestOptions): Promise<operations.GetListChangeResponse>;
 }
 //# sourceMappingURL=lists.d.ts.map

package/dist/commonjs/sdk/lists.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"lists.d.ts","sourceRoot":"","sources":["../../../src/sdk/lists.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAG5D,qBAAa,KAAM,SAAQ,SAAS;IAClC;;;;;OAKG;IACG,IAAI,CACR,OAAO,EAAE,UAAU,CAAC,sBAAsB,EAC1C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAM7C;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,UAAU,CAAC,sBAAsB,EAC1C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAM7C;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,UAAU,CAAC,sBAAsB,EAC1C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAMzD;CACF"}
+{"version":3,"file":"lists.d.ts","sourceRoot":"","sources":["../../../src/sdk/lists.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAE5D,OAAO,EAAE,YAAY,EAAwB,MAAM,wBAAwB,CAAC;AAE5E,qBAAa,KAAM,SAAQ,SAAS;IAClC;;;;;OAKG;IACG,IAAI,CACR,OAAO,EAAE,UAAU,CAAC,sBAAsB,EAC1C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CACR,YAAY,CAAC,UAAU,CAAC,uBAAuB,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CACrE,CAMA;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,UAAU,CAAC,sBAAsB,EAC1C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAM7C;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,UAAU,CAAC,sBAAsB,EAC1C,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAMzD;IAED;;;;;OAKG;IACG,OAAO,CACX,OAAO,EAAE,UAAU,CAAC,kBAAkB,EACtC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAMzC;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,UAAU,CAAC,kBAAkB,EACtC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAMzC;IAED;;;;;OAKG;IACG,SAAS,CACb,OAAO,EAAE,UAAU,CAAC,oBAAoB,EACxC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAM3C;CACF"}

package/dist/commonjs/sdk/lists.js

@@ -1,26 +1,30 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Lists = void 0;
+const lists_change_js_1 = require("../funcs/lists-change.js");
 const lists_create_js_1 = require("../funcs/lists-create.js");
 const lists_delete_js_1 = require("../funcs/lists-delete.js");
+const lists_get_change_js_1 = require("../funcs/lists-get-change.js");
 const lists_list_js_1 = require("../funcs/lists-list.js");
+const lists_preview_js_1 = require("../funcs/lists-preview.js");
 const sdks_js_1 = require("../lib/sdks.js");
 const fp_js_1 = require("../types/fp.js");
+const operations_js_1 = require("../types/operations.js");
 class Lists extends sdks_js_1.ClientSDK {
     /**
      * List an environment's list entries.
      *
      * @remarks
-     * Lists every entry of the signing key's environment's list, newest first: each an email or an email domain that decides the accounts it matches, block or allow, whatever their score. Requires the management scope; the other environment answers 404 not_found. Read-only and safe to retry.
+     * Page through this environment allow and block entries, with canonical values, reasons and optional expiry. Requires settings or management. Follow the returned cursor until exhausted; a page is not the complete list. The cursor is bound to the environment and current filters.
      */
     async list(request, options) {
-        return (0, fp_js_1.unwrapAsync)((0, lists_list_js_1.listsList)(this, request, options));
+        return (0, operations_js_1.unwrapResultIterator)((0, lists_list_js_1.listsList)(this, request, options));
     }
     /**
      * Add an entry to an environment's list.
      *
      * @remarks
-     * Adds an exact email (kind email) or an email domain (kind email_domain) to the signing key's environment's list with the action block or allow, and answers the entry with its value in canonical form. An account matches when one of its assessments sent the email, or an email of the domain: a block entry decides block for every flow and an allow entry allow, block winning when both match, and the account's risk carries list_match with the entry's id while its score is unchanged. Every matching account is re-decided at once and sends account.risk_changed when its decision changes. A value already on the list answers 409 list_entry_exists, a full list 409 list_limit_reached, and an entry matching more than 5,000 accounts 409 list_entry_too_broad. Requires the management scope; the other environment answers 404 not_found.
+     * Add a canonical email or email-domain override with a reason and optional expiry. Requires settings plus policy_publish, or legacy management. Block wins over allow when both match. A small single-entry change retains the documented synchronous match budget; use lists.change for larger changes, whose account propagation is durable and resumable.
      */
     async create(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, lists_create_js_1.listsCreate)(this, request, options));
@@ -29,11 +33,38 @@ class Lists extends sdks_js_1.ClientSDK {
      * Remove an entry from an environment's list.
      *
      * @remarks
-     * Removes an entry from the signing key's environment's list and re-decides the accounts it matched, the 5,000 most recently assessed at most, each sending account.risk_changed when its decision changes. An unknown or already removed entry answers 404 not_found. Requires the management scope.
+     * Remove an override with settings plus policy_publish, or legacy management. The removal takes effect for new decisions and schedules resumable propagation across matching retained accounts. An unknown or already removed entry answers404. Account risk events announce changed decisions as propagation runs.
      */
     async delete(request, options) {
         return (0, fp_js_1.unwrapAsync)((0, lists_delete_js_1.listsDelete)(this, request, options));
     }
+    /**
+     * Preview a list override change without side effects.
+     *
+     * @remarks
+     * Preview canonical list matches and current override effects with settings or management. The result states its bounded coverage and changes no list entries.
+     */
+    async preview(request, options) {
+        return (0, fp_js_1.unwrapAsync)((0, lists_preview_js_1.listsPreview)(this, request, options));
+    }
+    /**
+     * Apply an idempotent atomic bulk list change.
+     *
+     * @remarks
+     * Atomically add and remove a bounded batch of entries with an idempotency key. Requires settings plus policy_publish, or legacy management. The receipt exposes durable account propagation beyond the synchronous single-entry budget; poll lists.getChange until completion.
+     */
+    async change(request, options) {
+        return (0, fp_js_1.unwrapAsync)((0, lists_change_js_1.listsChange)(this, request, options));
+    }
+    /**
+     * Read a bulk list change and propagation progress.
+     *
+     * @remarks
+     * Read retained propagation progress for a list change with settings or management.
+     */
+    async getChange(request, options) {
+        return (0, fp_js_1.unwrapAsync)((0, lists_get_change_js_1.listsGetChange)(this, request, options));
+    }
 }
 exports.Lists = Lists;
 //# sourceMappingURL=lists.js.map

package/dist/commonjs/sdk/lists.js.map

@@ -1 +1 @@
-{"version":3,"file":"lists.js","sourceRoot":"","sources":["../../../src/sdk/lists.ts"],"names":[],"mappings":";;;AAAA,8DAAuD;AACvD,8DAAuD;AACvD,0DAAmD;AACnD,4CAA2D;AAE3D,0CAA6C;AAE7C,WAAmB,SAAQ,mBAAS;IAClC;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CACR,OAA0C,EAC1C,OAAwB,EACqB;QAC7C,OAAO,IAAA,mBAAW,EAAC,IAAA,yBAAS,EAC1B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAA0C,EAC1C,OAAwB,EACqB;QAC7C,OAAO,IAAA,mBAAW,EAAC,IAAA,6BAAW,EAC5B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAA0C,EAC1C,OAAwB,EACiC;QACzD,OAAO,IAAA,mBAAW,EAAC,IAAA,6BAAW,EAC5B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;CACF"}
+{"version":3,"file":"lists.js","sourceRoot":"","sources":["../../../src/sdk/lists.ts"],"names":[],"mappings":";;;AAAA,8DAAuD;AACvD,8DAAuD;AACvD,8DAAuD;AACvD,sEAA8D;AAC9D,0DAAmD;AACnD,gEAAyD;AACzD,4CAA2D;AAE3D,0CAA6C;AAC7C,0DAA4E;AAE5E,WAAmB,SAAQ,mBAAS;IAClC;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CACR,OAA0C,EAC1C,OAAwB,EAGxB;QACA,OAAO,IAAA,oCAAoB,EAAC,IAAA,yBAAS,EACnC,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAA0C,EAC1C,OAAwB,EACqB;QAC7C,OAAO,IAAA,mBAAW,EAAC,IAAA,6BAAW,EAC5B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAA0C,EAC1C,OAAwB,EACiC;QACzD,OAAO,IAAA,mBAAW,EAAC,IAAA,6BAAW,EAC5B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CACX,OAAsC,EACtC,OAAwB,EACiB;QACzC,OAAO,IAAA,mBAAW,EAAC,IAAA,+BAAY,EAC7B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAAsC,EACtC,OAAwB,EACiB;QACzC,OAAO,IAAA,mBAAW,EAAC,IAAA,6BAAW,EAC5B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,SAAS,CACb,OAAwC,EACxC,OAAwB,EACmB;QAC3C,OAAO,IAAA,mBAAW,EAAC,IAAA,oCAAc,EAC/B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;CACF"}

package/dist/commonjs/sdk/members.d.ts

@@ -0,0 +1,26 @@
+import { ClientSDK, RequestOptions } from "../lib/sdks.js";
+import * as operations from "../models/operations/index.js";
+export declare class Members extends ClientSDK {
+    /**
+     * List a workspace's members.
+     *
+     * @remarks
+     * Read the workspace directory with a live key carrying members or members_manage. Member identities and grants belong to this workspace. Owner-controlled issuance limits team automation to authorised service credentials.
+     */
+    list(request: operations.ListMembersRequest, options?: RequestOptions): Promise<operations.ListMembersResponse>;
+    /**
+     * Change a member's role.
+     *
+     * @remarks
+     * Update a non-owner member role, environment access or sensitive permission exclusions with a live members_manage key. Owner changes, identity binding and support access remain outside this scope. The current delegation ceiling is checked within the change transaction.
+     */
+    update(request: operations.UpdateMemberRequest, options?: RequestOptions): Promise<operations.UpdateMemberResponse>;
+    /**
+     * Remove a member.
+     *
+     * @remarks
+     * Remove a non-owner member with a live members_manage key. Subsequent access is refused and personal credentials are revoked. Independently owned service credentials follow their own lifecycle.
+     */
+    remove(request: operations.RemoveMemberRequest, options?: RequestOptions): Promise<operations.RemoveMemberResponse | undefined>;
+}
+//# sourceMappingURL=members.d.ts.map

package/dist/commonjs/sdk/members.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"members.d.ts","sourceRoot":"","sources":["../../../src/sdk/members.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAG5D,qBAAa,OAAQ,SAAQ,SAAS;IACpC;;;;;OAKG;IACG,IAAI,CACR,OAAO,EAAE,UAAU,CAAC,kBAAkB,EACtC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAMzC;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,UAAU,CAAC,mBAAmB,EACvC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAM1C;IAED;;;;;OAKG;IACG,MAAM,CACV,OAAO,EAAE,UAAU,CAAC,mBAAmB,EACvC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAMtD;CACF"}

package/dist/commonjs/sdk/members.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Members = void 0;
+const members_list_js_1 = require("../funcs/members-list.js");
+const members_remove_js_1 = require("../funcs/members-remove.js");
+const members_update_js_1 = require("../funcs/members-update.js");
+const sdks_js_1 = require("../lib/sdks.js");
+const fp_js_1 = require("../types/fp.js");
+class Members extends sdks_js_1.ClientSDK {
+    /**
+     * List a workspace's members.
+     *
+     * @remarks
+     * Read the workspace directory with a live key carrying members or members_manage. Member identities and grants belong to this workspace. Owner-controlled issuance limits team automation to authorised service credentials.
+     */
+    async list(request, options) {
+        return (0, fp_js_1.unwrapAsync)((0, members_list_js_1.membersList)(this, request, options));
+    }
+    /**
+     * Change a member's role.
+     *
+     * @remarks
+     * Update a non-owner member role, environment access or sensitive permission exclusions with a live members_manage key. Owner changes, identity binding and support access remain outside this scope. The current delegation ceiling is checked within the change transaction.
+     */
+    async update(request, options) {
+        return (0, fp_js_1.unwrapAsync)((0, members_update_js_1.membersUpdate)(this, request, options));
+    }
+    /**
+     * Remove a member.
+     *
+     * @remarks
+     * Remove a non-owner member with a live members_manage key. Subsequent access is refused and personal credentials are revoked. Independently owned service credentials follow their own lifecycle.
+     */
+    async remove(request, options) {
+        return (0, fp_js_1.unwrapAsync)((0, members_remove_js_1.membersRemove)(this, request, options));
+    }
+}
+exports.Members = Members;
+//# sourceMappingURL=members.js.map

package/dist/commonjs/sdk/members.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"members.js","sourceRoot":"","sources":["../../../src/sdk/members.ts"],"names":[],"mappings":";;;AAAA,8DAAuD;AACvD,kEAA2D;AAC3D,kEAA2D;AAC3D,4CAA2D;AAE3D,0CAA6C;AAE7C,aAAqB,SAAQ,mBAAS;IACpC;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CACR,OAAsC,EACtC,OAAwB,EACiB;QACzC,OAAO,IAAA,mBAAW,EAAC,IAAA,6BAAW,EAC5B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAAuC,EACvC,OAAwB,EACkB;QAC1C,OAAO,IAAA,mBAAW,EAAC,IAAA,iCAAa,EAC9B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CACV,OAAuC,EACvC,OAAwB,EAC8B;QACtD,OAAO,IAAA,mBAAW,EAAC,IAAA,iCAAa,EAC9B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;CACF"}

package/dist/commonjs/sdk/operations.d.ts

@@ -0,0 +1,12 @@
+import { ClientSDK, RequestOptions } from "../lib/sdks.js";
+import * as operations from "../models/operations/index.js";
+export declare class Operations extends ClientSDK {
+    /**
+     * Summarize retained account outcomes, enforcement reports and reviews.
+     *
+     * @remarks
+     * Read one retained snapshot of account outcomes, enforcement reports and review states for the environment and a window of at most 31 days. Each section declares its own population, numerator, denominator and label coverage. Current outcome heads preserve explicit unknown labels. Enforcement rows are reports from your application and do not independently verify execution. Requires history or investigate together with management scope. A result exceeding 100000 population rows or the query budget is refused without truncation.
+     */
+    summarize(request: operations.SummarizeWorkspaceOperationsRequest, options?: RequestOptions): Promise<operations.SummarizeWorkspaceOperationsResponse>;
+}
+//# sourceMappingURL=operations.d.ts.map

package/dist/commonjs/sdk/operations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operations.d.ts","sourceRoot":"","sources":["../../../src/sdk/operations.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAG5D,qBAAa,UAAW,SAAQ,SAAS;IACvC;;;;;OAKG;IACG,SAAS,CACb,OAAO,EAAE,UAAU,CAAC,mCAAmC,EACvD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,oCAAoC,CAAC,CAM1D;CACF"}

package/dist/commonjs/sdk/operations.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Operations = void 0;
+const operations_summarize_js_1 = require("../funcs/operations-summarize.js");
+const sdks_js_1 = require("../lib/sdks.js");
+const fp_js_1 = require("../types/fp.js");
+class Operations extends sdks_js_1.ClientSDK {
+    /**
+     * Summarize retained account outcomes, enforcement reports and reviews.
+     *
+     * @remarks
+     * Read one retained snapshot of account outcomes, enforcement reports and review states for the environment and a window of at most 31 days. Each section declares its own population, numerator, denominator and label coverage. Current outcome heads preserve explicit unknown labels. Enforcement rows are reports from your application and do not independently verify execution. Requires history or investigate together with management scope. A result exceeding 100000 population rows or the query budget is refused without truncation.
+     */
+    async summarize(request, options) {
+        return (0, fp_js_1.unwrapAsync)((0, operations_summarize_js_1.operationsSummarize)(this, request, options));
+    }
+}
+exports.Operations = Operations;
+//# sourceMappingURL=operations.js.map

package/dist/commonjs/sdk/operations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operations.js","sourceRoot":"","sources":["../../../src/sdk/operations.ts"],"names":[],"mappings":";;;AAAA,8EAAuE;AACvE,4CAA2D;AAE3D,0CAA6C;AAE7C,gBAAwB,SAAQ,mBAAS;IACvC;;;;;OAKG;IACH,KAAK,CAAC,SAAS,CACb,OAAuD,EACvD,OAAwB,EACkC;QAC1D,OAAO,IAAA,mBAAW,EAAC,IAAA,6CAAmB,EACpC,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;CACF"}

package/dist/commonjs/sdk/requests.d.ts

@@ -1,5 +1,7 @@
 import { ClientSDK, RequestOptions } from "../lib/sdks.js";
+import * as models from "../models/index.js";
 import * as operations from "../models/operations/index.js";
+import { PageIterator } from "../types/operations.js";
 export declare class Requests extends ClientSDK {
     /**
      * Search request diagnostics
@@ -7,6 +9,15 @@ export declare class Requests extends ClientSDK {
      * @remarks
      * Search authenticated request attempts by time, route, status or request correlation id. The interval is at most seven days. Each attempt has a unique id and may include the exact served decision. Records are bounded best effort and exclude request bodies, secrets and source payloads. A repeated correlation id does not overwrite another attempt.
      */
-    list(request: operations.ListRequestDiagnosticsRequest, options?: RequestOptions): Promise<operations.ListRequestDiagnosticsResponse>;
+    list(request: operations.ListRequestDiagnosticsRequest, options?: RequestOptions): Promise<PageIterator<operations.ListRequestDiagnosticsResponse, {
+        cursor: string;
+    }>>;
+    /**
+     * Summarise retained request attempts
+     *
+     * @remarks
+     * Count all retained matching request attempts and latency samples within seven days. Capture is best effort.
+     */
+    aggregate(request: models.RequestAggregateRequest, options?: RequestOptions): Promise<operations.AggregateRequestsResponse>;
 }
 //# sourceMappingURL=requests.d.ts.map

package/dist/commonjs/sdk/requests.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"requests.d.ts","sourceRoot":"","sources":["../../../src/sdk/requests.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAG5D,qBAAa,QAAS,SAAQ,SAAS;IACrC;;;;;OAKG;IACG,IAAI,CACR,OAAO,EAAE,UAAU,CAAC,6BAA6B,EACjD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,8BAA8B,CAAC,CAMpD;CACF"}
+{"version":3,"file":"requests.d.ts","sourceRoot":"","sources":["../../../src/sdk/requests.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,MAAM,MAAM,oBAAoB,CAAC;AAC7C,OAAO,KAAK,UAAU,MAAM,+BAA+B,CAAC;AAE5D,OAAO,EAAE,YAAY,EAAwB,MAAM,wBAAwB,CAAC;AAE5E,qBAAa,QAAS,SAAQ,SAAS;IACrC;;;;;OAKG;IACG,IAAI,CACR,OAAO,EAAE,UAAU,CAAC,6BAA6B,EACjD,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CACR,YAAY,CAAC,UAAU,CAAC,8BAA8B,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAC5E,CAMA;IAED;;;;;OAKG;IACG,SAAS,CACb,OAAO,EAAE,MAAM,CAAC,uBAAuB,EACvC,OAAO,CAAC,EAAE,cAAc,GACvB,OAAO,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAM/C;CACF"}

package/dist/commonjs/sdk/requests.js

@@ -1,9 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Requests = void 0;
+const requests_aggregate_js_1 = require("../funcs/requests-aggregate.js");
 const requests_list_js_1 = require("../funcs/requests-list.js");
 const sdks_js_1 = require("../lib/sdks.js");
 const fp_js_1 = require("../types/fp.js");
+const operations_js_1 = require("../types/operations.js");
 class Requests extends sdks_js_1.ClientSDK {
     /**
      * Search request diagnostics
@@ -12,7 +14,16 @@ class Requests extends sdks_js_1.ClientSDK {
      * Search authenticated request attempts by time, route, status or request correlation id. The interval is at most seven days. Each attempt has a unique id and may include the exact served decision. Records are bounded best effort and exclude request bodies, secrets and source payloads. A repeated correlation id does not overwrite another attempt.
      */
     async list(request, options) {
-        return (0, fp_js_1.unwrapAsync)((0, requests_list_js_1.requestsList)(this, request, options));
+        return (0, operations_js_1.unwrapResultIterator)((0, requests_list_js_1.requestsList)(this, request, options));
+    }
+    /**
+     * Summarise retained request attempts
+     *
+     * @remarks
+     * Count all retained matching request attempts and latency samples within seven days. Capture is best effort.
+     */
+    async aggregate(request, options) {
+        return (0, fp_js_1.unwrapAsync)((0, requests_aggregate_js_1.requestsAggregate)(this, request, options));
     }
 }
 exports.Requests = Requests;

package/dist/commonjs/sdk/requests.js.map

@@ -1 +1 @@
-{"version":3,"file":"requests.js","sourceRoot":"","sources":["../../../src/sdk/requests.ts"],"names":[],"mappings":";;;AAAA,gEAAyD;AACzD,4CAA2D;AAE3D,0CAA6C;AAE7C,cAAsB,SAAQ,mBAAS;IACrC;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CACR,OAAiD,EACjD,OAAwB,EAC4B;QACpD,OAAO,IAAA,mBAAW,EAAC,IAAA,+BAAY,EAC7B,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;CACF"}
+{"version":3,"file":"requests.js","sourceRoot":"","sources":["../../../src/sdk/requests.ts"],"names":[],"mappings":";;;AAAA,0EAAmE;AACnE,gEAAyD;AACzD,4CAA2D;AAG3D,0CAA6C;AAC7C,0DAA4E;AAE5E,cAAsB,SAAQ,mBAAS;IACrC;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CACR,OAAiD,EACjD,OAAwB,EAGxB;QACA,OAAO,IAAA,oCAAoB,EAAC,IAAA,+BAAY,EACtC,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;IAED;;;;;OAKG;IACH,KAAK,CAAC,SAAS,CACb,OAAuC,EACvC,OAAwB,EACuB;QAC/C,OAAO,IAAA,mBAAW,EAAC,IAAA,yCAAiB,EAClC,IAAI,EACJ,OAAO,EACP,OAAO,CACR,CAAC,CAAC;IAAA,CACJ;CACF"}