@dreadkn1ght123/vvp-integration-installer 1.0.0

package/README.md

@@ -0,0 +1,21 @@
+# VVP consumer integration installer
+
+For Node.js 20+ Express + React/Vite projects:
+
+```sh
+npx --yes @dreadkn1ght123/vvp-integration-installer@1.0.0 dry-run --capabilities auth,provisioning
+npx --yes @dreadkn1ght123/vvp-integration-installer@1.0.0 setup --capabilities auth,provisioning
+npx --yes @dreadkn1ght123/vvp-integration-installer@1.0.0 doctor
+```
+
+Setup installs the aligned public `@dreadkn1ght123` packages from the
+consumer's configured npm registry, writes the `iam.vvp/v1` manifest and
+managed Express/React integration, and creates an integrity lockfile with
+lifecycle scripts disabled. It safely migrates legacy `@vvp/*` dependency
+entries to their public names. Reruns are idempotent and preserve the union of
+installed capabilities; modified managed files cause an explicit conflict
+instead of being overwritten.
+
+The installer only reports required secret names. It never reads or prints
+secret values and never registers IAM applications, machine identities, or
+Keycloak clients.

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,25 @@
+#!/usr/bin/env node
+import { doctor, InstallerError, parseCliArgs, setup } from "./index.js";
+const usage = "Usage: vvp-integrate <setup|dry-run|doctor> [--root PATH] [--capabilities auth|provisioning|auth,provisioning]";
+try {
+    const parsed = parseCliArgs(process.argv.slice(2));
+    if (parsed.command === "help") {
+        process.stdout.write(`${usage}\n`);
+    }
+    else if (parsed.command === "doctor") {
+        const result = await doctor(parsed.root);
+        for (const check of result.checks)
+            process.stdout.write(`${check.ok ? "PASS" : "FAIL"} ${check.name}: ${check.message}\n`);
+        process.exitCode = result.ok ? 0 : 1;
+    }
+    else {
+        await setup({ root: parsed.root, capabilities: parsed.capabilities, dryRun: parsed.command === "dry-run",
+            output: (line) => process.stdout.write(`${line}\n`) });
+    }
+}
+catch (error) {
+    const safe = error instanceof InstallerError ? `${error.code}: ${error.message}\n${usage}` : "INSTALLER_FAILED: unexpected error";
+    process.stderr.write(`${safe}\n`);
+    process.exitCode = 1;
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEzE,MAAM,KAAK,GAAG,gHAAgH,CAAC;AAE/H,IAAI,CAAC;IACH,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;IACrC,CAAC;SAAM,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;QAC3H,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,KAAK,SAAS;YACtG,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,MAAM,IAAI,GAAG,KAAK,YAAY,cAAc,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,oCAAoC,CAAC;IAClI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;IAClC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,39 @@
+export type Capability = "auth" | "provisioning";
+export interface InstallerOptions {
+    root: string;
+    capabilities: readonly Capability[];
+    dryRun?: boolean;
+    output?: (line: string) => void;
+    install?: false | ((command: readonly string[], cwd: string) => Promise<void>);
+}
+export interface InstallerResult {
+    changed: readonly string[];
+    unchanged: readonly string[];
+    requiredSecrets: readonly string[];
+}
+export declare class InstallerError extends Error {
+    readonly code: "UNSUPPORTED_STACK" | "MANAGED_FILE_CONFLICT" | "INVALID_CONFIGURATION";
+    constructor(code: "UNSUPPORTED_STACK" | "MANAGED_FILE_CONFLICT" | "INVALID_CONFIGURATION", message: string);
+}
+export type CliOptions = {
+    command: "help";
+} | {
+    command: "doctor";
+    root: string;
+} | {
+    command: "setup" | "dry-run";
+    root: string;
+    capabilities: Capability[];
+};
+export declare function parseCliArgs(args: readonly string[], cwd?: string): CliOptions;
+export declare function setup(options: InstallerOptions): Promise<InstallerResult>;
+export interface DoctorResult {
+    ok: boolean;
+    checks: readonly {
+        name: string;
+        ok: boolean;
+        message: string;
+    }[];
+}
+export declare function doctor(rootInput: string, environment?: NodeJS.ProcessEnv): Promise<DoctorResult>;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,cAAc,CAAC;AACjD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,SAAS,UAAU,EAAE,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IACpE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,OAAO,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;CAChF;AACD,MAAM,WAAW,eAAe;IAAG,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE;AACjI,qBAAa,cAAe,SAAQ,KAAK;IAC3B,QAAQ,CAAC,IAAI,EAAE,mBAAmB,GAAG,uBAAuB,GAAG,uBAAuB;gBAA7E,IAAI,EAAE,mBAAmB,GAAG,uBAAuB,GAAG,uBAAuB,EAAE,OAAO,EAAE,MAAM;CAGpH;AACD,MAAM,MAAM,UAAU,GAClB;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GACnB;IAAE,OAAO,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,OAAO,EAAE,OAAO,GAAG,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,UAAU,EAAE,CAAA;CAAE,CAAC;AAC/E,wBAAgB,YAAY,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,SAAgB,GAAG,UAAU,CAgCrF;AAqUD,wBAAsB,KAAK,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAiG/E;AAED,MAAM,WAAW,YAAY;IAAG,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE;AAChH,wBAAsB,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAAC,YAAY,CAAC,CA4FnH"}

package/dist/index.js

@@ -0,0 +1,597 @@
+import { createHash, randomUUID } from "node:crypto";
+import { spawn } from "node:child_process";
+import { lstat, mkdir, readFile, readdir, realpath, rename, unlink, writeFile } from "node:fs/promises";
+import { dirname, resolve } from "node:path";
+export class InstallerError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "InstallerError";
+    }
+}
+export function parseCliArgs(args, cwd = process.cwd()) {
+    if (args.includes("--help") || args.includes("-h")) {
+        if (args.some((arg) => !["--help", "-h", "setup", "dry-run", "doctor"].includes(arg)))
+            throw new InstallerError("INVALID_CONFIGURATION", "Help does not accept additional options");
+        return { command: "help" };
+    }
+    const command = args[0];
+    if (command !== "setup" && command !== "dry-run" && command !== "doctor")
+        throw new InstallerError("INVALID_CONFIGURATION", "Expected setup, dry-run, doctor, or --help");
+    let root = cwd;
+    let capabilityValue;
+    const seen = new Set();
+    for (let index = 1; index < args.length; index += 2) {
+        const name = args[index];
+        const value = args[index + 1];
+        if ((name !== "--root" && name !== "--capabilities") || !value || value.startsWith("--") || seen.has(name))
+            throw new InstallerError("INVALID_CONFIGURATION", `Invalid or duplicate option: ${name ?? "(missing)"}`);
+        seen.add(name);
+        if (name === "--root")
+            root = value;
+        else
+            capabilityValue = value;
+    }
+    if (command === "doctor") {
+        if (capabilityValue !== undefined)
+            throw new InstallerError("INVALID_CONFIGURATION", "doctor does not accept --capabilities");
+        return { command, root };
+    }
+    if (!capabilityValue)
+        throw new InstallerError("INVALID_CONFIGURATION", "--capabilities is required for setup and dry-run");
+    const values = capabilityValue.split(",");
+    if (values.some((value) => value !== "auth" && value !== "provisioning") || new Set(values).size !== values.length)
+        throw new InstallerError("INVALID_CONFIGURATION", "Capabilities must be auth, provisioning, or auth,provisioning");
+    return { command, root, capabilities: values };
+}
+const versions = {
+    "@dreadkn1ght123/auth-types": "0.2.0", "@dreadkn1ght123/auth-core": "0.2.0",
+    "@dreadkn1ght123/auth-express": "0.2.0", "@dreadkn1ght123/auth-react": "0.2.0",
+    "@dreadkn1ght123/provisioning-client": "1.0.0",
+};
+const authConfiguration = ["VVP_ISSUER", "VVP_CLIENT_ID", "VVP_PUBLIC_ORIGIN"];
+const provisioningConfiguration = ["VVP_PROVISIONING_API_URL", "VVP_PROVISIONING_TOKEN_URL", "VVP_PROVISIONING_CLIENT_ID"];
+const legacyPackages = {
+    "@vvp/auth-types": "@dreadkn1ght123/auth-types",
+    "@vvp/auth-core": "@dreadkn1ght123/auth-core",
+    "@vvp/auth-express": "@dreadkn1ght123/auth-express",
+    "@vvp/auth-react": "@dreadkn1ght123/auth-react",
+    "@vvp/provisioning-client": "@dreadkn1ght123/provisioning-client",
+};
+const marker = /^\/\/ @vvp-managed sha256:([a-f0-9]{64})\n/;
+const mdMarker = /^<!-- @vvp-managed sha256:([a-f0-9]{64}) -->\n/;
+const digest = (value) => createHash("sha256").update(value).digest("hex");
+const managed = (body, markdown = false) => markdown ? `<!-- @vvp-managed sha256:${digest(body)} -->\n${body}` : `// @vvp-managed sha256:${digest(body)}\n${body}`;
+async function existing(path) {
+    try {
+        return await readFile(path, "utf8");
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return undefined;
+        throw error;
+    }
+}
+function isManagedValid(value) {
+    const match = marker.exec(value) ?? mdMarker.exec(value);
+    return !!match && digest(value.slice(match[0].length)) === match[1];
+}
+async function atomicWrite(root, path, value, encoding = "utf8") {
+    await mkdir(dirname(path), { recursive: true });
+    const actualRoot = await realpath(root);
+    const actualParent = await realpath(dirname(path));
+    if (actualParent !== actualRoot && !actualParent.startsWith(`${actualRoot}/`))
+        throw new InstallerError("INVALID_CONFIGURATION", `Refusing to write outside project: ${path}`);
+    try {
+        if ((await lstat(path)).isSymbolicLink())
+            throw new InstallerError("INVALID_CONFIGURATION", `Refusing to replace symlink: ${path}`);
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+    const temporary = `${path}.vvp-${randomUUID()}.tmp`;
+    try {
+        await writeFile(temporary, value, { encoding, mode: 0o600, flag: "wx" });
+        await rename(temporary, path);
+    }
+    catch (error) {
+        await unlink(temporary).catch(() => undefined);
+        throw error;
+    }
+}
+function defaultInstall(command, cwd) {
+    return new Promise((resolvePromise, reject) => {
+        const child = spawn(command[0], command.slice(1), { cwd, stdio: "inherit", shell: false });
+        child.once("error", reject);
+        child.once("exit", (code) => code === 0 ? resolvePromise() : reject(new Error(`Dependency installation exited with ${code}`)));
+    });
+}
+async function installCommand(root) {
+    if (await existing(resolve(root, "pnpm-lock.yaml")))
+        return ["pnpm", "install", "--ignore-scripts"];
+    if (await existing(resolve(root, "yarn.lock")))
+        return ["yarn", "install", "--ignore-scripts"];
+    if (await existing(resolve(root, "bun.lockb")) || await existing(resolve(root, "bun.lock")))
+        return ["bun", "install", "--ignore-scripts"];
+    return ["npm", "install", "--ignore-scripts"];
+}
+async function hasIntegrityLockfile(root) {
+    const pnpm = await existing(resolve(root, "pnpm-lock.yaml"));
+    if (pnpm?.includes("lockfileVersion:") && /\bintegrity:\s+\S+/.test(pnpm))
+        return true;
+    for (const name of ["package-lock.json", "npm-shrinkwrap.json"]) {
+        const source = await existing(resolve(root, name));
+        if (!source)
+            continue;
+        try {
+            const lock = JSON.parse(source);
+            if (typeof lock.lockfileVersion === "number" && lock.packages &&
+                Object.entries(lock.packages).some(([path, value]) => path.startsWith("node_modules/") && typeof value.integrity === "string"))
+                return true;
+        }
+        catch { /* try another supported lockfile */ }
+    }
+    const yarn = await existing(resolve(root, "yarn.lock"));
+    if (yarn && (/^# yarn lockfile v/m.test(yarn) || /^__metadata:/m.test(yarn)) &&
+        (/^\s+integrity\s+\S+/m.test(yarn) || /^\s+checksum:\s+\S+/m.test(yarn)))
+        return true;
+    const bun = await existing(resolve(root, "bun.lock")) ?? await existing(resolve(root, "bun.lockb"));
+    return !!bun && bun.length > 32 && /integrity|sha(256|512)/i.test(bun);
+}
+async function dependencyLockIsReady(root, dependencies) {
+    if (!await hasIntegrityLockfile(root))
+        return false;
+    const lockSources = (await Promise.all([
+        "pnpm-lock.yaml", "package-lock.json", "npm-shrinkwrap.json", "yarn.lock", "bun.lock", "bun.lockb",
+    ].map((name) => existing(resolve(root, name))))).filter((value) => value !== undefined);
+    const combined = lockSources.join("\n");
+    return Object.entries(dependencies)
+        .filter(([name]) => name.startsWith("@dreadkn1ght123/"))
+        .every(([name, specifier]) => combined.includes(name) && combined.includes(specifier));
+}
+async function containsProvisioningImport(path) {
+    try {
+        for (const entry of await readdir(path, { withFileTypes: true })) {
+            const child = resolve(path, entry.name);
+            if (entry.isDirectory()) {
+                if (await containsProvisioningImport(child))
+                    return true;
+            }
+            else if (/\.[cm]?[jt]sx?$/.test(entry.name) &&
+                (await readFile(child, "utf8")).includes("@dreadkn1ght123/provisioning-client"))
+                return true;
+        }
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+    return false;
+}
+const authServer = `import { createVvpAuth, type AuthTransactionStore } from "@dreadkn1ght123/auth-express";
+import type { SessionStore } from "@dreadkn1ght123/auth-core";
+import type { Express } from "express";
+
+export interface VvpSharedStores {
+  sessionStore: SessionStore;
+  transactionStore: AuthTransactionStore;
+}
+
+/** Production must inject persistent shared stores; consume must be atomic. */
+export async function mountVvpAuth(app: Express, stores: VvpSharedStores) {
+  const auth = await createVvpAuth({
+    config: {
+      issuer: required("VVP_ISSUER"),
+      clientId: required("VVP_CLIENT_ID"),
+      clientSecret: required("VVP_CLIENT_SECRET"),
+      publicOrigin: required("VVP_PUBLIC_ORIGIN"),
+      scopes: ["openid", "profile", "email", "vvp-identity"],
+      environment: process.env.NODE_ENV === "production" ? "production" : "development",
+    },
+    ...stores,
+    routes: { basePath: "/auth", start: "start", login: "login", callback: "callback",
+      logout: "logout", signedOut: "signed-out", error: "error" },
+  });
+  app.use(auth.router);
+  app.use(auth.authenticate);
+  return auth;
+}
+function required(name: string): string {
+  const value = process.env[name];
+  if (!value) throw new Error(\`Missing required configuration: \${name}\`);
+  return value;
+}
+`;
+const authClient = `import { VvpAuthBoundary, VvpAuthProvider } from "@dreadkn1ght123/auth-react";
+import type { PropsWithChildren } from "react";
+
+export function VvpAuthenticatedApp({ children }: PropsWithChildren) {
+  return <VvpAuthProvider meUrl="/auth/me" logoutUrl="/auth/logout">
+    <VvpAuthBoundary>{children}</VvpAuthBoundary>
+  </VvpAuthProvider>;
+}
+`;
+const provisioning = `import { randomUUID } from "node:crypto";
+import { Router, type Request } from "express";
+import { createProvisioningClient } from "@dreadkn1ght123/provisioning-client";
+import type { InviteActor, ListActors, MutationContext, ReadContext, UpdateAccess } from "@dreadkn1ght123/provisioning-client";
+
+export interface MachineTokenProvider { getAccessToken(): Promise<string> }
+
+/** Backend facade only. Never return machine tokens or this client to browser code. */
+export function createVvpProvisioning(tokenProvider: MachineTokenProvider) {
+  const baseUrl = process.env.VVP_PROVISIONING_API_URL;
+  if (!baseUrl) throw new Error("Missing required configuration: VVP_PROVISIONING_API_URL");
+  const client = createProvisioningClient({
+    baseUrl,
+    getAccessToken: () => tokenProvider.getAccessToken(),
+  });
+  return {
+    invite: (body: InviteActor, context: MutationContext) => client.invite(body, context),
+    list: (query: ListActors, context: ReadContext) => client.list(query, context),
+    get: (id: string, context: ReadContext) => client.get(id, context),
+    access: (id: string, body: UpdateAccess, context: MutationContext) => client.access(id, body, context),
+    disable: (id: string, reason: string, context: MutationContext) => client.disable(id, reason, context),
+    restore: (id: string, reason: string, context: MutationContext) => client.restore(id, reason, context),
+    resend: (id: string, reason: string, context: MutationContext) => client.resend(id, reason, context),
+  };
+}
+
+type Facade = ReturnType<typeof createVvpProvisioning>;
+const opaqueHeader = /^[A-Za-z0-9._:-]{1,128}$/;
+const correlationId = (request: Request) => {
+  const supplied = request.get("x-correlation-id");
+  return supplied && opaqueHeader.test(supplied) ? supplied : randomUUID();
+};
+const readContext = (request: Request) => ({ correlationId: correlationId(request) });
+const mutationContext = (request: Request, response: import("express").Response): MutationContext | undefined => {
+  const context = readContext(request);
+  const idempotencyKey = request.get("idempotency-key");
+  if (!idempotencyKey || idempotencyKey.length < 16 || !opaqueHeader.test(idempotencyKey)) {
+    response.status(400).json({
+      error: { code: "IDEMPOTENCY_KEY_REQUIRED", message: "A valid Idempotency-Key header is required" },
+      correlationId: context.correlationId,
+    });
+    return undefined;
+  }
+  return { ...context, idempotencyKey };
+};
+
+/** Protected backend CRUD routes. The caller must mount an authorization middleware before this router. */
+export function createVvpProvisioningRouter(facade: Facade) {
+  const router = Router();
+  router.get("/actors", async (req, res) => res.json(await facade.list(req.query as unknown as ListActors, readContext(req))));
+  router.get("/actors/:id", async (req, res) => res.json(await facade.get(req.params.id!, readContext(req))));
+  router.post("/actors", async (req, res) => {
+    const context = mutationContext(req, res);
+    if (context) res.json(await facade.invite(req.body, context));
+  });
+  router.put("/actors/:id/access", async (req, res) => {
+    const context = mutationContext(req, res);
+    if (context) res.json(await facade.access(req.params.id!, req.body, context));
+  });
+  router.post("/actors/:id/disable", async (req, res) => {
+    const context = mutationContext(req, res);
+    if (context) res.json(await facade.disable(req.params.id!, req.body.reason, context));
+  });
+  router.post("/actors/:id/restore", async (req, res) => {
+    const context = mutationContext(req, res);
+    if (context) res.json(await facade.restore(req.params.id!, req.body.reason, context));
+  });
+  router.post("/actors/:id/resend-invitation", async (req, res) => {
+    const context = mutationContext(req, res);
+    if (context) res.json(await facade.resend(req.params.id!, req.body.reason, context));
+  });
+  return router;
+}
+`;
+const serverEntrypoint = (capabilities) => {
+    const auth = capabilities.includes("auth");
+    const provision = capabilities.includes("provisioning");
+    return `import type { Express, RequestHandler } from "express";
+${auth ? 'import { mountVvpAuth, type VvpSharedStores } from "./vvp-auth.js";' : ""}
+${provision ? 'import { createVvpProvisioning, createVvpProvisioningRouter, type MachineTokenProvider } from "./vvp-provisioning.js";' : ""}
+
+export interface VvpIntegrationDependencies {
+  ${auth ? "authStores: VvpSharedStores;" : ""}
+  ${provision ? "machineTokens: MachineTokenProvider;\n  authorizeProvisioning: RequestHandler;" : ""}
+}
+
+/** Call once, before product routes. This is the managed server integration entrypoint. */
+export async function mountVvpIntegration(app: Express, dependencies: VvpIntegrationDependencies) {
+  ${auth ? "const auth = await mountVvpAuth(app, dependencies.authStores);" : ""}
+  ${provision ? "const provisioning = createVvpProvisioning(dependencies.machineTokens);" : ""}
+  ${provision ? 'app.use("/api/vvp", dependencies.authorizeProvisioning, createVvpProvisioningRouter(provisioning));' : ""}
+  return { ${auth ? "auth," : ""} ${provision ? "provisioning," : ""} };
+}
+`;
+};
+const clientEntrypoint = (capabilities) => `import type { PropsWithChildren } from "react";
+${capabilities.includes("auth") ? 'import { VvpAuthenticatedApp } from "./vvp-auth.js";' : ""}
+${capabilities.includes("provisioning") ? 'export { VvpActorsExample } from "./vvp-actors-example.js";' : ""}
+
+/** Use this managed component at the React root. */
+export function VvpIntegrationRoot({ children }: PropsWithChildren) {
+  return ${capabilities.includes("auth") ? "<VvpAuthenticatedApp>{children}</VvpAuthenticatedApp>" : "<>{children}</>"};
+}
+`;
+const provisioningUi = `import { useEffect, useState } from "react";
+
+type SafeActor = { vvpActorId: string; email: string; state: string };
+
+/** Calls only the consumer backend facade. No machine token or provisioning credential reaches React. */
+export function VvpActorsExample() {
+  const [actors, setActors] = useState<readonly SafeActor[]>([]);
+  useEffect(() => {
+    void fetch("/api/vvp/actors", { credentials: "same-origin" })
+      .then((response) => response.ok ? response.json() : Promise.reject(new Error("request failed")))
+      .then((result: { status: string; value?: { items: SafeActor[] } }) => {
+        if (result.status !== "succeeded" || !result.value) throw new Error("provisioning not completed");
+        setActors(result.value.items);
+      });
+  }, []);
+  return <ul>{actors.map((actor) => <li key={actor.vvpActorId}>{actor.email} — {actor.state}</li>)}</ul>;
+}
+`;
+function manifest(capabilities) {
+    const auth = capabilities.includes("auth");
+    const provision = capabilities.includes("provisioning");
+    return {
+        apiVersion: "iam.vvp/v1", kind: "ConsumerIntegration", capabilities: [...capabilities].sort(),
+        stack: { server: "express", client: "react-vite", runtime: "node20" },
+        ...(auth ? { auth: {
+                basePath: "/auth", callbackPath: "/auth/callback", logoutPath: "/auth/logout",
+                signedOutPath: "/auth/signed-out", requiredClientRoles: [],
+                requiredConfiguration: authConfiguration,
+            } } : {}),
+        ...(provision ? { provisioning: { apiVersion: "v1", baseUrlEnvironment: "VVP_PROVISIONING_API_URL",
+                requiredClientRoles: ["provisioning-api:provisioning_admin"],
+                requiredConfiguration: provisioningConfiguration,
+            } } : {}),
+        secrets: [
+            ...(auth ? ["VVP_CLIENT_SECRET"] : []),
+            ...(provision ? ["VVP_PROVISIONING_CLIENT_SECRET"] : []),
+        ],
+        manualRegistration: true,
+    };
+}
+function instructions(capabilities, secrets) {
+    return `# VVP integration (managed)
+
+Capabilities: ${capabilities.join(", ")}.
+
+## Trust boundaries
+- Authentication tokens and provisioning credentials remain on the Express backend.
+- Never call or expose Keycloak Admin API. Never automate IAM client or machine-identity registration.
+- Never print, read, commit, or place secret values in commands. The owner adds these secret names: ${secrets.join(", ") || "none"}.
+- Production auth requires shared persistent session and transaction stores with atomic consume.
+
+## Remaining owner actions
+1. Ask IAM to register exact callback \`<VVP_PUBLIC_ORIGIN>/auth/callback\` and logout URL \`<VVP_PUBLIC_ORIGIN>/auth/signed-out\`.
+2. Ask IAM for the least-privilege roles in \`vvp-integration.json\`.
+3. Add the listed secrets using the deployment secret manager.
+4. Run \`vvp-integrate doctor\`, then the project's test, typecheck, and build commands.
+
+Ambiguous provisioning mutations must be retried with the same body and idempotency key.
+Reconciliation-required results go to IAM operators; do not bypass them.
+`;
+}
+export async function setup(options) {
+    const root = resolve(options.root);
+    const output = options.output ?? (() => undefined);
+    const requested = [...new Set(options.capabilities)];
+    if (!requested.length || requested.some((c) => c !== "auth" && c !== "provisioning"))
+        throw new InstallerError("INVALID_CONFIGURATION", "Select auth, provisioning, or both");
+    const packagePath = resolve(root, "package.json");
+    const rawPackage = await existing(packagePath);
+    if (!rawPackage)
+        throw new InstallerError("UNSUPPORTED_STACK", "No package.json found");
+    let pkg;
+    try {
+        pkg = JSON.parse(rawPackage);
+    }
+    catch {
+        throw new InstallerError("INVALID_CONFIGURATION", "package.json is not valid JSON");
+    }
+    const all = { ...pkg.devDependencies, ...pkg.dependencies };
+    if (!all["express"] || !all["react"] || !all["vite"])
+        throw new InstallerError("UNSUPPORTED_STACK", "Supported stack requires Express + React + Vite");
+    const oldManifest = await existing(resolve(root, "vvp-integration.json"));
+    const oldDigest = await existing(resolve(root, ".vvp/manifest.sha256"));
+    let installed = [];
+    if (oldManifest !== undefined || oldDigest !== undefined) {
+        if (oldManifest === undefined || oldDigest?.trim() !== digest(oldManifest))
+            throw new InstallerError("MANAGED_FILE_CONFLICT", "Refusing to overwrite a modified VVP manifest");
+        try {
+            const parsed = JSON.parse(oldManifest);
+            if (parsed.apiVersion !== "iam.vvp/v1" || parsed.kind !== "ConsumerIntegration" ||
+                !Array.isArray(parsed.capabilities) || parsed.capabilities.some((item) => item !== "auth" && item !== "provisioning"))
+                throw new Error("invalid");
+            installed = parsed.capabilities;
+        }
+        catch {
+            throw new InstallerError("MANAGED_FILE_CONFLICT", "Existing VVP manifest is invalid");
+        }
+    }
+    const capabilities = [...new Set([...installed, ...requested])].sort();
+    const dependencies = { ...pkg.dependencies };
+    const devDependencies = { ...pkg.devDependencies };
+    for (const [legacyName, publicName] of Object.entries(legacyPackages)) {
+        if (dependencies[legacyName] !== undefined || devDependencies[legacyName] !== undefined)
+            dependencies[publicName] = versions[publicName];
+        delete dependencies[legacyName];
+        delete devDependencies[legacyName];
+    }
+    for (const name of capabilities.includes("auth")
+        ? ["@dreadkn1ght123/auth-types", "@dreadkn1ght123/auth-core", "@dreadkn1ght123/auth-express", "@dreadkn1ght123/auth-react"] : [])
+        dependencies[name] = versions[name];
+    if (capabilities.includes("provisioning"))
+        dependencies["@dreadkn1ght123/provisioning-client"] = versions["@dreadkn1ght123/provisioning-client"];
+    const nextPackage = `${JSON.stringify({ ...pkg, dependencies, ...(pkg.devDependencies ? { devDependencies } : {}) }, null, 2)}\n`;
+    const data = manifest(capabilities);
+    const secrets = data.secrets;
+    const manifestSource = `${JSON.stringify(data, null, 2)}\n`;
+    const files = new Map([
+        ["vvp-integration.json", manifestSource],
+        [".vvp/manifest.sha256", `${digest(manifestSource)}\n`],
+        [".replit/agent-vvp.md", managed(instructions(capabilities, secrets), true)],
+        ["src/server/vvp-integration.ts", managed(serverEntrypoint(capabilities))],
+        ["src/client/vvp-integration.tsx", managed(clientEntrypoint(capabilities))],
+        ...(capabilities.includes("auth") ? [
+            ["src/server/vvp-auth.ts", managed(authServer)],
+            ["src/client/vvp-auth.tsx", managed(authClient)],
+        ] : []),
+        ...(capabilities.includes("provisioning") ? [
+            ["src/server/vvp-provisioning.ts", managed(provisioning)],
+            ["src/client/vvp-actors-example.tsx", managed(provisioningUi)],
+        ] : []),
+    ]);
+    const changed = [], unchanged = [];
+    const pending = [];
+    const packageChanged = rawPackage !== nextPackage;
+    if (packageChanged) {
+        files.set("package.json", nextPackage);
+    }
+    for (const [relative, value] of files) {
+        const path = resolve(root, relative);
+        const old = await existing(path);
+        if (old === value) {
+            unchanged.push(relative);
+            continue;
+        }
+        if (old !== undefined && relative !== "package.json" && relative !== "vvp-integration.json" &&
+            relative !== ".vvp/manifest.sha256" && !isManagedValid(old))
+            throw new InstallerError("MANAGED_FILE_CONFLICT", `Refusing to overwrite modified file: ${relative}`);
+        changed.push(relative);
+        pending.push({ relative, path, value });
+    }
+    const command = await installCommand(root);
+    const installRequired = packageChanged || !await dependencyLockIsReady(root, dependencies);
+    if (installRequired) {
+        output("Dependencies use the consumer project's approved npm registry configuration.");
+        output(`${options.dryRun ? "would run" : "run"} ${command.join(" ")}`);
+    }
+    for (const { relative, path, value, encoding } of pending) {
+        output(`${options.dryRun ? "would update" : "update"} ${relative}`);
+        if (!options.dryRun)
+            await atomicWrite(root, path, value, encoding);
+    }
+    if (installRequired) {
+        if (!options.dryRun && options.install !== false)
+            await (options.install ?? defaultInstall)(command, root);
+        if (!options.dryRun && options.install !== false && !await dependencyLockIsReady(root, dependencies))
+            throw new InstallerError("INVALID_CONFIGURATION", "Dependency installation did not create a matching integrity lockfile");
+    }
+    output(`Required secret names: ${secrets.join(", ") || "none"}`);
+    output("IAM application and machine identity registration remain manual.");
+    return { changed, unchanged, requiredSecrets: secrets };
+}
+export async function doctor(rootInput, environment = process.env) {
+    const root = resolve(rootInput);
+    const checks = [];
+    const rawManifest = await existing(resolve(root, "vvp-integration.json"));
+    let data;
+    try {
+        const candidate = rawManifest ? JSON.parse(rawManifest) : undefined;
+        if (candidate && Array.isArray(candidate.capabilities) && candidate.capabilities.length > 0 &&
+            candidate.capabilities.every((item) => item === "auth" || item === "provisioning")) {
+            const expected = manifest(candidate.capabilities);
+            if (JSON.stringify(candidate) === JSON.stringify(expected))
+                data = expected;
+        }
+    }
+    catch { /* safe failure below */ }
+    checks.push({ name: "manifest", ok: !!data, message: data ? "manifest contract is consistent" : "missing or inconsistent v1 manifest" });
+    const storedDigest = await existing(resolve(root, ".vvp/manifest.sha256"));
+    checks.push({ name: "manifest-digest", ok: !!rawManifest && storedDigest?.trim() === digest(rawManifest),
+        message: "managed manifest digest checked" });
+    const rawPackage = await existing(resolve(root, "package.json"));
+    let pkg = {};
+    let packageOk = false;
+    try {
+        const parsed = rawPackage ? JSON.parse(rawPackage) : undefined;
+        packageOk = !!parsed && typeof parsed === "object" && !Array.isArray(parsed);
+        if (packageOk)
+            pkg = parsed;
+    }
+    catch {
+        packageOk = false;
+    }
+    checks.push({ name: "package-json", ok: packageOk, message: packageOk ? "package.json parsed" : "package.json is missing or malformed" });
+    checks.push({ name: "integrity-lockfile", ok: await dependencyLockIsReady(root, pkg.dependencies ?? {}),
+        message: "package-manager integrity lockfile and VVP dependency entries checked" });
+    for (const capability of data?.capabilities ?? []) {
+        const names = capability === "auth"
+            ? ["@dreadkn1ght123/auth-types", "@dreadkn1ght123/auth-core", "@dreadkn1ght123/auth-express", "@dreadkn1ght123/auth-react"]
+            : ["@dreadkn1ght123/provisioning-client"];
+        for (const name of names) {
+            const specifier = pkg.dependencies?.[name];
+            const ok = specifier === versions[name];
+            checks.push({ name: `dependency:${name}`, ok, message: ok ? "aligned" : `expected ${versions[name]}` });
+        }
+    }
+    const expectedFiles = new Map();
+    if (data) {
+        expectedFiles.set(".replit/agent-vvp.md", managed(instructions(data.capabilities, data.secrets), true));
+        expectedFiles.set("src/server/vvp-integration.ts", managed(serverEntrypoint(data.capabilities)));
+        expectedFiles.set("src/client/vvp-integration.tsx", managed(clientEntrypoint(data.capabilities)));
+        if (data.capabilities.includes("auth")) {
+            expectedFiles.set("src/server/vvp-auth.ts", managed(authServer));
+            expectedFiles.set("src/client/vvp-auth.tsx", managed(authClient));
+        }
+        if (data.capabilities.includes("provisioning")) {
+            expectedFiles.set("src/server/vvp-provisioning.ts", managed(provisioning));
+            expectedFiles.set("src/client/vvp-actors-example.tsx", managed(provisioningUi));
+        }
+    }
+    for (const [name, expected] of expectedFiles) {
+        checks.push({ name: `managed-file:${name}`, ok: await existing(resolve(root, name)) === expected,
+            message: "managed file content and digest checked" });
+    }
+    if (data?.capabilities.includes("auth")) {
+        const origin = environment["VVP_PUBLIC_ORIGIN"];
+        let originOk = false;
+        try {
+            originOk = !!origin && new URL(origin).origin === origin && (new URL(origin).protocol === "https:" || new URL(origin).hostname === "localhost");
+        }
+        catch { }
+        checks.push({ name: "public-origin", ok: originOk, message: originOk ? "callback and logout origins valid" : "VVP_PUBLIC_ORIGIN must be an HTTPS origin" });
+        let issuerOk = false;
+        try {
+            issuerOk = new URL(environment["VVP_ISSUER"] ?? "").protocol === "https:";
+        }
+        catch { }
+        checks.push({ name: "issuer-url", ok: issuerOk, message: "VVP_ISSUER URL checked without displaying its value" });
+        checks.push({ name: "auth-config", ok: [...authConfiguration, "VVP_CLIENT_SECRET"].every((n) => !!environment[n]),
+            message: "required auth configuration names checked; values are never displayed" });
+        const source = await existing(resolve(root, "src/server/vvp-auth.ts"));
+        const boundary = await existing(resolve(root, "src/client/vvp-auth.tsx"));
+        checks.push({ name: "auth-mount-and-stores", ok: !!source?.includes("mountVvpAuth(app") &&
+                source.includes("AuthTransactionStore") && source.includes("SessionStore"),
+            message: "Express mount and shared store extension points checked" });
+        checks.push({ name: "react-boundary", ok: !!boundary?.includes("VvpAuthProvider") && boundary.includes("VvpAuthBoundary"),
+            message: "React provider and boundary checked" });
+    }
+    if (data?.capabilities.includes("provisioning")) {
+        const facade = await existing(resolve(root, "src/server/vvp-provisioning.ts"));
+        const browserImport = await containsProvisioningImport(resolve(root, "src/client"));
+        checks.push({ name: "backend-boundary", ok: !!facade && !browserImport,
+            message: "provisioning client must exist only under src/server" });
+        let urlsOk = false;
+        try {
+            urlsOk = ["VVP_PROVISIONING_API_URL", "VVP_PROVISIONING_TOKEN_URL"]
+                .every((name) => new URL(environment[name] ?? "").protocol === "https:");
+        }
+        catch { }
+        checks.push({ name: "provisioning-urls", ok: urlsOk, message: "provisioning URLs checked without displaying values" });
+        checks.push({ name: "provisioning-config", ok: [...provisioningConfiguration, "VVP_PROVISIONING_CLIENT_SECRET"].every((n) => !!environment[n]),
+            message: "required provisioning configuration names checked; values are never displayed" });
+        checks.push({ name: "provisioning-facade", ok: !!facade &&
+                ["invite:", "list:", "get:", "access:", "disable:", "restore:", "resend:"].every((operation) => facade.includes(operation)),
+            message: "all backend provisioning operations checked" });
+    }
+    return { ok: checks.every((check) => check.ok), checks };
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACxG,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAS7C,MAAM,OAAO,cAAe,SAAQ,KAAK;IAClB;IAArB,YAAqB,IAA6E,EAAE,OAAe;QACjH,KAAK,CAAC,OAAO,CAAC,CAAC;QADI,SAAI,GAAJ,IAAI,CAAyE;QAChF,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/C,CAAC;CACF;AAKD,MAAM,UAAU,YAAY,CAAC,IAAuB,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IACvE,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACnF,MAAM,IAAI,cAAc,CAAC,uBAAuB,EAAE,yCAAyC,CAAC,CAAC;QAC/F,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAC7B,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,QAAQ;QACtE,MAAM,IAAI,cAAc,CAAC,uBAAuB,EAAE,4CAA4C,CAAC,CAAC;IAClG,IAAI,IAAI,GAAG,GAAG,CAAC;IACf,IAAI,eAAmC,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,gBAAgB,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YACxG,MAAM,IAAI,cAAc,CAAC,uBAAuB,EAAE,gCAAgC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;QAC3G,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,IAAI,KAAK,QAAQ;YAAE,IAAI,GAAG,KAAK,CAAC;;YAC/B,eAAe,GAAG,KAAK,CAAC;IAC/B,CAAC;IACD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,IAAI,eAAe,KAAK,SAAS;YAC/B,MAAM,IAAI,cAAc,CAAC,uBAAuB,EAAE,uCAAuC,CAAC,CAAC;QAC7F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,IAAI,CAAC,eAAe;QAClB,MAAM,IAAI,cAAc,CAAC,uBAAuB,EAAE,kDAAkD,CAAC,CAAC;IACxG,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,cAAc,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM;QAChH,MAAM,IAAI,cAAc,CAAC,uBAAuB,EAAE,+DAA+D,CAAC,CAAC;IACrH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAsB,EAAE,CAAC;AACjE,CAAC;AAED,MAAM,QAAQ,GAAqC;IACjD,4BAA4B,EAAE,OAAO,EAAE,2BAA2B,EAAE,OAAO;IAC3E,8BAA8B,EAAE,OAAO,EAAE,4BAA4B,EAAE,OAAO;IAC9E,qCAAqC,EAAE,OAAO;CAC/C,CAAC;AACF,MAAM,iBAAiB,GAAG,CAAC,YAAY,EAAE,eAAe,EAAE,mBAAmB,CAAU,CAAC;AACxF,MAAM,yBAAyB,GAAG,CAAC,0BAA0B,EAAE,4BAA4B,EAAE,4BAA4B,CAAU,CAAC;AACpI,MAAM,cAAc,GAAqC;IACvD,iBAAiB,EAAE,4BAA4B;IAC/C,gBAAgB,EAAE,2BAA2B;IAC7C,mBAAmB,EAAE,8BAA8B;IACnD,iBAAiB,EAAE,4BAA4B;IAC/C,0BAA0B,EAAE,qCAAqC;CAClE,CAAC;AACF,MAAM,MAAM,GAAG,4CAA4C,CAAC;AAC5D,MAAM,QAAQ,GAAG,gDAAgD,CAAC;AAClE,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnF,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,QAAQ,GAAG,KAAK,EAAE,EAAE,CACjD,QAAQ,CAAC,CAAC,CAAC,4BAA4B,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,0BAA0B,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;AACzH,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,IAAI,CAAC;QAAC,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAC1D,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AACD,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,OAAO,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC;AACtE,CAAC;AACD,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,IAAY,EAAE,KAAa,EAAE,WAA2B,MAAM;IACrG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,IAAI,YAAY,KAAK,UAAU,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC;QAC3E,MAAM,IAAI,cAAc,CAAC,uBAAuB,EAAE,sCAAsC,IAAI,EAAE,CAAC,CAAC;IAClG,IAAI,CAAC;QACH,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE;YACtC,MAAM,IAAI,cAAc,CAAC,uBAAuB,EAAE,gCAAgC,IAAI,EAAE,CAAC,CAAC;IAC9F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACtE,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,IAAI,QAAQ,UAAU,EAAE,MAAM,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACzE,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AACD,SAAS,cAAc,CAAC,OAA0B,EAAE,GAAW;IAC7D,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5F,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uCAAuC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACjI,CAAC,CAAC,CAAC;AACL,CAAC;AACD,KAAK,UAAU,cAAc,CAAC,IAAY;IACxC,IAAI,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC;IACpG,IAAI,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC;IAC/F,IAAI,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,IAAI,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC;IAC3I,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC;AAChD,CAAC;AACD,KAAK,UAAU,oBAAoB,CAAC,IAAY;IAC9C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC7D,IAAI,IAAI,EAAE,QAAQ,CAAC,kBAAkB,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACvF,KAAK,MAAM,IAAI,IAAI,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,EAAE,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAG7B,CAAC;YACF,IAAI,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ;gBACzD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CACnD,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC9F,CAAC;QAAC,MAAM,CAAC,CAAC,oCAAoC,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;IACxD,IAAI,IAAI,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxE,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1F,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,IAAI,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;IACpG,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE,IAAI,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzE,CAAC;AACD,KAAK,UAAU,qBAAqB,CAClC,IAAY,EACZ,YAA8C;IAE9C,IAAI,CAAC,MAAM,oBAAoB,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,MAAM,WAAW,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC;QACrC,gBAAgB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW;KACnG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IACzG,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC;SAChC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;SACvD,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;AAC3F,CAAC;AACD,KAAK,UAAU,0BAA0B,CAAC,IAAY;IACpD,IAAI,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACjE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,MAAM,0BAA0B,CAAC,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC;YAC3D,CAAC;iBAAM,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBACzC,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,qCAAqC,CAAC;gBAAE,OAAO,IAAI,CAAC;QACnG,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACtE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiClB,CAAC;AACF,MAAM,UAAU,GAAG;;;;;;;;CAQlB,CAAC;AACF,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyEpB,CAAC;AACF,MAAM,gBAAgB,GAAG,CAAC,YAAmC,EAAE,EAAE;IAC/D,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IACxD,OAAO;EACP,IAAI,CAAC,CAAC,CAAC,qEAAqE,CAAC,CAAC,CAAC,EAAE;EACjF,SAAS,CAAC,CAAC,CAAC,wHAAwH,CAAC,CAAC,CAAC,EAAE;;;IAGvI,IAAI,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,EAAE;IAC1C,SAAS,CAAC,CAAC,CAAC,gFAAgF,CAAC,CAAC,CAAC,EAAE;;;;;IAKjG,IAAI,CAAC,CAAC,CAAC,gEAAgE,CAAC,CAAC,CAAC,EAAE;IAC5E,SAAS,CAAC,CAAC,CAAC,yEAAyE,CAAC,CAAC,CAAC,EAAE;IAC1F,SAAS,CAAC,CAAC,CAAC,qGAAqG,CAAC,CAAC,CAAC,EAAE;aAC7G,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE;;CAEnE,CAAC;AACF,CAAC,CAAC;AACF,MAAM,gBAAgB,GAAG,CAAC,YAAmC,EAAE,EAAE,CAAC;EAChE,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,sDAAsD,CAAC,CAAC,CAAC,EAAE;EAC3F,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,6DAA6D,CAAC,CAAC,CAAC,EAAE;;;;WAIjG,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,uDAAuD,CAAC,CAAC,CAAC,iBAAiB;;CAErH,CAAC;AACF,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;CAiBtB,CAAC;AAEF,SAAS,QAAQ,CAAC,YAAmC;IACnD,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IACxD,OAAO;QACL,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,qBAAqB,EAAE,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE;QAC7F,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE;QACrE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;gBACjB,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,UAAU,EAAE,cAAc;gBAC7E,aAAa,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,EAAE;gBAC1D,qBAAqB,EAAE,iBAAiB;aACzC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACT,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,kBAAkB,EAAE,0BAA0B;gBAChG,mBAAmB,EAAE,CAAC,qCAAqC,CAAC;gBAC5D,qBAAqB,EAAE,yBAAyB;aACjD,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACT,OAAO,EAAE;YACP,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD;QACD,kBAAkB,EAAE,IAAI;KACzB,CAAC;AACJ,CAAC;AACD,SAAS,YAAY,CAAC,YAAmC,EAAE,OAA0B;IACnF,OAAO;;gBAEO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;sGAK+D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM;;;;;;;;;;;CAWjI,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,OAAyB;IACnD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,cAAc,CAAC;QAClF,MAAM,IAAI,cAAc,CAAC,uBAAuB,EAAE,oCAAoC,CAAC,CAAC;IAC1F,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,cAAc,CAAC,mBAAmB,EAAE,uBAAuB,CAAC,CAAC;IACxF,IAAI,GAAgH,CAAC;IACrH,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAe,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QACzD,MAAM,IAAI,cAAc,CAAC,uBAAuB,EAAE,gCAAgC,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,GAAG,GAAG,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC;IAC5D,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;QAClD,MAAM,IAAI,cAAc,CAAC,mBAAmB,EAAE,iDAAiD,CAAC,CAAC;IACnG,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACxE,IAAI,SAAS,GAAiB,EAAE,CAAC;IACjC,IAAI,WAAW,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACzD,IAAI,WAAW,KAAK,SAAS,IAAI,SAAS,EAAE,IAAI,EAAE,KAAK,MAAM,CAAC,WAAW,CAAC;YACxE,MAAM,IAAI,cAAc,CAAC,uBAAuB,EAAE,+CAA+C,CAAC,CAAC;QACrG,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAqE,CAAC;YAC3G,IAAI,MAAM,CAAC,UAAU,KAAK,YAAY,IAAI,MAAM,CAAC,IAAI,KAAK,qBAAqB;gBAC3E,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,cAAc,CAAC;gBACvH,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;YAC7B,SAAS,GAAG,MAAM,CAAC,YAA4B,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,cAAc,CAAC,uBAAuB,EAAE,kCAAkC,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IACD,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAkB,CAAC;IACvF,MAAM,YAAY,GAAG,EAAE,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC;IAC7C,MAAM,eAAe,GAAG,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;IACnD,KAAK,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QACtE,IAAI,YAAY,CAAC,UAAU,CAAC,KAAK,SAAS,IAAI,eAAe,CAAC,UAAU,CAAC,KAAK,SAAS;YACrF,YAAY,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAE,CAAC;QACnD,OAAO,YAAY,CAAC,UAAU,CAAC,CAAC;QAChC,OAAO,eAAe,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC9C,CAAC,CAAC,CAAC,4BAA4B,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,4BAA4B,CAAC,CAAC,CAAC,CAAC,EAAE;QAChI,YAAY,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAE,CAAC;IACvC,IAAI,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC;QACvC,YAAY,CAAC,qCAAqC,CAAC,GAAG,QAAQ,CAAC,qCAAqC,CAAE,CAAC;IACzG,MAAM,WAAW,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAClI,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,MAAM,cAAc,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAC5D,MAAM,KAAK,GAAG,IAAI,GAAG,CAAiB;QACpC,CAAC,sBAAsB,EAAE,cAAc,CAAC;QACxC,CAAC,sBAAsB,EAAE,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC;QACvD,CAAC,sBAAsB,EAAE,OAAO,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;QAC5E,CAAC,+BAA+B,EAAE,OAAO,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC;QAC1E,CAAC,gCAAgC,EAAE,OAAO,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC;QAC3E,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAClC,CAAC,wBAAwB,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;YAC/C,CAAC,yBAAyB,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;SAC3B,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;YAC1C,CAAC,gCAAgC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;YACzD,CAAC,mCAAmC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;SACzC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9B,CAAC,CAAC;IACH,MAAM,OAAO,GAAa,EAAE,EAAE,SAAS,GAAa,EAAE,CAAC;IACvD,MAAM,OAAO,GAAmF,EAAE,CAAC;IACnG,MAAM,cAAc,GAAG,UAAU,KAAK,WAAW,CAAC;IAClD,IAAI,cAAc,EAAE,CAAC;QAAC,KAAK,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IAAC,CAAC;IAC/D,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;YAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC1D,IAAI,GAAG,KAAK,SAAS,IAAI,QAAQ,KAAK,cAAc,IAAI,QAAQ,KAAK,sBAAsB;YACvF,QAAQ,KAAK,sBAAsB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;YAC7D,MAAM,IAAI,cAAc,CAAC,uBAAuB,EAAE,wCAAwC,QAAQ,EAAE,CAAC,CAAC;QACxG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,eAAe,GAAG,cAAc,IAAI,CAAC,MAAM,qBAAqB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC3F,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,CAAC,8EAA8E,CAAC,CAAC;QACvF,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,KAAK,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,OAAO,EAAE,CAAC;QAC1D,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,IAAI,QAAQ,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,MAAM,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,eAAe,EAAE,CAAC;QACpB,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK;YAAE,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,cAAc,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC3G,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,MAAM,qBAAqB,CAAC,IAAI,EAAE,YAAY,CAAC;YAClG,MAAM,IAAI,cAAc,CAAC,uBAAuB,EAAE,sEAAsE,CAAC,CAAC;IAC9H,CAAC;IACD,MAAM,CAAC,0BAA0B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;IACjE,MAAM,CAAC,kEAAkE,CAAC,CAAC;IAC3E,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC;AAC1D,CAAC;AAGD,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,SAAiB,EAAE,cAAiC,OAAO,CAAC,GAAG;IAC1F,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,MAAM,GAAqD,EAAE,CAAC;IACpE,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAC1E,IAAI,IAA6C,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAA+B,CAAC,CAAC,CAAC,SAAS,CAAC;QAClG,IAAI,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,SAAS,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;YACvF,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,cAAc,CAAC,EAAE,CAAC;YACvF,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,YAA4B,CAAC,CAAC;YAClE,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;gBAAE,IAAI,GAAG,QAAQ,CAAC;QAC9E,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,wBAAwB,CAAC,CAAC;IACpC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,qCAAqC,EAAE,CAAC,CAAC;IACzI,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAC3E,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC,CAAC,WAAW,IAAI,YAAY,EAAE,IAAI,EAAE,KAAK,MAAM,CAAC,WAAW,CAAC;QACtG,OAAO,EAAE,iCAAiC,EAAE,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC;IACjE,IAAI,GAAG,GAA8C,EAAE,CAAC;IACxD,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,SAAS,GAAG,CAAC,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7E,IAAI,SAAS;YAAE,GAAG,GAAG,MAAoB,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QAAC,SAAS,GAAG,KAAK,CAAC;IAAC,CAAC;IAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,sCAAsC,EAAE,CAAC,CAAC;IAC1I,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,EAAE,MAAM,qBAAqB,CAAC,IAAI,EAAE,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;QACrG,OAAO,EAAE,uEAAuE,EAAE,CAAC,CAAC;IACtF,KAAK,MAAM,UAAU,IAAI,IAAI,EAAE,YAAY,IAAI,EAAE,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,UAAU,KAAK,MAAM;YACjC,CAAC,CAAC,CAAC,4BAA4B,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,4BAA4B,CAAC;YAC3H,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC;QAC5C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,EAAE,GAAG,SAAS,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAChD,IAAI,IAAI,EAAE,CAAC;QACT,aAAa,CAAC,GAAG,CAAC,sBAAsB,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QACxG,aAAa,CAAC,GAAG,CAAC,+BAA+B,EAAE,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACjG,aAAa,CAAC,GAAG,CAAC,gCAAgC,EAAE,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAClG,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,aAAa,CAAC,GAAG,CAAC,wBAAwB,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;YACjE,aAAa,CAAC,GAAG,CAAC,yBAAyB,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/C,aAAa,CAAC,GAAG,CAAC,gCAAgC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;YAC3E,aAAa,CAAC,GAAG,CAAC,mCAAmC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,aAAa,EAAE,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,QAAQ;YAC9F,OAAO,EAAE,yCAAyC,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,WAAW,CAAC,mBAAmB,CAAC,CAAC;QAChD,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC;YAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACjK,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,2CAA2C,EAAE,CAAC,CAAC;QAC5J,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC;YAAC,QAAQ,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QAC3F,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC,CAAC;QAClH,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,GAAG,iBAAiB,EAAE,mBAAmB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YAC/G,OAAO,EAAE,uEAAuE,EAAE,CAAC,CAAC;QACtF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC,CAAC;QACvE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC,CAAC;QAC1E,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,kBAAkB,CAAC;gBACrF,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC;YAC5E,OAAO,EAAE,yDAAyD,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YACvH,OAAO,EAAE,qCAAqC,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,gCAAgC,CAAC,CAAC,CAAC;QAC/E,MAAM,aAAa,GAAG,MAAM,0BAA0B,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;QACpF,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa;YACpE,OAAO,EAAE,sDAAsD,EAAE,CAAC,CAAC;QACrE,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,0BAA0B,EAAE,4BAA4B,CAAC;iBAChE,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC,CAAC;QACvH,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,EAAE,EAAE,CAAC,GAAG,yBAAyB,EAAE,gCAAgC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YAC5I,OAAO,EAAE,+EAA+E,EAAE,CAAC,CAAC;QAC9F,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM;gBACrD,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC7H,OAAO,EAAE,6CAA6C,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;AAC3D,CAAC"}

package/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "@dreadkn1ght123/vvp-integration-installer",
+  "version": "1.0.0",
+  "description": "Idempotent VVP integration installer for Express and React/Vite",
+  "type": "module",
+  "bin": {
+    "vvp-integrate": "./dist/cli.js"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "devDependencies": {
+    "@types/express": "^5.0.3",
+    "@types/node": "^22.15.0",
+    "@types/supertest": "^6.0.3",
+    "express": "^5.1.0",
+    "supertest": "^7.1.4",
+    "@dreadkn1ght123/provisioning-client": "^1.0.0"
+  },
+  "scripts": {
+    "build": "tsc -b",
+    "typecheck": "tsc -b --pretty false",
+    "test": "vitest run --root ../.. packages/integration-installer/src/installer.test.ts"
+  }
+}