@bevel-software/platform-core-backend 0.21.0 → 0.23.0

package/dist/modules/settings/repository-source.js

@@ -0,0 +1,150 @@
+import { DEFAULT_GIT_USERNAME } from '../../shared/git.contract.js';
+/**
+ * The ways a deployment can be given the repository its knowledge base
+ * lives in, in the order the setup screen offers them.
+ *
+ *  - `managed`: the deployment keeps the repository itself.
+ *  - `github-app`: a repository on GitHub, reached through a GitHub App the
+ *    admin installed on it.
+ *  - `token`: any git host, by its address and an access token.
+ */
+export const GIT_MODES = ['managed', 'github-app', 'token'];
+export function isGitMode(value) {
+    return typeof value === 'string' && GIT_MODES.includes(value);
+}
+/**
+ * WHERE THE KNOWLEDGE BASE'S REPOSITORY IS, AND WHAT GIT PRESENTS TO IT —
+ * the one place that knows there is more than one answer.
+ *
+ * Everything that runs git asks for two things: an address to clone from,
+ * and a credential. Both used to be read straight from two settings, which
+ * is one way of having a repository. With three ways, each reader deciding
+ * for itself would be three places to disagree, so they all ask here, and
+ * what they get back is the same two things as before.
+ *
+ * TWO MODES, AND THEY ARE NOT ALWAYS THE SAME ONE.
+ *
+ *  - The mode IN EFFECT is the one this process is running on. Its working
+ *    copies are clones of that mode's repository, and every address and
+ *    credential this class hands out is that mode's. It is taken when the
+ *    source is built and changes only in {@link takeEffect}.
+ *  - The mode CHOSEN is what the settings say. A save changes it at once.
+ *
+ * They differ between the save that moves a serving deployment and the
+ * restart that save owes. Reading the mode live would move the process the
+ * moment the setting was stored: the new mode's credential presented to the
+ * old mode's repository, which every working copy still points at, and new
+ * branches cloned from a repository the startup phase has not prepared. So
+ * the process stays where it is until it is started again, which is what
+ * the setup screen tells the admin.
+ *
+ * WITHIN a mode the values are read live, as they always were: a rotated
+ * token is the one the next push carries.
+ *
+ * THE MODE IS INFERRED WHEN NOBODY CHOSE ONE. A deployment configured before
+ * there was a choice has an address and a token and no mode; it is in
+ * `token` mode, because that is what it has. One with nothing configured has
+ * no mode, and the setup screen offers the first.
+ */
+export class RepositorySource {
+    opts;
+    /** What git authenticates with, read on every call. */
+    credentials;
+    inEffect;
+    constructor(opts) {
+        this.opts = opts;
+        this.inEffect = this.chosen();
+        this.credentials = {
+            username: () => this.username(),
+            token: () => this.token(),
+            prepare: () => this.prepare(),
+        };
+    }
+    /**
+     * Without a reader, the mode IN EFFECT. With one, the mode a save of that
+     * reader's values would CHOOSE: the answer validation wants, about values
+     * that are not stored yet. Null: nothing is configured.
+     */
+    mode(read) {
+        return read ? this.chosen(read) : this.inEffect;
+    }
+    /** The mode the settings say, which a restart would put in effect. */
+    chosen(read = this.opts.read) {
+        const named = read('gitMode').trim();
+        if (isGitMode(named))
+            return named;
+        return read('kbRepoUrl') || this.tokenIn(read) ? 'token' : null;
+    }
+    /**
+     * Put the mode chosen in effect. Called where nothing is using the mode
+     * that was: by a save made before the deployment was serving, which the
+     * startup phase follows. A process that is serving is never moved; it is
+     * restarted, and built on the mode chosen.
+     */
+    takeEffect() {
+        this.inEffect = this.chosen();
+    }
+    /** The address git clones from and pushes to. Empty while there is none. Asked as {@link mode} is. */
+    url(read) {
+        const from = read ?? this.opts.read;
+        switch (this.mode(read)) {
+            case 'managed':
+                return this.opts.managed.path;
+            case 'github-app':
+                return this.opts.githubApp?.url(from) ?? '';
+            case 'token':
+                return from('kbRepoUrl');
+            default:
+                return '';
+        }
+    }
+    /**
+     * Whether the repository half of setup is answered: there is somewhere to
+     * clone from and, where one is needed, something to present. Asked as
+     * {@link mode} is.
+     */
+    answered(read) {
+        const from = read ?? this.opts.read;
+        switch (this.mode(read)) {
+            case 'managed':
+                return true;
+            case 'github-app':
+                return this.opts.githubApp?.answered(from) ?? false;
+            case 'token':
+                return Boolean(from('kbRepoUrl') && this.tokenIn(from));
+            default:
+                return false;
+        }
+    }
+    username() {
+        // Only a host that was given a token is given a name to go with it.
+        if (this.inEffect !== 'token')
+            return DEFAULT_GIT_USERNAME;
+        return this.opts.read('gitUsername') || this.opts.fallback?.username || DEFAULT_GIT_USERNAME;
+    }
+    /**
+     * One mode's credential is never presented to another mode's repository:
+     * a deployment that moved to a managed repository still has its old
+     * token stored, and a path on its own disk has no use for it. The mode is
+     * the one IN EFFECT, because that is the repository git is talking to.
+     */
+    token() {
+        switch (this.inEffect) {
+            case 'token':
+                return this.tokenIn(this.opts.read) || null;
+            case 'github-app':
+                return this.opts.githubApp?.token() ?? null;
+            default:
+                return null;
+        }
+    }
+    async prepare() {
+        if (this.inEffect === 'github-app')
+            await this.opts.githubApp?.prepare();
+    }
+    tokenIn(read) {
+        // The fallback is the environment's, so it is in effect whatever a save brings.
+        return read('gitToken') || this.opts.fallback?.token || '';
+    }
+}
+//# sourceMappingURL=repository-source.js.map

package/dist/modules/settings/repository-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository-source.js","sourceRoot":"","sources":["../../../src/modules/settings/repository-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAuB,MAAM,8BAA8B,CAAC;AAGzF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAU,CAAC;AAGrE,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,SAA+B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACvF,CAAC;AAuCD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,OAAO,gBAAgB;IAKE;IAJ7B,uDAAuD;IAC9C,WAAW,CAAiB;IAC7B,QAAQ,CAAiB;IAEjC,YAA6B,IAA6B;QAA7B,SAAI,GAAJ,IAAI,CAAyB;QACxD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC9B,IAAI,CAAC,WAAW,GAAG;YACjB,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE;YAC/B,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE;YACzB,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE;SAC9B,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,IAAI,CAAC,IAAoB;QACvB,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;IAClD,CAAC;IAED,sEAAsE;IACtE,MAAM,CAAC,OAAsB,IAAI,CAAC,IAAI,CAAC,IAAI;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACnC,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAClE,CAAC;IAED;;;;;OAKG;IACH,UAAU;QACR,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAChC,CAAC;IAED,sGAAsG;IACtG,GAAG,CAAC,IAAoB;QACtB,MAAM,IAAI,GAAG,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QACpC,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,KAAK,SAAS;gBACZ,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAChC,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC9C,KAAK,OAAO;gBACV,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC;YAC3B;gBACE,OAAO,EAAE,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,QAAQ,CAAC,IAAoB;QAC3B,MAAM,IAAI,GAAG,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QACpC,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,KAAK,SAAS;gBACZ,OAAO,IAAI,CAAC;YACd,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC;YACtD,KAAK,OAAO;gBACV,OAAO,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1D;gBACE,OAAO,KAAK,CAAC;QACjB,CAAC;IACH,CAAC;IAEO,QAAQ;QACd,oEAAoE;QACpE,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,oBAAoB,CAAC;QAC3D,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,IAAI,oBAAoB,CAAC;IAC/F,CAAC;IAED;;;;;OAKG;IACK,KAAK;QACX,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtB,KAAK,OAAO;gBACV,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;YAC9C,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC;YAC9C;gBACE,OAAO,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,IAAI,IAAI,CAAC,QAAQ,KAAK,YAAY;YAAE,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;IAC3E,CAAC;IAEO,OAAO,CAAC,IAAmB;QACjC,gFAAgF;QAChF,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC;IAC7D,CAAC;CACF"}

package/dist/modules/settings/setup.routes.d.ts

@@ -6,7 +6,23 @@ import { type ConnectionCheck, type RepositoryConnection } from './connection-ch
 import type { KbContext } from '../../shared/kb-context.js';
 import { type GitFailure } from '../../shared/git-failure.js';
 import { listRootFolders } from './git-root-folders.js';
+import { type GitHubAppRepository, type RepositorySource } from './repository-source.js';
 import '../auth/auth.middleware.js';
+/**
+ * What setup needs of the ways a deployment can be given its repository:
+ * the source every reader of the repository asks, and the one thing a mode
+ * has to have DONE before a save that chooses it may go through.
+ */
+export interface RepositorySetup {
+    source: RepositorySource;
+    /** Create the repository the deployment keeps for itself, if it is not there. Never touches one that is. */
+    ensureManaged(initialBranch: string): Promise<void>;
+    /**
+     * The connection to GitHub through a GitHub App. Absent, that way is not
+     * offered, and a save that names it is refused.
+     */
+    githubApp?: Pick<GitHubAppRepository, 'url' | 'answered' | 'prepare' | 'token' | 'permits'>;
+}
 /**
  * The slice of a sync record the status endpoint publishes. Declared here
  * rather than imported from `kb-sync` so this module stays free of that one;
@@ -22,6 +38,47 @@ export interface LastSyncStatus {
         error?: string;
     }>;
 }
+/**
+ * The open change requests, as the repository-change confirmation needs them:
+ * how many there are to decide about, and the close the admin may choose.
+ *
+ * Deliberately narrow — the setup routes never read a request, never write
+ * one, and never learn what is in it. Nothing here deletes anything: closing
+ * leaves every row where it is.
+ */
+export interface RepositoryChangeRequests {
+    /** How many change requests are open right now. */
+    countOpen(): Promise<number>;
+    /** Close every open request as "repository replaced", releasing the file locks on their branches. Answers how many closed. */
+    closeAsRepositoryReplaced(): Promise<number>;
+    /**
+     * Run the move with no queued commit being written. The startup phase sets
+     * working copies aside and clones them again while the deployment is
+     * serving, and a commit worker left running would write into a directory
+     * that is being renamed away, or into the fresh clone of a repository the
+     * commit was never meant for. Absent (a minimal mount has no worker), the
+     * move runs as it is.
+     */
+    whileCommitsHeld?<T>(work: () => Promise<T>): Promise<T>;
+}
+/**
+ * What the admin is asked to confirm before a save MOVES the deployment to
+ * another repository, and what they answered about its open change requests.
+ *
+ * `keep` — the repository only moved: its branches came along, so the open
+ * change requests still mean something and stay open.
+ * `close` — it is a different repository: none of those branches is in it,
+ * so the requests are closed as "repository replaced" (nothing deleted).
+ *
+ * What happens to the working copies is not a choice, and is decided by the
+ * histories, not by this answer (see the startup phase's
+ * `reconcileClonesWithConfiguredRepository`): a copy whose history the new
+ * repository holds is pointed at it and kept, unpushed commits included; any
+ * other is set aside whole and cloned fresh. Nothing is deleted. The
+ * confirmation exists so that work which leaves the app this way does so
+ * KNOWINGLY.
+ */
+export type RepositoryChangeChoice = 'keep' | 'close';
 /**
  * First-run setup — the deployment's own configuration, for the things that
  * used to be environment-only.
@@ -85,7 +142,22 @@ oidcRedirectUri?: string,
 /** The single sign-on check. Injected so route tests can answer for the provider. */
 checkOidc?: (config: OidcConfiguration) => Promise<OidcCheck>, 
 /** The issuer-only half, for a test with no application id or secret yet. */
-checkIssuer?: (issuerUrl: string) => Promise<IssuerCheck>): express.Router;
+checkIssuer?: (issuerUrl: string) => Promise<IssuerCheck>, 
+/**
+ * The ways a deployment can be given its repository. Absent, there is the
+ * one there always was: an address and a token, read from the settings.
+ */
+repository?: RepositorySetup, 
+/**
+ * What a change of the knowledge-base repository has to decide about, and
+ * what to do when the admin decides to close.
+ *
+ * Injected because the setup routes must stay free of the workflow module —
+ * and a minimal mount (tests, a distribution without change requests) simply
+ * has none: the default answers "no open requests", so the confirmation
+ * offers no choice it cannot honour.
+ */
+changeRequests?: RepositoryChangeRequests): express.Router;
 /**
  * Whether the STORED configuration answers everything the deployment needs.
  *
@@ -99,7 +171,9 @@ checkIssuer?: (issuerUrl: string) => Promise<IssuerCheck>): express.Router;
  * deployment signs in perfectly well without it, and gating on it would lock
  * an admin out of the screen where they would set it up.
  */
-export declare function settingsAnswered(settings: DeploymentSettingsService): boolean;
+export declare function settingsAnswered(settings: DeploymentSettingsService, 
+/** What answers for the repository. Absent: an address and a token, the one way there was. */
+source?: Pick<RepositorySource, 'answered'>): boolean;
 /**
  * Whether THIS PROCESS can actually serve — which is not the same question,
  * and conflating them opened the gate onto a broken app.
@@ -115,7 +189,7 @@ export declare function settingsAnswered(settings: DeploymentSettingsService): b
  * that puts it there. {@link awaitingRestart} is what tells the screen to ask
  * for one rather than claim a field is missing.
  */
-export declare function isComplete(settings: DeploymentSettingsService, kb: Pick<KbContext, 'isBranchModelConfigured'>): boolean;
+export declare function isComplete(settings: DeploymentSettingsService, kb: Pick<KbContext, 'isBranchModelConfigured'>, source?: Pick<RepositorySource, 'answered'>): boolean;
 /** Answered, but not yet in effect: everything is stored, the process is stale. */
-export declare function awaitingRestart(settings: DeploymentSettingsService, kb: Pick<KbContext, 'isBranchModelConfigured'>): boolean;
+export declare function awaitingRestart(settings: DeploymentSettingsService, kb: Pick<KbContext, 'isBranchModelConfigured'>, source?: Pick<RepositorySource, 'answered'>): boolean;
 //# sourceMappingURL=setup.routes.d.ts.map

package/dist/modules/settings/setup.routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup.routes.d.ts","sourceRoot":"","sources":["../../../src/modules/settings/setup.routes.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAIvE,OAAO,EACL,yBAAyB,EAI1B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAIL,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,iBAAiB,EACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,oBAAoB,EAC1B,MAAM,uBAAuB,CAAC;AAM/B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAa,KAAK,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEzE,OAAO,EAAE,eAAe,EAAqB,MAAM,uBAAuB,CAAC;AAC3E,OAAO,4BAA4B,CAAC;AA6BpC;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC7B,OAAO,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,yBAAyB,EACnC,WAAW,EAAE,mBAAmB;AAChC;;;;;GAKG;AACH,eAAe,EAAE;IACf,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB;;;;OAIG;IACH,WAAW,CAAC,IAAI,MAAM,GAAG,IAAI,CAAC;IAC9B,0FAA0F;IAC1F,eAAe,CAAC,IAAI,UAAU,GAAG,IAAI,CAAC;CACvC;AACD;;;;GAIG;AACH,EAAE,EAAE,SAAS;AACb;;;;;GAKG;AACH,IAAI,CAAC,EAAE;IACL,wEAAwE;IACxE,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,IAAI,cAAc,GAAG,IAAI,CAAC;CACnC;AACD;;;;;GAKG;AACH,eAAe,GAAE,CAAC,UAAU,EAAE,oBAAoB,KAAK,OAAO,CAAC,eAAe,CAA6B;AAC3G,qFAAqF;AACrF,WAAW,GAAE,OAAO,eAAiC;AACrD;;;GAGG;AACH,eAAe,SAAK;AACpB,qFAAqF;AACrF,SAAS,GAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,OAAO,CAAC,SAAS,CAA0B;AACrF,6EAA6E;AAC7E,WAAW,GAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,CAAiC,GACvF,OAAO,CAAC,MAAM,CAkmBhB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,yBAAyB,GAAG,OAAO,CAQ7E;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,UAAU,CACxB,QAAQ,EAAE,yBAAyB,EACnC,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,yBAAyB,CAAC,GAC7C,OAAO,CAET;AAED,mFAAmF;AACnF,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,yBAAyB,EACnC,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,yBAAyB,CAAC,GAC7C,OAAO,CAET"}
+{"version":3,"file":"setup.routes.d.ts","sourceRoot":"","sources":["../../../src/modules/settings/setup.routes.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAIvE,OAAO,EACL,yBAAyB,EAI1B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAIL,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,iBAAiB,EACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,oBAAoB,EAC1B,MAAM,uBAAuB,CAAC;AAM/B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAa,KAAK,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEzE,OAAO,EAAE,eAAe,EAAqB,MAAM,uBAAuB,CAAC;AAG3E,OAAO,EAAa,KAAK,mBAAmB,EAAE,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACpG,OAAO,4BAA4B,CAAC;AAEpC;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,gBAAgB,CAAC;IACzB,4GAA4G;IAC5G,aAAa,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD;;;OAGG;IACH,SAAS,CAAC,EAAE,IAAI,CAAC,mBAAmB,EAAE,KAAK,GAAG,UAAU,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;CAC7F;AA6BD;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC7B,OAAO,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrE;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,wBAAwB;IACvC,mDAAmD;IACnD,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7B,8HAA8H;IAC9H,yBAAyB,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7C;;;;;;;OAOG;IACH,gBAAgB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAC1D;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,OAAO,CAAC;AAEtD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,yBAAyB,EACnC,WAAW,EAAE,mBAAmB;AAChC;;;;;GAKG;AACH,eAAe,EAAE;IACf,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB;;;;OAIG;IACH,WAAW,CAAC,IAAI,MAAM,GAAG,IAAI,CAAC;IAC9B,0FAA0F;IAC1F,eAAe,CAAC,IAAI,UAAU,GAAG,IAAI,CAAC;CACvC;AACD;;;;GAIG;AACH,EAAE,EAAE,SAAS;AACb;;;;;GAKG;AACH,IAAI,CAAC,EAAE;IACL,wEAAwE;IACxE,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,IAAI,cAAc,GAAG,IAAI,CAAC;CACnC;AACD;;;;;GAKG;AACH,eAAe,GAAE,CAAC,UAAU,EAAE,oBAAoB,KAAK,OAAO,CAAC,eAAe,CAA6B;AAC3G,qFAAqF;AACrF,WAAW,GAAE,OAAO,eAAiC;AACrD;;;GAGG;AACH,eAAe,SAAK;AACpB,qFAAqF;AACrF,SAAS,GAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,OAAO,CAAC,SAAS,CAA0B;AACrF,6EAA6E;AAC7E,WAAW,GAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,CAAiC;AACxF;;;GAGG;AACH,UAAU,CAAC,EAAE,eAAe;AAC5B;;;;;;;;GAQG;AACH,cAAc,GAAE,wBAA+G,GAC9H,OAAO,CAAC,MAAM,CA+8BhB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,yBAAyB;AACnC,8FAA8F;AAC9F,MAAM,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,GAC1C,OAAO,CAQT;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,UAAU,CACxB,QAAQ,EAAE,yBAAyB,EACnC,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,yBAAyB,CAAC,EAC9C,MAAM,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,GAC1C,OAAO,CAET;AAED,mFAAmF;AACnF,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,yBAAyB,EACnC,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,yBAAyB,CAAC,EAC9C,MAAM,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,GAC1C,OAAO,CAET"}