@portaidentity/sdk 1.7.3 → 1.8.0

package/dist/types/config.d.ts

@@ -1,26 +1,62 @@
-/**
- * System configuration types for the Porta SDK.
- *
- * Matches the server config route response shape exactly.
- * Server returns valueType and isSensitive from the system_config table.
- *
- * @module types/config
- */
+/** Public operational configuration contracts; the server owns validation and display metadata. */
+/** Closed operational policy keys accepted by configuration mutations. */
+export type ConfigKey = 'access_token_ttl' | 'id_token_ttl' | 'refresh_token_ttl' | 'authorization_code_ttl' | 'session_ttl' | 'magic_link_ttl' | 'password_reset_ttl' | 'invitation_ttl' | 'rate_limit_login_max' | 'rate_limit_login_window' | 'rate_limit_magic_link_max' | 'rate_limit_magic_link_window' | 'rate_limit_password_reset_max' | 'rate_limit_password_reset_window' | 'max_failed_logins' | 'lockout_duration_seconds' | 'audit_retention_days' | 'default_locale';
+/** Native JSON scalars; key-specific bounds and supported strings remain server-authoritative. */
+export type ConfigValue = number | string;
+/** Logical tab grouping provided by the server catalog. */
+export type ConfigGroup = 'lifetimes' | 'rate-limits' | 'lockout' | 'general';
+/** Native scalar category used by metadata-driven editors. */
+export type ConfigValueType = 'integer' | 'string';
+/** Display unit for a stored scalar, without conversion of its wire value. */
+export type ConfigUnit = 'seconds' | 'attempts' | 'days' | 'locale';
+/** Whether running consumers converge or every server instance must restart. */
+export type ConfigApplicationMode = 'runtime' | 'restart-required';
+/** Complete authoritative entry; bootstrap settings and secrets are not part of this surface. */
 export interface ConfigEntry {
-    /** Configuration key (e.g., "ttl.access_token") */
-    key: string;
-    /** Configuration value (masked with '***' for sensitive entries) */
-    value: string;
-    /** Value type (e.g., "number", "string", "boolean") */
-    valueType: string;
-    /** Human-readable description */
-    description: string | null;
-    /** Whether the value is sensitive (masked in GET responses) */
-    isSensitive: boolean;
-    /** Last update timestamp (ISO 8601) */
-    updatedAt: string;
+    /** Closed catalog identifier. */
+    readonly key: ConfigKey;
+    /** Logical editor group. */
+    readonly group: ConfigGroup;
+    /** Human-readable field caption. */
+    readonly label: string;
+    /** Explanation of the policy's effect. */
+    readonly description: string;
+    /** Current native stored value. */
+    readonly value: ConfigValue;
+    /** Safe catalog fallback used by runtime readers. */
+    readonly defaultValue: ConfigValue;
+    /** Expected native scalar category. */
+    readonly valueType: ConfigValueType;
+    /** Unit used for bounds and current value. */
+    readonly unit: ConfigUnit;
+    /** Inclusive lower bound for integer values. */
+    readonly minimum?: number;
+    /** Inclusive upper bound for integer values. */
+    readonly maximum?: number;
+    /** Exact supported strings for locale values. */
+    readonly allowedValues?: readonly 'en'[];
+    /** Required operational action after a successful update. */
+    readonly applicationMode: ConfigApplicationMode;
+    /** Last successful database update, in ISO 8601 format. */
+    readonly updatedAt: string;
 }
+/** Native single-value request body. */
 export interface SetConfigInput {
-    value: string;
+    /** Value validated against the targeted server catalog definition. */
+    readonly value: ConfigValue;
+}
+/** Confirmed single update, preserving the server's restart decision. */
+export interface ConfigUpdateResult {
+    /** Fresh authoritative entry. */
+    readonly data: ConfigEntry;
+    /** True when every Porta server instance must restart. */
+    readonly restartRequired: boolean;
+}
+/** Confirmed atomic batch update, in server catalog order. */
+export interface ConfigBatchUpdateResult {
+    /** Fresh authoritative entries for the changed keys. */
+    readonly data: readonly ConfigEntry[];
+    /** True when any changed policy requires every server instance to restart. */
+    readonly restartRequired: boolean;
 }
 //# sourceMappingURL=config.d.ts.map

package/dist/types/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/types/config.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,WAAW;IAC1B,mDAAmD;IACnD,GAAG,EAAE,MAAM,CAAC;IACZ,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,iCAAiC;IACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,+DAA+D;IAC/D,WAAW,EAAE,OAAO,CAAC;IACrB,uCAAuC;IACvC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;CACf"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/types/config.ts"],"names":[],"mappings":"AAAA,mGAAmG;AAEnG,0EAA0E;AAC1E,MAAM,MAAM,SAAS,GACjB,kBAAkB,GAClB,cAAc,GACd,mBAAmB,GACnB,wBAAwB,GACxB,aAAa,GACb,gBAAgB,GAChB,oBAAoB,GACpB,gBAAgB,GAChB,sBAAsB,GACtB,yBAAyB,GACzB,2BAA2B,GAC3B,8BAA8B,GAC9B,+BAA+B,GAC/B,kCAAkC,GAClC,mBAAmB,GACnB,0BAA0B,GAC1B,sBAAsB,GACtB,gBAAgB,CAAC;AAErB,kGAAkG;AAClG,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,CAAC;AAE1C,2DAA2D;AAC3D,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,aAAa,GAAG,SAAS,GAAG,SAAS,CAAC;AAE9E,8DAA8D;AAC9D,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,QAAQ,CAAC;AAEnD,8EAA8E;AAC9E,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEpE,gFAAgF;AAChF,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,kBAAkB,CAAC;AAEnE,iGAAiG;AACjG,MAAM,WAAW,WAAW;IAC1B,iCAAiC;IACjC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,4BAA4B;IAC5B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,oCAAoC;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,0CAA0C;IAC1C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,mCAAmC;IACnC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,qDAAqD;IACrD,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC;IACnC,uCAAuC;IACvC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,8CAA8C;IAC9C,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,gDAAgD;IAChD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,gDAAgD;IAChD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,iDAAiD;IACjD,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,IAAI,EAAE,CAAC;IACzC,6DAA6D;IAC7D,QAAQ,CAAC,eAAe,EAAE,qBAAqB,CAAC;IAChD,2DAA2D;IAC3D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,wCAAwC;AACxC,MAAM,WAAW,cAAc;IAC7B,sEAAsE;IACtE,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;CAC7B;AAED,yEAAyE;AACzE,MAAM,WAAW,kBAAkB;IACjC,iCAAiC;IACjC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,0DAA0D;IAC1D,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;CACnC;AAED,8DAA8D;AAC9D,MAAM,WAAW,uBAAuB;IACtC,wDAAwD;IACxD,QAAQ,CAAC,IAAI,EAAE,SAAS,WAAW,EAAE,CAAC;IACtC,8EAA8E;IAC9E,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;CACnC"}

package/dist/types/config.js

@@ -1,10 +1,3 @@
-/**
- * System configuration types for the Porta SDK.
- *
- * Matches the server config route response shape exactly.
- * Server returns valueType and isSensitive from the system_config table.
- *
- * @module types/config
- */
+/** Public operational configuration contracts; the server owns validation and display metadata. */
 export {};
 //# sourceMappingURL=config.js.map

package/dist/types/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/types/config.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/types/config.ts"],"names":[],"mappings":"AAAA,mGAAmG"}

package/dist/types/exports.d.ts

@@ -3,6 +3,7 @@
  *
  * @module types/exports
  */
+import type { PortabilityApplicationSelection, PortabilityCategory, PortabilityManifest, PortabilityScope } from './imports.js';
 /** Closed administrative entity catalog supported by the export API. */
 export type ExportEntityType = 'organizations' | 'clients' | 'users' | 'roles' | 'audit';
 /** Public export representation. */
@@ -22,4 +23,20 @@ export interface ExportParams {
     /** Required inclusive audit-window end. */
     endDate?: string;
 }
+/** Exact selection sent when exporting one portability manifest. */
+export interface ExportManifestRequest {
+    /** Organization or whole-environment source scope. */
+    readonly scope: PortabilityScope;
+    /** Non-empty manifest categories to include. */
+    readonly categories: readonly PortabilityCategory[];
+    /** Explicit application selection for application-related categories. */
+    readonly application_selection: PortabilityApplicationSelection;
+}
+/** Parsed manifest attachment returned without writing to the local filesystem. */
+export interface ExportManifestResponse {
+    /** Strict manifest returned by Porta. */
+    readonly manifest: PortabilityManifest;
+    /** Safe final filename component suggested by Porta or generated by the SDK. */
+    readonly filename: string;
+}
 //# sourceMappingURL=exports.d.ts.map

package/dist/types/exports.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exports.d.ts","sourceRoot":"","sources":["../../src/types/exports.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,wEAAwE;AACxE,MAAM,MAAM,gBAAgB,GAAG,eAAe,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAEzF,oCAAoC;AACpC,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,MAAM,CAAC;AAE1C,oEAAoE;AACpE,MAAM,WAAW,YAAY;IAC3B,gCAAgC;IAChC,UAAU,EAAE,gBAAgB,CAAC;IAC7B,6DAA6D;IAC7D,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,kEAAkE;IAClE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,0DAA0D;IAC1D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6CAA6C;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB"}
+{"version":3,"file":"exports.d.ts","sourceRoot":"","sources":["../../src/types/exports.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACV,+BAA+B,EAC/B,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EACjB,MAAM,cAAc,CAAC;AAEtB,wEAAwE;AACxE,MAAM,MAAM,gBAAgB,GAAG,eAAe,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAEzF,oCAAoC;AACpC,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,MAAM,CAAC;AAE1C,oEAAoE;AACpE,MAAM,WAAW,YAAY;IAC3B,gCAAgC;IAChC,UAAU,EAAE,gBAAgB,CAAC;IAC7B,6DAA6D;IAC7D,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,kEAAkE;IAClE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,0DAA0D;IAC1D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6CAA6C;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,oEAAoE;AACpE,MAAM,WAAW,qBAAqB;IACpC,sDAAsD;IACtD,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,gDAAgD;IAChD,QAAQ,CAAC,UAAU,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACpD,yEAAyE;IACzE,QAAQ,CAAC,qBAAqB,EAAE,+BAA+B,CAAC;CACjE;AAED,mFAAmF;AACnF,MAAM,WAAW,sBAAsB;IACrC,yCAAyC;IACzC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,gFAAgF;IAChF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B"}

package/dist/types/imports.d.ts

@@ -1,86 +1,390 @@
-/**
- * Data import / provisioning types for the Porta SDK.
- *
- * Types mirror the server's public data-import response shapes exactly.
- *
- * @module types/imports
- */
-/** Import mode — controls how existing entities are handled */
-export type ImportMode = 'merge' | 'overwrite' | 'dry-run';
-/** Request payload for the import endpoint */
-export interface ImportManifest {
-    /** Raw provisioning manifest (YAML/JSON parsed) */
-    manifest: Record<string, unknown>;
-    /** Import mode: merge existing, overwrite, or dry-run */
-    mode?: ImportMode;
-    /** Dry run — validate without applying (shorthand for mode='dry-run') */
-    dryRun?: boolean;
-    /** Optional tenant boundary which every tenant-qualified manifest entry must match. */
-    organizationId?: string;
-}
-/** A single entity operation result (created or updated) */
-export interface ImportEntityResult {
-    /** Entity type (e.g., "organization", "application", "client") */
-    type: string;
-    /** Entity slug identifier */
-    slug: string;
-    /** Entity display name */
-    name: string;
-    /** List of changes applied (for updates) */
-    changes?: string[];
-    /** Dry-run indication that a committed confidential-client create would issue a credential. */
-    credentialWillBeGenerated?: boolean;
-}
-/** A skipped entity with reason */
-export interface ImportSkippedResult {
-    /** Entity type */
-    type: string;
-    /** Entity slug identifier */
-    slug: string;
-    /** Why the entity was skipped */
-    reason: string;
-}
-/** An import error for a specific entity */
-export interface ImportErrorResult {
-    /** Entity type that failed */
-    type: string;
-    /** Entity slug identifier */
-    slug: string;
-    /** Error message */
-    error: string;
-}
-/** Client credentials generated during import (shown once, never stored in plaintext) */
-export interface ImportClientCredentials {
-    /** Client display name */
-    clientName: string;
-    /** Generated client ID */
-    clientId?: string;
-    /** Client type */
-    clientType: 'confidential' | 'public';
-    /** Dry-run indication which never contains generated credential material. */
-    credentialWillBeGenerated?: boolean;
-    /** Raw secret — only present on create for confidential clients */
-    secretPlaintext?: string;
-    /** DB row ID of the generated secret */
-    secretId?: string;
-    /** Optional label for the secret */
-    secretLabel?: string;
-    /** Optional expiry for the secret (ISO 8601) */
-    secretExpiresAt?: string;
-}
-/** Full import result — matches server ImportResult exactly */
-export interface ImportResult {
-    /** The import mode that was used */
-    mode: ImportMode;
-    /** Entities that were created */
-    created: ImportEntityResult[];
-    /** Entities that were updated (overwrite mode) */
-    updated: ImportEntityResult[];
-    /** Entities that were skipped (merge mode, already exists) */
-    skipped: ImportSkippedResult[];
-    /** Legacy rejected-response details; successful imports always omit this field. */
-    errors?: ImportErrorResult[];
-    /** Credentials generated by committed confidential-client creates. */
-    credentials: ImportClientCredentials[];
+/** Public wire types for selective Porta manifest import and export. */
+/** Closed manifest sections that an operator may select. */
+export type PortabilityCategory = 'organizations' | 'applications_authorization' | 'users_assignments' | 'oidc_clients';
+/** Organization-bound or complete-environment portability scope. */
+export type PortabilityScope = {
+    readonly kind: 'organization';
+    readonly organization_slug: string;
+} | {
+    readonly kind: 'environment';
+};
+/** Explicit application filter used by application-related categories. */
+export interface PortabilityApplicationSelection {
+    /** Select every eligible application when true. */
+    readonly all_applications: boolean;
+    /** Select these application slugs when all applications is false. */
+    readonly application_slugs: readonly string[];
 }
+/** Embedded branding image with declared media type and base64 bytes. */
+export interface PortabilityBrandingAsset {
+    /** Image media type validated against the branding allowlist. */
+    readonly media_type: string;
+    /** Base64-encoded image bytes. */
+    readonly content_base64: string;
+}
+/** Portable organization branding configuration. */
+export interface PortabilityBranding {
+    /** External logo URL, or null when absent. */
+    readonly logo_url: string | null;
+    /** External favicon URL, or null when absent. */
+    readonly favicon_url: string | null;
+    /** Six-digit HTML accent color, or null when absent. */
+    readonly primary_color: string | null;
+    /** Organization name displayed by hosted templates, or null when absent. */
+    readonly company_name: string | null;
+    /** Bounded custom template CSS, or null when absent. */
+    readonly custom_css: string | null;
+    /** Embedded logo bytes, or null when no logo is embedded. */
+    readonly logo_asset: PortabilityBrandingAsset | null;
+    /** Embedded favicon bytes, or null when no favicon is embedded. */
+    readonly favicon_asset: PortabilityBrandingAsset | null;
+}
+/** Portable organization record identified by its slug. */
+export interface PortabilityOrganization {
+    /** Public organization slug. */
+    readonly slug: string;
+    /** Organization display name. */
+    readonly name: string;
+    /** Organization lifecycle state. */
+    readonly status: 'active' | 'suspended';
+    /** Default locale identifier. */
+    readonly default_locale: string;
+    /** Default authentication methods. */
+    readonly default_login_methods: readonly ('password' | 'magic_link')[];
+    /** Organization two-factor policy. */
+    readonly two_factor_policy: 'optional' | 'required_email' | 'required_totp' | 'required_any';
+    /** Hosted-page branding configuration. */
+    readonly branding: PortabilityBranding;
+}
+/** Portable application record identified by its slug. */
+export interface PortabilityApplication {
+    /** Public application slug. */
+    readonly slug: string;
+    /** Application display name. */
+    readonly name: string;
+    /** Optional application description. */
+    readonly description: string | null;
+    /** Application lifecycle state. */
+    readonly status: 'active' | 'inactive';
+}
+/** Portable module record identified within an application. */
+export interface PortabilityApplicationModule {
+    /** Owning application slug. */
+    readonly application_slug: string;
+    /** Module slug. */
+    readonly slug: string;
+    /** Module display name. */
+    readonly name: string;
+    /** Optional module description. */
+    readonly description: string | null;
+    /** Module lifecycle state. */
+    readonly status: 'active' | 'inactive';
+}
+/** Portable role record identified within an application. */
+export interface PortabilityRole {
+    /** Owning application slug. */
+    readonly application_slug: string;
+    /** External role claim value. */
+    readonly slug: string;
+    /** Role display name. */
+    readonly name: string;
+    /** Optional role description. */
+    readonly description: string | null;
+}
+/** Portable permission record identified within an application. */
+export interface PortabilityPermission {
+    /** Owning application slug. */
+    readonly application_slug: string;
+    /** External permission claim value. */
+    readonly slug: string;
+    /** Optional owning module slug. */
+    readonly module_slug: string | null;
+    /** Permission display name. */
+    readonly name: string;
+    /** Optional permission description. */
+    readonly description: string | null;
+}
+/** Portable custom-claim definition. */
+export interface PortabilityClaimDefinition {
+    /** Owning application slug. */
+    readonly application_slug: string;
+    /** External claim name. */
+    readonly claim_name: string;
+    /** Value type enforced for this claim. */
+    readonly claim_type: 'string' | 'number' | 'boolean' | 'json';
+    /** Optional claim description. */
+    readonly description: string | null;
+    /** Whether the claim appears in ID tokens. */
+    readonly include_in_id_token: boolean;
+    /** Whether the claim appears in access tokens. */
+    readonly include_in_access_token: boolean;
+    /** Whether the claim appears in UserInfo responses. */
+    readonly include_in_userinfo: boolean;
+}
+/** Portable role-to-permission mapping for one application role. */
+export interface PortabilityRolePermissionMapping {
+    /** Owning application slug. */
+    readonly application_slug: string;
+    /** Role claim value. */
+    readonly role_slug: string;
+    /** Non-empty sorted permission claim values. */
+    readonly permission_slugs: readonly string[];
+}
+/** Portable user profile without credentials, lock state, or activity counters. */
+export interface PortabilityUser {
+    /** Owning organization slug. */
+    readonly organization_slug: string;
+    /** User email address. */
+    readonly email: string;
+    /** Whether the email address is verified. */
+    readonly email_verified: boolean;
+    /** OIDC given name. */
+    readonly given_name: string | null;
+    /** OIDC family name. */
+    readonly family_name: string | null;
+    /** OIDC middle name. */
+    readonly middle_name: string | null;
+    /** OIDC nickname. */
+    readonly nickname: string | null;
+    /** OIDC preferred username. */
+    readonly preferred_username: string | null;
+    /** OIDC profile URL. */
+    readonly profile_url: string | null;
+    /** OIDC picture URL. */
+    readonly picture_url: string | null;
+    /** OIDC website URL. */
+    readonly website_url: string | null;
+    /** OIDC gender value. */
+    readonly gender: string | null;
+    /** OIDC calendar birthdate. */
+    readonly birthdate: string | null;
+    /** OIDC time-zone identifier. */
+    readonly zoneinfo: string | null;
+    /** OIDC locale identifier. */
+    readonly locale: string | null;
+    /** OIDC phone number. */
+    readonly phone_number: string | null;
+    /** Whether the phone number is verified. */
+    readonly phone_number_verified: boolean;
+    /** Street address. */
+    readonly address_street: string | null;
+    /** Address locality. */
+    readonly address_locality: string | null;
+    /** Address region. */
+    readonly address_region: string | null;
+    /** Postal code. */
+    readonly address_postal_code: string | null;
+    /** Two-letter country code. */
+    readonly address_country: string | null;
+    /** Portable lifecycle state; automatic lock state is excluded. */
+    readonly status: 'active' | 'inactive';
+}
+/** Portable assignment of one application role to one user. */
+export interface PortabilityUserRoleAssignment {
+    /** Owning organization slug. */
+    readonly organization_slug: string;
+    /** Assigned user's email address. */
+    readonly email: string;
+    /** Owning application slug. */
+    readonly application_slug: string;
+    /** Assigned role claim value. */
+    readonly role_slug: string;
+}
+/** JSON values supported in custom claim assignments. */
+export type PortabilityJsonValue = string | number | boolean | null | readonly PortabilityJsonValue[] | {
+    readonly [key: string]: PortabilityJsonValue;
+};
+/** Portable custom-claim value assigned to one user. */
+export interface PortabilityUserClaimValue {
+    /** Owning organization slug. */
+    readonly organization_slug: string;
+    /** Assigned user's email address. */
+    readonly email: string;
+    /** Owning application slug. */
+    readonly application_slug: string;
+    /** Claim definition name. */
+    readonly claim_name: string;
+    /** JSON-compatible claim value. */
+    readonly value: PortabilityJsonValue;
+}
+/** Portable OIDC client registration without secret material. */
+export interface PortabilityClient {
+    /** Public OIDC client identifier. */
+    readonly client_id: string;
+    /** Owning organization slug. */
+    readonly organization_slug: string;
+    /** Owning application slug. */
+    readonly application_slug: string;
+    /** Client display name. */
+    readonly name: string;
+    /** Client confidentiality mode. */
+    readonly client_type: 'public' | 'confidential';
+    /** Client deployment type. */
+    readonly application_type: 'web' | 'native' | 'spa';
+    /** Client lifecycle state. */
+    readonly status: 'active' | 'inactive';
+    /** Enabled OAuth grant types. */
+    readonly grant_types: readonly string[];
+    /** Enabled OIDC response types. */
+    readonly response_types: readonly string[];
+    /** Space-separated scope string. */
+    readonly scope: string;
+    /** Explicit login methods, or null to inherit organization defaults. */
+    readonly login_methods: readonly ('password' | 'magic_link')[] | null;
+    /** Token endpoint authentication method. */
+    readonly token_endpoint_auth_method: 'client_secret_basic' | 'client_secret_post' | 'none';
+    /** Exact authorization redirect URIs. */
+    readonly redirect_uris: readonly string[];
+    /** Exact post-logout redirect URIs. */
+    readonly post_logout_redirect_uris: readonly string[];
+    /** Exact browser origins allowed by the client. */
+    readonly allowed_origins: readonly string[];
+    /** Whether authorization-code requests require PKCE. */
+    readonly require_pkce: boolean;
+}
+/** Complete version 1.0 portability manifest. */
+export interface PortabilityManifest {
+    /** Manifest format version. */
+    readonly version: '1.0';
+    /** UTC instant at which the export snapshot was created. */
+    readonly exported_at: string;
+    /** Source data scope represented by the manifest. */
+    readonly scope: PortabilityScope;
+    /** Selected manifest categories. */
+    readonly categories: readonly PortabilityCategory[];
+    /** Application filter used by application-related categories. */
+    readonly application_selection: PortabilityApplicationSelection;
+    /** Portable organizations. */
+    readonly organizations: readonly PortabilityOrganization[];
+    /** Portable applications. */
+    readonly applications: readonly PortabilityApplication[];
+    /** Portable application modules. */
+    readonly application_modules: readonly PortabilityApplicationModule[];
+    /** Portable application roles. */
+    readonly roles: readonly PortabilityRole[];
+    /** Portable application permissions. */
+    readonly permissions: readonly PortabilityPermission[];
+    /** Portable custom-claim definitions. */
+    readonly claim_definitions: readonly PortabilityClaimDefinition[];
+    /** Portable role-to-permission mappings. */
+    readonly role_permission_mappings: readonly PortabilityRolePermissionMapping[];
+    /** Portable organization users. */
+    readonly users: readonly PortabilityUser[];
+    /** Portable user-to-role assignments. */
+    readonly user_role_assignments: readonly PortabilityUserRoleAssignment[];
+    /** Portable user custom-claim values. */
+    readonly user_claim_values: readonly PortabilityUserClaimValue[];
+    /** Portable OIDC clients. */
+    readonly clients: readonly PortabilityClient[];
+}
+/** Import operation mode. */
+export type PortabilityImportMode = 'dry-run' | 'keep-existing' | 'update-existing';
+/** Request body for previewing or applying one manifest. */
+export interface ImportManifestRequest {
+    /** Strict manifest to validate and process. */
+    readonly manifest: PortabilityManifest;
+    /** Preview, keep-existing, or update-existing behavior. */
+    readonly mode: PortabilityImportMode;
+}
+/** Portable entity groups in dependency order. */
+export type PortabilityEntityType = 'organizations' | 'applications' | 'application_modules' | 'roles' | 'permissions' | 'claim_definitions' | 'role_permission_mappings' | 'users' | 'user_role_assignments' | 'user_claim_values' | 'clients';
+/** Planned or completed action for one manifest record. */
+export type PortabilityAction = 'created' | 'updated' | 'skipped' | 'rejected';
+/** Counts for one entity group. */
+export interface PortabilityActionCounts {
+    /** Records created. */
+    readonly created: number;
+    /** Records updated. */
+    readonly updated: number;
+    /** Existing records left unchanged. */
+    readonly skipped: number;
+    /** Invalid or incompatible records rejected. */
+    readonly rejected: number;
+}
+/** Public natural-key fields identifying one portable entity. */
+export type PortabilityNaturalKey = {
+    readonly slug: string;
+} | {
+    readonly application_slug: string;
+    readonly slug: string;
+} | {
+    readonly application_slug: string;
+    readonly claim_name: string;
+} | {
+    readonly application_slug: string;
+    readonly role_slug: string;
+} | {
+    readonly organization_slug: string;
+    readonly email: string;
+} | {
+    readonly organization_slug: string;
+    readonly email: string;
+    readonly application_slug: string;
+    readonly role_slug: string;
+} | {
+    readonly organization_slug: string;
+    readonly email: string;
+    readonly application_slug: string;
+    readonly claim_name: string;
+} | {
+    readonly client_id: string;
+};
+/** Ordered result item for one manifest record. */
+export interface PortabilityResultItem {
+    /** Entity group containing the record. */
+    readonly entity_type: PortabilityEntityType;
+    /** Planned or completed action. */
+    readonly action: PortabilityAction;
+    /** Public natural key without database identifiers. */
+    readonly natural_key: PortabilityNaturalKey;
+    /** Whether apply will create a confidential-client credential. */
+    readonly credential_will_be_generated?: boolean;
+}
+/** Closed safe validation codes returned for rejected records. */
+export type PortabilityResultErrorCode = 'invalid_record' | 'duplicate_natural_key' | 'missing_dependency' | 'ambiguous_dependency' | 'incompatible_record' | 'cross_scope_reference' | 'control_plane_record' | 'client_id_collision';
+/** Safe bounded error for one rejected manifest record. */
+export interface PortabilityResultError {
+    /** Entity group containing the rejected record. */
+    readonly entity_type: PortabilityEntityType;
+    /** Public natural key without database identifiers. */
+    readonly natural_key: PortabilityNaturalKey;
+    /** Stable safe rejection code. */
+    readonly code: PortabilityResultErrorCode;
+}
+/** One-time credential returned only after a committed confidential-client creation. */
+export interface PortabilityCredential {
+    /** Public OIDC client identifier. */
+    readonly client_id: string;
+    /** Human-readable credential label. */
+    readonly label: string;
+    /** Plaintext secret shown only in this response. */
+    readonly secret: string;
+    /** UTC credential expiry instant. */
+    readonly expires_at: string;
+}
+/** Fields shared by preview and committed portability results. */
+export interface PortabilityResultBase {
+    /** Per-entity counts in the closed dependency groups. */
+    readonly summary: Readonly<Record<PortabilityEntityType, PortabilityActionCounts>>;
+    /** Ordered record outcomes. */
+    readonly items: readonly PortabilityResultItem[];
+    /** Bounded safe rejected-record details. */
+    readonly errors: readonly PortabilityResultError[];
+}
+/** Mutation-free import preview result. */
+export interface PortabilityPreviewResult extends PortabilityResultBase {
+    /** Preview discriminator. */
+    readonly mode: 'dry-run';
+    /** Preview never contains plaintext credential material. */
+    readonly credentials?: never;
+}
+/** Successfully committed portability result. */
+export interface PortabilityApplyResult extends PortabilityResultBase {
+    /** Conflict policy used by the committed import. */
+    readonly mode: 'keep-existing' | 'update-existing';
+    /** One-time credentials returned only for newly created confidential clients. */
+    readonly credentials?: readonly PortabilityCredential[];
+}
+/** Safe ordered result returned by preview and committed apply operations. */
+export type PortabilityResult = PortabilityPreviewResult | PortabilityApplyResult;
 //# sourceMappingURL=imports.d.ts.map

package/dist/types/imports.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"imports.d.ts","sourceRoot":"","sources":["../../src/types/imports.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,+DAA+D;AAC/D,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,WAAW,GAAG,SAAS,CAAC;AAE3D,8CAA8C;AAC9C,MAAM,WAAW,cAAc;IAC7B,mDAAmD;IACnD,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,yDAAyD;IACzD,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,yEAAyE;IACzE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,uFAAuF;IACvF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,4DAA4D;AAC5D,MAAM,WAAW,kBAAkB;IACjC,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IACb,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,4CAA4C;IAC5C,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,+FAA+F;IAC/F,yBAAyB,CAAC,EAAE,OAAO,CAAC;CACrC;AAED,mCAAmC;AACnC,MAAM,WAAW,mBAAmB;IAClC,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,4CAA4C;AAC5C,MAAM,WAAW,iBAAiB;IAChC,8BAA8B;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,oBAAoB;IACpB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,yFAAyF;AACzF,MAAM,WAAW,uBAAuB;IACtC,0BAA0B;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,0BAA0B;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB;IAClB,UAAU,EAAE,cAAc,GAAG,QAAQ,CAAC;IACtC,6EAA6E;IAC7E,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,mEAAmE;IACnE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gDAAgD;IAChD,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,+DAA+D;AAC/D,MAAM,WAAW,YAAY;IAC3B,oCAAoC;IACpC,IAAI,EAAE,UAAU,CAAC;IACjB,iCAAiC;IACjC,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,kDAAkD;IAClD,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,8DAA8D;IAC9D,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC/B,mFAAmF;IACnF,MAAM,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC7B,sEAAsE;IACtE,WAAW,EAAE,uBAAuB,EAAE,CAAC;CACxC"}
+{"version":3,"file":"imports.d.ts","sourceRoot":"","sources":["../../src/types/imports.ts"],"names":[],"mappings":"AAAA,wEAAwE;AAExE,4DAA4D;AAC5D,MAAM,MAAM,mBAAmB,GAC7B,eAAe,GAAG,4BAA4B,GAAG,mBAAmB,GAAG,cAAc,CAAC;AAExF,oEAAoE;AACpE,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,GACrE;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;CAAE,CAAC;AAErC,0EAA0E;AAC1E,MAAM,WAAW,+BAA+B;IAC9C,mDAAmD;IACnD,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,qEAAqE;IACrE,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/C;AAED,yEAAyE;AACzE,MAAM,WAAW,wBAAwB;IACvC,iEAAiE;IACjE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,kCAAkC;IAClC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,oDAAoD;AACpD,MAAM,WAAW,mBAAmB;IAClC,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,iDAAiD;IACjD,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,wDAAwD;IACxD,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,4EAA4E;IAC5E,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,wDAAwD;IACxD,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,6DAA6D;IAC7D,QAAQ,CAAC,UAAU,EAAE,wBAAwB,GAAG,IAAI,CAAC;IACrD,mEAAmE;IACnE,QAAQ,CAAC,aAAa,EAAE,wBAAwB,GAAG,IAAI,CAAC;CACzD;AAED,2DAA2D;AAC3D,MAAM,WAAW,uBAAuB;IACtC,gCAAgC;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iCAAiC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,oCAAoC;IACpC,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,WAAW,CAAC;IACxC,iCAAiC;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,sCAAsC;IACtC,QAAQ,CAAC,qBAAqB,EAAE,SAAS,CAAC,UAAU,GAAG,YAAY,CAAC,EAAE,CAAC;IACvE,sCAAsC;IACtC,QAAQ,CAAC,iBAAiB,EAAE,UAAU,GAAG,gBAAgB,GAAG,eAAe,GAAG,cAAc,CAAC;IAC7F,0CAA0C;IAC1C,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;CACxC;AAED,0DAA0D;AAC1D,MAAM,WAAW,sBAAsB;IACrC,+BAA+B;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,gCAAgC;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,wCAAwC;IACxC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,mCAAmC;IACnC,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,UAAU,CAAC;CACxC;AAED,+DAA+D;AAC/D,MAAM,WAAW,4BAA4B;IAC3C,+BAA+B;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,mBAAmB;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,2BAA2B;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mCAAmC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,8BAA8B;IAC9B,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,UAAU,CAAC;CACxC;AAED,6DAA6D;AAC7D,MAAM,WAAW,eAAe;IAC9B,+BAA+B;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,iCAAiC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,yBAAyB;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iCAAiC;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AAED,mEAAmE;AACnE,MAAM,WAAW,qBAAqB;IACpC,+BAA+B;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,uCAAuC;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mCAAmC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,+BAA+B;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,uCAAuC;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AAED,wCAAwC;AACxC,MAAM,WAAW,0BAA0B;IACzC,+BAA+B;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,2BAA2B;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,0CAA0C;IAC1C,QAAQ,CAAC,UAAU,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IAC9D,kCAAkC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,8CAA8C;IAC9C,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;IACtC,kDAAkD;IAClD,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAC;IAC1C,uDAAuD;IACvD,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;CACvC;AAED,oEAAoE;AACpE,MAAM,WAAW,gCAAgC;IAC/C,+BAA+B;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,wBAAwB;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,gDAAgD;IAChD,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9C;AAED,mFAAmF;AACnF,MAAM,WAAW,eAAe;IAC9B,gCAAgC;IAChC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,0BAA0B;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,6CAA6C;IAC7C,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,uBAAuB;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,wBAAwB;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,wBAAwB;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,qBAAqB;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,+BAA+B;IAC/B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,wBAAwB;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,wBAAwB;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,wBAAwB;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,yBAAyB;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,+BAA+B;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,iCAAiC;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,8BAA8B;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,yBAAyB;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,4CAA4C;IAC5C,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;IACxC,sBAAsB;IACtB,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,wBAAwB;IACxB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,sBAAsB;IACtB,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,mBAAmB;IACnB,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,+BAA+B;IAC/B,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,kEAAkE;IAClE,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,UAAU,CAAC;CACxC;AAED,+DAA+D;AAC/D,MAAM,WAAW,6BAA6B;IAC5C,gCAAgC;IAChC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,qCAAqC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,+BAA+B;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,iCAAiC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,yDAAyD;AACzD,MAAM,MAAM,oBAAoB,GAC5B,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,SAAS,oBAAoB,EAAE,GAC/B;IAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,oBAAoB,CAAA;CAAE,CAAC;AAErD,wDAAwD;AACxD,MAAM,WAAW,yBAAyB;IACxC,gCAAgC;IAChC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,qCAAqC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,+BAA+B;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,6BAA6B;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,mCAAmC;IACnC,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;CACtC;AAED,iEAAiE;AACjE,MAAM,WAAW,iBAAiB;IAChC,qCAAqC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,gCAAgC;IAChC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,+BAA+B;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,2BAA2B;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mCAAmC;IACnC,QAAQ,CAAC,WAAW,EAAE,QAAQ,GAAG,cAAc,CAAC;IAChD,8BAA8B;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,KAAK,GAAG,QAAQ,GAAG,KAAK,CAAC;IACpD,8BAA8B;IAC9B,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,UAAU,CAAC;IACvC,iCAAiC;IACjC,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,mCAAmC;IACnC,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,oCAAoC;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,wEAAwE;IACxE,QAAQ,CAAC,aAAa,EAAE,SAAS,CAAC,UAAU,GAAG,YAAY,CAAC,EAAE,GAAG,IAAI,CAAC;IACtE,4CAA4C;IAC5C,QAAQ,CAAC,0BAA0B,EAAE,qBAAqB,GAAG,oBAAoB,GAAG,MAAM,CAAC;IAC3F,yCAAyC;IACzC,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,uCAAuC;IACvC,QAAQ,CAAC,yBAAyB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtD,mDAAmD;IACnD,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,wDAAwD;IACxD,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;CAChC;AAED,iDAAiD;AACjD,MAAM,WAAW,mBAAmB;IAClC,+BAA+B;IAC/B,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,4DAA4D;IAC5D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,qDAAqD;IACrD,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,oCAAoC;IACpC,QAAQ,CAAC,UAAU,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACpD,iEAAiE;IACjE,QAAQ,CAAC,qBAAqB,EAAE,+BAA+B,CAAC;IAChE,8BAA8B;IAC9B,QAAQ,CAAC,aAAa,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAC3D,6BAA6B;IAC7B,QAAQ,CAAC,YAAY,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACzD,oCAAoC;IACpC,QAAQ,CAAC,mBAAmB,EAAE,SAAS,4BAA4B,EAAE,CAAC;IACtE,kCAAkC;IAClC,QAAQ,CAAC,KAAK,EAAE,SAAS,eAAe,EAAE,CAAC;IAC3C,wCAAwC;IACxC,QAAQ,CAAC,WAAW,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACvD,yCAAyC;IACzC,QAAQ,CAAC,iBAAiB,EAAE,SAAS,0BAA0B,EAAE,CAAC;IAClE,4CAA4C;IAC5C,QAAQ,CAAC,wBAAwB,EAAE,SAAS,gCAAgC,EAAE,CAAC;IAC/E,mCAAmC;IACnC,QAAQ,CAAC,KAAK,EAAE,SAAS,eAAe,EAAE,CAAC;IAC3C,yCAAyC;IACzC,QAAQ,CAAC,qBAAqB,EAAE,SAAS,6BAA6B,EAAE,CAAC;IACzE,yCAAyC;IACzC,QAAQ,CAAC,iBAAiB,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACjE,6BAA6B;IAC7B,QAAQ,CAAC,OAAO,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAChD;AAED,6BAA6B;AAC7B,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,eAAe,GAAG,iBAAiB,CAAC;AAEpF,4DAA4D;AAC5D,MAAM,WAAW,qBAAqB;IACpC,+CAA+C;IAC/C,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;CACtC;AAED,kDAAkD;AAClD,MAAM,MAAM,qBAAqB,GAC7B,eAAe,GACf,cAAc,GACd,qBAAqB,GACrB,OAAO,GACP,aAAa,GACb,mBAAmB,GACnB,0BAA0B,GAC1B,OAAO,GACP,uBAAuB,GACvB,mBAAmB,GACnB,SAAS,CAAC;AAEd,2DAA2D;AAC3D,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;AAE/E,mCAAmC;AACnC,MAAM,WAAW,uBAAuB;IACtC,uBAAuB;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,uBAAuB;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,uCAAuC;IACvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,gDAAgD;IAChD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,iEAAiE;AACjE,MAAM,MAAM,qBAAqB,GAC7B;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzB;IAAE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAClE;IAAE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACjE;IAAE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC9D;IACE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B,GACD;IACE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,GACD;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnC,mDAAmD;AACnD,MAAM,WAAW,qBAAqB;IACpC,0CAA0C;IAC1C,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,mCAAmC;IACnC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,uDAAuD;IACvD,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,kEAAkE;IAClE,QAAQ,CAAC,4BAA4B,CAAC,EAAE,OAAO,CAAC;CACjD;AAED,kEAAkE;AAClE,MAAM,MAAM,0BAA0B,GAClC,gBAAgB,GAChB,uBAAuB,GACvB,oBAAoB,GACpB,sBAAsB,GACtB,qBAAqB,GACrB,uBAAuB,GACvB,sBAAsB,GACtB,qBAAqB,CAAC;AAE1B,2DAA2D;AAC3D,MAAM,WAAW,sBAAsB;IACrC,mDAAmD;IACnD,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,uDAAuD;IACvD,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,kCAAkC;IAClC,QAAQ,CAAC,IAAI,EAAE,0BAA0B,CAAC;CAC3C;AAED,wFAAwF;AACxF,MAAM,WAAW,qBAAqB;IACpC,qCAAqC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,uCAAuC;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,oDAAoD;IACpD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,qCAAqC;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,kEAAkE;AAClE,MAAM,WAAW,qBAAqB;IACpC,yDAAyD;IACzD,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC,CAAC;IACnF,+BAA+B;IAC/B,QAAQ,CAAC,KAAK,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACjD,4CAA4C;IAC5C,QAAQ,CAAC,MAAM,EAAE,SAAS,sBAAsB,EAAE,CAAC;CACpD;AAED,2CAA2C;AAC3C,MAAM,WAAW,wBAAyB,SAAQ,qBAAqB;IACrE,6BAA6B;IAC7B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,4DAA4D;IAC5D,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC;CAC9B;AAED,iDAAiD;AACjD,MAAM,WAAW,sBAAuB,SAAQ,qBAAqB;IACnE,oDAAoD;IACpD,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,iBAAiB,CAAC;IACnD,iFAAiF;IACjF,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;CACzD;AAED,8EAA8E;AAC9E,MAAM,MAAM,iBAAiB,GAAG,wBAAwB,GAAG,sBAAsB,CAAC"}