@tai42/api-client 16.0.0 → 16.0.1

package/dist/client/trigger-links-client.js

@@ -0,0 +1,30 @@
+/** Trigger-link mint, listing and revoke sub-client. */
+import * as s from '../schemas';
+import { encodeSegment } from '../http';
+export function triggerLinksClient(t) {
+    const { req } = t;
+    return {
+        // Mint a trigger link for a topic. `ttl_seconds` is sent EXPLICITLY
+        // (including `null` for a permanent link) — the server requires the key present
+        // and 400s a dropped one; `tool_kwargs` is omitted when undefined. The raw
+        // `token` rides the response ONCE (composed into the QR URL client-side).
+        createTriggerLink: (body) => req('/api/hooks/trigger-links', s.triggerLinkCreated, {
+            method: 'POST',
+            body: {
+                topic: body.topic,
+                name: body.name,
+                execution_key: body.execution_key,
+                require_api_key: body.require_api_key,
+                ttl_seconds: body.ttl_seconds,
+                tool_kwargs: body.tool_kwargs,
+            },
+        }),
+        // Every live trigger-link record (hash prefix only — never a raw token).
+        listTriggerLinks: (signal) => req('/api/hooks/trigger-links', s.triggerLinkList, { signal }),
+        // Revoke a link by name (immediate + durable). 404 when the name is unknown.
+        deleteTriggerLink: (name) => req(`/api/hooks/trigger-links/${encodeSegment(name)}`, s.triggerLinkDeleted, {
+            method: 'DELETE',
+        }),
+    };
+}
+//# sourceMappingURL=trigger-links-client.js.map

package/dist/client/trigger-links-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trigger-links-client.js","sourceRoot":"","sources":["../../src/client/trigger-links-client.ts"],"names":[],"mappings":"AAAA,wDAAwD;AACxD,OAAO,KAAK,CAAC,MAAM,YAAY,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAoBxC,MAAM,UAAU,kBAAkB,CAAC,CAAY;IAC7C,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAClB,OAAO;QACL,oEAAoE;QACpE,gFAAgF;QAChF,2EAA2E;QAC3E,0EAA0E;QAC1E,iBAAiB,EAAE,CAAC,IAA2B,EAAE,EAAE,CACjD,GAAG,CAAC,0BAA0B,EAAE,CAAC,CAAC,kBAAkB,EAAE;YACpD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE;gBACJ,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B;SACF,CAAC;QACJ,yEAAyE;QACzE,gBAAgB,EAAE,CAAC,MAAoB,EAAE,EAAE,CACzC,GAAG,CAAC,0BAA0B,EAAE,CAAC,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,CAAC;QAChE,6EAA6E;QAC7E,iBAAiB,EAAE,CAAC,IAAY,EAAE,EAAE,CAClC,GAAG,CAAC,4BAA4B,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,EAAE;YAC3E,MAAM,EAAE,QAAQ;SACjB,CAAC;KACL,CAAC;AACJ,CAAC"}

package/dist/client/web-entry-gate-client.d.ts

@@ -0,0 +1,34 @@
+import type { Transport } from './transport';
+/**
+ * Body for minting a web entry code (POST
+ * `/api/channels/web/gates/{identity}/codes`). Both fields are optional-nullable
+ * and sent EXPLICITLY: `label` is a human tag (`null` for none); `expires_at` is
+ * an ISO-8601 instant the code dies at (`null` for a code that never expires).
+ */
+export interface WebEntryCodeMintBody {
+    readonly label: string | null;
+    readonly expires_at: string | null;
+}
+export declare function webEntryGateClient(t: Transport): {
+    getWebEntryGate: (identity: string, signal?: AbortSignal) => Promise<{
+        enabled: boolean;
+        codes: {
+            code_id: string;
+            label: string | null;
+            created_at: string;
+            expires_at: string | null;
+        }[];
+    }>;
+    setWebEntryGate: (identity: string, enabled: boolean) => Promise<{
+        enabled: boolean;
+    }>;
+    mintWebEntryCode: (identity: string, body: WebEntryCodeMintBody) => Promise<{
+        code: string;
+        code_id: string;
+        expires_at: string | null;
+    }>;
+    revokeWebEntryCode: (identity: string, codeId: string) => Promise<{
+        status: "revoked";
+    }>;
+};
+//# sourceMappingURL=web-entry-gate-client.d.ts.map

package/dist/client/web-entry-gate-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-entry-gate-client.d.ts","sourceRoot":"","sources":["../../src/client/web-entry-gate-client.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,SAAS;gCAMf,MAAM,WAAW,WAAW;;;;;;;;;gCAE5B,MAAM,WAAW,OAAO;;;iCAOvB,MAAM,QAAQ,oBAAoB;;;;;mCAMhC,MAAM,UAAU,MAAM;;;EAOxD"}

package/dist/client/web-entry-gate-client.js

@@ -0,0 +1,25 @@
+/** Web-channel entry-gate sub-client. */
+import * as s from '../schemas';
+import { encodeSegment } from '../http';
+export function webEntryGateClient(t) {
+    const { req } = t;
+    return {
+        // A web route's entry gate, keyed by its `our_identity`: read the flag + its
+        // live codes, flip the flag, mint a code (raw returned ONCE), revoke a code by
+        // its hash id. The conversation monitor's first route mutations.
+        getWebEntryGate: (identity, signal) => req(`/api/channels/web/gates/${encodeSegment(identity)}`, s.webEntryGate, { signal }),
+        setWebEntryGate: (identity, enabled) => req(`/api/channels/web/gates/${encodeSegment(identity)}`, s.webEntryGateState, {
+            method: 'PUT',
+            body: { enabled },
+        }),
+        // Mint a code. `label`/`expires_at` are sent EXPLICITLY (including `null`). The
+        // raw `code` rides the reply ONCE (composed into the chat URL client-side).
+        mintWebEntryCode: (identity, body) => req(`/api/channels/web/gates/${encodeSegment(identity)}/codes`, s.webEntryCodeMinted, {
+            method: 'POST',
+            body: { label: body.label, expires_at: body.expires_at },
+        }),
+        // Revoke a code by its hash id (immediate + durable). 404 when the id is unknown.
+        revokeWebEntryCode: (identity, codeId) => req(`/api/channels/web/gates/${encodeSegment(identity)}/codes/${encodeSegment(codeId)}`, s.webEntryCodeRevoked, { method: 'DELETE' }),
+    };
+}
+//# sourceMappingURL=web-entry-gate-client.js.map

package/dist/client/web-entry-gate-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-entry-gate-client.js","sourceRoot":"","sources":["../../src/client/web-entry-gate-client.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,OAAO,KAAK,CAAC,MAAM,YAAY,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAcxC,MAAM,UAAU,kBAAkB,CAAC,CAAY;IAC7C,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAClB,OAAO;QACL,6EAA6E;QAC7E,+EAA+E;QAC/E,iEAAiE;QACjE,eAAe,EAAE,CAAC,QAAgB,EAAE,MAAoB,EAAE,EAAE,CAC1D,GAAG,CAAC,2BAA2B,aAAa,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,CAAC;QACvF,eAAe,EAAE,CAAC,QAAgB,EAAE,OAAgB,EAAE,EAAE,CACtD,GAAG,CAAC,2BAA2B,aAAa,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,iBAAiB,EAAE;YAC7E,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,EAAE,OAAO,EAAE;SAClB,CAAC;QACJ,gFAAgF;QAChF,4EAA4E;QAC5E,gBAAgB,EAAE,CAAC,QAAgB,EAAE,IAA0B,EAAE,EAAE,CACjE,GAAG,CAAC,2BAA2B,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,kBAAkB,EAAE;YACpF,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;SACzD,CAAC;QACJ,kFAAkF;QAClF,kBAAkB,EAAE,CAAC,QAAgB,EAAE,MAAc,EAAE,EAAE,CACvD,GAAG,CACD,2BAA2B,aAAa,CAAC,QAAQ,CAAC,UAAU,aAAa,CAAC,MAAM,CAAC,EAAE,EACnF,CAAC,CAAC,mBAAmB,EACrB,EAAE,MAAM,EAAE,QAAQ,EAAE,CACrB;KACJ,CAAC;AACJ,CAAC"}

package/dist/http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAI7B,oFAAoF;AACpF,MAAM,WAAW,SAAS;IACxB,iFAAiF;IACjF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,yEAAyE;IACzE,QAAQ,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAC9B,wEAAwE;IACxE,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IAGxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAID;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE5D;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAQ5D;AA+BD,wBAAsB,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAClD,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,CAAC,EACT,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAgDrB;AAED;;;GAGG;AACH,wBAAsB,OAAO,CAC3B,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,MAAM,CAAC,CAejB;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAiBf;AAMD,sFAAsF;AACtF,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG;IAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAOjG"}
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAI7B,oFAAoF;AACpF,MAAM,WAAW,SAAS;IACxB,iFAAiF;IACjF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,yEAAyE;IACzE,QAAQ,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAC9B,wEAAwE;IACxE,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IAGxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAID;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE5D;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAQ5D;AAmFD,wBAAsB,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAClD,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,CAAC,EACT,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAoBrB;AAED;;;GAGG;AACH,wBAAsB,OAAO,CAC3B,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,MAAM,CAAC,CAejB;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAiBf;AAMD,sFAAsF;AACtF,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG;IAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAOjG"}

package/dist/http.js

@@ -59,23 +59,14 @@ function retryAfterSeconds(header) {
     const seconds = Number(header.trim());
     return Number.isFinite(seconds) && seconds >= 0 ? seconds : undefined;
 }
-export async function apiRequest(config, path, schema, options = {}) {
-    const doFetch = config.fetch ?? globalThis.fetch;
-    const token = config.getToken();
-    const headers = { ...JSON_HEADERS };
-    if (token)
-        headers['x-api-key'] = token;
-    const response = await doFetch(buildUrl(config.baseUrl ?? '', path, options.query), {
-        method: options.method ?? 'GET',
-        headers,
-        body: options.body === undefined ? undefined : JSON.stringify(options.body),
-        signal: options.signal,
-    });
-    if (response.status === 401)
-        throw new ApiUnauthorizedError();
-    // `Retry-After` rides on the error so a retrying caller waits the delay the server
-    // named (the gated routes' reloading 503 carries one) instead of guessing.
-    const retryAfter = retryAfterSeconds(response.headers.get('Retry-After'));
+/**
+ * Read the JSON body of a request response, applying the transport's error
+ * policy: a non-2xx status throws (a 409 as `ApiConflictError` carrying the
+ * parsed body, every other as `ApiError` with the server message/code and the
+ * named `Retry-After` delay), and a body that is not JSON throws `ApiSchemaError`
+ * on a 2xx or `ApiError` otherwise. Returns the parsed payload only for a 2xx.
+ */
+async function readJsonPayload(response, path, retryAfter) {
     let payload;
     try {
         payload = await response.json();
@@ -94,6 +85,11 @@ export async function apiRequest(config, path, schema, options = {}) {
             throw new ApiConflictError(text, payload);
         throw new ApiError(text, response.status, code, retryAfter, payload);
     }
+    return payload;
+}
+/** Unwrap the `{ data }` envelope and validate it against `schema`; a missing
+ *  envelope or a validation failure throws `ApiSchemaError`. */
+function validateEnvelope(schema, path, payload) {
     if (!isDataEnvelope(payload)) {
         throw new ApiSchemaError(path, 'response was not a { data } envelope');
     }
@@ -102,6 +98,26 @@ export async function apiRequest(config, path, schema, options = {}) {
         throw new ApiSchemaError(path, parsed.error.issues);
     return parsed.data;
 }
+export async function apiRequest(config, path, schema, options = {}) {
+    const doFetch = config.fetch ?? globalThis.fetch;
+    const token = config.getToken();
+    const headers = { ...JSON_HEADERS };
+    if (token)
+        headers['x-api-key'] = token;
+    const response = await doFetch(buildUrl(config.baseUrl ?? '', path, options.query), {
+        method: options.method ?? 'GET',
+        headers,
+        body: options.body === undefined ? undefined : JSON.stringify(options.body),
+        signal: options.signal,
+    });
+    if (response.status === 401)
+        throw new ApiUnauthorizedError();
+    // `Retry-After` rides on the error so a retrying caller waits the delay the server
+    // named (the gated routes' reloading 503 carries one) instead of guessing.
+    const retryAfter = retryAfterSeconds(response.headers.get('Retry-After'));
+    const payload = await readJsonPayload(response, path, retryAfter);
+    return validateEnvelope(schema, path, payload);
+}
 /**
  * Fetch a plain-text endpoint (the skeleton's `/health` → `"OK"`). No `{ data }`
  * envelope, no zod — the body is returned verbatim. Non-2xx still throws loudly.

package/dist/http.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAqB5F,MAAM,YAAY,GAAG,EAAE,cAAc,EAAE,kBAAkB,EAAW,CAAC;AAErE;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,OAAO,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAC1F,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,KAAsB;IAClD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,wEAAwE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAClG,CAAC;IACJ,CAAC;IACD,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,IAAY,EAAE,KAA+B;IAC3E,MAAM,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC;IACvB,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,OAAO,IAAI,KAAK;gBAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC3D,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH;4EAC4E;AAC5E,SAAS,iBAAiB,CAAC,MAAqB;IAC9C,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACtC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACtC,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACxE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAiB,EACjB,IAAY,EACZ,MAAS,EACT,UAA0B,EAAE;IAE5B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACjD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAChC,MAAM,OAAO,GAA2B,EAAE,GAAG,YAAY,EAAE,CAAC;IAC5D,IAAI,KAAK;QAAE,OAAO,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC;IAExC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;QAClF,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;QAC/B,OAAO;QACP,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;QAC3E,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,oBAAoB,EAAE,CAAC;IAE9D,mFAAmF;IACnF,2EAA2E;IAC3E,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IAE1E,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,cAAc,CAAC,IAAI,EAAE,6BAA6B,CAAC,CAAC;QAC/E,MAAM,IAAI,QAAQ,CAChB,QAAQ,CAAC,UAAU,IAAI,gBAAgB,EACvC,QAAQ,CAAC,MAAM,EACf,SAAS,EACT,UAAU,CACX,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,gBAAgB,CAAC,CAAC;QAClE,oFAAoF;QACpF,6EAA6E;QAC7E,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACvE,MAAM,IAAI,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,cAAc,CAAC,IAAI,EAAE,sCAAsC,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,MAAiB,EACjB,IAAY,EACZ,UAA0B,EAAE;IAE5B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACjD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAChC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,KAAK;QAAE,OAAO,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC;IAExC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;QAClF,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;QAC/B,OAAO;QACP,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,oBAAoB,EAAE,CAAC;IAC9D,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,IAAI,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/F,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAiB,EACjB,IAAY,EACZ,UAA0B,EAAE;IAE5B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACjD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAChC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;QAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACrE,IAAI,KAAK;QAAE,OAAO,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC;IAExC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;QAClF,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;QAC/B,OAAO;QACP,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;QAC3E,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,oBAAoB,EAAE,CAAC;IAC9D,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,IAAI,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChG,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,CAAC;AACxE,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,OAAO,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACzF,MAAM,IAAI,GAAG,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACxF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAC5C,CAAC"}
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAqB5F,MAAM,YAAY,GAAG,EAAE,cAAc,EAAE,kBAAkB,EAAW,CAAC;AAErE;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,OAAO,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAC1F,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,KAAsB;IAClD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,wEAAwE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAClG,CAAC;IACJ,CAAC;IACD,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,IAAY,EAAE,KAA+B;IAC3E,MAAM,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC;IACvB,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,OAAO,IAAI,KAAK;gBAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC3D,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH;4EAC4E;AAC5E,SAAS,iBAAiB,CAAC,MAAqB;IAC9C,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACtC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACtC,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACxE,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,eAAe,CAC5B,QAAkB,EAClB,IAAY,EACZ,UAA8B;IAE9B,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,cAAc,CAAC,IAAI,EAAE,6BAA6B,CAAC,CAAC;QAC/E,MAAM,IAAI,QAAQ,CAChB,QAAQ,CAAC,UAAU,IAAI,gBAAgB,EACvC,QAAQ,CAAC,MAAM,EACf,SAAS,EACT,UAAU,CACX,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,gBAAgB,CAAC,CAAC;QAClE,oFAAoF;QACpF,6EAA6E;QAC7E,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACvE,MAAM,IAAI,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACvE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;gEACgE;AAChE,SAAS,gBAAgB,CACvB,MAAS,EACT,IAAY,EACZ,OAAgB;IAEhB,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,cAAc,CAAC,IAAI,EAAE,sCAAsC,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAiB,EACjB,IAAY,EACZ,MAAS,EACT,UAA0B,EAAE;IAE5B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACjD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAChC,MAAM,OAAO,GAA2B,EAAE,GAAG,YAAY,EAAE,CAAC;IAC5D,IAAI,KAAK;QAAE,OAAO,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC;IAExC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;QAClF,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;QAC/B,OAAO;QACP,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;QAC3E,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,oBAAoB,EAAE,CAAC;IAE9D,mFAAmF;IACnF,2EAA2E;IAC3E,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IAClE,OAAO,gBAAgB,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,MAAiB,EACjB,IAAY,EACZ,UAA0B,EAAE;IAE5B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACjD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAChC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,KAAK;QAAE,OAAO,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC;IAExC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;QAClF,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;QAC/B,OAAO;QACP,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,oBAAoB,EAAE,CAAC;IAC9D,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,IAAI,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/F,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAiB,EACjB,IAAY,EACZ,UAA0B,EAAE;IAE5B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACjD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAChC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;QAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACrE,IAAI,KAAK;QAAE,OAAO,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC;IAExC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;QAClF,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;QAC/B,OAAO;QACP,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;QAC3E,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,oBAAoB,EAAE,CAAC;IAC9D,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,IAAI,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChG,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,CAAC;AACxE,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,OAAO,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACzF,MAAM,IAAI,GAAG,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACxF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAC5C,CAAC"}

package/dist/schemas/api-keys.d.ts

@@ -0,0 +1,34 @@
+/** API-key payload and mint/edit/revoke response schemas. */
+import { z } from 'zod';
+/** The per-key payloads (`GET /api/auth/tokens-payload`). The stable per-mint
+ * `key_fingerprint` is nested under `policy_data`; the picker reads it there. */
+export declare const tokensPayload: z.ZodArray<z.ZodObject<{
+    user_id: z.ZodString;
+    description: z.ZodString;
+    scopes: z.ZodArray<z.ZodString>;
+    policy_data: z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>;
+    condition: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        content: z.ZodOptional<z.ZodString>;
+        id: z.ZodOptional<z.ZodString>;
+        kwargs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strict>>>;
+}, z.core.$strip>>;
+export type TokensPayload = z.infer<typeof tokensPayload>;
+/** Mint reply `{ api_key, key_fingerprint }` narrowed to the raw `sk-…` key,
+ *  returned once at creation and never again. */
+export declare const createdApiKey: z.ZodPipe<z.ZodObject<{
+    api_key: z.ZodString;
+    key_fingerprint: z.ZodString;
+}, z.core.$strip>, z.ZodTransform<string, {
+    api_key: string;
+    key_fingerprint: string;
+}>>;
+export declare const editApiKeyResult: z.ZodObject<{
+    user_id: z.ZodString;
+    updated: z.ZodBoolean;
+}, z.core.$strip>;
+export declare const revokeApiKeyResult: z.ZodObject<{
+    user_id: z.ZodString;
+    revoked: z.ZodBoolean;
+}, z.core.$strip>;
+//# sourceMappingURL=api-keys.d.ts.map

package/dist/schemas/api-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.d.ts","sourceRoot":"","sources":["../../src/schemas/api-keys.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;iFACiF;AACjF,eAAO,MAAM,aAAa;;;;;;;;;;kBASzB,CAAC;AACF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAE1D;iDACiD;AACjD,eAAO,MAAM,aAAa;;;;;;GAEc,CAAC;AACzC,eAAO,MAAM,gBAAgB;;;iBAA0D,CAAC;AACxF,eAAO,MAAM,kBAAkB;;;iBAA0D,CAAC"}

package/dist/schemas/api-keys.js

@@ -0,0 +1,22 @@
+/** API-key payload and mint/edit/revoke response schemas. */
+import { z } from 'zod';
+import { templatedText } from './served';
+import { jsonValue } from './shared';
+/** The per-key payloads (`GET /api/auth/tokens-payload`). The stable per-mint
+ * `key_fingerprint` is nested under `policy_data`; the picker reads it there. */
+export const tokensPayload = z.array(z.object({
+    // The value an `execution_key` binding names.
+    user_id: z.string().min(1),
+    description: z.string(),
+    scopes: z.array(z.string()),
+    policy_data: jsonValue,
+    condition: templatedText.nullable().optional(),
+}));
+/** Mint reply `{ api_key, key_fingerprint }` narrowed to the raw `sk-…` key,
+ *  returned once at creation and never again. */
+export const createdApiKey = z
+    .object({ api_key: z.string(), key_fingerprint: z.string() })
+    .transform((minted) => minted.api_key);
+export const editApiKeyResult = z.object({ user_id: z.string(), updated: z.boolean() });
+export const revokeApiKeyResult = z.object({ user_id: z.string(), revoked: z.boolean() });
+//# sourceMappingURL=api-keys.js.map

package/dist/schemas/api-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.js","sourceRoot":"","sources":["../../src/schemas/api-keys.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAErC;iFACiF;AACjF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAClC,CAAC,CAAC,MAAM,CAAC;IACP,8CAA8C;IAC9C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3B,WAAW,EAAE,SAAS;IACtB,SAAS,EAAE,aAAa,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC/C,CAAC,CACH,CAAC;AAGF;iDACiD;AACjD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;KAC5D,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACzC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AACxF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC"}

package/dist/schemas/auth-routes.d.ts

@@ -0,0 +1,78 @@
+/** Route catalog, scope mapping and public-route response schemas. */
+import { z } from 'zod';
+/** `{ url: scope_id }` — every URL currently mapped to a scope. */
+export declare const authScopes: z.ZodRecord<z.ZodString, z.ZodString>;
+export declare const addUrlToScopeResult: z.ZodObject<{
+    scope_id: z.ZodString;
+    url: z.ZodString;
+}, z.core.$strip>;
+export declare const removeUrlFromScopeResult: z.ZodObject<{
+    url: z.ZodString;
+}, z.core.$strip>;
+export declare const removeScopeResult: z.ZodObject<{
+    scope_id: z.ZodString;
+    deleted_keys: z.ZodNumber;
+}, z.core.$strip>;
+/**
+ * A route's authorization ACTION class, joined onto the catalog from the route
+ * registry. `read`/`write` routes are GRANTABLE — a role's per-tag level opens
+ * them; `fenced`/`secret` routes are ADMIN-ONLY and never grantable (no per-tag
+ * level reaches them). `null` marks a path the registry carries no metadata for
+ * (an unregistered/ungated path — no feature tags, no action).
+ */
+export declare const routeAction: z.ZodEnum<{
+    read: "read";
+    write: "write";
+    secret: "secret";
+    fenced: "fenced";
+}>;
+export type RouteAction = z.infer<typeof routeAction>;
+/**
+ * One row of the route catalog (`GET /api/auth/routes`) — a plain HTTP route with
+ * its current mapping, JOINED with its route-registry metadata. `mapped` is the
+ * scope id, the public marker, or `null` when the path is unmapped (the mapper's
+ * "unassigned" bucket source). `methods` is the route's method set with `HEAD`
+ * removed. `tags` are the route's feature-group labels, `summary` its one-line
+ * description, and `action` its authorization class — the join fields the Roles
+ * grant editor reads to derive grantable feature groups and mark the admin-only
+ * (fenced/secret) routes it must never offer a grant for. An unregistered path
+ * carries `tags: []`, `summary: ''`, `action: null`.
+ */
+export declare const authRoute: z.ZodObject<{
+    path: z.ZodString;
+    methods: z.ZodArray<z.ZodString>;
+    mapped: z.ZodNullable<z.ZodString>;
+    tags: z.ZodArray<z.ZodString>;
+    summary: z.ZodString;
+    action: z.ZodNullable<z.ZodEnum<{
+        read: "read";
+        write: "write";
+        secret: "secret";
+        fenced: "fenced";
+    }>>;
+}, z.core.$strip>;
+export type AuthRoute = z.infer<typeof authRoute>;
+export declare const authRoutes: z.ZodArray<z.ZodObject<{
+    path: z.ZodString;
+    methods: z.ZodArray<z.ZodString>;
+    mapped: z.ZodNullable<z.ZodString>;
+    tags: z.ZodArray<z.ZodString>;
+    summary: z.ZodString;
+    action: z.ZodNullable<z.ZodEnum<{
+        read: "read";
+        write: "write";
+        secret: "secret";
+        fenced: "fenced";
+    }>>;
+}, z.core.$strip>>;
+/** `GET /api/auth/public-routes` — the sorted urls pinned to the public marker. */
+export declare const publicRoutes: z.ZodArray<z.ZodString>;
+/** `POST /api/auth/public-routes` — the pinned url. */
+export declare const pinPublicResult: z.ZodObject<{
+    url: z.ZodString;
+}, z.core.$strip>;
+/** `DELETE /api/auth/public-routes` — the unpinned url (404 when not pinned). */
+export declare const unpinPublicResult: z.ZodObject<{
+    url: z.ZodString;
+}, z.core.$strip>;
+//# sourceMappingURL=auth-routes.d.ts.map

package/dist/schemas/auth-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-routes.d.ts","sourceRoot":"","sources":["../../src/schemas/auth-routes.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,mEAAmE;AACnE,eAAO,MAAM,UAAU,uCAAmC,CAAC;AAE3D,eAAO,MAAM,mBAAmB;;;iBAAsD,CAAC;AACvF,eAAO,MAAM,wBAAwB;;iBAAgC,CAAC;AACtE,eAAO,MAAM,iBAAiB;;;iBAA+D,CAAC;AAE9F;;;;;;GAMG;AACH,eAAO,MAAM,WAAW;;;;;EAAgD,CAAC;AACzE,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,SAAS;;;;;;;;;;;;iBAOpB,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAClD,eAAO,MAAM,UAAU;;;;;;;;;;;;kBAAqB,CAAC;AAC7C,mFAAmF;AACnF,eAAO,MAAM,YAAY,yBAAsB,CAAC;AAEhD,uDAAuD;AACvD,eAAO,MAAM,eAAe;;iBAAgC,CAAC;AAC7D,iFAAiF;AACjF,eAAO,MAAM,iBAAiB;;iBAAgC,CAAC"}

package/dist/schemas/auth-routes.js

@@ -0,0 +1,42 @@
+/** Route catalog, scope mapping and public-route response schemas. */
+import { z } from 'zod';
+/** `{ url: scope_id }` — every URL currently mapped to a scope. */
+export const authScopes = z.record(z.string(), z.string());
+export const addUrlToScopeResult = z.object({ scope_id: z.string(), url: z.string() });
+export const removeUrlFromScopeResult = z.object({ url: z.string() });
+export const removeScopeResult = z.object({ scope_id: z.string(), deleted_keys: z.number() });
+/**
+ * A route's authorization ACTION class, joined onto the catalog from the route
+ * registry. `read`/`write` routes are GRANTABLE — a role's per-tag level opens
+ * them; `fenced`/`secret` routes are ADMIN-ONLY and never grantable (no per-tag
+ * level reaches them). `null` marks a path the registry carries no metadata for
+ * (an unregistered/ungated path — no feature tags, no action).
+ */
+export const routeAction = z.enum(['read', 'write', 'fenced', 'secret']);
+/**
+ * One row of the route catalog (`GET /api/auth/routes`) — a plain HTTP route with
+ * its current mapping, JOINED with its route-registry metadata. `mapped` is the
+ * scope id, the public marker, or `null` when the path is unmapped (the mapper's
+ * "unassigned" bucket source). `methods` is the route's method set with `HEAD`
+ * removed. `tags` are the route's feature-group labels, `summary` its one-line
+ * description, and `action` its authorization class — the join fields the Roles
+ * grant editor reads to derive grantable feature groups and mark the admin-only
+ * (fenced/secret) routes it must never offer a grant for. An unregistered path
+ * carries `tags: []`, `summary: ''`, `action: null`.
+ */
+export const authRoute = z.object({
+    path: z.string(),
+    methods: z.array(z.string()),
+    mapped: z.string().nullable(),
+    tags: z.array(z.string()),
+    summary: z.string(),
+    action: routeAction.nullable(),
+});
+export const authRoutes = z.array(authRoute);
+/** `GET /api/auth/public-routes` — the sorted urls pinned to the public marker. */
+export const publicRoutes = z.array(z.string());
+/** `POST /api/auth/public-routes` — the pinned url. */
+export const pinPublicResult = z.object({ url: z.string() });
+/** `DELETE /api/auth/public-routes` — the unpinned url (404 when not pinned). */
+export const unpinPublicResult = z.object({ url: z.string() });
+//# sourceMappingURL=auth-routes.js.map

package/dist/schemas/auth-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-routes.js","sourceRoot":"","sources":["../../src/schemas/auth-routes.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,mEAAmE;AACnE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AAE3D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACvF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACtE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAE9F;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAGzE;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACzB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,WAAW,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;AAC7C,mFAAmF;AACnF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AAEhD,uDAAuD;AACvD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC7D,iFAAiF;AACjF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC"}

package/dist/schemas/backup.d.ts

@@ -0,0 +1,78 @@
+/** Backup section, document and import-report response schemas. */
+import { z } from 'zod';
+export declare const backupSections: z.ZodArray<z.ZodObject<{
+    name: z.ZodString;
+    secret: z.ZodBoolean;
+}, z.core.$strip>>;
+/** The exported backup document — validated when the UI reads a picked file. */
+export declare const backupDocument: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    created_at: z.ZodString;
+    sections: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    errors: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strip>;
+export type BackupDocument = z.infer<typeof backupDocument>;
+export declare const backupImportReport: z.ZodObject<{
+    ok: z.ZodBoolean;
+    sections: z.ZodRecord<z.ZodString, z.ZodObject<{
+        created: z.ZodNumber;
+        updated: z.ZodNumber;
+        skipped: z.ZodNumber;
+        errors: z.ZodArray<z.ZodString>;
+        new_api_keys: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            user_id: z.ZodString;
+            description: z.ZodString;
+            api_key: z.ZodString;
+        }, z.core.$strip>>>;
+        fanout: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            mode: z.ZodLiteral<"local-only">;
+            note: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            op: z.ZodString;
+            reachable: z.ZodBoolean;
+            local_only: z.ZodBoolean;
+            results: z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+                outcome: z.ZodEnum<{
+                    failed: "failed";
+                    resyncing: "resyncing";
+                    recycling: "recycling";
+                    stale: "stale";
+                    applied: "applied";
+                    missing: "missing";
+                    departed: "departed";
+                    timed_out: "timed_out";
+                }>;
+                payload: z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>;
+                error: z.ZodNullable<z.ZodString>;
+                detail: z.ZodNullable<z.ZodString>;
+            }, z.core.$strip>>;
+            error: z.ZodNullable<z.ZodString>;
+            mode: z.ZodLiteral<"fleet">;
+        }, z.core.$strip>, z.ZodObject<{
+            op: z.ZodString;
+            reachable: z.ZodBoolean;
+            local_only: z.ZodBoolean;
+            results: z.ZodArray<z.ZodObject<{
+                name: z.ZodString;
+                outcome: z.ZodEnum<{
+                    failed: "failed";
+                    resyncing: "resyncing";
+                    recycling: "recycling";
+                    stale: "stale";
+                    applied: "applied";
+                    missing: "missing";
+                    departed: "departed";
+                    timed_out: "timed_out";
+                }>;
+                payload: z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>;
+                error: z.ZodNullable<z.ZodString>;
+                detail: z.ZodNullable<z.ZodString>;
+            }, z.core.$strip>>;
+            error: z.ZodNullable<z.ZodString>;
+            mode: z.ZodLiteral<"unreachable">;
+        }, z.core.$strip>], "mode">>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type BackupImportReport = z.infer<typeof backupImportReport>;
+//# sourceMappingURL=backup.d.ts.map

package/dist/schemas/backup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.d.ts","sourceRoot":"","sources":["../../src/schemas/backup.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,cAAc;;;kBAA+D,CAAC;AAE3F,gFAAgF;AAChF,eAAO,MAAM,cAAc;;;;;iBAKzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAyB7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/schemas/backup.js

@@ -0,0 +1,33 @@
+/** Backup section, document and import-report response schemas. */
+import { z } from 'zod';
+import { fleetReportFanout } from './fleet';
+export const backupSections = z.array(z.object({ name: z.string(), secret: z.boolean() }));
+/** The exported backup document — validated when the UI reads a picked file. */
+export const backupDocument = z.object({
+    version: z.literal(1),
+    created_at: z.string(),
+    sections: z.record(z.string(), z.unknown()),
+    errors: z.record(z.string(), z.string()).optional(),
+});
+export const backupImportReport = z.object({
+    ok: z.boolean(),
+    sections: z.record(z.string(), z.object({
+        created: z.number(),
+        updated: z.number(),
+        skipped: z.number(),
+        errors: z.array(z.string()),
+        new_api_keys: z
+            .array(z.object({
+            user_id: z.string(),
+            description: z.string(),
+            api_key: z.string(),
+        }))
+            .optional(),
+        // The `manifest` and `env` sections apply through the config pipeline, so their
+        // report carries the mode-wrapped fleet `fanout` of the restore's reload; other
+        // sections omit it. Parsed EXPLICITLY so the shared fleet-report handler can
+        // surface a failed restore propagation — otherwise zod would strip it silently.
+        fanout: fleetReportFanout.optional(),
+    })),
+});
+//# sourceMappingURL=backup.js.map

package/dist/schemas/backup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.js","sourceRoot":"","sources":["../../src/schemas/backup.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAE5C,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAE3F,gFAAgF;AAChF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAC3C,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;IACf,QAAQ,EAAE,CAAC,CAAC,MAAM,CAChB,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC3B,YAAY,EAAE,CAAC;aACZ,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;YACnB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;YACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;SACpB,CAAC,CACH;aACA,QAAQ,EAAE;QACb,gFAAgF;QAChF,gFAAgF;QAChF,6EAA6E;QAC7E,gFAAgF;QAChF,MAAM,EAAE,iBAAiB,CAAC,QAAQ,EAAE;KACrC,CAAC,CACH;CACF,CAAC,CAAC"}