@sirrlock/node 0.1.0 → 1.0.1

package/dist/index.d.ts

@@ -1,20 +1,84 @@
 /**
  * @sirrlock/node — Sirr Node.js client
  *
- * Thin fetch wrapper around the Sirr HTTP API.
- * No native dependencies. Works in Node 18+.
+ * Zero-dependency TypeScript client for the Sirr HTTP API.
+ * Works in Node 18+, Deno, Bun, and edge runtimes.
  */
 export interface SirrClientOptions {
-    /** Sirr server base URL. Default: http://localhost:8080 */
+    /** Sirr server base URL. Default: http://localhost:39999 */
     server?: string;
-    /** Bearer token (SIRR_MASTER_KEY on the server side). */
+    /** Bearer token — master key or principal API key. */
     token: string;
+    /**
+     * Org ID for multi-tenant mode. When set, all secret, audit, webhook, and
+     * prune operations are scoped under `/orgs/{org}/`.
+     */
+    org?: string;
 }
+/** Options for `push()` — anonymous public dead-drop. */
 export interface PushOptions {
-    /** TTL in seconds. */
+    /** Time-to-live in seconds. Omit for no expiration. */
+    ttl?: number;
+    /** Maximum reads before the secret is burned. */
+    reads?: number;
+}
+/** Options for `set()` — org-scoped named secret. */
+export interface SetOptions {
+    /** Time-to-live in seconds. Omit for no expiration. */
     ttl?: number;
-    /** Maximum number of reads before the secret self-destructs. */
+    /** Maximum reads before the secret is burned or sealed. */
     reads?: number;
+    /**
+     * Whether to permanently delete the secret after reaching `reads`.
+     * `true` (default) = burn; `false` = seal (still patchable via `patch()`).
+     */
+    burnOnRead?: boolean;
+    /**
+     * Webhook URL to call when this secret is read or burned.
+     * Must be HTTPS and within the server's allowed origins.
+     */
+    webhookUrl?: string;
+    /**
+     * Restrict reads to specific principal key names (org-scoped secrets only).
+     * Omit to allow any key with read permission.
+     */
+    allowedKeys?: string[];
+    /**
+     * Override the org for this call. Falls back to the client-level `org`.
+     */
+    org?: string;
+}
+export interface PatchOptions {
+    /** Replace the stored value. */
+    value?: string;
+    /** New TTL in seconds from now (resets the expiry clock). */
+    ttl?: number;
+    /** New maximum read count. */
+    reads?: number;
+}
+/**
+ * Metadata returned by `check()` (HEAD request).
+ * Does not consume a read counter.
+ */
+export interface SecretStatus {
+    /** `"active"` = readable; `"sealed"` = reads exhausted but not deleted. */
+    status: "active" | "sealed";
+    readCount: number;
+    readsRemaining: number | "unlimited";
+    /** `true` = burns on read; `false` = seals on read. */
+    burnOnRead: boolean;
+    createdAt: number;
+    expiresAt: number | null;
+}
+/** Response from `push()` — anonymous public dead-drop. */
+export interface PushResponse {
+    /** 64-character hex ID used to retrieve the secret via `get(id)`. */
+    id: string;
+}
+/** Response from `set()` — org-scoped named secret. */
+export interface SetResponse {
+    /** The key under which the secret was stored. */
+    key: string;
 }
 export interface SecretMeta {
     key: string;
@@ -22,6 +86,14 @@ export interface SecretMeta {
     expires_at: number | null;
     max_reads: number | null;
     read_count: number;
+    /**
+     * Whether the secret burns (`true`) or seals (`false`) on read-limit.
+     * Only present on secrets that were created with an explicit `burnOnRead`
+     * value or in responses from `patch()`.
+     */
+    delete?: boolean;
+    /** ID of the principal that created this secret (org secrets only). */
+    owner_id?: string;
 }
 export interface AuditEvent {
     id: number;
@@ -31,13 +103,24 @@ export interface AuditEvent {
     source_ip: string;
     success: boolean;
     detail: string | null;
+    org_id?: string;
+    principal_id?: string;
 }
-export interface AuditOptions {
+/** Filter parameters for audit log queries. */
+export interface AuditFilter {
+    /** Return events at or after this Unix timestamp. */
     since?: number;
+    /** Return events at or before this Unix timestamp. */
     until?: number;
+    /** Filter by action type, e.g. `"secret.read"`. */
     action?: string;
+    /** Filter by secret key name (org-scoped audit only). */
+    key?: string;
+    /** Maximum number of entries to return (default 100, max 1000). */
     limit?: number;
 }
+/** @deprecated Use `AuditFilter`. */
+export type AuditOptions = AuditFilter;
 export interface Webhook {
     id: string;
     url: string;
@@ -46,35 +129,159 @@ export interface Webhook {
 }
 export interface WebhookCreateResult {
     id: string;
+    /** Signing secret — shown only once, save immediately. */
     secret: string;
 }
-export interface ApiKey {
+export interface Org {
+    id: string;
+    name: string;
+    metadata?: Record<string, string>;
+    created_at?: number;
+}
+export interface Principal {
     id: string;
-    label: string;
-    permissions: string[];
-    prefix: string | null;
+    name: string;
+    role: string;
+    org_id: string;
+    metadata?: Record<string, string>;
+    created_at?: number;
+}
+export interface Role {
+    name: string;
+    /** Permission letter string, e.g. `"rRlL"`. */
+    permissions: string;
+    org_id?: string;
+    builtin?: boolean;
+    created_at?: number;
+}
+export interface PrincipalKey {
+    id: string;
+    name: string;
+    valid_after: number;
+    valid_before: number;
     created_at: number;
 }
-export interface ApiKeyCreateResult {
+export interface MeResponse {
     id: string;
+    name: string;
+    role: string;
+    org_id: string;
+    metadata: Record<string, string>;
+    created_at: number;
+    keys: PrincipalKey[];
+}
+export interface PrincipalKeyCreateResult {
+    id: string;
+    name: string;
+    /** Raw API key — shown only once, save immediately. */
     key: string;
-    label: string;
-    permissions: string[];
-    prefix: string | null;
+    valid_after: number;
+    valid_before: number;
 }
-export interface CreateApiKeyOptions {
-    label: string;
-    permissions: string[];
-    prefix?: string;
+export interface CreateOrgOptions {
+    name: string;
+    metadata?: Record<string, string>;
+}
+export interface CreatePrincipalOptions {
+    name: string;
+    /**
+     * Role to assign. Built-in: `reader`, `writer`, `admin`, `owner`.
+     * Custom roles can be created per-org.
+     */
+    role: string;
+    metadata?: Record<string, string>;
+}
+export interface CreateRoleOptions {
+    name: string;
+    /**
+     * Permission letter string. Each letter enables a permission bit.
+     * Examples: `"r"` (read), `"rRlL"` (read + list), `"rRlLcCpPaAmMdD"` (full).
+     *
+     * | Letter | Permission |
+     * |--------|-----------|
+     * | `r`    | ReadOrg |
+     * | `R`    | ReadMy |
+     * | `l`    | ListOrg |
+     * | `L`    | ListMy |
+     * | `c`    | CreateOrg |
+     * | `C`    | CreateMy |
+     * | `p`    | PatchOrg |
+     * | `P`    | PatchMy |
+     * | `d`    | DeleteOrg |
+     * | `D`    | DeleteMy |
+     * | `a`    | AuditRead |
+     * | `m`    | ManageOrg |
+     */
+    permissions: string;
+}
+export interface CreateKeyOptions {
+    /** Human-readable label for this key. */
+    name: string;
+    /** Lifetime in seconds from now. Defaults to 1 year. */
+    valid_for_seconds?: number;
+    /** Absolute expiry as a Unix timestamp. Overrides `valid_for_seconds`. */
+    valid_before?: number;
+}
+export interface PatchMeOptions {
+    /** Replaces the entire metadata map on the current principal. */
+    metadata: Record<string, string>;
+}
+export interface WebhookClient {
+    /**
+     * Register a webhook. Returns the ID and signing secret.
+     * @param url   HTTPS endpoint to receive events
+     * @param opts  Optional event filter (default `["*"]`)
+     */
+    create(url: string, opts?: {
+        events?: string[];
+    }): Promise<WebhookCreateResult>;
+    /** List all registered webhooks. Signing secrets are redacted. */
+    list(): Promise<Webhook[]>;
+    /** Delete a webhook by ID. Returns false if not found. */
+    delete(id: string): Promise<boolean>;
+}
+export interface OrgClient {
+    /** Create a new organization. Requires master key. */
+    create(opts: CreateOrgOptions): Promise<Org>;
+    /** List all organizations. Requires master key. */
+    list(): Promise<Org[]>;
+    /** Delete an organization by ID. Requires master key. */
+    delete(id: string): Promise<void>;
+}
+export interface PrincipalClient {
+    /** Create a principal within an org. Requires master key. */
+    create(orgId: string, opts: CreatePrincipalOptions): Promise<Principal>;
+    /** List all principals in an org. Requires master key. */
+    list(orgId: string): Promise<Principal[]>;
+    /** Delete a principal by ID. Requires master key. */
+    delete(orgId: string, principalId: string): Promise<void>;
 }
 export declare class SirrError extends Error {
     readonly status: number;
     constructor(status: number, message: string);
 }
+/**
+ * Thrown by `set()` when a secret with the given key already exists (HTTP 409).
+ * Delete the existing secret first, then call `set()` again.
+ */
+export declare class SecretExistsError extends Error {
+    constructor(key: string);
+}
 export declare class SirrClient {
     private readonly server;
     private readonly token;
+    private readonly org?;
+    /** Webhook management — `sirr.webhooks.create/list/delete`. */
+    readonly webhooks: WebhookClient;
+    /** Organization management — `sirr.orgs.create/list/delete`. Requires master key. */
+    readonly orgs: OrgClient;
+    /** Principal management — `sirr.principals.create/list/delete`. Requires master key. */
+    readonly principals: PrincipalClient;
     constructor(opts: SirrClientOptions);
+    private secretsPath;
+    private auditPath;
+    private webhooksPath;
+    private prunePath;
     private headers;
     private request;
     /** Check server health. Does not require authentication. */
@@ -82,49 +289,124 @@ export declare class SirrClient {
         status: string;
     }>;
     /**
-     * Push a secret to the vault.
+     * Push an anonymous secret (public dead-drop).
      *
-     * @param key   Secret key name
-     * @param value Secret value
-     * @param opts  TTL (seconds) and/or max read count
+     * No key is required. The server assigns a random 64-char hex ID.
+     * Share the returned `id` with the recipient — they use `get(id)` to retrieve it.
+     *
+     * @param value Secret value (max 1 MiB)
+     * @param opts  TTL and read limit
+     * @returns `{ id }` — the hex ID for retrieval
      */
-    push(key: string, value: string, opts?: PushOptions): Promise<void>;
+    push(value: string, opts?: PushOptions): Promise<PushResponse>;
     /**
-     * Retrieve a secret by key. Increments the read counter.
-     * Returns `null` if the secret does not exist or has expired/burned.
+     * Store a named secret in an org vault.
+     *
+     * Requires `org` in the client config or in `opts`.
+     * Throws `SecretExistsError` if the key already exists (HTTP 409).
+     *
+     * @param key   Secret key name (1-256 chars, alphanumeric + `-_.`)
+     * @param value Secret value (max 1 MiB)
+     * @param opts  TTL, read limit, webhook, allowed keys, and optional org override
+     * @returns `{ key }` — the stored key name
      */
-    get(key: string): Promise<string | null>;
+    set(key: string, value: string, opts?: SetOptions): Promise<SetResponse>;
+    /**
+     * Update a secret's value, TTL, or read limit in place.
+     * Returns the updated metadata, or `null` if the secret does not exist.
+     *
+     * Only works on secrets created with `burnOnRead: false`. Attempting to
+     * patch a burn-on-read secret returns `409 Conflict` (thrown as `SirrError`).
+     */
+    patch(key: string, opts: PatchOptions): Promise<SecretMeta | null>;
+    /**
+     * Retrieve a secret. Increments the read counter.
+     *
+     * - **Without org** (public): `id` is the 64-char hex returned by `push()`.
+     *   Routes to `GET /secrets/{id}`.
+     * - **With org** (named): `key` is the named key stored via `set()`.
+     *   Routes to `GET /orgs/{org}/secrets/{key}`.
+     *
+     * Returns `null` if the secret does not exist, has expired, has been
+     * burned, or is sealed.
+     */
+    get(idOrKey: string, opts?: {
+        org?: string;
+    }): Promise<string | null>;
     /** List metadata for all active secrets. Values are never returned. */
     list(): Promise<SecretMeta[]>;
-    /** Delete a secret immediately. Returns true if it existed. */
+    /** Delete a secret immediately. Returns `true` if it existed. */
     delete(key: string): Promise<boolean>;
     /**
-     * Retrieve all secrets and return them as a key→value map.
-     * Each GET increments the respective read counter.
+     * Inspect a secret's metadata without consuming a read counter (HEAD request).
+     * Returns `null` if the secret does not exist or has expired.
+     *
+     * Use this in AI agent workflows to verify a secret is still valid before
+     * fetching it and triggering an irreversible read.
+     */
+    check(key: string): Promise<SecretStatus | null>;
+    /**
+     * Retrieve all secrets and return them as a `key → value` map.
+     * Each `get()` call increments the respective read counter.
      */
     pullAll(): Promise<Record<string, string>>;
-    /** Trigger an immediate sweep of expired secrets on the server. */
-    prune(): Promise<number>;
     /**
-     * Inject all vault secrets as process.env variables, then invoke `fn`.
-     * Useful in test harnesses and scripts.
+     * Inject all vault secrets as `process.env` variables for the duration of
+     * `fn`, then restore the original values (even if `fn` throws).
+     *
+     * @example
+     * await sirr.withSecrets(async () => {
+     *   await execa('python', ['agent.py'])
+     * })
      */
     withSecrets<T>(fn: () => Promise<T>): Promise<T>;
-    /** Query the audit log. */
-    getAuditLog(opts?: AuditOptions): Promise<AuditEvent[]>;
-    /** Register a webhook. Returns the ID and signing secret. */
+    /** Trigger an immediate sweep of expired secrets on the server. Returns the pruned count. */
+    prune(): Promise<number>;
+    /**
+     * Query the audit log.
+     *
+     * @example
+     * const events = await sirr.audit({ action: 'secret.read', limit: 50 })
+     */
+    audit(opts?: AuditFilter): Promise<AuditEvent[]>;
+    /** @deprecated Use `audit()`. */
+    getAuditLog(opts?: AuditFilter): Promise<AuditEvent[]>;
+    /** Register a webhook. Returns the ID and signing secret (shown once). */
     createWebhook(url: string, opts?: {
         events?: string[];
     }): Promise<WebhookCreateResult>;
-    /** List registered webhooks. Signing secrets are redacted. */
+    /** List all registered webhooks. Signing secrets are redacted. */
     listWebhooks(): Promise<Webhook[]>;
-    /** Delete a webhook by ID. Returns false if not found. */
+    /** Delete a webhook by ID. Returns `false` if not found. */
     deleteWebhook(id: string): Promise<boolean>;
-    /** Create a scoped API key. The raw key is returned once. */
-    createApiKey(opts: CreateApiKeyOptions): Promise<ApiKeyCreateResult>;
-    /** List all scoped API keys. Key hashes are never returned. */
-    listApiKeys(): Promise<ApiKey[]>;
-    /** Delete an API key by ID. Returns false if not found. */
-    deleteApiKey(id: string): Promise<boolean>;
+    /** Get the current principal's profile, role, and key list. */
+    me(): Promise<MeResponse>;
+    /** Update the current principal's metadata. */
+    updateMe(opts: PatchMeOptions): Promise<Principal>;
+    /**
+     * Create a new API key for the current principal.
+     * The raw key is returned once — save it immediately.
+     */
+    createKey(opts: CreateKeyOptions): Promise<PrincipalKeyCreateResult>;
+    /** Revoke one of the current principal's keys. Returns `false` if not found. */
+    deleteKey(keyId: string): Promise<boolean>;
+    /** Create an org. Requires master key. */
+    createOrg(opts: CreateOrgOptions): Promise<Org>;
+    /** List all orgs. Requires master key. */
+    listOrgs(): Promise<Org[]>;
+    /** Delete an org by ID. Requires master key. */
+    deleteOrg(orgId: string): Promise<void>;
+    /** Create a principal within an org. Requires master key. */
+    createPrincipal(orgId: string, opts: CreatePrincipalOptions): Promise<Principal>;
+    /** List all principals in an org. Requires master key. */
+    listPrincipals(orgId: string): Promise<Principal[]>;
+    /** Delete a principal by ID. Requires master key. */
+    deletePrincipal(orgId: string, principalId: string): Promise<void>;
+    /** Create a custom role within an org. Requires master key. */
+    createRole(orgId: string, opts: CreateRoleOptions): Promise<Role>;
+    /** List all roles (built-in and custom) in an org. Requires master key. */
+    listRoles(orgId: string): Promise<Role[]>;
+    /** Delete a custom role by name. Requires master key. */
+    deleteRole(orgId: string, roleName: string): Promise<void>;
 }
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,iBAAiB;IAChC,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,sBAAsB;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gEAAgE;IAChE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,SAAU,SAAQ,KAAK;aAEhB,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM,EAC9B,OAAO,EAAE,MAAM;CAKlB;AAQD,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;gBAEnB,IAAI,EAAE,iBAAiB;IAQnC,OAAO,CAAC,OAAO;YAOD,OAAO;IA0BrB,4DAA4D;IACtD,MAAM,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAQ3C;;;;;;OAMG;IACG,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAU7E;;;OAGG;IACG,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAc9C,uEAAuE;IACjE,IAAI,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAKnC,+DAA+D;IACzD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAW3C;;;OAGG;IACG,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAYhD,mEAAmE;IAC7D,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAK9B;;;OAGG;IACG,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAiBtD,2BAA2B;IACrB,WAAW,CAAC,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAWjE,6DAA6D;IACvD,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAM5F,8DAA8D;IACxD,YAAY,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAKxC,0DAA0D;IACpD,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAUjD,6DAA6D;IACvD,YAAY,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAI1E,+DAA+D;IACzD,WAAW,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAKtC,2DAA2D;IACrD,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CASjD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,WAAW,iBAAiB;IAChC,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAID,yDAAyD;AACzD,MAAM,WAAW,WAAW;IAC1B,uDAAuD;IACvD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,iDAAiD;IACjD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qDAAqD;AACrD,MAAM,WAAW,UAAU;IACzB,uDAAuD;IACvD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,gCAAgC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,8BAA8B;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,2EAA2E;IAC3E,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,GAAG,WAAW,CAAC;IACrC,uDAAuD;IACvD,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAID,2DAA2D;AAC3D,MAAM,WAAW,YAAY;IAC3B,qEAAqE;IACrE,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,uDAAuD;AACvD,MAAM,WAAW,WAAW;IAC1B,iDAAiD;IACjD,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,uEAAuE;IACvE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,+CAA+C;AAC/C,MAAM,WAAW,WAAW;IAC1B,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sDAAsD;IACtD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qCAAqC;AACrC,MAAM,MAAM,YAAY,GAAG,WAAW,CAAC;AAEvC,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;CAChB;AAID,MAAM,WAAW,GAAG;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,IAAI;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,YAAY,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACtB;AAID,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb;;;;;;;;;;;;;;;;;;OAkBG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,iEAAiE;IACjE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAID,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAChF,kEAAkE;IAClE,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3B,0DAA0D;IAC1D,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,SAAS;IACxB,sDAAsD;IACtD,MAAM,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7C,mDAAmD;IACnD,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACvB,yDAAyD;IACzD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,eAAe;IAC9B,6DAA6D;IAC7D,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACxE,0DAA0D;IAC1D,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAC1C,qDAAqD;IACrD,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3D;AAID,qBAAa,SAAU,SAAQ,KAAK;aAEhB,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM,EAC9B,OAAO,EAAE,MAAM;CAKlB;AAED;;;GAGG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,GAAG,EAAE,MAAM;CAIxB;AAYD,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAS;IAE9B,+DAA+D;IAC/D,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IAEjC,qFAAqF;IACrF,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAEzB,wFAAwF;IACxF,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;gBAEzB,IAAI,EAAE,iBAAiB;IA6BnC,OAAO,CAAC,WAAW;IAKnB,OAAO,CAAC,SAAS;IAIjB,OAAO,CAAC,YAAY;IAKpB,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,OAAO;YAOD,OAAO;IA4BrB,4DAA4D;IACtD,MAAM,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAU3C;;;;;;;;;OASG;IACG,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,YAAY,CAAC;IASxE;;;;;;;;;;OAUG;IACG,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,UAAe,GAAG,OAAO,CAAC,WAAW,CAAC;IA6BlF;;;;;;OAMG;IACG,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAcxE;;;;;;;;;;OAUG;IACG,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAiB3E,uEAAuE;IACjE,IAAI,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAKnC,iEAAiE;IAC3D,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAW3C;;;;;;OAMG;IACG,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IA4BtD;;;OAGG;IACG,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAYhD;;;;;;;;OAQG;IACG,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAiBtD,6FAA6F;IACvF,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAO9B;;;;;OAKG;IACG,KAAK,CAAC,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAe1D,iCAAiC;IAC3B,WAAW,CAAC,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAOhE,0EAA0E;IACpE,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAM5F,kEAAkE;IAC5D,YAAY,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAKxC,4DAA4D;IACtD,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAYjD,+DAA+D;IACzD,EAAE,IAAI,OAAO,CAAC,UAAU,CAAC;IAI/B,+CAA+C;IACzC,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC;IAIxD;;;OAGG;IACG,SAAS,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAI1E,gFAAgF;IAC1E,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAahD,0CAA0C;IACpC,SAAS,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC;IAIrD,0CAA0C;IACpC,QAAQ,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAKhC,gDAAgD;IAC1C,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7C,6DAA6D;IACvD,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,SAAS,CAAC;IAItF,0DAA0D;IACpD,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;IAQzD,qDAAqD;IAC/C,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOxE,+DAA+D;IACzD,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvE,2EAA2E;IACrE,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAQ/C,yDAAyD;IACnD,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAMjE"}