@oxyhq/services 29.0.0 → 30.0.0

package/lib/typescript/commonjs/ui/oauth/types.d.ts

@@ -1,176 +0,0 @@
-/**
- * Typed contracts shared by the browser "Sign in with Oxy" OAuth transports.
- *
- * Two transports deliver the same authorization code to the same completion
- * path (see `completeOAuthCode.ts`):
- *
- * - `redirect` — the historical full-page hand-off to `auth.oxy.so/authorize`.
- *   The RP tab navigates away and comes back to its registered `redirect_uri`
- *   with `?code=…&state=…`; cold boot finishes the exchange.
- * - `popup` — a small `auth.oxy.so` window opened from the user's click. The RP
- *   stays mounted with its route and unsaved state intact; the IdP delivers the
- *   result to `window.opener` via `postMessage` and closes itself.
- *
- * Only the authorization code, the CSRF `state`, and a typed OAuth error ever
- * cross the `postMessage` channel. Access tokens, device secrets, and the PKCE
- * `code_verifier` NEVER do — the opener keeps the verifier and performs the code
- * exchange itself.
- */
-/** How a web relying party hands the user to the IdP for third-party sign-in. */
-export type WebAuthMode = 'popup' | 'redirect';
-/**
- * Minimal structural handle over a popup `Window` — exactly what the popup
- * transport needs: navigate it once the authorize URL is built, detect the user
- * closing it (`closed`, polled — there is no cross-origin close event), and
- * close it programmatically on completion. Satisfied directly by the value
- * `window.open()` returns.
- *
- * Deliberately NOT `Window`: the transport must never read cross-origin
- * properties off the popup, and a narrow handle makes that impossible to do by
- * accident (and trivial to fake in tests).
- */
-export interface OAuthPopupHandle {
-    readonly closed: boolean;
-    close(): void;
-    location: {
-        href: string;
-    };
-}
-/**
- * The RP-side OAuth handshake for one authorize request: the CSRF `state` sent
- * to the IdP and the PKCE `code_verifier` replayed on the token exchange.
- *
- * In `redirect` mode it is persisted to `sessionStorage` across the full-page
- * navigation; in `popup` mode it never leaves memory.
- */
-export interface OAuthHandshake {
-    /** Opaque CSRF token echoed back by the IdP and validated before any exchange. */
-    state: string;
-    /** The PKCE secret. Never crosses `postMessage`, a URL, or storage in popup mode. */
-    codeVerifier: string;
-}
-/** Successful authorization delivered by the IdP over `postMessage`. */
-export interface OxyOAuthCodeMessage {
-    type: 'oxy:oauth:code';
-    code: string;
-    state: string;
-}
-/** Typed OAuth failure delivered by the IdP over `postMessage`. */
-export interface OxyOAuthErrorMessage {
-    type: 'oxy:oauth:error';
-    error: string;
-    errorDescription?: string;
-    state?: string;
-}
-/** The ONLY two message shapes that may cross the popup channel. */
-export type OxyOAuthMessage = OxyOAuthCodeMessage | OxyOAuthErrorMessage;
-/** Session material handed to the provider's commit funnel after an exchange. */
-export interface OAuthSessionCommitInput {
-    sessionId: string;
-    accessToken?: string;
-    deviceId?: string;
-    deviceSecret?: string;
-    userId: string;
-    expiresAt?: string;
-    user?: {
-        id: string;
-        username?: string;
-        avatar?: string;
-    };
-}
-/**
- * Terminal outcome of one popup sign-in attempt. Every expected path — the user
- * closing the window, a timeout, an IdP error — is a value, never a thrown
- * exception.
- */
-export type OAuthPopupOutcome = 
-/** The IdP delivered an authorization code whose `state` matched. */
-{
-    kind: 'code';
-    code: string;
-    state: string;
-}
-/** The IdP delivered a typed OAuth error (`access_denied`, `login_required`, …). */
- | {
-    kind: 'oauth-error';
-    error: string;
-    errorDescription?: string;
-}
-/** A well-formed message from our popup carried the wrong `state`. */
- | {
-    kind: 'state-mismatch';
-}
-/** The user dismissed the popup without completing sign-in. */
- | {
-    kind: 'closed';
-}
-/** No result arrived within the allotted window. */
- | {
-    kind: 'timed-out';
-}
-/** No DOM message host (SSR / native) — the popup transport does not apply. */
- | {
-    kind: 'unsupported';
-};
-/** Why the shared completion path could not produce a session. */
-export type OAuthCompletionFailure = 'state-mismatch' | 'exchange-failed';
-/** Result of the ONE completion path both transports run. */
-export type OAuthCompletionResult = {
-    ok: true;
-} | {
-    ok: false;
-    reason: OAuthCompletionFailure;
-};
-/** Why the transport fell back to a full-page redirect. */
-export type WebOAuthRedirectReason = 
-/** `webAuthMode: 'redirect'` — the configured transport. */
-'redirect-mode'
-/** The browser refused `window.open` (blocker, or no gesture attribution). */
- | 'popup-blocked'
-/** The popup opened but could not be navigated to the authorize URL. */
- | 'popup-navigation-failed';
-/** Why a web sign-in attempt failed outright. */
-export type WebOAuthFailureReason = 
-/** The handshake could not be persisted for the redirect return (no/blocked storage). */
-'handshake-storage'
-/** The `state` returned by the IdP did not match the one we sent. */
- | 'state-mismatch'
-/** `POST /auth/oauth/token` or the session commit failed. */
- | 'exchange-failed'
-/** The IdP reported a typed OAuth error. */
- | 'idp-error';
-/** Why a web sign-in attempt was not applicable at all. */
-export type WebOAuthUnsupportedReason = 
-/** Not a browser (native / SSR) — native uses `openAuthorizeUrlNative`. */
-'no-browser'
-/** `sessionMode: 'identity'` has no third-party OAuth lane by construction. */
- | 'identity-bound'
-/** No `clientId` is configured on the provider. */
- | 'missing-client-id';
-/** Terminal, typed outcome of a web third-party sign-in attempt. */
-export type WebOAuthSignInResult = 
-/** A session was committed; the RP is authenticated without a reload. */
-{
-    status: 'signed-in';
-}
-/** The tab is navigating to the IdP; nothing else will resolve in this document. */
- | {
-    status: 'redirecting';
-    via: WebOAuthRedirectReason;
-}
-/** The user dismissed the popup. */
- | {
-    status: 'cancelled';
-}
-/** No result arrived within the allotted window. */
- | {
-    status: 'timed-out';
-} | {
-    status: 'failed';
-    reason: WebOAuthFailureReason;
-    description?: string;
-} | {
-    status: 'unsupported';
-    reason: WebOAuthUnsupportedReason;
-};
-//# sourceMappingURL=types.d.ts.map

package/lib/typescript/commonjs/ui/oauth/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/ui/oauth/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,iFAAiF;AACjF,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,UAAU,CAAC;AAE/C;;;;;;;;;;GAUG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,KAAK,IAAI,IAAI,CAAC;IACd,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,kFAAkF;IAClF,KAAK,EAAE,MAAM,CAAC;IACd,qFAAqF;IACrF,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,wEAAwE;AACxE,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,gBAAgB,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,mEAAmE;AACnE,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,iBAAiB,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,oEAAoE;AACpE,MAAM,MAAM,eAAe,GAAG,mBAAmB,GAAG,oBAAoB,CAAC;AAEzE,iFAAiF;AACjF,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3D;AAED;;;;GAIG;AACH,MAAM,MAAM,iBAAiB;AAC3B,qEAAqE;AACnE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAC/C,oFAAoF;GAClF;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAE;AACnE,sEAAsE;GACpE;IAAE,IAAI,EAAE,gBAAgB,CAAA;CAAE;AAC5B,+DAA+D;GAC7D;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE;AACpB,oDAAoD;GAClD;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE;AACvB,+EAA+E;GAC7E;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,CAAC;AAE5B,kEAAkE;AAClE,MAAM,MAAM,sBAAsB,GAAG,gBAAgB,GAAG,iBAAiB,CAAC;AAE1E,6DAA6D;AAC7D,MAAM,MAAM,qBAAqB,GAC7B;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,sBAAsB,CAAA;CAAE,CAAC;AAElD,2DAA2D;AAC3D,MAAM,MAAM,sBAAsB;AAChC,4DAA4D;AAC1D,eAAe;AACjB,8EAA8E;GAC5E,eAAe;AACjB,wEAAwE;GACtE,yBAAyB,CAAC;AAE9B,iDAAiD;AACjD,MAAM,MAAM,qBAAqB;AAC/B,yFAAyF;AACvF,mBAAmB;AACrB,qEAAqE;GACnE,gBAAgB;AAClB,6DAA6D;GAC3D,iBAAiB;AACnB,4CAA4C;GAC1C,WAAW,CAAC;AAEhB,2DAA2D;AAC3D,MAAM,MAAM,yBAAyB;AACnC,2EAA2E;AACzE,YAAY;AACd,+EAA+E;GAC7E,gBAAgB;AAClB,mDAAmD;GACjD,mBAAmB,CAAC;AAExB,oEAAoE;AACpE,MAAM,MAAM,oBAAoB;AAC9B,yEAAyE;AACvE;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE;AACzB,oFAAoF;GAClF;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,GAAG,EAAE,sBAAsB,CAAA;CAAE;AACxD,oCAAoC;GAClC;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE;AACzB,oDAAoD;GAClD;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,GACvB;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GACzE;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,yBAAyB,CAAA;CAAE,CAAC"}

package/lib/typescript/commonjs/ui/runtime/createOxyRuntime.d.ts

@@ -1,144 +0,0 @@
-import type { DeviceDirectory, DeviceSessionState } from '@oxyhq/contracts';
-import type { ClientSession, User } from '@oxyhq/core';
-import type { IdentitySessionBinding } from '../session/identityBinding';
-import type { OxyRuntimeSnapshot } from './types';
-/**
- * A change of SUBJECT — the account the session acts as.
- *
- * `previous === null` is an initial sign-in (nothing account-scoped is cached
- * yet); `next === null` is a sign-out; both non-null and different is a switch,
- * the only case that must invalidate a warm cache.
- */
-export interface SubjectTransition {
-    previous: string | null;
-    next: string | null;
-}
-/**
- * The three seams the runtime reads, declared STRUCTURALLY rather than as the
- * concrete `OxyServices` / `SessionClient` / `SessionClientHost` types.
- *
- * The real classes satisfy them, so nothing changes at the call site — but a
- * test can hand the runtime three plain objects instead of casting a stub
- * through `unknown`, which is how a stub silently drifts from the interface it
- * pretends to implement.
- */
-export interface RuntimeClient {
-    getAccessToken(): string | null;
-    getUsersByIds(ids: string[]): Promise<User[]>;
-}
-export interface RuntimeSessionClient {
-    getState(): DeviceSessionState | null;
-    getDirectory(): DeviceDirectory | null;
-    subscribe(listener: (state: DeviceSessionState | null) => void): () => void;
-    refreshDirectory(): Promise<void>;
-    activateContext(contextId: string): Promise<void>;
-    signOutContext(contextId: string): Promise<void>;
-    signOutPrincipal(principalId: string): Promise<void>;
-}
-export interface RuntimeSessionHost {
-    setCurrentAccountId(accountId: string | null): void;
-}
-export interface OxyRuntimeConfig {
-    oxyServices: RuntimeClient;
-    sessionClient: RuntimeSessionClient;
-    sessionClientHost: RuntimeSessionHost;
-    /** `null` for every account-mode runtime; the pin binding in identity mode. */
-    identity: IdentitySessionBinding | null;
-    /**
-     * Reset account-scoped caches. Called BETWEEN the bearer commit and the
-     * snapshot publish, which is the whole point of routing every fact change
-     * through one transition (ADR 0002's ordering invariant): a consumer woken by
-     * a switch must never read a cache entry belonging to the previous subject.
-     */
-    onSubjectChange?: (transition: SubjectTransition) => void;
-    /**
-     * The device reports zero accounts. Local UI teardown only — the durable
-     * device credential is the caller's decision, gated on a `request`-origin
-     * verdict.
-     */
-    onDeviceEmpty: () => Promise<void>;
-    /** Persist the projected session-id list (display/bookkeeping storage). */
-    onSessionsProjected?: (sessionIds: string[]) => void;
-    /**
-     * Identity mode only: the pinned account is unknown or has left this device's
-     * session set, so the session must be re-derived from the local identity key.
-     * Projecting anything here would mean projecting somebody else's account.
-     */
-    onIdentityUnbound?: (binding: IdentitySessionBinding, revision: number) => void;
-    logger: (message: string, error?: unknown) => void;
-}
-/**
- * The headless session runtime (ADR 0004).
- *
- * It owns the session facts and the ORDER in which they become visible. React
- * is an adapter: the provider hands components this object and they subscribe
- * with selectors, so an unrelated change (a locale, a dialog opening) cannot
- * rebuild an auth consumer's view.
- */
-export interface OxyRuntime {
-    getSnapshot(): OxyRuntimeSnapshot;
-    subscribe(listener: () => void): () => void;
-    /** Begin projecting `SessionClient` transitions. Returns the disposer. */
-    start(): () => void;
-    /**
-     * Project the client's current device state onto the snapshot. Idempotent and
-     * revision-guarded: a projection whose profile fetch was overtaken by a
-     * fresher state discards itself rather than publishing a stale subject.
-     */
-    reconcileFromClient(): Promise<void>;
-    /** Read the device directory and publish it (opts this runtime into ADR 0002). */
-    refreshDirectory(): Promise<void>;
-    /**
-     * Make one `principal acting as account` context active (ADR 0002).
-     *
-     * `contextId`, never an account id: on a device holding two people the same
-     * organization is reachable through both, and an account id cannot name which
-     * route to take.
-     */
-    activateContext(contextId: string): Promise<void>;
-    /**
-     * Remove ONE `principal → account` pair. The same account reached through a
-     * second person is a different session with a different audit actor, and it
-     * stays.
-     *
-     * Context ids are NOT stable across a removal: the server offers the pair
-     * again under a NEW id on the next directory read, so nothing may cache one
-     * across this call.
-     */
-    signOutContext(contextId: string): Promise<void>;
-    /** Remove ONE PERSON and every context they reach, and nobody else's. */
-    signOutPrincipal(principalId: string): Promise<void>;
-    /**
-     * Run several fact changes as ONE transition.
-     *
-     * A session commit sets the optimistic session mirror, the active session id
-     * and the account. Left as three transitions those are three publishes, and
-     * — worse — the account is compared against a different baseline each time,
-     * so an account-scoped cache reset could run against a half-applied session.
-     * Batched, subscribers are woken once, after all of it, with the reset having
-     * run exactly once in between.
-     */
-    batch(mutate: () => void): void;
-    setAccount(user: User): void;
-    setLoading(loading: boolean): void;
-    setError(error: string | null): void;
-    setStorageReady(ready: boolean): void;
-    setTokenReady(ready: boolean): void;
-    setHasAccessToken(has: boolean): void;
-    setSwitching(switching: boolean): void;
-    markAuthResolved(): void;
-    /**
-     * Merge an optimistic local session mirror so the UI moves before the server
-     * round-trip. The authoritative projection overwrites it a moment later; both
-     * write the SAME field, so there is still exactly one owner.
-     */
-    mergeSessions(incoming: ClientSession[], options?: {
-        merge?: boolean;
-        preserveSessionIds?: string[];
-    }): void;
-    setActiveSessionId(sessionId: string | null): void;
-    /** Local teardown: drop the session projection without touching the server. */
-    clearSession(): void;
-}
-export declare function createOxyRuntime(config: OxyRuntimeConfig): OxyRuntime;
-//# sourceMappingURL=createOxyRuntime.d.ts.map

package/lib/typescript/commonjs/ui/runtime/createOxyRuntime.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"createOxyRuntime.d.ts","sourceRoot":"","sources":["../../../../../src/ui/runtime/createOxyRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,KAAK,EAAE,aAAa,EAAiB,IAAI,EAAE,MAAM,aAAa,CAAC;AAYtE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,KAAK,EAAE,kBAAkB,EAAoC,MAAM,SAAS,CAAC;AAEpF;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAa;IAC5B,cAAc,IAAI,MAAM,GAAG,IAAI,CAAC;IAChC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,IAAI,kBAAkB,GAAG,IAAI,CAAC;IACtC,YAAY,IAAI,eAAe,GAAG,IAAI,CAAC;IACvC,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAC5E,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,kBAAkB;IACjC,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;CACrD;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,aAAa,CAAC;IAC3B,aAAa,EAAE,oBAAoB,CAAC;IACpC,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,+EAA+E;IAC/E,QAAQ,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAExC;;;;;OAKG;IACH,eAAe,CAAC,EAAE,CAAC,UAAU,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAE1D;;;;OAIG;IACH,aAAa,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnC,2EAA2E;IAC3E,mBAAmB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;IAErD;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE,sBAAsB,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;IAEhF,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;CACpD;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,UAAU;IACzB,WAAW,IAAI,kBAAkB,CAAC;IAClC,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC;IAE5C,0EAA0E;IAC1E,KAAK,IAAI,MAAM,IAAI,CAAC;IAEpB;;;;OAIG;IACH,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAErC,kFAAkF;IAClF,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAElC;;;;;;OAMG;IACH,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAElD;;;;;;;;OAQG;IACH,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjD,yEAAyE;IACzE,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAErD;;;;;;;;;OASG;IACH,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,GAAG,IAAI,CAAC;IAEhC,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;IAC7B,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;IACrC,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;IACtC,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;IACpC,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAAC;IACtC,YAAY,CAAC,SAAS,EAAE,OAAO,GAAG,IAAI,CAAC;IACvC,gBAAgB,IAAI,IAAI,CAAC;IAEzB;;;;OAIG;IACH,aAAa,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC;IAC7G,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;IAEnD,+EAA+E;IAC/E,YAAY,IAAI,IAAI,CAAC;CACtB;AA2DD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,UAAU,CAyYrE"}

package/lib/typescript/commonjs/ui/runtime/index.d.ts

@@ -1,16 +0,0 @@
-/**
- * The headless session runtime (ADR 0004).
- *
- * `createOxyRuntime` owns the session facts and the order in which they become
- * visible; `useRuntimeSnapshot` / `useRuntimeSelector` are the React adapter
- * over it. Nothing here imports React except the adapter, and nothing in the
- * runtime reads React state — which is what lets the provider hold ONE stable
- * reference and stop rebuilding a 58-field context value on every keystroke.
- */
-export { createOxyRuntime } from './createOxyRuntime';
-export type { OxyRuntime, OxyRuntimeConfig, RuntimeClient, RuntimeSessionClient, RuntimeSessionHost, SubjectTransition, } from './createOxyRuntime';
-export { useRuntimeSnapshot, useRuntimeSelector } from './useRuntimeSnapshot';
-export { OxyRuntimeHandleProvider, OxyRuntimeMissingError, useActiveAccount, useDeviceDirectory, useOxyRuntime, useOxySnapshot, } from './runtimeContext';
-export type { ActiveAccount } from './runtimeContext';
-export type { OxyRuntimeError, OxyRuntimeSnapshot, OxyRuntimeStatus, OxyTokenStatus, } from './types';
-//# sourceMappingURL=index.d.ts.map

package/lib/typescript/commonjs/ui/runtime/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/ui/runtime/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,YAAY,EACV,UAAU,EACV,gBAAgB,EAChB,aAAa,EACb,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC9E,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,gBAAgB,EAChB,kBAAkB,EAClB,aAAa,EACb,cAAc,GACf,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,YAAY,EACV,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,GACf,MAAM,SAAS,CAAC"}

package/lib/typescript/commonjs/ui/runtime/runtimeContext.d.ts

@@ -1,43 +0,0 @@
-import type { DeviceDirectory } from '@oxyhq/contracts';
-import type { DeviceContext, User } from '@oxyhq/core';
-import type { OxyRuntime } from './createOxyRuntime';
-import type { OxyRuntimeStatus } from './types';
-export declare const OxyRuntimeHandleProvider: import("react").Provider<OxyRuntime | null>;
-export declare class OxyRuntimeMissingError extends Error {
-    readonly code = "oxy_runtime_missing";
-    constructor();
-}
-/** The runtime this provider owns. THROWS when no `<OxyProvider>` is mounted. */
-export declare function useOxyRuntime(): OxyRuntime;
-export interface ActiveAccount {
-    /**
-     * The human whose authentication backs the session — the audit actor. Equal
-     * to {@link ActiveAccount.account} unless a delegated context is active.
-     */
-    principal: User | null;
-    /** The account the session acts AS — what a profile header renders. */
-    account: User | null;
-    /** The resolved `principal acting as account` pair, when a directory is held. */
-    context: DeviceContext | null;
-    /** Whether the actor and the subject are different accounts. */
-    isDelegated: boolean;
-    status: OxyRuntimeStatus;
-}
-/**
- * Who this app is running as, with the actor and the subject kept apart.
- *
- * Unlike `useOxy()`, this re-renders only when one of those five facts moves —
- * a locale change, a dialog opening or a session-list refresh does not reach it.
- */
-export declare function useActiveAccount(): ActiveAccount;
-/**
- * The device directory — every principal on this device and the contexts each
- * may act as (ADR 0002).
- *
- * `null` until something calls `runtime.refreshDirectory()`. A client that
- * never asks for one never pays for the round trip.
- */
-export declare function useDeviceDirectory(): DeviceDirectory | null;
-/** The whole runtime snapshot. Prefer a narrower hook where one exists. */
-export declare function useOxySnapshot(): ReturnType<OxyRuntime['getSnapshot']>;
-//# sourceMappingURL=runtimeContext.d.ts.map

package/lib/typescript/commonjs/ui/runtime/runtimeContext.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtimeContext.d.ts","sourceRoot":"","sources":["../../../../../src/ui/runtime/runtimeContext.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAgBhD,eAAO,MAAM,wBAAwB,6CAAmC,CAAC;AAKzE,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,IAAI,yBAAyB;;CAMvC;AAED,iFAAiF;AACjF,wBAAgB,aAAa,IAAI,UAAU,CAM1C;AAED,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,uEAAuE;IACvE,OAAO,EAAE,IAAI,GAAG,IAAI,CAAC;IACrB,iFAAiF;IACjF,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,gEAAgE;IAChE,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,gBAAgB,CAAC;CAC1B;AA2BD;;;;;GAKG;AACH,wBAAgB,gBAAgB,IAAI,aAAa,CAEhD;AAKD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,IAAI,eAAe,GAAG,IAAI,CAE3D;AAED,2EAA2E;AAC3E,wBAAgB,cAAc,IAAI,UAAU,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAEtE"}

package/lib/typescript/commonjs/ui/runtime/types.d.ts

@@ -1,89 +0,0 @@
-import type { DeviceDirectory, DeviceSessionState } from '@oxyhq/contracts';
-import type { ClientSession, DeviceContext, User } from '@oxyhq/core';
-/**
- * The runtime's coarse verdict about this device's session.
- *
- * `'booting'` is NOT "signed out but we are still looking": it is the honest
- * "undetermined" that every readiness gate in the SDK exists to express, and it
- * ends exactly once at the first cold-boot resolution. `'error'` is reserved for
- * a resolved boot that produced no account AND recorded a failure — a failed
- * sign-in against a signed-out device is `'signed_out'` with an `error`, because
- * the device really is signed out.
- */
-export type OxyRuntimeStatus = 'booting' | 'authenticated' | 'signed_out' | 'error';
-/**
- * Whether a bearer usable for private calls is planted right now.
- *
- * `'refreshing'` covers both halves of the gap the SDK already tracked with two
- * separate booleans: a bearer that is present but whose readiness gate is shut
- * (a commit in flight), and an authenticated account whose bearer has been
- * invalidated and is being re-minted. Both mean the same thing to a caller —
- * wait, do not treat this as signed out.
- */
-export type OxyTokenStatus = 'missing' | 'refreshing' | 'ready' | 'error';
-export interface OxyRuntimeError {
-    message: string;
-    code: string;
-}
-/**
- * The ONE observable state of an `OxyRuntime` (ADR 0004).
- *
- * Frozen and referentially stable: a new object is published only when
- * something actually changed, so `useSyncExternalStore` can compare by identity
- * and a selector over an unchanged field never re-renders.
- *
- * Every field is either a fact the runtime owns or a pure derivation of one.
- * There is no second writable store: `sessions`, `activeSessionId`, `status`
- * and `tokenStatus` are computed by the one snapshot builder, so two of them can
- * never disagree about the same device.
- */
-export interface OxyRuntimeSnapshot {
-    status: OxyRuntimeStatus;
-    /**
-     * The device DIRECTORY (ADR 0002) — principals and the contexts each may act
-     * as. `null` until something asks for one; the flat lane never pays for it.
-     */
-    device: DeviceDirectory | null;
-    /**
-     * The flat, server-authoritative device state. Kept beside {@link device}
-     * because it is what the compatibility projections below are derived from,
-     * and because the two describe the same device at the same `revision`.
-     */
-    deviceState: DeviceSessionState | null;
-    /** The active `principal acting as account` pair, when a directory is held. */
-    activeContext: DeviceContext | null;
-    /**
-     * The human whose authentication backs the session — the audit actor.
-     *
-     * Equal to {@link account} on a device with no directory and on any
-     * non-delegated context: the flat lane cannot tell the two apart, and saying
-     * so by making them the same object is more honest than leaving this `null`.
-     */
-    principal: User | null;
-    /** The account the session acts AS — what a profile header renders. */
-    account: User | null;
-    tokenStatus: OxyTokenStatus;
-    /**
-     * Whether the first cold boot has concluded. Monotonic: once `true` it never
-     * reverts, so a later transient signed-out state is never mistaken for
-     * "still booting".
-     */
-    authResolved: boolean;
-    /** A context activation / account switch is in flight. */
-    switching: boolean;
-    error: OxyRuntimeError | null;
-    sessions: ClientSession[];
-    activeSessionId: string | null;
-    /** A sign-in / sign-out operation is in flight. */
-    isLoading: boolean;
-    /** The local display/bookkeeping storage has resolved. */
-    storageReady: boolean;
-    /** A bearer is planted on the client instance right now. */
-    hasAccessToken: boolean;
-    /**
-     * The commit gate. Shut while a session commit is mid-flight so a consumer
-     * cannot fire a private call between the token landing and the projection.
-     */
-    tokenReady: boolean;
-}
-//# sourceMappingURL=types.d.ts.map

package/lib/typescript/commonjs/ui/runtime/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/ui/runtime/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAEtE;;;;;;;;;GASG;AACH,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,eAAe,GAAG,YAAY,GAAG,OAAO,CAAC;AAEpF;;;;;;;;GAQG;AACH,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,YAAY,GAAG,OAAO,GAAG,OAAO,CAAC;AAE1E,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,gBAAgB,CAAC;IAEzB;;;OAGG;IACH,MAAM,EAAE,eAAe,GAAG,IAAI,CAAC;IAE/B;;;;OAIG;IACH,WAAW,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAEvC,+EAA+E;IAC/E,aAAa,EAAE,aAAa,GAAG,IAAI,CAAC;IAEpC;;;;;;OAMG;IACH,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IAEvB,uEAAuE;IACvE,OAAO,EAAE,IAAI,GAAG,IAAI,CAAC;IAErB,WAAW,EAAE,cAAc,CAAC;IAE5B;;;;OAIG;IACH,YAAY,EAAE,OAAO,CAAC;IAEtB,0DAA0D;IAC1D,SAAS,EAAE,OAAO,CAAC;IAEnB,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;IAM9B,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAE/B,mDAAmD;IACnD,SAAS,EAAE,OAAO,CAAC;IAEnB,0DAA0D;IAC1D,YAAY,EAAE,OAAO,CAAC;IAEtB,4DAA4D;IAC5D,cAAc,EAAE,OAAO,CAAC;IAExB;;;OAGG;IACH,UAAU,EAAE,OAAO,CAAC;CACrB"}

package/lib/typescript/commonjs/ui/runtime/useRuntimeSnapshot.d.ts

@@ -1,23 +0,0 @@
-import type { OxyRuntime } from './createOxyRuntime';
-import type { OxyRuntimeSnapshot } from './types';
-/**
- * Subscribe to the whole runtime snapshot.
- *
- * The runtime publishes a frozen object only when a fact actually changed, so
- * identity comparison is exact: a locale change, a dialog opening or an
- * unrelated query settling does not wake anything subscribed here.
- */
-export declare function useRuntimeSnapshot(runtime: OxyRuntime): OxyRuntimeSnapshot;
-/**
- * Subscribe to one derived value of the runtime snapshot.
- *
- * The selection is cached against the snapshot it was computed from, which is
- * what makes a selector returning a fresh object (`{user, isAuthenticated}`)
- * safe here: `useSyncExternalStore` calls `getSnapshot` several times per
- * commit and would otherwise see a new object every call and loop.
- *
- * `selector` must be stable — hoist it to module scope or wrap it in
- * `useCallback`. An inline arrow re-subscribes on every render.
- */
-export declare function useRuntimeSelector<T>(runtime: OxyRuntime, selector: (snapshot: OxyRuntimeSnapshot) => T, isEqual?: (a: T, b: T) => boolean): T;
-//# sourceMappingURL=useRuntimeSnapshot.d.ts.map

package/lib/typescript/commonjs/ui/runtime/useRuntimeSnapshot.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useRuntimeSnapshot.d.ts","sourceRoot":"","sources":["../../../../../src/ui/runtime/useRuntimeSnapshot.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAElD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,UAAU,GAAG,kBAAkB,CAE1E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAClC,OAAO,EAAE,UAAU,EACnB,QAAQ,EAAE,CAAC,QAAQ,EAAE,kBAAkB,KAAK,CAAC,EAC7C,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,OAAO,GAChC,CAAC,CAqBH"}

package/lib/typescript/commonjs/ui/screens/AccountMembersScreen.d.ts

@@ -1,10 +0,0 @@
-import type React from 'react';
-import type { BaseScreenProps } from '../types/navigation';
-/**
- * Manage the members of an account (invite by username/email, change roles,
- * remove, transfer ownership). Gated on the caller's `callerMembership`
- * permissions. Receives the target `accountId` via navigation props.
- */
-declare const AccountMembersScreen: React.FC<BaseScreenProps>;
-export default AccountMembersScreen;
-//# sourceMappingURL=AccountMembersScreen.d.ts.map

package/lib/typescript/commonjs/ui/screens/AccountMembersScreen.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"AccountMembersScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/AccountMembersScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAkB/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAkB3D;;;;GAIG;AACH,QAAA,MAAM,oBAAoB,EAAE,KAAK,CAAC,EAAE,CAAC,eAAe,CAibnD,CAAC;AAEF,eAAe,oBAAoB,CAAC"}

package/lib/typescript/commonjs/ui/screens/AccountSettingsScreen.d.ts

@@ -1,12 +0,0 @@
-import type React from 'react';
-import type { BaseScreenProps } from '../types/navigation';
-/**
- * Per-account settings: edit the account's profile, jump to member management,
- * and archive the account (danger zone). Receives the target `accountId` via
- * navigation props. Self-surface for the caller's own personal account lives in
- * {@link ManageAccountScreen}; this screen manages a non-personal account in the
- * graph.
- */
-declare const AccountSettingsScreen: React.FC<BaseScreenProps>;
-export default AccountSettingsScreen;
-//# sourceMappingURL=AccountSettingsScreen.d.ts.map

package/lib/typescript/commonjs/ui/screens/AccountSettingsScreen.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"AccountSettingsScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/AccountSettingsScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAe/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAgB3D;;;;;;GAMG;AACH,QAAA,MAAM,qBAAqB,EAAE,KAAK,CAAC,EAAE,CAAC,eAAe,CA6OpD,CAAC;AAEF,eAAe,qBAAqB,CAAC"}

package/lib/typescript/commonjs/ui/screens/AccountVerificationScreen.d.ts

@@ -1,5 +0,0 @@
-import React from 'react';
-import type { BaseScreenProps } from '../types/navigation';
-declare const _default: React.NamedExoticComponent<BaseScreenProps>;
-export default _default;
-//# sourceMappingURL=AccountVerificationScreen.d.ts.map

package/lib/typescript/commonjs/ui/screens/AccountVerificationScreen.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"AccountVerificationScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/AccountVerificationScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAgC,MAAM,OAAO,CAAC;AAKrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;;AAoL3D,wBAAqD"}

package/lib/typescript/commonjs/ui/screens/AppInfoScreen.d.ts

@@ -1,5 +0,0 @@
-import type React from 'react';
-import type { BaseScreenProps } from '../types/navigation';
-declare const AppInfoScreen: React.FC<BaseScreenProps>;
-export default AppInfoScreen;
-//# sourceMappingURL=AppInfoScreen.d.ts.map

package/lib/typescript/commonjs/ui/screens/AppInfoScreen.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"AppInfoScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/AppInfoScreen.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAS/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAqB3D,QAAA,MAAM,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC,eAAe,CAiU5C,CAAC;AAEF,eAAe,aAAa,CAAC"}

package/lib/typescript/commonjs/ui/screens/AvatarCropScreen.d.ts

@@ -1,58 +0,0 @@
-/**
- * AvatarCropScreen
- *
- * Flagship-grade circular crop editor presented after the user picks an image
- * but before the avatar is uploaded. Inspired by iOS Photos, Google Photos and
- * Instagram crop tools.
- *
- * Reached ONLY by navigating within a `ChangeAvatar` surface, so the panel
- * morphs from the source list into the editor. The surface owns the chrome: this
- * screen declares its title and its "Use photo" action through `useSurfaceHeader`
- * and renders no bar of its own — the nav bar's back arrow is Cancel, and it
- * returns to the source list.
- *
- * Architecture:
- *  - A dark crop stage, independent of theme, so photos always read well, inset
- *    inside the surface's own themed panel.
- *  - Circular viewport with white ring and a 3x3 rule-of-thirds grid that
- *    appears during gestures and fades after 800ms.
- *  - Floating zoom chip during pinch.
- *  - Pan + pinch via Gesture Handler, transform driven by Reanimated.
- *  - Reduced-motion aware entrance animation.
- *  - Haptics on milestones via dynamically imported expo-haptics (optional).
- *
- * `expo-image-manipulator` and `expo-haptics` are optional peer dependencies —
- * loaded with `await import(...)`. A missing manipulator surfaces a clear
- * error; missing haptics simply degrades silently.
- */
-import type React from 'react';
-import type { BaseScreenProps } from '../types/navigation';
-/** Final crop result handed back to the caller. */
-export interface AvatarCropResult {
-    /** File URI to the cropped 512x512 JPEG on disk. */
-    uri: string;
-    /** Output width (always 512). */
-    width: number;
-    /** Output height (always 512). */
-    height: number;
-    /** MIME type (always `image/jpeg`). */
-    mime: 'image/jpeg';
-}
-export interface AvatarCropScreenProps extends BaseScreenProps {
-    /** URI of the source image to crop (device / camera sources pass this). */
-    imageUri?: string;
-    /**
-     * ID of an existing Oxy file to crop (the "My Oxy files" source passes this
-     * instead of a URL). Its download URL is usually private, so it is resolved
-     * HERE — showing this screen's own loading state on the dark canvas — rather
-     * than in the source list, which would otherwise linger for the round-trip.
-     */
-    imageFileId?: string;
-    /** Natural width of the source image (optional — measured if absent). */
-    sourceWidth?: number;
-    /** Natural height of the source image (optional — measured if absent). */
-    sourceHeight?: number;
-}
-declare const AvatarCropScreen: React.FC<AvatarCropScreenProps>;
-export default AvatarCropScreen;
-//# sourceMappingURL=AvatarCropScreen.d.ts.map

package/lib/typescript/commonjs/ui/screens/AvatarCropScreen.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"AvatarCropScreen.d.ts","sourceRoot":"","sources":["../../../../../src/ui/screens/AvatarCropScreen.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AA8B/B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAK3D,mDAAmD;AACnD,MAAM,WAAW,gBAAgB;IAC7B,oDAAoD;IACpD,GAAG,EAAE,MAAM,CAAC;IACZ,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,kCAAkC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,IAAI,EAAE,YAAY,CAAC;CACtB;AAED,MAAM,WAAW,qBAAsB,SAAQ,eAAe;IAC1D,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yEAAyE;IACzE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAC;CACzB;AAuPD,QAAA,MAAM,gBAAgB,EAAE,KAAK,CAAC,EAAE,CAAC,qBAAqB,CA8zBrD,CAAC;AAEF,eAAe,gBAAgB,CAAC"}