@portaidentity/cli 1.7.3 → 1.9.0

package/dist/admin/client-state.d.ts

@@ -0,0 +1,159 @@
+/** Immutable selected-organization OIDC client values retained by the terminal application. */
+/** Supported OIDC client lifecycle values. */
+export type AdminClientStatus = 'active' | 'inactive';
+/** Allowlisted OIDC client projection safe for terminal presentation. */
+export interface AdminClient {
+    /** Stable internal client UUID used by Admin routes. */
+    readonly id: string;
+    /** Internal UUID of the owning organization. */
+    readonly organizationId: string;
+    /** Internal UUID of the global application definition. */
+    readonly applicationId: string;
+    /** Generated OIDC client identifier. */
+    readonly clientId: string;
+    /** Administrative display name. */
+    readonly clientName: string;
+    /** Whether the client holds secrets. */
+    readonly clientType: 'public' | 'confidential';
+    /** Deployment model used for protocol defaults. */
+    readonly applicationType: 'web' | 'native' | 'spa';
+    /** Registered authorization redirect URIs. */
+    readonly redirectUris: readonly string[];
+    /** Registered post-logout redirect URIs. */
+    readonly postLogoutRedirectUris: readonly string[];
+    /** Enabled OAuth grant types. */
+    readonly grantTypes: readonly ('authorization_code' | 'client_credentials' | 'refresh_token')[];
+    /** Enabled OIDC response types. */
+    readonly responseTypes: readonly 'code'[];
+    /** Space-delimited scope allowlist. */
+    readonly scope: string;
+    /** Token endpoint authentication method. */
+    readonly tokenEndpointAuthMethod: 'client_secret_basic' | 'client_secret_post' | 'none';
+    /** Exact browser origins permitted by the server. */
+    readonly allowedOrigins: readonly string[];
+    /** Whether authorization-code requests require PKCE. */
+    readonly requirePkce: boolean;
+    /** Whether the authorization server shows the OIDC consent page for this client. */
+    readonly requireConsent: boolean;
+    /** Per-client login-method override, or null to inherit. */
+    readonly loginMethods: readonly ('password' | 'magic_link')[] | null;
+    /** Effective login methods after organization inheritance. */
+    readonly effectiveLoginMethods: readonly ('password' | 'magic_link')[];
+    /** Current lifecycle state. */
+    readonly status: AdminClientStatus;
+    /** Creation timestamp. */
+    readonly createdAt: string;
+    /** Most recent update timestamp. */
+    readonly updatedAt: string;
+}
+/** Allowlisted client-secret metadata that never contains plaintext. */
+export interface AdminClientSecret {
+    /** Stable internal secret UUID. */
+    readonly id: string;
+    /** Internal UUID of the owning client. */
+    readonly clientId: string;
+    /** Optional administrative label. */
+    readonly label: string | null;
+    /** Stored lifecycle state. */
+    readonly status: 'active' | 'revoked';
+    /** Most recent successful-use timestamp. */
+    readonly lastUsedAt: string | null;
+    /** Optional expiry timestamp. */
+    readonly expiresAt: string | null;
+    /** Creation timestamp. */
+    readonly createdAt: string;
+}
+/** One-time secret returned only through a synchronous controller continuation. */
+export interface AdminGeneratedClientSecret {
+    /** Stable internal secret UUID. */
+    readonly id: string;
+    /** Internal UUID of the owning client. */
+    readonly clientId: string;
+    /** Optional administrative label. */
+    readonly label: string | null;
+    /** One-time plaintext that must never enter application state. */
+    readonly plaintext: string;
+    /** Optional expiry timestamp. */
+    readonly expiresAt: string | null;
+    /** Creation timestamp. */
+    readonly createdAt: string;
+}
+/** Transient secret presentation value enriched with safe client display identity. */
+export interface AdminClientSecretPresentation extends AdminGeneratedClientSecret {
+    /** Administrative client name returned by the same authoritative workflow. */
+    readonly clientName: string;
+    /** Generated OIDC client identifier shown to the operator. */
+    readonly oidcClientId: string;
+}
+/** Fixed client failure categories safe to display. */
+export type AdminClientFailureKind = 'validation' | 'unauthorized' | 'conflict' | 'unavailable' | 'invalid-response';
+/** Sanitized client read result. */
+export type AdminClientReadResult<T> = {
+    readonly kind: 'success';
+    readonly value: T;
+} | {
+    readonly kind: 'session-invalid';
+} | {
+    readonly kind: 'failure';
+    readonly failure: AdminClientFailureKind;
+};
+/** Sanitized client mutation result. */
+export type AdminClientMutationResult<T = void> = ({
+    readonly kind: 'success';
+} & (T extends void ? object : {
+    readonly value: T;
+})) | {
+    readonly kind: 'session-invalid';
+} | {
+    readonly kind: 'cancelled';
+} | {
+    readonly kind: 'outcome-unknown';
+} | {
+    readonly kind: 'failure';
+    readonly failure: AdminClientFailureKind;
+};
+/** Validated complete catalog for one selected organization. */
+export interface AdminClientListProjection {
+    /** Internal UUID of the selected organization. */
+    readonly organizationId: string;
+    /** Complete validated organization-owned client catalog. */
+    readonly clients: readonly AdminClient[];
+}
+/** Validated selected-client detail retained with its catalog. */
+export interface AdminClientDetailProjection extends AdminClientListProjection {
+    /** Selected organization-owned client. */
+    readonly client: AdminClient;
+    /** Resolved global application name when application read is available. */
+    readonly applicationName?: string;
+    /** Update precondition returned with the selected client. */
+    readonly etag?: string | null;
+    /** Metadata-only secrets already loaded for the selected client. */
+    readonly secrets: readonly AdminClientSecret[];
+}
+/** Safe client projection that may remain visible while an operation is pending or fails. */
+export type AdminClientProjection = ({
+    readonly kind: 'list';
+} & AdminClientListProjection) | ({
+    readonly kind: 'detail';
+} & AdminClientDetailProjection) | ({
+    readonly kind: 'secrets';
+    readonly legacyOnly?: boolean;
+} & AdminClientDetailProjection);
+/** Complete selected-organization client controller state. */
+export type AdminClientViewState = {
+    readonly kind: 'closed';
+} | {
+    readonly kind: 'loading';
+    readonly organizationId: string;
+    readonly previous?: AdminClientProjection | readonly AdminClient[];
+} | AdminClientProjection | {
+    readonly kind: 'indeterminate';
+    readonly organizationId: string;
+    readonly previous?: AdminClientProjection | readonly AdminClient[];
+} | {
+    readonly kind: 'failure';
+    readonly organizationId: string;
+    readonly failure: AdminClientFailureKind;
+    readonly previous?: AdminClientProjection | readonly AdminClient[];
+};
+//# sourceMappingURL=client-state.d.ts.map

package/dist/admin/client-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-state.d.ts","sourceRoot":"","sources":["../../src/admin/client-state.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAE/F,8CAA8C;AAC9C,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEtD,yEAAyE;AACzE,MAAM,WAAW,WAAW;IAC1B,wDAAwD;IACxD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,gDAAgD;IAChD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,0DAA0D;IAC1D,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,wCAAwC;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,mCAAmC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,wCAAwC;IACxC,QAAQ,CAAC,UAAU,EAAE,QAAQ,GAAG,cAAc,CAAC;IAC/C,mDAAmD;IACnD,QAAQ,CAAC,eAAe,EAAE,KAAK,GAAG,QAAQ,GAAG,KAAK,CAAC;IACnD,8CAA8C;IAC9C,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,4CAA4C;IAC5C,QAAQ,CAAC,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;IACnD,iCAAiC;IACjC,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC,oBAAoB,GAAG,oBAAoB,GAAG,eAAe,CAAC,EAAE,CAAC;IAChG,mCAAmC;IACnC,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,uCAAuC;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,4CAA4C;IAC5C,QAAQ,CAAC,uBAAuB,EAAE,qBAAqB,GAAG,oBAAoB,GAAG,MAAM,CAAC;IACxF,qDAAqD;IACrD,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,wDAAwD;IACxD,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,oFAAoF;IACpF,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,4DAA4D;IAC5D,QAAQ,CAAC,YAAY,EAAE,SAAS,CAAC,UAAU,GAAG,YAAY,CAAC,EAAE,GAAG,IAAI,CAAC;IACrE,8DAA8D;IAC9D,QAAQ,CAAC,qBAAqB,EAAE,SAAS,CAAC,UAAU,GAAG,YAAY,CAAC,EAAE,CAAC;IACvE,+BAA+B;IAC/B,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,0BAA0B;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,oCAAoC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,wEAAwE;AACxE,MAAM,WAAW,iBAAiB;IAChC,mCAAmC;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,0CAA0C;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,qCAAqC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,8BAA8B;IAC9B,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAC;IACtC,4CAA4C;IAC5C,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,iCAAiC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,0BAA0B;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,mFAAmF;AACnF,MAAM,WAAW,0BAA0B;IACzC,mCAAmC;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,0CAA0C;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,qCAAqC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,kEAAkE;IAClE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,iCAAiC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,0BAA0B;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,sFAAsF;AACtF,MAAM,WAAW,6BAA8B,SAAQ,0BAA0B;IAC/E,8EAA8E;IAC9E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,8DAA8D;IAC9D,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,uDAAuD;AACvD,MAAM,MAAM,sBAAsB,GAChC,YAAY,GAAG,cAAc,GAAG,UAAU,GAAG,aAAa,GAAG,kBAAkB,CAAC;AAElF,oCAAoC;AACpC,MAAM,MAAM,qBAAqB,CAAC,CAAC,IAC/B;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAC/C;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,GACpC;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAA;CAAE,CAAC;AAE3E,wCAAwC;AACxC,MAAM,MAAM,yBAAyB,CAAC,CAAC,GAAG,IAAI,IAC1C,CAAC;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAAG,CAAC,CAAC,SAAS,IAAI,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,CAAC,CAAC,GAClF;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,GACpC;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,GACpC;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAA;CAAE,CAAC;AAE3E,gEAAgE;AAChE,MAAM,WAAW,yBAAyB;IACxC,kDAAkD;IAClD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,CAAC;CAC1C;AAED,kEAAkE;AAClE,MAAM,WAAW,2BAA4B,SAAQ,yBAAyB;IAC5E,0CAA0C;IAC1C,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,2EAA2E;IAC3E,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,6DAA6D;IAC7D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,oEAAoE;IACpE,QAAQ,CAAC,OAAO,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAChD;AAED,6FAA6F;AAC7F,MAAM,MAAM,qBAAqB,GAC7B,CAAC;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,yBAAyB,CAAC,GACvD,CAAC;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAAG,2BAA2B,CAAC,GAC3D,CAAC;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,2BAA2B,CAAC,CAAC;AAEhG,8DAA8D;AAC9D,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC3B;IACE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,qBAAqB,GAAG,SAAS,WAAW,EAAE,CAAC;CACpE,GACD,qBAAqB,GACrB;IACE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,qBAAqB,GAAG,SAAS,WAAW,EAAE,CAAC;CACpE,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,qBAAqB,GAAG,SAAS,WAAW,EAAE,CAAC;CACpE,CAAC"}

package/dist/admin/client-state.js

@@ -0,0 +1,3 @@
+/** Immutable selected-organization OIDC client values retained by the terminal application. */
+export {};
+//# sourceMappingURL=client-state.js.map

package/dist/admin/client-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-state.js","sourceRoot":"","sources":["../../src/admin/client-state.ts"],"names":[],"mappings":"AAAA,+FAA+F"}

package/dist/admin/client-workspace.d.ts

@@ -0,0 +1,88 @@
+/** Direct JSVision workspace for clients owned by the selected organization. */
+import type { UpdateClientInput } from '@portaidentity/sdk';
+import { View } from '@jsvision/ui';
+import type { AdminApplication } from './application-state.js';
+import type { AdminAuthenticationUrlRow } from './client-authentication-dialog.js';
+import type { AdminClientViewState } from './client-state.js';
+import type { AdminCapabilities, AdminOrganizationContext } from './state.js';
+/** Closed set of intents emitted by the organization client workspace. */
+export type AdminClientIntent = {
+    readonly kind: 'create';
+} | {
+    readonly kind: 'select';
+    readonly clientId: string;
+} | {
+    readonly kind: 'retry';
+} | {
+    readonly kind: 'back';
+} | {
+    readonly kind: 'edit-name';
+    readonly clientId: string;
+} | {
+    readonly kind: 'add-authentication-url';
+    readonly clientId: string;
+} | {
+    readonly kind: 'edit-authentication-url';
+    readonly clientId: string;
+    readonly row: AdminAuthenticationUrlRow;
+} | {
+    readonly kind: 'delete-authentication-url';
+    readonly clientId: string;
+    readonly row: AdminAuthenticationUrlRow;
+} | {
+    readonly kind: 'save-protocol';
+    readonly clientId: string;
+    readonly input: UpdateClientInput;
+} | {
+    readonly kind: 'save-login';
+    readonly clientId: string;
+    readonly input: UpdateClientInput;
+} | {
+    readonly kind: 'activate';
+    readonly clientId: string;
+} | {
+    readonly kind: 'deactivate';
+    readonly clientId: string;
+} | {
+    readonly kind: 'delete';
+    readonly clientId: string;
+} | {
+    readonly kind: 'secrets';
+    readonly clientId: string;
+} | {
+    readonly kind: 'generate-secret';
+    readonly clientId: string;
+} | {
+    readonly kind: 'delete-secret';
+    readonly clientId: string;
+    readonly secretId: string;
+};
+/** Inputs for one selected-organization client workspace. */
+export interface AdminClientWorkspaceOptions {
+    /** Active organization, or absent when organization navigation is disabled. */
+    readonly organization?: AdminOrganizationContext;
+    /** Validated global applications available for name resolution and create selection. */
+    readonly applications: readonly AdminApplication[];
+    /** Capabilities from the currently verified session. */
+    readonly capabilities: AdminCapabilities;
+    /** Receives feature-local actions while controllers retain network ownership. */
+    readonly onIntent: (intent: AdminClientIntent) => void;
+    /** Focuses a mounted leaf view through the application loop. */
+    readonly focusView?: (view: View) => void;
+}
+/** Mounted organization client workspace controlled by validated state. */
+export interface AdminClientWorkspace {
+    /** Content mounted inside the administration shell. */
+    readonly content: View;
+    /** Replaces the complete validated workspace state. */
+    readonly setState: (state: AdminClientViewState) => void;
+    /** Restores focus to the current primary control. */
+    readonly focusCurrent: () => void;
+    /** Removes retained client data. */
+    readonly clear: () => void;
+    /** Permanently disposes this workspace. */
+    readonly dispose: () => void;
+}
+/** Creates the feature-specific client workspace with ordinary Layout DSL primitives. */
+export declare function createAdminClientWorkspace(options: AdminClientWorkspaceOptions): AdminClientWorkspace;
+//# sourceMappingURL=client-workspace.d.ts.map

package/dist/admin/client-workspace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-workspace.d.ts","sourceRoot":"","sources":["../../src/admin/client-workspace.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAEhF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAoBL,IAAI,EACL,MAAM,cAAc,CAAC;AAItB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AACnF,OAAO,KAAK,EAIV,oBAAoB,EACrB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAG9E,0EAA0E;AAC1E,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACtD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAC1B;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACtE;IACE,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,yBAAyB,CAAC;CACzC,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,2BAA2B,CAAC;IAC3C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,yBAAyB,CAAC;CACzC,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;CACnC,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;CACnC,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACtD;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC/D;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7F,6DAA6D;AAC7D,MAAM,WAAW,2BAA2B;IAC1C,+EAA+E;IAC/E,QAAQ,CAAC,YAAY,CAAC,EAAE,wBAAwB,CAAC;IACjD,wFAAwF;IACxF,QAAQ,CAAC,YAAY,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACnD,wDAAwD;IACxD,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,iFAAiF;IACjF,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,CAAC;IACvD,gEAAgE;IAChE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC;CAC3C;AAED,2EAA2E;AAC3E,MAAM,WAAW,oBAAoB;IACnC,uDAAuD;IACvD,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC;IACvB,uDAAuD;IACvD,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,CAAC;IACzD,qDAAqD;IACrD,QAAQ,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC;IAClC,oCAAoC;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC;IAC3B,2CAA2C;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;CAC9B;AA8FD,yFAAyF;AACzF,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,2BAA2B,GACnC,oBAAoB,CAopBtB"}