@uluops/ops-sdk 6.1.0 → 6.3.1

package/CHANGELOG.md

@@ -4,6 +4,44 @@ All notable changes to `@uluops/ops-sdk` will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [6.3.1] - 2026-09-13
+
+### Security
+
+Security audit of the org-routing train (ops-uluops-api run #187, 2026-09-13). None of these was a bypass; each is a channel by which the wrong org could be chosen silently.
+
+- **`resolveWorkspaceOrg` walk is bounded by the home directory** when `cwd` is under it: a `.uluops.json` at `/`, `/Users` or a container root can no longer become the default for every checkout beneath it (the single-default leak D13 exists to remove, one layer down). Outside home the walk still reaches the root. New `home` option (default `os.homedir()`), injectable for tests.
+- **A workspace file owned by another user is refused**, not skipped — the planting vector is a shared parent directory. New `uid` option (default `process.getuid()`; `undefined` disables the check on platforms without uids).
+- **The workspace file's key check is an allowlist** (`org`, `$schema`). It was a ten-name denylist while the error said "may carry only org"; `baseURL`, `apikey`, `token` passed. Inert (only `org` was read), but the stated invariant is now the enforced one.
+- **`"personal"` is honoured as an explicit value** (`resolveWorkspaceOrg({ explicit: 'personal' })`, `withOrg('personal')`): no header, `source: 'explicit'`. It used to go to the wire as a slug (404 `ORG_NOT_FOUND`, or a real org if anyone registers the name). `withOrg('personal')` does not cancel a constructor `orgSlug`.
+- **Per-call org header is set last, and an org header in `options.headers` is refused** on a scoped view. The spread order let a caller header win, and `X-Org-Id` outranks `X-Org-Slug` server-side — no live caller did this; the invariant held by luck.
+
+## [6.3.0] - 2026-09-13
+
+### Added
+
+- **`resolveWorkspaceOrg()` — the D13 workspace default** (project-org-routing-and-rehome spec D13, §2.0). Walks upward from `cwd` to the nearest `.uluops.json` and honours only its `org`; the reserved value `"personal"` stops the walk and means "no org" (a personal repo cloned under a work tree carries it so the outer file does not win). Precedence: `explicit` (a `--org` flag, an MCP tool's `org` argument) > nearest workspace file > `ULUOPS_ORG_SLUG` (kept as the lowest fall-through for headless environments) > personal. Returns `{ org, source, path }` so a caller can print *why* a call landed where it did.
+
+  **The file may carry only `org`.** `apiKey`, `baseUrl`, `profile`, `credentials`, `sessionToken`, `email`, `password` are refused with `InputValidationError`, not ignored — a `.env` in cwd once retargeted the CLI's base URL, and the one guard that keeps that footgun from transferring is that this file cannot name a target or an identity. Malformed JSON and invalid slugs are refused loudly for the same reason: a silently ignored file is a silently wrong org. The slug is server-relative, so "where it landed" output should print the base URL beside the org.
+
+  Lives here, not in each consumer: the CLI and the tracker MCP both need it, and two copies of a walk-up function in two repos are the drift class the spec exists to remove. `findWorkspaceOrgFile` and `readWorkspaceOrgFile` are exported for tooling that wants to explain the answer. `ENV_VARS.ORG_SLUG` added. Tests build their own temp trees and pass `stopAt` so a real `.uluops.json` above the temp dir cannot leak in — this workspace will carry one.
+
+## [6.2.0] - 2026-09-13
+
+### Added
+
+- **Per-call `org` on every project, run, issue and analytics operation** (project-org-routing-and-rehome spec §3.2, D12). Each method on `client.projects`, `client.runs`, `client.issues` and `client.analytics` takes a trailing `options?: { org?: string }` (run writes: `RunCallOptions`, which also carries the existing `_skipClientValidation`). `org` is the target org's slug and becomes `X-Org-Slug` on that one request, overriding the constructor-level `orgSlug`. **Precedence on the wire, lowest to highest: personal org (no header) < constructor `orgSlug` < per-call `org`; an API key BOUND to an org ignores both headers and returns `403 ORG_ACCESS_DENIED` if they name a different org** — the platform's rule, surfaced verbatim. The API never infers an org from a project name (spec D2): a call that names no org creates or targets the *personal* project of that name even when a work org has one by the same name.
+
+  **Mechanism, because it differs from the spec's plan and the difference is worth knowing.** The spec (§3.2) said every operation would migrate from sdk-core's verb helpers to `client.request(..., { headers })`. sdk-core's `get/post/patch/put/delete` all delegate to `this.request`, so instead `OpsHttpClient` overrides `request` and exposes `withOrg(slug)`, a prototype-chained VIEW of the client that merges the header on every request it makes. One seam, zero operation rewrites, and the view shares the root's auth strategy, so a session installed on the root is honoured. `OpsClient` mints the view per call. Same wire contract; the test file asserts on the outgoing request as nock sees it, including a `badheaders` control proving the root client sends no header and that minting a view does not mutate the root.
+
+- **`OpsHttpClient.withOrg(slug)`** and **`scopedOrg`** (read-only, for diagnostics) on the low-level client; `ORG_SLUG_PATTERN` and `ORG_SLUG_HEADER` exported. `withOrg` validates the slug with the same pattern as `orgSlug` and throws `InputValidationError` — it is a header value, so CRLF and whitespace can never reach the wire.
+
+- **Org-routing error codes and type guards**: `INSUFFICIENT_ORG_ROLE` / `isInsufficientOrgRoleError` (403 — below the org's write floor; on tracker writes the API's body carries `details.applied: false` and forbids retrying without `org`: **do not retry the same call org-less — that is not a fallback, it files the work in the caller's personal org**), `ORG_ACCESS_DENIED` / `isOrgAccessDeniedError` (403 — not a member, or a bound key naming another org), and `PROJECT_REHOMED` / `isProjectRehomedError` with `ProjectRehomedDetails` (410 — spec D14: the project this name once denoted in this org now lives in `details.target_org.slug`; pass it as `org` and the same call succeeds). The rehomed guard requires the details shape it promises, not only the code, so a narrowed error is safe to dereference. `InsufficientOrgRoleDetails` declared.
+
+### Changed
+
+- `client.runs.*` write and preview options are typed `RunCallOptions` (`OrgScopedOptions & { _skipClientValidation? }`) instead of the inline `{ _skipClientValidation?: boolean }`. Structurally compatible; nothing a caller wrote breaks.
+
 ## [6.1.0] - 2026-09-10
 
 ### Added
@@ -115,7 +153,9 @@ deploys; SDK 6.0.0 (after the flip) re-pins the new shapes strictly.
 
 ### Added
 
-- **`runs.save()` surfaces the `analysisWrite` confirmation** (tool-sweep T21; API ≥1.71.0).
+- **`runs.save()` surfaces the `analysisWrite` confirmation** (tool-sweep T21; API 2.0.0+, or a
+  1.70.0 deploy after 2026-08-19 — this read "≥1.71.0" until 2026-09-13; no such version was
+  ever declared, see ops-uluops-api issue `aea76608`).
   The save response envelope now carries `analysisWrite` as a sibling of `data` — the same
   placement as the update envelope — read via `rawEnvelope` and returned on the result
   (`analysisWrite: AnalysisWriteEcho | null`; `recordMode: 'initial'` on this path). Like the

package/README.md

@@ -307,7 +307,8 @@ const client = new OpsClient({
   debug: false,                // Enable debug logging
 
   // Multi-tenancy
-  orgSlug: 'my-org',           // Org slug (sets X-Org-Slug header on all requests)
+  orgSlug: 'my-org',           // Org slug (sets X-Org-Slug header on all requests);
+                               // any method's trailing `{ org }` overrides it per call
 
   // Callbacks
   onTokenRefresh: (token) => { /* handle token refresh */ },
@@ -321,6 +322,45 @@ const client = new OpsClient({
 });
 ```
 
+#### Org routing — which org a call lands in
+
+Every project, run, issue and analytics method takes a trailing `options` with `org?: string`
+(run writes: `RunCallOptions`, which also carries `_skipClientValidation`). It becomes the
+`X-Org-Slug` header on that one request.
+
+```typescript
+await client.runs.save(input, { org: 'ulu-labs' });          // this call → ulu-labs
+await client.projects.list({ org: 'ulu-labs' });               // reads take it too
+await client.projects.list();                                  // → constructor orgSlug, else your personal org
+```
+
+**Precedence on the wire, lowest to highest:** personal org (no header) < constructor `orgSlug`
+< per-call `org`. An API key **bound** to an org ignores both headers and answers
+`403 ORG_ACCESS_DENIED` if they name a different org. The API never infers an org from a project
+name: a call that names no org creates or targets the *personal* project of that name, even when
+a work org has one by the same name (spec D2). Name the org.
+
+Three org-routing errors are worth branching on (all exported with type guards):
+
+| Code | Status | Guard | What to do |
+|---|---|---|---|
+| `INSUFFICIENT_ORG_ROLE` | 403 | `isInsufficientOrgRoleError` | Your role in that org is below `publisher`. **Do not retry without `org`** — an org-less retry files the work in your personal org; the API says so in the body (`details.applied: false`). |
+| `ORG_ACCESS_DENIED` | 403 | `isOrgAccessDeniedError` | Not a member of that org, or your key is bound to a different one. Terminal. |
+| `PROJECT_REHOMED` | 410 | `isProjectRehomedError` | The project moved orgs. `err.details.target_org.slug` is where it lives — pass it as `org` and retry the same call. |
+
+Low-level: `new OpsHttpClient(cfg).withOrg('acme')` returns a view of the client scoped to that org.
+
+**Where does the default come from?** For tools that run inside a checkout (the CLI, the tracker
+MCP), `resolveWorkspaceOrg({ explicit, cwd })` implements the spec's D13 rule: an explicit value
+wins; else the nearest `.uluops.json` above `cwd` (`{ "org": "ulu-labs" }`, or `{ "org": "personal" }`
+to stop the walk in a personal repo nested under a work tree); else `ULUOPS_ORG_SLUG`; else your
+personal org. The file may carry only `org` (and `$schema`) — any other key is refused, not ignored.
+Two more refusals since 6.3.1 (security audit run #187): the walk never rises above your home
+directory (a file at `/` or `/Users` cannot become everyone's default), and a file owned by another
+user is refused (a shared parent directory is the planting vector). `"personal"` is also honoured as
+an explicit value — `{ org: 'personal' }` sends no header. On a scoped call the per-call org header
+is set last and an `X-Org-Slug`/`X-Org-Id` in `options.headers` is refused.
+
 ---
 
 ### Security Events

package/dist/client.d.ts

@@ -6,6 +6,7 @@ import type { Run, RunSummary, RunAnalysis, ProjectAnalysisList, AnalysisRecords
 import type { Issue, CreateUserIssueInput, UpdateIssueInput, UpdateIssueStatusInput, CreateIssueNoteInput, IssueNote, IssueDetails, IssueHistoryEnvelope, IssueSearchQuery, ListIssuesQuery, BulkStatusUpdateItem, StatusUpdateResult } from './types/issues.js';
 import type { AnalyticsQuery, AgentPerformance, AgentInfo, AgentLifecycleEntry, AgentReliabilityQuery, BurndownQuery, VelocityQuery, DiscoveryQuery, AgentMatrixQuery, TaxonomyResponse, AgentReliabilityResult, ResolutionRateResult, FileHotspotResult, TaxonomyDistributionResult, FullTaxonomyAnalyticsResult, BurndownResultResponse, VelocityResultResponse, DiscoveryResultResponse, AgentMatrixResultResponse, TrendSummaryResult } from './types/analytics.js';
 import type { MessageResponse, DeleteResult } from './types/responses.js';
+import type { OrgScopedOptions, RunCallOptions } from './types/org.js';
 /**
  * OpsClient configuration options.
  * All HTTP-level options (baseUrl, timeout, retries, debug, auth) are available.
@@ -67,6 +68,12 @@ export declare class OpsClient {
      * @returns `'api_key'`, `'session'`, or `null` if unauthenticated
      */
     getAuthType(): 'api_key' | 'session' | null;
+    /**
+     * The HTTP client for one call: a per-call `org` (spec §3.2) yields a view
+     * carrying `X-Org-Slug: <org>` on that request only; otherwise the root
+     * client (constructor `orgSlug`, else the personal org).
+     */
+    private scope;
     /** Authentication, API keys, sessions, and user profile management */
     readonly auth: {
         /** Register a new user account. */
@@ -116,174 +123,158 @@ export declare class OpsClient {
     /** Project CRUD, summaries, trends, issue listing, and bulk operations */
     readonly projects: {
         /** List all projects visible to the caller — {data, total} (6.0.0, T13). */
-        list: () => Promise<{
+        list: (options?: OrgScopedOptions) => Promise<{
             data: Project[];
             total: number;
         }>;
         /** Get a project by id or name. */
-        get: (idOrName: string) => Promise<Project>;
+        get: (idOrName: string, options?: OrgScopedOptions) => Promise<Project>;
         /** Create a new project. */
-        create: (input: CreateProjectInput) => Promise<Project>;
+        create: (input: CreateProjectInput, options?: OrgScopedOptions) => Promise<Project>;
         /** Update a project's metadata. */
-        update: (idOrName: string, input: UpdateProjectInput) => Promise<Project>;
+        update: (idOrName: string, input: UpdateProjectInput, options?: OrgScopedOptions) => Promise<Project>;
         /** Permanently delete a project (requires confirmation). */
-        delete: (idOrName: string, input: DeleteProjectInput) => Promise<DeleteResult>;
+        delete: (idOrName: string, input: DeleteProjectInput, options?: OrgScopedOptions) => Promise<DeleteResult>;
         /** Soft-delete a project; reversible via `restore()`. */
-        softDelete: (idOrName: string, input: DeleteProjectInput) => Promise<DeleteResult>;
+        softDelete: (idOrName: string, input: DeleteProjectInput, options?: OrgScopedOptions) => Promise<DeleteResult>;
         /** Restore a soft-deleted project. */
-        restore: (idOrName: string) => Promise<Project>;
+        restore: (idOrName: string, options?: OrgScopedOptions) => Promise<Project>;
         /** Rename a project. */
-        rename: (input: RenameProjectInput) => Promise<Project>;
+        rename: (input: RenameProjectInput, options?: OrgScopedOptions) => Promise<Project>;
         /** Get aggregate summary stats for a project. */
-        getSummary: (idOrName: string) => Promise<ProjectSummaryResponse>;
+        getSummary: (idOrName: string, options?: OrgScopedOptions) => Promise<ProjectSummaryResponse>;
         /** Get time-series trends for a project. */
-        getTrends: (idOrName: string, query?: ProjectTrendsQuery) => Promise<ProjectTrends>;
+        getTrends: (idOrName: string, query?: ProjectTrendsQuery, options?: OrgScopedOptions) => Promise<ProjectTrends>;
         /** List a project's issues (filtered) — {data, total} (6.0.0, T13).
          * Replaces listIssuesWithCount, which existed only to recover the count
          * the old array return dropped. */
-        listIssues: (idOrName: string, query?: ListProjectIssuesQuery) => Promise<{
+        listIssues: (idOrName: string, query?: ListProjectIssuesQuery, options?: OrgScopedOptions) => Promise<{
             data: Issue[];
             total: number;
         }>;
         /** Bulk-update the status of many issues in a project. */
-        bulkUpdateIssueStatus: (idOrName: string, updates: BulkIssueStatusUpdate[]) => Promise<BulkIssueStatusResult>;
+        bulkUpdateIssueStatus: (idOrName: string, updates: BulkIssueStatusUpdate[], options?: OrgScopedOptions) => Promise<BulkIssueStatusResult>;
         /** Merge duplicate issues within a project. */
-        mergeIssues: (idOrName: string, input: MergeIssuesInput) => Promise<MergeIssuesResult>;
+        mergeIssues: (idOrName: string, input: MergeIssuesInput, options?: OrgScopedOptions) => Promise<MergeIssuesResult>;
         /**
          * Merge one project into another (merge-projects spec v0.3.4) — the
          * source's runs and issues are re-keyed into the target inside one
          * advisory-locked transaction; the source is soft-deleted by default.
          * Pairwise only. Dry-run first: `{ ...input, dryRun: true }`.
          */
-        mergeProjects: (input: MergeProjectsInput) => Promise<MergeProjectsResult>;
+        mergeProjects: (input: MergeProjectsInput, options?: OrgScopedOptions) => Promise<MergeProjectsResult>;
     };
     /** Execution run save, preview, diff, archive, and retrieval */
     readonly runs: {
         /** Save an execution run (agents, scores, recommendations). */
-        save: (input: SaveRunInput, options?: {
-            _skipClientValidation?: boolean;
-        }) => Promise<SaveRunResponse>;
+        save: (input: SaveRunInput, options?: RunCallOptions) => Promise<SaveRunResponse>;
         /** Preview a save without persisting (dry-run). */
-        validate: (input: SaveRunInput, options?: {
-            _skipClientValidation?: boolean;
-        }) => Promise<ValidateRunResponse>;
+        validate: (input: SaveRunInput, options?: RunCallOptions) => Promise<ValidateRunResponse>;
         /** Diff two runs to surface regressions/improvements. */
-        diff: (query: RunDiffQuery) => Promise<RunDiffResult>;
+        diff: (query: RunDiffQuery, options?: OrgScopedOptions) => Promise<RunDiffResult>;
         /** Archive old runs by number/date/keep-last filter. */
-        archive: (input: ArchiveRunsInput) => Promise<ArchiveRunsResult>;
+        archive: (input: ArchiveRunsInput, options?: OrgScopedOptions) => Promise<ArchiveRunsResult>;
         /** Update a run (project + run number). Discards the analysis-write echo (use updateWithEcho); on analysis-bearing calls can throw AnalysisEchoMismatchError AFTER the write landed. */
-        update: (input: UpdateRunByNumberInput, options?: {
-            _skipClientValidation?: boolean;
-        }) => Promise<RunWriteEcho>;
+        update: (input: UpdateRunByNumberInput, options?: RunCallOptions) => Promise<RunWriteEcho>;
         /** Read-only preview of an analysis-bearing update (project + run number): what a write under the requested record_write_mode would supersede, create, and retire. */
-        previewUpdate: (input: UpdateRunPreviewByNumberInput, options?: {
-            _skipClientValidation?: boolean;
-        }) => Promise<RunUpdatePreview>;
+        previewUpdate: (input: UpdateRunPreviewByNumberInput, options?: RunCallOptions) => Promise<RunUpdatePreview>;
         /** Update (project + run number) returning the run AND the §3.9 analysis-write echo — success-path visibility of superseded/created counts (F17). */
-        updateWithEcho: (input: UpdateRunByNumberInput, options?: {
-            _skipClientValidation?: boolean;
-        }) => Promise<UpdateRunWithEchoResult>;
+        updateWithEcho: (input: UpdateRunByNumberInput, options?: RunCallOptions) => Promise<UpdateRunWithEchoResult>;
         /** List run summaries for a project — {data, total} (6.0.0, T13). */
-        listByProject: (projectId: string, query?: ListRunsQuery) => Promise<{
+        listByProject: (projectId: string, query?: ListRunsQuery, options?: OrgScopedOptions) => Promise<{
             data: RunSummary[];
             total: number;
         }>;
         /** Get the latest run for a project (optionally by workflow type). */
-        getLatest: (projectId: string, workflowType?: string) => Promise<Run>;
+        getLatest: (projectId: string, workflowType?: string, options?: OrgScopedOptions) => Promise<Run>;
         /** Get full details for a run (defaults to latest when runNumber omitted). */
-        getDetails: (projectId: string, runNumber?: number) => Promise<RunDetails>;
+        getDetails: (projectId: string, runNumber?: number, options?: OrgScopedOptions) => Promise<RunDetails>;
         /** Get a single run by its id. */
-        get: (runId: string) => Promise<Run>;
+        get: (runId: string, options?: OrgScopedOptions) => Promise<Run>;
         /** Update a run by id. Discards the analysis-write echo (use updateByIdWithEcho); on analysis-bearing calls can throw AnalysisEchoMismatchError AFTER the write landed. */
-        updateById: (runId: string, input: UpdateRunInput, options?: {
-            _skipClientValidation?: boolean;
-        }) => Promise<RunWriteEcho>;
+        updateById: (runId: string, input: UpdateRunInput, options?: RunCallOptions) => Promise<RunWriteEcho>;
         /** Read-only preview of an analysis-bearing update, by run id. See previewUpdate. */
-        previewUpdateById: (runId: string, input: UpdateRunPreviewInput, options?: {
-            _skipClientValidation?: boolean;
-        }) => Promise<RunUpdatePreview>;
+        previewUpdateById: (runId: string, input: UpdateRunPreviewInput, options?: RunCallOptions) => Promise<RunUpdatePreview>;
         /** By-id sibling of updateWithEcho (F17). */
-        updateByIdWithEcho: (runId: string, input: UpdateRunInput, options?: {
-            _skipClientValidation?: boolean;
-        }) => Promise<UpdateRunWithEchoResult>;
+        updateByIdWithEcho: (runId: string, input: UpdateRunInput, options?: RunCallOptions) => Promise<UpdateRunWithEchoResult>;
         /** Delete a run by id. */
-        delete: (runId: string) => Promise<DeleteResult>;
+        delete: (runId: string, options?: OrgScopedOptions) => Promise<DeleteResult>;
         /** Get the structured analysis attached to a run. */
-        getAnalysis: (runId: string) => Promise<RunAnalysis>;
+        getAnalysis: (runId: string, options?: OrgScopedOptions) => Promise<RunAnalysis>;
         /** List analyses across a project's runs. */
-        getProjectAnalysis: (projectId: string, query?: ProjectAnalysisQuery) => Promise<ProjectAnalysisList>;
+        getProjectAnalysis: (projectId: string, query?: ProjectAnalysisQuery, options?: OrgScopedOptions) => Promise<ProjectAnalysisList>;
         /** Query individual analysis records across runs. */
-        queryAnalysisRecords: (query?: AnalysisRecordsQuery) => Promise<AnalysisRecordsList>;
+        queryAnalysisRecords: (query?: AnalysisRecordsQuery, options?: OrgScopedOptions) => Promise<AnalysisRecordsList>;
         /** Get per-run analysis history for a single agent. */
-        getAgentRunsAnalysis: (agentName: string, query: AgentRunsAnalysisQuery) => Promise<AgentRunsAnalysis>;
+        getAgentRunsAnalysis: (agentName: string, query: AgentRunsAnalysisQuery, options?: OrgScopedOptions) => Promise<AgentRunsAnalysis>;
     };
     /** Issue CRUD, search, status management, notes, and bulk operations */
     readonly issues: {
         /** Create a user-submitted issue. */
-        create: (input: CreateUserIssueInput) => Promise<Issue>;
+        create: (input: CreateUserIssueInput, options?: OrgScopedOptions) => Promise<Issue>;
         /** Search issues by text/filters. */
-        search: (query: IssueSearchQuery) => Promise<Issue[]>;
+        search: (query: IssueSearchQuery, options?: OrgScopedOptions) => Promise<Issue[]>;
         /** Get an issue by its fingerprint within a project. */
-        getByFingerprint: (fingerprint: string, project: string) => Promise<Issue>;
+        getByFingerprint: (fingerprint: string, project: string, options?: OrgScopedOptions) => Promise<Issue>;
         /** Update an issue's status by fingerprint + project. */
-        updateStatusByFingerprint: (fingerprint: string, project: string, input: UpdateIssueStatusInput) => Promise<StatusUpdateResult>;
+        updateStatusByFingerprint: (fingerprint: string, project: string, input: UpdateIssueStatusInput, options?: OrgScopedOptions) => Promise<StatusUpdateResult>;
         /** Get an issue by id. */
-        get: (issueId: string) => Promise<Issue>;
+        get: (issueId: string, options?: OrgScopedOptions) => Promise<Issue>;
         /** Get an issue with notes and history detail. */
-        getDetails: (issueId: string) => Promise<IssueDetails>;
+        getDetails: (issueId: string, options?: OrgScopedOptions) => Promise<IssueDetails>;
         /** Get an issue's change history. */
-        getHistory: (issueId: string) => Promise<IssueHistoryEnvelope>;
+        getHistory: (issueId: string, options?: OrgScopedOptions) => Promise<IssueHistoryEnvelope>;
         /** Update an issue's status by id. */
-        updateStatus: (issueId: string, input: UpdateIssueStatusInput) => Promise<Issue>;
+        updateStatus: (issueId: string, input: UpdateIssueStatusInput, options?: OrgScopedOptions) => Promise<Issue>;
         /** Update an issue's metadata by id. */
-        update: (issueId: string, input: UpdateIssueInput) => Promise<Issue>;
+        update: (issueId: string, input: UpdateIssueInput, options?: OrgScopedOptions) => Promise<Issue>;
         /** Add a note to an issue. */
-        addNote: (issueId: string, input: CreateIssueNoteInput) => Promise<IssueNote>;
+        addNote: (issueId: string, input: CreateIssueNoteInput, options?: OrgScopedOptions) => Promise<IssueNote>;
         /** Restore a soft-deleted issue. */
-        restore: (issueId: string) => Promise<Issue>;
+        restore: (issueId: string, options?: OrgScopedOptions) => Promise<Issue>;
         /** Soft-delete an active issue; reversible via `restore()`. */
-        softDelete: (issueId: string) => Promise<DeleteResult>;
+        softDelete: (issueId: string, options?: OrgScopedOptions) => Promise<DeleteResult>;
         /** Undo the most recent change to an issue. */
-        undoLastChange: (issueId: string) => Promise<Issue>;
+        undoLastChange: (issueId: string, options?: OrgScopedOptions) => Promise<Issue>;
         /** Bulk-update issue statuses; returns `{ updated, failed }`. */
-        bulkUpdateStatus: (updates: BulkStatusUpdateItem[]) => Promise<BulkIssueStatusResult>;
+        bulkUpdateStatus: (updates: BulkStatusUpdateItem[], options?: OrgScopedOptions) => Promise<BulkIssueStatusResult>;
         /** List a project's issues by project id (filtered). */
-        listByProject: (projectId: string, query?: ListIssuesQuery) => Promise<Issue[]>;
+        listByProject: (projectId: string, query?: ListIssuesQuery, options?: OrgScopedOptions) => Promise<Issue[]>;
     };
     /** Agent performance, taxonomy analytics, burndown, velocity, and discovery */
     readonly analytics: {
         /** Get per-agent performance metrics. */
-        getAgentPerformance: (query?: AnalyticsQuery) => Promise<AgentPerformance[]>;
+        getAgentPerformance: (query?: AnalyticsQuery, options?: OrgScopedOptions) => Promise<AgentPerformance[]>;
         /** Get agent reliability (convergence/recurrence) metrics. */
-        getAgentReliability: (query?: AgentReliabilityQuery) => Promise<AgentReliabilityResult>;
+        getAgentReliability: (query?: AgentReliabilityQuery, options?: OrgScopedOptions) => Promise<AgentReliabilityResult>;
         /** Get an agent's lifecycle timeline. */
-        getAgentLifecycle: (agentName: string, query?: AnalyticsQuery) => Promise<AgentLifecycleEntry[]>;
+        getAgentLifecycle: (agentName: string, query?: AnalyticsQuery, options?: OrgScopedOptions) => Promise<AgentLifecycleEntry[]>;
         /** Get issue resolution-rate metrics. */
-        getResolutionRates: (query?: AnalyticsQuery) => Promise<ResolutionRateResult[]>;
+        getResolutionRates: (query?: AnalyticsQuery, options?: OrgScopedOptions) => Promise<ResolutionRateResult[]>;
         /** Get files with the most recurring issues. */
-        getFileHotspots: (query?: AnalyticsQuery) => Promise<FileHotspotResult[]>;
+        getFileHotspots: (query?: AnalyticsQuery, options?: OrgScopedOptions) => Promise<FileHotspotResult[]>;
         /** Get the distribution of issues across the failure taxonomy. */
-        getTaxonomyDistribution: (query?: AnalyticsQuery) => Promise<TaxonomyDistributionResult[]>;
+        getTaxonomyDistribution: (query?: AnalyticsQuery, options?: OrgScopedOptions) => Promise<TaxonomyDistributionResult[]>;
         /** Get the full taxonomy analytics breakdown. */
-        getFullTaxonomy: (query?: AnalyticsQuery) => Promise<FullTaxonomyAnalyticsResult>;
+        getFullTaxonomy: (query?: AnalyticsQuery, options?: OrgScopedOptions) => Promise<FullTaxonomyAnalyticsResult>;
         /** Get issue burndown over time. */
-        getBurndown: (query?: BurndownQuery) => Promise<BurndownResultResponse>;
+        getBurndown: (query?: BurndownQuery, options?: OrgScopedOptions) => Promise<BurndownResultResponse>;
         /** Get resolution velocity over time. */
-        getVelocity: (query?: VelocityQuery) => Promise<VelocityResultResponse>;
+        getVelocity: (query?: VelocityQuery, options?: OrgScopedOptions) => Promise<VelocityResultResponse>;
         /** Get issue-discovery rate metrics. */
-        getDiscovery: (query?: DiscoveryQuery) => Promise<DiscoveryResultResponse>;
+        getDiscovery: (query?: DiscoveryQuery, options?: OrgScopedOptions) => Promise<DiscoveryResultResponse>;
         /** Get the agent comparison matrix. */
-        getAgentMatrix: (query?: AgentMatrixQuery) => Promise<AgentMatrixResultResponse>;
+        getAgentMatrix: (query?: AgentMatrixQuery, options?: OrgScopedOptions) => Promise<AgentMatrixResultResponse>;
         /** Get a high-level trend summary. */
-        getTrendSummary: (query?: AnalyticsQuery) => Promise<TrendSummaryResult[]>;
+        getTrendSummary: (query?: AnalyticsQuery, options?: OrgScopedOptions) => Promise<TrendSummaryResult[]>;
         /**
          * Get analytics by metric name (generic endpoint).
          * Returns unvalidated data — use typed methods (getAgentPerformance, etc.) for validated responses.
          *
          */
-        getByMetric: (metric: analyticsOps.AnalyticsMetric, query?: AnalyticsQuery) => Promise<unknown>;
+        getByMetric: (metric: analyticsOps.AnalyticsMetric, query?: AnalyticsQuery, options?: OrgScopedOptions) => Promise<unknown>;
         /** List agents known to the analytics layer. */
-        listAgents: (query?: AnalyticsQuery) => Promise<AgentInfo[]>;
+        listAgents: (query?: AnalyticsQuery, options?: OrgScopedOptions) => Promise<AgentInfo[]>;
     };
     /** Failure taxonomy schema (domains, modes, severities) */
     readonly taxonomy: {

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,KAAK,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAS7E,OAAO,KAAK,YAAY,MAAM,2BAA2B,CAAC;AAE1D,OAAO,KAAK,EACV,aAAa,EACb,UAAU,EACV,aAAa,EACb,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,EACrB,YAAY,EACZ,aAAa,EACb,QAAQ,EACR,UAAU,EACX,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EACV,OAAO,EACP,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,EACtB,aAAa,EACb,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EACV,GAAG,EACH,UAAU,EACV,WAAW,EACX,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,YAAY,EACZ,eAAe,EACf,mBAAmB,EACnB,YAAY,EACZ,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,sBAAsB,EACtB,qBAAqB,EACrB,6BAA6B,EAC7B,gBAAgB,EAChB,uBAAuB,EACvB,aAAa,EACb,UAAU,EACV,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,YAAY,EACb,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EACV,KAAK,EACL,oBAAoB,EACpB,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,SAAS,EACT,YAAY,EACZ,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,EACf,oBAAoB,EACpB,kBAAkB,EACnB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EACV,cAAc,EACd,gBAAgB,EAChB,SAAS,EACT,mBAAmB,EACnB,qBAAqB,EACrB,aAAa,EACb,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,iBAAiB,EACjB,0BAA0B,EAC1B,2BAA2B,EAC3B,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,yBAAyB,EACzB,kBAAkB,EACnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAE1E;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAE/C;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgB;IAE3C;;;;OAIG;gBACS,MAAM,GAAE,eAAoB;IAgCxC;;;;;;OAMG;IACG,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAepE;;;;;;OAMG;IACG,MAAM,IAAI,OAAO,CAAC;QAAE,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC;IAIpD;;;;OAIG;IACH,eAAe,IAAI,OAAO;IAK1B;;;;OAIG;IACH,WAAW,IAAI,SAAS,GAAG,SAAS,GAAG,IAAI;IAS3C,sEAAsE;IACtE,QAAQ,CAAC,IAAI;QACX,mCAAmC;0BACjB,aAAa,KAAG,OAAO,CAAC,gBAAgB,CAAC;QAG3D,+DAA+D;uBAChD,UAAU,KAAG,OAAO,CAAC,aAAa,CAAC;QAGlD,uDAAuD;yBACxC,OAAO,CAAC;YAAE,eAAe,EAAE,MAAM,CAAA;SAAE,CAAC;QAGnD,4DAA4D;gCACpC,MAAM,KAAG,OAAO,CAAC,eAAe,CAAC;QAGzD,oEAAoE;+BAC7C,kBAAkB,KAAG,OAAO,CAAC,eAAe,CAAC;QAGpE,sEAAsE;gCAC9C,mBAAmB,KAAG,OAAO,CAAC,eAAe,CAAC;QAGtE,kEAAkE;gCAC1C,MAAM,KAAG,OAAO,CAAC,eAAe,CAAC;QAGzD,qDAAqD;qBAC1C,OAAO,CAAC,QAAQ,CAAC;QAG5B,6CAA6C;0BAC7B,OAAO,CAAC;YAAE,IAAI,EAAE,UAAU,CAAA;SAAE,CAAC;QAG7C,uEAAuE;+BAChD,kBAAkB,KAAG,OAAO,CAAC;YAAE,IAAI,EAAE,UAAU,CAAA;SAAE,CAAC;QAGzE,8DAA8D;yBAC/C,OAAO,CAAC;YAAE,IAAI,EAAE,WAAW,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC;QAGlE,wCAAwC;4BACtB,OAAO,CAAC,IAAI,CAAC;QAG/B,wDAAwD;2BACvC,OAAO,CAAC,YAAY,EAAE,CAAC;QAGxC,mEAAmE;+BAC5C,iBAAiB,KAAG,OAAO,CAAC,qBAAqB,CAAC;QAGzE,+BAA+B;8BACT,MAAM,KAAG,OAAO,CAAC,IAAI,CAAC;QAG5C,+CAA+C;4BAC7B,OAAO,CAAC,aAAa,EAAE,CAAC;QAG1C,qCAAqC;mCACV,MAAM,KAAG,OAAO,CAAC,IAAI,CAAC;MAEjD;IAMF,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ;QACf,4EAA4E;oBAClE,OAAO,CAAC;YAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QAGrD,mCAAmC;wBACnB,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;QAGzC,4BAA4B;wBACZ,kBAAkB,KAAG,OAAO,CAAC,OAAO,CAAC;QAGrD,mCAAmC;2BAChB,MAAM,SAAS,kBAAkB,KAAG,OAAO,CAAC,OAAO,CAAC;QAGvE,4DAA4D;2BACzC,MAAM,SAAS,kBAAkB,KAAG,OAAO,CAAC,YAAY,CAAC;QAG5E,yDAAyD;+BAClC,MAAM,SAAS,kBAAkB,KAAG,OAAO,CAAC,YAAY,CAAC;QAGhF,sCAAsC;4BAClB,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;QAG7C,wBAAwB;wBACR,kBAAkB,KAAG,OAAO,CAAC,OAAO,CAAC;QAGrD,iDAAiD;+BAC1B,MAAM,KAAG,OAAO,CAAC,sBAAsB,CAAC;QAG/D,4CAA4C;8BACtB,MAAM,UAAU,kBAAkB,KAAG,OAAO,CAAC,aAAa,CAAC;QAGjF;;2CAEmC;+BACZ,MAAM,UAAU,sBAAsB,KAAG,OAAO,CAAC;YAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QAGzG,0DAA0D;0CACxB,MAAM,WAAW,qBAAqB,EAAE,KAAG,OAAO,CAAC,qBAAqB,CAAC;QAG3G,+CAA+C;gCACvB,MAAM,SAAS,gBAAgB,KAAG,OAAO,CAAC,iBAAiB,CAAC;QAGpF;;;;;WAKG;+BACoB,kBAAkB,KAAG,OAAO,CAAC,mBAAmB,CAAC;MAExE;IAMF,gEAAgE;IAChE,QAAQ,CAAC,IAAI;QACX,+DAA+D;sBACjD,YAAY,YAAY;YAAE,qBAAqB,CAAC,EAAE,OAAO,CAAA;SAAE,KAAG,OAAO,CAAC,eAAe,CAAC;QAGpG,mDAAmD;0BACjC,YAAY,YAAY;YAAE,qBAAqB,CAAC,EAAE,OAAO,CAAA;SAAE,KAAG,OAAO,CAAC,mBAAmB,CAAC;QAG5G,yDAAyD;sBAC3C,YAAY,KAAG,OAAO,CAAC,aAAa,CAAC;QAGnD,wDAAwD;yBACvC,gBAAgB,KAAG,OAAO,CAAC,iBAAiB,CAAC;QAG9D,wLAAwL;wBACxK,sBAAsB,YAAY;YAAE,qBAAqB,CAAC,EAAE,OAAO,CAAA;SAAE,KAAG,OAAO,CAAC,YAAY,CAAC;QAG7G,sKAAsK;+BAC/I,6BAA6B,YAAY;YAAE,qBAAqB,CAAC,EAAE,OAAO,CAAA;SAAE,KAAG,OAAO,CAAC,gBAAgB,CAAC;QAG/H,qJAAqJ;gCAC7H,sBAAsB,YAAY;YAAE,qBAAqB,CAAC,EAAE,OAAO,CAAA;SAAE,KAAG,OAAO,CAAC,uBAAuB,CAAC;QAGhI,qEAAqE;mCAC1C,MAAM,UAAU,aAAa,KAAG,OAAO,CAAC;YAAE,IAAI,EAAE,UAAU,EAAE,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QAGzG,sEAAsE;+BAC/C,MAAM,iBAAiB,MAAM,KAAG,OAAO,CAAC,GAAG,CAAC;QAGnE,8EAA8E;gCACtD,MAAM,cAAc,MAAM,KAAG,OAAO,CAAC,UAAU,CAAC;QAGxE,kCAAkC;qBACrB,MAAM,KAAG,OAAO,CAAC,GAAG,CAAC;QAGlC,2KAA2K;4BACvJ,MAAM,SAAS,cAAc,YAAY;YAAE,qBAAqB,CAAC,EAAE,OAAO,CAAA;SAAE,KAAG,OAAO,CAAC,YAAY,CAAC;QAGxH,qFAAqF;mCAC1D,MAAM,SAAS,qBAAqB,YAAY;YAAE,qBAAqB,CAAC,EAAE,OAAO,CAAA;SAAE,KAAG,OAAO,CAAC,gBAAgB,CAAC;QAG1I,6CAA6C;oCACjB,MAAM,SAAS,cAAc,YAAY;YAAE,qBAAqB,CAAC,EAAE,OAAO,CAAA;SAAE,KAAG,OAAO,CAAC,uBAAuB,CAAC;QAG3I,0BAA0B;wBACV,MAAM,KAAG,OAAO,CAAC,YAAY,CAAC;QAI9C,qDAAqD;6BAChC,MAAM,KAAG,OAAO,CAAC,WAAW,CAAC;QAGlD,6CAA6C;wCACb,MAAM,UAAU,oBAAoB,KAAG,OAAO,CAAC,mBAAmB,CAAC;QAGnG,qDAAqD;uCACtB,oBAAoB,KAAG,OAAO,CAAC,mBAAmB,CAAC;QAGlF,uDAAuD;0CACrB,MAAM,SAAS,sBAAsB,KAAG,OAAO,CAAC,iBAAiB,CAAC;MAEpG;IAMF,wEAAwE;IACxE,QAAQ,CAAC,MAAM;QACb,qCAAqC;wBACrB,oBAAoB,KAAG,OAAO,CAAC,KAAK,CAAC;QAGrD,qCAAqC;wBACrB,gBAAgB,KAAG,OAAO,CAAC,KAAK,EAAE,CAAC;QAGnD,wDAAwD;wCACxB,MAAM,WAAW,MAAM,KAAG,OAAO,CAAC,KAAK,CAAC;QAGxE,yDAAyD;iDAChB,MAAM,WAAW,MAAM,SAAS,sBAAsB,KAAG,OAAO,CAAC,kBAAkB,CAAC;QAG7H,0BAA0B;uBACX,MAAM,KAAG,OAAO,CAAC,KAAK,CAAC;QAGtC,kDAAkD;8BAC5B,MAAM,KAAG,OAAO,CAAC,YAAY,CAAC;QAGpD,qCAAqC;8BACf,MAAM,KAAG,OAAO,CAAC,oBAAoB,CAAC;QAG5D,sCAAsC;gCACd,MAAM,SAAS,sBAAsB,KAAG,OAAO,CAAC,KAAK,CAAC;QAG9E,wCAAwC;0BACtB,MAAM,SAAS,gBAAgB,KAAG,OAAO,CAAC,KAAK,CAAC;QAGlE,8BAA8B;2BACX,MAAM,SAAS,oBAAoB,KAAG,OAAO,CAAC,SAAS,CAAC;QAG3E,oCAAoC;2BACjB,MAAM,KAAG,OAAO,CAAC,KAAK,CAAC;QAG1C,+DAA+D;8BACzC,MAAM,KAAG,OAAO,CAAC,YAAY,CAAC;QAGpD,+CAA+C;kCACrB,MAAM,KAAG,OAAO,CAAC,KAAK,CAAC;QAGjD,iEAAiE;oCACrC,oBAAoB,EAAE,KAAG,OAAO,CAAC,qBAAqB,CAAC;QAGnF,wDAAwD;mCAC7B,MAAM,UAAU,eAAe,KAAG,OAAO,CAAC,KAAK,EAAE,CAAC;MAE7E;IAMF,+EAA+E;IAC/E,QAAQ,CAAC,SAAS;QAChB,yCAAyC;sCACX,cAAc,KAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAG1E,8DAA8D;sCAChC,qBAAqB,KAAG,OAAO,CAAC,sBAAsB,CAAC;QAGrF,yCAAyC;uCACV,MAAM,UAAU,cAAc,KAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;QAG9F,yCAAyC;qCACZ,cAAc,KAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;QAG7E,gDAAgD;kCACtB,cAAc,KAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAGvE,kEAAkE;0CAChC,cAAc,KAAG,OAAO,CAAC,0BAA0B,EAAE,CAAC;QAGxF,iDAAiD;kCACvB,cAAc,KAAG,OAAO,CAAC,2BAA2B,CAAC;QAG/E,oCAAoC;8BACd,aAAa,KAAG,OAAO,CAAC,sBAAsB,CAAC;QAGrE,yCAAyC;8BACnB,aAAa,KAAG,OAAO,CAAC,sBAAsB,CAAC;QAGrE,wCAAwC;+BACjB,cAAc,KAAG,OAAO,CAAC,uBAAuB,CAAC;QAGxE,uCAAuC;iCACd,gBAAgB,KAAG,OAAO,CAAC,yBAAyB,CAAC;QAG9E,sCAAsC;kCACZ,cAAc,KAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAGxE;;;;WAIG;8BACmB,YAAY,CAAC,eAAe,UAAU,cAAc,KAAG,OAAO,CAAC,OAAO,CAAC;QAG7F,gDAAgD;6BAC3B,cAAc,KAAG,OAAO,CAAC,SAAS,EAAE,CAAC;MAG1D;IAMF,2DAA2D;IAC3D,QAAQ,CAAC,QAAQ;QACf,oEAAoE;mBAC3D,OAAO,CAAC,gBAAgB,CAAC;MAElC;CAEH"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,KAAK,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAS7E,OAAO,KAAK,YAAY,MAAM,2BAA2B,CAAC;AAE1D,OAAO,KAAK,EACV,aAAa,EACb,UAAU,EACV,aAAa,EACb,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,EACrB,YAAY,EACZ,aAAa,EACb,QAAQ,EACR,UAAU,EACX,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EACV,OAAO,EACP,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,EACtB,aAAa,EACb,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EACV,GAAG,EACH,UAAU,EACV,WAAW,EACX,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,YAAY,EACZ,eAAe,EACf,mBAAmB,EACnB,YAAY,EACZ,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,sBAAsB,EACtB,qBAAqB,EACrB,6BAA6B,EAC7B,gBAAgB,EAChB,uBAAuB,EACvB,aAAa,EACb,UAAU,EACV,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,YAAY,EACb,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EACV,KAAK,EACL,oBAAoB,EACpB,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,SAAS,EACT,YAAY,EACZ,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,EACf,oBAAoB,EACpB,kBAAkB,EACnB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EACV,cAAc,EACd,gBAAgB,EAChB,SAAS,EACT,mBAAmB,EACnB,qBAAqB,EACrB,aAAa,EACb,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,iBAAiB,EACjB,0BAA0B,EAC1B,2BAA2B,EAC3B,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,yBAAyB,EACzB,kBAAkB,EACnB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEvE;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG,gBAAgB,CAAC;AAE/C;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgB;IAE3C;;;;OAIG;gBACS,MAAM,GAAE,eAAoB;IAgCxC;;;;;;OAMG;IACG,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAepE;;;;;;OAMG;IACG,MAAM,IAAI,OAAO,CAAC;QAAE,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC;IAIpD;;;;OAIG;IACH,eAAe,IAAI,OAAO;IAK1B;;;;OAIG;IACH,WAAW,IAAI,SAAS,GAAG,SAAS,GAAG,IAAI;IAK3C;;;;OAIG;IACH,OAAO,CAAC,KAAK;IAQb,sEAAsE;IACtE,QAAQ,CAAC,IAAI;QACX,mCAAmC;0BACjB,aAAa,KAAG,OAAO,CAAC,gBAAgB,CAAC;QAG3D,+DAA+D;uBAChD,UAAU,KAAG,OAAO,CAAC,aAAa,CAAC;QAGlD,uDAAuD;yBACxC,OAAO,CAAC;YAAE,eAAe,EAAE,MAAM,CAAA;SAAE,CAAC;QAGnD,4DAA4D;gCACpC,MAAM,KAAG,OAAO,CAAC,eAAe,CAAC;QAGzD,oEAAoE;+BAC7C,kBAAkB,KAAG,OAAO,CAAC,eAAe,CAAC;QAGpE,sEAAsE;gCAC9C,mBAAmB,KAAG,OAAO,CAAC,eAAe,CAAC;QAGtE,kEAAkE;gCAC1C,MAAM,KAAG,OAAO,CAAC,eAAe,CAAC;QAGzD,qDAAqD;qBAC1C,OAAO,CAAC,QAAQ,CAAC;QAG5B,6CAA6C;0BAC7B,OAAO,CAAC;YAAE,IAAI,EAAE,UAAU,CAAA;SAAE,CAAC;QAG7C,uEAAuE;+BAChD,kBAAkB,KAAG,OAAO,CAAC;YAAE,IAAI,EAAE,UAAU,CAAA;SAAE,CAAC;QAGzE,8DAA8D;yBAC/C,OAAO,CAAC;YAAE,IAAI,EAAE,WAAW,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,CAAC;QAGlE,wCAAwC;4BACtB,OAAO,CAAC,IAAI,CAAC;QAG/B,wDAAwD;2BACvC,OAAO,CAAC,YAAY,EAAE,CAAC;QAGxC,mEAAmE;+BAC5C,iBAAiB,KAAG,OAAO,CAAC,qBAAqB,CAAC;QAGzE,+BAA+B;8BACT,MAAM,KAAG,OAAO,CAAC,IAAI,CAAC;QAG5C,+CAA+C;4BAC7B,OAAO,CAAC,aAAa,EAAE,CAAC;QAG1C,qCAAqC;mCACV,MAAM,KAAG,OAAO,CAAC,IAAI,CAAC;MAEjD;IAMF,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ;QACf,4EAA4E;yBAC3D,gBAAgB,KAAG,OAAO,CAAC;YAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QAG/E,mCAAmC;wBACnB,MAAM,YAAY,gBAAgB,KAAG,OAAO,CAAC,OAAO,CAAC;QAGrE,4BAA4B;wBACZ,kBAAkB,YAAY,gBAAgB,KAAG,OAAO,CAAC,OAAO,CAAC;QAGjF,mCAAmC;2BAChB,MAAM,SAAS,kBAAkB,YAAY,gBAAgB,KAAG,OAAO,CAAC,OAAO,CAAC;QAGnG,4DAA4D;2BACzC,MAAM,SAAS,kBAAkB,YAAY,gBAAgB,KAAG,OAAO,CAAC,YAAY,CAAC;QAGxG,yDAAyD;+BAClC,MAAM,SAAS,kBAAkB,YAAY,gBAAgB,KAAG,OAAO,CAAC,YAAY,CAAC;QAG5G,sCAAsC;4BAClB,MAAM,YAAY,gBAAgB,KAAG,OAAO,CAAC,OAAO,CAAC;QAGzE,wBAAwB;wBACR,kBAAkB,YAAY,gBAAgB,KAAG,OAAO,CAAC,OAAO,CAAC;QAGjF,iDAAiD;+BAC1B,MAAM,YAAY,gBAAgB,KAAG,OAAO,CAAC,sBAAsB,CAAC;QAG3F,4CAA4C;8BACtB,MAAM,UAAU,kBAAkB,YAAY,gBAAgB,KAAG,OAAO,CAAC,aAAa,CAAC;QAG7G;;2CAEmC;+BACZ,MAAM,UAAU,sBAAsB,YAAY,gBAAgB,KAAG,OAAO,CAAC;YAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QAGrI,0DAA0D;0CACxB,MAAM,WAAW,qBAAqB,EAAE,YAAY,gBAAgB,KAAG,OAAO,CAAC,qBAAqB,CAAC;QAGvI,+CAA+C;gCACvB,MAAM,SAAS,gBAAgB,YAAY,gBAAgB,KAAG,OAAO,CAAC,iBAAiB,CAAC;QAGhH;;;;;WAKG;+BACoB,kBAAkB,YAAY,gBAAgB,KAAG,OAAO,CAAC,mBAAmB,CAAC;MAEpG;IAMF,gEAAgE;IAChE,QAAQ,CAAC,IAAI;QACX,+DAA+D;sBACjD,YAAY,YAAY,cAAc,KAAG,OAAO,CAAC,eAAe,CAAC;QAG/E,mDAAmD;0BACjC,YAAY,YAAY,cAAc,KAAG,OAAO,CAAC,mBAAmB,CAAC;QAGvF,yDAAyD;sBAC3C,YAAY,YAAY,gBAAgB,KAAG,OAAO,CAAC,aAAa,CAAC;QAG/E,wDAAwD;yBACvC,gBAAgB,YAAY,gBAAgB,KAAG,OAAO,CAAC,iBAAiB,CAAC;QAG1F,wLAAwL;wBACxK,sBAAsB,YAAY,cAAc,KAAG,OAAO,CAAC,YAAY,CAAC;QAGxF,sKAAsK;+BAC/I,6BAA6B,YAAY,cAAc,KAAG,OAAO,CAAC,gBAAgB,CAAC;QAG1G,qJAAqJ;gCAC7H,sBAAsB,YAAY,cAAc,KAAG,OAAO,CAAC,uBAAuB,CAAC;QAG3G,qEAAqE;mCAC1C,MAAM,UAAU,aAAa,YAAY,gBAAgB,KAAG,OAAO,CAAC;YAAE,IAAI,EAAE,UAAU,EAAE,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QAGrI,sEAAsE;+BAC/C,MAAM,iBAAiB,MAAM,YAAY,gBAAgB,KAAG,OAAO,CAAC,GAAG,CAAC;QAG/F,8EAA8E;gCACtD,MAAM,cAAc,MAAM,YAAY,gBAAgB,KAAG,OAAO,CAAC,UAAU,CAAC;QAGpG,kCAAkC;qBACrB,MAAM,YAAY,gBAAgB,KAAG,OAAO,CAAC,GAAG,CAAC;QAG9D,2KAA2K;4BACvJ,MAAM,SAAS,cAAc,YAAY,cAAc,KAAG,OAAO,CAAC,YAAY,CAAC;QAGnG,qFAAqF;mCAC1D,MAAM,SAAS,qBAAqB,YAAY,cAAc,KAAG,OAAO,CAAC,gBAAgB,CAAC;QAGrH,6CAA6C;oCACjB,MAAM,SAAS,cAAc,YAAY,cAAc,KAAG,OAAO,CAAC,uBAAuB,CAAC;QAGtH,0BAA0B;wBACV,MAAM,YAAY,gBAAgB,KAAG,OAAO,CAAC,YAAY,CAAC;QAI1E,qDAAqD;6BAChC,MAAM,YAAY,gBAAgB,KAAG,OAAO,CAAC,WAAW,CAAC;QAG9E,6CAA6C;wCACb,MAAM,UAAU,oBAAoB,YAAY,gBAAgB,KAAG,OAAO,CAAC,mBAAmB,CAAC;QAG/H,qDAAqD;uCACtB,oBAAoB,YAAY,gBAAgB,KAAG,OAAO,CAAC,mBAAmB,CAAC;QAG9G,uDAAuD;0CACrB,MAAM,SAAS,sBAAsB,YAAY,gBAAgB,KAAG,OAAO,CAAC,iBAAiB,CAAC;MAEhI;IAMF,wEAAwE;IACxE,QAAQ,CAAC,MAAM;QACb,qCAAqC;wBACrB,oBAAoB,YAAY,gBAAgB,KAAG,OAAO,CAAC,KAAK,CAAC;QAGjF,qCAAqC;wBACrB,gBAAgB,YAAY,gBAAgB,KAAG,OAAO,CAAC,KAAK,EAAE,CAAC;QAG/E,wDAAwD;wCACxB,MAAM,WAAW,MAAM,YAAY,gBAAgB,KAAG,OAAO,CAAC,KAAK,CAAC;QAGpG,yDAAyD;iDAChB,MAAM,WAAW,MAAM,SAAS,sBAAsB,YAAY,gBAAgB,KAAG,OAAO,CAAC,kBAAkB,CAAC;QAGzJ,0BAA0B;uBACX,MAAM,YAAY,gBAAgB,KAAG,OAAO,CAAC,KAAK,CAAC;QAGlE,kDAAkD;8BAC5B,MAAM,YAAY,gBAAgB,KAAG,OAAO,CAAC,YAAY,CAAC;QAGhF,qCAAqC;8BACf,MAAM,YAAY,gBAAgB,KAAG,OAAO,CAAC,oBAAoB,CAAC;QAGxF,sCAAsC;gCACd,MAAM,SAAS,sBAAsB,YAAY,gBAAgB,KAAG,OAAO,CAAC,KAAK,CAAC;QAG1G,wCAAwC;0BACtB,MAAM,SAAS,gBAAgB,YAAY,gBAAgB,KAAG,OAAO,CAAC,KAAK,CAAC;QAG9F,8BAA8B;2BACX,MAAM,SAAS,oBAAoB,YAAY,gBAAgB,KAAG,OAAO,CAAC,SAAS,CAAC;QAGvG,oCAAoC;2BACjB,MAAM,YAAY,gBAAgB,KAAG,OAAO,CAAC,KAAK,CAAC;QAGtE,+DAA+D;8BACzC,MAAM,YAAY,gBAAgB,KAAG,OAAO,CAAC,YAAY,CAAC;QAGhF,+CAA+C;kCACrB,MAAM,YAAY,gBAAgB,KAAG,OAAO,CAAC,KAAK,CAAC;QAG7E,iEAAiE;oCACrC,oBAAoB,EAAE,YAAY,gBAAgB,KAAG,OAAO,CAAC,qBAAqB,CAAC;QAG/G,wDAAwD;mCAC7B,MAAM,UAAU,eAAe,YAAY,gBAAgB,KAAG,OAAO,CAAC,KAAK,EAAE,CAAC;MAEzG;IAMF,+EAA+E;IAC/E,QAAQ,CAAC,SAAS;QAChB,yCAAyC;sCACX,cAAc,YAAY,gBAAgB,KAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAGtG,8DAA8D;sCAChC,qBAAqB,YAAY,gBAAgB,KAAG,OAAO,CAAC,sBAAsB,CAAC;QAGjH,yCAAyC;uCACV,MAAM,UAAU,cAAc,YAAY,gBAAgB,KAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;QAG1H,yCAAyC;qCACZ,cAAc,YAAY,gBAAgB,KAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;QAGzG,gDAAgD;kCACtB,cAAc,YAAY,gBAAgB,KAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAGnG,kEAAkE;0CAChC,cAAc,YAAY,gBAAgB,KAAG,OAAO,CAAC,0BAA0B,EAAE,CAAC;QAGpH,iDAAiD;kCACvB,cAAc,YAAY,gBAAgB,KAAG,OAAO,CAAC,2BAA2B,CAAC;QAG3G,oCAAoC;8BACd,aAAa,YAAY,gBAAgB,KAAG,OAAO,CAAC,sBAAsB,CAAC;QAGjG,yCAAyC;8BACnB,aAAa,YAAY,gBAAgB,KAAG,OAAO,CAAC,sBAAsB,CAAC;QAGjG,wCAAwC;+BACjB,cAAc,YAAY,gBAAgB,KAAG,OAAO,CAAC,uBAAuB,CAAC;QAGpG,uCAAuC;iCACd,gBAAgB,YAAY,gBAAgB,KAAG,OAAO,CAAC,yBAAyB,CAAC;QAG1G,sCAAsC;kCACZ,cAAc,YAAY,gBAAgB,KAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAGpG;;;;WAIG;8BACmB,YAAY,CAAC,eAAe,UAAU,cAAc,YAAY,gBAAgB,KAAG,OAAO,CAAC,OAAO,CAAC;QAGzH,gDAAgD;6BAC3B,cAAc,YAAY,gBAAgB,KAAG,OAAO,CAAC,SAAS,EAAE,CAAC;MAGtF;IAMF,2DAA2D;IAC3D,QAAQ,CAAC,QAAQ;QACf,oEAAoE;mBAC3D,OAAO,CAAC,gBAAgB,CAAC;MAElC;CAEH"}