@endora-commerce/cli 0.100.0

package/dist/inputs/resolve.js

@@ -0,0 +1,290 @@
+/**
+ * How a command acquires the values it was not given
+ * (`specs/117-instance-bring-up/contracts/input-resolution.md`, FR-010…FR-015).
+ *
+ * Four tiers, in one fixed order, stopping at the first that answers: an
+ * explicit **flag**, then a **`.env` already placed in the target directory**,
+ * then an interactive **prompt**, then a **refusal**. The order is contract and
+ * is not configurable (R1.1) — a precedence an operator can change is a value
+ * nobody can predict.
+ *
+ * ## `defaulted=0` is made unfakeable by arithmetic, not by discipline
+ *
+ * R2.2 binds the provenance line's `defaulted` count to `0`, and the temptation
+ * is to satisfy that with a counter nothing increments. That is the *fakeable*
+ * construction, and it is fakeable in the precise sense that matters: it prints
+ * `0` because no code path calls it, which is indistinguishable from printing
+ * `0` because nothing was invented. The estate has a name for that shape —
+ * a check that reports what it found and never what it read (issue #244).
+ *
+ * So `defaulted` is a **residue**, not a counter:
+ *
+ * ```
+ * defaulted = resolved.length − (flags + env-file + prompted + generated)
+ * ```
+ *
+ * Two consequences, and both are the point. A value can only enter `resolved`
+ * carrying a {@link Provenance}, which is a closed union of the four tiers, so
+ * inventing one requires a fifth tag and `tsc` refuses it. And if a later author
+ * *does* widen the union and forgets the sum, the arithmetic does not stay
+ * silent — the residue goes non-zero, the line says so on the operator's own
+ * terminal, and the acceptance test fails. The number cannot be right by
+ * accident and cannot be wrong quietly.
+ *
+ * `provenanceCounts` therefore takes the loosest record it can, so a red proof
+ * can hand it a value whose origin is none of the four and watch the residue
+ * appear. That is the whole of the guarantee, and it is one subtraction.
+ *
+ * ## The prompt is a fallback, never a generator
+ *
+ * A prompt exists for a **required** input the first two tiers did not answer.
+ * An optional input is never prompted for (R1.4): the prompt's length is the
+ * required set's length and nothing more, because a tool that asks twelve
+ * questions to save one is not assistance. And nothing here supplies a value of
+ * its own — the one exception is {@link generateSecret}, whose whole class is a
+ * value with no human judgement in it (R4.1).
+ *
+ * ## One module, every command
+ *
+ * R5.3. Two implementations of a precedence order are two orders, and R5.2 is
+ * that one product means one behaviour: a command that resolved inputs
+ * differently from its sibling would be `cli-product.md` R3.3's *"three commands
+ * that happen to share a prefix"* arriving through the input layer instead of
+ * the command layer.
+ */
+import { randomBytes } from 'node:crypto';
+import { isRequiredGiven, scopeToMembers, } from '@endora-commerce/contracts';
+/**
+ * Markers a continuous-integration environment sets.
+ *
+ * A **floor**, not a closed set, and the distinction costs nothing because it is
+ * not what protects the run: conditions 1 and 2 of R3.1 are the TTY tests, and a
+ * pipeline that set none of these still has no terminal on either descriptor. So
+ * an unlisted vendor is a marker this does not know about and a run this still
+ * refuses to prompt in. `CI` alone would very nearly do; the rest are here
+ * because a vendor that sets only its own name costs one entry and a hung
+ * pipeline costs an hour.
+ */
+const CI_MARKERS = [
+    'CI',
+    'CONTINUOUS_INTEGRATION',
+    'GITLAB_CI',
+    'GITHUB_ACTIONS',
+    'BUILDKITE',
+    'CIRCLECI',
+    'TF_BUILD',
+    'TEAMCITY_VERSION',
+    'JENKINS_URL',
+];
+/** Is a CI marker set to something meaning yes? */
+export function ciMarkerSet(environment) {
+    return CI_MARKERS.some((marker) => {
+        const value = environment[marker];
+        if (value === undefined)
+            return false;
+        const normalised = value.trim().toLowerCase();
+        // `CI=false` and `CI=0` are how a developer says "not a pipeline"; an empty
+        // value is a variable exported and never set, which says nothing either.
+        return normalised.length > 0 && normalised !== 'false' && normalised !== '0';
+    });
+}
+/**
+ * May this run issue a prompt? (R3.1 — a conjunction of five.)
+ *
+ * **Checking stdin alone is insufficient and R3.5 forbids it**: a run whose
+ * stdout is captured and whose stdin is inherited would prompt into a log nobody
+ * reads, which is the same hang wearing different clothes.
+ *
+ * There is deliberately no `--interactive` (R3.4). A flag that turns the
+ * assistance on is a flag the person who needs it does not know about.
+ */
+export function mayPrompt(facts) {
+    return (facts.stdinIsTty &&
+        facts.stdoutIsTty &&
+        !facts.nonInteractive &&
+        !facts.dryRun &&
+        !ciMarkerSet(facts.environment));
+}
+/** The facts, read off this process. The only place the resolution touches globals. */
+export function interactivityOf(options) {
+    return {
+        stdinIsTty: process.stdin.isTTY === true,
+        stdoutIsTty: process.stdout.isTTY === true,
+        nonInteractive: options.nonInteractive,
+        dryRun: options.dryRun,
+        environment: process.env,
+    };
+}
+/**
+ * The flag that supplies an input, derived from its name and never written down.
+ *
+ * `SESSION_COOKIE_SECRET` → `--session-cookie-secret`. Deriving it is what keeps
+ * the refusal's remedy true for an input nobody has declared yet — including one
+ * a module installed from a registry declares, which no table here could name.
+ */
+export function flagFor(name) {
+    return `--${name.toLowerCase().replace(/_/g, '-')}`;
+}
+/** The variable a flag names, inverted from {@link flagFor}. */
+export function inputForFlag(flag) {
+    return flag.replace(/^--/, '').toUpperCase().replace(/-/g, '_');
+}
+/**
+ * A value whose only required properties are that it is unguessable and
+ * per-environment (R4.1).
+ *
+ * **32 random bytes, base64**, one format for every generable input, and the
+ * format is not arbitrary: the platform's own secret settings are decrypted with
+ * `Buffer.from(key, 'base64')` over a 32-byte AES key, so a hex key would fail
+ * at the first secret setting an operator wrote. The same string is a perfectly
+ * good cookie-signing key, which is why one format serves both and no `format`
+ * field exists to get wrong.
+ *
+ * **Never at boot** (R4.4). That is a rule about the platform rather than about
+ * this function, and it is why generation lives in a command an operator ran
+ * once: a signing key that changed on restart would invalidate every session,
+ * and a settings-encryption key that did would make every stored secret
+ * unreadable. Both are worse than a refusal.
+ */
+export function generateSecret() {
+    return randomBytes(32).toString('base64');
+}
+/**
+ * The counts, over a record loose enough for a proof to break.
+ *
+ * The parameter is `{ provenance: string }` rather than {@link ResolvedInput} on
+ * purpose: `defaulted` is a residue and a residue can only be *shown* to work by
+ * handing in something outside the partition. With the parameter narrowed, the
+ * one assertion that proves the guarantee would not compile.
+ */
+export function provenanceCounts(resolved) {
+    const count = (tier) => resolved.filter((entry) => entry.provenance === tier).length;
+    const flags = count('flag');
+    const envFile = count('env-file');
+    const prompted = count('prompt');
+    const generated = count('generated');
+    return {
+        total: resolved.length,
+        flags,
+        envFile,
+        prompted,
+        generated,
+        defaulted: resolved.length - (flags + envFile + prompted + generated),
+    };
+}
+/** The line itself (R2.1), in the estate's `read:` grammar. */
+export function provenanceLine(resolved) {
+    const counts = provenanceCounts(resolved);
+    const generatedNames = resolved
+        .filter((entry) => entry.provenance === 'generated')
+        .map((entry) => entry.name);
+    // R2.3 — a count with no names is a disclosure an operator cannot act on. The
+    // **name** is printed and the value never is: it is in the `.env` this run
+    // wrote, which is where an operator can read it, change it and copy it into a
+    // secret store.
+    const named = generatedNames.length === 0 ? '' : ` (${generatedNames.join(', ')})`;
+    return (`[inputs] resolved: total=${counts.total} flags=${counts.flags} ` +
+        `env-file=${counts.envFile} prompted=${counts.prompted} ` +
+        `generated=${counts.generated}${named} defaulted=${counts.defaulted}`);
+}
+/**
+ * The first two tiers, and the decision about the other two.
+ *
+ * Pure: it asks nothing, generates nothing and writes nothing, so a caller can
+ * print the whole plan under `--dry-run` (R2.4, R7.3) and a test can assert
+ * every branch without a terminal.
+ *
+ * **A condition is answered against the values this run has resolved**, not
+ * against `process.env`, which is the case that happens: a run supplying
+ * `--catalog-search-backend meilisearch` on its command line has to be asked for
+ * `MEILISEARCH_URL` in the same run rather than in the next one.
+ */
+export function planResolution(request) {
+    const inScope = scopeToMembers(request.declared, request.members);
+    const resolved = [];
+    const values = {};
+    const unanswered = [];
+    for (const input of inScope) {
+        const flag = request.flags[input.name];
+        if (flag !== undefined && flag.length > 0) {
+            resolved.push({ name: input.name, value: flag, provenance: 'flag' });
+            values[input.name] = flag;
+            continue;
+        }
+        const fromFile = request.envFile.get(input.name);
+        if (fromFile !== undefined && fromFile.length > 0) {
+            resolved.push({ name: input.name, value: fromFile, provenance: 'env-file' });
+            values[input.name] = fromFile;
+            continue;
+        }
+        unanswered.push(input);
+    }
+    const interactive = mayPrompt(request.interactivity);
+    const toPrompt = [];
+    const toGenerate = [];
+    const missing = [];
+    const unset = [];
+    for (const input of unanswered) {
+        // Generation comes before the prompt, and only for a value with no human
+        // judgement in it (R4.5): asking a human to type a session-signing key gets
+        // a human-typed one, reliably.
+        if (input.generable && input.secret) {
+            toGenerate.push(input);
+            continue;
+        }
+        if (!isRequiredGiven(input, values)) {
+            // R1.4 — an optional input is never prompted for.
+            unset.push(input);
+            continue;
+        }
+        // **A dry run reports; it does not refuse.** R2.4 and R7.3: it answers
+        // *"what would happen"* completely, and an unanswered required input is
+        // part of that answer rather than a reason to stop giving it. It is also
+        // the reason `--dry-run` is one of R3.1's five conditions and not merely a
+        // consequence of them — the run must neither ask nor refuse.
+        if (interactive || request.interactivity.dryRun) {
+            toPrompt.push(input);
+            continue;
+        }
+        missing.push({
+            name: input.name,
+            flag: flagFor(input.name),
+            describes: input.describes[request.language],
+            secret: input.secret,
+        });
+    }
+    return { resolved, toPrompt, toGenerate, missing, unset };
+}
+/**
+ * The refusal a run that may not ask prints, naming **every** missing input
+ * (R3.2).
+ *
+ * Not one per run: a twelve-input setup must not be twelve failed invocations,
+ * and that is a design point rather than a nicety — it is precisely the
+ * experience the owner asked to have removed.
+ */
+export function missingInputsRefusal(missing, facts) {
+    const why = facts.dryRun
+        ? 'this is a dry run, which resolves and reports and never asks'
+        : facts.nonInteractive
+            ? '`--non-interactive` was given'
+            : !facts.stdinIsTty || !facts.stdoutIsTty
+                ? 'neither a question nor its answer has anywhere to go: ' +
+                    `stdin ${facts.stdinIsTty ? 'is' : 'is not'} a terminal and stdout ` +
+                    `${facts.stdoutIsTty ? 'is' : 'is not'}`
+                : 'a continuous-integration marker is set in the environment';
+    const lines = missing.map((input) => `  ${input.flag} <value>\n      ${input.describes}`);
+    return [
+        `endora: ${missing.length} required input${missing.length === 1 ? '' : 's'} ` +
+            `${missing.length === 1 ? 'is' : 'are'} not set, and this run cannot ask for ` +
+            `${missing.length === 1 ? 'it' : 'them'} — ${why}.`,
+        '',
+        'Supply each on the command line, or put it in a `.env` in the target directory',
+        'before running this again:',
+        '',
+        ...lines,
+        '',
+        'Nothing was written.',
+    ].join('\n');
+}
+//# sourceMappingURL=resolve.js.map

package/dist/inputs/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../src/inputs/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EACL,eAAe,EACf,cAAc,GAGf,MAAM,4BAA4B,CAAC;AAyCpC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,GAAG;IACjB,IAAI;IACJ,wBAAwB;IACxB,WAAW;IACX,gBAAgB;IAChB,WAAW;IACX,UAAU;IACV,UAAU;IACV,kBAAkB;IAClB,aAAa;CACL,CAAC;AAEX,mDAAmD;AACnD,MAAM,UAAU,WAAW,CACzB,WAAyD;IAEzD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACtC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9C,4EAA4E;QAC5E,yEAAyE;QACzE,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,GAAG,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,SAAS,CAAC,KAAyB;IACjD,OAAO,CACL,KAAK,CAAC,UAAU;QAChB,KAAK,CAAC,WAAW;QACjB,CAAC,KAAK,CAAC,cAAc;QACrB,CAAC,KAAK,CAAC,MAAM;QACb,CAAC,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,CAChC,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,eAAe,CAAC,OAG/B;IACC,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI;QACxC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI;QAC1C,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,WAAW,EAAE,OAAO,CAAC,GAAG;KACzB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,OAAO,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;AACtD,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAoD;IAEpD,MAAM,KAAK,GAAG,CAAC,IAAgB,EAAU,EAAE,CACzC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;IAC/D,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;IACrC,OAAO;QACL,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,KAAK;QACL,OAAO;QACP,QAAQ;QACR,SAAS;QACT,SAAS,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,KAAK,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;KACtE,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,cAAc,CAC5B,QAA2E;IAE3E,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,cAAc,GAAG,QAAQ;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,WAAW,CAAC;SACnD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,8EAA8E;IAC9E,2EAA2E;IAC3E,8EAA8E;IAC9E,gBAAgB;IAChB,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IACnF,OAAO,CACL,4BAA4B,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,KAAK,GAAG;QACjE,YAAY,MAAM,CAAC,OAAO,aAAa,MAAM,CAAC,QAAQ,GAAG;QACzD,aAAa,MAAM,CAAC,SAAS,GAAG,KAAK,cAAc,MAAM,CAAC,SAAS,EAAE,CACtE,CAAC;AACJ,CAAC;AA+CD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAC,OAA0B;IACvD,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,MAAM,GAAuC,EAAE,CAAC;IAEtD,MAAM,UAAU,GAAuB,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;YACrE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;YAC7E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,MAAM,UAAU,GAAuB,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,MAAM,KAAK,GAAuB,EAAE,CAAC;IAErC,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,yEAAyE;QACzE,4EAA4E;QAC5E,+BAA+B;QAC/B,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACpC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;YACpC,kDAAkD;YAClD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClB,SAAS;QACX,CAAC;QACD,uEAAuE;QACvE,wEAAwE;QACxE,yEAAyE;QACzE,2EAA2E;QAC3E,6DAA6D;QAC7D,IAAI,WAAW,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;YAChD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;YACzB,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC5C,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAgC,EAChC,KAAyB;IAEzB,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM;QACtB,CAAC,CAAC,8DAA8D;QAChE,CAAC,CAAC,KAAK,CAAC,cAAc;YACpB,CAAC,CAAC,+BAA+B;YACjC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,WAAW;gBACvC,CAAC,CAAC,wDAAwD;oBACxD,SAAS,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,yBAAyB;oBACpE,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE;gBAC1C,CAAC,CAAC,2DAA2D,CAAC;IACpE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CACvB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI,mBAAmB,KAAK,CAAC,SAAS,EAAE,CAC/D,CAAC;IACF,OAAO;QACL,WAAW,OAAO,CAAC,MAAM,kBAAkB,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG;YAC3E,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,wCAAwC;YAC9E,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,MAAM,GAAG,GAAG;QACrD,EAAE;QACF,gFAAgF;QAChF,4BAA4B;QAC5B,EAAE;QACF,GAAG,KAAK;QACR,EAAE;QACF,sBAAsB;KACvB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/install/host.d.ts

@@ -0,0 +1,27 @@
+import { type ReleaseIndex } from '../lib/release-index.js';
+/** The prefix of the host's directory name under the OS temp directory. */
+export declare const HOST_DIRECTORY_PREFIX = "endora-install-host-";
+/**
+ * This CLI's release index, or `null` with the reason it could not be read.
+ *
+ * `null` rather than a throw of this module's own: the install verb decides
+ * which class the refusal is reported under, and it is exit 2 — an input the
+ * run could not read, exactly as a module manifest it could not read is F7.
+ */
+export declare function readReleaseIndex(file: string): {
+    readonly index: ReleaseIndex;
+} | {
+    readonly problem: string;
+};
+/**
+ * The host's `.npmrc`, or `null` when no `--registry` was given.
+ *
+ * The writer is the one `endora new instance --registry` uses, so the host and
+ * the instance it writes name one endpoint keyed one way. A value that is not a
+ * registry is **F5**, the class `new instance` reports it under, decided here
+ * because the host is installed before `new instance` is called.
+ */
+export declare function hostNpmrc(registry: string | undefined, scope: string): string | null;
+/** Write the host's manifest and `.npmrc` into `dir`, which the caller created. */
+export declare function writeHost(dir: string, index: ReleaseIndex, npmrc: string | null): void;
+//# sourceMappingURL=host.d.ts.map

package/dist/install/host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../../src/install/host.ts"],"names":[],"mappings":"AA6BA,OAAO,EAAqB,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAI/E,2EAA2E;AAC3E,eAAO,MAAM,qBAAqB,yBAAyB,CAAC;AAE5D;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,GACX;IAAE,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAcjE;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOpF;AAED,mFAAmF;AACnF,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAsBtF"}

package/dist/install/host.js

@@ -0,0 +1,90 @@
+/**
+ * The temporary host `endora install` provisions when nothing of ours is
+ * installed beside the target (`specs/080-f4-real-scope/rulings.md` D-271).
+ *
+ * ## Why it exists
+ *
+ * `endora new instance` reads the platform's and every module's manifest off
+ * the packages installed **beside** the target or the working directory
+ * (`new-instance/host.ts`), because the module set is a derivation over those
+ * manifests and nothing in it can be read without installing it. Under `npx`
+ * the CLI lives in npx's cache, which is above neither directory, so the front
+ * door refused F6 before it had derived anything.
+ *
+ * ## What it is, and what it is not
+ *
+ * A fresh directory under the OS temp directory — never inside or above the
+ * target, for the reason the acceptance criterion's `provisionHost` gives: a
+ * `node_modules` above the instance would let its own install resolve a package
+ * it never declared. It holds a `package.json` declaring every package of this
+ * CLI's release index at its indexed version, the `.npmrc` `--registry` writes
+ * (the same writer, `new-storefront/npmrc.ts`), and whatever `<runner> install`
+ * puts there. The install verb then calls `runNewInstance` with the host as its
+ * working directory, so **every resolution stays where it was**: the host is a
+ * place for `resolveInstanceHost` to look, and this file installs packages,
+ * resolves no module and decides no member (125 FR-143).
+ */
+import { readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { parseReleaseIndex } from '../lib/release-index.js';
+import { InstanceHostError } from '../new-instance/host.js';
+import { npmrcContent, normalizeRegistry } from '../new-storefront/npmrc.js';
+/** The prefix of the host's directory name under the OS temp directory. */
+export const HOST_DIRECTORY_PREFIX = 'endora-install-host-';
+/**
+ * This CLI's release index, or `null` with the reason it could not be read.
+ *
+ * `null` rather than a throw of this module's own: the install verb decides
+ * which class the refusal is reported under, and it is exit 2 — an input the
+ * run could not read, exactly as a module manifest it could not read is F7.
+ */
+export function readReleaseIndex(file) {
+    let text;
+    try {
+        text = readFileSync(file, 'utf8');
+    }
+    catch (error) {
+        return {
+            problem: `${file} could not be read (${error instanceof Error ? error.message : String(error)})`,
+        };
+    }
+    try {
+        return { index: parseReleaseIndex(text, file) };
+    }
+    catch (error) {
+        return { problem: error instanceof Error ? error.message : String(error) };
+    }
+}
+/**
+ * The host's `.npmrc`, or `null` when no `--registry` was given.
+ *
+ * The writer is the one `endora new instance --registry` uses, so the host and
+ * the instance it writes name one endpoint keyed one way. A value that is not a
+ * registry is **F5**, the class `new instance` reports it under, decided here
+ * because the host is installed before `new instance` is called.
+ */
+export function hostNpmrc(registry, scope) {
+    if (registry === undefined)
+        return null;
+    try {
+        return npmrcContent(normalizeRegistry(registry), [scope.slice(0, -1)]);
+    }
+    catch (error) {
+        throw new InstanceHostError('F5', error instanceof Error ? error.message : String(error));
+    }
+}
+/** Write the host's manifest and `.npmrc` into `dir`, which the caller created. */
+export function writeHost(dir, index, npmrc) {
+    const dependencies = Object.fromEntries(index.packages.map((entry) => [entry.name, entry.version]));
+    writeFileSync(join(dir, 'package.json'), `${JSON.stringify({
+        name: 'endora-install-host',
+        version: '0.0.0',
+        private: true,
+        description: 'A temporary directory `endora install` reads the release\'s packages from. ' +
+            'Removed when the install succeeds; safe to delete.',
+        dependencies,
+    }, null, 2)}\n`, 'utf8');
+    if (npmrc !== null)
+        writeFileSync(join(dir, '.npmrc'), npmrc, 'utf8');
+}
+//# sourceMappingURL=host.js.map

package/dist/install/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../../src/install/host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,iBAAiB,EAAqB,MAAM,yBAAyB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAE7E,2EAA2E;AAC3E,MAAM,CAAC,MAAM,qBAAqB,GAAG,sBAAsB,CAAC;AAE5D;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAY;IAEZ,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,OAAO;YACL,OAAO,EAAE,GAAG,IAAI,uBAAuB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG;SACjG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;IAClD,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,OAAO,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC7E,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CAAC,QAA4B,EAAE,KAAa;IACnE,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,IAAI,iBAAiB,CAAC,IAAI,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,SAAS,CAAC,GAAW,EAAE,KAAmB,EAAE,KAAoB;IAC9E,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,CACrC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAU,CAAC,CACpE,CAAC;IACF,aAAa,CACX,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EACzB,GAAG,IAAI,CAAC,SAAS,CACf;QACE,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,OAAO;QAChB,OAAO,EAAE,IAAI;QACb,WAAW,EACT,6EAA6E;YAC7E,oDAAoD;QACtD,YAAY;KACb,EACD,IAAI,EACJ,CAAC,CACF,IAAI,EACL,MAAM,CACP,CAAC;IACF,IAAI,KAAK,KAAK,IAAI;QAAE,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AACxE,CAAC"}

package/dist/install/index.d.ts

@@ -0,0 +1,173 @@
+import { type InteractivityFacts } from '../inputs/resolve.js';
+import { type NewInstanceResult } from '../new-instance/index.js';
+import { type NewStorefrontResult } from '../new-storefront/index.js';
+import { type WizardIo } from './wizard.js';
+/** A refusal the operator can act on — exit 1. */
+export declare class InstallInputError extends Error {
+    readonly name = "InstallInputError";
+}
+/**
+ * An input this run could not read — exit 2 — or a failed host install, which
+ * exits with **that step's own** code like every other step (FR-156).
+ */
+export declare class InstallHostError extends Error {
+    readonly name = "InstallHostError";
+    readonly exitCode: number;
+    constructor(message: string, exitCode?: number);
+}
+/**
+ * One step of the pipeline.
+ *
+ * Data rather than a call, because FR-155 is a statement about a **list** —
+ * *"the pipeline it runs is the printed next-steps sequence and nothing else"*
+ * — and a list is assertable where a sequence of `await`s is not. `--dry-run`
+ * prints exactly this, which is R2.4's *"report what it would do"* with no
+ * second derivation of what that is.
+ */
+export interface InstallStep {
+    /** Stable across renderings; what a test and a resume list address. */
+    readonly id: 'host' | 'install' | 'services' | 'setup' | 'admin' | 'demo' | 'storefront-install';
+    /** The command as an operator would type it, echoed before it runs. */
+    readonly command: string;
+    /** What it is for, in one clause. */
+    readonly purpose: string;
+    /** The binary, as this machine offers it — `pnpm`, or `corepack`. */
+    readonly bin: string;
+    readonly argv: readonly string[];
+    readonly cwd: string;
+    /**
+     * A failure here is reported and does not fail the install (FR-126).
+     *
+     * Exactly one step is optional and it is the seeding: the instance is
+     * complete without demo rows, and an optional extra that can red a mandatory
+     * outcome is the ordering mistake that requirement exists to refuse.
+     */
+    readonly optional?: boolean;
+}
+/** How a step is executed. Injected so a test asserts the list, not a shell. */
+export type StepRunner = (step: InstallStep) => Promise<number>;
+export interface InstallOptions {
+    /** Where the instance goes. Required: this command invents no name. */
+    readonly dir?: string | undefined;
+    readonly cwd?: string | undefined;
+    readonly modules?: readonly string[] | undefined;
+    readonly deployment?: string | undefined;
+    readonly registry?: string | undefined;
+    readonly topology?: string | undefined;
+    /**
+     * The members not to write — `--without <member>`, passed through to
+     * `endora new instance` and validated with every other precondition here.
+     * Empty or absent passes **nothing**, so the common case is the argv a bare
+     * `endora new instance <dir>` has (125 R6.3b).
+     */
+    readonly without?: readonly string[] | undefined;
+    /** Write the storefront repository too. Default yes; `--no-storefront` off. */
+    readonly storefront?: boolean | undefined;
+    /** Where it goes. Default `<dir>-storefront`, a **sibling** (FR-160). */
+    readonly storefrontDir?: string | undefined;
+    /** Start the development stack. Default yes; `--no-services` off. */
+    readonly services?: boolean | undefined;
+    /**
+     * Seed demo data.
+     *
+     * **`undefined` is a refusal, and that is final** (FR-124): 125 PR-2 was
+     * ruled option (c) by the owner on 2026-09-25 (D-269) — the one question
+     * whose two audiences want opposite answers has no default, in the wizard
+     * (where Enter re-asks) or on the command line.
+     */
+    readonly demo?: boolean | undefined;
+    readonly adminEmail?: string | undefined;
+    readonly adminPassword?: string | undefined;
+    readonly adminFirstName?: string | undefined;
+    readonly adminLastName?: string | undefined;
+    /**
+     * The secret both trees share (FR-153).
+     *
+     * Supplied, it is used verbatim. Absent, this run generates it **once** and
+     * writes the same value into both `.env` files — the one thing no sequence of
+     * the existing commands can do, because a per-tree generator writes two
+     * values that are *"each internally consistent and jointly wrong"*
+     * (`packages/platform/src/env/index.ts`). Proposed ruling PR-3 states that as
+     * a narrowing of the `generable: false` declaration rather than a reversal:
+     * a single run over both trees is a single environment. Ruled as proposed
+     * on 2026-09-25 (D-269); `input-resolution.md` R4.6 is the rule.
+     */
+    readonly revalidateSecret?: string | undefined;
+    /** Report every step and every file; run nothing and write nothing. */
+    readonly dryRun?: boolean | undefined;
+    /** Refuse rather than ask, even at a terminal (`input-resolution.md` R3.4). */
+    readonly nonInteractive?: boolean | undefined;
+    /**
+     * Where a line goes as it is produced.
+     *
+     * Every line is kept on the result as well, so a proof reads the sequence
+     * rather than a process's stdout — but an install is minutes long and a
+     * client watching it needs the echo **now**, not at the end. The argv layer
+     * passes `process.stdout`; a test passes nothing and reads the result.
+     */
+    readonly echo?: ((line: string) => void) | undefined;
+    /** How a step runs. Defaults to spawning it. */
+    readonly run?: StepRunner | undefined;
+    /**
+     * The package-manager runners this machine offers, in preference order.
+     *
+     * Defaults to a probe of `pnpm` on `PATH` and then `corepack` (FR-158). An
+     * empty list is the refusal, which is how a test reaches it without editing
+     * `PATH`.
+     */
+    readonly packageManagers?: readonly PackageManagerRunner[] | undefined;
+    /** Whether a Docker daemon answers. Defaults to a probe. */
+    readonly dockerReachable?: boolean | undefined;
+    /**
+     * The facts R2.5c's conjunction is decided over. Defaults to this process's
+     * own descriptors, flags and environment; a test hands in *"both are
+     * terminals"* without being on one.
+     */
+    readonly interactivity?: InteractivityFacts | undefined;
+    /** Where the wizard asks and reads. Defaults to this process's own. */
+    readonly io?: WizardIo | undefined;
+    /**
+     * Where this CLI's release index is read from when a host has to be
+     * provisioned (D-271). Defaults to the one its own build wrote into `dist`.
+     */
+    readonly releaseIndexFile?: string | undefined;
+}
+/** One way to run `pnpm` on this machine. */
+export interface PackageManagerRunner {
+    readonly command: string;
+    readonly prefix: readonly string[];
+    /** How it reads in the echo and in the resumable list. */
+    readonly label: string;
+}
+export interface InstallResult {
+    readonly targetDir: string;
+    readonly storefrontDir: string | null;
+    readonly instance: NewInstanceResult;
+    readonly storefront: NewStorefrontResult | null;
+    /** The pipeline, in order — the whole of it, whether or not it ran. */
+    readonly steps: readonly InstallStep[];
+    /**
+     * The temporary host step, when one ran (D-271) — not a pipeline step: it is
+     * how this run reads the release, not a command the instance is left with.
+     */
+    readonly hostStep: InstallStep | null;
+    /** Everything this run printed, in order. Exported so a proof reads it. */
+    readonly output: readonly string[];
+    /** The failing step's own code, or 0 (FR-156). */
+    readonly exitCode: number;
+    /** What this run derived from the document it rendered, by name (FR-105). */
+    readonly derived: readonly string[];
+    /** R2.5f (iv) — the `[answers]` line: where each of §6.2's answers came from. */
+    readonly answers: string;
+    readonly dryRun: boolean;
+}
+/**
+ * The whole command.
+ *
+ * Three phases, in this order and never interleaved: **decide** (every
+ * precondition, one refusal), **write** (the two scaffolds and the derived
+ * `.env`), **run** (the pipeline, each step echoed). A `--dry-run` stops after
+ * the first and reports the other two.
+ */
+export declare function runInstall(given: InstallOptions): Promise<InstallResult>;
+//# sourceMappingURL=index.d.ts.map

package/dist/install/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/install/index.ts"],"names":[],"mappings":"AAmEA,OAAO,EAIL,KAAK,kBAAkB,EACxB,MAAM,sBAAsB,CAAC;AAO9B,OAAO,EAIL,KAAK,iBAAiB,EACvB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,4BAA4B,CAAC;AAIpC,OAAO,EAML,KAAK,QAAQ,EACd,MAAM,aAAa,CAAC;AAErB,kDAAkD;AAClD,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,SAAkB,IAAI,uBAAuB;CAC9C;AAED;;;GAGG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,SAAkB,IAAI,sBAAsB;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAEd,OAAO,EAAE,MAAM,EAAE,QAAQ,SAAI;CAI1C;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,WAAW;IAC1B,uEAAuE;IACvE,QAAQ,CAAC,EAAE,EACP,MAAM,GACN,SAAS,GACT,UAAU,GACV,OAAO,GACP,OAAO,GACP,MAAM,GACN,oBAAoB,CAAC;IACzB,uEAAuE;IACvE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,qCAAqC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,qEAAqE;IACrE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,gFAAgF;AAChF,MAAM,MAAM,UAAU,GAAG,CAAC,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAEhE,MAAM,WAAW,cAAc;IAC7B,uEAAuE;IACvE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAGlC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAGjD,+EAA+E;IAC/E,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC1C,yEAAyE;IACzE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,qEAAqE;IACrE,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACxC;;;;;;;OAOG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAEpC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE5C;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE/C,uEAAuE;IACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACtC,+EAA+E;IAC/E,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAG9C;;;;;;;OAOG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;IACrD,gDAAgD;IAChD,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IACtC;;;;;;OAMG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,oBAAoB,EAAE,GAAG,SAAS,CAAC;IACvE,4DAA4D;IAC5D,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC/C;;;;OAIG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IACxD,uEAAuE;IACvE,QAAQ,CAAC,EAAE,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IACnC;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChD;AAED,6CAA6C;AAC7C,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,0DAA0D;IAC1D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAChD,uEAAuE;IACvE,QAAQ,CAAC,KAAK,EAAE,SAAS,WAAW,EAAE,CAAC;IACvC;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,WAAW,GAAG,IAAI,CAAC;IACtC,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,kDAAkD;IAClD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,iFAAiF;IACjF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAoND;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC,CAuX9E"}