@parmana/shared 0.0.0-stage → 2.0.0

package/dist/repositories/challenge-record-repository.js

@@ -0,0 +1,76 @@
+import { ConflictError } from "../errors/index.js";
+/**
+ * Forward-only lifecycle order a `status` append operation must
+ * respect. Index position, not the string values, is what "forward"
+ * means here.
+ */
+const CHALLENGE_RECORD_STATUS_ORDER = [
+    "open",
+    "investigating",
+    "resolved",
+];
+/**
+ * Pure, backend-independent enforcement of ChallengeRecord's
+ * append-only rules (RFC-0022 § Proposal 1): investigationSteps only
+ * grows; status only moves strictly forward (open -> investigating ->
+ * resolved), never backward or in place; finding/outcome/disclosure
+ * are each set at most once. Every ChallengeRecordRepository
+ * implementation should call this rather than re-implementing the
+ * same checks, so the enforcement is identical across backends (the
+ * same reasoning `isUniqueViolation` gave for a shared mapping across
+ * MemoryBusinessTransactionRepository / PostgresBusinessTransactionRepository).
+ *
+ * Throws ConflictError, never silently drops or overwrites, on any
+ * violation.
+ */
+export function applyChallengeRecordAppend(record, operation, appliedAt) {
+    switch (operation.kind) {
+        case "investigation-step":
+            return {
+                ...record,
+                investigationSteps: [...record.investigationSteps, operation.step],
+                updatedAt: appliedAt,
+            };
+        case "status": {
+            const currentIndex = CHALLENGE_RECORD_STATUS_ORDER.indexOf(record.status);
+            const nextIndex = CHALLENGE_RECORD_STATUS_ORDER.indexOf(operation.status);
+            if (nextIndex <= currentIndex) {
+                throw new ConflictError(`Challenge Record '${record.challengeRecordId}' status cannot move from ` +
+                    `'${record.status}' to '${operation.status}' -- status only ever moves forward ` +
+                    "(open -> investigating -> resolved), never backward or in place. A challenge " +
+                    "believed resolved that needs reopening should become a new ChallengeRecord " +
+                    "linked via 'supersedes', not a status change on this one.");
+            }
+            return { ...record, status: operation.status, updatedAt: appliedAt };
+        }
+        case "finding": {
+            if (record.finding !== undefined) {
+                throw new ConflictError(`Challenge Record '${record.challengeRecordId}' already has a finding recorded ` +
+                    `('${record.finding.outcome}') -- finding is immutable once set. A correction ` +
+                    "should become a new ChallengeRecord linked via 'supersedes', not an edit here.");
+            }
+            return { ...record, finding: operation.finding, updatedAt: appliedAt };
+        }
+        case "outcome": {
+            if (record.outcome !== undefined) {
+                throw new ConflictError(`Challenge Record '${record.challengeRecordId}' already has an outcome recorded ` +
+                    "-- outcome is immutable once set. A correction should become a new " +
+                    "ChallengeRecord linked via 'supersedes', not an edit here.");
+            }
+            return { ...record, outcome: operation.outcome, updatedAt: appliedAt };
+        }
+        case "disclosure": {
+            if (record.disclosure !== undefined) {
+                throw new ConflictError(`Challenge Record '${record.challengeRecordId}' already has a disclosure recorded ` +
+                    "-- disclosure is immutable once set. A correction should become a new " +
+                    "ChallengeRecord linked via 'supersedes', not an edit here.");
+            }
+            return {
+                ...record,
+                disclosure: operation.disclosure,
+                updatedAt: appliedAt,
+            };
+        }
+    }
+}
+//# sourceMappingURL=challenge-record-repository.js.map

package/dist/repositories/challenge-record-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"challenge-record-repository.js","sourceRoot":"","sources":["../../src/repositories/challenge-record-repository.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAwDnD;;;;GAIG;AACH,MAAM,6BAA6B,GAAqC;IACtE,MAAM;IACN,eAAe;IACf,UAAU;CACX,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAAuB,EACvB,SAAyC,EACzC,SAAe;IAEf,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACvB,KAAK,oBAAoB;YACvB,OAAO;gBACL,GAAG,MAAM;gBACT,kBAAkB,EAAE,CAAC,GAAG,MAAM,CAAC,kBAAkB,EAAE,SAAS,CAAC,IAAI,CAAC;gBAClE,SAAS,EAAE,SAAS;aACrB,CAAC;QAEJ,KAAK,QAAQ,EAAE,CAAC;YACd,MAAM,YAAY,GAAG,6BAA6B,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC1E,MAAM,SAAS,GAAG,6BAA6B,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAE1E,IAAI,SAAS,IAAI,YAAY,EAAE,CAAC;gBAC9B,MAAM,IAAI,aAAa,CACrB,qBAAqB,MAAM,CAAC,iBAAiB,4BAA4B;oBACvE,IAAI,MAAM,CAAC,MAAM,SAAS,SAAS,CAAC,MAAM,sCAAsC;oBAChF,+EAA+E;oBAC/E,6EAA6E;oBAC7E,2DAA2D,CAC9D,CAAC;YACJ,CAAC;YAED,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;QACvE,CAAC;QAED,KAAK,SAAS,EAAE,CAAC;YACf,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,IAAI,aAAa,CACrB,qBAAqB,MAAM,CAAC,iBAAiB,mCAAmC;oBAC9E,KAAK,MAAM,CAAC,OAAO,CAAC,OAAO,oDAAoD;oBAC/E,gFAAgF,CACnF,CAAC;YACJ,CAAC;YAED,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;QACzE,CAAC;QAED,KAAK,SAAS,EAAE,CAAC;YACf,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,IAAI,aAAa,CACrB,qBAAqB,MAAM,CAAC,iBAAiB,oCAAoC;oBAC/E,qEAAqE;oBACrE,4DAA4D,CAC/D,CAAC;YACJ,CAAC;YAED,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;QACzE,CAAC;QAED,KAAK,YAAY,EAAE,CAAC;YAClB,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBACpC,MAAM,IAAI,aAAa,CACrB,qBAAqB,MAAM,CAAC,iBAAiB,sCAAsC;oBACjF,wEAAwE;oBACxE,4DAA4D,CAC/D,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,GAAG,MAAM;gBACT,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,SAAS,EAAE,SAAS;aACrB,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/repositories/execution-intent-repository.d.ts

@@ -0,0 +1,38 @@
+import type { ExecutionIntent, ExecutionIntentFinalizationMode, ExecutionIntentResolution, StoredExecutionIntent } from "../domain/index.js";
+export interface ExecutionIntentResolutionInput {
+    readonly resolution: ExecutionIntentResolution;
+    readonly note: string;
+    readonly resolvedBy?: string;
+    readonly resolvedAt: Date;
+}
+/**
+ * Persistence for Execution Intents (ADR-0012).
+ *
+ * `create` is the fail closed step: the runtime refuses to release an action
+ * if it cannot complete. The `mark*` methods only move operational status and
+ * never touch the signed intent. `markFinalized` must never move a
+ * FINALIZED intent backwards, and every `mark*` is safe to repeat.
+ */
+export interface ExecutionIntentRepository {
+    create(intent: ExecutionIntent): Promise<ExecutionIntent>;
+    findByTransactionId(businessTransactionId: string): Promise<StoredExecutionIntent | null>;
+    /** PREPARED to RELEASED, saving the context needed to rebuild the record. */
+    markReleased(businessTransactionId: string, releasedContext: unknown, releasedAt: Date): Promise<void>;
+    /** Any state except FINALIZED to FINALIZED. */
+    markFinalized(businessTransactionId: string, trustRecordId: string, mode: ExecutionIntentFinalizationMode, finalizedAt: Date): Promise<void>;
+    /** PREPARED to ERRORED. */
+    markErrored(businessTransactionId: string, reason: string): Promise<void>;
+    /**
+     * PREPARED or ERRORED to RESOLVED. Returns true when this call moved the
+     * intent, and false when it was in any other state, so a caller can tell a
+     * lost race from a success. It never moves a RELEASED or FINALIZED intent.
+     */
+    markResolved(businessTransactionId: string, input: ExecutionIntentResolutionInput): Promise<boolean>;
+    /**
+     * Intents that are neither FINALIZED nor RESOLVED, oldest first. Used by
+     * operators to find released actions that have no signed Trust Record, and
+     * actions whose outcome nobody has reconciled yet.
+     */
+    listUnfinalized(limit: number): Promise<readonly StoredExecutionIntent[]>;
+}
+//# sourceMappingURL=execution-intent-repository.d.ts.map

package/dist/repositories/execution-intent-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-intent-repository.d.ts","sourceRoot":"","sources":["../../src/repositories/execution-intent-repository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,+BAA+B,EAC/B,yBAAyB,EACzB,qBAAqB,EACtB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAE/C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,yBAAyB;IACxC,MAAM,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAE1D,mBAAmB,CACjB,qBAAqB,EAAE,MAAM,GAC5B,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;IAEzC,6EAA6E;IAC7E,YAAY,CACV,qBAAqB,EAAE,MAAM,EAC7B,eAAe,EAAE,OAAO,EACxB,UAAU,EAAE,IAAI,GACf,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB,+CAA+C;IAC/C,aAAa,CACX,qBAAqB,EAAE,MAAM,EAC7B,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,+BAA+B,EACrC,WAAW,EAAE,IAAI,GAChB,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB,2BAA2B;IAC3B,WAAW,CAAC,qBAAqB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE1E;;;;OAIG;IACH,YAAY,CACV,qBAAqB,EAAE,MAAM,EAC7B,KAAK,EAAE,8BAA8B,GACpC,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpB;;;;OAIG;IACH,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC,CAAC;CAC3E"}

package/dist/repositories/execution-intent-repository.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=execution-intent-repository.js.map

package/dist/repositories/execution-intent-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-intent-repository.js","sourceRoot":"","sources":["../../src/repositories/execution-intent-repository.ts"],"names":[],"mappings":""}

package/dist/repositories/execution-trust-record-repository.d.ts

@@ -0,0 +1,62 @@
+import { Execution, ExecutionTrustRecord, Override, Receipt, Verification } from "../domain/index.js";
+/**
+ * Repository for immutable
+ * Execution Trust Records.
+ */
+export interface ExecutionTrustRecordRepository {
+    create(record: ExecutionTrustRecord): Promise<ExecutionTrustRecord>;
+    findByTransactionId(businessTransactionId: string): Promise<ExecutionTrustRecord | null>;
+    /**
+     * Appends a new immutable Execution.
+     */
+    appendExecution(businessTransactionId: string, execution: Execution): Promise<void>;
+    /**
+     * @deprecated
+     *
+     * Parmana uses an append-only execution model.
+     *
+     * Execution state transitions must be represented
+     * by appending a new immutable Execution using
+     * appendExecution().
+     *
+     * This method exists only for backward
+     * compatibility and should not be used in new
+     * implementations.
+     */
+    replaceExecution(execution: Execution): Promise<void>;
+    /**
+     * Appends an immutable Override.
+     */
+    appendOverride(businessTransactionId: string, override: Override): Promise<void>;
+    /**
+     * Appends an immutable Verification.
+     */
+    appendVerification(businessTransactionId: string, verification: Verification): Promise<void>;
+    /**
+     * Appends an immutable Receipt.
+     */
+    appendReceipt(businessTransactionId: string, receipt: Receipt): Promise<void>;
+    /**
+     * Sums a numeric field of ExecutionEvidence.parameters across every
+     * successfully executed Execution (status COMPLETED, evidence.success
+     * true) whose evidence.action equals the given action and whose
+     * evidence.executedAt falls within [since, until).
+     *
+     * Reads only already-persisted, already-signed Execution Trust
+     * Record history -- no caller-supplied value influences the result.
+     * Added (TD-23 closure, Phase 3B) as the authoritative,
+     * reconciliation-grade source for cumulative authorization checks
+     * that previously trusted a caller-declared signal; a real-time gate
+     * may separately be enforced by its own atomic counter for reasons
+     * that gate's own callers document, but this method remains the
+     * ground truth to reconcile against.
+     *
+     * Optional: every pre-existing implementation of this interface
+     * (including the several inline test fakes across packages/runtime's
+     * own unit tests) must keep compiling and behaving identically
+     * without adding it. Only MemoryExecutionTrustRecordRepository and
+     * PostgresExecutionTrustRecordRepository implement it.
+     */
+    sumSuccessfulExecutionAmounts?(action: string, parameterKey: string, since: Date, until: Date): Promise<number>;
+}
+//# sourceMappingURL=execution-trust-record-repository.d.ts.map

package/dist/repositories/execution-trust-record-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-trust-record-repository.d.ts","sourceRoot":"","sources":["../../src/repositories/execution-trust-record-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,oBAAoB,EACpB,QAAQ,EACR,OAAO,EACP,YAAY,EACb,MAAM,oBAAoB,CAAC;AAE5B;;;GAGG;AACH,MAAM,WAAW,8BAA8B;IAC7C,MAAM,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAEpE,mBAAmB,CACjB,qBAAqB,EAAE,MAAM,GAC5B,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;IAExC;;OAEG;IACH,eAAe,CACb,qBAAqB,EAAE,MAAM,EAC7B,SAAS,EAAE,SAAS,GACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;;;;;;;;;;OAYG;IACH,gBAAgB,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtD;;OAEG;IACH,cAAc,CACZ,qBAAqB,EAAE,MAAM,EAC7B,QAAQ,EAAE,QAAQ,GACjB,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;OAEG;IACH,kBAAkB,CAChB,qBAAqB,EAAE,MAAM,EAC7B,YAAY,EAAE,YAAY,GACzB,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;OAEG;IACH,aAAa,CAAC,qBAAqB,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE9E;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,6BAA6B,CAAC,CAC5B,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,IAAI,EACX,KAAK,EAAE,IAAI,GACV,OAAO,CAAC,MAAM,CAAC,CAAC;CACpB"}

package/dist/repositories/execution-trust-record-repository.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=execution-trust-record-repository.js.map

package/dist/repositories/execution-trust-record-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-trust-record-repository.js","sourceRoot":"","sources":["../../src/repositories/execution-trust-record-repository.ts"],"names":[],"mappings":""}

package/dist/repositories/external-connector-repository.d.ts

@@ -0,0 +1,37 @@
+import type { ExternalConnectorChange, ExternalConnectorRegistration } from "../domain/external-connector.js";
+/**
+ * External connectors registered through maker checker, and the
+ * changes that register or revoke them (ADR-0013).
+ */
+export interface ExternalConnectorRepository {
+    /**
+     * The active registration for a capability, or null.
+     */
+    findActive(capability: string): Promise<ExternalConnectorRegistration | null>;
+    /**
+     * Every registration, active and revoked.
+     */
+    listRegistrations(): Promise<readonly ExternalConnectorRegistration[]>;
+    /**
+     * Stores a new PENDING_APPROVAL change. Throws ConflictError when
+     * another change for the same capability is still pending.
+     */
+    createChange(change: ExternalConnectorChange): Promise<ExternalConnectorChange>;
+    findChange(changeId: string): Promise<ExternalConnectorChange | null>;
+    listChanges(status?: ExternalConnectorChange["status"]): Promise<readonly ExternalConnectorChange[]>;
+    /**
+     * Resolves a pending change to APPROVED and applies it, in one step:
+     * register adds an active registration, revoke marks the active one
+     * revoked. Throws ExternalConnectorChangeNotFoundError for an unknown
+     * id, and ConflictError when the change is no longer pending, the
+     * capability to register already has an active registration, or the
+     * capability to revoke has none. Nothing is written when it throws.
+     */
+    approveChange(changeId: string, approvedBy: string, at: Date): Promise<ExternalConnectorChange>;
+    /**
+     * Resolves a pending change to REJECTED. Throws as approveChange does
+     * for an unknown or already resolved change.
+     */
+    rejectChange(changeId: string, rejectedBy: string, rejectionReason: string, at: Date): Promise<ExternalConnectorChange>;
+}
+//# sourceMappingURL=external-connector-repository.d.ts.map

package/dist/repositories/external-connector-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-connector-repository.d.ts","sourceRoot":"","sources":["../../src/repositories/external-connector-repository.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,6BAA6B,EAC9B,MAAM,iCAAiC,CAAC;AAEzC;;;GAGG;AACH,MAAM,WAAW,2BAA2B;IAC1C;;OAEG;IACH,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,6BAA6B,GAAG,IAAI,CAAC,CAAC;IAE9E;;OAEG;IACH,iBAAiB,IAAI,OAAO,CAAC,SAAS,6BAA6B,EAAE,CAAC,CAAC;IAEvE;;;OAGG;IACH,YAAY,CACV,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAEpC,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;IAEtE,WAAW,CACT,MAAM,CAAC,EAAE,uBAAuB,CAAC,QAAQ,CAAC,GACzC,OAAO,CAAC,SAAS,uBAAuB,EAAE,CAAC,CAAC;IAE/C;;;;;;;OAOG;IACH,aAAa,CACX,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,IAAI,GACP,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAEpC;;;OAGG;IACH,YAAY,CACV,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,eAAe,EAAE,MAAM,EACvB,EAAE,EAAE,IAAI,GACP,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACrC"}

package/dist/repositories/external-connector-repository.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=external-connector-repository.js.map

package/dist/repositories/external-connector-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-connector-repository.js","sourceRoot":"","sources":["../../src/repositories/external-connector-repository.ts"],"names":[],"mappings":""}

package/dist/repositories/handbook-download-lead-repository.d.ts

@@ -0,0 +1,18 @@
+export interface HandbookDownloadLead {
+    readonly handbookDownloadLeadId: string;
+    readonly email: string;
+    readonly capturedAt: Date;
+}
+/**
+ * Repository for handbook download leads (docs/site/handbook/download.mdx).
+ *
+ * Deliberately write-mostly: an email address is captured before the
+ * PDF link unlocks, no verification email is sent, so this is a
+ * record of who asked, not a gate behind a confirmed inbox. See
+ * migration 20260916150000_add_handbook_download_leads.sql's own
+ * comment.
+ */
+export interface HandbookDownloadLeadRepository {
+    create(lead: HandbookDownloadLead): Promise<HandbookDownloadLead>;
+}
+//# sourceMappingURL=handbook-download-lead-repository.d.ts.map

package/dist/repositories/handbook-download-lead-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handbook-download-lead-repository.d.ts","sourceRoot":"","sources":["../../src/repositories/handbook-download-lead-repository.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;CAC3B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,8BAA8B;IAC7C,MAAM,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACnE"}

package/dist/repositories/handbook-download-lead-repository.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=handbook-download-lead-repository.js.map

package/dist/repositories/handbook-download-lead-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handbook-download-lead-repository.js","sourceRoot":"","sources":["../../src/repositories/handbook-download-lead-repository.ts"],"names":[],"mappings":""}

package/dist/repositories/inbound-decision-repository.d.ts

@@ -0,0 +1,72 @@
+/**
+ * An inbound refund decision Parmana issued (RFC-0025). Stored as issued: the signature is the
+ * one Parmana made over the canonical fields, so a stored record can be re-verified later.
+ */
+export interface InboundDecisionRecord {
+    readonly decisionId: string;
+    readonly outcome: "approved" | "rejected";
+    readonly reason?: string;
+    readonly partnerId: string;
+    readonly paymentId: string;
+    readonly limitInr: number;
+    readonly expiresAt: string;
+    readonly audience: string;
+    readonly signature: string;
+    readonly issuedAt: Date;
+}
+/**
+ * Repository for inbound refund decisions (RFC-0025). Append-only: a decision is written once
+ * and never changed.
+ */
+export interface InboundDecisionRepository {
+    /** Throws if a decision with the same decisionId already exists. */
+    append(record: InboundDecisionRecord): Promise<void>;
+    findById(decisionId: string): Promise<InboundDecisionRecord | null>;
+}
+/**
+ * A signed decision for an inbound request on any capability (RFC-0024). It is stored in the
+ * same table as refund decisions, in the columns added by the extension migration.
+ */
+export interface InboundCheckRecord {
+    readonly decisionId: string;
+    readonly outcome: "approved" | "rejected";
+    readonly reason?: string;
+    readonly partnerId: string;
+    readonly capability: string;
+    readonly target?: string;
+    readonly amount?: number;
+    /** The policy that decided the request, and its version. Absent when no policy was run. */
+    readonly policyName?: string;
+    readonly policyVersion?: string;
+    readonly expiresAt: string;
+    readonly audience: string;
+    readonly signature: string;
+    readonly issuedAt: Date;
+    /** Who approved the request, when a verified human approval decided it (G-143). */
+    readonly approvedBy?: string;
+    readonly approvedKeyId?: string;
+    readonly approvalId?: string;
+    readonly approvedAt?: string;
+}
+/** An approval nonce to consume with a decision (G-143, O1). */
+export interface ConsumedApprovalNonce {
+    readonly nonce: string;
+    readonly expiresAt: string;
+}
+/** A decision tried to use an approval that was already used. Nothing was recorded. */
+export declare class ApprovalAlreadyUsedError extends Error {
+    readonly nonce: string;
+    constructor(nonce: string);
+}
+/** Repository for inbound checks (RFC-0024). Append-only: a decision is written once. */
+export interface InboundCheckRepository {
+    /** Throws if a decision with the same decisionId already exists. */
+    append(record: InboundCheckRecord): Promise<void>;
+    /**
+     * Writes the decision and consumes the approvals it used, as one unit (G-143, O1). If any approval was
+     * already used, nothing is written and ApprovalAlreadyUsedError is thrown.
+     */
+    appendConsumingApprovals(record: InboundCheckRecord, approvals: readonly ConsumedApprovalNonce[]): Promise<void>;
+    findById(decisionId: string): Promise<InboundCheckRecord | null>;
+}
+//# sourceMappingURL=inbound-decision-repository.d.ts.map

package/dist/repositories/inbound-decision-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound-decision-repository.d.ts","sourceRoot":"","sources":["../../src/repositories/inbound-decision-repository.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,UAAU,GAAG,UAAU,CAAC;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,oEAAoE;IACpE,MAAM,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAErD,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAC;CACrE;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,UAAU,GAAG,UAAU,CAAC;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,2FAA2F;IAC3F,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IACxB,mFAAmF;IACnF,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,gEAAgE;AAChE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,uFAAuF;AACvF,qBAAa,wBAAyB,SAAQ,KAAK;aACrB,KAAK,EAAE,MAAM;IAAzC,YAA4B,KAAK,EAAE,MAAM,EAGxC;CACF;AAED,yFAAyF;AACzF,MAAM,WAAW,sBAAsB;IACrC,oEAAoE;IACpE,MAAM,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAElD;;;OAGG;IACH,wBAAwB,CACtB,MAAM,EAAE,kBAAkB,EAC1B,SAAS,EAAE,SAAS,qBAAqB,EAAE,GAC1C,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;CAClE"}

package/dist/repositories/inbound-decision-repository.js

@@ -0,0 +1,10 @@
+/** A decision tried to use an approval that was already used. Nothing was recorded. */
+export class ApprovalAlreadyUsedError extends Error {
+    nonce;
+    constructor(nonce) {
+        super("This approval has already been used.");
+        this.nonce = nonce;
+        this.name = "ApprovalAlreadyUsedError";
+    }
+}
+//# sourceMappingURL=inbound-decision-repository.js.map

package/dist/repositories/inbound-decision-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound-decision-repository.js","sourceRoot":"","sources":["../../src/repositories/inbound-decision-repository.ts"],"names":[],"mappings":"AA4DA,uFAAuF;AACvF,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACrB,KAAK;IAAjC,YAA4B,KAAa;QACvC,KAAK,CAAC,sCAAsC,CAAC,CAAC;qBADpB,KAAK;QAE/B,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF"}

package/dist/repositories/inbound-outcome-repository.d.ts

@@ -0,0 +1,23 @@
+/**
+ * What happened to an inbound refund after Parmana issued its decision (RFC-0025).
+ */
+export interface InboundOutcomeRecord {
+    readonly decisionId: string;
+    readonly partnerId: string;
+    readonly orderId: string;
+    readonly paymentId: string;
+    readonly amountInr: number;
+    readonly status: "refunded" | "refused" | "error";
+    readonly refundId?: string;
+    readonly reason?: string;
+    readonly recordedAt: Date;
+}
+/**
+ * Append-only: one outcome per decision.
+ */
+export interface InboundOutcomeRepository {
+    /** Returns false, and stores nothing, if an outcome for this decision already exists. */
+    append(record: InboundOutcomeRecord): Promise<boolean>;
+    findByDecisionId(decisionId: string): Promise<InboundOutcomeRecord | null>;
+}
+//# sourceMappingURL=inbound-outcome-repository.d.ts.map

package/dist/repositories/inbound-outcome-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound-outcome-repository.d.ts","sourceRoot":"","sources":["../../src/repositories/inbound-outcome-repository.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,OAAO,CAAC;IAClD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,yFAAyF;IACzF,MAAM,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEvD,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;CAC5E"}

package/dist/repositories/inbound-outcome-repository.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=inbound-outcome-repository.js.map

package/dist/repositories/inbound-outcome-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound-outcome-repository.js","sourceRoot":"","sources":["../../src/repositories/inbound-outcome-repository.ts"],"names":[],"mappings":""}

package/dist/repositories/index.d.ts

@@ -0,0 +1,17 @@
+export * from "./business-transaction-repository.js";
+export * from "./execution-trust-record-repository.js";
+export * from "./execution-intent-repository.js";
+export * from "./refusal-record-repository.js";
+export * from "./challenge-record-repository.js";
+export * from "./policy-repository.js";
+export * from "./pending-policy-change-repository.js";
+export * from "./approval-issuer-repository.js";
+export * from "./caller-key-revocation-repository.js";
+export * from "./external-connector-repository.js";
+export * from "./business-signal-source-repository.js";
+export * from "./authority-grant-repository.js";
+export * from "./policy-change-approval-record-repository.js";
+export * from "./handbook-download-lead-repository.js";
+export * from "./inbound-decision-repository.js";
+export * from "./inbound-outcome-repository.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/repositories/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/repositories/index.ts"],"names":[],"mappings":"AAAA,cAAc,sCAAsC,CAAC;AACrD,cAAc,wCAAwC,CAAC;AACvD,cAAc,kCAAkC,CAAC;AACjD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kCAAkC,CAAC;AACjD,cAAc,wBAAwB,CAAC;AACvC,cAAc,uCAAuC,CAAC;AACtD,cAAc,iCAAiC,CAAC;AAChD,cAAc,uCAAuC,CAAC;AACtD,cAAc,oCAAoC,CAAC;AACnD,cAAc,wCAAwC,CAAC;AACvD,cAAc,iCAAiC,CAAC;AAChD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,wCAAwC,CAAC;AACvD,cAAc,kCAAkC,CAAC;AACjD,cAAc,iCAAiC,CAAC"}

package/dist/repositories/index.js

@@ -0,0 +1,17 @@
+export * from "./business-transaction-repository.js";
+export * from "./execution-trust-record-repository.js";
+export * from "./execution-intent-repository.js";
+export * from "./refusal-record-repository.js";
+export * from "./challenge-record-repository.js";
+export * from "./policy-repository.js";
+export * from "./pending-policy-change-repository.js";
+export * from "./approval-issuer-repository.js";
+export * from "./caller-key-revocation-repository.js";
+export * from "./external-connector-repository.js";
+export * from "./business-signal-source-repository.js";
+export * from "./authority-grant-repository.js";
+export * from "./policy-change-approval-record-repository.js";
+export * from "./handbook-download-lead-repository.js";
+export * from "./inbound-decision-repository.js";
+export * from "./inbound-outcome-repository.js";
+//# sourceMappingURL=index.js.map

package/dist/repositories/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/repositories/index.ts"],"names":[],"mappings":"AAAA,cAAc,sCAAsC,CAAC;AACrD,cAAc,wCAAwC,CAAC;AACvD,cAAc,kCAAkC,CAAC;AACjD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,kCAAkC,CAAC;AACjD,cAAc,wBAAwB,CAAC;AACvC,cAAc,uCAAuC,CAAC;AACtD,cAAc,iCAAiC,CAAC;AAChD,cAAc,uCAAuC,CAAC;AACtD,cAAc,oCAAoC,CAAC;AACnD,cAAc,wCAAwC,CAAC;AACvD,cAAc,iCAAiC,CAAC;AAChD,cAAc,+CAA+C,CAAC;AAC9D,cAAc,wCAAwC,CAAC;AACvD,cAAc,kCAAkC,CAAC;AACjD,cAAc,iCAAiC,CAAC"}

package/dist/repositories/pending-policy-change-repository.d.ts

@@ -0,0 +1,72 @@
+import { PendingPolicyChange, PendingPolicyChangeStatus } from "../domain/index.js";
+/**
+ * One resolution of an existing PENDING_APPROVAL change. Exactly one
+ * of these per `resolve()` call -- mirrors
+ * ChallengeRecordAppendOperation's one-operation-at-a-time shape, for
+ * the same reason: every mutation should be an explicit, individually
+ * reviewable step.
+ */
+export type PendingPolicyChangeResolution = {
+    readonly outcome: "approved";
+    readonly resolvedBy: string;
+} | {
+    readonly outcome: "rejected";
+    readonly resolvedBy: string;
+    readonly rejectionReason: string;
+};
+/**
+ * Repository for Pending Policy Changes (Policy Governance,
+ * maker-checker).
+ */
+export interface PendingPolicyChangeRepository {
+    /**
+     * Creates a new PENDING_APPROVAL change. Throws ConflictError if a
+     * PENDING_APPROVAL change already exists for the same (policyName,
+     * policyVersion) -- enforced by `assertNoConflictingPendingChange`
+     * below, which every implementation should call to keep the check
+     * identical across backends (same pattern
+     * ChallengeRecordRepository already uses for its own append-only
+     * invariants).
+     */
+    create(change: PendingPolicyChange): Promise<PendingPolicyChange>;
+    findById(pendingPolicyChangeId: string): Promise<PendingPolicyChange | null>;
+    /**
+     * The at-most-one PENDING_APPROVAL change for a given
+     * (policyName, policyVersion), or null if none exists.
+     */
+    findPending(policyName: string, policyVersion: string): Promise<PendingPolicyChange | null>;
+    /**
+     * Lists changes, optionally filtered by status. Omitting `status`
+     * returns every change regardless of lifecycle state.
+     */
+    list(status?: PendingPolicyChangeStatus): Promise<readonly PendingPolicyChange[]>;
+    /**
+     * Resolves an existing PENDING_APPROVAL change to APPROVED or
+     * REJECTED. Throws PendingPolicyChangeNotFoundError if no change
+     * exists for the given id, or ConflictError if the change is not
+     * currently PENDING_APPROVAL (see `applyPendingPolicyChangeResolution`,
+     * which every implementation should route through).
+     *
+     * Does NOT enforce maker != checker -- that check requires the
+     * resolving caller's own verified identity, which only the API/auth
+     * layer has. This method resolves whatever `resolvedBy` it is
+     * given.
+     */
+    resolve(pendingPolicyChangeId: string, resolution: PendingPolicyChangeResolution): Promise<PendingPolicyChange>;
+}
+/**
+ * Pure, backend-independent enforcement of the "exactly one
+ * PENDING_APPROVAL per (policyName, policyVersion)" invariant.
+ * Implementations call this with whatever PENDING_APPROVAL change (if
+ * any) they already found for the target (policyName, policyVersion)
+ * before inserting the new one.
+ */
+export declare function assertNoConflictingPendingChange(policyName: string, policyVersion: string, existingPending: PendingPolicyChange | null): void;
+/**
+ * Pure, backend-independent enforcement of
+ * PendingPolicyChangeRepository.resolve's transition rule: only a
+ * PENDING_APPROVAL change may be resolved, and only into a terminal
+ * state, exactly once.
+ */
+export declare function applyPendingPolicyChangeResolution(existing: PendingPolicyChange, resolution: PendingPolicyChangeResolution, resolvedAt: Date): PendingPolicyChange;
+//# sourceMappingURL=pending-policy-change-repository.d.ts.map

package/dist/repositories/pending-policy-change-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-policy-change-repository.d.ts","sourceRoot":"","sources":["../../src/repositories/pending-policy-change-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EAC1B,MAAM,oBAAoB,CAAC;AAI5B;;;;;;GAMG;AACH,MAAM,MAAM,6BAA6B,GACrC;IAAE,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAC7D;IACE,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC,CAAC;AAEN;;;GAGG;AACH,MAAM,WAAW,6BAA6B;IAC5C;;;;;;;;OAQG;IACH,MAAM,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAElE,QAAQ,CAAC,qBAAqB,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IAE7E;;;OAGG;IACH,WAAW,CACT,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IAEvC;;;OAGG;IACH,IAAI,CACF,MAAM,CAAC,EAAE,yBAAyB,GACjC,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC,CAAC;IAE3C;;;;;;;;;;;OAWG;IACH,OAAO,CACL,qBAAqB,EAAE,MAAM,EAC7B,UAAU,EAAE,6BAA6B,GACxC,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACjC;AAED;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAC9C,UAAU,EAAE,MAAM,EAClB,aAAa,EAAE,MAAM,EACrB,eAAe,EAAE,mBAAmB,GAAG,IAAI,GAC1C,IAAI,CAWN;AAED;;;;;GAKG;AACH,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,mBAAmB,EAC7B,UAAU,EAAE,6BAA6B,EACzC,UAAU,EAAE,IAAI,GACf,mBAAmB,CAwBrB"}

package/dist/repositories/pending-policy-change-repository.js

@@ -0,0 +1,46 @@
+import { PendingPolicyChangeStatus, } from "../domain/index.js";
+import { ConflictError } from "../errors/conflict-error.js";
+/**
+ * Pure, backend-independent enforcement of the "exactly one
+ * PENDING_APPROVAL per (policyName, policyVersion)" invariant.
+ * Implementations call this with whatever PENDING_APPROVAL change (if
+ * any) they already found for the target (policyName, policyVersion)
+ * before inserting the new one.
+ */
+export function assertNoConflictingPendingChange(policyName, policyVersion, existingPending) {
+    if (existingPending === null) {
+        return;
+    }
+    throw new ConflictError(`A PENDING_APPROVAL change already exists for policy '${policyName}' version ` +
+        `'${policyVersion}' (pendingPolicyChangeId '${existingPending.pendingPolicyChangeId}'). ` +
+        "It must be approved or rejected before a new proposal against the same policy " +
+        "version can be created.");
+}
+/**
+ * Pure, backend-independent enforcement of
+ * PendingPolicyChangeRepository.resolve's transition rule: only a
+ * PENDING_APPROVAL change may be resolved, and only into a terminal
+ * state, exactly once.
+ */
+export function applyPendingPolicyChangeResolution(existing, resolution, resolvedAt) {
+    if (existing.status !== PendingPolicyChangeStatus.PENDING_APPROVAL) {
+        throw new ConflictError(`Pending Policy Change '${existing.pendingPolicyChangeId}' is already ` +
+            `'${existing.status}' -- only a PENDING_APPROVAL change can be approved or rejected.`);
+    }
+    if (resolution.outcome === "approved") {
+        return {
+            ...existing,
+            status: PendingPolicyChangeStatus.APPROVED,
+            resolvedBy: resolution.resolvedBy,
+            resolvedAt,
+        };
+    }
+    return {
+        ...existing,
+        status: PendingPolicyChangeStatus.REJECTED,
+        resolvedBy: resolution.resolvedBy,
+        resolvedAt,
+        rejectionReason: resolution.rejectionReason,
+    };
+}
+//# sourceMappingURL=pending-policy-change-repository.js.map

package/dist/repositories/pending-policy-change-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-policy-change-repository.js","sourceRoot":"","sources":["../../src/repositories/pending-policy-change-repository.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,yBAAyB,GAC1B,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAsE5D;;;;;;GAMG;AACH,MAAM,UAAU,gCAAgC,CAC9C,UAAkB,EAClB,aAAqB,EACrB,eAA2C;IAE3C,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;QAC7B,OAAO;IACT,CAAC;IAED,MAAM,IAAI,aAAa,CACrB,wDAAwD,UAAU,YAAY;QAC5E,IAAI,aAAa,6BAA6B,eAAe,CAAC,qBAAqB,MAAM;QACzF,gFAAgF;QAChF,yBAAyB,CAC5B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kCAAkC,CAChD,QAA6B,EAC7B,UAAyC,EACzC,UAAgB;IAEhB,IAAI,QAAQ,CAAC,MAAM,KAAK,yBAAyB,CAAC,gBAAgB,EAAE,CAAC;QACnE,MAAM,IAAI,aAAa,CACrB,0BAA0B,QAAQ,CAAC,qBAAqB,eAAe;YACrE,IAAI,QAAQ,CAAC,MAAM,kEAAkE,CACxF,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACtC,OAAO;YACL,GAAG,QAAQ;YACX,MAAM,EAAE,yBAAyB,CAAC,QAAQ;YAC1C,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,UAAU;SACX,CAAC;IACJ,CAAC;IAED,OAAO;QACL,GAAG,QAAQ;QACX,MAAM,EAAE,yBAAyB,CAAC,QAAQ;QAC1C,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,UAAU;QACV,eAAe,EAAE,UAAU,CAAC,eAAe;KAC5C,CAAC;AACJ,CAAC"}