@empire-builder-kit/nx 1.0.0-beta.10

package/src/executors/dev-setup/dev-setup.js

@@ -0,0 +1,454 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const devkit_1 = require("@nx/devkit");
+const node_child_process_1 = require("node:child_process");
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const gateway_js_1 = require("../../local-dev/gateway.js");
+const tls_js_1 = require("../../local-dev/tls.js");
+const portless_js_1 = require("../../local-dev/portless.js");
+const identity_js_1 = require("../../local-dev/identity.js");
+function stopGateway(pidPath) {
+    if (!(0, node_fs_1.existsSync)(pidPath))
+        return;
+    const pid = Number((0, node_fs_1.readFileSync)(pidPath, 'utf8').trim());
+    if (Number.isInteger(pid) && pid > 1) {
+        try {
+            process.kill(pid, 'SIGTERM');
+        }
+        catch {
+            // A stale pid file is safe to remove.
+        }
+    }
+    (0, node_fs_1.rmSync)(pidPath, { force: true });
+}
+function gatewayIsRunning(pidPath) {
+    if (!(0, node_fs_1.existsSync)(pidPath))
+        return false;
+    const pid = Number((0, node_fs_1.readFileSync)(pidPath, 'utf8').trim());
+    if (!Number.isInteger(pid) || pid <= 1)
+        return false;
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        (0, node_fs_1.rmSync)(pidPath, { force: true });
+        return false;
+    }
+}
+function certificateSha1(certificate) {
+    return new node_crypto_1.X509Certificate((0, node_fs_1.readFileSync)(certificate)).fingerprint.replace(/:/g, '');
+}
+function writeGatewayState(path, value) {
+    (0, node_fs_1.writeFileSync)(path, `${JSON.stringify({
+        ...value,
+        platform: process.platform,
+        schemaVersion: 1,
+    }, null, 2)}\n`, { mode: 0o600 });
+}
+function trustRoot(certificate) {
+    const fingerprint = certificateSha1(certificate);
+    if ((0, node_os_1.platform)() === 'darwin') {
+        try {
+            const output = (0, node_child_process_1.execFileSync)('security', [
+                'find-certificate',
+                '-a',
+                '-Z',
+                '-c',
+                'Empire Builder Kit Local Root',
+                (0, node_path_1.join)((0, node_os_1.homedir)(), 'Library', 'Keychains', 'login.keychain-db'),
+            ], { encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] });
+            if (output.toUpperCase().includes(fingerprint))
+                return;
+        }
+        catch {
+            // The exact EBK root is not installed yet.
+        }
+        (0, node_child_process_1.execFileSync)('security', [
+            'add-trusted-cert',
+            '-d',
+            '-r',
+            'trustRoot',
+            '-k',
+            (0, node_path_1.join)((0, node_os_1.homedir)(), 'Library', 'Keychains', 'login.keychain-db'),
+            certificate,
+        ], { stdio: 'inherit' });
+        return;
+    }
+    if ((0, node_os_1.platform)() === 'win32') {
+        try {
+            (0, node_child_process_1.execFileSync)('certutil', ['-user', '-store', 'Root', fingerprint], {
+                stdio: 'pipe',
+            });
+            return;
+        }
+        catch {
+            // The exact EBK root is not installed yet.
+        }
+        (0, node_child_process_1.execFileSync)('certutil', ['-user', '-addstore', 'Root', certificate], {
+            stdio: 'inherit',
+        });
+        return;
+    }
+    const nssDatabase = (0, node_path_1.join)((0, node_os_1.homedir)(), '.pki', 'nssdb');
+    if (!(0, node_fs_1.existsSync)(nssDatabase)) {
+        throw new Error(`Linux browser trust requires an existing NSS database at ${nssDatabase}. Install certutil and initialize the database, then rerun dev-setup --trust. System trust remains distribution-managed.`);
+    }
+    try {
+        const installed = (0, node_child_process_1.execFileSync)('certutil', [
+            '-d',
+            `sql:${nssDatabase}`,
+            '-L',
+            '-n',
+            'Empire Builder Kit Local Root',
+            '-a',
+        ], { encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] });
+        if (new node_crypto_1.X509Certificate(installed).fingerprint.replace(/:/g, '') ===
+            fingerprint) {
+            return;
+        }
+        throw new Error('The NSS nickname Empire Builder Kit Local Root belongs to a different certificate; remove it deliberately before trusting this root.');
+    }
+    catch (error) {
+        if (error instanceof Error &&
+            error.message.includes('belongs to a different certificate')) {
+            throw error;
+        }
+    }
+    (0, node_child_process_1.execFileSync)('certutil', [
+        '-d',
+        `sql:${nssDatabase}`,
+        '-A',
+        '-t',
+        'C,,',
+        '-n',
+        'Empire Builder Kit Local Root',
+        '-i',
+        certificate,
+    ], { stdio: 'inherit' });
+}
+function untrustRoot(certificate) {
+    const fingerprint = certificateSha1(certificate);
+    if ((0, node_os_1.platform)() === 'darwin') {
+        let installed = '';
+        try {
+            installed = (0, node_child_process_1.execFileSync)('security', [
+                'find-certificate',
+                '-a',
+                '-Z',
+                '-c',
+                'Empire Builder Kit Local Root',
+                (0, node_path_1.join)((0, node_os_1.homedir)(), 'Library', 'Keychains', 'login.keychain-db'),
+            ], { encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] });
+        }
+        catch {
+            return false;
+        }
+        if (!installed.toUpperCase().includes(fingerprint))
+            return false;
+        (0, node_child_process_1.execFileSync)('security', [
+            'delete-certificate',
+            '-Z',
+            fingerprint,
+            (0, node_path_1.join)((0, node_os_1.homedir)(), 'Library', 'Keychains', 'login.keychain-db'),
+        ], { stdio: 'inherit' });
+        return true;
+    }
+    if ((0, node_os_1.platform)() === 'win32') {
+        try {
+            (0, node_child_process_1.execFileSync)('certutil', ['-user', '-store', 'Root', fingerprint], {
+                stdio: 'pipe',
+            });
+        }
+        catch {
+            return false;
+        }
+        (0, node_child_process_1.execFileSync)('certutil', ['-user', '-delstore', 'Root', fingerprint], {
+            stdio: 'inherit',
+        });
+        return true;
+    }
+    const nssDatabase = (0, node_path_1.join)((0, node_os_1.homedir)(), '.pki', 'nssdb');
+    let installed;
+    try {
+        installed = (0, node_child_process_1.execFileSync)('certutil', [
+            '-d',
+            `sql:${nssDatabase}`,
+            '-L',
+            '-n',
+            'Empire Builder Kit Local Root',
+            '-a',
+        ], { encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] });
+    }
+    catch {
+        return false;
+    }
+    if (new node_crypto_1.X509Certificate(installed).fingerprint.replace(/:/g, '') !== fingerprint) {
+        return false;
+    }
+    (0, node_child_process_1.execFileSync)('certutil', ['-d', `sql:${nssDatabase}`, '-D', '-n', 'Empire Builder Kit Local Root'], { stdio: 'inherit' });
+    return true;
+}
+async function waitForGatewayStart(pidPath, socketPath, capability, timeoutMs = 3_000) {
+    const deadline = Date.now() + timeoutMs;
+    let lastError;
+    while (Date.now() < deadline) {
+        if (gatewayIsRunning(pidPath)) {
+            try {
+                await (0, gateway_js_1.sendGatewayCommand)(socketPath, { action: 'status', capability });
+                return;
+            }
+            catch (error) {
+                lastError = error;
+            }
+        }
+        await new Promise((resolve) => setTimeout(resolve, 100));
+    }
+    throw new Error(`EBK gateway did not become ready within ${timeoutMs}ms${lastError instanceof Error ? `: ${lastError.message}` : ''}.`);
+}
+async function startGateway(appData, internalPort) {
+    const paths = (0, tls_js_1.localTlsPaths)(appData);
+    const capability = (0, node_fs_1.readFileSync)(paths.capability, 'utf8').trim();
+    const daemon = require.resolve('../../local-dev/gateway-daemon.js');
+    const child = (0, node_child_process_1.spawn)(process.execPath, [daemon, paths.appData, String(internalPort)], {
+        detached: true,
+        stdio: 'ignore',
+        windowsHide: true,
+    });
+    const spawnFailure = new Promise((_resolve, reject) => {
+        child.once('error', reject);
+        child.once('exit', (code, signal) => {
+            reject(new Error(`EBK gateway daemon exited before readiness (code ${code ?? 'none'}, signal ${signal ?? 'none'}).`));
+        });
+    });
+    child.unref();
+    await Promise.race([
+        waitForGatewayStart(paths.gatewayPid, paths.gatewaySocket, capability),
+        spawnFailure,
+    ]);
+}
+function installPortlessForward(plan) {
+    try {
+        (0, portless_js_1.applyPrivilegedCommands)(plan.install);
+    }
+    catch (error) {
+        try {
+            (0, portless_js_1.applyPrivilegedCommands)(plan.remove);
+        }
+        catch (rollbackError) {
+            throw new Error(`${error instanceof Error ? error.message : String(error)} Cleanup of a partially installed loopback forward also failed: ${rollbackError instanceof Error
+                ? rollbackError.message
+                : String(rollbackError)}`);
+        }
+        throw error;
+    }
+}
+const executor = async (options) => {
+    const paths = (0, tls_js_1.localTlsPaths)(options.appData);
+    const forward = (0, portless_js_1.createPortlessForwardPlan)();
+    let previousState;
+    let upgradeBackup;
+    let upgradeStaging;
+    let upgradeStoppedPrevious = false;
+    let previousGatewayWasRunning = false;
+    let upgradeSwapped = false;
+    let previousTrustRemoved = false;
+    let replacementTrustInstalled = false;
+    let replacementForwardInstalled = false;
+    try {
+        if (options.upgrade && !options.trust) {
+            throw new Error('dev-setup --upgrade requires --trust so the explicitly approved replacement root is installed with the new gateway.');
+        }
+        if (options.remove) {
+            const removableRoot = (0, node_fs_1.existsSync)(paths.rootCertificate)
+                ? paths.rootCertificate
+                : undefined;
+            if ((0, node_fs_1.existsSync)(paths.gatewayState)) {
+                const state = JSON.parse((0, node_fs_1.readFileSync)(paths.gatewayState, 'utf8'));
+                if (state.portless) {
+                    (0, portless_js_1.applyPrivilegedCommands)((0, portless_js_1.createPortlessForwardPlan)().remove);
+                }
+            }
+            stopGateway(paths.gatewayPid);
+            if (options.trust && removableRoot && !untrustRoot(removableRoot)) {
+                devkit_1.logger.warn('The exact EBK root was not present in the detected user trust store.');
+            }
+            (0, tls_js_1.removeLocalTlsState)(paths.appData);
+            devkit_1.logger.info('Removed EBK gateway state. Trust was removed only when --trust was supplied.');
+            return { success: true };
+        }
+        if (options.upgrade) {
+            previousGatewayWasRunning = gatewayIsRunning(paths.gatewayPid);
+            if (previousGatewayWasRunning) {
+                const status = await (0, gateway_js_1.sendGatewayCommand)(paths.gatewaySocket, {
+                    action: 'status',
+                    capability: (0, node_fs_1.readFileSync)(paths.capability, 'utf8').trim(),
+                });
+                if (status.activeSessions > 0) {
+                    throw new Error(`Gateway upgrade refused while ${status.activeSessions} fleet session(s) are active. Stop them and retry.`);
+                }
+            }
+            previousState = (0, node_fs_1.existsSync)(paths.gatewayState)
+                ? JSON.parse((0, node_fs_1.readFileSync)(paths.gatewayState, 'utf8'))
+                : undefined;
+            upgradeStaging = `${paths.appData}.upgrade-${process.pid}`;
+            (0, node_fs_1.rmSync)(upgradeStaging, { force: true, recursive: true });
+            (0, tls_js_1.createLocalTlsState)({
+                appData: upgradeStaging,
+                capability: (0, gateway_js_1.createGatewayCapability)(),
+                hostSuffix: options.hostSuffix,
+            });
+            if (previousState?.portless) {
+                (0, portless_js_1.applyPrivilegedCommands)(forward.remove);
+            }
+            stopGateway(paths.gatewayPid);
+            await new Promise((resolve) => setTimeout(resolve, 500));
+            upgradeStoppedPrevious = true;
+            if ((0, node_fs_1.existsSync)(paths.rootCertificate)) {
+                previousTrustRemoved = untrustRoot(paths.rootCertificate);
+            }
+            upgradeBackup = `${paths.appData}.backup-${process.pid}`;
+            (0, node_fs_1.rmSync)(upgradeBackup, { force: true, recursive: true });
+            if ((0, node_fs_1.existsSync)(paths.appData)) {
+                (0, node_fs_1.renameSync)(paths.appData, upgradeBackup);
+            }
+            (0, node_fs_1.renameSync)(upgradeStaging, paths.appData);
+            upgradeStaging = undefined;
+            upgradeSwapped = true;
+        }
+        if (!(0, node_fs_1.existsSync)(paths.rootCertificate)) {
+            (0, tls_js_1.createLocalTlsState)({
+                appData: paths.appData,
+                capability: (0, gateway_js_1.createGatewayCapability)(),
+                hostSuffix: options.hostSuffix,
+            });
+        }
+        const hostSuffix = (0, identity_js_1.normalizeFleetHostSuffix)(options.hostSuffix);
+        const leaf = new node_crypto_1.X509Certificate((0, node_fs_1.readFileSync)(paths.leafCertificate));
+        if (!leaf.checkHost(`gateway.${hostSuffix}`)) {
+            throw new Error(`Existing gateway certificate does not cover *.${hostSuffix}. Use dev-setup --upgrade --trust with the desired hostSuffix.`);
+        }
+        if (options.trust) {
+            trustRoot(paths.rootCertificate);
+            replacementTrustInstalled = options.upgrade === true;
+        }
+        if (gatewayIsRunning(paths.gatewayPid)) {
+            const state = (0, node_fs_1.existsSync)(paths.gatewayState)
+                ? JSON.parse((0, node_fs_1.readFileSync)(paths.gatewayState, 'utf8'))
+                : {};
+            if (state.hostSuffix !== hostSuffix ||
+                Boolean(state.portless) !== Boolean(options.portless)) {
+                const status = await (0, gateway_js_1.sendGatewayCommand)(paths.gatewaySocket, {
+                    action: 'status',
+                    capability: (0, node_fs_1.readFileSync)(paths.capability, 'utf8').trim(),
+                });
+                if (status.activeSessions > 0) {
+                    throw new Error(`Gateway reconfiguration refused while ${status.activeSessions} fleet session(s) are active.`);
+                }
+                if (state.portless)
+                    (0, portless_js_1.applyPrivilegedCommands)(forward.remove);
+                if (options.portless)
+                    installPortlessForward(forward);
+                writeGatewayState(paths.gatewayState, {
+                    hostSuffix,
+                    internalPort: forward.internalPort,
+                    portless: options.portless === true,
+                });
+                devkit_1.logger.info('Reconfigured the idle EBK gateway installation model.');
+                return { success: true };
+            }
+            devkit_1.logger.info('The compatible EBK machine gateway is already running.');
+            return { success: true };
+        }
+        if (options.portless) {
+            installPortlessForward(forward);
+            replacementForwardInstalled = options.upgrade === true;
+        }
+        writeGatewayState(paths.gatewayState, {
+            hostSuffix,
+            internalPort: forward.internalPort,
+            portless: options.portless === true,
+        });
+        try {
+            await startGateway(paths.appData, forward.internalPort);
+        }
+        catch (error) {
+            stopGateway(paths.gatewayPid);
+            (0, node_fs_1.rmSync)(paths.gatewayState, { force: true });
+            if (options.portless && !options.upgrade) {
+                try {
+                    (0, portless_js_1.applyPrivilegedCommands)(forward.remove);
+                }
+                catch (rollbackError) {
+                    devkit_1.logger.error(`Gateway startup failed and the loopback forwarding rule could not be rolled back: ${rollbackError instanceof Error
+                        ? rollbackError.message
+                        : String(rollbackError)}`);
+                }
+            }
+            throw error;
+        }
+        if (upgradeBackup) {
+            (0, node_fs_1.rmSync)(upgradeBackup, { force: true, recursive: true });
+            upgradeBackup = undefined;
+        }
+        devkit_1.logger.info(options.portless
+            ? 'EBK gateway started with a loopback-only port-443 forward.'
+            : `EBK gateway runtime started on internal loopback port ${forward.internalPort}; fleet sessions will use the supported explicit-port HTTPS origin. Optional portless setup requires dev-setup --upgrade --trust --portless.`);
+        if (!options.trust) {
+            devkit_1.logger.warn('The root certificate was created but not trusted. Review it and rerun dev-setup --trust to explicitly approve user trust installation.');
+        }
+        return { success: true };
+    }
+    catch (error) {
+        if (upgradeStaging) {
+            (0, node_fs_1.rmSync)(upgradeStaging, { force: true, recursive: true });
+        }
+        if (options.upgrade && upgradeStoppedPrevious) {
+            try {
+                stopGateway(paths.gatewayPid);
+                if (replacementForwardInstalled || options.portless) {
+                    try {
+                        (0, portless_js_1.applyPrivilegedCommands)(forward.remove);
+                    }
+                    catch (forwardRollbackError) {
+                        devkit_1.logger.warn(`Loopback-forward rollback needs manual verification: ${forwardRollbackError instanceof Error
+                            ? forwardRollbackError.message
+                            : String(forwardRollbackError)}`);
+                    }
+                }
+                if (replacementTrustInstalled && (0, node_fs_1.existsSync)(paths.rootCertificate)) {
+                    untrustRoot(paths.rootCertificate);
+                }
+                if (upgradeBackup && (0, node_fs_1.existsSync)(upgradeBackup)) {
+                    if (upgradeSwapped) {
+                        (0, node_fs_1.rmSync)(paths.appData, { force: true, recursive: true });
+                    }
+                    (0, node_fs_1.renameSync)(upgradeBackup, paths.appData);
+                    upgradeBackup = undefined;
+                }
+                if (previousTrustRemoved && (0, node_fs_1.existsSync)(paths.rootCertificate)) {
+                    trustRoot(paths.rootCertificate);
+                }
+                if (previousState?.portless) {
+                    installPortlessForward(forward);
+                }
+                if (previousState && previousGatewayWasRunning) {
+                    await startGateway(paths.appData, previousState.internalPort ?? forward.internalPort);
+                }
+                devkit_1.logger.warn('The gateway upgrade failed and the previous gateway state was restored.');
+            }
+            catch (rollbackError) {
+                devkit_1.logger.error(`The gateway upgrade failed and rollback also needs manual recovery: ${rollbackError instanceof Error
+                    ? rollbackError.message
+                    : String(rollbackError)}`);
+            }
+        }
+        devkit_1.logger.error(error instanceof Error ? error.message : String(error));
+        return { success: false };
+    }
+};
+exports.default = executor;
+//# sourceMappingURL=dev-setup.js.map

package/src/executors/dev-setup/dev-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-setup.js","sourceRoot":"","sources":["../../../../../../packages/nx/src/executors/dev-setup/dev-setup.ts"],"names":[],"mappings":";;AAAA,uCAA0D;AAC1D,2DAAyD;AACzD,6CAA8C;AAC9C,qCAMiB;AACjB,qCAA4C;AAC5C,yCAAiC;AACjC,2DAGoC;AACpC,mDAIgC;AAChC,6DAIqC;AACrC,6DAAuE;AAWvE,SAAS,WAAW,CAAC,OAAe;IAClC,IAAI,CAAC,IAAA,oBAAU,EAAC,OAAO,CAAC;QAAE,OAAO;IACjC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAA,sBAAY,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;QACxC,CAAC;IACH,CAAC;IACD,IAAA,gBAAM,EAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,IAAI,CAAC,IAAA,oBAAU,EAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAA,sBAAY,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,IAAA,gBAAM,EAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,WAAmB;IAC1C,OAAO,IAAI,6BAAe,CAAC,IAAA,sBAAY,EAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CACvE,IAAI,EACJ,EAAE,CACH,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAY,EACZ,KAIC;IAED,IAAA,uBAAa,EACX,IAAI,EACJ,GAAG,IAAI,CAAC,SAAS,CACf;QACE,GAAG,KAAK;QACR,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,aAAa,EAAE,CAAC;KACjB,EACD,IAAI,EACJ,CAAC,CACF,IAAI,EACL,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,WAAmB;IACpC,MAAM,WAAW,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;IACjD,IAAI,IAAA,kBAAQ,GAAE,KAAK,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAA,iCAAY,EACzB,UAAU,EACV;gBACE,kBAAkB;gBAClB,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,+BAA+B;gBAC/B,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC;aAC7D,EACD,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CACxD,CAAC;YACF,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAAE,OAAO;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,2CAA2C;QAC7C,CAAC;QACD,IAAA,iCAAY,EACV,UAAU,EACV;YACE,kBAAkB;YAClB,IAAI;YACJ,IAAI;YACJ,WAAW;YACX,IAAI;YACJ,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC;YAC5D,WAAW;SACZ,EACD,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;QACF,OAAO;IACT,CAAC;IACD,IAAI,IAAA,kBAAQ,GAAE,KAAK,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,IAAA,iCAAY,EAAC,UAAU,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE;gBACjE,KAAK,EAAE,MAAM;aACd,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAAC,MAAM,CAAC;YACP,2CAA2C;QAC7C,CAAC;QACD,IAAA,iCAAY,EAAC,UAAU,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE;YACpE,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,MAAM,WAAW,GAAG,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACrD,IAAI,CAAC,IAAA,oBAAU,EAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,4DAA4D,WAAW,0HAA0H,CAClM,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAA,iCAAY,EAC5B,UAAU,EACV;YACE,IAAI;YACJ,OAAO,WAAW,EAAE;YACpB,IAAI;YACJ,IAAI;YACJ,+BAA+B;YAC/B,IAAI;SACL,EACD,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CACxD,CAAC;QACF,IACE,IAAI,6BAAe,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YAC5D,WAAW,EACX,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,IAAI,KAAK,CACb,sIAAsI,CACvI,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IACE,KAAK,YAAY,KAAK;YACtB,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,oCAAoC,CAAC,EAC5D,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,IAAA,iCAAY,EACV,UAAU,EACV;QACE,IAAI;QACJ,OAAO,WAAW,EAAE;QACpB,IAAI;QACJ,IAAI;QACJ,KAAK;QACL,IAAI;QACJ,+BAA+B;QAC/B,IAAI;QACJ,WAAW;KACZ,EACD,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,WAAmB;IACtC,MAAM,WAAW,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;IACjD,IAAI,IAAA,kBAAQ,GAAE,KAAK,QAAQ,EAAE,CAAC;QAC5B,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,SAAS,GAAG,IAAA,iCAAY,EACtB,UAAU,EACV;gBACE,kBAAkB;gBAClB,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,+BAA+B;gBAC/B,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC;aAC7D,EACD,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CACxD,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,OAAO,KAAK,CAAC;QACjE,IAAA,iCAAY,EACV,UAAU,EACV;YACE,oBAAoB;YACpB,IAAI;YACJ,WAAW;YACX,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,CAAC;SAC7D,EACD,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAA,kBAAQ,GAAE,KAAK,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,IAAA,iCAAY,EAAC,UAAU,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE;gBACjE,KAAK,EAAE,MAAM;aACd,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAA,iCAAY,EAAC,UAAU,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE;YACpE,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,WAAW,GAAG,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACrD,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,IAAA,iCAAY,EACtB,UAAU,EACV;YACE,IAAI;YACJ,OAAO,WAAW,EAAE;YACpB,IAAI;YACJ,IAAI;YACJ,+BAA+B;YAC/B,IAAI;SACL,EACD,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CACxD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IACE,IAAI,6BAAe,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,WAAW,EAC5E,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAA,iCAAY,EACV,UAAU,EACV,CAAC,IAAI,EAAE,OAAO,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,+BAA+B,CAAC,EACzE,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,OAAe,EACf,UAAkB,EAClB,UAAkB,EAClB,SAAS,GAAG,KAAK;IAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,IAAI,SAAkB,CAAC;IACvB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,IAAA,+BAAkB,EAAC,UAAU,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;gBACvE,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,GAAG,KAAK,CAAC;YACpB,CAAC;QACH,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,IAAI,KAAK,CACb,2CAA2C,SAAS,KAClD,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAC1D,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAe,EAAE,YAAoB;IAC/D,MAAM,KAAK,GAAG,IAAA,sBAAa,EAAC,OAAO,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,IAAA,sBAAY,EAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACjE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,IAAA,0BAAK,EACjB,OAAO,CAAC,QAAQ,EAChB,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,EAC7C;QACE,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,IAAI;KAClB,CACF,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC3D,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAClC,MAAM,CACJ,IAAI,KAAK,CACP,oDAAoD,IAAI,IAAI,MAAM,YAAY,MAAM,IAAI,MAAM,IAAI,CACnG,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,MAAM,OAAO,CAAC,IAAI,CAAC;QACjB,mBAAmB,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,aAAa,EAAE,UAAU,CAAC;QACtE,YAAY;KACb,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAyB;IACvD,IAAI,CAAC;QACH,IAAA,qCAAuB,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,IAAA,qCAAuB,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,aAAa,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,mEACvD,aAAa,YAAY,KAAK;gBAC5B,CAAC,CAAC,aAAa,CAAC,OAAO;gBACvB,CAAC,CAAC,MAAM,CAAC,aAAa,CAC1B,EAAE,CACH,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,QAAQ,GAAqC,KAAK,EAAE,OAAO,EAAE,EAAE;IACnE,MAAM,KAAK,GAAG,IAAA,sBAAa,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAA,uCAAyB,GAAE,CAAC;IAC5C,IAAI,aAES,CAAC;IACd,IAAI,aAAiC,CAAC;IACtC,IAAI,cAAkC,CAAC;IACvC,IAAI,sBAAsB,GAAG,KAAK,CAAC;IACnC,IAAI,yBAAyB,GAAG,KAAK,CAAC;IACtC,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,oBAAoB,GAAG,KAAK,CAAC;IACjC,IAAI,yBAAyB,GAAG,KAAK,CAAC;IACtC,IAAI,2BAA2B,GAAG,KAAK,CAAC;IACxC,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CACb,qHAAqH,CACtH,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,aAAa,GAAG,IAAA,oBAAU,EAAC,KAAK,CAAC,eAAe,CAAC;gBACrD,CAAC,CAAC,KAAK,CAAC,eAAe;gBACvB,CAAC,CAAC,SAAS,CAAC;YACd,IAAI,IAAA,oBAAU,EAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;gBACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,CAEhE,CAAC;gBACF,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;oBACnB,IAAA,qCAAuB,EAAC,IAAA,uCAAyB,GAAE,CAAC,MAAM,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC;YACD,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC9B,IAAI,OAAO,CAAC,KAAK,IAAI,aAAa,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC;gBAClE,eAAM,CAAC,IAAI,CACT,sEAAsE,CACvE,CAAC;YACJ,CAAC;YACD,IAAA,4BAAmB,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACnC,eAAM,CAAC,IAAI,CACT,8EAA8E,CAC/E,CAAC;YACF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,yBAAyB,GAAG,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC/D,IAAI,yBAAyB,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,MAAM,IAAA,+BAAkB,EAEpC,KAAK,CAAC,aAAa,EAAE;oBACtB,MAAM,EAAE,QAAQ;oBAChB,UAAU,EAAE,IAAA,sBAAY,EAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE;iBAC1D,CAAC,CAAC;gBACH,IAAI,MAAM,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;oBAC9B,MAAM,IAAI,KAAK,CACb,iCAAiC,MAAM,CAAC,cAAc,oDAAoD,CAC3G,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,aAAa,GAAG,IAAA,oBAAU,EAAC,KAAK,CAAC,YAAY,CAAC;gBAC5C,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,CAIlD;gBACJ,CAAC,CAAC,SAAS,CAAC;YACd,cAAc,GAAG,GAAG,KAAK,CAAC,OAAO,YAAY,OAAO,CAAC,GAAG,EAAE,CAAC;YAC3D,IAAA,gBAAM,EAAC,cAAc,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,IAAA,4BAAmB,EAAC;gBAClB,OAAO,EAAE,cAAc;gBACvB,UAAU,EAAE,IAAA,oCAAuB,GAAE;gBACrC,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,CAAC,CAAC;YACH,IAAI,aAAa,EAAE,QAAQ,EAAE,CAAC;gBAC5B,IAAA,qCAAuB,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC1C,CAAC;YACD,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC9B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YACzD,sBAAsB,GAAG,IAAI,CAAC;YAC9B,IAAI,IAAA,oBAAU,EAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;gBACtC,oBAAoB,GAAG,WAAW,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YAC5D,CAAC;YACD,aAAa,GAAG,GAAG,KAAK,CAAC,OAAO,WAAW,OAAO,CAAC,GAAG,EAAE,CAAC;YACzD,IAAA,gBAAM,EAAC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,IAAI,IAAA,oBAAU,EAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,IAAA,oBAAU,EAAC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAC3C,CAAC;YACD,IAAA,oBAAU,EAAC,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1C,cAAc,GAAG,SAAS,CAAC;YAC3B,cAAc,GAAG,IAAI,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,IAAA,oBAAU,EAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;YACvC,IAAA,4BAAmB,EAAC;gBAClB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,UAAU,EAAE,IAAA,oCAAuB,GAAE;gBACrC,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,CAAC,CAAC;QACL,CAAC;QACD,MAAM,UAAU,GAAG,IAAA,sCAAwB,EAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,IAAI,6BAAe,CAAC,IAAA,sBAAY,EAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,UAAU,EAAE,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CACb,iDAAiD,UAAU,gEAAgE,CAC5H,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,SAAS,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YACjC,yBAAyB,GAAG,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC;QACvD,CAAC;QACD,IAAI,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,IAAA,oBAAU,EAAC,KAAK,CAAC,YAAY,CAAC;gBAC1C,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,CAGlD;gBACJ,CAAC,CAAC,EAAE,CAAC;YACP,IACE,KAAK,CAAC,UAAU,KAAK,UAAU;gBAC/B,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EACrD,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,IAAA,+BAAkB,EACrC,KAAK,CAAC,aAAa,EACnB;oBACE,MAAM,EAAE,QAAQ;oBAChB,UAAU,EAAE,IAAA,sBAAY,EAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE;iBAC1D,CACF,CAAC;gBACF,IAAI,MAAM,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;oBAC9B,MAAM,IAAI,KAAK,CACb,yCAAyC,MAAM,CAAC,cAAc,+BAA+B,CAC9F,CAAC;gBACJ,CAAC;gBACD,IAAI,KAAK,CAAC,QAAQ;oBAAE,IAAA,qCAAuB,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC5D,IAAI,OAAO,CAAC,QAAQ;oBAAE,sBAAsB,CAAC,OAAO,CAAC,CAAC;gBACtD,iBAAiB,CAAC,KAAK,CAAC,YAAY,EAAE;oBACpC,UAAU;oBACV,YAAY,EAAE,OAAO,CAAC,YAAY;oBAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,IAAI;iBACpC,CAAC,CAAC;gBACH,eAAM,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;gBACrE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC3B,CAAC;YACD,eAAM,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;YACtE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,sBAAsB,CAAC,OAAO,CAAC,CAAC;YAChC,2BAA2B,GAAG,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC;QACzD,CAAC;QACD,iBAAiB,CAAC,KAAK,CAAC,YAAY,EAAE;YACpC,UAAU;YACV,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,IAAI;SACpC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC9B,IAAA,gBAAM,EAAC,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5C,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBACzC,IAAI,CAAC;oBACH,IAAA,qCAAuB,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAC1C,CAAC;gBAAC,OAAO,aAAa,EAAE,CAAC;oBACvB,eAAM,CAAC,KAAK,CACV,qFACE,aAAa,YAAY,KAAK;wBAC5B,CAAC,CAAC,aAAa,CAAC,OAAO;wBACvB,CAAC,CAAC,MAAM,CAAC,aAAa,CAC1B,EAAE,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,aAAa,EAAE,CAAC;YAClB,IAAA,gBAAM,EAAC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,aAAa,GAAG,SAAS,CAAC;QAC5B,CAAC;QACD,eAAM,CAAC,IAAI,CACT,OAAO,CAAC,QAAQ;YACd,CAAC,CAAC,4DAA4D;YAC9D,CAAC,CAAC,yDAAyD,OAAO,CAAC,YAAY,8IAA8I,CAChO,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACnB,eAAM,CAAC,IAAI,CACT,wIAAwI,CACzI,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,cAAc,EAAE,CAAC;YACnB,IAAA,gBAAM,EAAC,cAAc,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,IAAI,sBAAsB,EAAE,CAAC;YAC9C,IAAI,CAAC;gBACH,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBAC9B,IAAI,2BAA2B,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;oBACpD,IAAI,CAAC;wBACH,IAAA,qCAAuB,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC;oBAC1C,CAAC;oBAAC,OAAO,oBAAoB,EAAE,CAAC;wBAC9B,eAAM,CAAC,IAAI,CACT,wDACE,oBAAoB,YAAY,KAAK;4BACnC,CAAC,CAAC,oBAAoB,CAAC,OAAO;4BAC9B,CAAC,CAAC,MAAM,CAAC,oBAAoB,CACjC,EAAE,CACH,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,IAAI,yBAAyB,IAAI,IAAA,oBAAU,EAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;oBACnE,WAAW,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;gBACrC,CAAC;gBACD,IAAI,aAAa,IAAI,IAAA,oBAAU,EAAC,aAAa,CAAC,EAAE,CAAC;oBAC/C,IAAI,cAAc,EAAE,CAAC;wBACnB,IAAA,gBAAM,EAAC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC1D,CAAC;oBACD,IAAA,oBAAU,EAAC,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;oBACzC,aAAa,GAAG,SAAS,CAAC;gBAC5B,CAAC;gBACD,IAAI,oBAAoB,IAAI,IAAA,oBAAU,EAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;oBAC9D,SAAS,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;gBACnC,CAAC;gBACD,IAAI,aAAa,EAAE,QAAQ,EAAE,CAAC;oBAC5B,sBAAsB,CAAC,OAAO,CAAC,CAAC;gBAClC,CAAC;gBACD,IAAI,aAAa,IAAI,yBAAyB,EAAE,CAAC;oBAC/C,MAAM,YAAY,CAChB,KAAK,CAAC,OAAO,EACb,aAAa,CAAC,YAAY,IAAI,OAAO,CAAC,YAAY,CACnD,CAAC;gBACJ,CAAC;gBACD,eAAM,CAAC,IAAI,CACT,yEAAyE,CAC1E,CAAC;YACJ,CAAC;YAAC,OAAO,aAAa,EAAE,CAAC;gBACvB,eAAM,CAAC,KAAK,CACV,uEACE,aAAa,YAAY,KAAK;oBAC5B,CAAC,CAAC,aAAa,CAAC,OAAO;oBACvB,CAAC,CAAC,MAAM,CAAC,aAAa,CAC1B,EAAE,CACH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,eAAM,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACrE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;AACH,CAAC,CAAC;AAEF,kBAAe,QAAQ,CAAC"}

package/src/executors/dev-setup/schema.json

@@ -0,0 +1,16 @@
+{
+  "$schema": "https://json-schema.org/schema",
+  "version": 2,
+  "title": "Empire Builder Kit local development setup",
+  "description": "Explicitly create, upgrade, trust, or remove per-user EBK HTTPS gateway state.",
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "appData": { "type": "string" },
+    "hostSuffix": { "type": "string", "default": "ebk.localhost" },
+    "portless": { "type": "boolean", "default": false },
+    "remove": { "type": "boolean", "default": false },
+    "trust": { "type": "boolean", "default": false },
+    "upgrade": { "type": "boolean", "default": false }
+  }
+}

package/src/executors/fleet/fleet.d.ts

@@ -0,0 +1,62 @@
+import { type ExecutorContext, type PromiseExecutor } from '@nx/devkit';
+import { type LocalDevAdapter } from '../../local-dev/contracts.js';
+import { sendGatewayCommand, type GatewayRegistrationRequest } from '../../local-dev/gateway.js';
+export interface FleetOptions {
+    appData?: string;
+    developmentRouterUrl?: string;
+    hostSuffix?: string;
+    maxRestartAttempts?: number;
+    profile?: string;
+    region?: string;
+    safeMethodFallback?: boolean;
+    slices: string;
+    sstMode?: 'mono' | 'multiplexer';
+    stage: string;
+}
+export interface FleetPlan {
+    adapters: ReadonlyMap<string, LocalDevAdapter>;
+    hostname: string;
+    id: string;
+    selected: string[];
+    stage: string;
+}
+export declare function formatFleetAwsError(error: unknown, options: Pick<FleetOptions, 'profile' | 'region'>): string;
+export declare function createFleetChildEnvironment(options: Pick<FleetOptions, 'profile' | 'region' | 'sstMode'>, ambient?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+export declare function buildFleetPlan(options: FleetOptions, context: Pick<ExecutorContext, 'projectName' | 'projectsConfigurations' | 'root'>): FleetPlan;
+export declare function probeGatewayTls(options: {
+    ca: string | Buffer;
+    hostname: string;
+    port?: number;
+    timeoutMs?: number;
+}): Promise<void>;
+export interface FleetGatewayPreferenceOptions {
+    capability: string;
+    gatewaySocket: string;
+    gatewayState?: {
+        hostSuffix?: string;
+        portless?: boolean;
+        schemaVersion?: number;
+    };
+    hostSuffix: string;
+    registration: GatewayRegistrationRequest & {
+        action: 'register';
+    };
+    rootCertificate: string | Buffer;
+}
+export declare function evaluatePortlessGateway(options: FleetGatewayPreferenceOptions, dependencies?: {
+    probe?: typeof probeGatewayTls;
+    send?: typeof sendGatewayCommand;
+}): Promise<{
+    portless: boolean;
+    warning?: string;
+}>;
+export declare function fleetRestartDelay(attempt: number): number;
+export declare function planFleetRestart(completedRestartAttempts: number, maxRestartAttempts: number): {
+    restart: false;
+} | {
+    delayMs: number;
+    nextAttempt: number;
+    restart: true;
+};
+declare const executor: PromiseExecutor<FleetOptions>;
+export default executor;