@openvtc/trust-tasks 0.20.7 → 0.21.0

package/dist/auth/passkey/revoke/start/0.2/payload.d.ts

@@ -0,0 +1,511 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/auth/passkey/revoke/start/0.2/payload.schema.json
+ */
+import type { Ext, PublicKeyCredentialDescriptor, PublicKeyCredentialRequestOptions } from "../../../../../_shared/components.js";
+/**
+ * Ask the auth service to begin revoking a passkey — the subject's own, or, for an administrator, another subject's. The response carries PublicKeyCredentialRequestOptions for a fresh user-verification ceremony over the producer's credentials; nothing is removed until the matching auth/passkey/revoke/finish presents the assertion.
+ */
+export interface AuthPasskeyRevokeStart {
+    /**
+     * The credential to revoke, as returned by auth/passkey/list. Opaque to the producer.
+     */
+    credentialId: string;
+    /**
+     * New in 0.2. Whose credential it is, when the producer is not its owner: an administrator revoking another subject's credential. Absent: the producer's own. The user-verification ceremony is always over the PRODUCER's credentials — the person acting proves they are present, whoever owns the credential.
+     */
+    subject?: string;
+    /**
+     * Ecosystem-defined extension members per SPEC.md §4.5.1.
+     */
+    ext?: Ext;
+}
+/**
+ * Server-issued re-authentication options. Carried in a Trust Task document whose type is https://trusttasks.org/spec/auth/passkey/revoke/start/0.2#response.
+ */
+export interface AuthPasskeyRevokeStartResponsePayload {
+    /**
+     * Opaque server handle correlating this start with the matching finish. The producer MUST echo it verbatim. The consumer binds it to the target credentialId server-side, so the finish carries no target of its own.
+     */
+    revocationId: string;
+    /**
+     * PublicKeyCredentialRequestOptions for navigator.credentials.get — a fresh user-verification ceremony proving a human with an enrolled authenticator is present right now. userVerification SHOULD be "required".
+     */
+    uvOptions: PublicKeyCredentialRequestOptions;
+    /**
+     * Ecosystem-defined extension members per SPEC.md §4.5.1.
+     */
+    ext?: Ext;
+}
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext, PublicKeyCredentialDescriptor, PublicKeyCredentialRequestOptions };
+/** Trust Task type URI. */
+export declare const TYPE_URI: "https://trusttasks.org/spec/auth/passkey/revoke/start/0.2";
+/** Stable alias for this specification's request payload shape. */
+export type Payload = AuthPasskeyRevokeStart;
+/** Trust Task response type URI (request type URI + "#response"). */
+export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/auth/passkey/revoke/start/0.2#response";
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = AuthPasskeyRevokeStartResponsePayload;
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export declare const PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $id: "https://trusttasks.org/spec/auth/passkey/revoke/start/0.2";
+    readonly title: "Auth — Passkey Revoke (start)";
+    readonly description: "Ask the auth service to begin revoking a passkey — the subject's own, or, for an administrator, another subject's. The response carries PublicKeyCredentialRequestOptions for a fresh user-verification ceremony over the producer's credentials; nothing is removed until the matching auth/passkey/revoke/finish presents the assertion.";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["credentialId"];
+    readonly properties: {
+        readonly credentialId: {
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly description: "The credential to revoke, as returned by auth/passkey/list. Opaque to the producer.";
+        };
+        readonly subject: {
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly description: "New in 0.2. Whose credential it is, when the producer is not its owner: an administrator revoking another subject's credential. Absent: the producer's own. The user-verification ceremony is always over the PRODUCER's credentials — the person acting proves they are present, whoever owns the credential.";
+        };
+        readonly ext: {
+            readonly $ref: "#/$defs/Ext";
+            readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
+        };
+    };
+    readonly $defs: {
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "Auth Passkey Revoke Start — response payload";
+            readonly description: "Server-issued re-authentication options. Carried in a Trust Task document whose type is https://trusttasks.org/spec/auth/passkey/revoke/start/0.2#response.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["revocationId", "uvOptions"];
+            readonly properties: {
+                readonly revocationId: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly description: "Opaque server handle correlating this start with the matching finish. The producer MUST echo it verbatim. The consumer binds it to the target credentialId server-side, so the finish carries no target of its own.";
+                };
+                readonly uvOptions: {
+                    readonly $ref: "#/$defs/CredentialRequestOptions";
+                    readonly description: "PublicKeyCredentialRequestOptions for navigator.credentials.get — a fresh user-verification ceremony proving a human with an enrolled authenticator is present right now. userVerification SHOULD be \"required\".";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                    readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+        readonly CredentialRequestOptions: {
+            readonly $anchor: "credentialRequestOptions";
+            readonly title: "PublicKeyCredentialRequestOptions";
+            readonly description: "Server-issued options for `navigator.credentials.get({ publicKey: ... })`.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["challenge"];
+            readonly properties: {
+                readonly extensions: {
+                    readonly type: "object";
+                    readonly description: "Client extension inputs, per the WebAuthn Level 2 `AuthenticationExtensionsClientInputs` dictionary.\n\nThis component states that it mirrors the W3C dictionary, and that dictionary defines `extensions`. Omitting it while closing the object with `additionalProperties: false` made the two claims contradict each other: a server emitting standard WebAuthn options could not conform, and the widely-used server libraries emit this member by default.\n\nStructure is deliberately unconstrained. The set of extensions is open and registered outside this framework, so enumerating them here would date the schema against a registry it does not own — and a closed list would reproduce the original defect one revision later.";
+                };
+                readonly challenge: {
+                    readonly type: "string";
+                    readonly description: "base64url-encoded one-time nonce.";
+                };
+                readonly timeout: {
+                    readonly type: "integer";
+                    readonly minimum: 1;
+                };
+                readonly rpId: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+                readonly allowCredentials: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly $ref: "#/$defs/CredentialDescriptor";
+                    };
+                };
+                readonly userVerification: {
+                    readonly enum: readonly ["discouraged", "preferred", "required"];
+                };
+            };
+        };
+        readonly CredentialDescriptor: {
+            readonly $anchor: "credentialDescriptor";
+            readonly title: "PublicKeyCredentialDescriptor";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["type", "id"];
+            readonly properties: {
+                readonly type: {
+                    readonly const: "public-key";
+                };
+                readonly id: {
+                    readonly type: "string";
+                    readonly description: "base64url-encoded credential id.";
+                };
+                readonly transports: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly enum: readonly ["usb", "nfc", "ble", "internal", "hybrid"];
+                    };
+                };
+            };
+        };
+    };
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export declare const RESPONSE_PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $ref: "#/$defs/Response";
+    readonly $defs: {
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "Auth Passkey Revoke Start — response payload";
+            readonly description: "Server-issued re-authentication options. Carried in a Trust Task document whose type is https://trusttasks.org/spec/auth/passkey/revoke/start/0.2#response.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["revocationId", "uvOptions"];
+            readonly properties: {
+                readonly revocationId: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly description: "Opaque server handle correlating this start with the matching finish. The producer MUST echo it verbatim. The consumer binds it to the target credentialId server-side, so the finish carries no target of its own.";
+                };
+                readonly uvOptions: {
+                    readonly $ref: "#/$defs/CredentialRequestOptions";
+                    readonly description: "PublicKeyCredentialRequestOptions for navigator.credentials.get — a fresh user-verification ceremony proving a human with an enrolled authenticator is present right now. userVerification SHOULD be \"required\".";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                    readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+        readonly CredentialRequestOptions: {
+            readonly $anchor: "credentialRequestOptions";
+            readonly title: "PublicKeyCredentialRequestOptions";
+            readonly description: "Server-issued options for `navigator.credentials.get({ publicKey: ... })`.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["challenge"];
+            readonly properties: {
+                readonly extensions: {
+                    readonly type: "object";
+                    readonly description: "Client extension inputs, per the WebAuthn Level 2 `AuthenticationExtensionsClientInputs` dictionary.\n\nThis component states that it mirrors the W3C dictionary, and that dictionary defines `extensions`. Omitting it while closing the object with `additionalProperties: false` made the two claims contradict each other: a server emitting standard WebAuthn options could not conform, and the widely-used server libraries emit this member by default.\n\nStructure is deliberately unconstrained. The set of extensions is open and registered outside this framework, so enumerating them here would date the schema against a registry it does not own — and a closed list would reproduce the original defect one revision later.";
+                };
+                readonly challenge: {
+                    readonly type: "string";
+                    readonly description: "base64url-encoded one-time nonce.";
+                };
+                readonly timeout: {
+                    readonly type: "integer";
+                    readonly minimum: 1;
+                };
+                readonly rpId: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+                readonly allowCredentials: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly $ref: "#/$defs/CredentialDescriptor";
+                    };
+                };
+                readonly userVerification: {
+                    readonly enum: readonly ["discouraged", "preferred", "required"];
+                };
+            };
+        };
+        readonly CredentialDescriptor: {
+            readonly $anchor: "credentialDescriptor";
+            readonly title: "PublicKeyCredentialDescriptor";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["type", "id"];
+            readonly properties: {
+                readonly type: {
+                    readonly const: "public-key";
+                };
+                readonly id: {
+                    readonly type: "string";
+                    readonly description: "base64url-encoded credential id.";
+                };
+                readonly transports: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly enum: readonly ["usb", "nfc", "ble", "internal", "hybrid"];
+                    };
+                };
+            };
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export declare const SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/auth/passkey/revoke/start/0.2";
+    readonly isBearer: false;
+    readonly isProofRequired: true;
+    readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: true;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $id: "https://trusttasks.org/spec/auth/passkey/revoke/start/0.2";
+        readonly title: "Auth — Passkey Revoke (start)";
+        readonly description: "Ask the auth service to begin revoking a passkey — the subject's own, or, for an administrator, another subject's. The response carries PublicKeyCredentialRequestOptions for a fresh user-verification ceremony over the producer's credentials; nothing is removed until the matching auth/passkey/revoke/finish presents the assertion.";
+        readonly type: "object";
+        readonly additionalProperties: false;
+        readonly required: readonly ["credentialId"];
+        readonly properties: {
+            readonly credentialId: {
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly description: "The credential to revoke, as returned by auth/passkey/list. Opaque to the producer.";
+            };
+            readonly subject: {
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly description: "New in 0.2. Whose credential it is, when the producer is not its owner: an administrator revoking another subject's credential. Absent: the producer's own. The user-verification ceremony is always over the PRODUCER's credentials — the person acting proves they are present, whoever owns the credential.";
+            };
+            readonly ext: {
+                readonly $ref: "#/$defs/Ext";
+                readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
+            };
+        };
+        readonly $defs: {
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "Auth Passkey Revoke Start — response payload";
+                readonly description: "Server-issued re-authentication options. Carried in a Trust Task document whose type is https://trusttasks.org/spec/auth/passkey/revoke/start/0.2#response.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["revocationId", "uvOptions"];
+                readonly properties: {
+                    readonly revocationId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly description: "Opaque server handle correlating this start with the matching finish. The producer MUST echo it verbatim. The consumer binds it to the target credentialId server-side, so the finish carries no target of its own.";
+                    };
+                    readonly uvOptions: {
+                        readonly $ref: "#/$defs/CredentialRequestOptions";
+                        readonly description: "PublicKeyCredentialRequestOptions for navigator.credentials.get — a fresh user-verification ceremony proving a human with an enrolled authenticator is present right now. userVerification SHOULD be \"required\".";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                        readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+            readonly CredentialRequestOptions: {
+                readonly $anchor: "credentialRequestOptions";
+                readonly title: "PublicKeyCredentialRequestOptions";
+                readonly description: "Server-issued options for `navigator.credentials.get({ publicKey: ... })`.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["challenge"];
+                readonly properties: {
+                    readonly extensions: {
+                        readonly type: "object";
+                        readonly description: "Client extension inputs, per the WebAuthn Level 2 `AuthenticationExtensionsClientInputs` dictionary.\n\nThis component states that it mirrors the W3C dictionary, and that dictionary defines `extensions`. Omitting it while closing the object with `additionalProperties: false` made the two claims contradict each other: a server emitting standard WebAuthn options could not conform, and the widely-used server libraries emit this member by default.\n\nStructure is deliberately unconstrained. The set of extensions is open and registered outside this framework, so enumerating them here would date the schema against a registry it does not own — and a closed list would reproduce the original defect one revision later.";
+                    };
+                    readonly challenge: {
+                        readonly type: "string";
+                        readonly description: "base64url-encoded one-time nonce.";
+                    };
+                    readonly timeout: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                    };
+                    readonly rpId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly allowCredentials: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly $ref: "#/$defs/CredentialDescriptor";
+                        };
+                    };
+                    readonly userVerification: {
+                        readonly enum: readonly ["discouraged", "preferred", "required"];
+                    };
+                };
+            };
+            readonly CredentialDescriptor: {
+                readonly $anchor: "credentialDescriptor";
+                readonly title: "PublicKeyCredentialDescriptor";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["type", "id"];
+                readonly properties: {
+                    readonly type: {
+                        readonly const: "public-key";
+                    };
+                    readonly id: {
+                        readonly type: "string";
+                        readonly description: "base64url-encoded credential id.";
+                    };
+                    readonly transports: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly enum: readonly ["usb", "nfc", "ble", "internal", "hybrid"];
+                        };
+                    };
+                };
+            };
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export declare const RESPONSE_SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/auth/passkey/revoke/start/0.2#response";
+    readonly isBearer: false;
+    readonly isProofRequired: true;
+    readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: true;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $ref: "#/$defs/Response";
+        readonly $defs: {
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "Auth Passkey Revoke Start — response payload";
+                readonly description: "Server-issued re-authentication options. Carried in a Trust Task document whose type is https://trusttasks.org/spec/auth/passkey/revoke/start/0.2#response.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["revocationId", "uvOptions"];
+                readonly properties: {
+                    readonly revocationId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly description: "Opaque server handle correlating this start with the matching finish. The producer MUST echo it verbatim. The consumer binds it to the target credentialId server-side, so the finish carries no target of its own.";
+                    };
+                    readonly uvOptions: {
+                        readonly $ref: "#/$defs/CredentialRequestOptions";
+                        readonly description: "PublicKeyCredentialRequestOptions for navigator.credentials.get — a fresh user-verification ceremony proving a human with an enrolled authenticator is present right now. userVerification SHOULD be \"required\".";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                        readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+            readonly CredentialRequestOptions: {
+                readonly $anchor: "credentialRequestOptions";
+                readonly title: "PublicKeyCredentialRequestOptions";
+                readonly description: "Server-issued options for `navigator.credentials.get({ publicKey: ... })`.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["challenge"];
+                readonly properties: {
+                    readonly extensions: {
+                        readonly type: "object";
+                        readonly description: "Client extension inputs, per the WebAuthn Level 2 `AuthenticationExtensionsClientInputs` dictionary.\n\nThis component states that it mirrors the W3C dictionary, and that dictionary defines `extensions`. Omitting it while closing the object with `additionalProperties: false` made the two claims contradict each other: a server emitting standard WebAuthn options could not conform, and the widely-used server libraries emit this member by default.\n\nStructure is deliberately unconstrained. The set of extensions is open and registered outside this framework, so enumerating them here would date the schema against a registry it does not own — and a closed list would reproduce the original defect one revision later.";
+                    };
+                    readonly challenge: {
+                        readonly type: "string";
+                        readonly description: "base64url-encoded one-time nonce.";
+                    };
+                    readonly timeout: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                    };
+                    readonly rpId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly allowCredentials: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly $ref: "#/$defs/CredentialDescriptor";
+                        };
+                    };
+                    readonly userVerification: {
+                        readonly enum: readonly ["discouraged", "preferred", "required"];
+                    };
+                };
+            };
+            readonly CredentialDescriptor: {
+                readonly $anchor: "credentialDescriptor";
+                readonly title: "PublicKeyCredentialDescriptor";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["type", "id"];
+                readonly properties: {
+                    readonly type: {
+                        readonly const: "public-key";
+                    };
+                    readonly id: {
+                        readonly type: "string";
+                        readonly description: "base64url-encoded credential id.";
+                    };
+                    readonly transports: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly enum: readonly ["usb", "nfc", "ble", "internal", "hybrid"];
+                        };
+                    };
+                };
+            };
+        };
+    };
+};
+//# sourceMappingURL=payload.d.ts.map

package/dist/auth/passkey/revoke/start/0.2/payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../../../src/auth/passkey/revoke/start/0.2/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,6BAA6B,EAAE,iCAAiC,EAAE,MAAM,sCAAsC,CAAC;AAGlI;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,qCAAqC;IACpD;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB;;OAEG;IACH,SAAS,EAAE,iCAAiC,CAAC;IAC7C;;OAEG;IACH,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AAED,kHAAkH;AAClH,YAAY,EAAE,GAAG,EAAE,6BAA6B,EAAE,iCAAiC,EAAE,CAAC;AAEtF,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,2DAAoE,CAAC;AAE7F,mEAAmE;AACnE,MAAM,MAAM,OAAO,GAAG,sBAAsB,CAAC;AAE7C,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,oEAA6E,CAAC;AAE/G,4EAA4E;AAC5E,MAAM,MAAM,QAAQ,GAAG,qCAAqC,CAAC;AAE7D;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwIjB,CAAC;AAEX,mEAAmE;AACnE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiH1B,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOP,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOhB,CAAC"}