@cat-factory/local-server 0.110.0 → 0.111.0

package/dist/gateProviderFollowing.d.ts

@@ -0,0 +1,39 @@
+import type { Logger, ProviderRegistry, ProviderToken } from '@cat-factory/kernel';
+/**
+ * The built-in gate providers built FROM the VCS client. Each answers a question only source
+ * control can answer, so each must be wired exactly while the deployment can reach it — see
+ * {@link followVcsReachOnProviderRegistry}. (`release-health` and `incident-enrichment` are
+ * Datadog-shaped and unrelated, so they are deliberately absent.)
+ */
+export declare const VCS_BACKED_GATE_PROVIDERS: readonly ProviderToken<unknown>[];
+/**
+ * Make the VCS-backed gate providers follow whatever can currently answer them.
+ *
+ * A gate probes iff its provider is wired, and local mode hands the build a VCS client that ALWAYS
+ * exists (so that "no token" can be a refusal naming the fix rather than an absent client the
+ * layers above read as "this deployment does no source control"). The build therefore wires all
+ * four regardless. That is right the moment the client can reach a host and wrong before it: a
+ * deployment reaching nothing would probe CI with nothing to ask and fail runs whose documented
+ * behaviour is to pass through. So the impls the build produced are captured once and re-wired (or
+ * cleared) as the answer changes. This decides only WHETHER they are wired; the impls are the
+ * build's own, verbatim.
+ *
+ * `canReach` is the SAME question the client router and `mintInstallationToken` ask, and it is
+ * deliberately NOT just "is there a credential": a mothership node reaches GitHub on installation
+ * tokens the mothership mints, holding no local PAT at all, and backing gates/merge is one of the
+ * things that delegation exists for. Keyed on the credential alone, every mothership run would
+ * advance as if CI were green.
+ *
+ * `warnUnwiredGates` runs on a TRANSITION to unwired, because the build's own call saw them wired
+ * and therefore said nothing — and "CI is never checked, PRs advance as if green" is exactly what
+ * an operator must hear. Only on the transition, so a re-apply doesn't reprint the unrelated
+ * advisories the build already logged.
+ */
+export declare function followVcsReachOnProviderRegistry(params: {
+    registry: ProviderRegistry;
+    canReach: () => boolean;
+    /** Register a callback fired whenever the answer to {@link canReach} may have changed. */
+    onChange: (fn: () => void) => void;
+    logger: Logger;
+}): void;
+//# sourceMappingURL=gateProviderFollowing.d.ts.map

package/dist/gateProviderFollowing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateProviderFollowing.d.ts","sourceRoot":"","sources":["../src/gateProviderFollowing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAmBlF;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,aAAa,CAAC,OAAO,CAAC,EAKtE,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,gCAAgC,CAAC,MAAM,EAAE;IACvD,QAAQ,EAAE,gBAAgB,CAAA;IAC1B,QAAQ,EAAE,MAAM,OAAO,CAAA;IACvB,0FAA0F;IAC1F,QAAQ,EAAE,CAAC,EAAE,EAAE,MAAM,IAAI,KAAK,IAAI,CAAA;IAClC,MAAM,EAAE,MAAM,CAAA;CACf,GAAG,IAAI,CAcP"}

package/dist/gateProviderFollowing.js

@@ -0,0 +1,62 @@
+import { CI_STATUS_PROVIDER, DOC_QUALITY_PROVIDER, MERGEABILITY_PROVIDER, PULL_REQUEST_REVIEW_PROVIDER, warnUnwiredGates, } from '@cat-factory/gates';
+// Keeping the VCS-backed gate providers in step with what can actually answer them.
+//
+// Everywhere else, local mode's "no source control" state is resolved PER CALL. A gate is the one
+// thing that cannot be: `wired()` is what decides whether the gate probes at all, and it is read
+// off the provider registry the build populated. So this is the seam that re-derives that decision
+// when the deployment's reach changes, and it lives beside `vcsCredential.ts` rather than inside
+// the container assembly because getting it wrong is invisible in both directions (a deployment
+// that fails every run, or one that advances PRs as if CI were green) and it is worth testing on
+// its own.
+/**
+ * The built-in gate providers built FROM the VCS client. Each answers a question only source
+ * control can answer, so each must be wired exactly while the deployment can reach it — see
+ * {@link followVcsReachOnProviderRegistry}. (`release-health` and `incident-enrichment` are
+ * Datadog-shaped and unrelated, so they are deliberately absent.)
+ */
+export const VCS_BACKED_GATE_PROVIDERS = [
+    CI_STATUS_PROVIDER,
+    MERGEABILITY_PROVIDER,
+    PULL_REQUEST_REVIEW_PROVIDER,
+    DOC_QUALITY_PROVIDER,
+];
+/**
+ * Make the VCS-backed gate providers follow whatever can currently answer them.
+ *
+ * A gate probes iff its provider is wired, and local mode hands the build a VCS client that ALWAYS
+ * exists (so that "no token" can be a refusal naming the fix rather than an absent client the
+ * layers above read as "this deployment does no source control"). The build therefore wires all
+ * four regardless. That is right the moment the client can reach a host and wrong before it: a
+ * deployment reaching nothing would probe CI with nothing to ask and fail runs whose documented
+ * behaviour is to pass through. So the impls the build produced are captured once and re-wired (or
+ * cleared) as the answer changes. This decides only WHETHER they are wired; the impls are the
+ * build's own, verbatim.
+ *
+ * `canReach` is the SAME question the client router and `mintInstallationToken` ask, and it is
+ * deliberately NOT just "is there a credential": a mothership node reaches GitHub on installation
+ * tokens the mothership mints, holding no local PAT at all, and backing gates/merge is one of the
+ * things that delegation exists for. Keyed on the credential alone, every mothership run would
+ * advance as if CI were green.
+ *
+ * `warnUnwiredGates` runs on a TRANSITION to unwired, because the build's own call saw them wired
+ * and therefore said nothing — and "CI is never checked, PRs advance as if green" is exactly what
+ * an operator must hear. Only on the transition, so a re-apply doesn't reprint the unrelated
+ * advisories the build already logged.
+ */
+export function followVcsReachOnProviderRegistry(params) {
+    const { registry, canReach, onChange, logger } = params;
+    const built = new Map(VCS_BACKED_GATE_PROVIDERS.map((token) => [token, registry.get(token)]));
+    let wired;
+    const apply = () => {
+        const reachable = canReach();
+        for (const token of VCS_BACKED_GATE_PROVIDERS) {
+            registry.wire(token, reachable ? built.get(token) : undefined);
+        }
+        if (!reachable && wired !== false)
+            warnUnwiredGates(registry, logger);
+        wired = reachable;
+    };
+    apply();
+    onChange(apply);
+}
+//# sourceMappingURL=gateProviderFollowing.js.map

package/dist/gateProviderFollowing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateProviderFollowing.js","sourceRoot":"","sources":["../src/gateProviderFollowing.ts"],"names":[],"mappings":"AACA,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,4BAA4B,EAC5B,gBAAgB,GACjB,MAAM,oBAAoB,CAAA;AAE3B,oFAAoF;AACpF,EAAE;AACF,kGAAkG;AAClG,iGAAiG;AACjG,mGAAmG;AACnG,iGAAiG;AACjG,gGAAgG;AAChG,iGAAiG;AACjG,WAAW;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAsC;IAC1E,kBAAkB;IAClB,qBAAqB;IACrB,4BAA4B;IAC5B,oBAAoB;CACrB,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,gCAAgC,CAAC,MAMhD;IACC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAAA;IACvD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7F,IAAI,KAA0B,CAAA;IAC9B,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,MAAM,SAAS,GAAG,QAAQ,EAAE,CAAA;QAC5B,KAAK,MAAM,KAAK,IAAI,yBAAyB,EAAE,CAAC;YAC9C,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QAChE,CAAC;QACD,IAAI,CAAC,SAAS,IAAI,KAAK,KAAK,KAAK;YAAE,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QACrE,KAAK,GAAG,SAAS,CAAA;IACnB,CAAC,CAAA;IACD,KAAK,EAAE,CAAA;IACP,QAAQ,CAAC,KAAK,CAAC,CAAA;AACjB,CAAC"}

package/dist/github.d.ts

@@ -1,5 +1,6 @@
 import type { GitHubClient, GitHubRepo, GroupCacheHandle, InstallationPermissions } from '@cat-factory/kernel';
-import type { Logger, VcsIdentityRegistry, VcsProvider } from '@cat-factory/kernel';
+import type { Logger, VcsIdentityRegistry } from '@cat-factory/kernel';
+import type { LocalVcsCredential } from './vcsCredential.js';
 import { type AppTokenSource } from '@cat-factory/server';
 import type { PatAccount } from './installations.js';
 /**
@@ -9,11 +10,21 @@ import type { PatAccount } from './installations.js';
  * `scopes` query param for pre-selection.
  */
 export declare function githubPatCreationUrl(): string;
-/** An {@link AppTokenSource} that returns a fixed PAT for every installation call. */
-export declare class StaticTokenAppRegistry implements AppTokenSource {
-    private readonly token;
+/**
+ * The refusal every credential-reading path shares, so an unconfigured deployment says the same
+ * actionable thing wherever it is hit (a gate probe, a repo enumeration, a clone) instead of a
+ * generic 500 or an empty result that reads like "no repos".
+ */
+export declare function noVcsCredentialError(): Error;
+/**
+ * An {@link AppTokenSource} that returns the deployment's CURRENT PAT for every installation call.
+ * The token is read per call, so a credential installed from the sign-in screen is used by the
+ * very next dispatch.
+ */
+export declare class LocalPatAppTokenSource implements AppTokenSource {
+    private readonly resolveToken;
     readonly defaultAppId = "";
-    constructor(token: string);
+    constructor(resolveToken: () => string | undefined);
     apps(): readonly {
         appId: string;
     }[];
@@ -28,7 +39,7 @@ export declare class StaticTokenAppRegistry implements AppTokenSource {
  * to it in the connect UI. Best-effort: a failed/forbidden call falls back to an empty
  * login (the link flow only needs the installation row to exist, not its account label).
  */
-export declare function fetchPatAccount(env: NodeJS.ProcessEnv): Promise<PatAccount>;
+export declare function fetchPatAccount(env: NodeJS.ProcessEnv, pat: string | undefined): Promise<PatAccount>;
 /**
  * Verdict of the optional boot-time GITHUB_PAT probe ({@link probeGitHubPat}). `ok` means the token
  * authenticated and — for a classic token whose scopes GitHub reports — carries the scopes local
@@ -57,19 +68,21 @@ export declare function classifyPatProbe(res: {
     scopesHeader: string | null;
 }): PatProbeVerdict;
 /**
- * Best-effort boot-time validation of a SET `GITHUB_PAT`: one `GET /user`. Returns the verdict, or
- * undefined when there is no PAT to probe or the probe couldn't complete (network error / timeout) —
+ * Best-effort boot-time validation of the deployment's GitHub PAT: one `GET /user`. Returns the
+ * verdict, or undefined when there is no PAT to probe or the probe couldn't complete (network error / timeout) —
  * a probe must NEVER block or crash boot, so an unreachable GitHub is treated as "unknown", not a
  * failure. `fetchImpl` + `timeoutMs` are injectable for tests.
  */
-export declare function probeGitHubPat(env: NodeJS.ProcessEnv, opts?: {
+export declare function probeGitHubPat(env: NodeJS.ProcessEnv, pat: string | undefined, opts?: {
     fetchImpl?: typeof fetch;
     timeoutMs?: number;
 }): Promise<PatProbeVerdict | undefined>;
 /**
  * The boot warning for a non-OK {@link probeGitHubPat} verdict (undefined when the PAT is fine).
  * Mirrors the MISSING-PAT boot warning: it names the exact problem and links the classic-token
- * creation URL with the local-mode scopes pre-selected, so the fix is one click + restart.
+ * creation URL with the local-mode scopes pre-selected, so the fix is one click. It names BOTH
+ * ways to apply the replacement, because the token it just rejected may have come from either:
+ * `.env` (which the sign-in screen will not override) or a previous browser install.
  */
 export declare function describePatProbeVerdict(verdict: PatProbeVerdict): string | undefined;
 /**
@@ -81,7 +94,7 @@ export declare function describePatProbeVerdict(verdict: PatProbeVerdict): strin
  * swallows network errors and the resolution handler is defensively guarded). `fetchImpl` +
  * `timeoutMs` are injectable for tests.
  */
-export declare function warnOnGitHubPatProblemInBackground(env: NodeJS.ProcessEnv, log: Logger, opts?: {
+export declare function warnOnGitHubPatProblemInBackground(env: NodeJS.ProcessEnv, pat: string | undefined, log: Logger, opts?: {
     fetchImpl?: typeof fetch;
     timeoutMs?: number;
 }): void;
@@ -93,25 +106,24 @@ export declare function warnOnGitHubPatProblemInBackground(env: NodeJS.ProcessEn
  */
 export declare function gitlabPatCreationUrl(): string;
 /**
- * Assemble the source-control PAT-login registry from env — the provider-agnostic seam the
- * `/auth/pat` endpoint resolves through. A provider is "configured" (sign-in available) when
- * its PAT is set in env; that env token is also the operational credential, so a provider
- * without one can't sign in (the SPA shows no button for it). The browser never sees a token
- * — sign-in just selects a provider. Adding a third provider is one more entry here + its
- * resolver, with no change to the endpoint or the UI flow.
+ * Assemble the source-control PAT-login registry — the provider-agnostic seam the `/auth/pat`
+ * endpoint resolves through. A provider is "configured" (one-click sign-in available) when the
+ * deployment holds ITS token, read LIVE from `credential` so a token installed from the sign-in
+ * screen turns the button on for the next caller. The browser never sees a token — one-click
+ * sign-in just selects a provider. Adding a third provider is one more entry here + its resolver,
+ * with no change to the endpoint or the UI flow.
  */
-export declare function buildVcsIdentityRegistry(env: NodeJS.ProcessEnv): {
-    registry: VcsIdentityRegistry;
-    configured: VcsProvider[];
-};
+export declare function buildVcsIdentityRegistry(env: NodeJS.ProcessEnv, credential: () => LocalVcsCredential | undefined): VcsIdentityRegistry;
 /**
- * Build a {@link GitHubClient} that authenticates with the PAT, for the CI / merge /
- * mergeability gates AND the repo-link / board "add from repo" flows. Returns undefined
- * when no PAT is configured (the gates then pass through, like the Node default).
- * `repoEnumCache` is the `AppCaches.patInstallationRepos` handle backing the picker
- * typeahead (optional — absent, the search enumerates live per request).
+ * Build a {@link GitHubClient} that authenticates with the deployment's GitHub PAT, for the CI /
+ * merge / mergeability gates AND the repo-link / board "add from repo" flows. Always returns a
+ * client: the token is read per call, so "no token yet" is a REFUSAL the client raises (naming
+ * how to fix it) rather than an absent client — which the layers above would otherwise read as
+ * "this deployment has no source control at all" and wire nothing, permanently.
+ * `repoEnumCache` is the `AppCaches.patInstallationRepos` handle backing the picker typeahead
+ * (optional — absent, the search enumerates live per request).
  */
-export declare function createLocalGitHubClient(env: NodeJS.ProcessEnv, repoEnumCache?: GroupCacheHandle<GitHubRepo[]>): GitHubClient | undefined;
+export declare function createLocalGitHubClient(env: NodeJS.ProcessEnv, resolveToken: () => string | undefined, repoEnumCache?: GroupCacheHandle<GitHubRepo[]>): GitHubClient;
 /**
  * Build a {@link GitHubClient} over a mothership-delegated {@link AppTokenSource}
  * (mothership mode with no local `GITHUB_PAT`): every installation token is minted by the
@@ -127,30 +139,15 @@ export declare function createDelegatedGitHubClient(env: NodeJS.ProcessEnv, toke
  * Build a {@link GitHubClient} for a GitLab-only local deployment, through the SAME
  * {@link buildGitLabEngineClient} the hosted facades use — a PAT-backed `VcsClient` adapted to the
  * legacy `GitHubClient` port the CI / merge / mergeability gates + repo-link flows still consume.
- * So a developer who set only `GITLAB_PAT` gets the same gating/merge/repo-read surface a
+ * So a developer whose credential is a GitLab one gets the same gating/merge/repo-read surface a
  * GitHub PAT gives — the engine talks to GitLab through the adapter without being migrated to
- * the neutral port. Returns undefined when no `GITLAB_PAT` is configured (the gates then pass
- * through). For a self-managed instance set `GITLAB_API_BASE` (e.g.
- * `https://gitlab.example.com/api/v4`).
+ * the neutral port. Like {@link createLocalGitHubClient} it is always built and reads its token
+ * per call, so an installed credential is live immediately. For a self-managed instance set
+ * `GITLAB_API_BASE` (e.g. `https://gitlab.example.com/api/v4`).
  *
  * It goes THROUGH the builder rather than assembling the client + adapter pair itself, which is
  * what it did until that drifted: the builder is documented as the single source of this wiring,
  * so anything it gained reached the two hosted facades and silently skipped local.
  */
-export declare function createLocalGitLabClient(env: NodeJS.ProcessEnv): GitHubClient | undefined;
-/**
- * The host a GitLab local deployment clones/pushes against, derived from `GITLAB_API_BASE`'s
- * host (a self-managed instance) or the public `gitlab.com`. Single source of truth for BOTH
- * the clone URL the server builds (`resolveRepoOrigin`) and the harness host allow-list, so
- * they can never disagree. Returns undefined when no `GITLAB_PAT` is configured (GitHub mode).
- */
-export declare function gitlabVcsHost(env: NodeJS.ProcessEnv): string | undefined;
-/**
- * The comma-separated host allow-list the harness container is given (`GITHUB_ALLOWED_HOSTS`).
- * The harness rejects any clone/push host not on this list (default github.com), so a GitLab
- * deployment must add its host or every clone is refused. Combines any operator-set
- * `GITHUB_ALLOWED_HOSTS` with the resolved GitLab host. Returns undefined when neither applies
- * (GitHub mode with no extra hosts ⇒ the harness keeps its github.com default).
- */
-export declare function harnessAllowedHosts(env: NodeJS.ProcessEnv): string | undefined;
+export declare function createLocalGitLabClient(env: NodeJS.ProcessEnv, resolveToken: () => string | undefined): GitHubClient;
 //# sourceMappingURL=github.d.ts.map

package/dist/github.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../src/github.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAEV,YAAY,EACZ,UAAU,EACV,gBAAgB,EAEhB,uBAAuB,EAIxB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAEnF,OAAO,EACL,KAAK,cAAc,EAIpB,MAAM,qBAAqB,CAAA;AAM5B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAgBpD;;;;;GAKG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAM7C;AAED,sFAAsF;AACtF,qBAAa,sBAAuB,YAAW,cAAc;IAE/C,OAAO,CAAC,QAAQ,CAAC,KAAK;IADlC,QAAQ,CAAC,YAAY,MAAK;IAC1B,YAA6B,KAAK,EAAE,MAAM,EAAI;IAE9C,IAAI,IAAI,SAAS;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAEnC;IAED,UAAU,IAAI;QAAE,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;KAAE,CAK1C;IAED,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC,CAEnC;IAID,uBAAuB,IAAI,OAAO,CAAC,uBAAuB,CAAC,CAE1D;CACF;AA8FD;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAiBjF;AAED;;;;GAIG;AACH,MAAM,MAAM,eAAe,GACvB;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC9D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAA;AAE3D;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE;IACpC,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CAC5B,GAAG,eAAe,CAwBlB;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAC1D,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAkBtC;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM,GAAG,SAAS,CASpF;AAED;;;;;;;;GAQG;AACH,wBAAgB,kCAAkC,CAChD,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,GAAG,EAAE,MAAM,EACX,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAC1D,IAAI,CAMN;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAM7C;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG;IAChE,QAAQ,EAAE,mBAAmB,CAAA;IAC7B,UAAU,EAAE,WAAW,EAAE,CAAA;CAC1B,CAiBA;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,aAAa,CAAC,EAAE,gBAAgB,CAAC,UAAU,EAAE,CAAC,GAC7C,YAAY,GAAG,SAAS,CAe1B;AAED;;;;;;;;;GASG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,WAAW,EAAE,cAAc,GAC1B,YAAY,CASd;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,YAAY,GAAG,SAAS,CAKxF;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,GAAG,SAAS,CASxE;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,GAAG,SAAS,CAS9E"}
+{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../src/github.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAEV,YAAY,EACZ,UAAU,EACV,gBAAgB,EAEhB,uBAAuB,EAIxB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAe,MAAM,qBAAqB,CAAA;AAEnF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAC5D,OAAO,EACL,KAAK,cAAc,EAIpB,MAAM,qBAAqB,CAAA;AAM5B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAqBpD;;;;;GAKG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAM7C;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,KAAK,CAI5C;AAED;;;;GAIG;AACH,qBAAa,sBAAuB,YAAW,cAAc;IAE/C,OAAO,CAAC,QAAQ,CAAC,YAAY;IADzC,QAAQ,CAAC,YAAY,MAAK;IAC1B,YAA6B,YAAY,EAAE,MAAM,MAAM,GAAG,SAAS,EAAI;IAEvE,IAAI,IAAI,SAAS;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAEnC;IAED,UAAU,IAAI;QAAE,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAA;KAAE,CAK1C;IAED,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC,CAGnC;IAID,uBAAuB,IAAI,OAAO,CAAC,uBAAuB,CAAC,CAE1D;CACF;AAgGD;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,GAAG,EAAE,MAAM,GAAG,SAAS,GACtB,OAAO,CAAC,UAAU,CAAC,CAgBrB;AAED;;;;GAIG;AACH,MAAM,MAAM,eAAe,GACvB;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC9D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAA;AAE3D;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE;IACpC,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CAC5B,GAAG,eAAe,CAwBlB;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAC1D,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAiBtC;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM,GAAG,SAAS,CAUpF;AAED;;;;;;;;GAQG;AACH,wBAAgB,kCAAkC,CAChD,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,GAAG,EAAE,MAAM,EACX,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAC1D,IAAI,CAMN;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAM7C;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,UAAU,EAAE,MAAM,kBAAkB,GAAG,SAAS,GAC/C,mBAAmB,CAiBrB;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,YAAY,EAAE,MAAM,MAAM,GAAG,SAAS,EACtC,aAAa,CAAC,EAAE,gBAAgB,CAAC,UAAU,EAAE,CAAC,GAC7C,YAAY,CAad;AAED;;;;;;;;;GASG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,WAAW,EAAE,cAAc,GAC1B,YAAY,CASd;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,YAAY,EAAE,MAAM,MAAM,GAAG,SAAS,GACrC,YAAY,CAGd"}

package/dist/github.js

@@ -3,9 +3,14 @@ import { runBestEffort } from '@cat-factory/kernel';
 import { FetchGitHubClient, GitHubIdentityResolver, logger, } from '@cat-factory/server';
 import { buildGitLabEngineClient, GITLAB_PUBLIC_API_BASE, GitLabIdentityResolver, } from '@cat-factory/gitlab';
 // PAT-backed GitHub access for local mode. The shared FetchGitHubClient normally mints
-// per-installation tokens via the GitHub App registry; here we feed it a static-token
-// source returning the developer's PAT, so the CI gate + merge / mergeability
-// providers (wired in container.ts from this client) hit real GitHub with the PAT.
+// per-installation tokens via the GitHub App registry; here we feed it a token source returning
+// the deployment's PAT, so the CI gate + merge / mergeability providers (wired in container.ts
+// from this client) hit real GitHub with the PAT.
+//
+// Every token read here goes through a getter rather than a captured string: local mode's
+// credential can be installed from the sign-in screen while the server runs (see
+// `vcsCredential.ts`), and a value snapshotted at container-build time would pin the state the
+// process booted in.
 //
 // The app-JWT paths (installation discovery / listing) are never reached in local
 // mode — those are the GitHub-App connect flow, which local mode replaces with the
@@ -27,12 +32,24 @@ export function githubPatCreationUrl() {
     });
     return `https://github.com/settings/tokens/new?${params.toString()}`;
 }
-/** An {@link AppTokenSource} that returns a fixed PAT for every installation call. */
-export class StaticTokenAppRegistry {
-    token;
+/**
+ * The refusal every credential-reading path shares, so an unconfigured deployment says the same
+ * actionable thing wherever it is hit (a gate probe, a repo enumeration, a clone) instead of a
+ * generic 500 or an empty result that reads like "no repos".
+ */
+export function noVcsCredentialError() {
+    return new Error('This deployment has no source-control token yet. Sign in with a GitHub or GitLab personal access token, or set GITHUB_PAT / GITLAB_PAT in your .env.');
+}
+/**
+ * An {@link AppTokenSource} that returns the deployment's CURRENT PAT for every installation call.
+ * The token is read per call, so a credential installed from the sign-in screen is used by the
+ * very next dispatch.
+ */
+export class LocalPatAppTokenSource {
+    resolveToken;
     defaultAppId = '';
-    constructor(token) {
-        this.token = token;
+    constructor(resolveToken) {
+        this.resolveToken = resolveToken;
     }
     apps() {
         return [{ appId: '' }];
@@ -43,7 +60,8 @@ export class StaticTokenAppRegistry {
         };
     }
     installationToken() {
-        return Promise.resolve(this.token);
+        const token = this.resolveToken();
+        return token ? Promise.resolve(token) : Promise.reject(noVcsCredentialError());
     }
     // A static PAT carries no App-granted permissions map; canPush then relies on the
     // repo object's user-role `permissions.push`, which IS authoritative for a PAT.
@@ -82,9 +100,9 @@ function patHeaders(pat) {
  * the installation-token paths, so they fall through to the base implementation.
  */
 class PatGitHubClient extends FetchGitHubClient {
-    pat;
+    resolvePat;
     repoEnumCache;
-    constructor(deps, pat, 
+    constructor(deps, resolvePat, 
     /**
      * The `AppCaches.patInstallationRepos` handle (keyed/grouped by installation id). When
      * wired, the realtime picker search filters a cached complete enumeration in memory
@@ -93,7 +111,7 @@ class PatGitHubClient extends FetchGitHubClient {
      */
     repoEnumCache) {
         super(deps);
-        this.pat = pat;
+        this.resolvePat = resolvePat;
         this.repoEnumCache = repoEnumCache;
     }
     async listInstallationRepos(installationId) {
@@ -103,7 +121,10 @@ class PatGitHubClient extends FetchGitHubClient {
         // page-by-page crawl. The rows come back stamped as personal (`user_pat`, placeholder
         // installation), so re-stamp them: local mode's shared `GITHUB_PAT` is the workspace-wide
         // credential, so repos it enumerates are App-reachable (visible to every member).
-        const { items, truncated } = await this.listReposForToken(this.pat);
+        const pat = this.resolvePat();
+        if (!pat)
+            throw noVcsCredentialError();
+        const { items, truncated } = await this.listReposForToken(pat);
         return {
             items: items.map((r) => ({ ...r, installationId, linkedVia: 'app' })),
             ...(truncated !== undefined ? { truncated } : {}),
@@ -135,9 +156,8 @@ class PatGitHubClient extends FetchGitHubClient {
  * to it in the connect UI. Best-effort: a failed/forbidden call falls back to an empty
  * login (the link flow only needs the installation row to exist, not its account label).
  */
-export async function fetchPatAccount(env) {
+export async function fetchPatAccount(env, pat) {
     const fallback = { accountId: null, accountLogin: '', targetType: 'User' };
-    const pat = env.GITHUB_PAT?.trim();
     if (!pat)
         return fallback;
     const apiBase = (env.GITHUB_API_BASE?.trim() || 'https://api.github.com').replace(/\/+$/, '');
@@ -190,13 +210,12 @@ export function classifyPatProbe(res) {
         : { ok: false, reason: 'underscoped', missing: [...missing] };
 }
 /**
- * Best-effort boot-time validation of a SET `GITHUB_PAT`: one `GET /user`. Returns the verdict, or
- * undefined when there is no PAT to probe or the probe couldn't complete (network error / timeout) —
+ * Best-effort boot-time validation of the deployment's GitHub PAT: one `GET /user`. Returns the
+ * verdict, or undefined when there is no PAT to probe or the probe couldn't complete (network error / timeout) —
  * a probe must NEVER block or crash boot, so an unreachable GitHub is treated as "unknown", not a
  * failure. `fetchImpl` + `timeoutMs` are injectable for tests.
  */
-export async function probeGitHubPat(env, opts = {}) {
-    const pat = env.GITHUB_PAT?.trim();
+export async function probeGitHubPat(env, pat, opts = {}) {
     if (!pat)
         return undefined;
     const apiBase = (env.GITHUB_API_BASE?.trim() || 'https://api.github.com').replace(/\/+$/, '');
@@ -220,17 +239,20 @@ export async function probeGitHubPat(env, opts = {}) {
 /**
  * The boot warning for a non-OK {@link probeGitHubPat} verdict (undefined when the PAT is fine).
  * Mirrors the MISSING-PAT boot warning: it names the exact problem and links the classic-token
- * creation URL with the local-mode scopes pre-selected, so the fix is one click + restart.
+ * creation URL with the local-mode scopes pre-selected, so the fix is one click. It names BOTH
+ * ways to apply the replacement, because the token it just rejected may have come from either:
+ * `.env` (which the sign-in screen will not override) or a previous browser install.
  */
 export function describePatProbeVerdict(verdict) {
     if (verdict.ok)
         return undefined;
     const tail = `agent steps that clone, push, open PRs, gate on CI or merge will fail. Create a token ` +
-        `(scopes pre-selected) at ${githubPatCreationUrl()}, then set GITHUB_PAT and restart.`;
+        `(scopes pre-selected) at ${githubPatCreationUrl()}, then sign in with it on the sign-in ` +
+        `screen, or set GITHUB_PAT in your .env and restart.`;
     if (verdict.reason === 'underscoped') {
-        return `local mode: GITHUB_PAT is missing required scope(s) ${verdict.missing.join(', ')} — ${tail}`;
+        return `local mode: the configured GitHub token is missing required scope(s) ${verdict.missing.join(', ')} — ${tail}`;
     }
-    return `local mode: GITHUB_PAT was rejected by GitHub (${verdict.detail}) — ${tail}`;
+    return `local mode: the configured GitHub token was rejected by GitHub (${verdict.detail}) — ${tail}`;
 }
 /**
  * Fire the boot-time {@link probeGitHubPat} check WITHOUT blocking boot (app-startup initiative,
@@ -241,9 +263,9 @@ export function describePatProbeVerdict(verdict) {
  * swallows network errors and the resolution handler is defensively guarded). `fetchImpl` +
  * `timeoutMs` are injectable for tests.
  */
-export function warnOnGitHubPatProblemInBackground(env, log, opts = {}) {
+export function warnOnGitHubPatProblemInBackground(env, pat, log, opts = {}) {
     void runBestEffort(log, 'github.patProbe', async () => {
-        const verdict = await probeGitHubPat(env, opts);
+        const verdict = await probeGitHubPat(env, pat, opts);
         const warning = describePatProbeVerdict(verdict ?? { ok: true });
         if (warning)
             log.warn(warning);
@@ -263,48 +285,49 @@ export function gitlabPatCreationUrl() {
     return `https://gitlab.com/-/user_settings/personal_access_tokens?${params.toString()}`;
 }
 /**
- * Assemble the source-control PAT-login registry from env — the provider-agnostic seam the
- * `/auth/pat` endpoint resolves through. A provider is "configured" (sign-in available) when
- * its PAT is set in env; that env token is also the operational credential, so a provider
- * without one can't sign in (the SPA shows no button for it). The browser never sees a token
- * — sign-in just selects a provider. Adding a third provider is one more entry here + its
- * resolver, with no change to the endpoint or the UI flow.
+ * Assemble the source-control PAT-login registry — the provider-agnostic seam the `/auth/pat`
+ * endpoint resolves through. A provider is "configured" (one-click sign-in available) when the
+ * deployment holds ITS token, read LIVE from `credential` so a token installed from the sign-in
+ * screen turns the button on for the next caller. The browser never sees a token — one-click
+ * sign-in just selects a provider. Adding a third provider is one more entry here + its resolver,
+ * with no change to the endpoint or the UI flow.
  */
-export function buildVcsIdentityRegistry(env) {
+export function buildVcsIdentityRegistry(env, credential) {
     const githubApiBase = env.GITHUB_API_BASE?.trim() || 'https://api.github.com';
     const gitlabApiBase = env.GITLAB_API_BASE?.trim() || undefined;
-    const registry = {
+    const tokenFor = (provider) => () => {
+        const current = credential();
+        return current?.provider === provider ? current.token : undefined;
+    };
+    return {
         github: {
             resolver: new GitHubIdentityResolver({ apiBase: githubApiBase }),
-            configuredToken: env.GITHUB_PAT?.trim() || undefined,
+            configuredToken: tokenFor('github'),
         },
         gitlab: {
             resolver: new GitLabIdentityResolver({ apiBase: gitlabApiBase }),
-            configuredToken: env.GITLAB_PAT?.trim() || undefined,
+            configuredToken: tokenFor('gitlab'),
         },
     };
-    const configured = Object.keys(registry).filter((p) => registry[p]?.configuredToken);
-    return { registry, configured };
 }
 /**
- * Build a {@link GitHubClient} that authenticates with the PAT, for the CI / merge /
- * mergeability gates AND the repo-link / board "add from repo" flows. Returns undefined
- * when no PAT is configured (the gates then pass through, like the Node default).
- * `repoEnumCache` is the `AppCaches.patInstallationRepos` handle backing the picker
- * typeahead (optional — absent, the search enumerates live per request).
+ * Build a {@link GitHubClient} that authenticates with the deployment's GitHub PAT, for the CI /
+ * merge / mergeability gates AND the repo-link / board "add from repo" flows. Always returns a
+ * client: the token is read per call, so "no token yet" is a REFUSAL the client raises (naming
+ * how to fix it) rather than an absent client — which the layers above would otherwise read as
+ * "this deployment has no source control at all" and wire nothing, permanently.
+ * `repoEnumCache` is the `AppCaches.patInstallationRepos` handle backing the picker typeahead
+ * (optional — absent, the search enumerates live per request).
  */
-export function createLocalGitHubClient(env, repoEnumCache) {
-    const pat = env.GITHUB_PAT?.trim();
-    if (!pat)
-        return undefined;
+export function createLocalGitHubClient(env, resolveToken, repoEnumCache) {
     const apiBase = env.GITHUB_API_BASE?.trim() || 'https://api.github.com';
     return new PatGitHubClient({
-        registry: new StaticTokenAppRegistry(pat),
+        registry: new LocalPatAppTokenSource(resolveToken),
         rateLimitRepository: new NoopRateLimitRepository(),
         idGenerator: localIdGenerator,
         clock: localClock,
         apiBase,
-    }, pat, repoEnumCache);
+    }, resolveToken, repoEnumCache);
 }
 /**
  * Build a {@link GitHubClient} over a mothership-delegated {@link AppTokenSource}
@@ -330,59 +353,18 @@ export function createDelegatedGitHubClient(env, tokenSource) {
  * Build a {@link GitHubClient} for a GitLab-only local deployment, through the SAME
  * {@link buildGitLabEngineClient} the hosted facades use — a PAT-backed `VcsClient` adapted to the
  * legacy `GitHubClient` port the CI / merge / mergeability gates + repo-link flows still consume.
- * So a developer who set only `GITLAB_PAT` gets the same gating/merge/repo-read surface a
+ * So a developer whose credential is a GitLab one gets the same gating/merge/repo-read surface a
  * GitHub PAT gives — the engine talks to GitLab through the adapter without being migrated to
- * the neutral port. Returns undefined when no `GITLAB_PAT` is configured (the gates then pass
- * through). For a self-managed instance set `GITLAB_API_BASE` (e.g.
- * `https://gitlab.example.com/api/v4`).
+ * the neutral port. Like {@link createLocalGitHubClient} it is always built and reads its token
+ * per call, so an installed credential is live immediately. For a self-managed instance set
+ * `GITLAB_API_BASE` (e.g. `https://gitlab.example.com/api/v4`).
  *
  * It goes THROUGH the builder rather than assembling the client + adapter pair itself, which is
  * what it did until that drifted: the builder is documented as the single source of this wiring,
  * so anything it gained reached the two hosted facades and silently skipped local.
  */
-export function createLocalGitLabClient(env) {
-    const pat = env.GITLAB_PAT?.trim();
-    if (!pat)
-        return undefined;
+export function createLocalGitLabClient(env, resolveToken) {
     const apiBase = env.GITLAB_API_BASE?.trim() || GITLAB_PUBLIC_API_BASE;
-    return buildGitLabEngineClient({ token: pat, apiBase, clock: localClock, logger });
-}
-/**
- * The host a GitLab local deployment clones/pushes against, derived from `GITLAB_API_BASE`'s
- * host (a self-managed instance) or the public `gitlab.com`. Single source of truth for BOTH
- * the clone URL the server builds (`resolveRepoOrigin`) and the harness host allow-list, so
- * they can never disagree. Returns undefined when no `GITLAB_PAT` is configured (GitHub mode).
- */
-export function gitlabVcsHost(env) {
-    if (!env.GITLAB_PAT?.trim())
-        return undefined;
-    const apiBase = env.GITLAB_API_BASE?.trim();
-    if (!apiBase)
-        return 'gitlab.com';
-    try {
-        return new URL(apiBase).host;
-    }
-    catch {
-        return 'gitlab.com';
-    }
-}
-/**
- * The comma-separated host allow-list the harness container is given (`GITHUB_ALLOWED_HOSTS`).
- * The harness rejects any clone/push host not on this list (default github.com), so a GitLab
- * deployment must add its host or every clone is refused. Combines any operator-set
- * `GITHUB_ALLOWED_HOSTS` with the resolved GitLab host. Returns undefined when neither applies
- * (GitHub mode with no extra hosts ⇒ the harness keeps its github.com default).
- */
-export function harnessAllowedHosts(env) {
-    const hosts = new Set();
-    for (const h of (env.GITHUB_ALLOWED_HOSTS ?? '').split(',')) {
-        const t = h.trim();
-        if (t)
-            hosts.add(t);
-    }
-    const gitlab = gitlabVcsHost(env);
-    if (gitlab)
-        hosts.add(gitlab);
-    return hosts.size > 0 ? [...hosts].join(',') : undefined;
+    return buildGitLabEngineClient({ token: resolveToken, apiBase, clock: localClock, logger });
 }
 //# sourceMappingURL=github.js.map

package/dist/github.js.map

@@ -1 +1 @@
-{"version":3,"file":"github.js","sourceRoot":"","sources":["../src/github.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAaxC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAEL,iBAAiB,EACjB,sBAAsB,EACtB,MAAM,GACP,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,qBAAqB,CAAA;AAG5B,uFAAuF;AACvF,sFAAsF;AACtF,8EAA8E;AAC9E,mFAAmF;AACnF,EAAE;AACF,kFAAkF;AAClF,mFAAmF;AACnF,+DAA+D;AAE/D,uFAAuF;AACvF,0FAA0F;AAC1F,8FAA8F;AAC9F,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,UAAU,CAAU,CAAA;AAEtD;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,WAAW,EAAE,wBAAwB;QACrC,MAAM,EAAE,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;KACnC,CAAC,CAAA;IACF,OAAO,0CAA0C,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAA;AACtE,CAAC;AAED,sFAAsF;AACtF,MAAM,OAAO,sBAAsB;IAEJ,KAAK;IADzB,YAAY,GAAG,EAAE,CAAA;IAC1B,YAA6B,KAAa;qBAAb,KAAK;IAAW,CAAC;IAE9C,IAAI;QACF,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAA;IACxB,CAAC;IAED,UAAU;QACR,OAAO;YACL,MAAM,EAAE,GAAG,EAAE,CACX,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;SACnF,CAAA;IACH,CAAC;IAED,iBAAiB;QACf,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACpC,CAAC;IAED,kFAAkF;IAClF,gFAAgF;IAChF,uBAAuB;QACrB,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC5B,CAAC;CACF;AAED,oFAAoF;AACpF,MAAM,uBAAuB;IAC3B,MAAM,CAAC,SAA4B;QACjC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;IAC1B,CAAC;IACD,eAAe,CAAC,QAAgB;QAC9B,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IAC3B,CAAC;CACF;AAED,MAAM,gBAAgB,GAAgB;IACpC,IAAI,EAAE,CAAC,MAAe,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;CACjF,CAAA;AAED,MAAM,UAAU,GAAU,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAA;AAEnD,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO;QACL,aAAa,EAAE,UAAU,GAAG,EAAE;QAC9B,MAAM,EAAE,6BAA6B;QACrC,sBAAsB,EAAE,YAAY;QACpC,YAAY,EAAE,aAAa;KAC5B,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,eAAgB,SAAQ,iBAAiB;IAG1B,GAAG;IAOH,aAAa;IAThC,YACE,IAAwD,EACvC,GAAW;IAC5B;;;;;OAKG;IACc,aAA8C;QAE/D,KAAK,CAAC,IAAI,CAAC,CAAA;mBATM,GAAG;6BAOH,aAAa;IAGhC,CAAC;IAEQ,KAAK,CAAC,qBAAqB,CAAC,cAAsB;QACzD,wFAAwF;QACxF,yFAAyF;QACzF,0FAA0F;QAC1F,sFAAsF;QACtF,0FAA0F;QAC1F,kFAAkF;QAClF,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACnE,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,cAAc,EAAE,SAAS,EAAE,KAAc,EAAE,CAAC,CAAC;YAC9E,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAA;IACH,CAAC;IAED,qFAAqF;IACrF,+EAA+E;IAC/E,sFAAsF;IACtF,qFAAqF;IACrF,uFAAuF;IACvF,qFAAqF;IACrF,yFAAyF;IACzF,qFAAqF;IACrF,mFAAmF;IAC1E,KAAK,CAAC,uBAAuB,CACpC,cAAsB,EACtB,KAAa,EACb,IAAI,GAAuB,EAAE;QAE7B,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACpC,IAAI,CAAC,CAAC;YAAE,OAAO,EAAE,CAAA;QACjB,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,CAAC,CAAA;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa;YAC9B,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAC1B,QAAQ,EACR,QAAQ,EACR,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CACrE;YACH,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAA;QAC5D,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;QACrF,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;IACvE,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAsB;IAC1D,MAAM,QAAQ,GAAe,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAA;IACtF,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAAA;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAA;IACzB,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,wBAAwB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC7F,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,OAAO,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACxE,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,QAAQ,CAAA;QAC5B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAmD,CAAA;QACjF,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;YACnD,YAAY,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;YAC9B,UAAU,EAAE,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM;SACnE,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAA;IACjB,CAAC;AACH,CAAC;AAYD;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAGhC;IACC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAA;IAC5F,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,2DAA2D;SACpE,CAAA;IACH,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,GAAG,CAAC,MAAM,wBAAwB,EAAE,CAAA;IAC/F,CAAC;IACD,6FAA6F;IAC7F,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;SACrC,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAA;IAClB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA,CAAC,2CAA2C;IACzF,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;IACpE,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC;QACzB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE;QACd,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,CAAA;AACjE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAsB,EACtB,IAAI,GAAqD,EAAE;IAE3D,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAAA;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAA;IAC1B,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,wBAAwB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC7F,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAA;IACvC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,CAAA;IAC1E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,OAAO,EAAE;YAC3C,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC;YACxB,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAA;QACF,OAAO,gBAAgB,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAA;IAClG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA,CAAC,qDAAqD;IACxE,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAA;IACrB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAwB;IAC9D,IAAI,OAAO,CAAC,EAAE;QAAE,OAAO,SAAS,CAAA;IAChC,MAAM,IAAI,GACR,wFAAwF;QACxF,4BAA4B,oBAAoB,EAAE,oCAAoC,CAAA;IACxF,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACrC,OAAO,uDAAuD,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAA;IACtG,CAAC;IACD,OAAO,kDAAkD,OAAO,CAAC,MAAM,OAAO,IAAI,EAAE,CAAA;AACtF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kCAAkC,CAChD,GAAsB,EACtB,GAAW,EACX,IAAI,GAAqD,EAAE;IAE3D,KAAK,aAAa,CAAC,GAAG,EAAE,iBAAiB,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAC/C,MAAM,OAAO,GAAG,uBAAuB,CAAC,OAAO,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;QAChE,IAAI,OAAO;YAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,IAAI,EAAE,wBAAwB;QAC9B,UAAU,EAAE,KAAK;KAClB,CAAC,CAAA;IACF,OAAO,6DAA6D,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAA;AACzF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAsB;IAI7D,MAAM,aAAa,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,wBAAwB,CAAA;IAC7E,MAAM,aAAa,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,SAAS,CAAA;IAC9D,MAAM,QAAQ,GAAwB;QACpC,MAAM,EAAE;YACN,QAAQ,EAAE,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;YAChE,eAAe,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,SAAS;SACrD;QACD,MAAM,EAAE;YACN,QAAQ,EAAE,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;YAChE,eAAe,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,SAAS;SACrD;KACF,CAAA;IACD,MAAM,UAAU,GAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAmB,CAAC,MAAM,CAChE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,eAAe,CACpC,CAAA;IACD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAA;AACjC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,GAAsB,EACtB,aAA8C;IAE9C,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAAA;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAA;IAC1B,MAAM,OAAO,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,wBAAwB,CAAA;IACvE,OAAO,IAAI,eAAe,CACxB;QACE,QAAQ,EAAE,IAAI,sBAAsB,CAAC,GAAG,CAAC;QACzC,mBAAmB,EAAE,IAAI,uBAAuB,EAAE;QAClD,WAAW,EAAE,gBAAgB;QAC7B,KAAK,EAAE,UAAU;QACjB,OAAO;KACR,EACD,GAAG,EACH,aAAa,CACd,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,2BAA2B,CACzC,GAAsB,EACtB,WAA2B;IAE3B,MAAM,OAAO,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,wBAAwB,CAAA;IACvE,OAAO,IAAI,iBAAiB,CAAC;QAC3B,QAAQ,EAAE,WAAW;QACrB,mBAAmB,EAAE,IAAI,uBAAuB,EAAE;QAClD,WAAW,EAAE,gBAAgB;QAC7B,KAAK,EAAE,UAAU;QACjB,OAAO;KACR,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAsB;IAC5D,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAAA;IAClC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAA;IAC1B,MAAM,OAAO,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,sBAAsB,CAAA;IACrE,OAAO,uBAAuB,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAA;AACpF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,GAAsB;IAClD,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE;QAAE,OAAO,SAAS,CAAA;IAC7C,MAAM,OAAO,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAA;IAC3C,IAAI,CAAC,OAAO;QAAE,OAAO,YAAY,CAAA;IACjC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CAAA;IACrB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAsB;IACxD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAA;IAC/B,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5D,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;QAClB,IAAI,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IACrB,CAAC;IACD,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;IACjC,IAAI,MAAM;QAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAC7B,OAAO,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAC1D,CAAC"}
+{"version":3,"file":"github.js","sourceRoot":"","sources":["../src/github.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAaxC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAEnD,OAAO,EAEL,iBAAiB,EACjB,sBAAsB,EACtB,MAAM,GACP,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,qBAAqB,CAAA;AAG5B,uFAAuF;AACvF,gGAAgG;AAChG,+FAA+F;AAC/F,kDAAkD;AAClD,EAAE;AACF,0FAA0F;AAC1F,iFAAiF;AACjF,+FAA+F;AAC/F,qBAAqB;AACrB,EAAE;AACF,kFAAkF;AAClF,mFAAmF;AACnF,+DAA+D;AAE/D,uFAAuF;AACvF,0FAA0F;AAC1F,8FAA8F;AAC9F,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,UAAU,CAAU,CAAA;AAEtD;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,WAAW,EAAE,wBAAwB;QACrC,MAAM,EAAE,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;KACnC,CAAC,CAAA;IACF,OAAO,0CAA0C,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAA;AACtE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,IAAI,KAAK,CACd,sJAAsJ,CACvJ,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,sBAAsB;IAEJ,YAAY;IADhC,YAAY,GAAG,EAAE,CAAA;IAC1B,YAA6B,YAAsC;4BAAtC,YAAY;IAA6B,CAAC;IAEvE,IAAI;QACF,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAA;IACxB,CAAC;IAED,UAAU;QACR,OAAO;YACL,MAAM,EAAE,GAAG,EAAE,CACX,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;SACnF,CAAA;IACH,CAAC;IAED,iBAAiB;QACf,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,CAAA;QACjC,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAA;IAChF,CAAC;IAED,kFAAkF;IAClF,gFAAgF;IAChF,uBAAuB;QACrB,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC5B,CAAC;CACF;AAED,oFAAoF;AACpF,MAAM,uBAAuB;IAC3B,MAAM,CAAC,SAA4B;QACjC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;IAC1B,CAAC;IACD,eAAe,CAAC,QAAgB;QAC9B,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IAC3B,CAAC;CACF;AAED,MAAM,gBAAgB,GAAgB;IACpC,IAAI,EAAE,CAAC,MAAe,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;CACjF,CAAA;AAED,MAAM,UAAU,GAAU,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAA;AAEnD,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO;QACL,aAAa,EAAE,UAAU,GAAG,EAAE;QAC9B,MAAM,EAAE,6BAA6B;QACrC,sBAAsB,EAAE,YAAY;QACpC,YAAY,EAAE,aAAa;KAC5B,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,eAAgB,SAAQ,iBAAiB;IAG1B,UAAU;IAOV,aAAa;IAThC,YACE,IAAwD,EACvC,UAAoC;IACrD;;;;;OAKG;IACc,aAA8C;QAE/D,KAAK,CAAC,IAAI,CAAC,CAAA;0BATM,UAAU;6BAOV,aAAa;IAGhC,CAAC;IAEQ,KAAK,CAAC,qBAAqB,CAAC,cAAsB;QACzD,wFAAwF;QACxF,yFAAyF;QACzF,0FAA0F;QAC1F,sFAAsF;QACtF,0FAA0F;QAC1F,kFAAkF;QAClF,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAA;QAC7B,IAAI,CAAC,GAAG;YAAE,MAAM,oBAAoB,EAAE,CAAA;QACtC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAA;QAC9D,OAAO;YACL,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,cAAc,EAAE,SAAS,EAAE,KAAc,EAAE,CAAC,CAAC;YAC9E,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAA;IACH,CAAC;IAED,qFAAqF;IACrF,+EAA+E;IAC/E,sFAAsF;IACtF,qFAAqF;IACrF,uFAAuF;IACvF,qFAAqF;IACrF,yFAAyF;IACzF,qFAAqF;IACrF,mFAAmF;IAC1E,KAAK,CAAC,uBAAuB,CACpC,cAAsB,EACtB,KAAa,EACb,IAAI,GAAuB,EAAE;QAE7B,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACpC,IAAI,CAAC,CAAC;YAAE,OAAO,EAAE,CAAA;QACjB,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,CAAC,CAAA;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa;YAC9B,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAC1B,QAAQ,EACR,QAAQ,EACR,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CACrE;YACH,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAA;QAC5D,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;QACrF,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;IACvE,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAsB,EACtB,GAAuB;IAEvB,MAAM,QAAQ,GAAe,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAA;IACtF,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAA;IACzB,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,wBAAwB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC7F,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,OAAO,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACxE,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,QAAQ,CAAA;QAC5B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAmD,CAAA;QACjF,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;YACnD,YAAY,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;YAC9B,UAAU,EAAE,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM;SACnE,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAA;IACjB,CAAC;AACH,CAAC;AAYD;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAGhC;IACC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAA;IAC5F,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,2DAA2D;SACpE,CAAA;IACH,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,GAAG,CAAC,MAAM,wBAAwB,EAAE,CAAA;IAC/F,CAAC;IACD,6FAA6F;IAC7F,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;SACrC,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAA;IAClB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA,CAAC,2CAA2C;IACzF,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;IACpE,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC;QACzB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE;QACd,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,CAAA;AACjE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAsB,EACtB,GAAuB,EACvB,IAAI,GAAqD,EAAE;IAE3D,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAA;IAC1B,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,wBAAwB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC7F,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAA;IACvC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,CAAA;IAC1E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,OAAO,EAAE;YAC3C,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC;YACxB,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAA;QACF,OAAO,gBAAgB,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAA;IAClG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA,CAAC,qDAAqD;IACxE,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAA;IACrB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAwB;IAC9D,IAAI,OAAO,CAAC,EAAE;QAAE,OAAO,SAAS,CAAA;IAChC,MAAM,IAAI,GACR,wFAAwF;QACxF,4BAA4B,oBAAoB,EAAE,wCAAwC;QAC1F,qDAAqD,CAAA;IACvD,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACrC,OAAO,wEAAwE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAA;IACvH,CAAC;IACD,OAAO,mEAAmE,OAAO,CAAC,MAAM,OAAO,IAAI,EAAE,CAAA;AACvG,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kCAAkC,CAChD,GAAsB,EACtB,GAAuB,EACvB,GAAW,EACX,IAAI,GAAqD,EAAE;IAE3D,KAAK,aAAa,CAAC,GAAG,EAAE,iBAAiB,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;QACpD,MAAM,OAAO,GAAG,uBAAuB,CAAC,OAAO,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;QAChE,IAAI,OAAO;YAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAChC,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,IAAI,EAAE,wBAAwB;QAC9B,UAAU,EAAE,KAAK;KAClB,CAAC,CAAA;IACF,OAAO,6DAA6D,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAA;AACzF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CACtC,GAAsB,EACtB,UAAgD;IAEhD,MAAM,aAAa,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,wBAAwB,CAAA;IAC7E,MAAM,aAAa,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,SAAS,CAAA;IAC9D,MAAM,QAAQ,GAAG,CAAC,QAAqB,EAAE,EAAE,CAAC,GAAG,EAAE;QAC/C,MAAM,OAAO,GAAG,UAAU,EAAE,CAAA;QAC5B,OAAO,OAAO,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;IACnE,CAAC,CAAA;IACD,OAAO;QACL,MAAM,EAAE;YACN,QAAQ,EAAE,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;YAChE,eAAe,EAAE,QAAQ,CAAC,QAAQ,CAAC;SACpC;QACD,MAAM,EAAE;YACN,QAAQ,EAAE,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;YAChE,eAAe,EAAE,QAAQ,CAAC,QAAQ,CAAC;SACpC;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CACrC,GAAsB,EACtB,YAAsC,EACtC,aAA8C;IAE9C,MAAM,OAAO,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,wBAAwB,CAAA;IACvE,OAAO,IAAI,eAAe,CACxB;QACE,QAAQ,EAAE,IAAI,sBAAsB,CAAC,YAAY,CAAC;QAClD,mBAAmB,EAAE,IAAI,uBAAuB,EAAE;QAClD,WAAW,EAAE,gBAAgB;QAC7B,KAAK,EAAE,UAAU;QACjB,OAAO;KACR,EACD,YAAY,EACZ,aAAa,CACd,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,2BAA2B,CACzC,GAAsB,EACtB,WAA2B;IAE3B,MAAM,OAAO,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,wBAAwB,CAAA;IACvE,OAAO,IAAI,iBAAiB,CAAC;QAC3B,QAAQ,EAAE,WAAW;QACrB,mBAAmB,EAAE,IAAI,uBAAuB,EAAE;QAClD,WAAW,EAAE,gBAAgB;QAC7B,KAAK,EAAE,UAAU;QACjB,OAAO;KACR,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uBAAuB,CACrC,GAAsB,EACtB,YAAsC;IAEtC,MAAM,OAAO,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,sBAAsB,CAAA;IACrE,OAAO,uBAAuB,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAA;AAC7F,CAAC"}