@wildo-ai/saas-models 1.1.5 → 1.1.7

package/dist/esm/notifications/inbound-email/inbound-email.shared.schemas.d.ts

@@ -0,0 +1,448 @@
+/**
+ * Receiving email (#1600) — the email channel's own records.
+ *
+ * #1630 built the channel mechanism (handlers, sender assurance, threads, replies). This file holds what
+ * only EMAIL has: where a message is addressed, the domains an organization receives and sends on, the
+ * mailboxes a firm keeps for its clients, and the message itself as it was received.
+ *
+ * | resource | scope | one row per | what it is for |
+ * |---|---|---|---|
+ * | `inboundEmails` | organization | message routed to that organization | the channel record: bodies, headers, attachments, raw MIME, and the message's disposition |
+ * | `organizationEmailDomains` | organization | domain the organization claimed | proving ownership, provisioning it at the provider, receiving and sending on it |
+ * | `clientMailboxes` | organization (the CLIENT) | address on a firm's domain | mail to `acme@inbox.firm.com` lands in the client organization, where the case lives |
+ * | `inboundAddressTombstones` | application | slug of a deleted organization | a reused slug never receives an old organization's mail |
+ *
+ * ## Addresses, and the order they are tried in (fail closed)
+ *
+ * {@link InboundRouteKind}: a reply token first (it names a thread, and its organization must be the one the
+ * address reaches), then an exact client mailbox, then a verified organization domain, then the shared
+ * domain's `{slug}` address. Anything else is UNROUTABLE and audited. The SENDER never decides where a
+ * message goes: a `From` domain is spoofable, and routing on it would let anyone write into any tenant.
+ *
+ * ## One state per row
+ *
+ * `inboundEmails.status` is the MESSAGE's disposition. Whether its handler ran is the inbound delivery's
+ * status (#1596) — there is no second "processed" state here, and no "quarantined" one anywhere: a message
+ * below its handler's minimum is `STORED_BELOW_MINIMUM`, an infected attachment is listed in
+ * `withheldAttachments`.
+ */
+import { z } from 'zod';
+import { InboundSenderAssurance } from '../../inbound/inbound-channels.shared.schemas';
+/** @wildo_source:part:start saas.models.inbound-email facet:layer:shared facet:family:inbound facet:audience:app-developer */
+/**
+ * What became of a received message. The message's disposition only; the handler's run is the delivery's.
+ */
+export declare enum InboundEmailStatus {
+    /** Stored; at least one attachment has no scan verdict yet. Nothing reaches a handler before every one has one. */
+    AWAITING_ATTACHMENT_SCAN = "awaiting_attachment_scan",
+    /** Handed to its channel handler through a stored delivery. */
+    DISPATCHED = "dispatched",
+    /**
+     * The sender is below the selected handler's minimum assurance and no below-minimum handler is declared.
+     * Kept — it is correspondence — audited, and dispatched to nobody. Who sees it is the application's choice.
+     */
+    STORED_BELOW_MINIMUM = "stored_below_minimum",
+    /** Over a limit (see {@link InboundEmailLimit}). Only the envelope is kept: no bodies, no attachments. */
+    REJECTED_LIMIT = "rejected_limit"
+}
+/** How an address reached its organization, in the order routing tries them. */
+export declare enum InboundRouteKind {
+    /** `{local}+r-{token}@{domain}` — a reply to a thread. The token's organization must be the routed one. */
+    REPLY_TOKEN = "reply_token",
+    /** An exact client mailbox on a firm's verified domain, under an ACTIVE service-provider relationship. */
+    CLIENT_MAILBOX = "client_mailbox",
+    /** Any address on a VERIFIED receiving domain of the organization; `local+tag` passes `tag`. */
+    ORGANIZATION_DOMAIN = "organization_domain",
+    /** `{slug}[+tag]@{sharedDomain}` — the zero-configuration default every organization has. */
+    SHARED_DOMAIN = "shared_domain"
+}
+/** Where an organization's claimed domain stands. Only VERIFIED routes and sends. */
+export declare enum OrganizationEmailDomainStatus {
+    /** Claimed; the DNS TXT ownership challenge is not answered yet. Blocks nobody — several organizations may be here at once. */
+    OWNERSHIP_PENDING = "ownership_pending",
+    /** Ownership proven, the domain exists at the provider, and its DNS records are not verified there yet. */
+    PROVIDER_PENDING = "provider_pending",
+    /** Ownership proven and the provider verified its records: the domain routes (receiving) and sends (sending). */
+    VERIFIED = "verified",
+    /** The provider could not verify the records. Fix the DNS and verify again. */
+    FAILED = "failed",
+    /** Was verified; the ownership record or the provider's records disappeared. Routing and sending stop. */
+    SUSPENDED = "suspended"
+}
+/**
+ * Whether an organization's verified SENDING domain is used beyond thread replies. Applies application-wide.
+ * The default keeps the application's own sender on every message the application did not route through a thread.
+ */
+export declare enum OrganizationSendingDomainUse {
+    /** Only replies on a thread go out from the organization's domain. */
+    THREAD_REPLIES = "thread_replies",
+    /** Every email sent on behalf of the organization goes out from its verified sending domain. */
+    ALL_ORGANIZATION_MAIL = "all_organization_mail"
+}
+/**
+ * Whether the original bytes of a received message are kept. Default `KEEP`: DKIM verifies over the original
+ * bytes only (RFC 6376 §3.7), so parsed text can never be re-verified, and commercial law asks for received
+ * letters to be reproducible as received.
+ *
+ * spec-cite: RFC 6376 §3.7 (the body hash and signature are computed over the canonicalized ORIGINAL message).
+ */
+export declare enum InboundEmailRawRetention {
+    KEEP = "keep",
+    DISCARD = "discard"
+}
+/** Which limit a `REJECTED_LIMIT` message exceeded. */
+export declare enum InboundEmailLimit {
+    /** The whole message is larger than the application's configured maximum. */
+    MESSAGE_SIZE = "message_size",
+    /** More attachments than {@link INBOUND_EMAIL_MAX_ATTACHMENTS}. */
+    ATTACHMENT_COUNT = "attachment_count",
+    /** One attachment is larger than the application's maximum file size. */
+    ATTACHMENT_SIZE = "attachment_size"
+}
+/** Why an attachment was not made available to the handler. The message itself still reaches it. */
+export declare enum InboundEmailWithheldReason {
+    /** The scanner found malware. The file is quarantined and never served. */
+    INFECTED = "infected",
+    /** The scan could not run or did not conclude. Not proven clean, so not exposed. */
+    SCAN_FAILED = "scan_failed"
+}
+/** Why a verified domain stopped routing and sending. */
+export declare enum OrganizationEmailDomainSuspensionReason {
+    /** The organization's ownership TXT record is no longer published. */
+    OWNERSHIP_RECORD_MISSING = "ownership_record_missing",
+    /** The provider no longer finds the domain's records (or the domain itself). */
+    PROVIDER_RECORDS_MISSING = "provider_records_missing"
+}
+/** What removed a domain — both delete the provider's domain (E9). */
+export declare enum OrganizationEmailDomainRemovalTrigger {
+    /** An organization administrator removed it. */
+    REMOVE = "remove",
+    /** The organization was deleted. */
+    ORGANIZATION_DELETED = "organization_deleted"
+}
+/** @wildo_source:part:end saas.models.inbound-email */
+/** The largest notification body the `inbound-email` endpoint accepts. A notification is small JSON; the message is FETCHED. */
+export declare const INBOUND_EMAIL_NOTIFICATION_MAX_BODY_BYTES: number;
+/** The default ceiling on a whole message (the application may lower or raise it). */
+export declare const INBOUND_EMAIL_DEFAULT_MAX_MESSAGE_BYTES: number;
+/** The most attachments one message may carry. */
+export declare const INBOUND_EMAIL_MAX_ATTACHMENTS = 20;
+/** The most text a stored message keeps per body; the rest is cut and `textTruncated` is set. */
+export declare const INBOUND_EMAIL_MAX_STORED_TEXT_BYTES: number;
+/**
+ * The headers an `inboundEmails` row keeps. An ALLOW-list, not a deny-list: a header is correspondence metadata
+ * that can carry personal data, and one not named here is not stored. Threading and authentication headers are
+ * kept in their own fields.
+ */
+export declare const INBOUND_EMAIL_KEPT_HEADERS: readonly string[];
+/** Placeholder written over free text an erasure scrubs. */
+export declare const ERASED_INBOUND_EMAIL_TEXT = "[erased]";
+/** One address as a message named it. */
+export declare const InboundEmailAddressSchema: z.ZodObject<{
+    address: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type InboundEmailAddress = z.infer<typeof InboundEmailAddressSchema>;
+/** One attachment that was stored and made available. `fileId` names a `files` row. */
+export declare const InboundEmailAttachmentSchema: z.ZodObject<{
+    fileId: z.ZodString;
+    filename: z.ZodString;
+    contentType: z.ZodString;
+    size: z.ZodNumber;
+    contentId: z.ZodOptional<z.ZodString>;
+    disposition: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type InboundEmailAttachment = z.infer<typeof InboundEmailAttachmentSchema>;
+/** An attachment that was NOT made available, and why. */
+export declare const InboundEmailWithheldAttachmentSchema: z.ZodObject<{
+    filename: z.ZodString;
+    reason: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof InboundEmailWithheldReason>>;
+}, z.core.$strict>;
+export type InboundEmailWithheldAttachment = z.infer<typeof InboundEmailWithheldAttachmentSchema>;
+/**
+ * The original bytes, copied at ingest (a provider's download link is signed and expires). `sha256` is of the
+ * bytes AS CAPTURED; the stored file must hash to it (E5). Nothing updates this field: `inboundEmails` has no
+ * update route and the field is excluded from every write after creation.
+ */
+export declare const InboundEmailRawMimeSchema: z.ZodObject<{
+    fileId: z.ZodString;
+    sha256: z.ZodString;
+    sizeBytes: z.ZodNumber;
+}, z.core.$strict>;
+export type InboundEmailRawMime = z.infer<typeof InboundEmailRawMimeSchema>;
+/** What the receiving provider concluded about the message's origin (RFC 8601 result names). */
+export declare const InboundEmailAuthenticationSchema: z.ZodObject<{
+    spf: z.ZodString;
+    dkim: z.ZodString;
+    dmarc: z.ZodString;
+    dmarcAligned: z.ZodBoolean;
+}, z.core.$strict>;
+/**
+ * One received message, in the organization it was routed to.
+ *
+ * A message addressed to two organizations is one row in EACH: routing decides the organization, and a row
+ * never names another tenant.
+ */
+export declare const InboundEmailSchema: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    organizationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    inboundDeliveryId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    providerRef: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>;
+    providerMessageId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    messageId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodString>>>;
+    inReplyTo: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodString>>>;
+    references: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodArray<z.ZodString>>>;
+    threadId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    fromAddress: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    fromName: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodString>>>>;
+    to: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodArray<z.ZodObject<{
+        address: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>>>>;
+    cc: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodArray<z.ZodObject<{
+        address: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>>>>;
+    replyTo: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodString>>>>;
+    receivedFor: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    routeKind: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof InboundRouteKind>>>>;
+    routeTag: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodString>>>;
+    subject: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodString>>>>;
+    textBody: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodString>>>>;
+    htmlBody: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodString>>>>;
+    strippedReply: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodString>>>>;
+    headers: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>>>;
+    textTruncated: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodBoolean>>;
+    authentication: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodObject<{
+        spf: z.ZodString;
+        dkim: z.ZodString;
+        dmarc: z.ZodString;
+        dmarcAligned: z.ZodBoolean;
+    }, z.core.$strict>>;
+    senderAssurance: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof InboundSenderAssurance>>>>>;
+    attachments: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodArray<z.ZodObject<{
+        fileId: z.ZodString;
+        filename: z.ZodString;
+        contentType: z.ZodString;
+        size: z.ZodNumber;
+        contentId: z.ZodOptional<z.ZodString>;
+        disposition: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>>>>;
+    withheldAttachments: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodArray<z.ZodObject<{
+        filename: z.ZodString;
+        reason: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof InboundEmailWithheldReason>>;
+    }, z.core.$strict>>>>>;
+    attachmentFiles: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedMultipleFileSchema>>>> | import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedFileSchema>>>>;
+    rawMime: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodObject<{
+        fileId: z.ZodString;
+        sha256: z.ZodString;
+        sizeBytes: z.ZodNumber;
+    }, z.core.$strict>>>>;
+    rawMimeFile: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedMultipleFileSchema>>>> | import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<import("@wildo-ai/zod-decorators").DecoratedFileSchema>>>>;
+    sizeBytes: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodNumber>;
+    receivedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>>;
+    status: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof InboundEmailStatus>>>>>>;
+    limitExceeded: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof InboundEmailLimit>>>>>>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>>;
+    updatedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+}, z.core.$strip>>;
+export type InboundEmail = z.infer<typeof InboundEmailSchema>;
+/** The DNS ownership challenge an organization answers before its domain is created anywhere. */
+export declare const EmailDomainOwnershipChallengeSchema: z.ZodObject<{
+    txtName: z.ZodString;
+    /** SHA-256 of the challenge value. The value itself is shown once, when the domain is claimed. */
+    nonceHash: z.ZodString;
+}, z.core.$strict>;
+export type EmailDomainOwnershipChallenge = z.infer<typeof EmailDomainOwnershipChallengeSchema>;
+/** One DNS record the provider asks the organization to publish, copied as the provider reported it. */
+export declare const EmailDomainDnsRecordSchema: z.ZodObject<{
+    purpose: z.ZodString;
+    type: z.ZodString;
+    name: z.ZodString;
+    value: z.ZodString;
+    priority: z.ZodOptional<z.ZodNumber>;
+    status: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type EmailDomainDnsRecord = z.infer<typeof EmailDomainDnsRecordSchema>;
+/** What an organization uses a domain for. */
+export declare const EmailDomainCapabilitiesSchema: z.ZodObject<{
+    sending: z.ZodBoolean;
+    receiving: z.ZodBoolean;
+}, z.core.$strict>;
+export type EmailDomainCapabilities = z.infer<typeof EmailDomainCapabilitiesSchema>;
+/**
+ * A domain an organization claimed, from the ownership challenge to a verified sending and receiving domain.
+ *
+ * Ownership is proven PER ORGANIZATION before anything is created at the provider (review H1): every tenant
+ * shares one provider account, so the provider's own verification would accept a squatter's claim the moment
+ * the real owner published its records. Pending claims block nobody; the first organization to prove
+ * ownership wins, and from then on the domain is refused to everyone else.
+ */
+export declare const OrganizationEmailDomainSchema: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    organizationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    domain: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    capabilities: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodObject<{
+        sending: z.ZodBoolean;
+        receiving: z.ZodBoolean;
+    }, z.core.$strict>>;
+    providerRef: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodString>>>>;
+    providerDomainId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>>;
+    ownershipChallenge: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodObject<{
+        txtName: z.ZodString;
+        /** SHA-256 of the challenge value. The value itself is shown once, when the domain is claimed. */
+        nonceHash: z.ZodString;
+    }, z.core.$strict>>>;
+    status: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof OrganizationEmailDomainStatus>>>>>>;
+    dnsRecords: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodArray<z.ZodObject<{
+        purpose: z.ZodString;
+        type: z.ZodString;
+        name: z.ZodString;
+        value: z.ZodString;
+        priority: z.ZodOptional<z.ZodNumber>;
+        status: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>>>>;
+    ownershipVerifiedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodDate>>>>;
+    lastVerifiedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNullable<z.ZodDate>>>>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>>;
+    updatedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+}, z.core.$strip>>;
+export type OrganizationEmailDomain = z.infer<typeof OrganizationEmailDomainSchema>;
+/**
+ * A mailbox a firm keeps for one of its clients on the firm's own domain (S1): `acme@inbox.firm.com` → the
+ * client organization Acme, so the work lands where the case lives.
+ *
+ * OWNED BY THE FIRM — scoped to the organization that owns the domain, and created and deleted only by it. The
+ * domain owner decides what each of its addresses does, as every mail host does (a Google Workspace or Microsoft 365
+ * administrator creates the addresses on their domain; no one else can). The first design let the CLIENT create the
+ * row in its own organization, which let a client take any address on the firm's domain — the firm's own intake
+ * address included — and route the firm's mail into itself, with no way for the firm to remove it.
+ *
+ * It routes only while its domain is VERIFIED for receiving and still the firm's, and the service-provider
+ * relationship (#1597) is ACTIVE — re-checked for every message. The client ends it by ending the relationship.
+ */
+export declare const ClientMailboxSchema: z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    organizationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    address: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    emailDomainId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    serviceProviderRelationshipId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    clientOrganizationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>>;
+    updatedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+}, z.core.$strip>;
+export type ClientMailbox = z.infer<typeof ClientMailboxSchema>;
+/**
+ * The slug of a deleted organization, which the shared domain never routes again (L3). Kept for as long as
+ * the application exists: a tombstone that expired would hand an old organization's correspondents to
+ * whoever took the slug next.
+ */
+export declare const InboundAddressTombstoneSchema: z.ZodObject<{
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    applicationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    slug: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+    tombstonedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>;
+    createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>>;
+    updatedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
+}, z.core.$strip>;
+export type InboundAddressTombstone = z.infer<typeof InboundAddressTombstoneSchema>;
+/** @wildo_source:part:start saas.models.inbound-email-domains facet:layer:shared facet:family:inbound facet:audience:app-developer */
+/** The verbs of `organizationEmailDomains`, each audited. */
+export declare enum OrganizationEmailDomains_Operations {
+    /** Mint the organization's DNS TXT ownership challenge. Creates nothing at the provider. */
+    CLAIM = "claim",
+    /** Resolve the TXT record; the first organization to prove ownership wins, and only then is the domain created at the provider. */
+    VERIFY_OWNERSHIP = "verify_ownership",
+    /** Ask the provider to verify the domain's records. */
+    VERIFY = "verify",
+    /** Delete the domain at the provider, and the row. */
+    REMOVE = "remove"
+}
+/** A claim: the domain and what it will be used for. */
+export declare const OrganizationEmailDomainClaimRequestSchema: z.ZodObject<{
+    domain: z.ZodString;
+    capabilities: z.ZodDefault<z.ZodObject<{
+        sending: z.ZodBoolean;
+        receiving: z.ZodBoolean;
+    }, z.core.$strict>>;
+}, z.core.$strip>;
+export type OrganizationEmailDomainClaimRequest = z.infer<typeof OrganizationEmailDomainClaimRequestSchema>;
+/**
+ * What `claim` answers: the claim, and the ONE time the ownership record's value is shown. Only its hash is
+ * stored, so claiming again is how a lost value is recovered — and it replaces the old one.
+ */
+export declare const OrganizationEmailDomainClaimResponseSchema: z.ZodObject<{
+    organizationEmailDomainId: z.ZodString;
+    domain: z.ZodString;
+    status: z.ZodEnum<typeof OrganizationEmailDomainStatus>;
+    txtName: z.ZodString;
+    txtValue: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>;
+}, z.core.$strip>;
+export type OrganizationEmailDomainClaimResponse = z.infer<typeof OrganizationEmailDomainClaimResponseSchema>;
+/** What `remove` answers: which domain went, and whether the provider still held it and deleted it. */
+export declare const OrganizationEmailDomainRemoveResponseSchema: z.ZodObject<{
+    organizationEmailDomainId: z.ZodString;
+    domain: z.ZodString;
+    providerDomainDeleted: z.ZodBoolean;
+}, z.core.$strip>;
+export type OrganizationEmailDomainRemoveResponse = z.infer<typeof OrganizationEmailDomainRemoveResponseSchema>;
+/** The prefix of an email domain ownership record's value; the nonce follows it. */
+export declare const EMAIL_DOMAIN_OWNERSHIP_TXT_PREFIX = "wildo-email-domain-verification=";
+/** The label the ownership record is published under: `_wildo-verification.{domain}` (the SSO challenge's name). */
+export declare const EMAIL_DOMAIN_OWNERSHIP_TXT_LABEL = "_wildo-verification";
+/** A client mailbox, as a firm or a client administrator asks for it. */
+export declare const ClientMailboxCreateRequestSchema: z.ZodObject<{
+    address: z.ZodString;
+    emailDomainId: z.ZodString;
+    serviceProviderRelationshipId: z.ZodString;
+}, z.core.$strip>;
+/**
+ * An application's receiving-email settings (`email.inbound` in the backend configuration). Every field has a
+ * safe default, and the section is optional: an application that receives no email declares nothing.
+ */
+export declare const InboundEmailConfigSchema: z.ZodObject<{
+    sharedDomain: z.ZodOptional<z.ZodString>;
+    rawMimeRetention: z.ZodDefault<z.ZodEnum<typeof InboundEmailRawRetention>>;
+    organizationSendingDomainUse: z.ZodDefault<z.ZodEnum<typeof OrganizationSendingDomainUse>>;
+    maxMessageSizeBytes: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+export type InboundEmailConfig = z.infer<typeof InboundEmailConfigSchema>;
+/** @wildo_source:part:end saas.models.inbound-email-domains */
+/** The prefix of a reply-token sub-address: `{local}+r-{token}@{domain}`. */
+export declare const REPLY_TOKEN_SUBADDRESS_PREFIX = "r-";
+/** An address taken apart. `local` is the part before any `+`; `domain` is lower-cased. */
+export interface ParsedInboundAddress {
+    readonly address: string;
+    readonly local: string;
+    readonly domain: string;
+    /** The sub-address after `+`, when it is a route tag. */
+    readonly tag?: string;
+    /** The reply token, when the sub-address is `r-{token}`. Case preserved: a token is case-sensitive. */
+    readonly replyToken?: string;
+}
+/**
+ * Take an envelope recipient apart. Returns `undefined` for anything that is not `local@domain` with a
+ * non-empty local part — such an address routes nowhere.
+ *
+ * The local part is compared lower-cased (mailboxes here are case-insensitive, and the provider lower-cases
+ * nothing); the reply token alone keeps its case.
+ */
+export declare function parseInboundAddress(raw: string): ParsedInboundAddress | undefined;
+/** `{local}+r-{token}@{domain}` — the address a reply on a thread carries in Reply-To. */
+export declare function composeReplyTokenAddress(local: string, token: string, domain: string): string;
+/** How many trailing characters of an organization id disambiguate a reused slug. */
+export declare const SHARED_DOMAIN_SHORT_ORGANIZATION_ID_LENGTH = 8;
+/** The trailing characters of an organization id that follow a reused slug: `{slug}.{shortOrgId}`. */
+export declare function shortOrganizationId(organizationId: string): string;
+/**
+ * What separates a reused slug from its organization's short id. A DOT, because an organization slug cannot contain
+ * one (`^[a-z0-9]+(?:-[a-z0-9]+)*$`): with a hyphen, `{slug}-{shortOrgId}` was itself a valid slug, and an organization
+ * registering exactly that slug would have been routed its victim's mail. A dot is legal in an RFC 5321 local part.
+ */
+export declare const SHARED_DOMAIN_REUSED_SLUG_SEPARATOR = ".";
+/**
+ * An organization's local part on the shared domain: its slug, or `{slug}.{shortOrgId}` when its slug was
+ * once held by a DELETED organization — so mail written to the old organization never reaches the new one.
+ */
+export declare function sharedDomainLocalPartFor(slug: string, organizationId: string, slugTombstoned: boolean): string;
+//# sourceMappingURL=inbound-email.shared.schemas.d.ts.map

package/dist/esm/notifications/inbound-email/inbound-email.shared.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound-email.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/notifications/inbound-email/inbound-email.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,+CAA+C,CAAC;AAEvF,8HAA8H;AAE9H;;GAEG;AACH,oBAAY,kBAAkB;IAC5B,mHAAmH;IACnH,wBAAwB,6BAA6B;IACrD,+DAA+D;IAC/D,UAAU,eAAe;IACzB;;;OAGG;IACH,oBAAoB,yBAAyB;IAC7C,0GAA0G;IAC1G,cAAc,mBAAmB;CAClC;AAED,gFAAgF;AAChF,oBAAY,gBAAgB;IAC1B,2GAA2G;IAC3G,WAAW,gBAAgB;IAC3B,0GAA0G;IAC1G,cAAc,mBAAmB;IACjC,gGAAgG;IAChG,mBAAmB,wBAAwB;IAC3C,6FAA6F;IAC7F,aAAa,kBAAkB;CAChC;AAED,qFAAqF;AACrF,oBAAY,6BAA6B;IACvC,+HAA+H;IAC/H,iBAAiB,sBAAsB;IACvC,2GAA2G;IAC3G,gBAAgB,qBAAqB;IACrC,iHAAiH;IACjH,QAAQ,aAAa;IACrB,+EAA+E;IAC/E,MAAM,WAAW;IACjB,0GAA0G;IAC1G,SAAS,cAAc;CACxB;AAED;;;GAGG;AACH,oBAAY,4BAA4B;IACtC,sEAAsE;IACtE,cAAc,mBAAmB;IACjC,gGAAgG;IAChG,qBAAqB,0BAA0B;CAChD;AAED;;;;;;GAMG;AACH,oBAAY,wBAAwB;IAClC,IAAI,SAAS;IACb,OAAO,YAAY;CACpB;AAED,uDAAuD;AACvD,oBAAY,iBAAiB;IAC3B,6EAA6E;IAC7E,YAAY,iBAAiB;IAC7B,mEAAmE;IACnE,gBAAgB,qBAAqB;IACrC,yEAAyE;IACzE,eAAe,oBAAoB;CACpC;AAED,oGAAoG;AACpG,oBAAY,0BAA0B;IACpC,2EAA2E;IAC3E,QAAQ,aAAa;IACrB,oFAAoF;IACpF,WAAW,gBAAgB;CAC5B;AAED,yDAAyD;AACzD,oBAAY,uCAAuC;IACjD,sEAAsE;IACtE,wBAAwB,6BAA6B;IACrD,gFAAgF;IAChF,wBAAwB,6BAA6B;CACtD;AAED,sEAAsE;AACtE,oBAAY,qCAAqC;IAC/C,gDAAgD;IAChD,MAAM,WAAW;IACjB,oCAAoC;IACpC,oBAAoB,yBAAyB;CAC9C;AAED,uDAAuD;AAEvD,gIAAgI;AAChI,eAAO,MAAM,yCAAyC,QAAa,CAAC;AACpE,sFAAsF;AACtF,eAAO,MAAM,uCAAuC,QAAmB,CAAC;AACxE,kDAAkD;AAClD,eAAO,MAAM,6BAA6B,KAAK,CAAC;AAChD,iGAAiG;AACjG,eAAO,MAAM,mCAAmC,QAAc,CAAC;AAE/D;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,EAAE,SAAS,MAAM,EAiBvD,CAAC;AAEF,4DAA4D;AAC5D,eAAO,MAAM,yBAAyB,aAAa,CAAC;AAQpD,yCAAyC;AACzC,eAAO,MAAM,yBAAyB;;;kBAGpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,uFAAuF;AACvF,eAAO,MAAM,4BAA4B;;;;;;;kBAOvC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,0DAA0D;AAC1D,eAAO,MAAM,oCAAoC;;;kBAG/C,CAAC;AAEH,MAAM,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oCAAoC,CAAC,CAAC;AAElG;;;;GAIG;AACH,eAAO,MAAM,yBAAyB;;;;kBAIpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,gGAAgG;AAChG,eAAO,MAAM,gCAAgC;;;;;kBAK3C,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA0H0C,CAAC;AAE1E,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,iGAAiG;AACjG,eAAO,MAAM,mCAAmC;;IAE9C,kGAAkG;;kBAElG,CAAC;AAEH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mCAAmC,CAAC,CAAC;AAEhG,wGAAwG;AACxG,eAAO,MAAM,0BAA0B;;;;;;;kBAOrC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,8CAA8C;AAC9C,eAAO,MAAM,6BAA6B;;;kBAGxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF;;;;;;;GAOG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;QAlCxC,kGAAkG;;;;;;;;;;;;;;;;kBA+DrD,CAAC;AAEhD,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;iBAiB9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;GAIG;AACH,eAAO,MAAM,6BAA6B;;;;;;;iBAQxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,sIAAsI;AAEtI,6DAA6D;AAC7D,oBAAY,mCAAmC;IAC7C,4FAA4F;IAC5F,KAAK,UAAU;IACf,mIAAmI;IACnI,gBAAgB,qBAAqB;IACrC,uDAAuD;IACvD,MAAM,WAAW;IACjB,sDAAsD;IACtD,MAAM,WAAW;CAClB;AAED,wDAAwD;AACxD,eAAO,MAAM,yCAAyC;;;;;;iBAQpD,CAAC;AAEH,MAAM,MAAM,mCAAmC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yCAAyC,CAAC,CAAC;AAE5G;;;GAGG;AACH,eAAO,MAAM,0CAA0C;;;;;;iBAOrD,CAAC;AAEH,MAAM,MAAM,oCAAoC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0CAA0C,CAAC,CAAC;AAE9G,uGAAuG;AACvG,eAAO,MAAM,2CAA2C;;;;iBAItD,CAAC;AAEH,MAAM,MAAM,qCAAqC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2CAA2C,CAAC,CAAC;AAEhH,oFAAoF;AACpF,eAAO,MAAM,iCAAiC,qCAAqC,CAAC;AACpF,oHAAoH;AACpH,eAAO,MAAM,gCAAgC,wBAAwB,CAAC;AAEtE,yEAAyE;AACzE,eAAO,MAAM,gCAAgC;;;;iBAI3C,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,wBAAwB;;;;;iBAqBnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,+DAA+D;AAM/D,6EAA6E;AAC7E,eAAO,MAAM,6BAA6B,OAAO,CAAC;AAOlD,2FAA2F;AAC3F,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,yDAAyD;IACzD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,uGAAuG;IACvG,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,oBAAoB,GAAG,SAAS,CAkBjF;AAED,0FAA0F;AAC1F,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAE7F;AAED,qFAAqF;AACrF,eAAO,MAAM,0CAA0C,IAAI,CAAC;AAE5D,sGAAsG;AACtG,wBAAgB,mBAAmB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAElE;AAED;;;;GAIG;AACH,eAAO,MAAM,mCAAmC,MAAM,CAAC;AAEvD;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,GAAG,MAAM,CAE9G"}