@wildo-ai/external-connectors-models 1.1.9 → 1.1.11

package/dist/esm/protocols/rest-operations.external-connectors-models.schemas.d.ts

@@ -88,7 +88,21 @@ export declare enum ProviderRestResponseDecoding {
     /** Keep the body as text — a CSV export, an XML document. The operation's output is that string. */
     TEXT = "text",
     /** Read nothing — a write whose answer carries no information (a 204). The output is `undefined`. */
-    NONE = "none"
+    NONE = "none",
+    /**
+     * Keep the raw bytes — a signed PDF, an evidence container (#2910). Requires `binaryResponse` (a byte ceiling and the
+     * accepted media types); the output is `{ bytes, contentType }`. The bytes are the vendor's, unscanned: do not relay
+     * them to a person or write them as a file yourself. Keep one through `ProviderDocumentFileWriterBackendService`
+     * (`@wildo-ai/saas-backend-lib`, #2963), which stores it as a scanned file (`scan: REQUIRED`) whatever the caller asks.
+     */
+    BINARY = "binary"
+}
+/** The bounds a {@link ProviderRestResponseDecoding.BINARY} answer is read under (#2910). Both mandatory. */
+export interface ProviderRestBinaryResponse {
+    /** The most bytes the vendor's answer may hold. Enforced while streaming; a larger answer is refused, never truncated. */
+    readonly maxBytes: number;
+    /** Media types accepted (`application/pdf`), compared on the type alone, case-insensitively. */
+    readonly acceptedContentTypes: readonly string[];
 }
 /**
  * How a listing operation continues. A HINT the caller reads, never something the executor acts
@@ -118,6 +132,14 @@ export interface ProviderRestOperationParameter {
     readonly required?: boolean;
     /** A literal value sent on every call — for a version pin or a fixed format selector. */
     readonly constantValue?: string;
+    /**
+     * PATH only (#2663): the value may hold several `/`-separated segments, each percent-encoded on its own, instead of
+     * one segment whose `/` is encoded. For a vendor that routes per region or tenant inside ONE origin: the Bot
+     * Connector's `serviceUrl` is `https://smba.trafficmanager.net/<region>/…`, and an operation's path begins with that
+     * region path. Empty segments, `.` and `..` are refused, so the value moves the path within the base origin and never
+     * above it; the origin itself cannot move, as for every path value.
+     */
+    readonly multiSegment?: true;
     readonly description?: string;
 }
 /** How the request body is built from the operation's input. */
@@ -207,6 +229,19 @@ export interface ProviderRestOperation {
     readonly method: API_HttpMethod;
     /** Relative to the provider's base URL. `{token}` interpolates a PATH parameter of that name. */
     readonly pathTemplate: string;
+    /**
+     * The API host this operation is served on, when it is not the base URL's host (#2546): an exact lower-case DNS name,
+     * always https. The request is then `https://<host><pathTemplate>`; the base URL's path is not prepended, since it
+     * belongs to the base's host. Absent, which is the norm, the request is `<baseUrl><pathTemplate>`.
+     *
+     * Admitted only where the token the call already carries is valid: the connection's OAuth2 client declares
+     * `audiences`, and the audience that admits the base URL's host admits this host too. So no second token is minted
+     * and no token reaches a host outside its own resource ({@link describeProviderRestOperationHostDefect}). This is
+     * Google's shape: one grant serves every `*.googleapis.com` API, and a Gmail operation names `gmail.googleapis.com`
+     * on the one Google connection. Microsoft's Dataverse is not this shape: its token is a different audience's, so it
+     * stays a provider of its own sharing the connection.
+     */
+    readonly host?: string;
     readonly summary?: string;
     /**
      * Whether the operation MUTATES the vendor.
@@ -248,6 +283,8 @@ export interface ProviderRestOperation {
      * validates the string.
      */
     readonly responseDecoding?: ProviderRestResponseDecoding;
+    /** Required with `responseDecoding: BINARY`, refused with any other decoding (#2910). */
+    readonly binaryResponse?: ProviderRestBinaryResponse;
     /** Dot-path to the payload inside the response body. Absent = the body IS the payload. JSON answers only. */
     readonly resultPath?: string;
     readonly pagination?: ProviderRestOperationPagination;
@@ -316,6 +353,151 @@ export interface ProviderRestOperationContributor {
     /** The installed version of that package, as `wildo config sync` read it from the manifest. */
     readonly packageVersion: string;
 }
+/**
+ * How a vendor states, INSIDE a successful HTTP answer, whether the call it answered succeeded (#2661).
+ *
+ * Most vendors say it with the status: a 4xx or 5xx is a failure, and the transport already treats it as one. Some
+ * answer HTTP 200 for every call they could parse and put the verdict in the body. Slack's Web API is the case:
+ * "All Web API responses contain a JSON object, which will always contain a top-level boolean property `ok` that
+ * indicates success or failure", and "For failure results, the `error` property will contain a short machine-readable
+ * error code".
+ * spec-cite: https://docs.slack.dev/apis/web-api/ — "Evaluating responses", fetched 2026-10-06.
+ *
+ * Without this declaration such an answer reads as a success: `channel_not_found` is returned to the caller as if it
+ * were a posted message, the call's audit row says it succeeded, and a revoked token stays "accepted" on the
+ * credential. Declared on the provider's REST contract (`rest.applicationOutcome`), because the envelope is a fact
+ * about the vendor's API, not about one operation.
+ *
+ * Read for JSON answers only: an operation declaring `TEXT` or `NONE` decoding (a file download) has no envelope.
+ */
+export interface ProviderRestApplicationOutcome {
+    /** Dot-path to the boolean the vendor sets `true` exactly when the call succeeded (Slack: `ok`). */
+    readonly successFlagPath: string;
+    /** Dot-path to the vendor's machine-readable error code on a failed call (Slack: `error`). */
+    readonly errorCodePath: string;
+    /**
+     * The error codes that mean the vendor refused the CREDENTIAL itself, rather than the request: the stored
+     * credential is then recorded as rejected, the way the vendor's answer said (Slack: `invalid_auth`,
+     * `account_inactive`, `token_revoked`, `token_expired`). A code that means the caller sent no credential at all
+     * (Slack's `not_authed`) does not belong here: that is our request's fault, not a dead credential.
+     */
+    readonly credentialRefusedErrorCodes?: readonly string[];
+}
+/** What a successful HTTP answer said about the call, read through a {@link ProviderRestApplicationOutcome}. */
+export declare enum ProviderRestApplicationOutcomeKind {
+    /** The success flag is `true`. */
+    SUCCEEDED = "succeeded",
+    /** The success flag is `false`: the vendor refused the call, naming why at the error path when it could. */
+    REFUSED = "refused",
+    /** The flag is absent or not a boolean: the answer does not carry the envelope its provider declares. */
+    UNSTATED = "unstated"
+}
+/** The verdict a body carries. `errorCode` is kept only when it is a code-shaped string, never prose. */
+export type ProviderRestApplicationOutcomeVerdict = {
+    readonly kind: ProviderRestApplicationOutcomeKind.SUCCEEDED;
+} | {
+    readonly kind: ProviderRestApplicationOutcomeKind.REFUSED;
+    readonly errorCode?: string;
+} | {
+    readonly kind: ProviderRestApplicationOutcomeKind.UNSTATED;
+};
+/**
+ * A vendor error code as the engine may carry it: identifier characters only, at most 128. A value of any other shape
+ * is dropped rather than carried, because it travels to audit rows, logs and API answers, and a vendor that puts a
+ * sentence (or request data) where a code belongs must not have it repeated there.
+ */
+export declare const PROVIDER_VENDOR_ERROR_CODE_SHAPE: RegExp;
+/**
+ * The defects of a declared outcome envelope, refused at boot: an empty path, and a credential-refusal code that is not
+ * code-shaped, which the transport would never carry and so would never match (#2661 review L7).
+ */
+export declare function describeProviderRestApplicationOutcomeDefects(outcome: ProviderRestApplicationOutcome): string[];
+/**
+ * The placeholder a client-credentials token URL may carry for the tenant the credential belongs to:
+ * `https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token`. Filled from the connection's
+ * {@link ProviderRestClientCredentials.tenantSecretRef} slot, never from a request.
+ */
+export declare const PROVIDER_CLIENT_CREDENTIALS_TENANT_PLACEHOLDER = "{tenant}";
+/** A tenant value the token URL admits: a GUID or a DNS name. Nothing that can leave the URL's path segment. */
+export declare const PROVIDER_CLIENT_CREDENTIALS_TENANT_SHAPE: RegExp;
+/** What a {@link ProviderClientCredentialsVerifiedFact} records: a value the person typed and the vendor accepted. */
+export declare enum ProviderClientCredentialsFactSource {
+    /** The client id the token endpoint issued a token for: Microsoft's bot App ID. */
+    CLIENT_ID = "client_id",
+    /** The tenant whose token endpoint issued it. */
+    TENANT = "tenant"
+}
+/**
+ * One fact a client-credentials connection records once the vendor has accepted its credential. See
+ * {@link ProviderRestClientCredentials.verifiedAccountFacts}.
+ */
+export interface ProviderClientCredentialsVerifiedFact {
+    readonly source: ProviderClientCredentialsFactSource;
+    /**
+     * `true` when the inbound receiver routes deliveries to an organization by this fact: an organization's own Teams
+     * bot, by its App ID (#2663). Such a fact may name ONE organization only, so a connect whose value another
+     * organization's enabled connection holds is refused, as for a vendor-reported fact.
+     */
+    readonly routesInboundDeliveries?: true;
+    /**
+     * `true` when the vendor treats the value without case, as Microsoft does an App ID or a tenant id (both GUIDs): the
+     * value is recorded LOWER-CASED, so a lookup by the vendor's own spelling (a token's `aud`) finds an id the
+     * administrator typed in capitals (#2663). Never for a value the vendor compares exactly, which most client ids are.
+     */
+    readonly caseInsensitive?: true;
+}
+/**
+ * A REST provider whose access token is minted with the OAuth 2.0 client-credentials grant, from a client id and
+ * secret the connection holds (#2663). The Bot Framework is the first: a Teams bot's App ID and secret, and for a
+ * single-tenant bot the tenant it is registered in, mint a token for `https://api.botframework.com/.default`.
+ *
+ * The token is minted per call when no unexpired one is cached, never stored, and attached where
+ * {@link ProviderProtocolRuntimeContract}'s `apiKey` says, so `apiKey.secretRef` names the client SECRET (the slot
+ * whose absence means "not configured"). The client id, secret and tenant are read from the connection: the
+ * application's own environment for an APPLICATION connection, the organization's typed credential for an
+ * ORGANIZATION one.
+ *
+ * The client id and tenant of an ORGANIZATION connection are typed by its administrator, so on their own they prove
+ * nothing. They become evidence when the vendor accepts them: at connect the engine mints a token with the typed
+ * values, refuses the connection when the vendor refuses, and records each {@link verifiedAccountFacts} entry as
+ * `VERIFIED_BY_VENDOR`. A bot App ID then routes deliveries only to the organization that holds its secret.
+ *
+ * spec-cite: RFC 6749 §4.4 — the client credentials grant (`grant_type=client_credentials`, client authentication,
+ * `scope`); Microsoft, "Authenticate requests with the Bot Connector API" — the single-tenant token request
+ * `POST https://login.microsoftonline.com/MICROSOFT-TENANT-ID/oauth2/v2.0/token` with the scope
+ * `https://api.botframework.com/.default`, fetched 2026-10-06.
+ */
+export interface ProviderRestClientCredentials {
+    /** The https token endpoint. May carry {@link PROVIDER_CLIENT_CREDENTIALS_TENANT_PLACEHOLDER}. */
+    readonly tokenUrl: string;
+    /** The hosts the token endpoint may be on once filled. The client secret is sent nowhere else. */
+    readonly tokenHosts: readonly string[];
+    /** The `scope` parameter, sent as written. */
+    readonly scope: string;
+    /** The slot holding the client id. */
+    readonly clientIdSecretRef: string;
+    /** The slot holding the client secret. Equal to the contract's `apiKey.secretRef`. */
+    readonly clientSecretSecretRef: string;
+    /** The slot filling {@link PROVIDER_CLIENT_CREDENTIALS_TENANT_PLACEHOLDER}. Required exactly when the token URL carries it. */
+    readonly tenantSecretRef?: string;
+    /** Facts an ORGANIZATION connection records once the vendor accepted its credential, keyed by fact name. */
+    readonly verifiedAccountFacts?: Readonly<Record<string, ProviderClientCredentialsVerifiedFact>>;
+    /** Seconds a token is kept when the answer states no `expires_in`. Omitted, it is not cached. */
+    readonly tokenLifetimeFallbackSeconds?: number;
+}
+/**
+ * Why a client-credentials declaration cannot be honoured, or an empty list. Checked where a provider is composed:
+ * a token URL that is not https, a token host that is not a DNS name or that the URL is not on, a tenant placeholder
+ * with no tenant slot (or the reverse), or any other placeholder in the URL.
+ */
+export declare function describeProviderRestClientCredentialsDefects(credentials: ProviderRestClientCredentials): string[];
+/**
+ * The vendor's error code at `errorCodePath` in a parsed answer, when it is code-shaped. Used for a refused 2xx and for
+ * a non-2xx answer alike: a vendor that states its code in the body states it in the same place whatever the status.
+ */
+export declare function readProviderVendorErrorCode(body: unknown, errorCodePath: string): string | undefined;
+/** Reads the verdict a parsed JSON answer carries. The ONE reader: the transport and every test go through it. */
+export declare function readProviderRestApplicationOutcome(body: unknown, outcome: Pick<ProviderRestApplicationOutcome, 'successFlagPath' | 'errorCodePath'>): ProviderRestApplicationOutcomeVerdict;
 /** @wildo_source:part:end external-connectors.models.rest-operation-contract */
 /**
  * The lazy catalogue loader — the seam #330's host loader consumes (interface note on #331).
@@ -330,6 +512,25 @@ export interface ProviderRestOperationContributor {
  * never serializable into a runtime artifact or any JSON the CLI emits.
  */
 export type ProviderRestOperationCatalogueLoader = (domain?: string) => Promise<ProviderRestOperationCatalogue>;
+/**
+ * The QUERY parameters an operation declares under a name its provider places a credential in, compared IGNORING CASE
+ * (#2123, #2707). Empty when there is none.
+ *
+ * Such a parameter asks the caller for the credential the contract already places, so the operation would send the key
+ * twice, or send the caller's value instead of the configured one. A name differing only in case travels BESIDE the
+ * credential, and a vendor that reads names without regard to case may read the caller's value. Both are a declaration
+ * defect.
+ *
+ * ONE comparison for every place that refuses it, so they cannot drift apart:
+ * - the operation executor, once per catalogue load, against the contract's `apiKey.queryParameterName`;
+ * - the operation request builder, on every call, against the resolved access's query-placed names (the backstop for a
+ *   placement that does not come from the contract);
+ * - `wildo` registry module checks, at publish, against the module's own contract.
+ *
+ * A PATH or HEADER parameter is not compared: a path token is a resource id that may merely be spelled like a
+ * credential, and a header credential is refused by its own placement rules.
+ */
+export declare function providerRestOperationCredentialQueryParameters(operation: Pick<ProviderRestOperation, 'parameters'>, credentialQueryParameterNames: Iterable<string>): string[];
 /**
  * Provider-level call semantics: the defaults every operation of this provider runs under.
  *
@@ -533,6 +734,40 @@ export interface ProviderRestOAuth2 {
      * set ACCUMULATES the previous consent with the new answer.
      */
     readonly incrementalConsent?: ProviderOAuth2IncrementalConsent;
+    /**
+     * How this vendor is asked for a refresh token, when it is an authorize-request PARAMETER rather than a scope (#2546).
+     * See {@link ProviderOAuth2OfflineAccess}. Absent means the vendor needs no parameter: it issues a refresh token to
+     * every authorization code, or asks for it through a scope the provider lists in `scopes` (Microsoft's
+     * `offline_access`).
+     */
+    readonly offlineAccess?: ProviderOAuth2OfflineAccess;
+    /**
+     * How the token answer's `scope` lists what was granted, when it is not the specification's space-delimited list
+     * (#2546). Absent means RFC 6749's encoding. Read only from the answer; the request is {@link authorizeScopesDelimiter}.
+     */
+    readonly grantedScopesDelimiter?: ProviderOAuth2ScopeListDelimiter;
+    /**
+     * How the AUTHORIZE request's `scope` must list the scopes asked for, when the vendor does not take the specification's
+     * space-delimited list (#2661). Absent means RFC 6749's encoding, which most vendors accept even when their token
+     * answer uses another (GitHub). Slack documents commas for the request: "a comma-separated list of scopes, such as:
+     * `scope=incoming-webhook,commands`".
+     * spec-cite: https://docs.slack.dev/authentication/installing-with-oauth — the authorize step, fetched 2026-10-06.
+     */
+    readonly authorizeScopesDelimiter?: ProviderOAuth2ScopeListDelimiter;
+    /**
+     * Whether the vendor accepts PKCE from this application's (confidential) client (#2661). Absent means
+     * {@link ProviderOAuth2PkceSupport.S256}: the authorize request carries an S256 `code_challenge` and the code exchange its
+     * `code_verifier`, which RFC 9700 recommends for every client and every vendor that ignores unknown parameters accepts.
+     *
+     * {@link ProviderOAuth2PkceSupport.NOT_ACCEPTED} is a vendor that REFUSES PKCE unless the application registered as a public
+     * client: Slack answers `pkce_not_allowed` ("The app is not allowed to use the PKCE flow"), and turning PKCE on there
+     * is irreversible ("Enabling PKCE marks your app as a public client, which is is a one-way operation"), drops the
+     * client secret, and makes every refresh token expire in 30 days. The install then relies on `state`, the exact
+     * `redirect_uri` and the client secret at the exchange, which is what a confidential client has without PKCE.
+     * spec-cite: https://docs.slack.dev/reference/methods/oauth.v2.access — the `pkce_not_allowed` row, and
+     * https://docs.slack.dev/authentication/using-pkce — the quoted sentence, both fetched 2026-10-06.
+     */
+    readonly pkce?: ProviderOAuth2PkceSupport;
     /**
      * Scopes a person cannot grant for themselves: only an administrator of the account can (#1671). Microsoft's
      * application permissions and its admin-restricted delegated permissions are the case — "Application permissions
@@ -657,6 +892,28 @@ export interface ProviderRestOAuth2 {
      * re-checked on every call that uses it.
      */
     readonly reportedAccountFacts?: Readonly<Record<string, ProviderOAuth2ReportedAccountFact>>;
+    /**
+     * Conditions the ID token of the sign-in that makes a connection must meet (#2663), every one of them, or the
+     * connect is refused before anything is stored. See {@link ProviderOAuth2IdTokenRequirement}. Needs `openid` among
+     * {@link scopes}.
+     */
+    readonly idTokenRequirements?: readonly ProviderOAuth2IdTokenRequirement[];
+    /**
+     * The issuer (`iss`) an ID token this client reads claims from must name (#2663 re-review I1). Required when it reads
+     * any: an {@link idTokenRequirements} entry, or a {@link reportedAccountFacts} fact sourced from ID token claims.
+     *
+     * A claim is used only from a token that names this issuer, names this client as its only audience (`aud`), and has
+     * not expired (`exp`): the checks OpenID Connect requires of a client. A token listing any other audience is refused
+     * too, since a client trusts no audience but itself unless it says so, and nothing here says so. Only the signature
+     * check may be replaced by TLS, which is the one this exchange relies on. A `{claim}` placeholder is filled from the token's own claims, for
+     * an issuer that varies per tenant: Microsoft's multi-tenant `https://login.microsoftonline.com/{tid}/v2.0`.
+     * spec-cite: OpenID Connect Core 1.0 §3.1.3.7, items 2 ("MUST exactly match the value of the iss (issuer) Claim"),
+     * 3 ("MUST validate that the aud (audience) Claim contains its client_id"; "The ID Token MUST be rejected if the ID
+     * Token does not list the Client as a valid audience, or if it contains additional audiences not trusted by the
+     * Client"), 6 (TLS in place of the signature) and 9
+     * ("The current time MUST be before the time represented by the exp Claim").
+     */
+    readonly idTokenIssuer?: string;
     /**
      * The RESOURCE AUDIENCES one grant of this client can mint tokens for, keyed by audience id (#1725), and the
      * HOSTS a token of each may be sent to.
@@ -687,10 +944,33 @@ export interface ProviderRestOAuth2 {
     readonly audiences?: Readonly<Record<string, ProviderRestOAuth2Audience>>;
     /** The audience the authorization itself grants — see {@link audiences}. Required when `audiences` is declared. */
     readonly primaryAudience?: string;
+    /**
+     * What this vendor's URI scopes NAME (#2546) — see {@link ProviderOAuth2ScopeMeaning}. Read only with `audiences`:
+     * it decides which audience a scope belongs to. Absent means {@link ProviderOAuth2ScopeMeaning.RESOURCE}, Microsoft's
+     * model, where `https://graph.microsoft.com/Mail.Send` is a permission ON the Graph resource.
+     */
+    readonly scopeMeaning?: ProviderOAuth2ScopeMeaning;
 }
 /** @wildo_source:part:start external-connectors.models.oauth2-audiences facet:layer:shared facet:family:provider facet:audience:app-developer */
 /** The placeholder a {@link ProviderRestOAuth2Audience.mintScopes} entry uses for the https origin of the request's host. */
 export declare const PROVIDER_OAUTH2_AUDIENCE_ORIGIN_PLACEHOLDER = "{audienceOrigin}";
+/** What a vendor's URI scopes name, which decides the audience a scope belongs to — see {@link ProviderRestOAuth2.scopeMeaning}. */
+export declare enum ProviderOAuth2ScopeMeaning {
+    /**
+     * A URI scope names the RESOURCE a token is minted for: the scope without its last path segment
+     * (`https://graph.microsoft.com/Mail.Send` is Graph's). Microsoft's model, and the default.
+     */
+    RESOURCE = "RESOURCE",
+    /**
+     * A URI scope names a PERMISSION of the vendor's one grant, not a resource: Google's scopes are URIs on several hosts
+     * (`https://www.googleapis.com/auth/gmail.readonly`, `https://mail.google.com/`, `https://spreadsheets.google.com/feeds`)
+     * and every one is consented on the same grant, whose one token serves every Google API. So every scope belongs to the
+     * PRIMARY audience, whatever host its URI names. Declared with a single audience only.
+     * spec-cite: https://developers.google.com/identity/protocols/oauth2/scopes — the scope tables, which list both forms
+     * (fetched 2026-10-05).
+     */
+    PERMISSION = "PERMISSION"
+}
 /** One resource audience of a connection's grant. See {@link ProviderRestOAuth2.audiences}. */
 export interface ProviderRestOAuth2Audience {
     /**
@@ -726,6 +1006,8 @@ export declare function providerOAuth2AudienceAdmitsHost(audience: ProviderRestO
  * ({@link describeProviderOAuth2AudienceDefects} refuses overlapping hosts), so the answer never depends on order.
  */
 export declare function selectProviderOAuth2AudienceForHost(oauth2: Pick<ProviderRestOAuth2, 'audiences' | 'primaryAudience'>, host: string): ProviderOAuth2AudienceSelection | undefined;
+/** Whether `audience` mints its token per request ORIGIN (a mint scope beginning {@link PROVIDER_OAUTH2_AUDIENCE_ORIGIN_PLACEHOLDER}). */
+export declare function providerOAuth2AudienceIsOriginScoped(audience: Pick<ProviderRestOAuth2Audience, 'mintScopes'>): boolean;
 /**
  * The scopes that mint `audience`'s token for a request to `origin` — `{audienceOrigin}` replaced by that origin.
  * The caller has already admitted the origin's host through {@link selectProviderOAuth2AudienceForHost}; nothing a
@@ -745,7 +1027,7 @@ export declare function resolveProviderOAuth2AudienceMintScopes(audience: Provid
  * spec-cite: https://learn.microsoft.com/en-us/entra/identity-platform/consent-types-developer — the note under
  * "Admin Consent for Delegated Permissions", fetched 2026-09-27.
  */
-export declare function findProviderOAuth2ScopeAudience(oauth2: Pick<ProviderRestOAuth2, 'audiences' | 'primaryAudience'>, scope: string): string | undefined;
+export declare function findProviderOAuth2ScopeAudience(oauth2: Pick<ProviderRestOAuth2, 'audiences' | 'primaryAudience' | 'scopeMeaning'>, scope: string): string | undefined;
 /**
  * Whether a scope a connection might REQUEST names a resource among the connection's declared audiences (#1671) — see
  * {@link findProviderOAuth2ScopeAudience}. Asking a person to consent to it is asking them to let this application reach
@@ -753,7 +1035,16 @@ export declare function findProviderOAuth2ScopeAudience(oauth2: Pick<ProviderRes
  * the connection declares. `true` without looking further when the connection declares no audiences: it mints one token
  * for one resource and its scopes are the vendor's own vocabulary (Google's scope URIs name permissions, not resources).
  */
-export declare function providerOAuth2ScopeNamesDeclaredAudience(oauth2: Pick<ProviderRestOAuth2, 'audiences' | 'primaryAudience'>, scope: string): boolean;
+export declare function providerOAuth2ScopeNamesDeclaredAudience(oauth2: Pick<ProviderRestOAuth2, 'audiences' | 'primaryAudience' | 'scopeMeaning'>, scope: string): boolean;
+/**
+ * Why an operation's {@link ProviderRestOperation.host} cannot be used on a provider whose REST binding is `contract`, or
+ * `undefined` when it can (#2546). The token a call carries is chosen by the base URL's host, so the operation's host
+ * must belong to that same audience: then the same token is valid there and nothing is minted for it.
+ */
+export declare function describeProviderRestOperationHostDefect(host: string, contract: {
+    readonly baseUrl?: string;
+    readonly oauth2?: Pick<ProviderRestOAuth2, 'audiences' | 'primaryAudience'>;
+}): string | undefined;
 /** @wildo_source:part:end external-connectors.models.oauth2-audiences */
 /** @wildo_source:part:start external-connectors.models.oauth2-incremental-consent facet:layer:shared facet:family:provider facet:audience:app-developer */
 /**
@@ -777,6 +1068,65 @@ export declare enum ProviderOAuth2IncrementalConsentForm {
      */
     INCLUDE_GRANTED_SCOPES = "INCLUDE_GRANTED_SCOPES"
 }
+/**
+ * How a vendor is asked for a refresh token, when a scope does not do it — see {@link ProviderRestOAuth2.offlineAccess}.
+ */
+export declare enum ProviderOAuth2OfflineAccessForm {
+    /**
+     * Google: the authorize request carries `access_type=offline`, without which no refresh token is issued. The parameter
+     * "Indicates whether your application can refresh access tokens when the user is not present at the browser. Valid
+     * parameter values are `online`, which is the default value, and `offline`."; and "the refresh token is only returned
+     * if your application set the `access_type` parameter to `offline`".
+     * spec-cite: https://developers.google.com/identity/protocols/oauth2/web-server — Step 1 (`access_type` row) and
+     * Step 5, fetched 2026-10-05.
+     *
+     * Google issues the refresh token at the FIRST exchange for a consent, so a request that does not grow an existing grant
+     * (a first connect, or a reconnect replacing a grant) also carries `prompt=consent`: a reconnect of an account that had
+     * already consented would otherwise store a grant with no refresh token, which expires within the hour. A request that
+     * grows a grant (`include_granted_scopes`) does not need it, because the stored grant keeps its refresh token.
+     * Decided by practice: the established Google integrations ask for `access_type=offline` with `prompt=consent` for
+     * exactly this reason.
+     */
+    ACCESS_TYPE_OFFLINE = "ACCESS_TYPE_OFFLINE"
+}
+/** Whether a vendor takes PKCE from a confidential client. See {@link ProviderRestOAuth2.pkce}. */
+export declare enum ProviderOAuth2PkceSupport {
+    /** An S256 challenge on the authorize request and its verifier on the exchange: the default. */
+    S256 = "S256",
+    /** The vendor refuses PKCE from a confidential client (Slack): neither is sent. */
+    NOT_ACCEPTED = "NOT_ACCEPTED"
+}
+/**
+ * A `scope` list encoding that deviates from RFC 6749's space-delimited list, in either direction: the token answer
+ * ({@link ProviderRestOAuth2.grantedScopesDelimiter}) or the authorize request ({@link ProviderRestOAuth2.authorizeScopesDelimiter}).
+ * One vocabulary for both, because it is one question (how a vendor writes a list of scopes) asked of two messages.
+ */
+export declare enum ProviderOAuth2ScopeListDelimiter {
+    /**
+     * GitHub's token answer is `{"access_token":"gho_…","scope":"repo,gist","token_type":"bearer"}`, while its authorize
+     * request takes "A space-delimited list of scopes". Slack's authorize URL takes "a comma-separated list of scopes, such
+     * as: `scope=incoming-webhook,commands`".
+     * spec-cite: https://docs.github.com/en/apps/oauth-apps/building-oauth-apps/authorizing-oauth-apps — step 2's JSON
+     * response example and step 1's `scope` row, fetched 2026-10-05; https://docs.slack.dev/authentication/installing-with-oauth
+     * — the authorize step's `scope` parameter, fetched 2026-10-06.
+     */
+    COMMA = "COMMA"
+}
+/**
+ * The granted scopes a token answer's `scope` string names, read with the vendor's declared delimiter: whitespace (RFC
+ * 6749 §5.1) when none is declared, a comma for {@link ProviderOAuth2ScopeListDelimiter.COMMA}.
+ */
+export declare function splitProviderOAuth2GrantedScopes(scope: string, delimiter: ProviderOAuth2ScopeListDelimiter | undefined): string[];
+/**
+ * The authorize request's `scope` value for the scopes asked for, written with the vendor's declared delimiter: a single
+ * space (RFC 6749 §3.3) when none is declared, a comma for {@link ProviderOAuth2ScopeListDelimiter.COMMA}.
+ * spec-cite: RFC 6749 §3.3 (scope is expressed as a list of space-delimited, case-sensitive strings).
+ */
+export declare function joinProviderOAuth2RequestedScopes(scopes: readonly string[], delimiter: ProviderOAuth2ScopeListDelimiter | undefined): string;
+/** A vendor's refresh-token request form. See {@link ProviderRestOAuth2.offlineAccess}. */
+export interface ProviderOAuth2OfflineAccess {
+    readonly form: ProviderOAuth2OfflineAccessForm;
+}
 /** A vendor's incremental-consent behaviour. See {@link ProviderRestOAuth2.incrementalConsent}. */
 export interface ProviderOAuth2IncrementalConsent {
     readonly form: ProviderOAuth2IncrementalConsentForm;
@@ -798,11 +1148,30 @@ export interface ProviderOAuth2IncrementalConsent {
  *   the start of a scope, or any other `{placeholder}` in a mint scope;
  * - two audiences admitting one host — a request host must select exactly one token.
  */
-export declare function describeProviderOAuth2AudienceDefects(oauth2: Pick<ProviderRestOAuth2, 'audiences' | 'primaryAudience' | 'scopes'>): string[];
+export declare function describeProviderOAuth2AudienceDefects(oauth2: Pick<ProviderRestOAuth2, 'audiences' | 'primaryAudience' | 'scopes' | 'scopeMeaning'>): string[];
+/** Where in the token endpoint's answer a {@link ProviderOAuth2ReportedAccountFact} is read. */
+export declare enum ProviderOAuth2ReportedFactSource {
+    /** The token endpoint's JSON answer itself: Slack's `team.id`, Salesforce's `instance_url`. The default. */
+    TOKEN_RESPONSE = "token_response",
+    /**
+     * The claims of the `id_token` that answer carries (OpenID Connect): Microsoft's `tid`, the tenant the person signed
+     * in to. Read without checking the token's signature, which the specification permits for an ID token received
+     * directly from the token endpoint, because TLS has already authenticated who sent it. An answer carrying no
+     * `id_token` reports no such fact. This is how a vendor's account identity becomes VENDOR-REPORTED when its token
+     * answer names the account only inside the ID token (#2660).
+     * spec-cite: OpenID Connect Core 1.0 §3.1.3.7, item 6.
+     */
+    ID_TOKEN_CLAIMS = "id_token_claims"
+}
 /** One vendor-reported account fact. See {@link ProviderRestOAuth2.reportedAccountFacts}. */
 export interface ProviderOAuth2ReportedAccountFact {
-    /** Dot-path inside the token endpoint's JSON answer. A string or finite number there is the value. */
+    /**
+     * Dot-path inside the fact's {@link source}: the token endpoint's JSON answer by default, or the claims of its
+     * `id_token`. A string or finite number there is the value.
+     */
     readonly responsePath: string;
+    /** Where {@link responsePath} is read. Omitted, the token endpoint's JSON answer. */
+    readonly source?: ProviderOAuth2ReportedFactSource;
     /**
      * Present when the value is an https ORIGIN operations dial. The same DECLARED_VALUES vocabulary an
      * ORIGIN placeholder uses: exact origins, or `https://<dns-labels><suffix>` for each dotted suffix.
@@ -810,7 +1179,79 @@ export interface ProviderOAuth2ReportedAccountFact {
     readonly origin?: Extract<ProviderOAuth2EndpointHostAllowance, {
         readonly kind: ProviderOAuth2EndpointHostAllowanceKind.DECLARED_VALUES;
     }>;
+    /**
+     * `true` when the inbound receiver routes the vendor's deliveries to an organization by this fact: Slack's
+     * `team.id`, the workspace an event comes from (#2660). Such a fact may name ONE organization only, so an
+     * organization's connection reporting a value another organization's enabled connection already reports is
+     * refused at connect, naming why. Routing fails closed on a value two organizations hold either way; the refusal is
+     * what makes that a clear answer at connect instead of deliveries that silently route nowhere.
+     */
+    readonly routesInboundDeliveries?: true;
+}
+/** What a {@link ProviderOAuth2IdTokenRequirement} asks of the sign-in's ID token claims. */
+export declare enum ProviderOAuth2IdTokenRequirementKind {
+    /**
+     * The claim is an array holding at least one of `values`, compared exactly. Microsoft's `wids`, the directory roles
+     * the person holds: a tenant claim requires a role that administers the tenant.
+     */
+    CLAIM_CONTAINS_ANY = "claim_contains_any",
+    /**
+     * When the claim is present, it equals `equalsClaim`. Microsoft's `idp` against `iss`: they differ for a guest, an
+     * account another tenant authenticated, who speaks for nothing in this one.
+     */
+    CLAIM_EQUALS_CLAIM_WHEN_PRESENT = "claim_equals_claim_when_present"
+}
+/**
+ * One condition the ID token of the sign-in that MAKES a connection must meet, or the connect is refused before
+ * anything is stored (#2663). For a connection whose reported fact routes deliveries (a Microsoft tenant), proving
+ * the account is not enough: the person must also have the authority to bind it to an organization, and the vendor's
+ * signed claims are where that authority is stated.
+ *
+ * Checked at the authorization-code exchange only. A refresh does not re-make the connection, and a vendor need not
+ * return an ID token with it; a person whose authority lapsed is caught the next time the connection is made.
+ */
+export type ProviderOAuth2IdTokenRequirement = {
+    readonly kind: ProviderOAuth2IdTokenRequirementKind.CLAIM_CONTAINS_ANY;
+    readonly claim: string;
+    readonly values: readonly string[];
+} | {
+    readonly kind: ProviderOAuth2IdTokenRequirementKind.CLAIM_EQUALS_CLAIM_WHEN_PRESENT;
+    readonly claim: string;
+    readonly equalsClaim: string;
+};
+/** Why an ID token's claims may not be used (#2663 re-review I1). See {@link providerOAuth2IdTokenRejection}. */
+export declare enum ProviderOAuth2IdTokenRejection {
+    /** The token endpoint's answer carries no ID token, or not one whose payload is a JSON object. */
+    ABSENT = "absent",
+    /** `iss` is not the declared issuer, with its placeholders filled from the token's claims. */
+    ISSUER_MISMATCH = "issuer_mismatch",
+    /** `aud` does not name this client, or names another audience beside it. */
+    AUDIENCE_MISMATCH = "audience_mismatch",
+    /** `exp` is missing, or not after the current time. */
+    EXPIRED = "expired"
 }
+/**
+ * Why these ID token claims may not be used, or `undefined` when they may: the token names the declared issuer, this
+ * client as its only audience, and an expiry still ahead. See {@link ProviderRestOAuth2.idTokenIssuer}.
+ *
+ * A placeholder of the issuer naming a claim the token does not carry as a non-empty string fails the issuer check:
+ * an issuer that cannot be written cannot be matched.
+ */
+export declare function providerOAuth2IdTokenRejection(claims: Readonly<Record<string, unknown>> | undefined, expected: {
+    readonly issuer: string;
+    readonly clientId: string;
+    readonly nowEpochSeconds: number;
+}): ProviderOAuth2IdTokenRejection | undefined;
+/** Whether ID token claims meet one requirement. An absent ID token meets none. */
+export declare function providerOAuth2IdTokenRequirementHolds(requirement: ProviderOAuth2IdTokenRequirement, claims: Readonly<Record<string, unknown>> | undefined): boolean;
+/**
+ * What makes a declaration of ID token requirements unusable: a requirement with no claim or no value, and any
+ * requirement on a contract that does not ask for `openid`, without which "the behavior is entirely unspecified" and
+ * no ID token is returned to read.
+ * spec-cite: OpenID Connect Core 1.0 §3.1.2.1 — the `scope` parameter row ("If the openid scope value is not present,
+ * the behavior is entirely unspecified").
+ */
+export declare function describeProviderOAuth2IdTokenRequirementDefects(oauth2: Pick<ProviderRestOAuth2, 'idTokenRequirements' | 'scopes' | 'reportedAccountFacts' | 'idTokenIssuer'>): string[];
 /** The values a whole-scope placeholder admits. See {@link ProviderRestOAuth2.scopeValueAllowances}. */
 export interface ProviderOAuth2ScopeValueAllowance {
     readonly values: readonly string[];

package/dist/esm/protocols/rest-operations.external-connectors-models.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rest-operations.external-connectors-models.schemas.d.ts","sourceRoot":"","sources":["../../../../src/protocols/rest-operations.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,MAAM,oDAAoD,CAAC;AACpF,OAAO,EAAE,gCAAgC,EAAE,MAAM,qEAAqE,CAAC;AACvH,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,qDAAqD,CAAC;AAE7G,wJAAwJ;AACxJ,oDAAoD;AACpD,oBAAY,6BAA6B;IACvC,sGAAsG;IACtG,IAAI,SAAS;IACb,KAAK,UAAU;IACf,MAAM,WAAW;CAClB;AAED;;;;GAIG;AACH,oBAAY,+BAA+B;IACzC,IAAI,SAAS;IACb,eAAe,oBAAoB;IACnC,SAAS,cAAc;IACvB,uFAAuF;IACvF,IAAI,SAAS;IACb;;;;;OAKG;IACH,MAAM,WAAW;CAClB;AAED;;;;;;;GAOG;AACH,oBAAY,4BAA4B;IACtC,wFAAwF;IACxF,IAAI,SAAS;IACb,oGAAoG;IACpG,IAAI,SAAS;IACb,qGAAqG;IACrG,IAAI,SAAS;CACd;AAED;;;;GAIG;AACH,oBAAY,2BAA2B;IACrC,MAAM,WAAW;IACjB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,qFAAqF;IACrF,IAAI,SAAS;CACd;AAED,2FAA2F;AAC3F,MAAM,WAAW,8BAA8B;IAC7C,4FAA4F;IAC5F,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,6BAA6B,CAAC;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,gGAAgG;IAChG,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,yFAAyF;IACzF,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,gEAAgE;AAChE,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,+BAA+B,CAAC;IACnD;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,gHAAgH;IAChH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,6EAA6E;AAC7E,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;IAC5C,2EAA2E;IAC3E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,sFAAsF;IACtF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,WAAW,iCAAiC;IAChD,qHAAqH;IACrH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,oFAAoF;IACpF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,kFAAkF;IAClF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,4HAA4H;IAC5H,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACvD;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,iFAAiF;IACjF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,iGAAiG;IACjG,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,cAAc,EAAE,gCAAgC,CAAC;IAC1D,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,8BAA8B,EAAE,CAAC;IAChE,QAAQ,CAAC,WAAW,CAAC,EAAE,gCAAgC,CAAC;IACxD;;;;OAIG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;IAClC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,4BAA4B,CAAC;IACzD,6GAA6G;IAC7G,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,+BAA+B,CAAC;IACtD;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C;;;;;;;OAOG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,iGAAiG;IACjG,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAClE;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC,CAAC;IACpF,kGAAkG;IAClG,QAAQ,CAAC,UAAU,CAAC,EAAE;QACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;KACzC,CAAC;CACH;AAED,mDAAmD;AACnD,MAAM,WAAW,8BAA8B;IAC7C,kFAAkF;IAClF,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,8BAA8B;IAC9B,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACrE;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,gCAAgC,CAAC,CAAC,CAAC;CACnF;AAED,uFAAuF;AACvF,MAAM,WAAW,gCAAgC;IAC/C,0EAA0E;IAC1E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,+FAA+F;IAC/F,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AACD,gFAAgF;AAEhF;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,oCAAoC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,8BAA8B,CAAC,CAAC;AAEhH;;;;;;;;;GASG;AACH,MAAM,WAAW,yBAAyB;IACxC,2BAA2B;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE;QACd,4DAA4D;QAC5D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,mEAAmE;QACnE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF;;;;;;;OAOG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;CACxC;AAED,wJAAwJ;AACxJ;;;;;;;;;;;;;;;;;;;GAmBG;AACH,oBAAY,2BAA2B;IACrC,oGAAoG;IACpG,UAAU,eAAe;IACzB,yHAAyH;IACzH,KAAK,UAAU;CAChB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,6BAA6B;IAC5C,2CAA2C;IAC3C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,0HAA0H;IAC1H,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,uEAAuE;IACvE,QAAQ,CAAC,SAAS,EAAE,2BAA2B,CAAC;CACjD;AAED;;;;;GAKG;AACH,oBAAY,kBAAkB;IAC5B,MAAM,WAAW;IACjB,OAAO,YAAY;CACpB;AAED;;;;GAIG;AACH,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,6BAA6B,EAAE,CAAC;IACxE,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,6BAA6B,EAAE,CAAA;KAAE,CAAC,CAAC,CAAC;CACpH,GAAG,MAAM,EAAE,CAqBX;AAED;;;GAGG;AACH,wBAAgB,oCAAoC,CAAC,KAAK,EAAE;IAC1D,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,6BAA6B,EAAE,CAAC;IACxE,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,6BAA6B,EAAE,CAAA;KAAE,CAAC;CACzF,GAAG,SAAS,6BAA6B,EAAE,CAE3C;AACD,gFAAgF;AAGhF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,WAAW,kBAAkB;IACjC,2GAA2G;IAC3G,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,yFAAyF;IACzF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgCG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC;;;;;;;;;;;;;;;;;;OAkBG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC;;;;;;;;OAQG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,gCAAgC,CAAC;IAC/D;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,0BAA0B,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxD;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClD;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,mCAAmC,CAAC,CAAC,CAAC;IAChG;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC,CAAC;IAC5F;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IACzC;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC,CAAC;IAC5F;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC,CAAC;IAC1E,mHAAmH;IACnH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,iJAAiJ;AACjJ,6HAA6H;AAC7H,eAAO,MAAM,2CAA2C,qBAAqB,CAAC;AAE9E,+FAA+F;AAC/F,MAAM,WAAW,0BAA0B;IACzC;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;QACnC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;KAC3C,CAAC;IACF;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,6BAA6B,EAAE,CAAC;CACjE;AAED,6GAA6G;AAC7G,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,uHAAuH;AACvH,wBAAgB,gCAAgC,CAAC,QAAQ,EAAE,0BAA0B,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAQ5G;AAED;;;GAGG;AACH,wBAAgB,mCAAmC,CACjD,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,WAAW,GAAG,iBAAiB,CAAC,EACjE,IAAI,EAAE,MAAM,GACX,+BAA+B,GAAG,SAAS,CAK7C;AAED;;;;GAIG;AACH,wBAAgB,uCAAuC,CAAC,QAAQ,EAAE,0BAA0B,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAI/H;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,WAAW,GAAG,iBAAiB,CAAC,EACjE,KAAK,EAAE,MAAM,GACZ,MAAM,GAAG,SAAS,CAmBpB;AAED;;;;;;GAMG;AACH,wBAAgB,wCAAwC,CACtD,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,WAAW,GAAG,iBAAiB,CAAC,EACjE,KAAK,EAAE,MAAM,GACZ,OAAO,CAIT;AACD,yEAAyE;AAEzE,2JAA2J;AAC3J;;GAEG;AACH,oBAAY,oCAAoC;IAC9C;;;;;;OAMG;IACH,QAAQ,aAAa;IACrB;;;;;;OAMG;IACH,sBAAsB,2BAA2B;CAClD;AAED,mGAAmG;AACnG,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,IAAI,EAAE,oCAAoC,CAAC;IACpD;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7C;AACD,mFAAmF;AAEnF;;;;;;;;;GASG;AACH,wBAAgB,qCAAqC,CAAC,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,WAAW,GAAG,iBAAiB,GAAG,QAAQ,CAAC,GAAG,MAAM,EAAE,CAwC5I;AAED,6FAA6F;AAC7F,MAAM,WAAW,iCAAiC;IAChD,sGAAsG;IACtG,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,mCAAmC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,uCAAuC,CAAC,eAAe,CAAA;KAAE,CAAC,CAAC;CAC5I;AAED,wGAAwG;AACxG,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,kIAAkI;IAClI,QAAQ,CAAC,iBAAiB,CAAC,EAAE,+BAA+B,CAAC;CAC9D;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,+BAA+B,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAE/E,iEAAiE;AACjE,oBAAY,6BAA6B;IACvC,yFAAyF;IACzF,gBAAgB,qBAAqB;IACrC,iFAAiF;IACjF,KAAK,UAAU;CAChB;AAED;;;GAGG;AACH,wBAAgB,wCAAwC,CACtD,iBAAiB,EAAE,+BAA+B,GAAG,SAAS,EAC9D,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,6BAA6B,GACxC,MAAM,GAAG,SAAS,CAMpB;AAsBD;;;;;GAKG;AACH,oBAAY,sCAAsC;IAChD;;;OAGG;IACH,MAAM,WAAW;IACjB;;;OAGG;IACH,WAAW,gBAAgB;CAC5B;AAED,6HAA6H;AAC7H,oBAAY,iCAAiC;IAC3C;;;;OAIG;IACH,gCAAgC,qCAAqC;IACrE,8GAA8G;IAC9G,oBAAoB,yBAAyB;IAC7C,iHAAiH;IACjH,WAAW,gBAAgB;CAC5B;AAED,4CAA4C;AAC5C,MAAM,WAAW,wCAAwC;IACvD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,sCAAsC,CAAC;IAC1D,kDAAkD;IAClD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAgB,sCAAsC,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,iCAAiC,EAAE,CAYlH;AAED;;;;;GAKG;AACH,wBAAgB,sCAAsC,CAAC,KAAK,EAAE,MAAM,GAAG,wCAAwC,GAAG,SAAS,CAQ1H;AASD;;;GAGG;AACH,wBAAgB,gDAAgD,CAAC,SAAS,EAAE,iCAAiC,GAAG,SAAS,MAAM,EAAE,CAWhI;AAED;;;GAGG;AACH,oBAAY,yCAAyC;IACnD;;;;OAIG;IACH,MAAM,WAAW;IACjB;;;;OAIG;IACH,IAAI,SAAS;IACb,oGAAoG;IACpG,aAAa,kBAAkB;CAChC;AAED,sHAAsH;AACtH,oBAAY,uCAAuC;IACjD;;;;;;;;;;;OAWG;IACH,eAAe,oBAAoB;IACnC;;;;;OAKG;IACH,mBAAmB,wBAAwB;IAC3C;;;;;;;;;OASG;IACH,qBAAqB,0BAA0B;IAC/C;;;;;;;;;;;;;OAaG;IACH,8BAA8B,mCAAmC;CAClE;AAED,MAAM,MAAM,mCAAmC,GAC3C;IACA,QAAQ,CAAC,IAAI,EAAE,uCAAuC,CAAC,eAAe,CAAC;IACvE,qGAAqG;IACrG,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C;;;;;;;;;OASG;IACH,QAAQ,CAAC,8BAA8B,CAAC,EAAE,IAAI,CAAC;IAC/C,kIAAkI;IAClI,QAAQ,CAAC,iBAAiB,CAAC,EAAE,+BAA+B,CAAC;CAC9D,GACC;IACA,QAAQ,CAAC,IAAI,EAAE,uCAAuC,CAAC,qBAAqB,CAAC;IAC7E;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,GACC;IACA,QAAQ,CAAC,IAAI,EAAE,uCAAuC,CAAC,8BAA8B,CAAC;IACtF,8GAA8G;IAC9G,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,sFAAsF;IACtF,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACjD,kGAAkG;IAClG,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,+BAA+B,CAAC;CAC9D,GACC;IACA,QAAQ,CAAC,IAAI,EAAE,uCAAuC,CAAC,mBAAmB,CAAC;IAC3E;;;;;OAKG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC,CAAC;AAEJ,qEAAqE;AACrE,MAAM,WAAW,2CAA2C;IAC1D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,yCAAyC,CAAC;IAC7D,mDAAmD;IACnD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,kDAAkD;IAClD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC;;;;;;OAMG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC;AAED;;;GAGG;AACH,oBAAY,oCAAoC;IAC9C;;;;;OAKG;IACH,wBAAwB,6BAA6B;IACrD;;;;OAIG;IACH,qBAAqB,0BAA0B;IAC/C;;;OAGG;IACH,iCAAiC,sCAAsC;IACvE;;;;;;OAMG;IACH,mBAAmB,wBAAwB;CAC5C;AAED;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,QAAsF,CAAC;AAEpI;;;;;;;GAOG;AACH,wBAAgB,kDAAkD,CAChE,WAAW,EAAE;IAAE,QAAQ,CAAC,QAAQ,EAAE,yCAAyC,CAAC;IAAC,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAAE,EACvJ,SAAS,EAAE,mCAAmC,GAC7C,SAAS,MAAM,EAAE,CA+EnB;AAED;;;GAGG;AACH,wBAAgB,yCAAyC,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,oCAAoC,EAAE,CAsB3H;AAED,2GAA2G;AAC3G,eAAO,MAAM,4CAA4C,QAAkC,CAAC;AAE5F;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,0CAA0C,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,2CAA2C,EAAE,CA2BnI;AAGD;;;;;;;;;;;;;;GAcG;AACH,oBAAY,yBAAyB;IACnC;;;;;OAKG;IACH,SAAS,cAAc;IACvB;;;;;OAKG;IACH,gBAAgB,qBAAqB;CACtC;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAC;IAC3C,8FAA8F;IAC9F,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,sCAAsC;IACtC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC;;;;OAIG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,MAAM,wBAAwB,GAAG,CACrC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACxC,UAAU,CAAC,EAAE,iCAAiC,KAC3C,OAAO,CAAC,OAAO,CAAC,CAAC"}
+{"version":3,"file":"rest-operations.external-connectors-models.schemas.d.ts","sourceRoot":"","sources":["../../../../src/protocols/rest-operations.external-connectors-models.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,MAAM,oDAAoD,CAAC;AACpF,OAAO,EAAE,gCAAgC,EAAE,MAAM,qEAAqE,CAAC;AACvH,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,qDAAqD,CAAC;AAE7G,wJAAwJ;AACxJ,oDAAoD;AACpD,oBAAY,6BAA6B;IACvC,sGAAsG;IACtG,IAAI,SAAS;IACb,KAAK,UAAU;IACf,MAAM,WAAW;CAClB;AAED;;;;GAIG;AACH,oBAAY,+BAA+B;IACzC,IAAI,SAAS;IACb,eAAe,oBAAoB;IACnC,SAAS,cAAc;IACvB,uFAAuF;IACvF,IAAI,SAAS;IACb;;;;;OAKG;IACH,MAAM,WAAW;CAClB;AAED;;;;;;;GAOG;AACH,oBAAY,4BAA4B;IACtC,wFAAwF;IACxF,IAAI,SAAS;IACb,oGAAoG;IACpG,IAAI,SAAS;IACb,qGAAqG;IACrG,IAAI,SAAS;IACb;;;;;OAKG;IACH,MAAM,WAAW;CAClB;AAED,6GAA6G;AAC7G,MAAM,WAAW,0BAA0B;IACzC,0HAA0H;IAC1H,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,gGAAgG;IAChG,QAAQ,CAAC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;CAClD;AAED;;;;GAIG;AACH,oBAAY,2BAA2B;IACrC,MAAM,WAAW;IACjB,IAAI,SAAS;IACb,MAAM,WAAW;IACjB,qFAAqF;IACrF,IAAI,SAAS;CACd;AAED,2FAA2F;AAC3F,MAAM,WAAW,8BAA8B;IAC7C,4FAA4F;IAC5F,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,6BAA6B,CAAC;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,gGAAgG;IAChG,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,yFAAyF;IACzF,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;OAMG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,gEAAgE;AAChE,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,+BAA+B,CAAC;IACnD;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,gHAAgH;IAChH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,6EAA6E;AAC7E,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,KAAK,EAAE,2BAA2B,CAAC;IAC5C,2EAA2E;IAC3E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,sFAAsF;IACtF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,WAAW,iCAAiC;IAChD,qHAAqH;IACrH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,oFAAoF;IACpF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,kFAAkF;IAClF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,4HAA4H;IAC5H,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACvD;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,iFAAiF;IACjF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,iGAAiG;IACjG,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,cAAc,EAAE,gCAAgC,CAAC;IAC1D,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,8BAA8B,EAAE,CAAC;IAChE,QAAQ,CAAC,WAAW,CAAC,EAAE,gCAAgC,CAAC;IACxD;;;;OAIG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC;IAClC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,4BAA4B,CAAC;IACzD,yFAAyF;IACzF,QAAQ,CAAC,cAAc,CAAC,EAAE,0BAA0B,CAAC;IACrD,6GAA6G;IAC7G,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,+BAA+B,CAAC;IACtD;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C;;;;;;;OAOG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,iGAAiG;IACjG,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAClE;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC,CAAC;IACpF,kGAAkG;IAClG,QAAQ,CAAC,UAAU,CAAC,EAAE;QACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;KACzC,CAAC;CACH;AAED,mDAAmD;AACnD,MAAM,WAAW,8BAA8B;IAC7C,kFAAkF;IAClF,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,8BAA8B;IAC9B,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACrE;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,gCAAgC,CAAC,CAAC,CAAC;CACnF;AAED,uFAAuF;AACvF,MAAM,WAAW,gCAAgC;IAC/C,0EAA0E;IAC1E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,+FAA+F;IAC/F,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,8BAA8B;IAC7C,oGAAoG;IACpG,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,8FAA8F;IAC9F,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;;OAKG;IACH,QAAQ,CAAC,2BAA2B,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1D;AAED,gHAAgH;AAChH,oBAAY,kCAAkC;IAC5C,kCAAkC;IAClC,SAAS,cAAc;IACvB,4GAA4G;IAC5G,OAAO,YAAY;IACnB,yGAAyG;IACzG,QAAQ,aAAa;CACtB;AAED,yGAAyG;AACzG,MAAM,MAAM,qCAAqC,GAC7C;IAAE,QAAQ,CAAC,IAAI,EAAE,kCAAkC,CAAC,SAAS,CAAA;CAAE,GAC/D;IAAE,QAAQ,CAAC,IAAI,EAAE,kCAAkC,CAAC,OAAO,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1F;IAAE,QAAQ,CAAC,IAAI,EAAE,kCAAkC,CAAC,QAAQ,CAAA;CAAE,CAAC;AAEnE;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,QAA6B,CAAC;AAE3E;;;GAGG;AACH,wBAAgB,6CAA6C,CAAC,OAAO,EAAE,8BAA8B,GAAG,MAAM,EAAE,CAW/G;AAED;;;;GAIG;AACH,eAAO,MAAM,8CAA8C,aAAa,CAAC;AAEzE,gHAAgH;AAChH,eAAO,MAAM,wCAAwC,QAAsD,CAAC;AAE5G,sHAAsH;AACtH,oBAAY,mCAAmC;IAC7C,mFAAmF;IACnF,SAAS,cAAc;IACvB,iDAAiD;IACjD,MAAM,WAAW;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,MAAM,EAAE,mCAAmC,CAAC;IACrD;;;;OAIG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE,IAAI,CAAC;IACxC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC;CACjC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,6BAA6B;IAC5C,kGAAkG;IAClG,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,kGAAkG;IAClG,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,sCAAsC;IACtC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,sFAAsF;IACtF,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,+HAA+H;IAC/H,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,4GAA4G;IAC5G,QAAQ,CAAC,oBAAoB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,qCAAqC,CAAC,CAAC,CAAC;IAChG,iGAAiG;IACjG,QAAQ,CAAC,4BAA4B,CAAC,EAAE,MAAM,CAAC;CAChD;AAED;;;;GAIG;AACH,wBAAgB,4CAA4C,CAAC,WAAW,EAAE,6BAA6B,GAAG,MAAM,EAAE,CA2BjH;AAWD;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGpG;AAED,kHAAkH;AAClH,wBAAgB,kCAAkC,CAChD,IAAI,EAAE,OAAO,EACb,OAAO,EAAE,IAAI,CAAC,8BAA8B,EAAE,iBAAiB,GAAG,eAAe,CAAC,GACjF,qCAAqC,CAQvC;AACD,gFAAgF;AAEhF;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,oCAAoC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,8BAA8B,CAAC,CAAC;AAEhH;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,8CAA8C,CAC5D,SAAS,EAAE,IAAI,CAAC,qBAAqB,EAAE,YAAY,CAAC,EACpD,6BAA6B,EAAE,QAAQ,CAAC,MAAM,CAAC,GAC9C,MAAM,EAAE,CAMV;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,yBAAyB;IACxC,2BAA2B;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE;QACd,4DAA4D;QAC5D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,mEAAmE;QACnE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF;;;;;;;OAOG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;CACxC;AAED,wJAAwJ;AACxJ;;;;;;;;;;;;;;;;;;;GAmBG;AACH,oBAAY,2BAA2B;IACrC,oGAAoG;IACpG,UAAU,eAAe;IACzB,yHAAyH;IACzH,KAAK,UAAU;CAChB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,6BAA6B;IAC5C,2CAA2C;IAC3C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,0HAA0H;IAC1H,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,uEAAuE;IACvE,QAAQ,CAAC,SAAS,EAAE,2BAA2B,CAAC;CACjD;AAED;;;;;GAKG;AACH,oBAAY,kBAAkB;IAC5B,MAAM,WAAW;IACjB,OAAO,YAAY;CACpB;AAED;;;;GAIG;AACH,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,6BAA6B,EAAE,CAAC;IACxE,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,6BAA6B,EAAE,CAAA;KAAE,CAAC,CAAC,CAAC;CACpH,GAAG,MAAM,EAAE,CAqBX;AAED;;;GAGG;AACH,wBAAgB,oCAAoC,CAAC,KAAK,EAAE;IAC1D,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,6BAA6B,EAAE,CAAC;IACxE,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,6BAA6B,EAAE,CAAA;KAAE,CAAC;CACzF,GAAG,SAAS,6BAA6B,EAAE,CAE3C;AACD,gFAAgF;AAGhF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,WAAW,kBAAkB;IACjC,2GAA2G;IAC3G,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,yFAAyF;IACzF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgCG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC;;;;;;;;;;;;;;;;;;OAkBG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC;;;;;;;;OAQG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,gCAAgC,CAAC;IAC/D;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,2BAA2B,CAAC;IACrD;;;OAGG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,gCAAgC,CAAC;IACnE;;;;;;OAMG;IACH,QAAQ,CAAC,wBAAwB,CAAC,EAAE,gCAAgC,CAAC;IACrE;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,yBAAyB,CAAC;IAC1C;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,0BAA0B,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACxD;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClD;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,mCAAmC,CAAC,CAAC,CAAC;IAChG;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC,CAAC;IAC5F;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IACzC;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC,CAAC;IAC5F;;;;OAIG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,gCAAgC,EAAE,CAAC;IAC3E;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC,CAAC;IAC1E,mHAAmH;IACnH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,0BAA0B,CAAC;CACpD;AAED,iJAAiJ;AACjJ,6HAA6H;AAC7H,eAAO,MAAM,2CAA2C,qBAAqB,CAAC;AAE9E,oIAAoI;AACpI,oBAAY,0BAA0B;IACpC;;;OAGG;IACH,QAAQ,aAAa;IACrB;;;;;;;OAOG;IACH,UAAU,eAAe;CAC1B;AAED,+FAA+F;AAC/F,MAAM,WAAW,0BAA0B;IACzC;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;QACnC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;KAC3C,CAAC;IACF;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,6BAA6B,EAAE,CAAC;CACjE;AAED,6GAA6G;AAC7G,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,uHAAuH;AACvH,wBAAgB,gCAAgC,CAAC,QAAQ,EAAE,0BAA0B,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAQ5G;AAED;;;GAGG;AACH,wBAAgB,mCAAmC,CACjD,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,WAAW,GAAG,iBAAiB,CAAC,EACjE,IAAI,EAAE,MAAM,GACX,+BAA+B,GAAG,SAAS,CAK7C;AAED,0IAA0I;AAC1I,wBAAgB,oCAAoC,CAAC,QAAQ,EAAE,IAAI,CAAC,0BAA0B,EAAE,YAAY,CAAC,GAAG,OAAO,CAEtH;AAED;;;;GAIG;AACH,wBAAgB,uCAAuC,CAAC,QAAQ,EAAE,0BAA0B,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAI/H;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,WAAW,GAAG,iBAAiB,GAAG,cAAc,CAAC,EAClF,KAAK,EAAE,MAAM,GACZ,MAAM,GAAG,SAAS,CAqBpB;AAED;;;;;;GAMG;AACH,wBAAgB,wCAAwC,CACtD,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,WAAW,GAAG,iBAAiB,GAAG,cAAc,CAAC,EAClF,KAAK,EAAE,MAAM,GACZ,OAAO,CAIT;AACD;;;;GAIG;AACH,wBAAgB,uCAAuC,CACrD,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,kBAAkB,EAAE,WAAW,GAAG,iBAAiB,CAAC,CAAA;CAAE,GACnH,MAAM,GAAG,SAAS,CAyBpB;AAED,yEAAyE;AAEzE,2JAA2J;AAC3J;;GAEG;AACH,oBAAY,oCAAoC;IAC9C;;;;;;OAMG;IACH,QAAQ,aAAa;IACrB;;;;;;OAMG;IACH,sBAAsB,2BAA2B;CAClD;AAED;;GAEG;AACH,oBAAY,+BAA+B;IACzC;;;;;;;;;;;;;;OAcG;IACH,mBAAmB,wBAAwB;CAC5C;AAED,mGAAmG;AACnG,oBAAY,yBAAyB;IACnC,gGAAgG;IAChG,IAAI,SAAS;IACb,mFAAmF;IACnF,YAAY,iBAAiB;CAC9B;AAED;;;;GAIG;AACH,oBAAY,gCAAgC;IAC1C;;;;;;;OAOG;IACH,KAAK,UAAU;CAChB;AAED;;;GAGG;AACH,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,gCAAgC,GAAG,SAAS,GAAG,MAAM,EAAE,CAGjI;AAED;;;;GAIG;AACH,wBAAgB,iCAAiC,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,EAAE,SAAS,EAAE,gCAAgC,GAAG,SAAS,GAAG,MAAM,CAE5I;AAED,2FAA2F;AAC3F,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,IAAI,EAAE,+BAA+B,CAAC;CAChD;AAED,mGAAmG;AACnG,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,IAAI,EAAE,oCAAoC,CAAC;IACpD;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7C;AACD,mFAAmF;AAEnF;;;;;;;;;GASG;AACH,wBAAgB,qCAAqC,CAAC,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,WAAW,GAAG,iBAAiB,GAAG,QAAQ,GAAG,cAAc,CAAC,GAAG,MAAM,EAAE,CA4C7J;AAED,gGAAgG;AAChG,oBAAY,gCAAgC;IAC1C,4GAA4G;IAC5G,cAAc,mBAAmB;IACjC;;;;;;;OAOG;IACH,eAAe,oBAAoB;CACpC;AAED,6FAA6F;AAC7F,MAAM,WAAW,iCAAiC;IAChD;;;OAGG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,qFAAqF;IACrF,QAAQ,CAAC,MAAM,CAAC,EAAE,gCAAgC,CAAC;IACnD;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,mCAAmC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,uCAAuC,CAAC,eAAe,CAAA;KAAE,CAAC,CAAC;IAC3I;;;;;;OAMG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE,IAAI,CAAC;CACzC;AAED,6FAA6F;AAC7F,oBAAY,oCAAoC;IAC9C;;;OAGG;IACH,kBAAkB,uBAAuB;IACzC;;;OAGG;IACH,+BAA+B,oCAAoC;CACpE;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,gCAAgC,GACxC;IAAE,QAAQ,CAAC,IAAI,EAAE,oCAAoC,CAAC,kBAAkB,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GACtI;IAAE,QAAQ,CAAC,IAAI,EAAE,oCAAoC,CAAC,+BAA+B,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AAElJ,iHAAiH;AACjH,oBAAY,8BAA8B;IACxC,kGAAkG;IAClG,MAAM,WAAW;IACjB,8FAA8F;IAC9F,eAAe,oBAAoB;IACnC,4EAA4E;IAC5E,iBAAiB,sBAAsB;IACvC,uDAAuD;IACvD,OAAO,YAAY;CACpB;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,EACrD,QAAQ,EAAE;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;CAAE,GACjG,8BAA8B,GAAG,SAAS,CAqB5C;AAED,mFAAmF;AACnF,wBAAgB,qCAAqC,CAAC,WAAW,EAAE,gCAAgC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,GAAG,OAAO,CAgBnK;AAED;;;;;;GAMG;AACH,wBAAgB,+CAA+C,CAAC,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,qBAAqB,GAAG,QAAQ,GAAG,sBAAsB,GAAG,eAAe,CAAC,GAAG,MAAM,EAAE,CAsBvL;AAED,wGAAwG;AACxG,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,kIAAkI;IAClI,QAAQ,CAAC,iBAAiB,CAAC,EAAE,+BAA+B,CAAC;CAC9D;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,+BAA+B,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAE/E,iEAAiE;AACjE,oBAAY,6BAA6B;IACvC,yFAAyF;IACzF,gBAAgB,qBAAqB;IACrC,iFAAiF;IACjF,KAAK,UAAU;CAChB;AAED;;;GAGG;AACH,wBAAgB,wCAAwC,CACtD,iBAAiB,EAAE,+BAA+B,GAAG,SAAS,EAC9D,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,6BAA6B,GACxC,MAAM,GAAG,SAAS,CAMpB;AAsBD;;;;;GAKG;AACH,oBAAY,sCAAsC;IAChD;;;OAGG;IACH,MAAM,WAAW;IACjB;;;OAGG;IACH,WAAW,gBAAgB;CAC5B;AAED,6HAA6H;AAC7H,oBAAY,iCAAiC;IAC3C;;;;OAIG;IACH,gCAAgC,qCAAqC;IACrE,8GAA8G;IAC9G,oBAAoB,yBAAyB;IAC7C,iHAAiH;IACjH,WAAW,gBAAgB;CAC5B;AAED,4CAA4C;AAC5C,MAAM,WAAW,wCAAwC;IACvD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,sCAAsC,CAAC;IAC1D,kDAAkD;IAClD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAgB,sCAAsC,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,iCAAiC,EAAE,CAYlH;AAED;;;;;GAKG;AACH,wBAAgB,sCAAsC,CAAC,KAAK,EAAE,MAAM,GAAG,wCAAwC,GAAG,SAAS,CAQ1H;AASD;;;GAGG;AACH,wBAAgB,gDAAgD,CAAC,SAAS,EAAE,iCAAiC,GAAG,SAAS,MAAM,EAAE,CAWhI;AAED;;;GAGG;AACH,oBAAY,yCAAyC;IACnD;;;;OAIG;IACH,MAAM,WAAW;IACjB;;;;OAIG;IACH,IAAI,SAAS;IACb,oGAAoG;IACpG,aAAa,kBAAkB;CAChC;AAED,sHAAsH;AACtH,oBAAY,uCAAuC;IACjD;;;;;;;;;;;OAWG;IACH,eAAe,oBAAoB;IACnC;;;;;OAKG;IACH,mBAAmB,wBAAwB;IAC3C;;;;;;;;;OASG;IACH,qBAAqB,0BAA0B;IAC/C;;;;;;;;;;;;;OAaG;IACH,8BAA8B,mCAAmC;CAClE;AAED,MAAM,MAAM,mCAAmC,GAC3C;IACA,QAAQ,CAAC,IAAI,EAAE,uCAAuC,CAAC,eAAe,CAAC;IACvE,qGAAqG;IACrG,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C;;;;;;;;;OASG;IACH,QAAQ,CAAC,8BAA8B,CAAC,EAAE,IAAI,CAAC;IAC/C,kIAAkI;IAClI,QAAQ,CAAC,iBAAiB,CAAC,EAAE,+BAA+B,CAAC;CAC9D,GACC;IACA,QAAQ,CAAC,IAAI,EAAE,uCAAuC,CAAC,qBAAqB,CAAC;IAC7E;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,GACC;IACA,QAAQ,CAAC,IAAI,EAAE,uCAAuC,CAAC,8BAA8B,CAAC;IACtF,8GAA8G;IAC9G,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,sFAAsF;IACtF,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACjD,kGAAkG;IAClG,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,+BAA+B,CAAC;CAC9D,GACC;IACA,QAAQ,CAAC,IAAI,EAAE,uCAAuC,CAAC,mBAAmB,CAAC;IAC3E;;;;;OAKG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC,CAAC;AAEJ,qEAAqE;AACrE,MAAM,WAAW,2CAA2C;IAC1D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,yCAAyC,CAAC;IAC7D,mDAAmD;IACnD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,kDAAkD;IAClD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC;;;;;;OAMG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC;AAED;;;GAGG;AACH,oBAAY,oCAAoC;IAC9C;;;;;OAKG;IACH,wBAAwB,6BAA6B;IACrD;;;;OAIG;IACH,qBAAqB,0BAA0B;IAC/C;;;OAGG;IACH,iCAAiC,sCAAsC;IACvE;;;;;;OAMG;IACH,mBAAmB,wBAAwB;CAC5C;AAED;;;;GAIG;AACH,eAAO,MAAM,gCAAgC,QAAsF,CAAC;AAEpI;;;;;;;GAOG;AACH,wBAAgB,kDAAkD,CAChE,WAAW,EAAE;IAAE,QAAQ,CAAC,QAAQ,EAAE,yCAAyC,CAAC;IAAC,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAAE,EACvJ,SAAS,EAAE,mCAAmC,GAC7C,SAAS,MAAM,EAAE,CA+EnB;AAED;;;GAGG;AACH,wBAAgB,yCAAyC,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,oCAAoC,EAAE,CAsB3H;AAED,2GAA2G;AAC3G,eAAO,MAAM,4CAA4C,QAAkC,CAAC;AAE5F;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,0CAA0C,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,2CAA2C,EAAE,CA2BnI;AAGD;;;;;;;;;;;;;;GAcG;AACH,oBAAY,yBAAyB;IACnC;;;;;OAKG;IACH,SAAS,cAAc;IACvB;;;;;OAKG;IACH,gBAAgB,qBAAqB;CACtC;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAC;IAC3C,8FAA8F;IAC9F,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,sCAAsC;IACtC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC;;;;OAIG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,MAAM,wBAAwB,GAAG,CACrC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACxC,UAAU,CAAC,EAAE,iCAAiC,KAC3C,OAAO,CAAC,OAAO,CAAC,CAAC"}