@opengeni/sdk 3.3.2-canary.1 → 3.4.0

package/dist/chunk-UM4ZXXJR.js

@@ -0,0 +1,9 @@
+// src/chats.ts
+function chatDefaults(chats) {
+  return chats === "shared" ? { visibility: "workspace", agentAccess: "workspace", memoryScope: "workspace" } : { visibility: "private", agentAccess: "session", memoryScope: "user" };
+}
+
+export {
+  chatDefaults
+};
+//# sourceMappingURL=chunk-UM4ZXXJR.js.map

package/dist/chunk-UM4ZXXJR.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/chats.ts"],"sourcesContent":["import type { CreateSessionRequest } from \"./types\";\n\n/**\n * Private chats use personal Knowledge and session-only agent reach; shared chats\n * use workspace Knowledge and reach. Isolated adds a separate workspace per user.\n */\nexport type Chats = \"private\" | \"shared\" | \"isolated\";\n\n/** SDK defaults only: the API still authorizes visibility, agent reach and Knowledge separately. */\nexport function chatDefaults(\n  chats: Chats,\n): Required<Pick<CreateSessionRequest, \"visibility\" | \"agentAccess\" | \"memoryScope\">> {\n  return chats === \"shared\"\n    ? { visibility: \"workspace\", agentAccess: \"workspace\", memoryScope: \"workspace\" }\n    : { visibility: \"private\", agentAccess: \"session\", memoryScope: \"user\" };\n}\n"],"mappings":";AASO,SAAS,aACd,OACoF;AACpF,SAAO,UAAU,WACb,EAAE,YAAY,aAAa,aAAa,aAAa,aAAa,YAAY,IAC9E,EAAE,YAAY,WAAW,aAAa,WAAW,aAAa,OAAO;AAC3E;","names":[]}

package/dist/{chunk-TFCLHRZK.js → chunk-UME3X7CP.js}

@@ -1,6 +1,6 @@
 import {
   OpenGeniDocumentAuthorityClient
-} from "./chunk-BESZFWMU.js";
+} from "./chunk-OI5YLASH.js";
 
 // src/artifact-client.ts
 var OpenGeniClient = class extends OpenGeniDocumentAuthorityClient {
@@ -76,48 +76,44 @@ var OpenGeniClient = class extends OpenGeniDocumentAuthorityClient {
       options
     );
   }
-  async listWorkspaceArtifacts(workspaceId, options = {}) {
-    const query = new URLSearchParams();
-    if (options.limit !== void 0) query.set("limit", String(options.limit));
-    if (options.cursor) query.set("cursor", options.cursor);
-    const suffix = query.size > 0 ? `?${query.toString()}` : "";
-    return await this.requestJson(
-      "GET",
-      `/v1/workspaces/${workspaceId}/published-artifacts${suffix}`
-    );
-  }
-  async getWorkspaceArtifact(workspaceId, artifactId) {
-    return await this.requestJson(
-      "GET",
-      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}`
+  /** Exact Site-version gateway call. Keep this client on the authenticated host;
+   * the API enforces live viewer access and the version's declared tool allowlist. */
+  async callWorkspaceSiteTool(workspaceId, request, options = {}) {
+    return this.requestJson(
+      "POST",
+      `/v1/workspaces/${encodeURIComponent(workspaceId)}/tools/calls`,
+      request,
+      void 0,
+      options
     );
   }
-  async getWorkspaceArtifactContent(workspaceId, artifactId, versionId) {
-    const query = versionId ? `?versionId=${encodeURIComponent(versionId)}` : "";
+  async getWorkspaceArtifactContent(workspaceId, artifactId, versionOrOptions) {
+    const options = typeof versionOrOptions === "string" ? { versionId: versionOrOptions } : versionOrOptions ?? {};
+    const query = options.versionId ? `?versionId=${encodeURIComponent(options.versionId)}` : "";
     return await this.requestJson(
       "GET",
-      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}/content${query}`
-    );
-  }
-  async createWorkspaceArtifact(workspaceId, request) {
-    return await this.requestJson(
-      "POST",
-      `/v1/workspaces/${workspaceId}/published-artifacts`,
-      request
+      `/v1/workspaces/${encodeURIComponent(workspaceId)}/published-artifacts/${encodeURIComponent(artifactId)}/content${query}`,
+      void 0,
+      void 0,
+      options
     );
   }
-  async publishWorkspaceArtifactVersion(workspaceId, artifactId, request) {
+  async createWorkspaceArtifact(workspaceId, request, options = {}) {
     return await this.requestJson(
       "POST",
-      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}/versions`,
-      request
+      `/v1/workspaces/${encodeURIComponent(workspaceId)}/published-artifacts`,
+      request,
+      void 0,
+      options
     );
   }
-  async rollbackWorkspaceArtifact(workspaceId, artifactId, request) {
+  async publishWorkspaceArtifactVersion(workspaceId, artifactId, request, options = {}) {
     return await this.requestJson(
       "POST",
-      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}/rollback`,
-      request
+      `/v1/workspaces/${encodeURIComponent(workspaceId)}/published-artifacts/${encodeURIComponent(artifactId)}/versions`,
+      request,
+      void 0,
+      options
     );
   }
 };
@@ -125,4 +121,4 @@ var OpenGeniClient = class extends OpenGeniDocumentAuthorityClient {
 export {
   OpenGeniClient
 };
-//# sourceMappingURL=chunk-TFCLHRZK.js.map
+//# sourceMappingURL=chunk-UME3X7CP.js.map

package/dist/chunk-UME3X7CP.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/artifact-client.ts"],"sourcesContent":["import { OpenGeniDocumentAuthorityClient } from \"./document-authority-client\";\nimport type { FetchResponse } from \"./client\";\nimport type { SiteToolCallRequest } from \"./site-tool-bridge\";\nimport type { ToolGatewayCallResponse } from \"./types\";\nimport type {\n  CreateWorkspaceArtifactRequest,\n  PublishWorkspaceArtifactVersionRequest,\n  WorkspaceArtifactContentResponse,\n  WorkspaceArtifactMutationResponse,\n} from \"./workspace-artifacts\";\nimport type {\n  CreateEditableArtifactMaterializationRequest,\n  CreateEditableArtifactResourceRequest,\n  EditableArtifactListResource,\n  EditableArtifactMaterializationJobResource,\n  EditableArtifactPinnedVersionResource,\n  EditableArtifactResource,\n  ImportEditableArtifactResourceRequest,\n  ListSessionEditableArtifactResourcesOptions,\n  PinEditableArtifactVersionRequest,\n  ReadEditableArtifactMaterializationOptions,\n  ReadEditableArtifactResourceOptions,\n} from \"./editable-artifact-resources\";\n\n/** Public SDK client. Optional operator and artifact operations stay out of the console core. */\nexport class OpenGeniClient extends OpenGeniDocumentAuthorityClient {\n  async createEditableArtifact(\n    workspaceId: string,\n    request: CreateEditableArtifactResourceRequest,\n    options: Readonly<{ signal?: AbortSignal | undefined }> = {},\n  ): Promise<EditableArtifactResource> {\n    return await this.requestJson<EditableArtifactResource>(\n      \"POST\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts`,\n      request,\n      {},\n      options,\n    );\n  }\n\n  async importEditableArtifact(\n    workspaceId: string,\n    request: ImportEditableArtifactResourceRequest,\n    options: Readonly<{ signal?: AbortSignal | undefined }> = {},\n  ): Promise<EditableArtifactResource> {\n    return await this.requestJson<EditableArtifactResource>(\n      \"POST\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/imports`,\n      request,\n      {},\n      options,\n    );\n  }\n\n  async getEditableArtifact(\n    workspaceId: string,\n    artifactId: string,\n    options: ReadEditableArtifactResourceOptions,\n  ): Promise<EditableArtifactResource> {\n    return await this.requestJson<EditableArtifactResource>(\n      \"GET\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/${encodeURIComponent(artifactId)}`,\n      undefined,\n      { replicaId: options.replicaId },\n      options,\n    );\n  }\n\n  async listSessionEditableArtifacts(\n    workspaceId: string,\n    sourceSessionId: string,\n    options: ListSessionEditableArtifactResourcesOptions,\n  ): Promise<EditableArtifactListResource> {\n    return await this.requestJson<EditableArtifactListResource>(\n      \"GET\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts`,\n      undefined,\n      { sourceSessionId, replicaId: options.replicaId },\n      options,\n    );\n  }\n\n  async pinEditableArtifactVersion(\n    workspaceId: string,\n    artifactId: string,\n    request: PinEditableArtifactVersionRequest,\n    options: Readonly<{ signal?: AbortSignal | undefined }> = {},\n  ): Promise<EditableArtifactPinnedVersionResource> {\n    return await this.requestJson<EditableArtifactPinnedVersionResource>(\n      \"POST\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/${encodeURIComponent(artifactId)}/versions`,\n      request,\n      {},\n      options,\n    );\n  }\n\n  async createEditableArtifactMaterialization(\n    workspaceId: string,\n    artifactId: string,\n    request: CreateEditableArtifactMaterializationRequest,\n    options: Readonly<{ signal?: AbortSignal | undefined }> = {},\n  ): Promise<EditableArtifactMaterializationJobResource> {\n    return await this.requestJson<EditableArtifactMaterializationJobResource>(\n      \"POST\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/${encodeURIComponent(artifactId)}/materializations`,\n      request,\n      {},\n      options,\n    );\n  }\n\n  async getEditableArtifactMaterialization(\n    workspaceId: string,\n    artifactId: string,\n    jobId: string,\n    options: ReadEditableArtifactMaterializationOptions,\n  ): Promise<EditableArtifactMaterializationJobResource> {\n    return await this.requestJson<EditableArtifactMaterializationJobResource>(\n      \"GET\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/${encodeURIComponent(artifactId)}/materializations/${encodeURIComponent(jobId)}`,\n      undefined,\n      { replicaId: options.replicaId },\n      options,\n    );\n  }\n\n  /** The caller owns the returned bounded response stream. */\n  async downloadEditableArtifactMaterialization(\n    workspaceId: string,\n    artifactId: string,\n    jobId: string,\n    options: ReadEditableArtifactMaterializationOptions,\n  ): Promise<FetchResponse> {\n    return await this.requestResponse(\n      \"GET\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/${encodeURIComponent(artifactId)}/materializations/${encodeURIComponent(jobId)}/download`,\n      { replicaId: options.replicaId },\n      options,\n    );\n  }\n  /** Exact Site-version gateway call. Keep this client on the authenticated host;\n   * the API enforces live viewer access and the version's declared tool allowlist. */\n  async callWorkspaceSiteTool(\n    workspaceId: string,\n    request: SiteToolCallRequest,\n    options: { signal?: AbortSignal } = {},\n  ): Promise<ToolGatewayCallResponse> {\n    return this.requestJson<ToolGatewayCallResponse>(\n      \"POST\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/tools/calls`,\n      request,\n      undefined,\n      options,\n    );\n  }\n\n  async getWorkspaceArtifactContent(\n    workspaceId: string,\n    artifactId: string,\n    versionOrOptions?: string | { versionId?: string; signal?: AbortSignal },\n  ): Promise<WorkspaceArtifactContentResponse> {\n    const options =\n      typeof versionOrOptions === \"string\"\n        ? { versionId: versionOrOptions }\n        : (versionOrOptions ?? {});\n    const query = options.versionId ? `?versionId=${encodeURIComponent(options.versionId)}` : \"\";\n    return await this.requestJson<WorkspaceArtifactContentResponse>(\n      \"GET\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/published-artifacts/${encodeURIComponent(artifactId)}/content${query}`,\n      undefined,\n      undefined,\n      options,\n    );\n  }\n\n  async createWorkspaceArtifact(\n    workspaceId: string,\n    request: CreateWorkspaceArtifactRequest,\n    options: { signal?: AbortSignal } = {},\n  ): Promise<WorkspaceArtifactMutationResponse> {\n    return await this.requestJson<WorkspaceArtifactMutationResponse>(\n      \"POST\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/published-artifacts`,\n      request,\n      undefined,\n      options,\n    );\n  }\n\n  async publishWorkspaceArtifactVersion(\n    workspaceId: string,\n    artifactId: string,\n    request: PublishWorkspaceArtifactVersionRequest,\n    options: { signal?: AbortSignal } = {},\n  ): Promise<WorkspaceArtifactMutationResponse> {\n    return await this.requestJson<WorkspaceArtifactMutationResponse>(\n      \"POST\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/published-artifacts/${encodeURIComponent(artifactId)}/versions`,\n      request,\n      undefined,\n      options,\n    );\n  }\n}\n"],"mappings":";;;;;AAyBO,IAAM,iBAAN,cAA6B,gCAAgC;AAAA,EAClE,MAAM,uBACJ,aACA,SACA,UAA0D,CAAC,GACxB;AACnC,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,MACjD;AAAA,MACA,CAAC;AAAA,MACD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,uBACJ,aACA,SACA,UAA0D,CAAC,GACxB;AACnC,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,MACjD;AAAA,MACA,CAAC;AAAA,MACD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,oBACJ,aACA,YACA,SACmC;AACnC,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,uBAAuB,mBAAmB,UAAU,CAAC;AAAA,MACtG;AAAA,MACA,EAAE,WAAW,QAAQ,UAAU;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,6BACJ,aACA,iBACA,SACuC;AACvC,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,MACjD;AAAA,MACA,EAAE,iBAAiB,WAAW,QAAQ,UAAU;AAAA,MAChD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,2BACJ,aACA,YACA,SACA,UAA0D,CAAC,GACX;AAChD,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,uBAAuB,mBAAmB,UAAU,CAAC;AAAA,MACtG;AAAA,MACA,CAAC;AAAA,MACD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,sCACJ,aACA,YACA,SACA,UAA0D,CAAC,GACN;AACrD,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,uBAAuB,mBAAmB,UAAU,CAAC;AAAA,MACtG;AAAA,MACA,CAAC;AAAA,MACD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,mCACJ,aACA,YACA,OACA,SACqD;AACrD,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,uBAAuB,mBAAmB,UAAU,CAAC,qBAAqB,mBAAmB,KAAK,CAAC;AAAA,MACpJ;AAAA,MACA,EAAE,WAAW,QAAQ,UAAU;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,wCACJ,aACA,YACA,OACA,SACwB;AACxB,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,uBAAuB,mBAAmB,UAAU,CAAC,qBAAqB,mBAAmB,KAAK,CAAC;AAAA,MACpJ,EAAE,WAAW,QAAQ,UAAU;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA,EAGA,MAAM,sBACJ,aACA,SACA,UAAoC,CAAC,GACH;AAClC,WAAO,KAAK;AAAA,MACV;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,MACjD;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,4BACJ,aACA,YACA,kBAC2C;AAC3C,UAAM,UACJ,OAAO,qBAAqB,WACxB,EAAE,WAAW,iBAAiB,IAC7B,oBAAoB,CAAC;AAC5B,UAAM,QAAQ,QAAQ,YAAY,cAAc,mBAAmB,QAAQ,SAAS,CAAC,KAAK;AAC1F,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,wBAAwB,mBAAmB,UAAU,CAAC,WAAW,KAAK;AAAA,MACvH;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,wBACJ,aACA,SACA,UAAoC,CAAC,GACO;AAC5C,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,MACjD;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,gCACJ,aACA,YACA,SACA,UAAoC,CAAC,GACO;AAC5C,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,wBAAwB,mBAAmB,UAAU,CAAC;AAAA,MACvG;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/chunk-VT4YM4XQ.js

@@ -0,0 +1,210 @@
+import {
+  OPENGENI_DELIVERY_ID_HEADER,
+  OPENGENI_EVENT_ID_HEADER,
+  OPENGENI_SIGNATURE_HEADER,
+  OPENGENI_WEBHOOK_TEST_EVENT_TYPE,
+  verifyOpenGeniSignature
+} from "./chunk-KGEABAID.js";
+
+// src/workspace-integrations.ts
+var OpenGeniSignatureError = class extends Error {
+  constructor() {
+    super("Opengeni signature verification failed");
+    this.name = "OpenGeniSignatureError";
+  }
+};
+function header(headers, name) {
+  if (headers instanceof Headers) return headers.get(name);
+  const wanted = name.toLowerCase();
+  for (const [key, value] of Object.entries(headers)) {
+    if (key.toLowerCase() === wanted) {
+      return Array.isArray(value) ? value[0] ?? null : value ?? null;
+    }
+  }
+  return null;
+}
+async function verifiedObject(input) {
+  const valid = await verifyOpenGeniSignature({
+    secret: input.secret,
+    body: input.body,
+    signature: header(input.headers, OPENGENI_SIGNATURE_HEADER),
+    ...input.toleranceSeconds !== void 0 ? { toleranceSeconds: input.toleranceSeconds } : {}
+  });
+  if (!valid) throw new OpenGeniSignatureError();
+  const parsed = JSON.parse(input.body);
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+    throw new OpenGeniSignatureError();
+  }
+  return parsed;
+}
+async function verifyWebhookEvent(input) {
+  const event = await verifiedObject(input);
+  const usageEvent = typeof event.type === "string" && event.type.startsWith("usage.");
+  const lane = event.lane === void 0 ? "workspace" : event.lane;
+  if (typeof event.id !== "string" || typeof event.type !== "string" || typeof event.workspaceId !== "string" || lane !== "workspace" && lane !== "organization" || usageEvent && lane !== "workspace" || !(typeof event.sessionId === "string" || (event.sessionId === null || event.sessionId === void 0) && [
+    "usage.threshold_reached",
+    "usage.exhausted",
+    "usage.period_reset",
+    OPENGENI_WEBHOOK_TEST_EVENT_TYPE
+  ].includes(event.type))) {
+    throw new OpenGeniSignatureError();
+  }
+  return {
+    event: { ...event, lane },
+    deliveryId: header(input.headers, OPENGENI_DELIVERY_ID_HEADER)
+  };
+}
+async function verifyCredentialProviderRequest(input) {
+  const parsed = await verifiedObject(input);
+  if (parsed.type !== "credentials.request" || typeof parsed.workspaceId !== "string") {
+    throw new OpenGeniSignatureError();
+  }
+  return parsed;
+}
+var OPENGENI_WEBHOOK_HEADERS = {
+  signature: OPENGENI_SIGNATURE_HEADER,
+  eventId: OPENGENI_EVENT_ID_HEADER,
+  deliveryId: OPENGENI_DELIVERY_ID_HEADER
+};
+async function getOrganizationCredentialProvider(client, organizationId) {
+  return client.requestJson(
+    "GET",
+    `/v1/organizations/${encodeURIComponent(organizationId)}/credential-provider`
+  );
+}
+async function putOrganizationCredentialProvider(client, organizationId, request) {
+  return client.requestJson(
+    "PUT",
+    `/v1/organizations/${encodeURIComponent(organizationId)}/credential-provider`,
+    request
+  );
+}
+async function deleteOrganizationCredentialProvider(client, organizationId) {
+  await client.requestJson(
+    "DELETE",
+    `/v1/organizations/${encodeURIComponent(organizationId)}/credential-provider`,
+    void 0,
+    {},
+    { responseType: "void" }
+  );
+}
+async function listOrganizationWebhooks(client, organizationId) {
+  return client.requestJson(
+    "GET",
+    `/v1/organizations/${encodeURIComponent(organizationId)}/webhooks`
+  );
+}
+async function createOrganizationWebhook(client, organizationId, request) {
+  return client.requestJson(
+    "POST",
+    `/v1/organizations/${encodeURIComponent(organizationId)}/webhooks`,
+    request
+  );
+}
+async function getOrganizationWebhook(client, organizationId, webhookId) {
+  return client.requestJson(
+    "GET",
+    `/v1/organizations/${encodeURIComponent(organizationId)}/webhooks/${encodeURIComponent(webhookId)}`
+  );
+}
+async function updateOrganizationWebhook(client, organizationId, webhookId, request) {
+  return client.requestJson(
+    "PATCH",
+    `/v1/organizations/${encodeURIComponent(organizationId)}/webhooks/${encodeURIComponent(webhookId)}`,
+    request
+  );
+}
+async function deleteOrganizationWebhook(client, organizationId, webhookId) {
+  await client.requestJson(
+    "DELETE",
+    `/v1/organizations/${encodeURIComponent(organizationId)}/webhooks/${encodeURIComponent(webhookId)}`,
+    void 0,
+    {},
+    { responseType: "void" }
+  );
+}
+async function listOrganizationWebhookDeliveries(client, organizationId, webhookId, options = {}) {
+  return client.requestJson(
+    "GET",
+    `/v1/organizations/${encodeURIComponent(organizationId)}/webhooks/${encodeURIComponent(webhookId)}/deliveries`,
+    void 0,
+    options.limit !== void 0 ? { limit: String(options.limit) } : {}
+  );
+}
+async function redeliverOrganizationWebhookDelivery(client, organizationId, webhookId, deliveryId) {
+  return client.requestJson(
+    "POST",
+    `/v1/organizations/${encodeURIComponent(organizationId)}/webhooks/${encodeURIComponent(webhookId)}/deliveries/${encodeURIComponent(deliveryId)}/redeliver`
+  );
+}
+async function getWorkspaceWebhook(client, workspaceId, webhookId) {
+  return client.requestJson("GET", `/v1/workspaces/${workspaceId}/webhooks/${webhookId}`);
+}
+async function rotateWorkspaceCredentialProviderSecret(client, workspaceId) {
+  return client.requestJson(
+    "POST",
+    `/v1/workspaces/${encodeURIComponent(workspaceId)}/credential-provider/rotate-secret`
+  );
+}
+async function rotateOrganizationCredentialProviderSecret(client, organizationId) {
+  return client.requestJson(
+    "POST",
+    `/v1/organizations/${encodeURIComponent(organizationId)}/credential-provider/rotate-secret`
+  );
+}
+async function rotateOrganizationWebhookSecret(client, organizationId, webhookId) {
+  return client.requestJson(
+    "POST",
+    `/v1/organizations/${encodeURIComponent(organizationId)}/webhooks/${encodeURIComponent(webhookId)}/rotate-secret`
+  );
+}
+async function rotateWorkspaceWebhookSecret(client, workspaceId, webhookId) {
+  return client.requestJson(
+    "POST",
+    `/v1/workspaces/${encodeURIComponent(workspaceId)}/webhooks/${encodeURIComponent(webhookId)}/rotate-secret`
+  );
+}
+async function testWorkspaceWebhook(client, workspaceId, webhookId) {
+  return client.requestJson(
+    "POST",
+    `/v1/workspaces/${encodeURIComponent(workspaceId)}/webhooks/${encodeURIComponent(webhookId)}/test`
+  );
+}
+async function testWorkspaceCredentialProvider(client, workspaceId) {
+  return client.requestJson(
+    "POST",
+    `/v1/workspaces/${encodeURIComponent(workspaceId)}/credential-provider/test`
+  );
+}
+async function getWorkspaceInheritedIntegrations(client, workspaceId) {
+  return client.requestJson(
+    "GET",
+    `/v1/workspaces/${encodeURIComponent(workspaceId)}/inherited-integrations`
+  );
+}
+
+export {
+  OpenGeniSignatureError,
+  verifyWebhookEvent,
+  verifyCredentialProviderRequest,
+  OPENGENI_WEBHOOK_HEADERS,
+  getOrganizationCredentialProvider,
+  putOrganizationCredentialProvider,
+  deleteOrganizationCredentialProvider,
+  listOrganizationWebhooks,
+  createOrganizationWebhook,
+  getOrganizationWebhook,
+  updateOrganizationWebhook,
+  deleteOrganizationWebhook,
+  listOrganizationWebhookDeliveries,
+  redeliverOrganizationWebhookDelivery,
+  getWorkspaceWebhook,
+  rotateWorkspaceCredentialProviderSecret,
+  rotateOrganizationCredentialProviderSecret,
+  rotateOrganizationWebhookSecret,
+  rotateWorkspaceWebhookSecret,
+  testWorkspaceWebhook,
+  testWorkspaceCredentialProvider,
+  getWorkspaceInheritedIntegrations
+};
+//# sourceMappingURL=chunk-VT4YM4XQ.js.map

package/dist/chunk-VT4YM4XQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/workspace-integrations.ts"],"sourcesContent":["import {\n  OPENGENI_DELIVERY_ID_HEADER,\n  OPENGENI_EVENT_ID_HEADER,\n  OPENGENI_SIGNATURE_HEADER,\n  OPENGENI_WEBHOOK_TEST_EVENT_TYPE,\n  verifyOpenGeniSignature,\n} from \"@opengeni/contracts/workspace-integration-wire\";\nimport type { CredentialProviderRequest, WorkspaceWebhookEvent } from \"@opengeni/contracts\";\nimport type { OpenGeniClient } from \"./client\";\nimport type {\n  CreateOrganizationWebhookRequest,\n  CreateOrganizationWebhookResponse,\n  GetOrganizationCredentialProviderResponse,\n  ListOrganizationWebhookDeliveriesResponse,\n  ListOrganizationWebhooksResponse,\n  OrganizationWebhook,\n  OrganizationWebhookDelivery,\n  PutOrganizationCredentialProviderRequest,\n  PutOrganizationCredentialProviderResponse,\n  RotateWorkspaceCredentialProviderSecretResponse,\n  RotateOrganizationCredentialProviderSecretResponse,\n  RotateWorkspaceWebhookSecretResponse,\n  RotateOrganizationWebhookSecretResponse,\n  TestWorkspaceCredentialProviderResponse,\n  TestWorkspaceWebhookResponse,\n  UpdateOrganizationWebhookRequest,\n  WorkspaceInheritedIntegrationsResponse,\n  WorkspaceWebhook,\n} from \"@opengeni/contracts\";\n\nexport type {\n  CreateOrganizationWebhookRequest,\n  CreateOrganizationWebhookResponse,\n  CreateWorkspaceWebhookRequest,\n  CreateWorkspaceWebhookResponse,\n  CredentialProviderRequest,\n  CredentialProviderInitiatorContext,\n  CredentialProviderResponse,\n  CredentialProviderMcpHeaders,\n  CredentialProviderMcpMaterial,\n  GetOrganizationCredentialProviderResponse,\n  GetWorkspaceCredentialProviderResponse,\n  InitiatingHuman,\n  IntegrationEndpointTestResult,\n  IntegrationWorkspaceFilter,\n  ListOrganizationWebhookDeliveriesResponse,\n  ListOrganizationWebhooksResponse,\n  ListWorkspaceWebhookDeliveriesResponse,\n  ListWorkspaceWebhooksResponse,\n  PutWorkspaceCredentialProviderRequest,\n  PutWorkspaceCredentialProviderResponse,\n  PutOrganizationCredentialProviderRequest,\n  PutOrganizationCredentialProviderResponse,\n  RotateWorkspaceCredentialProviderSecretResponse,\n  RotateOrganizationCredentialProviderSecretResponse,\n  RotateWorkspaceWebhookSecretResponse,\n  RotateOrganizationWebhookSecretResponse,\n  TestWorkspaceCredentialProviderResponse,\n  TestWorkspaceWebhookResponse,\n  OrganizationCredentialProvider,\n  OrganizationWebhook,\n  OrganizationWebhookDelivery,\n  UpdateOrganizationWebhookRequest,\n  UpdateWorkspaceWebhookRequest,\n  WorkspaceCredentialProvider,\n  WorkspaceInheritedIntegrationsResponse,\n  WorkspaceTestWebhookEvent,\n  WorkspaceWebhook,\n  WorkspaceWebhookDelivery,\n  WorkspaceWebhookEvent,\n  WorkspaceWebhookEventType,\n  SessionWorkspaceWebhookEvent,\n  WorkspaceUsageWebhookEvent,\n} from \"@opengeni/contracts\";\nexport {\n  OPENGENI_DELIVERY_ID_HEADER,\n  OPENGENI_EVENT_ID_HEADER,\n  OPENGENI_SIGNATURE_HEADER,\n  OPENGENI_TEST_REQUEST_NIL_ID,\n  OPENGENI_WEBHOOK_TEST_EVENT_TYPE,\n  WORKSPACE_WEBHOOK_EVENT_TYPES,\n  signOpenGeniPayload,\n  verifyOpenGeniSignature,\n} from \"@opengeni/contracts/workspace-integration-wire\";\n\nexport type WorkspaceSandboxImages = { images: string[]; selected: string | null };\n\nexport class OpenGeniSignatureError extends Error {\n  constructor() {\n    super(\"Opengeni signature verification failed\");\n    this.name = \"OpenGeniSignatureError\";\n  }\n}\n\ntype SignedRequest = {\n  /** The exact raw request body. Parse it only after verification. */\n  body: string;\n  headers: Headers | Record<string, string | string[] | undefined>;\n  secret: string;\n  toleranceSeconds?: number;\n};\n\nfunction header(headers: SignedRequest[\"headers\"], name: string): string | null {\n  if (headers instanceof Headers) return headers.get(name);\n  const wanted = name.toLowerCase();\n  for (const [key, value] of Object.entries(headers)) {\n    if (key.toLowerCase() === wanted) {\n      return Array.isArray(value) ? (value[0] ?? null) : (value ?? null);\n    }\n  }\n  return null;\n}\n\nasync function verifiedObject(input: SignedRequest): Promise<Record<string, unknown>> {\n  const valid = await verifyOpenGeniSignature({\n    secret: input.secret,\n    body: input.body,\n    signature: header(input.headers, OPENGENI_SIGNATURE_HEADER),\n    ...(input.toleranceSeconds !== undefined ? { toleranceSeconds: input.toleranceSeconds } : {}),\n  });\n  if (!valid) throw new OpenGeniSignatureError();\n  const parsed: unknown = JSON.parse(input.body);\n  if (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n    throw new OpenGeniSignatureError();\n  }\n  return parsed as Record<string, unknown>;\n}\n\n/**\n * Verify and parse one webhook delivery. Delivery is at least once: dedupe on\n * `event.id` (also sent as the `OpenGeni-Event-Id` header). A `webhook.test`\n * event (from \"Send test event\") names no session: acknowledge it with 2xx.\n */\nexport async function verifyWebhookEvent(input: SignedRequest): Promise<{\n  event: WorkspaceWebhookEvent;\n  deliveryId: string | null;\n}> {\n  const event = await verifiedObject(input);\n  const usageEvent = typeof event.type === \"string\" && event.type.startsWith(\"usage.\");\n  const lane = event.lane === undefined ? \"workspace\" : event.lane;\n  if (\n    typeof event.id !== \"string\" ||\n    typeof event.type !== \"string\" ||\n    typeof event.workspaceId !== \"string\" ||\n    (lane !== \"workspace\" && lane !== \"organization\") ||\n    (usageEvent && lane !== \"workspace\") ||\n    !(\n      typeof event.sessionId === \"string\" ||\n      ((event.sessionId === null || event.sessionId === undefined) &&\n        [\n          \"usage.threshold_reached\",\n          \"usage.exhausted\",\n          \"usage.period_reset\",\n          OPENGENI_WEBHOOK_TEST_EVENT_TYPE,\n        ].includes(event.type))\n    )\n  ) {\n    throw new OpenGeniSignatureError();\n  }\n  return {\n    event: { ...event, lane } as WorkspaceWebhookEvent,\n    deliveryId: header(input.headers, OPENGENI_DELIVERY_ID_HEADER),\n  };\n}\n\n/**\n * Verify the exact bytes and parse a provider request, including its frozen\n * initiatorContext when sent by an upgraded worker. Provenance grants no access.\n */\nexport async function verifyCredentialProviderRequest(\n  input: SignedRequest,\n): Promise<CredentialProviderRequest> {\n  const parsed = await verifiedObject(input);\n  if (parsed.type !== \"credentials.request\" || typeof parsed.workspaceId !== \"string\") {\n    throw new OpenGeniSignatureError();\n  }\n  return parsed as CredentialProviderRequest;\n}\n\n/** Identity header names, for receivers that log or dedupe. */\nexport const OPENGENI_WEBHOOK_HEADERS = {\n  signature: OPENGENI_SIGNATURE_HEADER,\n  eventId: OPENGENI_EVENT_ID_HEADER,\n  deliveryId: OPENGENI_DELIVERY_ID_HEADER,\n} as const;\n\n/** Server-side integration administration is opt-in, outside the eager browser client. */\nexport async function getOrganizationCredentialProvider(\n  client: Pick<OpenGeniClient, \"requestJson\">,\n  organizationId: string,\n): Promise<GetOrganizationCredentialProviderResponse> {\n  return client.requestJson(\n    \"GET\",\n    `/v1/organizations/${encodeURIComponent(organizationId)}/credential-provider`,\n  );\n}\n\n/** Replace configuration; explicit filter required. Store the first returned signing secret. */\nexport async function putOrganizationCredentialProvider(\n  client: Pick<OpenGeniClient, \"requestJson\">,\n  organizationId: string,\n  request: PutOrganizationCredentialProviderRequest,\n): Promise<PutOrganizationCredentialProviderResponse> {\n  return client.requestJson(\n    \"PUT\",\n    `/v1/organizations/${encodeURIComponent(organizationId)}/credential-provider`,\n    request,\n  );\n}\n\nexport async function deleteOrganizationCredentialProvider(\n  client: Pick<OpenGeniClient, \"requestJson\">,\n  organizationId: string,\n): Promise<void> {\n  await client.requestJson<void>(\n    \"DELETE\",\n    `/v1/organizations/${encodeURIComponent(organizationId)}/credential-provider`,\n    undefined,\n    {},\n    { responseType: \"void\" },\n  );\n}\n\nexport async function listOrganizationWebhooks(\n  client: Pick<OpenGeniClient, \"requestJson\">,\n  organizationId: string,\n): Promise<ListOrganizationWebhooksResponse> {\n  return client.requestJson(\n    \"GET\",\n    `/v1/organizations/${encodeURIComponent(organizationId)}/webhooks`,\n  );\n}\n\n/** Create a webhook and return its signing secret once. */\nexport async function createOrganizationWebhook(\n  client: Pick<OpenGeniClient, \"requestJson\">,\n  organizationId: string,\n  request: CreateOrganizationWebhookRequest,\n): Promise<CreateOrganizationWebhookResponse> {\n  return client.requestJson(\n    \"POST\",\n    `/v1/organizations/${encodeURIComponent(organizationId)}/webhooks`,\n    request,\n  );\n}\n\nexport async function getOrganizationWebhook(\n  client: Pick<OpenGeniClient, \"requestJson\">,\n  organizationId: string,\n  webhookId: string,\n): Promise<OrganizationWebhook> {\n  return client.requestJson(\n    \"GET\",\n    `/v1/organizations/${encodeURIComponent(organizationId)}/webhooks/${encodeURIComponent(webhookId)}`,\n  );\n}\n\nexport async function updateOrganizationWebhook(\n  client: Pick<OpenGeniClient, \"requestJson\">,\n  organizationId: string,\n  webhookId: string,\n  request: UpdateOrganizationWebhookRequest,\n): Promise<OrganizationWebhook> {\n  return client.requestJson(\n    \"PATCH\",\n    `/v1/organizations/${encodeURIComponent(organizationId)}/webhooks/${encodeURIComponent(webhookId)}`,\n    request,\n  );\n}\n\nexport async function deleteOrganizationWebhook(\n  client: Pick<OpenGeniClient, \"requestJson\">,\n  organizationId: string,\n  webhookId: string,\n): Promise<void> {\n  await client.requestJson<void>(\n    \"DELETE\",\n    `/v1/organizations/${encodeURIComponent(organizationId)}/webhooks/${encodeURIComponent(webhookId)}`,\n    undefined,\n    {},\n    { responseType: \"void\" },\n  );\n}\n\nexport async function listOrganizationWebhookDeliveries(\n  client: Pick<OpenGeniClient, \"requestJson\">,\n  organizationId: string,\n  webhookId: string,\n  options: { limit?: number } = {},\n): Promise<ListOrganizationWebhookDeliveriesResponse> {\n  return client.requestJson(\n    \"GET\",\n    `/v1/organizations/${encodeURIComponent(organizationId)}/webhooks/${encodeURIComponent(webhookId)}/deliveries`,\n    undefined,\n    options.limit !== undefined ? { limit: String(options.limit) } : {},\n  );\n}\n\n/** Requeue a settled delivery with a fresh attempt budget. */\nexport async function redeliverOrganizationWebhookDelivery(\n  client: Pick<OpenGeniClient, \"requestJson\">,\n  organizationId: string,\n  webhookId: string,\n  deliveryId: string,\n): Promise<OrganizationWebhookDelivery> {\n  return client.requestJson(\n    \"POST\",\n    `/v1/organizations/${encodeURIComponent(organizationId)}/webhooks/${encodeURIComponent(webhookId)}/deliveries/${encodeURIComponent(deliveryId)}/redeliver`,\n  );\n}\n\nexport async function getWorkspaceWebhook(\n  client: Pick<OpenGeniClient, \"requestJson\">,\n  workspaceId: string,\n  webhookId: string,\n): Promise<WorkspaceWebhook> {\n  return client.requestJson(\"GET\", `/v1/workspaces/${workspaceId}/webhooks/${webhookId}`);\n}\n\n/** Rotate immediately. Store the new secret; the old signing secret stops working. */\nexport async function rotateWorkspaceCredentialProviderSecret(\n  client: Pick<OpenGeniClient, \"requestJson\">,\n  workspaceId: string,\n): Promise<RotateWorkspaceCredentialProviderSecretResponse> {\n  return client.requestJson(\n    \"POST\",\n    `/v1/workspaces/${encodeURIComponent(workspaceId)}/credential-provider/rotate-secret`,\n  );\n}\n\nexport async function rotateOrganizationCredentialProviderSecret(\n  client: Pick<OpenGeniClient, \"requestJson\">,\n  organizationId: string,\n): Promise<RotateOrganizationCredentialProviderSecretResponse> {\n  return client.requestJson(\n    \"POST\",\n    `/v1/organizations/${encodeURIComponent(organizationId)}/credential-provider/rotate-secret`,\n  );\n}\n\nexport async function rotateOrganizationWebhookSecret(\n  client: Pick<OpenGeniClient, \"requestJson\">,\n  organizationId: string,\n  webhookId: string,\n): Promise<RotateOrganizationWebhookSecretResponse> {\n  return client.requestJson(\n    \"POST\",\n    `/v1/organizations/${encodeURIComponent(organizationId)}/webhooks/${encodeURIComponent(webhookId)}/rotate-secret`,\n  );\n}\n\nexport async function rotateWorkspaceWebhookSecret(\n  client: Pick<OpenGeniClient, \"requestJson\">,\n  workspaceId: string,\n  webhookId: string,\n): Promise<RotateWorkspaceWebhookSecretResponse> {\n  return client.requestJson(\n    \"POST\",\n    `/v1/workspaces/${encodeURIComponent(workspaceId)}/webhooks/${encodeURIComponent(webhookId)}/rotate-secret`,\n  );\n}\n\n/**\n * Send one signed `webhook.test` event to a workspace webhook now and return\n * what the endpoint answered. Nothing is queued or retried.\n */\nexport async function testWorkspaceWebhook(\n  client: Pick<OpenGeniClient, \"requestJson\">,\n  workspaceId: string,\n  webhookId: string,\n): Promise<TestWorkspaceWebhookResponse> {\n  return client.requestJson(\n    \"POST\",\n    `/v1/workspaces/${encodeURIComponent(workspaceId)}/webhooks/${encodeURIComponent(webhookId)}/test`,\n  );\n}\n\n/**\n * Send one signed `purpose: \"test\"` request to the credential provider this\n * workspace's runs use (its own, else the organization's). Only the names of\n * returned credentials come back, never their values.\n */\nexport async function testWorkspaceCredentialProvider(\n  client: Pick<OpenGeniClient, \"requestJson\">,\n  workspaceId: string,\n): Promise<TestWorkspaceCredentialProviderResponse> {\n  return client.requestJson(\n    \"POST\",\n    `/v1/workspaces/${encodeURIComponent(workspaceId)}/credential-provider/test`,\n  );\n}\n\n/** Organization registrations that reach this workspace. Workspace administrators only. */\nexport async function getWorkspaceInheritedIntegrations(\n  client: Pick<OpenGeniClient, \"requestJson\">,\n  workspaceId: string,\n): Promise<WorkspaceInheritedIntegrationsResponse> {\n  return client.requestJson(\n    \"GET\",\n    `/v1/workspaces/${encodeURIComponent(workspaceId)}/inherited-integrations`,\n  );\n}\n"],"mappings":";;;;;;;;;AAuFO,IAAM,yBAAN,cAAqC,MAAM;AAAA,EAChD,cAAc;AACZ,UAAM,wCAAwC;AAC9C,SAAK,OAAO;AAAA,EACd;AACF;AAUA,SAAS,OAAO,SAAmC,MAA6B;AAC9E,MAAI,mBAAmB,QAAS,QAAO,QAAQ,IAAI,IAAI;AACvD,QAAM,SAAS,KAAK,YAAY;AAChC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,QAAI,IAAI,YAAY,MAAM,QAAQ;AAChC,aAAO,MAAM,QAAQ,KAAK,IAAK,MAAM,CAAC,KAAK,OAAS,SAAS;AAAA,IAC/D;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAe,eAAe,OAAwD;AACpF,QAAM,QAAQ,MAAM,wBAAwB;AAAA,IAC1C,QAAQ,MAAM;AAAA,IACd,MAAM,MAAM;AAAA,IACZ,WAAW,OAAO,MAAM,SAAS,yBAAyB;AAAA,IAC1D,GAAI,MAAM,qBAAqB,SAAY,EAAE,kBAAkB,MAAM,iBAAiB,IAAI,CAAC;AAAA,EAC7F,CAAC;AACD,MAAI,CAAC,MAAO,OAAM,IAAI,uBAAuB;AAC7C,QAAM,SAAkB,KAAK,MAAM,MAAM,IAAI;AAC7C,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GAAG;AAClE,UAAM,IAAI,uBAAuB;AAAA,EACnC;AACA,SAAO;AACT;AAOA,eAAsB,mBAAmB,OAGtC;AACD,QAAM,QAAQ,MAAM,eAAe,KAAK;AACxC,QAAM,aAAa,OAAO,MAAM,SAAS,YAAY,MAAM,KAAK,WAAW,QAAQ;AACnF,QAAM,OAAO,MAAM,SAAS,SAAY,cAAc,MAAM;AAC5D,MACE,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,SAAS,YACtB,OAAO,MAAM,gBAAgB,YAC5B,SAAS,eAAe,SAAS,kBACjC,cAAc,SAAS,eACxB,EACE,OAAO,MAAM,cAAc,aACzB,MAAM,cAAc,QAAQ,MAAM,cAAc,WAChD;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,SAAS,MAAM,IAAI,IAEzB;AACA,UAAM,IAAI,uBAAuB;AAAA,EACnC;AACA,SAAO;AAAA,IACL,OAAO,EAAE,GAAG,OAAO,KAAK;AAAA,IACxB,YAAY,OAAO,MAAM,SAAS,2BAA2B;AAAA,EAC/D;AACF;AAMA,eAAsB,gCACpB,OACoC;AACpC,QAAM,SAAS,MAAM,eAAe,KAAK;AACzC,MAAI,OAAO,SAAS,yBAAyB,OAAO,OAAO,gBAAgB,UAAU;AACnF,UAAM,IAAI,uBAAuB;AAAA,EACnC;AACA,SAAO;AACT;AAGO,IAAM,2BAA2B;AAAA,EACtC,WAAW;AAAA,EACX,SAAS;AAAA,EACT,YAAY;AACd;AAGA,eAAsB,kCACpB,QACA,gBACoD;AACpD,SAAO,OAAO;AAAA,IACZ;AAAA,IACA,qBAAqB,mBAAmB,cAAc,CAAC;AAAA,EACzD;AACF;AAGA,eAAsB,kCACpB,QACA,gBACA,SACoD;AACpD,SAAO,OAAO;AAAA,IACZ;AAAA,IACA,qBAAqB,mBAAmB,cAAc,CAAC;AAAA,IACvD;AAAA,EACF;AACF;AAEA,eAAsB,qCACpB,QACA,gBACe;AACf,QAAM,OAAO;AAAA,IACX;AAAA,IACA,qBAAqB,mBAAmB,cAAc,CAAC;AAAA,IACvD;AAAA,IACA,CAAC;AAAA,IACD,EAAE,cAAc,OAAO;AAAA,EACzB;AACF;AAEA,eAAsB,yBACpB,QACA,gBAC2C;AAC3C,SAAO,OAAO;AAAA,IACZ;AAAA,IACA,qBAAqB,mBAAmB,cAAc,CAAC;AAAA,EACzD;AACF;AAGA,eAAsB,0BACpB,QACA,gBACA,SAC4C;AAC5C,SAAO,OAAO;AAAA,IACZ;AAAA,IACA,qBAAqB,mBAAmB,cAAc,CAAC;AAAA,IACvD;AAAA,EACF;AACF;AAEA,eAAsB,uBACpB,QACA,gBACA,WAC8B;AAC9B,SAAO,OAAO;AAAA,IACZ;AAAA,IACA,qBAAqB,mBAAmB,cAAc,CAAC,aAAa,mBAAmB,SAAS,CAAC;AAAA,EACnG;AACF;AAEA,eAAsB,0BACpB,QACA,gBACA,WACA,SAC8B;AAC9B,SAAO,OAAO;AAAA,IACZ;AAAA,IACA,qBAAqB,mBAAmB,cAAc,CAAC,aAAa,mBAAmB,SAAS,CAAC;AAAA,IACjG;AAAA,EACF;AACF;AAEA,eAAsB,0BACpB,QACA,gBACA,WACe;AACf,QAAM,OAAO;AAAA,IACX;AAAA,IACA,qBAAqB,mBAAmB,cAAc,CAAC,aAAa,mBAAmB,SAAS,CAAC;AAAA,IACjG;AAAA,IACA,CAAC;AAAA,IACD,EAAE,cAAc,OAAO;AAAA,EACzB;AACF;AAEA,eAAsB,kCACpB,QACA,gBACA,WACA,UAA8B,CAAC,GACqB;AACpD,SAAO,OAAO;AAAA,IACZ;AAAA,IACA,qBAAqB,mBAAmB,cAAc,CAAC,aAAa,mBAAmB,SAAS,CAAC;AAAA,IACjG;AAAA,IACA,QAAQ,UAAU,SAAY,EAAE,OAAO,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC;AAAA,EACpE;AACF;AAGA,eAAsB,qCACpB,QACA,gBACA,WACA,YACsC;AACtC,SAAO,OAAO;AAAA,IACZ;AAAA,IACA,qBAAqB,mBAAmB,cAAc,CAAC,aAAa,mBAAmB,SAAS,CAAC,eAAe,mBAAmB,UAAU,CAAC;AAAA,EAChJ;AACF;AAEA,eAAsB,oBACpB,QACA,aACA,WAC2B;AAC3B,SAAO,OAAO,YAAY,OAAO,kBAAkB,WAAW,aAAa,SAAS,EAAE;AACxF;AAGA,eAAsB,wCACpB,QACA,aAC0D;AAC1D,SAAO,OAAO;AAAA,IACZ;AAAA,IACA,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,EACnD;AACF;AAEA,eAAsB,2CACpB,QACA,gBAC6D;AAC7D,SAAO,OAAO;AAAA,IACZ;AAAA,IACA,qBAAqB,mBAAmB,cAAc,CAAC;AAAA,EACzD;AACF;AAEA,eAAsB,gCACpB,QACA,gBACA,WACkD;AAClD,SAAO,OAAO;AAAA,IACZ;AAAA,IACA,qBAAqB,mBAAmB,cAAc,CAAC,aAAa,mBAAmB,SAAS,CAAC;AAAA,EACnG;AACF;AAEA,eAAsB,6BACpB,QACA,aACA,WAC+C;AAC/C,SAAO,OAAO;AAAA,IACZ;AAAA,IACA,kBAAkB,mBAAmB,WAAW,CAAC,aAAa,mBAAmB,SAAS,CAAC;AAAA,EAC7F;AACF;AAMA,eAAsB,qBACpB,QACA,aACA,WACuC;AACvC,SAAO,OAAO;AAAA,IACZ;AAAA,IACA,kBAAkB,mBAAmB,WAAW,CAAC,aAAa,mBAAmB,SAAS,CAAC;AAAA,EAC7F;AACF;AAOA,eAAsB,gCACpB,QACA,aACkD;AAClD,SAAO,OAAO;AAAA,IACZ;AAAA,IACA,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,EACnD;AACF;AAGA,eAAsB,kCACpB,QACA,aACiD;AACjD,SAAO,OAAO;AAAA,IACZ;AAAA,IACA,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,EACnD;AACF;","names":[]}