@apexops/capabilities 0.10.0-next.0

package/dist/bound-envelope-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bound-envelope-transport.js","sourceRoot":"","sources":["../src/bound-envelope-transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAmBzC,SAAS,MAAM,CAAC,KAAiB;IAC/B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,iBAAiB,CAAC,QAA0B;IACnD,MAAM,SAAS,GAAyC,EAAE,CAAC;IAC3D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/C,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC;YACrC,MAAM,IAAI,SAAS,CAAC,wDAAwD,CAAC,CAAC;QAChF,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAE,CAAC;QAC7B,IACE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;YACxD,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EACtD,CAAC;YACD,MAAM,IAAI,SAAS,CAAC,0BAA0B,GAAG,oCAAoC,CAAC,CAAC;QACzF,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACzB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,QAA+B;IACtD,MAAM,YAAY,GAAG;QACnB,UAAU;QACV,WAAW;QACX,QAAQ;QACR,WAAW;QACX,gBAAgB;QAChB,MAAM;QACN,WAAW;QACX,SAAS;KACV,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,QAAQ,CAAC,cAAc,KAAK,qBAAqB,IAAI,QAAQ,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACjG,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1G,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC7C,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC5G,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,OAAO,sBAAsB;IACJ,GAAG;IAAhC,YAA6B,GAAG,GAAe,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;mBAAlC,GAAG;IAAkC,CAAC;IAEnE,MAAM,CACJ,OAAmB,EACnB,OAKC;QAED,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;YACpG,MAAM,IAAI,SAAS,CAAC,+DAA+D,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;QAC9F,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,OAAO;YACL,QAAQ,EAAE;gBACR,cAAc,EAAE,qBAAqB;gBACrC,OAAO,EAAE,CAAC;gBACV,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC;gBACvB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;gBAClC,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE;gBACtE,QAAQ,EAAE,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC;aAC9C;YACD,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;SACjD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,QAAuB,EAAE,SAAiB;QAC7C,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACnH,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpG,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/capability.d.ts

@@ -0,0 +1,36 @@
+import type { TaskEnvelopeV1 } from "@apexops/contracts";
+export type CapabilitySideEffect = "none" | "local" | "remote";
+export type CapabilityIdempotency = "none" | "supported" | "required";
+export type CapabilityLifecycle = "active" | "implemented-unqualified" | "external-trusted";
+export interface CapabilityContext {
+    readonly envelope: TaskEnvelopeV1;
+    readonly attempt: number;
+    readonly signal: AbortSignal;
+}
+export interface Capability<TInput = unknown, TOutput = unknown> {
+    readonly id: string;
+    readonly lifecycle?: CapabilityLifecycle;
+    readonly sideEffect: CapabilitySideEffect;
+    readonly requiredRole: string;
+    readonly timeoutMs: number;
+    readonly retries: number;
+    readonly idempotency: CapabilityIdempotency;
+    execute(context: CapabilityContext, input: TInput): Promise<TOutput>;
+    reconcile?(context: CapabilityContext, input: TInput): Promise<TOutput>;
+}
+export type CapabilityErrorCode = "CAPABILITY_DUPLICATE" | "CAPABILITY_EXPIRED" | "CAPABILITY_GRANT_DENIED" | "CAPABILITY_OUTPUT_LIMIT" | "CAPABILITY_ROLE_DENIED" | "CAPABILITY_SIDE_EFFECT_DENIED" | "CAPABILITY_TIMEOUT" | "CAPABILITY_UNAVAILABLE" | "CAPABILITY_UNQUALIFIED" | "CAPABILITY_UNKNOWN";
+export declare class CapabilityError extends Error {
+    readonly code: CapabilityErrorCode;
+    constructor(code: CapabilityErrorCode, message: string);
+}
+export interface CapabilityRegistryOptions {
+    readonly now?: () => Date;
+    readonly measureOutputBytes?: (output: unknown) => number;
+}
+export declare class CapabilityRegistry {
+    #private;
+    constructor(options?: CapabilityRegistryOptions);
+    register<TInput, TOutput>(capability: Capability<TInput, TOutput>): void;
+    execute<TOutput>(id: string, envelope: TaskEnvelopeV1, input: unknown): Promise<TOutput>;
+}
+//# sourceMappingURL=capability.d.ts.map

package/dist/capability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability.d.ts","sourceRoot":"","sources":["../src/capability.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzD,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;AAC/D,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,WAAW,GAAG,UAAU,CAAC;AACtE,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,yBAAyB,GAAG,kBAAkB,CAAC;AAE5F,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;CAC9B;AAED,MAAM,WAAW,UAAU,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO;IAC7D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,OAAO,CAAC,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE,SAAS,CAAC,CAAC,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACzE;AAED,MAAM,MAAM,mBAAmB,GAC3B,sBAAsB,GACtB,oBAAoB,GACpB,yBAAyB,GACzB,yBAAyB,GACzB,wBAAwB,GACxB,+BAA+B,GAC/B,oBAAoB,GACpB,wBAAwB,GACxB,wBAAwB,GACxB,oBAAoB,CAAC;AAEzB,qBAAa,eAAgB,SAAQ,KAAK;aAEtB,IAAI,EAAE,mBAAmB;IAD3C,YACkB,IAAI,EAAE,mBAAmB,EACzC,OAAO,EAAE,MAAM,EAIhB;CACF;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IAC1B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,MAAM,CAAC;CAC3D;AAED,qBAAa,kBAAkB;;IAK7B,YAAY,OAAO,GAAE,yBAA8B,EAIlD;IAED,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAKvE;IAEK,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAqC7F;CAgCF"}

package/dist/capability.js

@@ -0,0 +1,83 @@
+export class CapabilityError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "CapabilityError";
+    }
+}
+export class CapabilityRegistry {
+    #capabilities = new Map();
+    #now;
+    #measureOutputBytes;
+    constructor(options = {}) {
+        this.#now = options.now ?? (() => new Date());
+        this.#measureOutputBytes =
+            options.measureOutputBytes ?? ((output) => Buffer.byteLength(JSON.stringify(output), "utf8"));
+    }
+    register(capability) {
+        if (this.#capabilities.has(capability.id)) {
+            throw new CapabilityError("CAPABILITY_DUPLICATE", `Capability '${capability.id}' is already registered`);
+        }
+        this.#capabilities.set(capability.id, capability);
+    }
+    async execute(id, envelope, input) {
+        const capability = this.#authorize(id, envelope);
+        let lastError;
+        for (let attempt = 1; attempt <= capability.retries + 1; attempt += 1) {
+            const controller = new AbortController();
+            const timeout = setTimeout(() => controller.abort(), capability.timeoutMs);
+            try {
+                const output = await Promise.race([
+                    capability.execute({ envelope, attempt, signal: controller.signal }, input),
+                    new Promise((_resolve, reject) => {
+                        controller.signal.addEventListener("abort", () => reject(new CapabilityError("CAPABILITY_TIMEOUT", `Capability '${id}' timed out`)), { once: true });
+                    }),
+                ]);
+                const bytes = this.#measureOutputBytes(output);
+                if (bytes > envelope.maxOutputBytes) {
+                    throw new CapabilityError("CAPABILITY_OUTPUT_LIMIT", `Capability '${id}' produced ${bytes} bytes; budget is ${envelope.maxOutputBytes}`);
+                }
+                return output;
+            }
+            catch (error) {
+                lastError = error;
+                if (error instanceof CapabilityError || attempt > capability.retries) {
+                    throw error;
+                }
+            }
+            finally {
+                clearTimeout(timeout);
+            }
+        }
+        throw lastError;
+    }
+    #authorize(id, envelope) {
+        const capability = this.#capabilities.get(id);
+        if (capability === undefined) {
+            throw new CapabilityError("CAPABILITY_UNKNOWN", `Capability '${id}' is not registered`);
+        }
+        if (capability.lifecycle === "implemented-unqualified") {
+            throw new CapabilityError("CAPABILITY_UNQUALIFIED", `Capability '${id}' is not qualified for execution`);
+        }
+        const now = this.#now().getTime();
+        if (new Date(envelope.expiresAt).getTime() <= now) {
+            throw new CapabilityError("CAPABILITY_EXPIRED", `Task '${envelope.taskId}' has expired`);
+        }
+        if (envelope.role !== capability.requiredRole) {
+            throw new CapabilityError("CAPABILITY_ROLE_DENIED", `Role '${envelope.role}' cannot execute capability '${id}'`);
+        }
+        const grant = envelope.capabilityGrants.find((candidate) => candidate.capability === id);
+        if (grant === undefined) {
+            throw new CapabilityError("CAPABILITY_GRANT_DENIED", `No grant exists for capability '${id}'`);
+        }
+        if (new Date(grant.expiresAt).getTime() <= now) {
+            throw new CapabilityError("CAPABILITY_EXPIRED", `Grant for capability '${id}' has expired`);
+        }
+        if (grant.sideEffect !== capability.sideEffect) {
+            throw new CapabilityError("CAPABILITY_SIDE_EFFECT_DENIED", `Grant side effect '${grant.sideEffect}' does not match '${capability.sideEffect}'`);
+        }
+        return capability;
+    }
+}
+//# sourceMappingURL=capability.js.map

package/dist/capability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability.js","sourceRoot":"","sources":["../src/capability.ts"],"names":[],"mappings":"AAoCA,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAEtB,IAAI;IADtB,YACkB,IAAyB,EACzC,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;oBAHC,IAAI;QAIpB,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAOD,MAAM,OAAO,kBAAkB;IACpB,aAAa,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC9C,IAAI,CAAa;IACjB,mBAAmB,CAA8B;IAE1D,YAAY,OAAO,GAA8B,EAAE;QACjD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,mBAAmB;YACtB,OAAO,CAAC,kBAAkB,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAClG,CAAC;IAED,QAAQ,CAAkB,UAAuC;QAC/D,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,eAAe,CAAC,sBAAsB,EAAE,eAAe,UAAU,CAAC,EAAE,yBAAyB,CAAC,CAAC;QAC3G,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,UAAwB,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,OAAO,CAAU,EAAU,EAAE,QAAwB,EAAE,KAAc;QACzE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACjD,IAAI,SAAkB,CAAC;QAEvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,UAAU,CAAC,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YACtE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;YAC3E,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;oBAChC,UAAU,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC;oBAC3E,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;wBACtC,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAChC,OAAO,EACP,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,eAAe,CAAC,oBAAoB,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC,EACvF,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;oBACJ,CAAC,CAAC;iBACH,CAAC,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;gBAC/C,IAAI,KAAK,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;oBACpC,MAAM,IAAI,eAAe,CACvB,yBAAyB,EACzB,eAAe,EAAE,cAAc,KAAK,qBAAqB,QAAQ,CAAC,cAAc,EAAE,CACnF,CAAC;gBACJ,CAAC;gBACD,OAAO,MAAiB,CAAC;YAC3B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,GAAG,KAAK,CAAC;gBAClB,IAAI,KAAK,YAAY,eAAe,IAAI,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;oBACrE,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAED,MAAM,SAAS,CAAC;IAClB,CAAC;IAED,UAAU,CAAC,EAAU,EAAE,QAAwB;QAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAE,eAAe,EAAE,qBAAqB,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,UAAU,CAAC,SAAS,KAAK,yBAAyB,EAAE,CAAC;YACvD,MAAM,IAAI,eAAe,CAAC,wBAAwB,EAAE,eAAe,EAAE,kCAAkC,CAAC,CAAC;QAC3G,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,GAAG,EAAE,CAAC;YAClD,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAE,SAAS,QAAQ,CAAC,MAAM,eAAe,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,CAAC,YAAY,EAAE,CAAC;YAC9C,MAAM,IAAI,eAAe,CAAC,wBAAwB,EAAE,SAAS,QAAQ,CAAC,IAAI,gCAAgC,EAAE,GAAG,CAAC,CAAC;QACnH,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC;QACzF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,eAAe,CAAC,yBAAyB,EAAE,mCAAmC,EAAE,GAAG,CAAC,CAAC;QACjG,CAAC;QACD,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,GAAG,EAAE,CAAC;YAC/C,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAE,yBAAyB,EAAE,eAAe,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,CAAC,UAAU,EAAE,CAAC;YAC/C,MAAM,IAAI,eAAe,CACvB,+BAA+B,EAC/B,sBAAsB,KAAK,CAAC,UAAU,qBAAqB,UAAU,CAAC,UAAU,GAAG,CACpF,CAAC;QACJ,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;CACF"}

package/dist/command-plans.d.ts

@@ -0,0 +1,49 @@
+export interface CommandPlan {
+    readonly executable: string;
+    readonly args: readonly string[];
+    readonly cwd?: string;
+}
+export interface BicepTarget {
+    readonly resourceGroup: string;
+    readonly deploymentName: string;
+    readonly templateFile: string;
+    readonly parametersFile?: string;
+    readonly cwd?: string;
+}
+export type BicepStackActionOnUnmanage = "deleteAll" | "deleteResources" | "detachAll";
+export type BicepStackDenySettingsMode = "denyDelete" | "denyWriteAndDelete" | "none";
+export interface BicepStackTarget extends BicepTarget {
+    readonly stackName: string;
+    readonly actionOnUnmanage?: BicepStackActionOnUnmanage;
+    readonly denySettingsMode: BicepStackDenySettingsMode;
+    readonly ownershipAuthorizesDeleteResources?: boolean;
+    readonly dedicatedSandboxResourceGroup?: boolean;
+    readonly allowDeleteAll?: boolean;
+}
+export interface ResolvedBicepStackTarget extends BicepStackTarget {
+    readonly actionOnUnmanage: BicepStackActionOnUnmanage;
+}
+export declare class BicepCommandAdapter {
+    validate(templateFile: string, cwd?: string): CommandPlan;
+    preview(target: BicepTarget): CommandPlan;
+    apply(target: BicepTarget): CommandPlan;
+    stackApply(target: ResolvedBicepStackTarget): CommandPlan;
+    stackDestroy(target: ResolvedBicepStackTarget): CommandPlan;
+    stackList(target: BicepStackTarget): CommandPlan;
+}
+export declare class TerraformCommandAdapter {
+    #private;
+    providerSchemas(cwd: string): CommandPlan;
+    versionJson(cwd: string): CommandPlan;
+    init(cwd: string, backend: boolean): CommandPlan;
+    validate(cwd: string): readonly CommandPlan[];
+    preview(cwd: string, savedPlanPath: string, destroy?: boolean): CommandPlan;
+    applyExact(cwd: string, savedPlanPath: string): CommandPlan;
+    showJson(cwd: string, savedPlanPath: string): CommandPlan;
+    statePull(cwd: string): CommandPlan;
+}
+export declare class AzureCliReadAdapter {
+    resourceGraph(query: string, subscriptions?: readonly string[]): CommandPlan;
+    armGet(resourceId: string, apiVersion: string): CommandPlan;
+}
+//# sourceMappingURL=command-plans.d.ts.map

package/dist/command-plans.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-plans.d.ts","sourceRoot":"","sources":["../src/command-plans.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,0BAA0B,GAAG,WAAW,GAAG,iBAAiB,GAAG,WAAW,CAAC;AACvF,MAAM,MAAM,0BAA0B,GAAG,YAAY,GAAG,oBAAoB,GAAG,MAAM,CAAC;AAEtF,MAAM,WAAW,gBAAiB,SAAQ,WAAW;IACnD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,0BAA0B,CAAC;IACvD,QAAQ,CAAC,gBAAgB,EAAE,0BAA0B,CAAC;IACtD,QAAQ,CAAC,kCAAkC,CAAC,EAAE,OAAO,CAAC;IACtD,QAAQ,CAAC,6BAA6B,CAAC,EAAE,OAAO,CAAC;IACjD,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,wBAAyB,SAAQ,gBAAgB;IAChE,QAAQ,CAAC,gBAAgB,EAAE,0BAA0B,CAAC;CACvD;AAMD,qBAAa,mBAAmB;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,WAAW,CAExD;IAED,OAAO,CAAC,MAAM,EAAE,WAAW,GAAG,WAAW,CAmBxC;IAED,KAAK,CAAC,MAAM,EAAE,WAAW,GAAG,WAAW,CAkBtC;IAED,UAAU,CAAC,MAAM,EAAE,wBAAwB,GAAG,WAAW,CAuBxD;IAED,YAAY,CAAC,MAAM,EAAE,wBAAwB,GAAG,WAAW,CAmB1D;IAED,SAAS,CAAC,MAAM,EAAE,gBAAgB,GAAG,WAAW,CAM/C;CACF;AAED,qBAAa,uBAAuB;;IAClC,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAExC;IAED,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAEpC;IAED,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,WAAW,CAM/C;IAED,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,WAAW,EAAE,CAK5C;IAED,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,UAAQ,GAAG,WAAW,CAOxE;IAED,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,WAAW,CAG1D;IAED,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,WAAW,CAGxD;IAED,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAElC;CAOF;AAED,qBAAa,mBAAmB;IAC9B,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,GAAE,SAAS,MAAM,EAAO,GAAG,WAAW,CAa/E;IAED,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,WAAW,CAK1D;CACF"}

package/dist/command-plans.js

@@ -0,0 +1,157 @@
+function withBicepParameters(args, parametersFile) {
+    return parametersFile === undefined ? args : [...args, "--parameters", parametersFile];
+}
+export class BicepCommandAdapter {
+    validate(templateFile, cwd) {
+        return { executable: "bicep", args: ["build", templateFile], ...(cwd === undefined ? {} : { cwd }) };
+    }
+    preview(target) {
+        const args = withBicepParameters([
+            "deployment",
+            "group",
+            "what-if",
+            "--resource-group",
+            target.resourceGroup,
+            "--name",
+            target.deploymentName,
+            "--template-file",
+            target.templateFile,
+            "--no-pretty-print",
+            "--output",
+            "json",
+        ], target.parametersFile);
+        return { executable: "az", args, ...(target.cwd === undefined ? {} : { cwd: target.cwd }) };
+    }
+    apply(target) {
+        const args = withBicepParameters([
+            "deployment",
+            "group",
+            "create",
+            "--resource-group",
+            target.resourceGroup,
+            "--name",
+            target.deploymentName,
+            "--template-file",
+            target.templateFile,
+            "--output",
+            "json",
+        ], target.parametersFile);
+        return { executable: "az", args, ...(target.cwd === undefined ? {} : { cwd: target.cwd }) };
+    }
+    stackApply(target) {
+        const args = withBicepParameters([
+            "stack",
+            "group",
+            "create",
+            "--resource-group",
+            target.resourceGroup,
+            "--name",
+            target.stackName,
+            "--template-file",
+            target.templateFile,
+            "--action-on-unmanage",
+            target.actionOnUnmanage,
+            "--deny-settings-mode",
+            target.denySettingsMode,
+            "--yes",
+            "--output",
+            "json",
+        ], target.parametersFile);
+        return { executable: "az", args, ...(target.cwd === undefined ? {} : { cwd: target.cwd }) };
+    }
+    stackDestroy(target) {
+        return {
+            executable: "az",
+            args: [
+                "stack",
+                "group",
+                "delete",
+                "--resource-group",
+                target.resourceGroup,
+                "--name",
+                target.stackName,
+                "--action-on-unmanage",
+                target.actionOnUnmanage,
+                "--yes",
+                "--output",
+                "json",
+            ],
+            ...(target.cwd === undefined ? {} : { cwd: target.cwd }),
+        };
+    }
+    stackList(target) {
+        return {
+            executable: "az",
+            args: ["stack", "group", "list", "--resource-group", target.resourceGroup, "--output", "json"],
+            ...(target.cwd === undefined ? {} : { cwd: target.cwd }),
+        };
+    }
+}
+export class TerraformCommandAdapter {
+    providerSchemas(cwd) {
+        return { executable: "terraform", args: ["providers", "schema", "-json"], cwd };
+    }
+    versionJson(cwd) {
+        return { executable: "terraform", args: ["version", "-json"], cwd };
+    }
+    init(cwd, backend) {
+        return {
+            executable: "terraform",
+            args: ["init", `-backend=${String(backend)}`, "-input=false"],
+            cwd,
+        };
+    }
+    validate(cwd) {
+        return [
+            { executable: "terraform", args: ["fmt", "-check"], cwd },
+            { executable: "terraform", args: ["validate"], cwd },
+        ];
+    }
+    preview(cwd, savedPlanPath, destroy = false) {
+        this.#requirePlanPath(savedPlanPath);
+        return {
+            executable: "terraform",
+            args: ["plan", ...(destroy ? ["-destroy"] : []), `-out=${savedPlanPath}`, "-input=false"],
+            cwd,
+        };
+    }
+    applyExact(cwd, savedPlanPath) {
+        this.#requirePlanPath(savedPlanPath);
+        return { executable: "terraform", args: ["apply", "-input=false", savedPlanPath], cwd };
+    }
+    showJson(cwd, savedPlanPath) {
+        this.#requirePlanPath(savedPlanPath);
+        return { executable: "terraform", args: ["show", "-json", savedPlanPath], cwd };
+    }
+    statePull(cwd) {
+        return { executable: "terraform", args: ["state", "pull"], cwd };
+    }
+    #requirePlanPath(savedPlanPath) {
+        if (savedPlanPath.trim().length === 0 || savedPlanPath.startsWith("-")) {
+            throw new TypeError("A concrete saved Terraform plan path is required");
+        }
+    }
+}
+export class AzureCliReadAdapter {
+    resourceGraph(query, subscriptions = []) {
+        return {
+            executable: "az",
+            args: [
+                "graph",
+                "query",
+                "--graph-query",
+                query,
+                ...(subscriptions.length === 0 ? [] : ["--subscriptions", ...subscriptions]),
+                "--output",
+                "json",
+            ],
+        };
+    }
+    armGet(resourceId, apiVersion) {
+        return {
+            executable: "az",
+            args: ["rest", "--method", "get", "--url", `${resourceId}?api-version=${encodeURIComponent(apiVersion)}`],
+        };
+    }
+}
+//# sourceMappingURL=command-plans.js.map

package/dist/command-plans.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-plans.js","sourceRoot":"","sources":["../src/command-plans.ts"],"names":[],"mappings":"AA8BA,SAAS,mBAAmB,CAAC,IAAc,EAAE,cAAkC;IAC7E,OAAO,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,OAAO,mBAAmB;IAC9B,QAAQ,CAAC,YAAoB,EAAE,GAAY;QACzC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IACvG,CAAC;IAED,OAAO,CAAC,MAAmB;QACzB,MAAM,IAAI,GAAG,mBAAmB,CAC9B;YACE,YAAY;YACZ,OAAO;YACP,SAAS;YACT,kBAAkB;YAClB,MAAM,CAAC,aAAa;YACpB,QAAQ;YACR,MAAM,CAAC,cAAc;YACrB,iBAAiB;YACjB,MAAM,CAAC,YAAY;YACnB,mBAAmB;YACnB,UAAU;YACV,MAAM;SACP,EACD,MAAM,CAAC,cAAc,CACtB,CAAC;QACF,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;IAC9F,CAAC;IAED,KAAK,CAAC,MAAmB;QACvB,MAAM,IAAI,GAAG,mBAAmB,CAC9B;YACE,YAAY;YACZ,OAAO;YACP,QAAQ;YACR,kBAAkB;YAClB,MAAM,CAAC,aAAa;YACpB,QAAQ;YACR,MAAM,CAAC,cAAc;YACrB,iBAAiB;YACjB,MAAM,CAAC,YAAY;YACnB,UAAU;YACV,MAAM;SACP,EACD,MAAM,CAAC,cAAc,CACtB,CAAC;QACF,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;IAC9F,CAAC;IAED,UAAU,CAAC,MAAgC;QACzC,MAAM,IAAI,GAAG,mBAAmB,CAC9B;YACE,OAAO;YACP,OAAO;YACP,QAAQ;YACR,kBAAkB;YAClB,MAAM,CAAC,aAAa;YACpB,QAAQ;YACR,MAAM,CAAC,SAAS;YAChB,iBAAiB;YACjB,MAAM,CAAC,YAAY;YACnB,sBAAsB;YACtB,MAAM,CAAC,gBAAgB;YACvB,sBAAsB;YACtB,MAAM,CAAC,gBAAgB;YACvB,OAAO;YACP,UAAU;YACV,MAAM;SACP,EACD,MAAM,CAAC,cAAc,CACtB,CAAC;QACF,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;IAC9F,CAAC;IAED,YAAY,CAAC,MAAgC;QAC3C,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE;gBACJ,OAAO;gBACP,OAAO;gBACP,QAAQ;gBACR,kBAAkB;gBAClB,MAAM,CAAC,aAAa;gBACpB,QAAQ;gBACR,MAAM,CAAC,SAAS;gBAChB,sBAAsB;gBACtB,MAAM,CAAC,gBAAgB;gBACvB,OAAO;gBACP,UAAU;gBACV,MAAM;aACP;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;SACzD,CAAC;IACJ,CAAC;IAED,SAAS,CAAC,MAAwB;QAChC,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,CAAC,aAAa,EAAE,UAAU,EAAE,MAAM,CAAC;YAC9F,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;SACzD,CAAC;IACJ,CAAC;CACF;AAED,MAAM,OAAO,uBAAuB;IAClC,eAAe,CAAC,GAAW;QACzB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC;IAClF,CAAC;IAED,WAAW,CAAC,GAAW;QACrB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC;IACtE,CAAC;IAED,IAAI,CAAC,GAAW,EAAE,OAAgB;QAChC,OAAO;YACL,UAAU,EAAE,WAAW;YACvB,IAAI,EAAE,CAAC,MAAM,EAAE,YAAY,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,cAAc,CAAC;YAC7D,GAAG;SACJ,CAAC;IACJ,CAAC;IAED,QAAQ,CAAC,GAAW;QAClB,OAAO;YACL,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE;YACzD,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE;SACrD,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAW,EAAE,aAAqB,EAAE,OAAO,GAAG,KAAK;QACzD,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;QACrC,OAAO;YACL,UAAU,EAAE,WAAW;YACvB,IAAI,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,aAAa,EAAE,EAAE,cAAc,CAAC;YACzF,GAAG;SACJ,CAAC;IACJ,CAAC;IAED,UAAU,CAAC,GAAW,EAAE,aAAqB;QAC3C,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;QACrC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,cAAc,EAAE,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC;IAC1F,CAAC;IAED,QAAQ,CAAC,GAAW,EAAE,aAAqB;QACzC,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;QACrC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC;IAClF,CAAC;IAED,SAAS,CAAC,GAAW;QACnB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC;IACnE,CAAC;IAED,gBAAgB,CAAC,aAAqB;QACpC,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;CACF;AAED,MAAM,OAAO,mBAAmB;IAC9B,aAAa,CAAC,KAAa,EAAE,aAAa,GAAsB,EAAE;QAChE,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE;gBACJ,OAAO;gBACP,OAAO;gBACP,eAAe;gBACf,KAAK;gBACL,GAAG,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB,EAAE,GAAG,aAAa,CAAC,CAAC;gBAC5E,UAAU;gBACV,MAAM;aACP;SACF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,UAAkB,EAAE,UAAkB;QAC3C,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,UAAU,gBAAgB,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;SAC1G,CAAC;IACJ,CAAC;CACF"}

package/dist/design-capabilities.d.ts

@@ -0,0 +1,23 @@
+import { type Capability, type CapabilityRegistry } from "./capability.js";
+export declare const designCapabilityIds: {
+    readonly documentationResearch: "design.documentation.research";
+    readonly rbacCatalog: "design.rbac.catalog";
+    readonly computeRegionEvidence: "design.compute.region-evidence";
+    readonly entraApplicationIntent: "design.entra.application-intent";
+};
+export type DesignCapabilityId = (typeof designCapabilityIds)[keyof typeof designCapabilityIds];
+export interface DocumentationResearchInput {
+    readonly question: string;
+}
+export interface RbacCatalogInput {
+    readonly operation: string;
+}
+export interface ComputeRegionEvidenceInput {
+    readonly region: string;
+}
+export interface EntraApplicationIntentInput {
+    readonly applicationName: string;
+}
+export declare const unavailableDesignCapabilities: readonly [Capability<DocumentationResearchInput, never>, Capability<RbacCatalogInput, never>, Capability<ComputeRegionEvidenceInput, never>, Capability<EntraApplicationIntentInput, never>];
+export declare function registerUnavailableDesignCapabilities(registry: CapabilityRegistry): void;
+//# sourceMappingURL=design-capabilities.d.ts.map

package/dist/design-capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"design-capabilities.d.ts","sourceRoot":"","sources":["../src/design-capabilities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,KAAK,UAAU,EAAE,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAE5F,eAAO,MAAM,mBAAmB;aAC9B,qBAAqB,EAAE,+BAA+B;aACtD,WAAW,EAAE,qBAAqB;aAClC,qBAAqB,EAAE,gCAAgC;aACvD,sBAAsB,EAAE,iCAAiC;CACjD,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC;AAEhG,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAgBD,eAAO,MAAM,6BAA6B,8LAKhC,CAAC;AAEX,wBAAgB,qCAAqC,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAIxF"}

package/dist/design-capabilities.js

@@ -0,0 +1,32 @@
+import { CapabilityError } from "./capability.js";
+export const designCapabilityIds = {
+    documentationResearch: "design.documentation.research",
+    rbacCatalog: "design.rbac.catalog",
+    computeRegionEvidence: "design.compute.region-evidence",
+    entraApplicationIntent: "design.entra.application-intent",
+};
+function unavailableCapability(id) {
+    return {
+        id,
+        sideEffect: "none",
+        requiredRole: "architect",
+        timeoutMs: 1_000,
+        retries: 0,
+        idempotency: "supported",
+        async execute() {
+            throw new CapabilityError("CAPABILITY_UNAVAILABLE", `Capability '${id}' is unavailable until qualified`);
+        },
+    };
+}
+export const unavailableDesignCapabilities = [
+    unavailableCapability(designCapabilityIds.documentationResearch),
+    unavailableCapability(designCapabilityIds.rbacCatalog),
+    unavailableCapability(designCapabilityIds.computeRegionEvidence),
+    unavailableCapability(designCapabilityIds.entraApplicationIntent),
+];
+export function registerUnavailableDesignCapabilities(registry) {
+    for (const capability of unavailableDesignCapabilities) {
+        registry.register(capability);
+    }
+}
+//# sourceMappingURL=design-capabilities.js.map

package/dist/design-capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"design-capabilities.js","sourceRoot":"","sources":["../src/design-capabilities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAA4C,MAAM,iBAAiB,CAAC;AAE5F,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,qBAAqB,EAAE,+BAA+B;IACtD,WAAW,EAAE,qBAAqB;IAClC,qBAAqB,EAAE,gCAAgC;IACvD,sBAAsB,EAAE,iCAAiC;CACjD,CAAC;AAoBX,SAAS,qBAAqB,CAAS,EAAsB;IAC3D,OAAO;QACL,EAAE;QACF,UAAU,EAAE,MAAM;QAClB,YAAY,EAAE,WAAW;QACzB,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,CAAC;QACV,WAAW,EAAE,WAAW;QACxB,KAAK,CAAC,OAAO;YACX,MAAM,IAAI,eAAe,CAAC,wBAAwB,EAAE,eAAe,EAAE,kCAAkC,CAAC,CAAC;QAC3G,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,qBAAqB,CAA6B,mBAAmB,CAAC,qBAAqB,CAAC;IAC5F,qBAAqB,CAAmB,mBAAmB,CAAC,WAAW,CAAC;IACxE,qBAAqB,CAA6B,mBAAmB,CAAC,qBAAqB,CAAC;IAC5F,qBAAqB,CAA8B,mBAAmB,CAAC,sBAAsB,CAAC;CACtF,CAAC;AAEX,MAAM,UAAU,qCAAqC,CAAC,QAA4B;IAChF,KAAK,MAAM,UAAU,IAAI,6BAA6B,EAAE,CAAC;QACvD,QAAQ,CAAC,QAAQ,CAAC,UAAwC,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC"}

package/dist/encrypted-envelope-transport.d.ts

@@ -0,0 +1,32 @@
+export type EnvelopeBindingValue = string | number;
+export type EnvelopeBindings = Readonly<Record<string, EnvelopeBindingValue>>;
+export interface EncryptedEnvelopeMetadata {
+    readonly implementation: "apex-encrypted-envelope";
+    readonly version: 1;
+    readonly algorithm: "aes-256-gcm";
+    readonly kind: string;
+    readonly digest: string;
+    readonly recipient: string;
+    readonly createdAt: string;
+    readonly expiresAt: string;
+    readonly bindings: EnvelopeBindings;
+}
+export interface EncryptedEnvelope {
+    readonly metadata: EncryptedEnvelopeMetadata;
+    readonly iv: string;
+    readonly authTag: string;
+    readonly ciphertext: string;
+}
+export declare class EncryptedEnvelopeTransport {
+    private readonly now;
+    private readonly nonce;
+    constructor(now?: () => Date, nonce?: () => Uint8Array);
+    encrypt(plaintext: Uint8Array, key: Uint8Array, options: {
+        readonly kind: string;
+        readonly recipient: string;
+        readonly ttlMs: number;
+        readonly bindings: EnvelopeBindings;
+    }): EncryptedEnvelope;
+    decrypt(envelope: EncryptedEnvelope, key: Uint8Array, recipient: string): Buffer;
+}
+//# sourceMappingURL=encrypted-envelope-transport.d.ts.map

package/dist/encrypted-envelope-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypted-envelope-transport.d.ts","sourceRoot":"","sources":["../src/encrypted-envelope-transport.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,MAAM,CAAC;AACnD,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAC;AAE9E,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,cAAc,EAAE,yBAAyB,CAAC;IACnD,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;CACrC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,yBAAyB,CAAC;IAC7C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAuFD,qBAAa,0BAA0B;IAEnC,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAFxB,YACmB,GAAG,GAAE,MAAM,IAAuB,EAClC,KAAK,GAAE,MAAM,UAAkC,EAC9D;IAEJ,OAAO,CACL,SAAS,EAAE,UAAU,EACrB,GAAG,EAAE,UAAU,EACf,OAAO,EAAE;QACP,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KACrC,GACA,iBAAiB,CA4BnB;IAED,OAAO,CAAC,QAAQ,EAAE,iBAAiB,EAAE,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAoB/E;CACF"}

package/dist/encrypted-envelope-transport.js

@@ -0,0 +1,138 @@
+import { createCipheriv, createDecipheriv, createHash, randomBytes } from "node:crypto";
+function requireKey(key) {
+    if (key.byteLength !== 32)
+        throw new TypeError("Encrypted envelope requires a 32-byte key");
+    return Buffer.from(key);
+}
+function sha256(bytes) {
+    return createHash("sha256").update(bytes).digest("hex");
+}
+function canonicalBindings(bindings) {
+    const canonical = {};
+    for (const key of Object.keys(bindings).sort()) {
+        if (!/^[a-zA-Z][a-zA-Z0-9]*$/.test(key)) {
+            throw new TypeError("Encrypted envelope binding names must be identifier-shaped");
+        }
+        const value = bindings[key];
+        if ((typeof value !== "string" && typeof value !== "number") ||
+            (typeof value === "number" && !Number.isFinite(value))) {
+            throw new TypeError(`Encrypted envelope binding ${key} must be a finite string or number`);
+        }
+        canonical[key] = value;
+    }
+    return canonical;
+}
+function authenticatedMetadata(metadata) {
+    return Buffer.from(JSON.stringify({
+        implementation: metadata.implementation,
+        version: metadata.version,
+        algorithm: metadata.algorithm,
+        kind: metadata.kind,
+        digest: metadata.digest,
+        recipient: metadata.recipient,
+        createdAt: metadata.createdAt,
+        expiresAt: metadata.expiresAt,
+        bindings: canonicalBindings(metadata.bindings),
+    }), "utf8");
+}
+function decodeBase64(value, label) {
+    if (value.length === 0 || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(value)) {
+        throw new Error(`Encrypted envelope ${label} is invalid base64`);
+    }
+    return Buffer.from(value, "base64");
+}
+function requireMetadata(metadata) {
+    const expectedKeys = [
+        "algorithm",
+        "bindings",
+        "createdAt",
+        "digest",
+        "expiresAt",
+        "implementation",
+        "kind",
+        "recipient",
+        "version",
+    ];
+    if (Object.keys(metadata).sort().join("\0") !== expectedKeys.join("\0")) {
+        throw new Error("Encrypted envelope metadata shape is invalid");
+    }
+    if (metadata.implementation !== "apex-encrypted-envelope" ||
+        metadata.version !== 1 ||
+        metadata.algorithm !== "aes-256-gcm") {
+        throw new Error("Unsupported encrypted envelope");
+    }
+    if (metadata.kind.trim().length === 0 || metadata.recipient.trim().length === 0) {
+        throw new Error("Encrypted envelope kind and recipient are required");
+    }
+    if (!/^[0-9a-f]{64}$/.test(metadata.digest))
+        throw new Error("Encrypted envelope digest is invalid");
+    const createdAt = Date.parse(metadata.createdAt);
+    const expiresAt = Date.parse(metadata.expiresAt);
+    if (!Number.isFinite(createdAt) || !Number.isFinite(expiresAt) || expiresAt <= createdAt) {
+        throw new Error("Encrypted envelope timestamps are invalid");
+    }
+    canonicalBindings(metadata.bindings);
+}
+export class EncryptedEnvelopeTransport {
+    now;
+    nonce;
+    constructor(now = () => new Date(), nonce = () => randomBytes(12)) {
+        this.now = now;
+        this.nonce = nonce;
+    }
+    encrypt(plaintext, key, options) {
+        if (options.kind.trim().length === 0 || options.recipient.trim().length === 0 || options.ttlMs <= 0) {
+            throw new TypeError("Encrypted envelope kind, recipient, and positive TTL are required");
+        }
+        if (!Number.isFinite(options.ttlMs))
+            throw new TypeError("Encrypted envelope TTL must be finite");
+        const createdAt = this.now();
+        const metadata = {
+            implementation: "apex-encrypted-envelope",
+            version: 1,
+            algorithm: "aes-256-gcm",
+            kind: options.kind,
+            digest: sha256(plaintext),
+            recipient: options.recipient,
+            createdAt: createdAt.toISOString(),
+            expiresAt: new Date(createdAt.getTime() + options.ttlMs).toISOString(),
+            bindings: canonicalBindings(options.bindings),
+        };
+        const iv = Buffer.from(this.nonce());
+        if (iv.byteLength !== 12)
+            throw new TypeError("Encrypted envelope nonce must contain 12 bytes");
+        const cipher = createCipheriv("aes-256-gcm", requireKey(key), iv);
+        cipher.setAAD(authenticatedMetadata(metadata));
+        const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final()]);
+        return {
+            metadata,
+            iv: iv.toString("base64"),
+            authTag: cipher.getAuthTag().toString("base64"),
+            ciphertext: ciphertext.toString("base64"),
+        };
+    }
+    decrypt(envelope, key, recipient) {
+        requireMetadata(envelope.metadata);
+        if (recipient.trim().length === 0 || envelope.metadata.recipient !== recipient) {
+            throw new Error("Encrypted envelope recipient does not match");
+        }
+        if (Date.parse(envelope.metadata.expiresAt) <= this.now().getTime()) {
+            throw new Error("Encrypted envelope has expired");
+        }
+        const iv = decodeBase64(envelope.iv, "IV");
+        const authTag = decodeBase64(envelope.authTag, "authentication tag");
+        if (iv.byteLength !== 12 || authTag.byteLength !== 16)
+            throw new Error("Encrypted envelope parameters are invalid");
+        const decipher = createDecipheriv("aes-256-gcm", requireKey(key), iv);
+        decipher.setAAD(authenticatedMetadata(envelope.metadata));
+        decipher.setAuthTag(authTag);
+        const plaintext = Buffer.concat([
+            decipher.update(decodeBase64(envelope.ciphertext, "ciphertext")),
+            decipher.final(),
+        ]);
+        if (sha256(plaintext) !== envelope.metadata.digest)
+            throw new Error("Encrypted envelope digest mismatch");
+        return plaintext;
+    }
+}
+//# sourceMappingURL=encrypted-envelope-transport.js.map

package/dist/encrypted-envelope-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypted-envelope-transport.js","sourceRoot":"","sources":["../src/encrypted-envelope-transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAwBxF,SAAS,UAAU,CAAC,GAAe;IACjC,IAAI,GAAG,CAAC,UAAU,KAAK,EAAE;QAAE,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IAC5F,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,MAAM,CAAC,KAAiB;IAC/B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,iBAAiB,CAAC,QAA0B;IACnD,MAAM,SAAS,GAAyC,EAAE,CAAC;IAC3D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/C,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,SAAS,CAAC,4DAA4D,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAE,CAAC;QAC7B,IACE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;YACxD,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EACtD,CAAC;YACD,MAAM,IAAI,SAAS,CAAC,8BAA8B,GAAG,oCAAoC,CAAC,CAAC;QAC7F,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACzB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAmC;IAChE,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,CAAC,SAAS,CAAC;QACb,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC;KAC/C,CAAC,EACF,MAAM,CACP,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,KAAa;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1G,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,oBAAoB,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,eAAe,CAAC,QAAmC;IAC1D,MAAM,YAAY,GAAG;QACnB,WAAW;QACX,UAAU;QACV,WAAW;QACX,QAAQ;QACR,WAAW;QACX,gBAAgB;QAChB,MAAM;QACN,WAAW;QACX,SAAS;KACV,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,IACE,QAAQ,CAAC,cAAc,KAAK,yBAAyB;QACrD,QAAQ,CAAC,OAAO,KAAK,CAAC;QACtB,QAAQ,CAAC,SAAS,KAAK,aAAa,EACpC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACrG,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,OAAO,0BAA0B;IAElB,GAAG;IACH,KAAK;IAFxB,YACmB,GAAG,GAAe,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,EAClC,KAAK,GAAqB,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC;mBAD/C,GAAG;qBACH,KAAK;IACrB,CAAC;IAEJ,OAAO,CACL,SAAqB,EACrB,GAAe,EACf,OAKC;QAED,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;YACpG,MAAM,IAAI,SAAS,CAAC,mEAAmE,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;QAClG,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAA8B;YAC1C,cAAc,EAAE,yBAAyB;YACzC,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,aAAa;YACxB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC;YACzB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE;YACtE,QAAQ,EAAE,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC;SAC9C,CAAC;QACF,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACrC,IAAI,EAAE,CAAC,UAAU,KAAK,EAAE;YAAE,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;QAChG,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAClE,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC7E,OAAO;YACL,QAAQ;YACR,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACzB,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC/C,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAC1C,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,QAA2B,EAAE,GAAe,EAAE,SAAiB;QACrE,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,EAAE,GAAG,YAAY,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;QACrE,IAAI,EAAE,CAAC,UAAU,KAAK,EAAE,IAAI,OAAO,CAAC,UAAU,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACpH,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QACtE,QAAQ,CAAC,MAAM,CAAC,qBAAqB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC1D,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;YAC9B,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;YAChE,QAAQ,CAAC,KAAK,EAAE;SACjB,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC1G,OAAO,SAAS,CAAC;IACnB,CAAC;CACF"}