@vess-id/ai-identity 0.0.0-dev-20260902121045

package/dist/registry/access-orchestrator.d.ts

@@ -0,0 +1,184 @@
+import { ActionRegistry, Relation, ResourceType } from './action-registry';
+/** ReBAC: 関係性チェック（SpiceDB/Zanzibar想定）。OR解釈で複数relationのいずれか成立でtrue */
+export interface ReBACChecker {
+    check(subjectDid: string, // User DID or Agent DID
+    relations: Relation[], // ["editor","act_as"] など
+    resourceRef: ResourceRef): Promise<boolean>;
+}
+/** ABAC: 条件判定（Cerbos/OPA想定）。trueなら許可。 */
+export interface ABACPolicyEngine {
+    evaluate(input: AbacInput): Promise<AbacDecision>;
+}
+export interface AbacInput {
+    principal: {
+        id: string;
+        roles?: string[];
+        claims?: Record<string, unknown>;
+    };
+    resource: {
+        kind: ResourceType;
+        id: string;
+        attr?: Record<string, unknown>;
+    };
+    action: string;
+    context?: Record<string, unknown>;
+}
+export interface AbacDecision {
+    allow: boolean;
+    ruleId?: string;
+    reason?: string;
+}
+/** Credential選択：最小スコープを満たす外部トークンを取得（Bot/Installation/OAuth） */
+export interface CredentialStore {
+    pickMinimal(provider: Provider, // "slack" | "github" | "gmail" | "calendar" | "jira"
+    iaId: string, // IntegrationAccount ID
+    requiredScopes: string[], subjectDid: string): Promise<CredentialRef | null>;
+}
+export type { CanonicalProvider as Provider } from './providers';
+import type { CanonicalProvider as Provider } from './providers';
+export interface CredentialRef {
+    id: string;
+    provider: Provider;
+    scopes: string[];
+}
+/** VP検証（SD-JWT/ISO 23220/mdoc/OID4VP）：成功時にVCクレームを返す */
+export interface VpVerifier {
+    verifyAndExtractClaims(vpToken: string): Promise<VerifiedVcClaims>;
+}
+/** 発行した Delegation VC に含めることを想定した最小構造 */
+export interface VerifiedVcClaims {
+    allowed_actions: string[];
+    resource_scope: ResourceScope[];
+    expires_at?: string;
+    actor?: string;
+    assurance_level?: number;
+    cnf?: {
+        jwk_thumbprint?: string;
+    };
+    [k: string]: unknown;
+}
+export interface ResourceRef {
+    /** プロバイダ別のリソース識別子（例：Slack channel id, GitHub repo full_name, Drive file id） */
+    id: string;
+    type: ResourceType;
+    /** 紐づくIntegrationAccountのID（どのSlackワークスペース/どのGitHub Orgか） */
+    iaId: string;
+    /** 追加属性（機密度など） */
+    attr?: Record<string, unknown>;
+}
+/** VCに刻む「スコープ」表現の一例（最小定義） */
+export type ResourceScope = {
+    kind: 'Workspace';
+    id: string;
+} | {
+    kind: 'IntegrationAccount';
+    id: string;
+} | {
+    kind: 'Resource';
+    type: ResourceType;
+    id: string;
+};
+/** 監査用の判定理由 */
+export interface DecisionTrace {
+    rebac?: {
+        ok: boolean;
+        relations: Relation[];
+    };
+    delegation?: {
+        ok: boolean;
+        matched_action?: boolean;
+        in_scope?: boolean;
+        notExpired?: boolean;
+    };
+    abac?: {
+        ok: boolean;
+        ruleId?: string;
+        reason?: string;
+    };
+    scope?: {
+        ok: boolean;
+        required: string[];
+        chosenCredentialId?: string;
+    };
+}
+/** Capability名やAction名（混在OK）から、実アクション配列に解決 */
+export declare function resolveActionsFromSelection(registry: ActionRegistry, selection: string[]): string[];
+export interface PlanDelegationInput {
+    registry: ActionRegistry;
+    issuerUserDid: string;
+    delegateAgentDid: string;
+    /** ユーザーが UI 等で選んだアクション/ケイパビリティ */
+    requested: string[];
+    /** この委任が及ぶスコープ（Workspace/IA/Resource） */
+    resourceScope: ResourceScope[];
+    /** 有効期限（ISO） */
+    expiresAt?: string;
+    /** ABAC前提で要求する最小アシュアランス等（必要なら） */
+    minAssuranceLevel?: number;
+    /** ABAC/Cerbos用のruntime context（時間帯/場所/リスク等） */
+    context?: Record<string, unknown>;
+    /** Provider 推測のためのヒント（Credential選択時に使う） */
+    providerByIa?: Record<string, Provider>;
+    /** 実行時に用いるReBAC/ABAC/Credentialのハンドラ */
+    rebac: ReBACChecker;
+    abac: ABACPolicyEngine;
+    creds: CredentialStore;
+}
+export interface PlanDelegationResult {
+    granted_actions: string[];
+    rejected_actions: string[];
+    traceByAction: Record<string, DecisionTrace>;
+}
+/**
+ * VC発行前に、リクエストされたアクション群を
+ * - Registryに存在
+ * - ReBAC（委任元=issuerUserDid が十分な関係を持つ）
+ * - ABACポリシー適合
+ * - 必要スコープを満たすクレデンシャルが存在
+ * の観点で絞り込み、発行して良いものだけ返す。
+ */
+export declare function planDelegationForVC(input: PlanDelegationInput): Promise<PlanDelegationResult>;
+export interface CheckPermissionInput {
+    registry: ActionRegistry;
+    actorDid: string;
+    onBehalfOfDid?: string;
+    action: string;
+    resource: ResourceRef;
+    vpToken: string;
+    context?: Record<string, unknown>;
+    rebac: ReBACChecker;
+    abac: ABACPolicyEngine;
+    creds: CredentialStore;
+    vpVerifier: VpVerifier;
+}
+export interface CheckPermissionResult {
+    allow: boolean;
+    reason?: string;
+    trace: DecisionTrace;
+    credential?: CredentialRef | null;
+}
+/**
+ * 実行直前のフル判定。
+ * 1) ReBAC: actor がresourceに対する 基本関係/act_as を満たすか
+ * 2) Delegation(VC): actionがallowedか / resourceがscope内か / 期限内か
+ * 3) ABAC: コンテキストやassurance levelに適合するか
+ * 4) Scope/Credential: 必要スコープを満たすクレデンシャルが取得できるか
+ */
+export declare function checkPermissionWithVP(input: CheckPermissionInput): Promise<CheckPermissionResult>;
+export declare class AllowAllAbac implements ABACPolicyEngine {
+    evaluate(): Promise<AbacDecision>;
+}
+export declare class SimpleRebac implements ReBACChecker {
+    private allowRelations;
+    constructor(allowRelations?: Relation[]);
+    check(_sub: string, relations: Relation[]): Promise<boolean>;
+}
+export declare class DummyCreds implements CredentialStore {
+    pickMinimal(provider: Provider, _iaId: string, requiredScopes: string[]): Promise<CredentialRef | null>;
+}
+export declare class DummyVpVerifier implements VpVerifier {
+    private vc;
+    constructor(vc: VerifiedVcClaims);
+    verifyAndExtractClaims(): Promise<VerifiedVcClaims>;
+}
+//# sourceMappingURL=access-orchestrator.d.ts.map

package/dist/registry/access-orchestrator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-orchestrator.d.ts","sourceRoot":"","sources":["../../src/registry/access-orchestrator.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,cAAc,EAGd,QAAQ,EACR,YAAY,EAKb,MAAM,mBAAmB,CAAA;AAK1B,qEAAqE;AACrE,MAAM,WAAW,YAAY;IAC3B,KAAK,CACH,UAAU,EAAE,MAAM,EAAE,wBAAwB;IAC5C,SAAS,EAAE,QAAQ,EAAE,EAAE,yBAAyB;IAChD,WAAW,EAAE,WAAW,GACvB,OAAO,CAAC,OAAO,CAAC,CAAA;CACpB;AAED,yCAAyC;AACzC,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;CAClD;AACD,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE;QACT,EAAE,EAAE,MAAM,CAAA;QACV,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;QAChB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KACjC,CAAA;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,YAAY,CAAA;QAClB,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAC/B,CAAA;IACD,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC;AACD,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,+DAA+D;AAC/D,MAAM,WAAW,eAAe;IAC9B,WAAW,CACT,QAAQ,EAAE,QAAQ,EAAE,qDAAqD;IACzE,IAAI,EAAE,MAAM,EAAE,wBAAwB;IACtC,cAAc,EAAE,MAAM,EAAE,EACxB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAA;CACjC;AACD,YAAY,EAAE,iBAAiB,IAAI,QAAQ,EAAE,MAAM,aAAa,CAAA;AAChE,OAAO,KAAK,EAAE,iBAAiB,IAAI,QAAQ,EAAE,MAAM,aAAa,CAAA;AAChE,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,QAAQ,CAAA;IAClB,MAAM,EAAE,MAAM,EAAE,CAAA;CAEjB;AAED,uDAAuD;AACvD,MAAM,WAAW,UAAU;IACzB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;CACnE;AACD,yCAAyC;AACzC,MAAM,WAAW,gBAAgB;IAE/B,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,cAAc,EAAE,aAAa,EAAE,CAAA;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,eAAe,CAAC,EAAE,MAAM,CAAA;IAExB,GAAG,CAAC,EAAE;QAAE,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAEjC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;CACrB;AAID,MAAM,WAAW,WAAW;IAC1B,+EAA+E;IAC/E,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,YAAY,CAAA;IAClB,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAA;IACZ,kBAAkB;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC/B;AAED,6BAA6B;AAC7B,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,YAAY,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAA;AAExD,eAAe;AACf,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,QAAQ,EAAE,CAAA;KAAE,CAAA;IAC9C,UAAU,CAAC,EAAE;QACX,EAAE,EAAE,OAAO,CAAA;QACX,cAAc,CAAC,EAAE,OAAO,CAAA;QACxB,QAAQ,CAAC,EAAE,OAAO,CAAA;QAClB,UAAU,CAAC,EAAE,OAAO,CAAA;KACrB,CAAA;IACD,IAAI,CAAC,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACxD,KAAK,CAAC,EAAE;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACzE;AAID,8CAA8C;AAC9C,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,cAAc,EACxB,SAAS,EAAE,MAAM,EAAE,GAClB,MAAM,EAAE,CAkBV;AAID,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,cAAc,CAAA;IACxB,aAAa,EAAE,MAAM,CAAA;IACrB,gBAAgB,EAAE,MAAM,CAAA;IACxB,kCAAkC;IAClC,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,yCAAyC;IACzC,aAAa,EAAE,aAAa,EAAE,CAAA;IAC9B,gBAAgB;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,kCAAkC;IAClC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,gDAAgD;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACjC,2CAA2C;IAC3C,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;IACvC,wCAAwC;IACxC,KAAK,EAAE,YAAY,CAAA;IACnB,IAAI,EAAE,gBAAgB,CAAA;IACtB,KAAK,EAAE,eAAe,CAAA;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;CAC7C;AAED;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,oBAAoB,CAAC,CA6G/B;AAsBD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,cAAc,CAAA;IACxB,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,WAAW,CAAA;IACrB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACjC,KAAK,EAAE,YAAY,CAAA;IACnB,IAAI,EAAE,gBAAgB,CAAA;IACtB,KAAK,EAAE,eAAe,CAAA;IACtB,UAAU,EAAE,UAAU,CAAA;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,aAAa,CAAA;IACpB,UAAU,CAAC,EAAE,aAAa,GAAG,IAAI,CAAA;CAClC;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,qBAAqB,CAAC,CA2EhC;AAsBD,qBAAa,YAAa,YAAW,gBAAgB;IAC7C,QAAQ,IAAI,OAAO,CAAC,YAAY,CAAC;CAGxC;AACD,qBAAa,WAAY,YAAW,YAAY;IAE5C,OAAO,CAAC,cAAc;gBAAd,cAAc,GAAE,QAAQ,EAAqD;IAEjF,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;CAGnE;AACD,qBAAa,UAAW,YAAW,eAAe;IAC1C,WAAW,CACf,QAAQ,EAAE,QAAQ,EAClB,KAAK,EAAE,MAAM,EACb,cAAc,EAAE,MAAM,EAAE,GACvB,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;CAKjC;AACD,qBAAa,eAAgB,YAAW,UAAU;IACpC,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,gBAAgB;IAClC,sBAAsB,IAAI,OAAO,CAAC,gBAAgB,CAAC;CAG1D"}

package/dist/registry/action-aliases.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Centralized action utilities — single source of truth.
+ *
+ * Canonical action format is `provider.resource.operation` (dot format).
+ * Legacy `provider:resource.operation` (colon format) is supported for
+ * backward compatibility with existing grants.
+ */
+/**
+ * Canonicalize an action name.
+ *
+ * Returns the canonical dot format: `provider.resource.operation`.
+ * If action already contains the provider prefix, returns as-is.
+ *
+ * @param provider - Provider name (e.g., 'slack', 'github')
+ * @param action - Action name (e.g., 'message.post')
+ * @returns Canonical action string (e.g., 'slack.message.post')
+ */
+export declare function canonicalizeAction(provider: string, action: string): string;
+/**
+ * Get aliases for a canonical action.
+ *
+ * Returns the legacy colon format for backward compatibility.
+ */
+export declare function getActionAliases(canonicalAction: string): string[];
+/**
+ * Get all equivalent forms of an action with provider prefix.
+ *
+ * Returns both dot format (canonical) and colon format (legacy).
+ */
+export declare function getAllActionForms(provider: string, action: string): string[];
+/**
+ * Check if two action strings refer to the same action.
+ *
+ * Handles both dot and colon separators.
+ */
+export declare function isActionEquivalent(action1: string, action2: string): boolean;
+//# sourceMappingURL=action-aliases.d.ts.map

package/dist/registry/action-aliases.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-aliases.d.ts","sourceRoot":"","sources":["../../src/registry/action-aliases.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAO3E;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,EAAE,CASlE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAgB5E;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAuB5E"}

package/dist/registry/action-input-validator.d.ts

@@ -0,0 +1,19 @@
+export type ValidateActionInputResult = {
+    valid: true;
+} | {
+    valid: false;
+    errors: string[];
+};
+/**
+ * Validate `params` against the registry input_schema for `action`.
+ *
+ * Returns `{ valid: true }` for actions absent from the registry or lacking an
+ * input_schema. For known actions, performs a shallow check:
+ *   a. required-key presence,
+ *   b. unknown top-level keys (only when schema is additionalProperties:false),
+ *   c. flat enum membership,
+ *   d. naive top-level type checks.
+ * Deep `items` validation is intentionally skipped (server is authority).
+ */
+export declare function validateActionInput(action: string, params: Record<string, unknown>): ValidateActionInputResult;
+//# sourceMappingURL=action-input-validator.d.ts.map

package/dist/registry/action-input-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-input-validator.d.ts","sourceRoot":"","sources":["../../src/registry/action-input-validator.ts"],"names":[],"mappings":"AA2BA,MAAM,MAAM,yBAAyB,GACjC;IAAE,KAAK,EAAE,IAAI,CAAA;CAAE,GACf;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAAA;AA0EtC;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,yBAAyB,CAoG3B"}

package/dist/registry/action-normalizer.d.ts

@@ -0,0 +1,47 @@
+/**
+ * MCP action name normalization — single source of truth.
+ *
+ * Valid action names are derived from ACTION_REGISTRY, ensuring consistency
+ * between grant definitions, MCP tool schemas, and tool adapter implementations.
+ *
+ * This module provides normalization logic to handle common misformats from LLM clients:
+ * - Double prefix: "calendar.calendar.event.list" → "calendar.event.list"
+ * - Colon format: "slack:message.post" → "slack.message.post"
+ * - Missing prefix: "message.post" → "slack.message.post"
+ *
+ * `packages/remote-mcp` imports from here to avoid duplication.
+ */
+/**
+ * Valid MCP-facing action names by tool, derived from ACTION_REGISTRY.
+ * These are the canonical names that LLM clients should send and that
+ * the API grant system uses for permission matching.
+ */
+export declare const VALID_MCP_ACTIONS: Record<string, string[]>;
+/**
+ * All valid MCP tool names.
+ */
+export declare const VALID_MCP_TOOLS: string[];
+/**
+ * Get all valid MCP action names across all tools.
+ */
+export declare function getAllValidMcpActionNames(): string[];
+/**
+ * Get valid MCP action names for a specific tool.
+ * @returns Array of action names, or empty array if tool is unknown.
+ */
+export declare function getValidMcpActionNames(toolName: string): string[];
+/**
+ * Normalize an MCP action name to canonical `provider.resource.operation` format.
+ *
+ * Handles common misformats from LLM clients:
+ * 1. Already valid → return as-is
+ * 2. Double prefix: "calendar.calendar.event.list" → strip leading "toolName." → "calendar.event.list"
+ * 3. Colon format: "slack:message.post" → replace ":" with "." → "slack.message.post"
+ * 4. Missing prefix: "message.post" → prepend "toolName." → "slack.message.post"
+ *
+ * @param toolName - Tool name (e.g., "slack", "calendar")
+ * @param actionName - Possibly misformatted action name from LLM client
+ * @returns Normalized action name, or the original if no valid match found
+ */
+export declare function normalizeMcpActionName(toolName: string, actionName: string): string;
+//# sourceMappingURL=action-normalizer.d.ts.map

package/dist/registry/action-normalizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-normalizer.d.ts","sourceRoot":"","sources":["../../src/registry/action-normalizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAoBH;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAuB,CAAA;AAE9E;;GAEG;AACH,eAAO,MAAM,eAAe,EAAqC,MAAM,EAAE,CAAA;AAEzE;;GAEG;AACH,wBAAgB,yBAAyB,IAAI,MAAM,EAAE,CAEpD;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAEjE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAsCnF"}