@xemahq/platform-common 0.14.1 → 0.16.0

package/dist/lib/write-policy.js

@@ -1,54 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.parseWritePolicy = parseWritePolicy;
-exports.validatePageSlugWrite = validatePageSlugWrite;
-exports.validateParentPageWrite = validateParentPageWrite;
-exports.validateMemoryWrite = validateMemoryWrite;
-exports.validateBacklogWrite = validateBacklogWrite;
-const pipeline_errors_1 = require("./errors/pipeline-errors");
-function parseWritePolicy(headerValue) {
-    if (!headerValue) {
-        throw new pipeline_errors_1.MissingWritePolicyError();
-    }
-    try {
-        return JSON.parse(headerValue);
-    }
-    catch (err) {
-        throw new Error(`Malformed X-Write-Policy header — expected JSON-encoded WritePolicyContext. ${err instanceof Error ? err.message : String(err)}`);
-    }
-}
-function validatePageSlugWrite(policy, slug) {
-    if (policy.allowedPageSlugs.includes(slug))
-        return null;
-    for (const prefix of policy.allowedPageSlugPrefixes) {
-        if (slug.startsWith(prefix))
-            return null;
-    }
-    return `Write policy violation: page slug "${slug}" is not in the allowed set. Allowed slugs: [${policy.allowedPageSlugs.join(', ')}], allowed prefixes: [${policy.allowedPageSlugPrefixes.join(', ')}]`;
-}
-function validateParentPageWrite(policy, parentPageId) {
-    if (!policy.allowedParentPageId)
-        return null;
-    if (!parentPageId)
-        return null;
-    if (parentPageId !== policy.allowedParentPageId) {
-        return `Write policy violation: parent page "${parentPageId}" is not the allowed parent "${policy.allowedParentPageId}"`;
-    }
-    return null;
-}
-function validateMemoryWrite(policy) {
-    if (!policy.memoryWriteAllowed) {
-        return 'Write policy violation: memory writes are not allowed for this agent.';
-    }
-    return null;
-}
-function validateBacklogWrite(policy) {
-    if (policy.backlogMode === 'proposal') {
-        return {
-            allowed: false,
-            reason: 'Write policy violation: backlog is in proposal mode — emit backlog proposals in your structured output instead of calling create_item directly.',
-        };
-    }
-    return { allowed: true, mode: policy.backlogMode };
-}
-//# sourceMappingURL=write-policy.js.map

package/dist/lib/write-policy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"write-policy.js","sourceRoot":"","sources":["../../src/lib/write-policy.ts"],"names":[],"mappings":";;AAkDA,4CAaC;AAMD,sDAWC;AAOD,0DAYC;AAKD,kDAQC;AAKD,oDAWC;AA9GD,8DAAmE;AAgCnE,SAAgB,gBAAgB,CAC9B,WAA+B;IAE/B,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,yCAAuB,EAAE,CAAC;IACtC,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAuB,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,+EAA+E,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAClI,CAAC;IACJ,CAAC;AACH,CAAC;AAMD,SAAgB,qBAAqB,CACnC,MAA0B,EAC1B,IAAY;IAEZ,IAAI,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAExD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,uBAAuB,EAAE,CAAC;QACpD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;IAC3C,CAAC;IAED,OAAO,sCAAsC,IAAI,gDAAgD,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AAC3M,CAAC;AAOD,SAAgB,uBAAuB,CACrC,MAA0B,EAC1B,YAAuC;IAEvC,IAAI,CAAC,MAAM,CAAC,mBAAmB;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAE/B,IAAI,YAAY,KAAK,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAChD,OAAO,wCAAwC,YAAY,gCAAgC,MAAM,CAAC,mBAAmB,GAAG,CAAC;IAC3H,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAKD,SAAgB,mBAAmB,CACjC,MAA0B;IAE1B,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC/B,OAAO,uEAAuE,CAAC;IACjF,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAKD,SAAgB,oBAAoB,CAClC,MAA0B;IAE1B,IAAI,MAAM,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QACtC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,iJAAiJ;SAC1J,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;AACrD,CAAC"}

package/dist/nestjs/auth/org-authority-observations.d.ts

@@ -1,15 +0,0 @@
-import type { OrgAuthorityCallerFacts } from './org-authority';
-export declare const ORG_AUTHORITY_OBSERVATION_LIMIT = 512;
-export interface OrgAuthorityObservation extends OrgAuthorityCallerFacts {
-    readonly count: number;
-    readonly firstSeenAt: string;
-}
-export interface OrgAuthorityCensus {
-    readonly observations: readonly OrgAuthorityObservation[];
-    readonly droppedByLimit: number;
-}
-export declare const UNKNOWN_CLIENT_ID = "<unknown>";
-export declare function recordUnprovenOrgAuthority(facts: OrgAuthorityCallerFacts): boolean;
-export declare function orgAuthorityCensus(): OrgAuthorityCensus;
-export declare function resetOrgAuthorityCensus(): void;
-//# sourceMappingURL=org-authority-observations.d.ts.map

package/dist/nestjs/auth/org-authority-observations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"org-authority-observations.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/org-authority-observations.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAO/D,eAAO,MAAM,+BAA+B,MAAM,CAAC;AAGnD,MAAM,WAAW,uBAAwB,SAAQ,uBAAuB;IAEtE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAEvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAGD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,YAAY,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAM1D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAWD,eAAO,MAAM,iBAAiB,cAAc,CAAC;AAmB7C,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAiBT;AAGD,wBAAgB,kBAAkB,IAAI,kBAAkB,CAKvD;AAMD,wBAAgB,uBAAuB,IAAI,IAAI,CAG9C"}

package/dist/nestjs/auth/org-authority-observations.js

@@ -1,47 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.UNKNOWN_CLIENT_ID = exports.ORG_AUTHORITY_OBSERVATION_LIMIT = void 0;
-exports.recordUnprovenOrgAuthority = recordUnprovenOrgAuthority;
-exports.orgAuthorityCensus = orgAuthorityCensus;
-exports.resetOrgAuthorityCensus = resetOrgAuthorityCensus;
-exports.ORG_AUTHORITY_OBSERVATION_LIMIT = 512;
-const observations = new Map();
-let droppedByLimit = 0;
-exports.UNKNOWN_CLIENT_ID = '<unknown>';
-function keyFor(facts) {
-    return [
-        facts.clientId,
-        facts.tokenClass,
-        facts.subjectKind,
-        facts.delegated ? 'delegated' : 'direct',
-    ].join('|');
-}
-function recordUnprovenOrgAuthority(facts) {
-    const key = keyFor(facts);
-    const existing = observations.get(key);
-    if (existing) {
-        existing.count += 1;
-        return false;
-    }
-    if (observations.size >= exports.ORG_AUTHORITY_OBSERVATION_LIMIT) {
-        droppedByLimit += 1;
-        return false;
-    }
-    observations.set(key, {
-        ...facts,
-        count: 1,
-        firstSeenAt: new Date().toISOString(),
-    });
-    return true;
-}
-function orgAuthorityCensus() {
-    return {
-        observations: [...observations.values()].map((entry) => ({ ...entry })),
-        droppedByLimit,
-    };
-}
-function resetOrgAuthorityCensus() {
-    observations.clear();
-    droppedByLimit = 0;
-}
-//# sourceMappingURL=org-authority-observations.js.map

package/dist/nestjs/auth/org-authority-observations.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"org-authority-observations.js","sourceRoot":"","sources":["../../../src/nestjs/auth/org-authority-observations.ts"],"names":[],"mappings":";;;AAwFA,gEAmBC;AAGD,gDAKC;AAMD,0DAGC;AArFY,QAAA,+BAA+B,GAAG,GAAG,CAAC;AA0BnD,MAAM,YAAY,GAAG,IAAI,GAAG,EAA8B,CAAC;AAC3D,IAAI,cAAc,GAAG,CAAC,CAAC;AAGV,QAAA,iBAAiB,GAAG,WAAW,CAAC;AAE7C,SAAS,MAAM,CAAC,KAA8B;IAC5C,OAAO;QACL,KAAK,CAAC,QAAQ;QACd,KAAK,CAAC,UAAU;QAChB,KAAK,CAAC,WAAW;QACjB,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;KACzC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAUD,SAAgB,0BAA0B,CACxC,KAA8B;IAE9B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,IAAI,uCAA+B,EAAE,CAAC;QACzD,cAAc,IAAI,CAAC,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE;QACpB,GAAG,KAAK;QACR,KAAK,EAAE,CAAC;QACR,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAGD,SAAgB,kBAAkB;IAChC,OAAO;QACL,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QACvE,cAAc;KACf,CAAC;AACJ,CAAC;AAMD,SAAgB,uBAAuB;IACrC,YAAY,CAAC,KAAK,EAAE,CAAC;IACrB,cAAc,GAAG,CAAC,CAAC;AACrB,CAAC"}

package/dist/nestjs/auth/org-authority.d.ts

@@ -1,32 +0,0 @@
-import type { SubjectKind, TokenClass } from '@xemahq/kernel-contracts/subject';
-export declare enum OrgAuthoritySource {
-    OrgClaim = "org_claim",
-    OrgMembership = "org_membership",
-    NoOrgAsserted = "no_org_asserted",
-    ClaimMismatch = "claim_mismatch",
-    Unproven = "unproven_header"
-}
-export interface OrgAuthorityVerdict {
-    readonly source: OrgAuthoritySource;
-    readonly assertedOrgId: string;
-    readonly tokenOrgId?: string;
-}
-export declare function resolveOrgAuthority(claims: Record<string, unknown>, assertedOrgId: string): OrgAuthorityVerdict;
-export declare function isOrgAuthorityProven(verdict: OrgAuthorityVerdict): boolean;
-export declare function orgAuthorityRequiresProof(verdict: OrgAuthorityVerdict): boolean;
-export declare enum OrgAuthorityMode {
-    Observe = "observe",
-    Enforce = "enforce"
-}
-export declare const ORG_AUTHORITY_MODE_ENV = "XEMA_ORG_AUTHORITY_MODE";
-export declare class InvalidOrgAuthorityModeError extends Error {
-    constructor(value: string);
-}
-export declare function resolveOrgAuthorityMode(env?: NodeJS.ProcessEnv): OrgAuthorityMode;
-export interface OrgAuthorityCallerFacts {
-    readonly clientId: string;
-    readonly tokenClass: TokenClass;
-    readonly subjectKind: SubjectKind;
-    readonly delegated: boolean;
-}
-//# sourceMappingURL=org-authority.d.ts.map

package/dist/nestjs/auth/org-authority.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"org-authority.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/org-authority.ts"],"names":[],"mappings":"AA+CA,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAahF,oBAAY,kBAAkB;IAE5B,QAAQ,cAAc;IAEtB,aAAa,mBAAmB;IAKhC,aAAa,oBAAoB;IAYjC,aAAa,mBAAmB;IAKhC,QAAQ,oBAAoB;CAC7B;AAGD,MAAM,WAAW,mBAAmB;IAElC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IAEpC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAO/B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAYD,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,aAAa,EAAE,MAAM,GACpB,mBAAmB,CAuCrB;AAGD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAU1E;AAUD,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAUT;AAiBD,oBAAY,gBAAgB;IAE1B,OAAO,YAAY;IAEnB,OAAO,YAAY;CACpB;AAGD,eAAO,MAAM,sBAAsB,4BAA4B,CAAC;AAGhE,qBAAa,4BAA6B,SAAQ,KAAK;gBACzC,KAAK,EAAE,MAAM;CAO1B;AAYD,wBAAgB,uBAAuB,CACrC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,gBAAgB,CAelB;AAQD,MAAM,WAAW,uBAAuB;IAEtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAElC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B"}

package/dist/nestjs/auth/org-authority.js

@@ -1,102 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.InvalidOrgAuthorityModeError = exports.ORG_AUTHORITY_MODE_ENV = exports.OrgAuthorityMode = exports.OrgAuthoritySource = void 0;
-exports.resolveOrgAuthority = resolveOrgAuthority;
-exports.isOrgAuthorityProven = isOrgAuthorityProven;
-exports.orgAuthorityRequiresProof = orgAuthorityRequiresProof;
-exports.resolveOrgAuthorityMode = resolveOrgAuthorityMode;
-const org_claim_1 = require("./org-claim");
-const org_role_1 = require("./org-role");
-var OrgAuthoritySource;
-(function (OrgAuthoritySource) {
-    OrgAuthoritySource["OrgClaim"] = "org_claim";
-    OrgAuthoritySource["OrgMembership"] = "org_membership";
-    OrgAuthoritySource["NoOrgAsserted"] = "no_org_asserted";
-    OrgAuthoritySource["ClaimMismatch"] = "claim_mismatch";
-    OrgAuthoritySource["Unproven"] = "unproven_header";
-})(OrgAuthoritySource || (exports.OrgAuthoritySource = OrgAuthoritySource = {}));
-function resolveOrgAuthority(claims, assertedOrgId) {
-    const asserted = assertedOrgId.trim();
-    if (asserted.length === 0) {
-        return {
-            source: OrgAuthoritySource.NoOrgAsserted,
-            assertedOrgId: '',
-        };
-    }
-    const claim = (0, org_claim_1.resolveOrgClaim)(claims);
-    if (claim) {
-        return claim.value.toLowerCase() === asserted.toLowerCase()
-            ? {
-                source: OrgAuthoritySource.OrgClaim,
-                assertedOrgId: asserted,
-                tokenOrgId: claim.value,
-            }
-            : {
-                source: OrgAuthoritySource.ClaimMismatch,
-                assertedOrgId: asserted,
-                tokenOrgId: claim.value,
-            };
-    }
-    const orgRoles = (0, org_role_1.resolveOrgRoles)(claims);
-    const assertedLower = asserted.toLowerCase();
-    for (const memberOrgId of Object.keys(orgRoles)) {
-        if (memberOrgId.toLowerCase() === assertedLower) {
-            return {
-                source: OrgAuthoritySource.OrgMembership,
-                assertedOrgId: asserted,
-            };
-        }
-    }
-    return { source: OrgAuthoritySource.Unproven, assertedOrgId: asserted };
-}
-function isOrgAuthorityProven(verdict) {
-    switch (verdict.source) {
-        case OrgAuthoritySource.OrgClaim:
-        case OrgAuthoritySource.OrgMembership:
-            return true;
-        case OrgAuthoritySource.NoOrgAsserted:
-        case OrgAuthoritySource.ClaimMismatch:
-        case OrgAuthoritySource.Unproven:
-            return false;
-    }
-}
-function orgAuthorityRequiresProof(verdict) {
-    switch (verdict.source) {
-        case OrgAuthoritySource.Unproven:
-            return true;
-        case OrgAuthoritySource.OrgClaim:
-        case OrgAuthoritySource.OrgMembership:
-        case OrgAuthoritySource.NoOrgAsserted:
-        case OrgAuthoritySource.ClaimMismatch:
-            return false;
-    }
-}
-var OrgAuthorityMode;
-(function (OrgAuthorityMode) {
-    OrgAuthorityMode["Observe"] = "observe";
-    OrgAuthorityMode["Enforce"] = "enforce";
-})(OrgAuthorityMode || (exports.OrgAuthorityMode = OrgAuthorityMode = {}));
-exports.ORG_AUTHORITY_MODE_ENV = 'XEMA_ORG_AUTHORITY_MODE';
-class InvalidOrgAuthorityModeError extends Error {
-    constructor(value) {
-        super(`${exports.ORG_AUTHORITY_MODE_ENV}="${value}" is not a valid org-authority mode. ` +
-            `Expected one of: ${Object.values(OrgAuthorityMode).join(', ')}. ` +
-            `Leave it unset for "${OrgAuthorityMode.Observe}".`);
-    }
-}
-exports.InvalidOrgAuthorityModeError = InvalidOrgAuthorityModeError;
-function resolveOrgAuthorityMode(env = process.env) {
-    const raw = env[exports.ORG_AUTHORITY_MODE_ENV];
-    if (raw === undefined || raw.trim().length === 0) {
-        return OrgAuthorityMode.Observe;
-    }
-    const normalized = raw.trim().toLowerCase();
-    const matched = Object.values(OrgAuthorityMode).includes(normalized)
-        ? normalized
-        : undefined;
-    if (!matched) {
-        throw new InvalidOrgAuthorityModeError(raw);
-    }
-    return matched;
-}
-//# sourceMappingURL=org-authority.js.map

package/dist/nestjs/auth/org-authority.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"org-authority.js","sourceRoot":"","sources":["../../../src/nestjs/auth/org-authority.ts"],"names":[],"mappings":";;;AAkHA,kDA0CC;AAGD,oDAUC;AAUD,8DAYC;AAgDD,0DAiBC;AA/MD,2CAA8C;AAC9C,yCAA6C;AAU7C,IAAY,kBA2BX;AA3BD,WAAY,kBAAkB;IAE5B,4CAAsB,CAAA;IAEtB,sDAAgC,CAAA;IAKhC,uDAAiC,CAAA;IAYjC,sDAAgC,CAAA;IAKhC,kDAA4B,CAAA;AAC9B,CAAC,EA3BW,kBAAkB,kCAAlB,kBAAkB,QA2B7B;AA2BD,SAAgB,mBAAmB,CACjC,MAA+B,EAC/B,aAAqB;IAErB,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,MAAM,EAAE,kBAAkB,CAAC,aAAa;YACxC,aAAa,EAAE,EAAE;SAClB,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,IAAA,2BAAe,EAAC,MAAM,CAAC,CAAC;IACtC,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE;YACzD,CAAC,CAAC;gBACE,MAAM,EAAE,kBAAkB,CAAC,QAAQ;gBACnC,aAAa,EAAE,QAAQ;gBACvB,UAAU,EAAE,KAAK,CAAC,KAAK;aACxB;YACH,CAAC,CAAC;gBACE,MAAM,EAAE,kBAAkB,CAAC,aAAa;gBACxC,aAAa,EAAE,QAAQ;gBACvB,UAAU,EAAE,KAAK,CAAC,KAAK;aACxB,CAAC;IACR,CAAC;IAKD,MAAM,QAAQ,GAAG,IAAA,0BAAe,EAAC,MAAM,CAAC,CAAC;IACzC,MAAM,aAAa,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC7C,KAAK,MAAM,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChD,IAAI,WAAW,CAAC,WAAW,EAAE,KAAK,aAAa,EAAE,CAAC;YAChD,OAAO;gBACL,MAAM,EAAE,kBAAkB,CAAC,aAAa;gBACxC,aAAa,EAAE,QAAQ;aACxB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,kBAAkB,CAAC,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;AAC1E,CAAC;AAGD,SAAgB,oBAAoB,CAAC,OAA4B;IAC/D,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;QACvB,KAAK,kBAAkB,CAAC,QAAQ,CAAC;QACjC,KAAK,kBAAkB,CAAC,aAAa;YACnC,OAAO,IAAI,CAAC;QACd,KAAK,kBAAkB,CAAC,aAAa,CAAC;QACtC,KAAK,kBAAkB,CAAC,aAAa,CAAC;QACtC,KAAK,kBAAkB,CAAC,QAAQ;YAC9B,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAUD,SAAgB,yBAAyB,CACvC,OAA4B;IAE5B,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;QACvB,KAAK,kBAAkB,CAAC,QAAQ;YAC9B,OAAO,IAAI,CAAC;QACd,KAAK,kBAAkB,CAAC,QAAQ,CAAC;QACjC,KAAK,kBAAkB,CAAC,aAAa,CAAC;QACtC,KAAK,kBAAkB,CAAC,aAAa,CAAC;QACtC,KAAK,kBAAkB,CAAC,aAAa;YACnC,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAiBD,IAAY,gBAKX;AALD,WAAY,gBAAgB;IAE1B,uCAAmB,CAAA;IAEnB,uCAAmB,CAAA;AACrB,CAAC,EALW,gBAAgB,gCAAhB,gBAAgB,QAK3B;AAGY,QAAA,sBAAsB,GAAG,yBAAyB,CAAC;AAGhE,MAAa,4BAA6B,SAAQ,KAAK;IACrD,YAAY,KAAa;QACvB,KAAK,CACH,GAAG,8BAAsB,KAAK,KAAK,uCAAuC;YACxE,oBAAoB,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAClE,uBAAuB,gBAAgB,CAAC,OAAO,IAAI,CACtD,CAAC;IACJ,CAAC;CACF;AARD,oEAQC;AAYD,SAAgB,uBAAuB,CACrC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,GAAG,GAAG,GAAG,CAAC,8BAAsB,CAAC,CAAC;IACxC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjD,OAAO,gBAAgB,CAAC,OAAO,CAAC;IAClC,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAI,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAc,CAAC,QAAQ,CACpE,UAAU,CACX;QACC,CAAC,CAAE,UAA+B;QAClC,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,4BAA4B,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/nestjs/auth/org-claim.d.ts

@@ -1,12 +0,0 @@
-export declare enum OrgClaimKey {
-    Canonical = "xema_org_id"
-}
-export declare const ORG_CLAIM_KEYS: readonly OrgClaimKey[];
-export declare enum OrgHeaderName {
-    Canonical = "X-Xema-Org-Id"
-}
-export declare function resolveOrgClaim(claims: Record<string, unknown>): {
-    key: OrgClaimKey;
-    value: string;
-} | null;
-//# sourceMappingURL=org-claim.d.ts.map

package/dist/nestjs/auth/org-claim.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"org-claim.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/org-claim.ts"],"names":[],"mappings":"AA8BA,oBAAY,WAAW;IAErB,SAAS,gBAAgB;CAC1B;AAOD,eAAO,MAAM,cAAc,EAAE,SAAS,WAAW,EAEvC,CAAC;AAQX,oBAAY,aAAa;IAEvB,SAAS,kBAAkB;CAC5B;AAUD,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B;IAAE,GAAG,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAQ5C"}

package/dist/nestjs/auth/org-claim.js

@@ -1,25 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OrgHeaderName = exports.ORG_CLAIM_KEYS = exports.OrgClaimKey = void 0;
-exports.resolveOrgClaim = resolveOrgClaim;
-var OrgClaimKey;
-(function (OrgClaimKey) {
-    OrgClaimKey["Canonical"] = "xema_org_id";
-})(OrgClaimKey || (exports.OrgClaimKey = OrgClaimKey = {}));
-exports.ORG_CLAIM_KEYS = [
-    OrgClaimKey.Canonical,
-];
-var OrgHeaderName;
-(function (OrgHeaderName) {
-    OrgHeaderName["Canonical"] = "X-Xema-Org-Id";
-})(OrgHeaderName || (exports.OrgHeaderName = OrgHeaderName = {}));
-function resolveOrgClaim(claims) {
-    for (const key of exports.ORG_CLAIM_KEYS) {
-        const raw = claims[key];
-        if (typeof raw === 'string' && raw.length > 0) {
-            return { key, value: raw };
-        }
-    }
-    return null;
-}
-//# sourceMappingURL=org-claim.js.map

package/dist/nestjs/auth/org-claim.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"org-claim.js","sourceRoot":"","sources":["../../../src/nestjs/auth/org-claim.ts"],"names":[],"mappings":";;;AA+DA,0CAUC;AA3CD,IAAY,WAGX;AAHD,WAAY,WAAW;IAErB,wCAAyB,CAAA;AAC3B,CAAC,EAHW,WAAW,2BAAX,WAAW,QAGtB;AAOY,QAAA,cAAc,GAA2B;IACpD,WAAW,CAAC,SAAS;CACb,CAAC;AAQX,IAAY,aAGX;AAHD,WAAY,aAAa;IAEvB,4CAA2B,CAAA;AAC7B,CAAC,EAHW,aAAa,6BAAb,aAAa,QAGxB;AAUD,SAAgB,eAAe,CAC7B,MAA+B;IAE/B,KAAK,MAAM,GAAG,IAAI,sBAAc,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/nestjs/auth/org-role.d.ts

@@ -1,13 +0,0 @@
-export declare enum OrgRolesClaimKey {
-    Canonical = "org_roles"
-}
-export declare const ORG_ROLES_CLAIM_KEYS: readonly OrgRolesClaimKey[];
-export declare enum OrgRole {
-    Owner = "org_owner",
-    Admin = "org_admin",
-    Member = "org_member"
-}
-export declare function resolveOrgRoles(claims: Record<string, unknown>): Record<string, OrgRole>;
-export declare function resolveOrgRoleForOrg(claims: Record<string, unknown>, orgId: string): OrgRole | null;
-export declare function orgRoleSatisfies(actual: OrgRole | null | undefined, required: OrgRole): boolean;
-//# sourceMappingURL=org-role.d.ts.map

package/dist/nestjs/auth/org-role.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"org-role.d.ts","sourceRoot":"","sources":["../../../src/nestjs/auth/org-role.ts"],"names":[],"mappings":"AAoCA,oBAAY,gBAAgB;IAE1B,SAAS,cAAc;CACxB;AAED,eAAO,MAAM,oBAAoB,EAAE,SAAS,gBAAgB,EAElD,CAAC;AASX,oBAAY,OAAO;IACjB,KAAK,cAAc;IACnB,KAAK,cAAc;IACnB,MAAM,eAAe;CACtB;AA2BD,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAazB;AAMD,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,MAAM,GACZ,OAAO,GAAG,IAAI,CAGhB;AAOD,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,EAClC,QAAQ,EAAE,OAAO,GAChB,OAAO,CAGT"}

package/dist/nestjs/auth/org-role.js

@@ -1,75 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OrgRole = exports.ORG_ROLES_CLAIM_KEYS = exports.OrgRolesClaimKey = void 0;
-exports.resolveOrgRoles = resolveOrgRoles;
-exports.resolveOrgRoleForOrg = resolveOrgRoleForOrg;
-exports.orgRoleSatisfies = orgRoleSatisfies;
-var OrgRolesClaimKey;
-(function (OrgRolesClaimKey) {
-    OrgRolesClaimKey["Canonical"] = "org_roles";
-})(OrgRolesClaimKey || (exports.OrgRolesClaimKey = OrgRolesClaimKey = {}));
-exports.ORG_ROLES_CLAIM_KEYS = [
-    OrgRolesClaimKey.Canonical,
-];
-var OrgRole;
-(function (OrgRole) {
-    OrgRole["Owner"] = "org_owner";
-    OrgRole["Admin"] = "org_admin";
-    OrgRole["Member"] = "org_member";
-})(OrgRole || (exports.OrgRole = OrgRole = {}));
-const ORG_ROLE_RANK = {
-    [OrgRole.Owner]: 3,
-    [OrgRole.Admin]: 2,
-    [OrgRole.Member]: 1,
-};
-function isOrgRole(value) {
-    return (typeof value === 'string' &&
-        Object.values(OrgRole).includes(value));
-}
-function resolveOrgRoles(claims) {
-    for (const key of exports.ORG_ROLES_CLAIM_KEYS) {
-        const parsed = coerceClaimObject(claims[key]);
-        if (!parsed)
-            continue;
-        const out = {};
-        for (const [orgId, role] of Object.entries(parsed)) {
-            if (orgId.length > 0 && isOrgRole(role)) {
-                out[orgId] = role;
-            }
-        }
-        return out;
-    }
-    return {};
-}
-function resolveOrgRoleForOrg(claims, orgId) {
-    if (!orgId)
-        return null;
-    return resolveOrgRoles(claims)[orgId] ?? null;
-}
-function orgRoleSatisfies(actual, required) {
-    if (!actual)
-        return false;
-    return ORG_ROLE_RANK[actual] >= ORG_ROLE_RANK[required];
-}
-function coerceClaimObject(raw) {
-    let value = raw;
-    if (Array.isArray(value)) {
-        value = value.length === 1 ? value[0] : undefined;
-    }
-    if (typeof value === 'string') {
-        const trimmed = value.trim();
-        if (trimmed.length === 0)
-            return null;
-        try {
-            value = JSON.parse(trimmed);
-        }
-        catch {
-            return null;
-        }
-    }
-    if (value && typeof value === 'object' && !Array.isArray(value)) {
-        return value;
-    }
-    return null;
-}
-//# sourceMappingURL=org-role.js.map

package/dist/nestjs/auth/org-role.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"org-role.js","sourceRoot":"","sources":["../../../src/nestjs/auth/org-role.ts"],"names":[],"mappings":";;;AAmFA,0CAeC;AAMD,oDAMC;AAOD,4CAMC;AAvFD,IAAY,gBAGX;AAHD,WAAY,gBAAgB;IAE1B,2CAAuB,CAAA;AACzB,CAAC,EAHW,gBAAgB,gCAAhB,gBAAgB,QAG3B;AAEY,QAAA,oBAAoB,GAAgC;IAC/D,gBAAgB,CAAC,SAAS;CAClB,CAAC;AASX,IAAY,OAIX;AAJD,WAAY,OAAO;IACjB,8BAAmB,CAAA;IACnB,8BAAmB,CAAA;IACnB,gCAAqB,CAAA;AACvB,CAAC,EAJW,OAAO,uBAAP,OAAO,QAIlB;AAOD,MAAM,aAAa,GAA4B;IAC7C,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;IAClB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;IAClB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;CACpB,CAAC;AAEF,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACxB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,CACrD,CAAC;AACJ,CAAC;AASD,SAAgB,eAAe,CAC7B,MAA+B;IAE/B,KAAK,MAAM,GAAG,IAAI,4BAAoB,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxC,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;YACpB,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAMD,SAAgB,oBAAoB,CAClC,MAA+B,EAC/B,KAAa;IAEb,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;AAChD,CAAC;AAOD,SAAgB,gBAAgB,CAC9B,MAAkC,EAClC,QAAiB;IAEjB,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,OAAO,aAAa,CAAC,MAAM,CAAC,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAC;AAC1D,CAAC;AAQD,SAAS,iBAAiB,CAAC,GAAY;IACrC,IAAI,KAAK,GAAG,GAAG,CAAC;IAChB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACtC,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,KAAgC,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/nestjs/idempotency/prisma-idempotency.service.d.ts

@@ -1,20 +0,0 @@
-import { IDEMPOTENCY_RECORD_PRISMA_MODEL, type IdempotencyOutcome, type IdempotencyService } from './idempotency.service';
-export interface IdempotencyPrismaDelegate {
-    create(args: {
-        data: {
-            consumerName: string;
-            cloudEventId: string;
-        };
-    }): Promise<unknown>;
-}
-export interface IdempotencyPrismaClient {
-    readonly idempotencyRecord: IdempotencyPrismaDelegate;
-}
-export declare const IDEMPOTENCY_PRISMA_CLIENT: unique symbol;
-export declare class PrismaIdempotencyService implements IdempotencyService {
-    private readonly prisma;
-    constructor(prisma: IdempotencyPrismaClient);
-    mark(consumerName: string, cloudEventId: string): Promise<IdempotencyOutcome>;
-}
-export { IDEMPOTENCY_RECORD_PRISMA_MODEL };
-//# sourceMappingURL=prisma-idempotency.service.d.ts.map

package/dist/nestjs/idempotency/prisma-idempotency.service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"prisma-idempotency.service.d.ts","sourceRoot":"","sources":["../../../src/nestjs/idempotency/prisma-idempotency.service.ts"],"names":[],"mappings":"AACA,OAAO,EACL,+BAA+B,EAC/B,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACxB,MAAM,uBAAuB,CAAC;AAY/B,MAAM,WAAW,yBAAyB;IACxC,MAAM,CAAC,IAAI,EAAE;QACX,IAAI,EAAE;YAAE,YAAY,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAC;KACtD,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;CACvD;AAGD,eAAO,MAAM,yBAAyB,eAErC,CAAC;AAWF,qBACa,wBAAyB,YAAW,kBAAkB;IAG/D,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,uBAAuB;IAG5C,IAAI,CACR,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,kBAAkB,CAAC;CAmB/B;AASD,OAAO,EAAE,+BAA+B,EAAE,CAAC"}

package/dist/nestjs/idempotency/prisma-idempotency.service.js

@@ -1,58 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.IDEMPOTENCY_RECORD_PRISMA_MODEL = exports.PrismaIdempotencyService = exports.IDEMPOTENCY_PRISMA_CLIENT = void 0;
-const common_1 = require("@nestjs/common");
-const idempotency_service_1 = require("./idempotency.service");
-Object.defineProperty(exports, "IDEMPOTENCY_RECORD_PRISMA_MODEL", { enumerable: true, get: function () { return idempotency_service_1.IDEMPOTENCY_RECORD_PRISMA_MODEL; } });
-exports.IDEMPOTENCY_PRISMA_CLIENT = Symbol('IDEMPOTENCY_PRISMA_CLIENT');
-let PrismaIdempotencyService = class PrismaIdempotencyService {
-    prisma;
-    constructor(prisma) {
-        this.prisma = prisma;
-    }
-    async mark(consumerName, cloudEventId) {
-        if (!consumerName) {
-            throw new Error('PrismaIdempotencyService.mark: consumerName is required');
-        }
-        if (!cloudEventId) {
-            throw new Error('PrismaIdempotencyService.mark: cloudEventId is required');
-        }
-        try {
-            await this.prisma.idempotencyRecord.create({
-                data: { consumerName, cloudEventId },
-            });
-            return 'fresh';
-        }
-        catch (err) {
-            if (isPrismaUniqueConstraintError(err)) {
-                return 'duplicate';
-            }
-            throw err;
-        }
-    }
-};
-exports.PrismaIdempotencyService = PrismaIdempotencyService;
-exports.PrismaIdempotencyService = PrismaIdempotencyService = __decorate([
-    (0, common_1.Injectable)(),
-    __param(0, (0, common_1.Inject)(exports.IDEMPOTENCY_PRISMA_CLIENT)),
-    __metadata("design:paramtypes", [Object])
-], PrismaIdempotencyService);
-function isPrismaUniqueConstraintError(err) {
-    if (!err || typeof err !== 'object')
-        return false;
-    const code = err.code;
-    return code === 'P2002';
-}
-//# sourceMappingURL=prisma-idempotency.service.js.map

package/dist/nestjs/idempotency/prisma-idempotency.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"prisma-idempotency.service.js","sourceRoot":"","sources":["../../../src/nestjs/idempotency/prisma-idempotency.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,+DAI+B;AA0EtB,gHA7EP,qDAA+B,OA6EO;AAnD3B,QAAA,yBAAyB,GAAG,MAAM,CAC7C,2BAA2B,CAC5B,CAAC;AAYK,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IAGhB;IAFnB,YAEmB,MAA+B;QAA/B,WAAM,GAAN,MAAM,CAAyB;IAC/C,CAAC;IAEJ,KAAK,CAAC,IAAI,CACR,YAAoB,EACpB,YAAoB;QAEpB,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC;gBACzC,IAAI,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE;aACrC,CAAC,CAAC;YACH,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,6BAA6B,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvC,OAAO,WAAW,CAAC;YACrB,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;CACF,CAAA;AA5BY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,eAAM,EAAC,iCAAyB,CAAC,CAAA;;GAFzB,wBAAwB,CA4BpC;AAED,SAAS,6BAA6B,CAAC,GAAY;IACjD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,IAAI,GAAI,GAA0B,CAAC,IAAI,CAAC;IAC9C,OAAO,IAAI,KAAK,OAAO,CAAC;AAC1B,CAAC"}