@vibesdotdev/account 0.0.0-stage → 1.0.0-rc.2

package/dist/account.plugin.js

@@ -0,0 +1,15 @@
+import { createRuntimePlugin } from '@vibesdotdev/kernel';
+import { accountPlugins } from "./plugin/index.js";
+export const accountPlugin = createRuntimePlugin({
+    id: 'account',
+    name: 'Account',
+    description: 'Account runtime assets, clients, schemas, and domain package surfaces',
+    dependencies: ['client', 'logging', 'runtime-client', 'storage'],
+    onRegister: async (runtime) => {
+        for (const plugin of accountPlugins) {
+            await runtime.registerPlugin(plugin);
+        }
+    }
+});
+export default accountPlugin;
+//# sourceMappingURL=account.plugin.js.map

package/dist/account.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account.plugin.js","sourceRoot":"","sources":["../src/account.plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,MAAM,CAAC,MAAM,aAAa,GAAG,mBAAmB,CAAC;IAChD,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,SAAS;IACf,WAAW,EAAE,uEAAuE;IACpF,YAAY,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,CAAC;IAEhE,UAAU,EAAE,KAAK,EAAE,OAAmB,EAAE,EAAE;QACzC,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;YACrC,MAAM,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC;IACF,CAAC;CACD,CAAC,CAAC;AAEH,eAAe,aAAa,CAAC"}

package/dist/api/account.api-client.descriptor.d.ts

@@ -0,0 +1,37 @@
+/**
+ * account api-client descriptor — declares the canonical `runtime/client`
+ * surface for cross-origin/cross-process account data access.
+ *
+ * Per docs/architecture/FEATURE-API-CLIENT-RUNTIME-KIND.md, the FEATURE
+ * PACKAGE (this one) owns the runtime kind exposing the user/org/preferences
+ * surface. CLI commands, Svelte loaders, browser stores all resolve via
+ * `getVibesClient<AccountApiClient>('account', runtime)`. No surface package may import
+ * `fetch` directly against account.vibes.dev/api/account/* anymore.
+ *
+ * Account data lives in `apps/account-web/src/server/db` and is exposed
+ * through `apps/account-web/src/routes/api/account/*`. The consumer variant
+ * (cli/browser/sveltekit) talks to that origin over HTTP. A cloud variant is
+ * deliberately omitted: hosted runtimes that co-locate with account-web's
+ * Drizzle handle still go through `+server.ts` handlers; the package does
+ * not own those tables. If/when an in-process variant is needed it can be
+ * added without changing this descriptor.
+ */
+/**
+ * The descriptor used to carry `originEnv` / `defaultOrigin` / `authTokenEnv`
+ * fields enumerating which env vars feed origin and auth. Those were R3.3'd
+ * out — Constitution §`config/manifest` requires env to be resolved ONCE at
+ * bootstrap, not described in the discovery descriptor. The env shape now
+ * lives in `account/src/config/account.config.descriptor.ts`; the impl reads
+ * overlays via `resolveAccountEnvOrigin()`, and the caller's bearer via
+ * `resolveAccountCallerBearer(runtime)` (auth's `resolveCallerBearer` through
+ * the `auth/caller-bearer` context).
+ */
+export declare const accountApiClientDescriptor: {
+    kind: "runtime/client";
+    id: string;
+    name: string;
+    description: string;
+    surfaces: string[];
+};
+export default accountApiClientDescriptor;
+//# sourceMappingURL=account.api-client.descriptor.d.ts.map

package/dist/api/account.api-client.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account.api-client.descriptor.d.ts","sourceRoot":"","sources":["../../src/api/account.api-client.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH;;;;;;;;;GASG;AACH,eAAO,MAAM,0BAA0B;;;;;;CAOrC,CAAC;AAEH,eAAe,0BAA0B,CAAC"}

package/dist/api/account.api-client.descriptor.js

@@ -0,0 +1,38 @@
+/**
+ * account api-client descriptor — declares the canonical `runtime/client`
+ * surface for cross-origin/cross-process account data access.
+ *
+ * Per docs/architecture/FEATURE-API-CLIENT-RUNTIME-KIND.md, the FEATURE
+ * PACKAGE (this one) owns the runtime kind exposing the user/org/preferences
+ * surface. CLI commands, Svelte loaders, browser stores all resolve via
+ * `getVibesClient<AccountApiClient>('account', runtime)`. No surface package may import
+ * `fetch` directly against account.vibes.dev/api/account/* anymore.
+ *
+ * Account data lives in `apps/account-web/src/server/db` and is exposed
+ * through `apps/account-web/src/routes/api/account/*`. The consumer variant
+ * (cli/browser/sveltekit) talks to that origin over HTTP. A cloud variant is
+ * deliberately omitted: hosted runtimes that co-locate with account-web's
+ * Drizzle handle still go through `+server.ts` handlers; the package does
+ * not own those tables. If/when an in-process variant is needed it can be
+ * added without changing this descriptor.
+ */
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+/**
+ * The descriptor used to carry `originEnv` / `defaultOrigin` / `authTokenEnv`
+ * fields enumerating which env vars feed origin and auth. Those were R3.3'd
+ * out — Constitution §`config/manifest` requires env to be resolved ONCE at
+ * bootstrap, not described in the discovery descriptor. The env shape now
+ * lives in `account/src/config/account.config.descriptor.ts`; the impl reads
+ * overlays via `resolveAccountEnvOrigin()`, and the caller's bearer via
+ * `resolveAccountCallerBearer(runtime)` (auth's `resolveCallerBearer` through
+ * the `auth/caller-bearer` context).
+ */
+export const accountApiClientDescriptor = createRuntimeAsset({
+    kind: 'runtime/client',
+    id: 'account',
+    name: 'Account API Client',
+    description: 'Canonical client for account cross-origin data access (user, organizations, active org, runtime-owned UI preference cache/loading/subscriptions/persistence, billing summary, notifications). Consumer variant talks to account-web over HTTP; no cloud variant — account data is owned solely by account-web.',
+    surfaces: ['cli', 'browser', 'sveltekit', 'cloud']
+});
+export default accountApiClientDescriptor;
+//# sourceMappingURL=account.api-client.descriptor.js.map

package/dist/api/account.api-client.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account.api-client.descriptor.js","sourceRoot":"","sources":["../../src/api/account.api-client.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,kBAAkB,CAAC;IAC5D,IAAI,EAAE,gBAAgB;IACtB,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EACV,gTAAgT;IACjT,QAAQ,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC;CAClD,CAAC,CAAC;AAEH,eAAe,0BAA0B,CAAC"}

package/dist/api/account.api-client.impl.d.ts

@@ -0,0 +1,138 @@
+import { AccountClientState } from '../account/state.ts';
+/**
+ * Account api-client — consumer variant.
+ *
+ * Cross-origin bearer-token HTTP client against `${accountOrigin}/api/account/*`.
+ * Loaded in cli/browser/sveltekit/cloud scopes by the account plugin loader.
+ *
+ * NEVER logs the bearer token. The auth header is built fresh per request from
+ * auth's `resolveCallerBearer` (via the `auth/caller-bearer` context) and stays
+ * internal to `buildHeaders()`. Origin precedence (Constitution
+ * §`config/manifest`):
+ *
+ *   <meta name="vibes-account-origin"> (browser host override)
+ *     > account manifest vibesAccountApiUrl / publicVibesAccountOrigin
+ *     > environment catalog apps.account
+ */
+import { BaseRuntimeClient, type RuntimeClientDescriptor } from '@vibesdotdev/kernel/client';
+import { type KindContext, type VibesRuntime } from '@vibesdotdev/kernel';
+import { AccountUiPrefs } from '../account/ui-prefs.ts';
+import type { AccountClientOrganizations, AccountClientPermissions } from '../client/rbac-client.ts';
+import { type AccountOrganizationContext } from '../account/schemas/context.ts';
+import { type CreateOrganizationInvitationInput, type OrganizationInvitation, type OrganizationInvitationsList } from '../organizations/schemas/index.ts';
+import { type AccountActiveOrgResponse, type AccountApiClient, type AccountApiClientRequestOptions, type AccountBillingSummary, type AccountConnectedProvider, type AccountNotification, type AccountNotificationListOptions, type AccountOrgSettingsPatch, type AccountOrgSettingsResponse, type AccountDiscoverHit, type AccountFriendRespondStatus, type AccountIncomingFriendRequest, type AccountOutgoingFriendRequest, type AccountPreferences, type AccountPreferencesPatch, type AccountProviderLinkResponse, type AccountProviderUnlinkResponse, type AccountPublicUser, type AccountResolvedSettings, type AccountSettingsPatch, type AccountSettingsRecord, type AccountThemeAssets, type AccountThemeCatalogProjection, type AccountThemePresetSummary, type AccountUser } from './account.api-client.types.ts';
+/**
+ * Runtime port `VibesRuntime` (Runtime SPEC `./client`): the caller bearer
+ * reads `declaredScope`, which `RuntimeRef` does not carry, directly and
+ * through auth's `resolveCallerBearer` port.
+ */
+export declare class AccountApiClientConsumer extends BaseRuntimeClient<VibesRuntime> implements AccountApiClient {
+    readonly state: AccountClientState;
+    readonly uiPrefs: AccountUiPrefs;
+    private originOverride;
+    private tokenOverride;
+    private httpOverrides;
+    private readonly publicUserCache;
+    private readonly publicUserInflight;
+    /** Permission evaluation over the caller's context, with a server fallback. */
+    readonly permissions: AccountClientPermissions;
+    /** Organization reads over the caller's membership. */
+    readonly organizations: AccountClientOrganizations;
+    private readonly userContextCache;
+    private userContextInflight;
+    private readonly permissionEvaluator;
+    constructor(descriptor?: RuntimeClientDescriptor, context?: KindContext<VibesRuntime>, runtime?: VibesRuntime);
+    /**
+     * Check permission tags against the current session's context. A local
+     * allow is returned only when the session is unchanged from context read
+     * through the decision; any session change retries under the new session
+     * so a prior session's context can never authorize. A local denial falls
+     * back to a server check, which is likewise discarded and retried when
+     * the session changes mid-flight.
+     */
+    private checkWithSession;
+    private permissionSessionChanged;
+    /** Read current-session evidence, refusing after three interrupted attempts. */
+    private readUserContext;
+    /** One session's read; stale responses neither publish nor supply evidence. */
+    private readUserContextForSession;
+    /** Publish only evidence produced by the current session. */
+    private fetchUserContext;
+    /** Drop the session-scoped permission context so the next session revalidates. */
+    private invalidateSessionPermissions;
+    private checkPermissionsHttp;
+    protected onDispose(): void;
+    configureHttp(overrides: Partial<AccountApiClientRequestOptions>): void;
+    forRequest(overrides: Partial<AccountApiClientRequestOptions>): AccountApiClient;
+    isAuthenticated(): Promise<boolean>;
+    /**
+     * True when a thrown error should degrade a read method to its safe default
+     * (null/[]/defaults) rather than surface to the UI: a not-signed-in error, a
+     * soft 401/404, or a schema-validation failure on a 2xx body (backend drift /
+     * empty body). Real transport errors (4xx other than 401/404, 5xx) are NOT
+     * soft and still throw.
+     */
+    private isSoftReadError;
+    /**
+     * A read that degrades to `absent` on a soft failure (see `isSoftReadError`).
+     * A drifted 2xx body is a backend defect: it is logged by class before the
+     * read degrades. Every other failure propagates unchanged.
+     */
+    private readOrAbsent;
+    noSessionHint(): string;
+    whoami(): Promise<AccountUser | null>;
+    listOrganizations(): Promise<AccountOrganizationContext[]>;
+    listOrganizationInvitations(organizationSlugOrId: string): Promise<OrganizationInvitationsList>;
+    createOrganizationInvitation(organizationSlugOrId: string, input: CreateOrganizationInvitationInput): Promise<OrganizationInvitation>;
+    revokeOrganizationInvitation(organizationSlugOrId: string, invitationId: string): Promise<void>;
+    getActiveOrg(): Promise<string | null>;
+    setActiveOrg(orgId: string | null): Promise<AccountActiveOrgResponse>;
+    getBillingSummary(): Promise<AccountBillingSummary | null>;
+    readPreferences(): Promise<AccountPreferences | null>;
+    updatePreferences(patch: AccountPreferencesPatch): Promise<AccountPreferences>;
+    readResolvedSettings(): Promise<AccountResolvedSettings | null>;
+    readUserSettings(): Promise<AccountSettingsRecord | null>;
+    patchUserSettings(patch: AccountSettingsPatch): Promise<AccountSettingsRecord>;
+    readOrgSettings(orgId: string): Promise<AccountOrgSettingsResponse | null>;
+    patchOrgSettings(orgId: string, patch: AccountOrgSettingsPatch): Promise<AccountOrgSettingsResponse>;
+    listThemePresets(): Promise<AccountThemePresetSummary[]>;
+    readThemeCatalogProjection(): Promise<AccountThemeCatalogProjection | null>;
+    readThemeAssets(options?: {
+        orgId?: string | null;
+        cacheKey?: string | null;
+    }): Promise<AccountThemeAssets>;
+    listConnectedProviders(): Promise<AccountConnectedProvider[]>;
+    connectProvider(providerId: string): Promise<AccountProviderLinkResponse>;
+    disconnectProvider(providerId: string): Promise<AccountProviderUnlinkResponse>;
+    listNotifications(options?: AccountNotificationListOptions): Promise<AccountNotification[]>;
+    markNotificationRead(id: string): Promise<void>;
+    markAllNotificationsRead(): Promise<void>;
+    listPendingFriendRequests(): Promise<AccountIncomingFriendRequest[]>;
+    listOutgoingFriendRequests(): Promise<AccountOutgoingFriendRequest[]>;
+    sendFriendRequest(addresseeId: string): Promise<AccountOutgoingFriendRequest>;
+    respondToFriendRequest(requestId: string, status: AccountFriendRespondStatus): Promise<AccountIncomingFriendRequest | AccountOutgoingFriendRequest>;
+    discoverUsers(options: {
+        query: string;
+        limit?: number;
+    }): Promise<AccountDiscoverHit[]>;
+    getPublicUser(userId: string): Promise<AccountPublicUser | null>;
+    private fetchPublicUser;
+    private resolveConfiguredOrigin;
+    /**
+     * An explicit token set through `configureHttp`/`forRequest` is the
+     * caller's parameter; otherwise the caller's bearer comes from auth's
+     * `resolveCallerBearer` on the runtime this client was resolved from.
+     */
+    private resolveConfiguredToken;
+    private hasRequestAuthentication;
+    private buildHeaders;
+    /**
+     * Only an explicit request-scoped override is a fetch. With none, the
+     * canonical helper selects this runtime environment's HTTP port and refuses
+     * when the environment carries none — ambient fetch is never consulted.
+     */
+    private resolveFetcher;
+    private request;
+}
+export default AccountApiClientConsumer;
+//# sourceMappingURL=account.api-client.impl.d.ts.map

package/dist/api/account.api-client.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account.api-client.impl.d.ts","sourceRoot":"","sources":["../../src/api/account.api-client.impl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,iBAAiB,EAAE,KAAK,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAG7F,OAAO,EAKN,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,MAAM,qBAAqB,CAAC;AAK7B,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAErG,OAAO,EAEN,KAAK,0BAA0B,EAE/B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAIN,KAAK,iCAAiC,EACtC,KAAK,sBAAsB,EAC3B,KAAK,2BAA2B,EAChC,MAAM,mCAAmC,CAAC;AAqB3C,OAAO,EAGN,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,EACrB,KAAK,8BAA8B,EACnC,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,8BAA8B,EACnC,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,EACvB,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,EACjC,KAAK,4BAA4B,EACjC,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,2BAA2B,EAChC,KAAK,6BAA6B,EAClC,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,6BAA6B,EAClC,KAAK,yBAAyB,EAC9B,KAAK,WAAW,EAChB,MAAM,+BAA+B,CAAC;AAuDvC;;;;GAIG;AACH,qBAAa,wBAAyB,SAAQ,iBAAiB,CAAC,YAAY,CAAE,YAAW,gBAAgB;IACxG,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAgC;IAClE,QAAQ,CAAC,OAAO,iBAAkC;IAClD,OAAO,CAAC,cAAc,CAAuB;IAC7C,OAAO,CAAC,aAAa,CAAwC;IAC7D,OAAO,CAAC,aAAa,CAA+C;IACpE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAwC;IACxE,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAwD;IAE3F,+EAA+E;IAC/E,QAAQ,CAAC,WAAW,EAAE,wBAAwB,CAAC;IAC/C,uDAAuD;IACvD,QAAQ,CAAC,aAAa,EAAE,0BAA0B,CAAC;IACnD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA8E;IAC/G,OAAO,CAAC,mBAAmB,CAA0E;IACrG,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA6B;gBAGhE,UAAU,GAAE,uBAGX,EACD,OAAO,CAAC,EAAE,WAAW,CAAC,YAAY,CAAC,EACnC,OAAO,CAAC,EAAE,YAAY;IA4BvB;;;;;;;OAOG;YACW,gBAAgB;IA0B9B,OAAO,CAAC,wBAAwB;IAQhC,gFAAgF;YAClE,eAAe;IAS7B,+EAA+E;YACjE,yBAAyB;IAsBvC,6DAA6D;YAC/C,gBAAgB;IAQ9B,kFAAkF;IAClF,OAAO,CAAC,4BAA4B;YAKtB,oBAAoB;cAoBf,SAAS,IAAI,IAAI;IAKpC,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,8BAA8B,CAAC,GAAG,IAAI;IAmBvE,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,8BAA8B,CAAC,GAAG,gBAAgB;IAS1E,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC;IAQzC;;;;;;OAMG;IACH,OAAO,CAAC,eAAe;IASvB;;;;OAIG;YACW,YAAY;IAY1B,aAAa,IAAI,MAAM;IAIjB,MAAM,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAQrC,iBAAiB,IAAI,OAAO,CAAC,0BAA0B,EAAE,CAAC;IAW1D,2BAA2B,CAChC,oBAAoB,EAAE,MAAM,GAC1B,OAAO,CAAC,2BAA2B,CAAC;IAQjC,4BAA4B,CACjC,oBAAoB,EAAE,MAAM,EAC5B,KAAK,EAAE,iCAAiC,GACtC,OAAO,CAAC,sBAAsB,CAAC;IAU5B,4BAA4B,CACjC,oBAAoB,EAAE,MAAM,EAC5B,YAAY,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC;IAQV,YAAY,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAWtC,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,wBAAwB,CAAC;IASrE,iBAAiB,IAAI,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;IAmB1D,eAAe,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAQrD,iBAAiB,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAI9E,oBAAoB,IAAI,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC;IAW/D,gBAAgB,IAAI,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;IAUzD,iBAAiB,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAS9E,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC;IAU1E,gBAAgB,CACrB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,uBAAuB,GAC5B,OAAO,CAAC,0BAA0B,CAAC;IAShC,gBAAgB,IAAI,OAAO,CAAC,yBAAyB,EAAE,CAAC;IAWxD,0BAA0B,IAAI,OAAO,CAAC,6BAA6B,GAAG,IAAI,CAAC;IAU3E,eAAe,CACpB,OAAO,GAAE;QACR,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACpB,GACJ,OAAO,CAAC,kBAAkB,CAAC;IAkBxB,sBAAsB,IAAI,OAAO,CAAC,wBAAwB,EAAE,CAAC;IAW7D,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,CAAC;IASzE,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAS9E,iBAAiB,CACtB,OAAO,CAAC,EAAE,8BAA8B,GACtC,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAa3B,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ/C,wBAAwB,IAAI,OAAO,CAAC,IAAI,CAAC;IAIzC,yBAAyB,IAAI,OAAO,CAAC,4BAA4B,EAAE,CAAC;IAUpE,0BAA0B,IAAI,OAAO,CAAC,4BAA4B,EAAE,CAAC;IAUrE,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,4BAA4B,CAAC;IAmB7E,sBAAsB,CAC3B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,0BAA0B,GAChC,OAAO,CAAC,4BAA4B,GAAG,4BAA4B,CAAC;IASjE,aAAa,CAAC,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAcxF,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAmBxD,eAAe;YAaf,uBAAuB;IAIrC;;;;OAIG;YACW,sBAAsB;YAItB,wBAAwB;YAMxB,YAAY;IAW1B;;;;OAIG;IACH,OAAO,CAAC,cAAc;YAIR,OAAO;CAwCrB;AAOD,eAAe,wBAAwB,CAAC"}