@aipt/platform-kernel 0.1.5

package/dist/application-config-contract.d.ts

@@ -0,0 +1,159 @@
+import { type ErrorObject } from "ajv/dist/2020.js";
+import type { ProjectManifest } from "./contracts.js";
+export declare const deployableApplicationProfiles: readonly ["workspace-node-application", "workspace-web-application", "nextjs-full-stack-application"];
+export type DeployableApplicationProfile = (typeof deployableApplicationProfiles)[number];
+export type ApplicationConfigBinding = Readonly<{
+    name: string;
+    kind: "value";
+    required: boolean;
+    default?: string;
+}> | Readonly<{
+    name: string;
+    kind: "secret-file" | "certificate-file";
+    required: boolean;
+    file: string;
+}>;
+export type ApplicationConfigContract = Readonly<{
+    $schema: "https://schemas.dyyto.dev/platform/application-config-contract-v1.json";
+    schemaVersion: 1;
+    kind: "ApplicationConfigContract";
+    application: Readonly<{
+        id: string;
+        profile: DeployableApplicationProfile;
+    }>;
+    configDirectory: Readonly<{
+        rootEnvironmentVariable: "IDP_CONFIG_DIR";
+        relativeDirectory: string;
+        environmentFile: ".env";
+        materializationOwner: "external-deployment-control-plane";
+    }>;
+    bindings: readonly ApplicationConfigBinding[];
+}>;
+export declare const applicationConfigContractSchema: {
+    readonly $id: "https://schemas.dyyto.dev/platform/application-config-contract-v1.json";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["$schema", "schemaVersion", "kind", "application", "configDirectory", "bindings"];
+    readonly properties: {
+        readonly $schema: {
+            readonly const: "https://schemas.dyyto.dev/platform/application-config-contract-v1.json";
+        };
+        readonly schemaVersion: {
+            readonly const: 1;
+        };
+        readonly kind: {
+            readonly const: "ApplicationConfigContract";
+        };
+        readonly application: {
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["id", "profile"];
+            readonly properties: {
+                readonly id: {
+                    readonly type: "string";
+                    readonly pattern: "^[a-z0-9][a-z0-9._-]{0,127}$";
+                };
+                readonly profile: {
+                    readonly enum: readonly ["workspace-node-application", "workspace-web-application", "nextjs-full-stack-application"];
+                };
+            };
+        };
+        readonly configDirectory: {
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["rootEnvironmentVariable", "relativeDirectory", "environmentFile", "materializationOwner"];
+            readonly properties: {
+                readonly rootEnvironmentVariable: {
+                    readonly const: "IDP_CONFIG_DIR";
+                };
+                readonly relativeDirectory: {
+                    readonly type: "string";
+                    readonly pattern: "^applications/[a-z0-9][a-z0-9._-]{0,127}$";
+                };
+                readonly environmentFile: {
+                    readonly const: ".env";
+                };
+                readonly materializationOwner: {
+                    readonly const: "external-deployment-control-plane";
+                };
+            };
+        };
+        readonly bindings: {
+            readonly type: "array";
+            readonly maxItems: 128;
+            readonly items: {
+                readonly oneOf: readonly [{
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["name", "kind", "required"];
+                    readonly properties: {
+                        readonly name: {
+                            readonly type: "string";
+                            readonly pattern: "^[A-Z][A-Z0-9_]{0,127}$";
+                        };
+                        readonly kind: {
+                            readonly const: "value";
+                        };
+                        readonly required: {
+                            readonly type: "boolean";
+                        };
+                        readonly default: {
+                            readonly type: "string";
+                            readonly maxLength: 1024;
+                        };
+                    };
+                }, {
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["name", "kind", "required", "file"];
+                    readonly properties: {
+                        readonly name: {
+                            readonly type: "string";
+                            readonly pattern: "^[A-Z][A-Z0-9_]{0,127}$";
+                        };
+                        readonly kind: {
+                            readonly const: "secret-file";
+                        };
+                        readonly required: {
+                            readonly type: "boolean";
+                        };
+                        readonly file: {
+                            readonly type: "string";
+                            readonly maxLength: 512;
+                            readonly pattern: "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*(?:^|/)\\.(?:/|$))(?!.*\\\\)(?!.*[\\u0000-\\u001f]).+$";
+                        };
+                    };
+                }, {
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["name", "kind", "required", "file"];
+                    readonly properties: {
+                        readonly name: {
+                            readonly type: "string";
+                            readonly pattern: "^[A-Z][A-Z0-9_]{0,127}$";
+                        };
+                        readonly kind: {
+                            readonly const: "certificate-file";
+                        };
+                        readonly required: {
+                            readonly type: "boolean";
+                        };
+                        readonly file: {
+                            readonly type: "string";
+                            readonly maxLength: 512;
+                            readonly pattern: "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*(?:^|/)\\.(?:/|$))(?!.*\\\\)(?!.*[\\u0000-\\u001f]).+$";
+                        };
+                    };
+                }];
+            };
+        };
+    };
+};
+export declare class ApplicationConfigContractError extends Error {
+    readonly code: "APPLICATION_CONFIG_CONTRACT_INVALID" | "APPLICATION_CONFIG_IDENTITY_MISMATCH" | "APPLICATION_CONFIG_SECRET_LITERAL_FORBIDDEN";
+    readonly issues: readonly ErrorObject[];
+    constructor(code: "APPLICATION_CONFIG_CONTRACT_INVALID" | "APPLICATION_CONFIG_IDENTITY_MISMATCH" | "APPLICATION_CONFIG_SECRET_LITERAL_FORBIDDEN", message: string, issues?: readonly ErrorObject[]);
+}
+export declare function parseApplicationConfigContract(value: unknown, manifestInput?: unknown): ApplicationConfigContract;
+export declare function renderApplicationConfigContract(manifestInput: ProjectManifest | unknown): Uint8Array;
+//# sourceMappingURL=application-config-contract.d.ts.map

package/dist/application-config-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"application-config-contract.d.ts","sourceRoot":"","sources":["../src/application-config-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAGtD,eAAO,MAAM,6BAA6B,uGAIhC,CAAC;AAEX,MAAM,MAAM,4BAA4B,GAAG,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1F,MAAM,MAAM,wBAAwB,GAChC,QAAQ,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GAC9E,QAAQ,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,aAAa,GAAG,kBAAkB,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE1G,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAC/C,OAAO,EAAE,wEAAwE,CAAC;IAClF,aAAa,EAAE,CAAC,CAAC;IACjB,IAAI,EAAE,2BAA2B,CAAC;IAClC,WAAW,EAAE,QAAQ,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,4BAA4B,CAAA;KAAE,CAAC,CAAC;IAC7E,eAAe,EAAE,QAAQ,CAAC;QACxB,uBAAuB,EAAE,gBAAgB,CAAC;QAC1C,iBAAiB,EAAE,MAAM,CAAC;QAC1B,eAAe,EAAE,MAAM,CAAC;QACxB,oBAAoB,EAAE,mCAAmC,CAAC;KAC3D,CAAC,CAAC;IACH,QAAQ,EAAE,SAAS,wBAAwB,EAAE,CAAC;CAC/C,CAAC,CAAC;AAMH,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2ClC,CAAC;AAMX,qBAAa,8BAA+B,SAAQ,KAAK;IAErD,QAAQ,CAAC,IAAI,EAAE,qCAAqC,GAAG,sCAAsC,GAAG,6CAA6C;IAE7I,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE;gBAF9B,IAAI,EAAE,qCAAqC,GAAG,sCAAsC,GAAG,6CAA6C,EAC7I,OAAO,EAAE,MAAM,EACN,MAAM,GAAE,SAAS,WAAW,EAAO;CAE/C;AAgBD,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE,OAAO,GAAG,yBAAyB,CAoCjH;AAED,wBAAgB,+BAA+B,CAAC,aAAa,EAAE,eAAe,GAAG,OAAO,GAAG,UAAU,CAoBpG"}

package/dist/application-config-contract.js

@@ -0,0 +1,142 @@
+import { Ajv2020 } from "ajv/dist/2020.js";
+import { parseProjectManifest } from "./schemas.js";
+export const deployableApplicationProfiles = [
+    "workspace-node-application",
+    "workspace-web-application",
+    "nextjs-full-stack-application",
+];
+const applicationIdPattern = "^[a-z0-9][a-z0-9._-]{0,127}$";
+const environmentNamePattern = "^[A-Z][A-Z0-9_]{0,127}$";
+const safeRelativeFilePattern = "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*(?:^|/)\\.(?:/|$))(?!.*\\\\)(?!.*[\\u0000-\\u001f]).+$";
+export const applicationConfigContractSchema = {
+    $id: "https://schemas.dyyto.dev/platform/application-config-contract-v1.json",
+    type: "object",
+    additionalProperties: false,
+    required: ["$schema", "schemaVersion", "kind", "application", "configDirectory", "bindings"],
+    properties: {
+        $schema: { const: "https://schemas.dyyto.dev/platform/application-config-contract-v1.json" },
+        schemaVersion: { const: 1 },
+        kind: { const: "ApplicationConfigContract" },
+        application: {
+            type: "object", additionalProperties: false, required: ["id", "profile"],
+            properties: { id: { type: "string", pattern: applicationIdPattern }, profile: { enum: deployableApplicationProfiles } },
+        },
+        configDirectory: {
+            type: "object", additionalProperties: false,
+            required: ["rootEnvironmentVariable", "relativeDirectory", "environmentFile", "materializationOwner"],
+            properties: {
+                rootEnvironmentVariable: { const: "IDP_CONFIG_DIR" },
+                relativeDirectory: { type: "string", pattern: "^applications/[a-z0-9][a-z0-9._-]{0,127}$" },
+                environmentFile: { const: ".env" },
+                materializationOwner: { const: "external-deployment-control-plane" },
+            },
+        },
+        bindings: {
+            type: "array", maxItems: 128,
+            items: {
+                oneOf: [
+                    {
+                        type: "object", additionalProperties: false, required: ["name", "kind", "required"],
+                        properties: { name: { type: "string", pattern: environmentNamePattern }, kind: { const: "value" }, required: { type: "boolean" }, default: { type: "string", maxLength: 1024 } },
+                    },
+                    {
+                        type: "object", additionalProperties: false, required: ["name", "kind", "required", "file"],
+                        properties: { name: { type: "string", pattern: environmentNamePattern }, kind: { const: "secret-file" }, required: { type: "boolean" }, file: { type: "string", maxLength: 512, pattern: safeRelativeFilePattern } },
+                    },
+                    {
+                        type: "object", additionalProperties: false, required: ["name", "kind", "required", "file"],
+                        properties: { name: { type: "string", pattern: environmentNamePattern }, kind: { const: "certificate-file" }, required: { type: "boolean" }, file: { type: "string", maxLength: 512, pattern: safeRelativeFilePattern } },
+                    },
+                ],
+            },
+        },
+    },
+};
+const validate = new Ajv2020({ allErrors: true, strict: true }).compile(applicationConfigContractSchema);
+const sensitiveName = /(?:^|_)(?:PASSWORD|PASSWD|TOKEN|SECRET|PRIVATE_KEY|ACCESS_KEY|API_KEY|DATABASE_URL|CONNECTION_STRING|DSN|AUTHORIZATION|CREDENTIALS?)(?:_|$)/u;
+const privateCertificateMaterialName = /(?:^|_)(?:PRIVATE_KEY|PRIVATE|KEYPAIR|KEYSTORE|PKCS12|P12|PFX|KEY)(?:_|$)/u;
+export class ApplicationConfigContractError extends Error {
+    code;
+    issues;
+    constructor(code, message, issues = []) {
+        super(message);
+        this.code = code;
+        this.issues = issues;
+    }
+}
+function applicationIdentity(manifestInput) {
+    const manifest = parseProjectManifest(manifestInput);
+    const profile = manifest.profile?.id;
+    if (!deployableApplicationProfiles.includes(profile)) {
+        throw new ApplicationConfigContractError("APPLICATION_CONFIG_CONTRACT_INVALID", "环境配置契约只支持可部署 Application Profile。");
+    }
+    const parameters = manifest.profile?.parameters ?? {};
+    const id = parameters.name;
+    if (Object.keys(parameters).length !== 1 || typeof id !== "string" || !new RegExp(applicationIdPattern, "u").test(id)) {
+        throw new ApplicationConfigContractError("APPLICATION_CONFIG_CONTRACT_INVALID", "Application Manifest 必须包含唯一且合法的 name 参数。");
+    }
+    return { id, profile: profile };
+}
+export function parseApplicationConfigContract(value, manifestInput) {
+    if (!validate(value)) {
+        throw new ApplicationConfigContractError("APPLICATION_CONFIG_CONTRACT_INVALID", "Application ConfigContract 不符合 v1 Schema。", validate.errors ?? []);
+    }
+    const contract = value;
+    if (contract.configDirectory.relativeDirectory !== `applications/${contract.application.id}`) {
+        throw new ApplicationConfigContractError("APPLICATION_CONFIG_CONTRACT_INVALID", "Config Dir 相对目录必须由 Application identity 唯一确定。");
+    }
+    const names = new Set();
+    const files = new Set();
+    for (const binding of contract.bindings) {
+        if (names.has(binding.name))
+            throw new ApplicationConfigContractError("APPLICATION_CONFIG_CONTRACT_INVALID", `环境 Binding 名称重复：${binding.name}`);
+        names.add(binding.name);
+        if (binding.kind === "value") {
+            if (sensitiveName.test(binding.name))
+                throw new ApplicationConfigContractError("APPLICATION_CONFIG_SECRET_LITERAL_FORBIDDEN", `敏感配置 ${binding.name} 必须使用文件 Binding，禁止在仓库中声明值。`);
+            continue;
+        }
+        if (!binding.name.endsWith("_FILE"))
+            throw new ApplicationConfigContractError("APPLICATION_CONFIG_CONTRACT_INVALID", `文件 Binding ${binding.name} 必须以 _FILE 结尾。`);
+        const requiredDirectory = binding.kind === "secret-file" ? "secrets/" : "certs/";
+        if (binding.kind === "certificate-file" && (sensitiveName.test(binding.name) || privateCertificateMaterialName.test(binding.name))) {
+            throw new ApplicationConfigContractError("APPLICATION_CONFIG_CONTRACT_INVALID", `${binding.name} 包含私密材料语义，必须使用 secret-file 并放入 secrets/；certificate-file 只允许公开证书。`);
+        }
+        const pathSegments = binding.file.split("/");
+        if (!binding.file.startsWith(requiredDirectory) || pathSegments.some((segment) => segment === "" || segment === "." || segment === "..")) {
+            throw new ApplicationConfigContractError("APPLICATION_CONFIG_CONTRACT_INVALID", `${binding.name} 必须位于 ${requiredDirectory} 下的具体文件。`);
+        }
+        if (files.has(binding.file))
+            throw new ApplicationConfigContractError("APPLICATION_CONFIG_CONTRACT_INVALID", `配置文件 Binding 路径重复：${binding.file}`);
+        files.add(binding.file);
+    }
+    if (manifestInput !== undefined) {
+        const expected = applicationIdentity(manifestInput);
+        if (contract.application.id !== expected.id || contract.application.profile !== expected.profile) {
+            throw new ApplicationConfigContractError("APPLICATION_CONFIG_IDENTITY_MISMATCH", "ConfigContract 的应用身份或 Profile 与 Project Manifest 不一致。");
+        }
+    }
+    return contract;
+}
+export function renderApplicationConfigContract(manifestInput) {
+    const application = applicationIdentity(manifestInput);
+    const bindings = application.profile === "workspace-web-application"
+        ? []
+        : [{ name: "PORT", kind: "value", required: false, default: "3000" }];
+    const contract = {
+        $schema: "https://schemas.dyyto.dev/platform/application-config-contract-v1.json",
+        schemaVersion: 1,
+        kind: "ApplicationConfigContract",
+        application,
+        configDirectory: {
+            rootEnvironmentVariable: "IDP_CONFIG_DIR",
+            relativeDirectory: `applications/${application.id}`,
+            environmentFile: ".env",
+            materializationOwner: "external-deployment-control-plane",
+        },
+        bindings,
+    };
+    parseApplicationConfigContract(contract, manifestInput);
+    return Buffer.from(`${JSON.stringify(contract, null, 2)}\n`);
+}
+//# sourceMappingURL=application-config-contract.js.map

package/dist/application-config-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"application-config-contract.js","sourceRoot":"","sources":["../src/application-config-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAoB,MAAM,kBAAkB,CAAC;AAE7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,4BAA4B;IAC5B,2BAA2B;IAC3B,+BAA+B;CACvB,CAAC;AAsBX,MAAM,oBAAoB,GAAG,8BAA8B,CAAC;AAC5D,MAAM,sBAAsB,GAAG,yBAAyB,CAAC;AACzD,MAAM,uBAAuB,GAAG,6FAA6F,CAAC;AAE9H,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,GAAG,EAAE,wEAAwE;IAC7E,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE,CAAC,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,UAAU,CAAC;IAC5F,UAAU,EAAE;QACV,OAAO,EAAE,EAAE,KAAK,EAAE,wEAAwE,EAAE;QAC5F,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;QAC3B,IAAI,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE;QAC5C,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC;YACxE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,oBAAoB,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE,EAAE;SACxH;QACD,eAAe,EAAE;YACf,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,KAAK;YAC3C,QAAQ,EAAE,CAAC,yBAAyB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,sBAAsB,CAAC;YACrG,UAAU,EAAE;gBACV,uBAAuB,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE;gBACpD,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,2CAA2C,EAAE;gBAC3F,eAAe,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;gBAClC,oBAAoB,EAAE,EAAE,KAAK,EAAE,mCAAmC,EAAE;aACrE;SACF;QACD,QAAQ,EAAE;YACR,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG;YAC5B,KAAK,EAAE;gBACL,KAAK,EAAE;oBACL;wBACE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC;wBACnF,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;qBACjL;oBACD;wBACE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC;wBAC3F,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,uBAAuB,EAAE,EAAE;qBACrN;oBACD;wBACE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC;wBAC3F,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,uBAAuB,EAAE,EAAE;qBAC1N;iBACF;aACF;SACF;KACF;CACO,CAAC;AAEX,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAA4B,+BAA+B,CAAC,CAAC;AACpI,MAAM,aAAa,GAAG,8IAA8I,CAAC;AACrK,MAAM,8BAA8B,GAAG,4EAA4E,CAAC;AAEpH,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IAE5C;IAEA;IAHX,YACW,IAAoI,EAC7I,OAAe,EACN,SAAiC,EAAE;QAC1C,KAAK,CAAC,OAAO,CAAC,CAAC;QAHR,SAAI,GAAJ,IAAI,CAAgI;QAEpI,WAAM,GAAN,MAAM,CAA6B;IAC1B,CAAC;CACtB;AAED,SAAS,mBAAmB,CAAC,aAAsB;IACjD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;IACrC,IAAI,CAAC,6BAA6B,CAAC,QAAQ,CAAC,OAAuC,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,8BAA8B,CAAC,qCAAqC,EAAE,mCAAmC,CAAC,CAAC;IACvH,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,EAAE,UAAU,IAAI,EAAE,CAAC;IACtD,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC;IAC3B,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,IAAI,MAAM,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACtH,MAAM,IAAI,8BAA8B,CAAC,qCAAqC,EAAE,0CAA0C,CAAC,CAAC;IAC9H,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,OAAuC,EAAE,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAAc,EAAE,aAAuB;IACpF,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,8BAA8B,CAAC,qCAAqC,EAAE,2CAA2C,EAAE,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACtJ,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC;IACvB,IAAI,QAAQ,CAAC,eAAe,CAAC,iBAAiB,KAAK,gBAAgB,QAAQ,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,CAAC;QAC7F,MAAM,IAAI,8BAA8B,CAAC,qCAAqC,EAAE,+CAA+C,CAAC,CAAC;IACnI,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACxC,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,8BAA8B,CAAC,qCAAqC,EAAE,mBAAmB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAChJ,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7B,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,8BAA8B,CAAC,6CAA6C,EAAE,QAAQ,OAAO,CAAC,IAAI,4BAA4B,CAAC,CAAC;YAChL,SAAS;QACX,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,8BAA8B,CAAC,qCAAqC,EAAE,cAAc,OAAO,CAAC,IAAI,gBAAgB,CAAC,CAAC;QACjK,MAAM,iBAAiB,GAAG,OAAO,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;QACjF,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACnI,MAAM,IAAI,8BAA8B,CAAC,qCAAqC,EAAE,GAAG,OAAO,CAAC,IAAI,mEAAmE,CAAC,CAAC;QACtK,CAAC;QACD,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;YACzI,MAAM,IAAI,8BAA8B,CAAC,qCAAqC,EAAE,GAAG,OAAO,CAAC,IAAI,SAAS,iBAAiB,UAAU,CAAC,CAAC;QACvI,CAAC;QACD,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,8BAA8B,CAAC,qCAAqC,EAAE,qBAAqB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAClJ,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;QACpD,IAAI,QAAQ,CAAC,WAAW,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,WAAW,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;YACjG,MAAM,IAAI,8BAA8B,CAAC,sCAAsC,EAAE,uDAAuD,CAAC,CAAC;QAC5I,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,aAAwC;IACtF,MAAM,WAAW,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACvD,MAAM,QAAQ,GAA+B,WAAW,CAAC,OAAO,KAAK,2BAA2B;QAC9F,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACxE,MAAM,QAAQ,GAA8B;QAC1C,OAAO,EAAE,wEAAwE;QACjF,aAAa,EAAE,CAAC;QAChB,IAAI,EAAE,2BAA2B;QACjC,WAAW;QACX,eAAe,EAAE;YACf,uBAAuB,EAAE,gBAAgB;YACzC,iBAAiB,EAAE,gBAAgB,WAAW,CAAC,EAAE,EAAE;YACnD,eAAe,EAAE,MAAM;YACvB,oBAAoB,EAAE,mCAAmC;SAC1D;QACD,QAAQ;KACT,CAAC;IACF,8BAA8B,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AAC/D,CAAC"}

package/dist/blank-profile.d.ts

@@ -0,0 +1,60 @@
+import type { LoadedCapabilityRelease } from "./adoption-contracts.js";
+import type { ChangePlan, ProjectManifest, PlannedOperation } from "./contracts.js";
+export declare class BlankProfileError extends Error {
+    readonly code: "RELEASE_NOT_FOUND" | "CONSUMER_PROFILE_UNSUPPORTED" | "PROJECT_STATE_INVALID";
+    readonly assetPath?: string | undefined;
+    constructor(code: "RELEASE_NOT_FOUND" | "CONSUMER_PROFILE_UNSUPPORTED" | "PROJECT_STATE_INVALID", message: string, assetPath?: string | undefined);
+}
+export type BlankProjectInspection = {
+    state: "planned" | "applied-unverified" | "adopted" | "drifted";
+    operations: PlannedOperation[];
+};
+export declare function inspectBlankProject(input: {
+    projectRoot: string;
+    release: LoadedCapabilityRelease;
+    currentLock?: unknown;
+    generatedAt: string;
+    expiresAt: string;
+}): Promise<BlankProjectInspection>;
+export type BlankAdoptionPlan = {
+    manifest: ProjectManifest;
+    release: LoadedCapabilityRelease;
+    plan: ChangePlan;
+    desiredContents: ReadonlyMap<string, Uint8Array>;
+};
+export declare function captureReleaseProjectState(input: {
+    projectRoot: string;
+    release: LoadedCapabilityRelease["release"];
+}): Promise<{
+    assets: Array<{
+        path: string;
+        digest: string;
+    }>;
+    projectStateDigest: string;
+}>;
+export declare function captureExpectedProjectState(input: {
+    projectRoot: string;
+    expectedAssets: Array<{
+        path: string;
+        digest: string;
+        ownership?: "owned-file" | "managed-region" | "seed-file";
+        regionId?: string;
+    }>;
+}): Promise<{
+    assets: Array<{
+        path: string;
+        digest: string;
+        ownership?: "owned-file" | "managed-region" | "seed-file";
+        regionId?: string;
+    }>;
+    projectStateDigest: string;
+}>;
+export declare function planBlankAdoption(input: {
+    projectRoot: string;
+    manifest: unknown;
+    release: LoadedCapabilityRelease;
+    currentLock?: unknown;
+    generatedAt: string;
+    expiresAt: string;
+}): Promise<BlankAdoptionPlan>;
+//# sourceMappingURL=blank-profile.d.ts.map

package/dist/blank-profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blank-profile.d.ts","sourceRoot":"","sources":["../src/blank-profile.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,uBAAuB,EAExB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAEV,UAAU,EAEV,eAAe,EAEf,gBAAgB,EACjB,MAAM,gBAAgB,CAAC;AAOxB,qBAAa,iBAAkB,SAAQ,KAAK;IAExC,QAAQ,CAAC,IAAI,EACT,mBAAmB,GACnB,8BAA8B,GAC9B,uBAAuB;IAE3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM;gBALlB,IAAI,EACT,mBAAmB,GACnB,8BAA8B,GAC9B,uBAAuB,EAC3B,OAAO,EAAE,MAAM,EACN,SAAS,CAAC,EAAE,MAAM,YAAA;CAI9B;AAED,MAAM,MAAM,sBAAsB,GAAG;IACnC,KAAK,EAAE,SAAS,GAAG,oBAAoB,GAAG,SAAS,GAAG,SAAS,CAAC;IAChE,UAAU,EAAE,gBAAgB,EAAE,CAAC;CAChC,CAAC;AAEF,wBAAsB,mBAAmB,CAAC,KAAK,EAAE;IAC/C,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,uBAAuB,CAAC;IACjC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAkDlC;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,EAAE,eAAe,CAAC;IAC1B,OAAO,EAAE,uBAAuB,CAAC;IACjC,IAAI,EAAE,UAAU,CAAC;IACjB,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;CAClD,CAAC;AAsBF,wBAAsB,0BAA0B,CAAC,KAAK,EAAE;IACtD,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,uBAAuB,CAAC,SAAS,CAAC,CAAC;CAC7C,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAA;CAAE,CAAC,CAe3F;AAED,wBAAsB,2BAA2B,CAAC,KAAK,EAAE;IACvD,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,YAAY,GAAG,gBAAgB,GAAG,WAAW,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACvI,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,YAAY,GAAG,gBAAgB,GAAG,WAAW,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAA;CAAE,CAAC,CAoBzK;AAED,wBAAsB,iBAAiB,CAAC,KAAK,EAAE;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,uBAAuB,CAAC;IACjC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAiF7B"}

package/dist/blank-profile.js

@@ -0,0 +1,182 @@
+import { lstat, readFile, realpath } from "node:fs/promises";
+import path from "node:path";
+import { canonicalize, sha256Digest } from "./integrity.js";
+import { readMarkdownManagedRegion } from "./managed-region.js";
+import { buildChangePlan } from "./planner.js";
+import { parseProjectManifest } from "./schemas.js";
+import { parseProjectAdoptionLock } from "./adoption-schemas.js";
+export class BlankProfileError extends Error {
+    code;
+    assetPath;
+    constructor(code, message, assetPath) {
+        super(message);
+        this.code = code;
+        this.assetPath = assetPath;
+    }
+}
+export async function inspectBlankProject(input) {
+    if (input.currentLock !== undefined) {
+        const planned = await planBlankAdoption({
+            ...input,
+            manifest: {
+                schemaVersion: 1,
+                capabilities: [
+                    {
+                        capabilityId: input.release.release.capabilityId,
+                        version: input.release.release.version,
+                    },
+                ],
+            },
+        });
+        return {
+            state: planned.plan.state === "conflicted" ? "drifted" : "adopted",
+            operations: planned.plan.operations,
+        };
+    }
+    const projectRoot = await realpath(path.resolve(input.projectRoot));
+    const operations = [];
+    let present = 0;
+    let exact = 0;
+    for (const asset of input.release.release.assets) {
+        const observed = await readObservedAsset(projectRoot, asset.path);
+        if (observed.exists)
+            present += 1;
+        if (observed.digest === asset.digest)
+            exact += 1;
+        operations.push({
+            path: asset.path,
+            kind: "create",
+            ownership: asset.ownership,
+            desiredDigest: asset.ownership === "seed-file" && observed.digest ? observed.digest : asset.digest,
+            disposition: !observed.exists
+                ? "ready"
+                : asset.ownership === "seed-file"
+                    ? "noop"
+                    : observed.digest === asset.digest
+                        ? "noop"
+                        : "conflict",
+            ...(observed.exists && observed.digest !== asset.digest
+                ? { conflictCode: "UNEXPECTED_EXISTING" }
+                : {}),
+        });
+    }
+    if (present === 0)
+        return { state: "planned", operations };
+    if (exact === input.release.release.assets.length) {
+        return { state: "applied-unverified", operations };
+    }
+    return { state: "drifted", operations };
+}
+async function readObservedAsset(projectRoot, assetPath) {
+    const target = path.join(projectRoot, ...assetPath.split("/"));
+    try {
+        const targetStat = await lstat(target);
+        if (!targetStat.isFile() || targetStat.isSymbolicLink()) {
+            throw new BlankProfileError("PROJECT_STATE_INVALID", "Blank profile target must be a regular file", assetPath);
+        }
+        return { path: assetPath, exists: true, digest: sha256Digest(await readFile(target)) };
+    }
+    catch (error) {
+        if (error.code === "ENOENT") {
+            return { path: assetPath, exists: false };
+        }
+        throw error;
+    }
+}
+export async function captureReleaseProjectState(input) {
+    const projectRoot = await realpath(path.resolve(input.projectRoot));
+    const assets = [];
+    for (const asset of input.release.assets) {
+        const observed = await readObservedAsset(projectRoot, asset.path);
+        if (!observed.exists || observed.digest === undefined) {
+            throw new BlankProfileError("PROJECT_STATE_INVALID", "A release asset is missing from the project", asset.path);
+        }
+        assets.push({ path: asset.path, digest: observed.digest });
+    }
+    return { assets, projectStateDigest: sha256Digest(canonicalize(assets)) };
+}
+export async function captureExpectedProjectState(input) {
+    const projectRoot = await realpath(path.resolve(input.projectRoot));
+    const assets = [];
+    for (const expected of input.expectedAssets) {
+        const observed = await readObservedAsset(projectRoot, expected.path);
+        let matches = observed.exists && observed.digest === expected.digest;
+        if (expected.ownership === "managed-region" && expected.regionId !== undefined && observed.exists) {
+            try {
+                matches = sha256Digest(readMarkdownManagedRegion(await readFile(path.join(projectRoot, ...expected.path.split("/")), "utf8"), expected.regionId)) === expected.digest;
+            }
+            catch {
+                matches = false;
+            }
+        }
+        if (!matches) {
+            throw new BlankProfileError("PROJECT_STATE_INVALID", "A managed project asset does not match the approved plan", expected.path);
+        }
+        assets.push({ path: expected.path, digest: expected.digest, ...(expected.ownership === undefined ? {} : { ownership: expected.ownership }), ...(expected.regionId === undefined ? {} : { regionId: expected.regionId }) });
+    }
+    return { assets, projectStateDigest: sha256Digest(canonicalize(assets)) };
+}
+export async function planBlankAdoption(input) {
+    const manifest = parseProjectManifest(input.manifest);
+    const selected = manifest.capabilities.filter((capability) => capability.capabilityId === input.release.release.capabilityId &&
+        capability.version === input.release.release.version);
+    if (selected.length !== 1 || manifest.capabilities.length !== 1) {
+        throw new BlankProfileError("RELEASE_NOT_FOUND", "Manifest must select exactly the loaded M3 capability release");
+    }
+    const currentLock = input.currentLock === undefined ? undefined : parseProjectAdoptionLock(input.currentLock);
+    const lockedCapability = currentLock?.capabilities.find((capability) => capability.capabilityId === input.release.release.capabilityId);
+    if (lockedCapability !== undefined &&
+        (lockedCapability.version !== input.release.release.version ||
+            lockedCapability.integrity !== input.release.release.integrity)) {
+        throw new BlankProfileError("CONSUMER_PROFILE_UNSUPPORTED", "M3 does not support upgrading a different locked release");
+    }
+    const projectRoot = await realpath(path.resolve(input.projectRoot));
+    const observedAssets = [];
+    const changes = [];
+    const desiredContents = new Map(input.release.contents);
+    for (const asset of input.release.release.assets) {
+        const observed = await readObservedAsset(projectRoot, asset.path);
+        observedAssets.push(observed);
+        if (observed.exists && lockedCapability === undefined && asset.ownership !== "seed-file") {
+            throw new BlankProfileError("CONSUMER_PROFILE_UNSUPPORTED", "Blank profile cannot adopt over an existing file without a lock", asset.path);
+        }
+        const desiredDigest = asset.ownership === "seed-file" && observed.digest ? observed.digest : asset.digest;
+        if (asset.ownership === "seed-file" && observed.exists)
+            desiredContents.set(asset.path, await readFile(path.join(projectRoot, ...asset.path.split("/"))));
+        changes.push({
+            path: asset.path,
+            kind: "create",
+            ownership: asset.ownership,
+            desiredDigest,
+        });
+    }
+    const capability = {
+        schemaVersion: 1,
+        capabilityId: input.release.release.capabilityId,
+        version: input.release.release.version,
+        integrity: input.release.release.integrity,
+        assets: input.release.release.assets.map((asset) => ({
+            path: asset.path,
+            ownership: asset.ownership,
+            desiredDigest: asset.digest,
+        })),
+        verifiers: input.release.release.verifiers.map((verifier) => ({
+            id: verifier.id,
+            kind: "command",
+        })),
+    };
+    return {
+        manifest,
+        release: input.release,
+        plan: buildChangePlan({
+            action: "adopt",
+            capability,
+            changes,
+            observedAssets,
+            generatedAt: input.generatedAt,
+            expiresAt: input.expiresAt,
+        }),
+        desiredContents,
+    };
+}
+//# sourceMappingURL=blank-profile.js.map

package/dist/blank-profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blank-profile.js","sourceRoot":"","sources":["../src/blank-profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,IAAI,MAAM,WAAW,CAAC;AAa7B,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEjE,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAE/B;IAKA;IANX,YACW,IAGkB,EAC3B,OAAe,EACN,SAAkB;QAE3B,KAAK,CAAC,OAAO,CAAC,CAAC;QAPN,SAAI,GAAJ,IAAI,CAGc;QAElB,cAAS,GAAT,SAAS,CAAS;IAG7B,CAAC;CACF;AAOD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAMzC;IACC,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC;YACtC,GAAG,KAAK;YACR,QAAQ,EAAE;gBACR,aAAa,EAAE,CAAC;gBAChB,YAAY,EAAE;oBACZ;wBACE,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY;wBAChD,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO;qBACvC;iBACF;aACF;SACF,CAAC,CAAC;QACH,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAClE,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,UAAU;SACpC,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IACpE,MAAM,UAAU,GAAuB,EAAE,CAAC;IAC1C,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAClE,IAAI,QAAQ,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,CAAC;QAClC,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAAE,KAAK,IAAI,CAAC,CAAC;QACjD,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,aAAa,EAAE,KAAK,CAAC,SAAS,KAAK,WAAW,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM;YAClG,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM;gBAC3B,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,KAAK,CAAC,SAAS,KAAK,WAAW;oBAC/B,CAAC,CAAC,MAAM;oBACV,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;wBAChC,CAAC,CAAC,MAAM;wBACR,CAAC,CAAC,UAAU;YAChB,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;gBACrD,CAAC,CAAC,EAAE,YAAY,EAAE,qBAA8B,EAAE;gBAClD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;IAC3D,IAAI,KAAK,KAAK,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAClD,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,UAAU,EAAE,CAAC;IACrD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AAC1C,CAAC;AASD,KAAK,UAAU,iBAAiB,CAAC,WAAmB,EAAE,SAAiB;IACrE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,UAAU,CAAC,cAAc,EAAE,EAAE,CAAC;YACxD,MAAM,IAAI,iBAAiB,CACzB,uBAAuB,EACvB,6CAA6C,EAC7C,SAAS,CACV,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;IACzF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC5C,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,KAGhD;IACC,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IACpE,MAAM,MAAM,GAA4C,EAAE,CAAC;IAC3D,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAClE,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACtD,MAAM,IAAI,iBAAiB,CACzB,uBAAuB,EACvB,6CAA6C,EAC7C,KAAK,CAAC,IAAI,CACX,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAGjD;IACC,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IACpE,MAAM,MAAM,GAA0H,EAAE,CAAC;IACzI,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrE,IAAI,OAAO,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC;QACrE,IAAI,QAAQ,CAAC,SAAS,KAAK,gBAAgB,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YAClG,IAAI,CAAC;gBAAC,OAAO,GAAG,YAAY,CAAC,yBAAyB,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,QAAQ,CAAC,MAAM,CAAC;YAAC,CAAC;YAC9K,MAAM,CAAC;gBAAC,OAAO,GAAG,KAAK,CAAC;YAAC,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,iBAAiB,CACzB,uBAAuB,EACvB,0DAA0D,EAC1D,QAAQ,CAAC,IAAI,CACd,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7N,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAOvC;IACC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC,MAAM,CAC3C,CAAC,UAAU,EAAE,EAAE,CACb,UAAU,CAAC,YAAY,KAAK,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY;QAC9D,UAAU,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CACvD,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,iBAAiB,CACzB,mBAAmB,EACnB,+DAA+D,CAChE,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GACf,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,wBAAwB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC5F,MAAM,gBAAgB,GAAG,WAAW,EAAE,YAAY,CAAC,IAAI,CACrD,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,YAAY,KAAK,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAC/E,CAAC;IACF,IACE,gBAAgB,KAAK,SAAS;QAC9B,CAAC,gBAAgB,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO;YACzD,gBAAgB,CAAC,SAAS,KAAK,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EACjE,CAAC;QACD,MAAM,IAAI,iBAAiB,CACzB,8BAA8B,EAC9B,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IACpE,MAAM,cAAc,GAAoB,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAClE,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAI,QAAQ,CAAC,MAAM,IAAI,gBAAgB,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;YACzF,MAAM,IAAI,iBAAiB,CACzB,8BAA8B,EAC9B,iEAAiE,EACjE,KAAK,CAAC,IAAI,CACX,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG,KAAK,CAAC,SAAS,KAAK,WAAW,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;QAC1G,IAAI,KAAK,CAAC,SAAS,KAAK,WAAW,IAAI,QAAQ,CAAC,MAAM;YAAE,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1J,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,aAAa;SACd,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAsB;QACpC,aAAa,EAAE,CAAC;QAChB,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY;QAChD,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO;QACtC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS;QAC1C,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACnD,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,aAAa,EAAE,KAAK,CAAC,MAAM;SAC5B,CAAC,CAAC;QACH,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC5D,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,IAAI,EAAE,SAAkB;SACzB,CAAC,CAAC;KACJ,CAAC;IACF,OAAO;QACL,QAAQ;QACR,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,eAAe,CAAC;YACpB,MAAM,EAAE,OAAO;YACf,UAAU;YACV,OAAO;YACP,cAAc;YACd,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC;QACF,eAAe;KAChB,CAAC;AACJ,CAAC"}