@syndroo/sdk 0.4.0-rc.1 → 0.7.0

package/README.md

@@ -1,172 +1,119 @@
 # @syndroo/sdk
 
-A thin TypeScript HTTP client for one deployed
-[Syndroo](https://github.com/Syndroo/syndroo) instance.
+A thin TypeScript HTTP client for one deployed [Syndroo](https://github.com/Syndroo/syndroo)
+instance.
 
-The SDK wraps the documented `/v1` HTTP contract and adds no server behavior. It
-has no runtime dependencies, ships no bundler or platform SDK, and never
-reconciles your data on its own.
+The SDK wraps the documented HTTP contract — `connect`, `publish` and `status` —
+and adds no server behaviour. It imports no `@syndroo/core` and no provider code,
+at build time or at runtime, and it never reconciles your data on its own.
 
 ```text
-your app / CLI / CI  ->  @syndroo/sdk  ->  Syndroo HTTP API  ->  Worker
+your app / CI  ->  @syndroo/sdk  ->  Syndroo HTTP API  ->  server or Worker
 ```
 
 ## Requirements
 
-Node.js 22 or newer. The client uses the runtime's global `fetch`, `AbortSignal`,
-and Web Streams; there is no polyfill and no dependency to install.
+Node.js 24.19.0 or newer, or any runtime with a global `fetch`, `AbortSignal` and
+Web Streams. There is no polyfill and no runtime dependency to install.
 
 ```bash
 npm install @syndroo/sdk
 ```
 
+The server must be reachable over HTTPS. Plain HTTP is accepted only for a
+loopback host, because the client sends a Bearer secret on every call.
+
 ## Quickstart
 
 ```ts
-import { SyndrooClient } from "@syndroo/sdk";
+import { Syndroo } from "@syndroo/sdk";
 
-const syndroo = new SyndrooClient({
-  baseUrl: process.env.SYNDROO_BASE_URL!,
+const syndroo = new Syndroo({
+  baseUrl: "https://syndroo.example",
   apiKey: process.env.SYNDROO_API_KEY!,
 });
 
-const receipt = await syndroo.posts.create(
-  {
-    content: "We just shipped a new release.",
-    platforms: ["bluesky"],
-  },
-  { idempotencyKey: "release-announcement-001" },
-);
+// prepare freezes the content and the target list and returns an approval token.
+const prepared = await syndroo.publish({
+  type: "prepare",
+  content: { text: "hello from the SDK" },
+  targets: [{ provider: "bluesky" }],
+});
 
-const post = await syndroo.posts.get(receipt.id);
+if (prepared.status === "confirmation_required") {
+  // execute only against the token that the prepare step issued.
+  const round = await syndroo.publish({
+    type: "execute",
+    approvalToken: prepared.approvalToken,
+  });
+  console.log(round.status, round.deliveries.map(delivery => delivery.outcome?.status ?? "pending"));
+}
 ```
 
-## Two boundaries
+`connect` follows the same shape: `start` and `resume` return whichever step the
+provider asks for (`credential_input`, `open_url`, `wait_for_callback`, or a
+`done` connection), while `update` and `disconnect` always end in a bound
+connection and fail the call if they do not.
 
-**A create receipt is not a delivery.** `posts.create` returns an acceptance
-result. HTTP `202` means the request was accepted for processing, and `queued`
-means "waiting for a publication job". Nothing has reached a platform yet. Read
-the post back and check each publication before telling a user that a post is
-live:
+## API
 
 ```ts
-const post = await syndroo.posts.wait(receipt.id, { timeoutMs: 60_000 });
-
-if (post.status === "published") {
-  // Every selected platform confirmed.
-} else if (post.status === "partial") {
-  // Some platforms confirmed; inspect each publication and do not resend the
-  // successful ones.
-} else {
-  // failed: read errorCode, errorMessage, and errorAmbiguous per publication.
-}
+syndroo.connect(request, options?)   // start | resume | update | disconnect
+syndroo.publish(request, options?)   // prepare | execute | retry
+syndroo.status(request, options?)    // overview | provider | connections | operation | operations
+syndroo.wait(operationId, options?)  // poll one operation until its round completes
 ```
 
-A `failed` publication with `errorAmbiguous: true` may still have been accepted
-by the platform. Check the platform account by hand; do not resend that content
-automatically.
+Every call validates its argument against the wire schema before it sends
+anything, refuses a redirect instead of following it, bounds the response it
+will buffer, and rejects a response that does not answer the request it was
+given.
 
-**The API key belongs in a trusted environment.** Keep it in a server, CLI, or
-CI credential store. Do not put it in a static page, a browser bundle, or a
-`NEXT_PUBLIC_*` variable: `SYNDROO_API_KEY` can publish, and anyone who reads the
-page can use it. Platform credentials stay in the Worker's secrets and are never
-part of this client. The unauthenticated `/health` call is the only request that
-sends no `Authorization` header.
+### Transport options
 
-## API
+| Option | Default | Meaning |
+| --- | --- | --- |
+| `idempotencyKey` | generated where the protocol requires request identity | Stable identity of one logical call, reused by every transport retry. Supply it to recover the same operation across processes. |
+| `timeoutMs` | `30000` | Per-request deadline, up to `120000`. |
+| `transportRetries` | `0` | Transport retries, `0`–`2`. Only a call that never reached the server is retried. |
+| `signal` | – | Cancels the local call. It never cancels work the server already admitted. |
 
-### `new SyndrooClient(options)`
+`SyndrooOptions` also accepts `fetch` and `sleep`, so a host can supply its own
+transport and timer. `LIMITS` and `WAIT_LIMITS` export every bound above.
 
-| Option | Default | Meaning |
-|---|---|---|
-| `baseUrl` | required | Origin of the instance, for example `https://syndroo.example.com`. `https` is required outside loopback; `http` is accepted for `localhost` and `127.0.0.1`, or anywhere with `allowInsecureHttp: true`. |
-| `apiKey` | required | Instance API key, sent as a Bearer token. |
-| `timeoutMs` | `30000` | Per-request deadline. |
-| `waitTimeoutMs` | `60000` | Default total deadline for `posts.wait`. |
-| `maxResponseBytes` | `8388608` | Response size limit. |
-| `allowInsecureHttp` | `false` | Permit plaintext `http://` for a non-loopback host. |
-
-Configuration problems throw `SyndrooConfigError` from the constructor, before
-any request is made.
-
-### Methods
-
-| Call | HTTP | Notes |
-|---|---|---|
-| `syndroo.health()` | `GET /health` | Unauthenticated reachability check. Proves the URL answers, not that the key or the platform credentials work. |
-| `syndroo.posts.create(input, options?)` | `POST /v1/posts` | One request, never retried. `options.idempotencyKey` makes a retry safe. |
-| `syndroo.posts.get(id, options?)` | `GET /v1/posts/<id>` | Read-only; safe to repeat. |
-| `syndroo.posts.list({ limit }, options?)` | `GET /v1/posts` | `limit` is 1-100. |
-| `syndroo.posts.wait(id, options?)` | repeated `GET /v1/posts/<id>` | Reads until `published`, `partial`, or `failed`, or until `timeoutMs`. |
-
-`create` accepts `content`, `platforms`, optional per-platform `overrides`, and
-an optional `scheduledAt`. The client validates the structure and sends your
-object unchanged; it does not rewrite, trim, or truncate content.
-Platform-specific length limits are enforced by the server and surface as typed
-errors or as publication failures.
-
-`wait` options: `timeoutMs` (total budget), `pollIntervalMs` (default `250`),
-`maxPollIntervalMs` (default `2000`), and `signal`. Reading never creates,
-cancels, or resends anything, so a wait timeout leaves the server-side work
-running; `SyndrooWaitTimeoutError` keeps `postId`, `lastStatus`, `lastPost`, and
-`lastError` so you can resume instead of starting over.
-
-`scheduledAt` is submitted to the server, so a scheduled post does not depend on
-this process staying alive.
+### Wait
+
+`syndroo.wait(operationId, options?)` polls `status({ type: "operation" })` until
+the execution round reaches a terminal state. The default interval is `2000 ms`
+(`250`–`30000`) and the default deadline is `120000 ms`, up to `3600000`. It
+reads status only: it never refreshes a provider token, never retries a write,
+and never asks a platform what happened.
 
 ## Errors
 
-Every failure is a `SyndrooError`. Use `isSyndrooError()` to narrow, or the
-exported classes:
-
-| Class | Raised when |
-|---|---|
-| `SyndrooConfigError` | The client configuration is unusable. No request is made. |
-| `SyndrooValidationError` | An argument cannot become a valid request. No request is made. |
-| `SyndrooApiError` | Syndroo answered with a documented error envelope. Carries `status`, `code`, `retryAfterMs`, and `retryable`. |
-| `SyndrooResponseError` | The answer was not the documented JSON contract: not JSON, missing fields, or over the size limit. |
-| `SyndrooAbortError` | You aborted through an `AbortSignal`. |
-| `SyndrooTimeoutError` | The deadline elapsed before the response was received. |
-| `SyndrooNetworkError` | No HTTP response arrived; `networkCode` carries codes such as `ECONNREFUSED`. |
-| `SyndrooWaitTimeoutError` | `posts.wait` hit its deadline before a terminal status. |
-
-Server codes such as `UNAUTHORIZED` (401), `POST_NOT_FOUND` (404),
-`IDEMPOTENCY_CONFLICT` (409), `PLATFORM_NOT_CONFIGURED` (422), and
-`SERVICE_UNAVAILABLE` (503) appear on `SyndrooApiError.code`.
-
-`requestMayHaveBeenApplied` is the flag that decides whether a resend is safe. It
-is `true` when a write may already have reached Syndroo: a timeout, an abort, a
-network failure, or a 5xx after a `POST`. A 4xx is a decision, so it is `false`.
-When it is `true`, look the post up with `posts.list` or repeat the identical
-request with the same `Idempotency-Key` — never with a new key and never with
-different content.
-
-## Timeouts, aborts, and retries
-
-- The SDK performs exactly one HTTP request per call. It never retries a write.
-  A silent retry without a stable idempotency key can duplicate a post.
-- A timed-out `POST` is reported as an unknown outcome, not as "not created".
-- `AbortSignal` is supported on every method; aborting a read is always safe.
-- API errors carry no retry attempt, only `retryable` and `retryAfterMs`, so your
-  own policy decides.
-- `posts.wait` absorbs transient failures (network errors, timeouts, 5xx, 429)
-  with bounded exponential backoff, honours `Retry-After`, and stops at the
-  first authentication, validation, or "not found" answer instead of polling.
-
-## Redirects
-
-The client never follows redirects. A `3xx` answer becomes a `SyndrooApiError`
-with code `REDIRECT_NOT_FOLLOWED`, so the `Authorization` header can never be
-forwarded to another host. Point `baseUrl` at the final API origin, for example
-the `https://...workers.dev` URL of the deployment.
-
-## Not in this version
-
-The SDK is deliberately small. There is no preview, approval, retry, or cancel
-endpoint, no dashboard, no media upload, and no OAuth handling, because the
-server does not offer those operations yet. Direct HTTP remains the fallback for
-anything this client does not cover.
-
-## License
-
-Apache-2.0. See `LICENSE` and `NOTICE`.
+Every failure is a `SyndrooError` with a fixed `code` and a message that is never
+interpolated from your input or from a response body. Use `isSyndrooError` to
+narrow an unknown value. The codes are `INVALID_ARGUMENT`, `INSECURE_BASE_URL`,
+`INVALID_REQUEST`, `INVALID_RESPONSE`, `RESPONSE_TOO_LARGE`,
+`REDIRECT_NOT_ALLOWED`, `TRANSPORT`, `HTTP_ERROR`, `PROTOCOL`, `TIMEOUT`,
+`ABORTED`, `WAIT_TIMEOUT`, `CONFIRMATION_REQUIRED` and `CONFIRMATION_EXPIRED`.
+
+A protocol rejection carries the server's `{ error: { code, message } }`
+projection as a `SafeError`, so a caller can branch on `error.code` without
+parsing English. Nothing in an error can contain a credential: secrets are never
+placed in a URL, a log line or a thrown message.
+
+## What the SDK does not do
+
+- It does not execute anything locally and has no filesystem or state of its
+  own; local execution is the CLI's job, and both surfaces call the same Core.
+- It does not approve a write. A prepare result is a token, and a token is not
+  proof that a human read anything.
+- It does not make publishing synchronous. A `202`-class answer means the
+  execution was durably admitted, never that a platform accepted the content.
+
+## Status
+
+The `0.7.0` release train is prepared but not claimed available until its public
+registry installation succeeds. The SDK is fixture-tested against the wire
+protocol; no live platform call has been made from this repository.

package/dist/client.d.ts

@@ -1,109 +1,37 @@
 /**
- * `SyndrooClient` — a thin, dependency-free client for the Syndroo HTTP API.
+ * `Syndroo` — the public HTTP client of `@syndroo/sdk`.
  *
- * The client wraps the documented `/v1` contract. It deliberately does not add
- * server features: it creates, reads, lists, and waits, and it never invents a
- * delivery result that the server did not report.
- */
-import { type TransportConfig } from "./http.js";
-import { type CreatePostInput, type HealthStatus, type PostDetail, type PostReceipt, type PostSummary } from "./types.js";
-export declare const DEFAULT_WAIT_TIMEOUT_MS = 60000;
-export declare const DEFAULT_POLL_INTERVAL_MS = 250;
-export declare const DEFAULT_MAX_POLL_INTERVAL_MS = 2000;
-export interface SyndrooClientOptions {
-    /** Origin of a deployed Syndroo instance, for example `https://syndroo.example.com`. */
-    baseUrl: string;
-    /**
-     * The instance API key. Keep it in a server, CLI, or CI credential store;
-     * never in a static page or a `NEXT_PUBLIC_*` variable.
-     */
-    apiKey: string;
-    /** Per-request deadline. Defaults to 30000ms. */
-    timeoutMs?: number | undefined;
-    /** Total deadline for `posts.wait`. Defaults to 60000ms. */
-    waitTimeoutMs?: number | undefined;
-    /** Maximum accepted response size in bytes. Defaults to 8 MiB. */
-    maxResponseBytes?: number | undefined;
-    /** Allow plaintext `http://` for a non-loopback host. Off by default. */
-    allowInsecureHttp?: boolean | undefined;
-}
-export interface RequestOptions {
-    signal?: AbortSignal | undefined;
-    /** Per-request deadline in milliseconds. */
-    timeoutMs?: number | undefined;
-}
-export interface CreatePostOptions extends RequestOptions {
-    /**
-     * Stable key for one logical post. Reuse the same key when retrying the same
-     * request; Syndroo replays the original result, and different content under
-     * the same key is rejected with HTTP 409.
-     */
-    idempotencyKey?: string | undefined;
-}
-export interface ListPostsOptions extends RequestOptions {
-    /** 1-100, defaults to the server default. */
-    limit?: number | undefined;
-}
-export interface WaitOptions extends RequestOptions {
-    /** Total wait budget in milliseconds, not a per-request timeout. */
-    timeoutMs?: number | undefined;
-    /** First interval between status reads. Defaults to 250ms. */
-    pollIntervalMs?: number | undefined;
-    /** Upper bound for the backoff. Defaults to 2000ms. */
-    maxPollIntervalMs?: number | undefined;
-}
-/**
- * Client for one Syndroo instance.
+ * The client is a thin wrapper over the three `/v1` protocol operations plus a
+ * status-only `wait`. It mirrors the Core request/result generics from the
+ * shared blueprint, adds no server features, and never invents a result the
+ * server did not report.
  *
- * ```ts
- * const syndroo = new SyndrooClient({
- *   baseUrl: process.env.SYNDROO_BASE_URL!,
- *   apiKey: process.env.SYNDROO_API_KEY!,
- * });
+ * What the client deliberately does not do:
  *
- * const receipt = await syndroo.posts.create(
- *   { content: "We just shipped a new release.", platforms: ["bluesky"] },
- *   { idempotencyKey: "release-announcement-001" },
- * );
- *
- * const post = await syndroo.posts.get(receipt.id);
- * ```
+ * - it never approves, confirms or resumes anything on its own;
+ * - it never retries a business result (`failed`, `partial`, `unknown` are
+ *   protocol successes);
+ * - it never decides whether a caller-supplied idempotency key is "the same
+ *   intent" across two separate calls.
  */
-export declare class SyndrooClient {
-    #private;
-    readonly posts: PostsResource;
-    constructor(options: SyndrooClientOptions);
-    /**
-     * `GET /health`. Syndroo's health endpoint is unauthenticated, so the client
-     * sends no Authorization header here. It proves reachability, not that the
-     * API key is correct or that the deployment can publish.
-     */
-    health(options?: RequestOptions): Promise<HealthStatus>;
-}
-/** The posts resource: create, read, list, and bounded status wait. */
-export declare class PostsResource {
-    #private;
-    constructor(config: TransportConfig, defaultWaitTimeoutMs: number);
-    /**
-     * `POST /v1/posts`. The returned receipt is an acceptance result: HTTP 202
-     * means the request is queued for processing, not that any platform
-     * published it. The SDK performs exactly one request and never retries it.
-     */
-    create(input: CreatePostInput, options?: CreatePostOptions): Promise<PostReceipt>;
-    /** `GET /v1/posts/<id>`. Read-only, so repeating it is safe. */
-    get(id: string, options?: RequestOptions): Promise<PostDetail>;
-    /** `GET /v1/posts`, newest first. */
-    list(options?: ListPostsOptions): Promise<PostSummary[]>;
-    /**
-     * Reads the post until it reaches a terminal status (`published`, `partial`,
-     * or `failed`) or the wait budget runs out.
-     *
-     * Waiting is read-only: it never creates, cancels, or resends a post, so a
-     * timeout leaves the server-side work running and only stops this client from
-     * waiting. On timeout it throws `SyndrooWaitTimeoutError`, which keeps the
-     * post id, the last status, and the last transient error so a caller can
-     * resume instead of starting over.
-     */
-    wait(id: string, options?: WaitOptions): Promise<PostDetail>;
+import type { ConnectRequest, ConnectResult, DoneConnectResult, DoneConnectRequest, ExecuteRequest, ExecutionResult, PrepareOrRetryRequest, PublishRequest, PublishResult, RequestOptions, StatusRequest, StatusResultFor, SyndrooOptions, WaitOptions } from "./types.js";
+export declare class Syndroo {
+    private readonly transport;
+    private readonly sleep;
+    constructor(options: SyndrooOptions);
+    /** Update/disconnect always end in a bound connection. */
+    connect(request: DoneConnectRequest, options?: RequestOptions): Promise<DoneConnectResult>;
+    /** Start/resume return whichever connect step the server reports, `start` included. */
+    connect(request: ConnectRequest, options?: RequestOptions): Promise<ConnectResult>;
+    /** `execute` always reports an execution round. */
+    publish(request: ExecuteRequest, options?: RequestOptions): Promise<ExecutionResult>;
+    /** `prepare`/`retry` may replay an already admitted execution. */
+    publish(request: PrepareOrRetryRequest, options?: RequestOptions): Promise<PublishResult>;
+    publish(request: PublishRequest, options?: RequestOptions): Promise<PublishResult>;
+    /** Return the exact result type of the query that was asked for. */
+    status<T extends StatusRequest>(request: T, options?: RequestOptions): Promise<StatusResultFor<T>>;
+    /** Poll `status({ type: "operation" })` until the execution round completes. */
+    wait(operationId: string, options?: WaitOptions): Promise<ExecutionResult>;
+    private call;
 }
 //# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAUH,OAAO,EAML,KAAK,eAAe,EACrB,MAAM,WAAW,CAAC;AACnB,OAAO,EAML,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,UAAU,EAEf,KAAK,WAAW,EAChB,KAAK,WAAW,EACjB,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAC9C,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAC5C,eAAO,MAAM,4BAA4B,OAAQ,CAAC;AAIlD,MAAM,WAAW,oBAAoB;IACnC,wFAAwF;IACxF,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,4DAA4D;IAC5D,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,kEAAkE;IAClE,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,yEAAyE;IACzE,iBAAiB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACzC;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IACjC,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAED,MAAM,WAAW,iBAAkB,SAAQ,cAAc;IACvD;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED,MAAM,WAAW,gBAAiB,SAAQ,cAAc;IACtD,6CAA6C;IAC7C,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED,MAAM,WAAW,WAAY,SAAQ,cAAc;IACjD,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,8DAA8D;IAC9D,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,uDAAuD;IACvD,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,aAAa;;IACxB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAI9B,YAAY,OAAO,EAAE,oBAAoB,EAYxC;IAED;;;;OAIG;IACG,MAAM,CAAC,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,YAAY,CAAC,CAUhE;CACF;AAED,uEAAuE;AACvE,qBAAa,aAAa;;IAIxB,YAAY,MAAM,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,EAGhE;IAED;;;;OAIG;IACG,MAAM,CACV,KAAK,EAAE,eAAe,EACtB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,WAAW,CAAC,CAmBtB;IAED,gEAAgE;IAC1D,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,UAAU,CAAC,CAUvE;IAED,qCAAqC;IAC/B,IAAI,CAAC,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAYjE;IAED;;;;;;;;;OASG;IACG,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CAgErE;CACF"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAQH,OAAO,KAAK,EACV,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,eAAe,EAEf,qBAAqB,EACrB,cAAc,EACd,aAAa,EACb,cAAc,EAEd,aAAa,EACb,eAAe,EACf,cAAc,EACd,WAAW,EACZ,MAAM,YAAY,CAAC;AAEpB,qBAAa,OAAO;IAClB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgB;IAC1C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAY;IAElC,YAAY,OAAO,EAAE,cAAc,EAkBlC;IAED,0DAA0D;IACpD,OAAO,CAAC,OAAO,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjG,uFAAuF;IACjF,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IASzF,mDAAmD;IAC7C,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC3F,kEAAkE;IAC5D,OAAO,CAAC,OAAO,EAAE,qBAAqB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1F,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IASzF,oEAAoE;IAC9D,MAAM,CAAC,CAAC,SAAS,aAAa,EAClC,OAAO,EAAE,CAAC,EACV,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAQ7B;IAED,gFAAgF;IAC1E,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,GAAE,WAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAenF;YAEa,IAAI;CAmBnB"}