@eyeauras/cli-factory 0.1.0

package/dist/src/profile-store.d.ts

@@ -0,0 +1,32 @@
+import { type IAppArguments } from "./app-arguments.js";
+import type { Profile, ProfileStoreContract, ProfileValues } from "./types.js";
+export interface ProfileStoreOptions {
+    applicationId: string;
+    defaultName?: string;
+    defaults?: ProfileValues;
+    rootDirectory?: string;
+    appArguments?: IAppArguments;
+    validate?: (values: ProfileValues) => void | Promise<void>;
+}
+export declare function assertProfileName(name: string): void;
+/** Ported from reviewed profile-isolation fix 3df5066 (#9). */
+export declare function assertUniqueProfileName(name: string, names: readonly string[]): void;
+export declare class ProfileStore implements ProfileStoreContract {
+    #private;
+    constructor(options: ProfileStoreOptions);
+    get(name?: string): Promise<Profile>;
+    list(): Promise<{
+        active: string;
+        profiles: Profile[];
+    }>;
+    create(name: string, values?: ProfileValues): Promise<Profile>;
+    set(name: string, values: ProfileValues): Promise<Profile>;
+    setDefault(name: string): Promise<Profile>;
+    delete(name: string): Promise<{
+        deleted: string;
+        default: string;
+    }>;
+    getPermissions(name?: string): Promise<readonly string[] | undefined>;
+    setPermissions(name: string, permissions: readonly string[]): Promise<readonly string[]>;
+}
+//# sourceMappingURL=profile-store.d.ts.map

package/dist/src/profile-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-store.d.ts","sourceRoot":"","sources":["../../src/profile-store.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgB,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,KAAK,EAAE,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAS/E,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5D;AAID,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAWpD;AAED,+DAA+D;AAC/D,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,SAAS,MAAM,EAAE,GACvB,IAAI,CAMN;AAED,qBAAa,YAAa,YAAW,oBAAoB;;IASvD,YAAmB,OAAO,EAAE,mBAAmB,EA6B9C;IAEY,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAShD;IAEY,IAAI,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC,CASpE;IAEY,MAAM,CACjB,IAAI,EAAE,MAAM,EACZ,MAAM,GAAE,aAAkB,GACzB,OAAO,CAAC,OAAO,CAAC,CAWlB;IAEY,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAmBtE;IAEY,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAetD;IAEY,MAAM,CACjB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CA4B/C;IAEY,cAAc,CACzB,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC,CAWxC;IAEY,cAAc,CACzB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,SAAS,MAAM,EAAE,GAC7B,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAa5B;CAmFF"}

package/dist/src/profile-store.js

@@ -0,0 +1,223 @@
+var _a;
+import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { AppArguments } from "./app-arguments.js";
+const profileNamePattern = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
+export function assertProfileName(name) {
+    if (!profileNamePattern.test(name)) {
+        throw new Error("Profile names must start with a letter or number and contain at most 64 letters, numbers, dots, dashes, or underscores.");
+    }
+    if (name.toLowerCase() === "profiles.json") {
+        throw new Error("Profile name 'profiles.json' is reserved for the application profile index.");
+    }
+}
+/** Ported from reviewed profile-isolation fix 3df5066 (#9). */
+export function assertUniqueProfileName(name, names) {
+    if (names.some((existing) => existing.toLowerCase() === name.toLowerCase())) {
+        throw new Error(`Profile '${name}' already exists ignoring letter case. Use its exact spelling or choose a different name.`);
+    }
+}
+export class ProfileStore {
+    static #writes = new Map();
+    #filePath;
+    #defaultName;
+    #defaults;
+    #validate;
+    constructor(options) {
+        this.#defaultName = options.defaultName ?? "default";
+        assertProfileName(this.#defaultName);
+        this.#defaults = structuredClone(options.defaults ?? {});
+        this.#validate = options.validate;
+        const appArguments = options.appArguments ??
+            new AppArguments({
+                AppName: options.applicationId,
+                Profile: this.#defaultName,
+                ...(options.rootDirectory === undefined
+                    ? {}
+                    : {
+                        Environment: {
+                            ...AppArguments.CurrentEnvironment(),
+                            EnvironmentAppData: options.rootDirectory,
+                            EnvironmentLocalAppData: options.rootDirectory,
+                        },
+                    }),
+            });
+        if (appArguments.AppName !== options.applicationId) {
+            throw new Error(`ProfileStore applicationId '${options.applicationId}' does not match AppArguments.AppName '${appArguments.AppName}'.`);
+        }
+        this.#filePath = join(appArguments.RoamingAppDataDirectory, "profiles.json");
+    }
+    async get(name) {
+        const document = await this.#load();
+        const selectedName = name ?? document.active;
+        const values = document.profiles[selectedName];
+        if (!Object.hasOwn(document.profiles, selectedName) || !values) {
+            throw new Error(`Profile '${selectedName}' does not exist.`);
+        }
+        return { name: selectedName, values: structuredClone(values) };
+    }
+    async list() {
+        const document = await this.#load();
+        return {
+            active: document.active,
+            profiles: Object.entries(document.profiles).map(([name, values]) => ({
+                name,
+                values: structuredClone(values),
+            })),
+        };
+    }
+    async create(name, values = {}) {
+        assertProfileName(name);
+        return this.#mutate(async () => {
+            const document = await this.#load();
+            assertUniqueProfileName(name, Object.keys(document.profiles));
+            const nextValues = { ...this.#defaults, ...values };
+            await this.#validate?.(nextValues);
+            document.profiles[name] = nextValues;
+            await this.#save(document);
+            return { name, values: structuredClone(nextValues) };
+        });
+    }
+    async set(name, values) {
+        assertProfileName(name);
+        return this.#mutate(async () => {
+            const document = await this.#load();
+            if (!Object.hasOwn(document.profiles, name)) {
+                throw new Error(`Profile '${name}' does not exist. Create it with 'profile create ${name}'.`);
+            }
+            const nextValues = {
+                ...this.#defaults,
+                ...document.profiles[name],
+                ...values,
+            };
+            await this.#validate?.(nextValues);
+            document.profiles[name] = nextValues;
+            await this.#save(document);
+            return { name, values: structuredClone(nextValues) };
+        });
+    }
+    async setDefault(name) {
+        assertProfileName(name);
+        return this.#mutate(async () => {
+            const document = await this.#load();
+            const values = document.profiles[name];
+            if (!Object.hasOwn(document.profiles, name) || !values) {
+                throw new Error(`Profile '${name}' does not exist. Create it with 'profile create ${name}'.`);
+            }
+            document.active = name;
+            await this.#save(document);
+            return { name, values: structuredClone(values) };
+        });
+    }
+    async delete(name) {
+        assertProfileName(name);
+        return this.#mutate(async () => {
+            const document = await this.#load();
+            if (!Object.hasOwn(document.profiles, name)) {
+                throw new Error(`Profile '${name}' does not exist.`);
+            }
+            if (Object.keys(document.profiles).length === 1) {
+                throw new Error("Cannot delete the only profile. At least one default profile must exist.");
+            }
+            if (document.active === name) {
+                throw new Error(`Cannot delete default profile '${name}'. Set another default with 'profile set-default <name>' first.`);
+            }
+            delete document.profiles[name];
+            if (document.permissions) {
+                delete document.permissions[name];
+                if (Object.keys(document.permissions).length === 0) {
+                    delete document.permissions;
+                }
+            }
+            await this.#save(document);
+            return { deleted: name, default: document.active };
+        });
+    }
+    async getPermissions(name) {
+        const document = await this.#load();
+        const selectedName = name ?? document.active;
+        if (!Object.hasOwn(document.profiles, selectedName)) {
+            throw new Error(`Profile '${selectedName}' does not exist.`);
+        }
+        const permissions = document.permissions && Object.hasOwn(document.permissions, selectedName)
+            ? document.permissions[selectedName]
+            : undefined;
+        return permissions === undefined ? undefined : [...permissions];
+    }
+    async setPermissions(name, permissions) {
+        assertProfileName(name);
+        return this.#mutate(async () => {
+            const document = await this.#load();
+            if (!Object.hasOwn(document.profiles, name)) {
+                throw new Error(`Profile '${name}' does not exist.`);
+            }
+            const uniquePermissions = [...new Set(permissions)];
+            document.permissions ??= {};
+            document.permissions[name] = uniquePermissions;
+            await this.#save(document);
+            return [...uniquePermissions];
+        });
+    }
+    #mutate(work) {
+        const previous = _a.#writes.get(this.#filePath) ?? Promise.resolve();
+        const result = previous.then(work);
+        const tail = result.then(() => undefined, () => undefined);
+        _a.#writes.set(this.#filePath, tail);
+        void tail.then(() => {
+            if (_a.#writes.get(this.#filePath) === tail)
+                _a.#writes.delete(this.#filePath);
+        });
+        return result;
+    }
+    async #load() {
+        try {
+            const contents = await readFile(this.#filePath, "utf8");
+            const document = JSON.parse(contents);
+            if (document.version !== 1 ||
+                typeof document.active !== "string" ||
+                !document.profiles ||
+                typeof document.profiles !== "object" ||
+                Array.isArray(document.profiles) ||
+                Object.keys(document.profiles).length === 0 ||
+                !Object.hasOwn(document.profiles, document.active) ||
+                Object.values(document.profiles).some((values) => values === null ||
+                    typeof values !== "object" ||
+                    Array.isArray(values)) ||
+                (document.permissions !== undefined &&
+                    (document.permissions === null ||
+                        typeof document.permissions !== "object" ||
+                        Object.values(document.permissions).some((permissions) => !Array.isArray(permissions) ||
+                            permissions.some((permission) => typeof permission !== "string"))))) {
+                throw new Error(`Unsupported profile document at '${this.#filePath}'.`);
+            }
+            const names = Object.keys(document.profiles);
+            names.forEach(assertProfileName);
+            if (new Set(names.map((name) => name.toLowerCase())).size !== names.length) {
+                throw new Error("Profile document contains names that differ only by letter case. " +
+                    "Back up profiles.json and profile-owned data, then resolve the conflicting names manually and reconfigure renamed profiles. No data was changed.");
+            }
+            return document;
+        }
+        catch (error) {
+            if (error.code !== "ENOENT") {
+                throw error;
+            }
+            return {
+                version: 1,
+                active: this.#defaultName,
+                profiles: { [this.#defaultName]: structuredClone(this.#defaults) },
+            };
+        }
+    }
+    async #save(document) {
+        await mkdir(dirname(this.#filePath), { recursive: true });
+        const temporaryPath = `${this.#filePath}.${process.pid}.tmp`;
+        await writeFile(temporaryPath, `${JSON.stringify(document, null, 2)}\n`, {
+            encoding: "utf8",
+            mode: 0o600,
+        });
+        await rename(temporaryPath, this.#filePath);
+    }
+}
+_a = ProfileStore;
+//# sourceMappingURL=profile-store.js.map

package/dist/src/profile-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-store.js","sourceRoot":"","sources":["../../src/profile-store.ts"],"names":[],"mappings":";AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAsB,MAAM,oBAAoB,CAAC;AAmBtE,MAAM,kBAAkB,GAAG,mCAAmC,CAAC;AAE/D,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,yHAAyH,CAC1H,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,eAAe,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,uBAAuB,CACrC,IAAY,EACZ,KAAwB;IAExB,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,2FAA2F,CAC5G,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,OAAO,YAAY;IACvB,MAAM,CAAC,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IACzC,SAAS,CAAS;IAClB,YAAY,CAAS;IACrB,SAAS,CAAgB;IACzB,SAAS,CAEJ;IAEd,YAAmB,OAA4B;QAC7C,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW,IAAI,SAAS,CAAC;QACrD,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACrC,IAAI,CAAC,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,MAAM,YAAY,GAChB,OAAO,CAAC,YAAY;YACpB,IAAI,YAAY,CAAC;gBACf,OAAO,EAAE,OAAO,CAAC,aAAa;gBAC9B,OAAO,EAAE,IAAI,CAAC,YAAY;gBAC1B,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS;oBACrC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC;wBACE,WAAW,EAAE;4BACX,GAAG,YAAY,CAAC,kBAAkB,EAAE;4BACpC,kBAAkB,EAAE,OAAO,CAAC,aAAa;4BACzC,uBAAuB,EAAE,OAAO,CAAC,aAAa;yBAC/C;qBACF,CAAC;aACP,CAAC,CAAC;QACL,IAAI,YAAY,CAAC,OAAO,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,+BAA+B,OAAO,CAAC,aAAa,0CAA0C,YAAY,CAAC,OAAO,IAAI,CACvH,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,IAAI,CACnB,YAAY,CAAC,uBAAuB,EACpC,eAAe,CAChB,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,GAAG,CAAC,IAAa;QAC5B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACpC,MAAM,YAAY,GAAG,IAAI,IAAI,QAAQ,CAAC,MAAM,CAAC;QAC7C,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,YAAY,YAAY,mBAAmB,CAAC,CAAC;QAC/D,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;IACjE,CAAC;IAEM,KAAK,CAAC,IAAI;QACf,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACpC,OAAO;YACL,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;gBACnE,IAAI;gBACJ,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC;aAChC,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,MAAM,CACjB,IAAY,EACZ,MAAM,GAAkB,EAAE;QAE1B,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YAC7B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACpC,uBAAuB,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC9D,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,MAAM,EAAE,CAAC;YACpD,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,CAAC;YACnC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC;YACrC,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC;QACvD,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,MAAqB;QAClD,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YAC7B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,oDAAoD,IAAI,IAAI,CAC7E,CAAC;YACJ,CAAC;YACD,MAAM,UAAU,GAAG;gBACjB,GAAG,IAAI,CAAC,SAAS;gBACjB,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAC1B,GAAG,MAAM;aACV,CAAC;YACF,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,CAAC;YACnC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC;YACrC,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC;QACvD,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,IAAY;QAClC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YAC7B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACvD,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,oDAAoD,IAAI,IAAI,CAC7E,CAAC;YACJ,CAAC;YAED,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC;YACvB,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,MAAM,CACjB,IAAY;QAEZ,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YAC7B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,mBAAmB,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAChD,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAC;YACJ,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CACb,kCAAkC,IAAI,iEAAiE,CACxG,CAAC;YACJ,CAAC;YAED,OAAO,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;gBACzB,OAAO,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;gBAClC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACnD,OAAO,QAAQ,CAAC,WAAW,CAAC;gBAC9B,CAAC;YACH,CAAC;YACD,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC3B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,cAAc,CACzB,IAAa;QAEb,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACpC,MAAM,YAAY,GAAG,IAAI,IAAI,QAAQ,CAAC,MAAM,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,YAAY,YAAY,mBAAmB,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,WAAW,GACf,QAAQ,CAAC,WAAW,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,YAAY,CAAC;YACvE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,YAAY,CAAC;YACpC,CAAC,CAAC,SAAS,CAAC;QAChB,OAAO,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC;IAClE,CAAC;IAEM,KAAK,CAAC,cAAc,CACzB,IAAY,EACZ,WAA8B;QAE9B,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YAC7B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,mBAAmB,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;YACpD,QAAQ,CAAC,WAAW,KAAK,EAAE,CAAC;YAC5B,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC;YAC/C,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC3B,OAAO,CAAC,GAAG,iBAAiB,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAI,IAAsB;QAC/B,MAAM,QAAQ,GACZ,EAAY,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAChE,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CACtB,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QACF,EAAY,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC/C,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;YAClB,IAAI,EAAY,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI;gBACnD,EAAY,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA6B,CAAC;YAClE,IACE,QAAQ,CAAC,OAAO,KAAK,CAAC;gBACtB,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ;gBACnC,CAAC,QAAQ,CAAC,QAAQ;gBAClB,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ;gBACrC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAChC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC;gBAC3C,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC;gBAClD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CACnC,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,KAAK,IAAI;oBACf,OAAO,MAAM,KAAK,QAAQ;oBAC1B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CACxB;gBACD,CAAC,QAAQ,CAAC,WAAW,KAAK,SAAS;oBACjC,CAAC,QAAQ,CAAC,WAAW,KAAK,IAAI;wBAC5B,OAAO,QAAQ,CAAC,WAAW,KAAK,QAAQ;wBACxC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,IAAI,CACtC,CAAC,WAAW,EAAE,EAAE,CACd,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;4BAC3B,WAAW,CAAC,IAAI,CACd,CAAC,UAAU,EAAE,EAAE,CAAC,OAAO,UAAU,KAAK,QAAQ,CAC/C,CACJ,CAAC,CAAC,EACP,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;YAC1E,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC7C,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;YACjC,IACE,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EACtE,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,mEAAmE;oBACjE,kJAAkJ,CACrJ,CAAC;YACJ,CAAC;YACD,OAAO,QAA2B,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,MAAM,KAAK,CAAC;YACd,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,CAAC;gBACV,MAAM,EAAE,IAAI,CAAC,YAAY;gBACzB,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE;aACnE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,QAAyB;QACnC,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,aAAa,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;QAC7D,MAAM,SAAS,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YACvE,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC;CACF"}

package/dist/src/proof.d.ts

@@ -0,0 +1,18 @@
+/** Proof entry points accept only this selector, never commands, URLs or credentials. */
+export declare function parseProofProfile(argv: readonly string[], environment?: NodeJS.ProcessEnv): string;
+export interface ProofInvocation {
+    argv: readonly string[];
+    stdin?: string;
+}
+export type ProofInvoker = (invocation: ProofInvocation) => Promise<string>;
+export interface ProofInvokerOptions {
+    executable: URL;
+    environment?: NodeJS.ProcessEnv;
+    credentialEnvironment?: readonly string[];
+    timeoutMs?: number;
+    /** Separate byte limit for stdout and stderr, measured before UTF-8 decoding. */
+    maxOutputBytes?: number;
+}
+/** Invoke a fixed, integration-owned inventory; this is not a user-argv passthrough. */
+export declare function createProofInvoker(options: ProofInvokerOptions): ProofInvoker;
+//# sourceMappingURL=proof.d.ts.map

package/dist/src/proof.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof.d.ts","sourceRoot":"","sources":["../../src/proof.ts"],"names":[],"mappings":"AAcA,yFAAyF;AACzF,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,WAAW,GAAE,MAAM,CAAC,UAAwB,GAC3C,MAAM,CAUR;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,YAAY,GAAG,CAAC,UAAU,EAAE,eAAe,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAE5E,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,GAAG,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,qBAAqB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iFAAiF;IACjF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,wFAAwF;AACxF,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,YAAY,CA8D7E"}

package/dist/src/proof.js

@@ -0,0 +1,98 @@
+import { spawn } from "node:child_process";
+import { fileURLToPath } from "node:url";
+import { assertProfileName } from "./profile-store.js";
+const ciNames = new Set([
+    "CI", "GITHUB_ACTIONS", "TF_BUILD", "BUILD_BUILDID", "TEAMCITY_VERSION", "JENKINS_URL", "BUILDKITE",
+]);
+function assertLocal(environment) {
+    if (Object.entries(environment).some(([name, value]) => value && ciNames.has(name.toUpperCase()))) {
+        throw new Error("Profile proof is local-only and refuses CI environments.");
+    }
+}
+/** Proof entry points accept only this selector, never commands, URLs or credentials. */
+export function parseProofProfile(argv, environment = process.env) {
+    assertLocal(environment);
+    const profile = argv[1];
+    try {
+        if (argv.length !== 2 || argv[0] !== "--profile" || !profile)
+            throw new Error();
+        assertProfileName(profile);
+    }
+    catch {
+        throw new Error("Usage: test:integration -- --profile <name>");
+    }
+    return profile;
+}
+/** Invoke a fixed, integration-owned inventory; this is not a user-argv passthrough. */
+export function createProofInvoker(options) {
+    const environment = options.environment ?? process.env;
+    assertLocal(environment);
+    const timeoutMs = options.timeoutMs ?? 30_000;
+    const maxOutputBytes = options.maxOutputBytes ?? 65_536;
+    if (!Number.isSafeInteger(timeoutMs) || timeoutMs <= 0 || timeoutMs > 2_147_483_647 ||
+        !Number.isSafeInteger(maxOutputBytes) || maxOutputBytes <= 0) {
+        throw new Error("Proof process limits must be positive finite integers within supported bounds.");
+    }
+    let executable;
+    try {
+        executable = fileURLToPath(options.executable);
+    }
+    catch {
+        throw new Error("Proof executable must be a local file URL.");
+    }
+    const omitted = new Set(options.credentialEnvironment?.map(name => name.toUpperCase()));
+    return async ({ argv, stdin }) => {
+        assertLocal(environment);
+        const env = Object.fromEntries(Object.entries(environment).filter(([name]) => !omitted.has(name.toUpperCase())));
+        return new Promise((resolve, reject) => {
+            let child;
+            try {
+                child = spawn(process.execPath, [executable, ...argv], {
+                    stdio: ["pipe", "pipe", "pipe"], windowsHide: true, env,
+                });
+            }
+            catch {
+                reject(new Error("Proof CLI process could not start."));
+                return;
+            }
+            const stdout = [];
+            let stdoutBytes = 0, stderrBytes = 0;
+            let failure;
+            const fail = (message) => {
+                failure ??= new Error(message);
+                child.kill("SIGKILL");
+                child.stdin.destroy();
+                child.stdout.destroy();
+                child.stderr.destroy();
+            };
+            const timer = setTimeout(() => fail("Proof CLI process timed out."), timeoutMs);
+            child.once("error", () => fail("Proof CLI process could not start."));
+            child.stdin.once("error", () => fail("Proof CLI input failed."));
+            child.stdout.once("error", () => fail("Proof CLI output failed."));
+            child.stderr.once("error", () => fail("Proof CLI output failed."));
+            child.stdout.on("data", (chunk) => {
+                stdoutBytes += chunk.length;
+                if (stdoutBytes > maxOutputBytes)
+                    fail("Proof CLI stdout exceeded its byte limit.");
+                else
+                    stdout.push(chunk);
+            });
+            child.stderr.on("data", (chunk) => {
+                stderrBytes += chunk.length;
+                if (stderrBytes > maxOutputBytes)
+                    fail("Proof CLI stderr exceeded its byte limit.");
+            });
+            child.once("close", code => {
+                clearTimeout(timer);
+                if (failure)
+                    reject(failure);
+                else if (code !== 0)
+                    reject(new Error("Proof CLI process exited unsuccessfully."));
+                else
+                    resolve(Buffer.concat(stdout).toString("utf8"));
+            });
+            child.stdin.end(stdin);
+        });
+    };
+}
+//# sourceMappingURL=proof.js.map

package/dist/src/proof.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof.js","sourceRoot":"","sources":["../../src/proof.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;IACtB,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,eAAe,EAAE,kBAAkB,EAAE,aAAa,EAAE,WAAW;CACpG,CAAC,CAAC;AAEH,SAAS,WAAW,CAAC,WAA8B;IACjD,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC;QAClG,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,iBAAiB,CAC/B,IAAuB,EACvB,WAAW,GAAsB,OAAO,CAAC,GAAG;IAE5C,WAAW,CAAC,WAAW,CAAC,CAAC;IACzB,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAChF,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAkBD,wFAAwF;AACxF,MAAM,UAAU,kBAAkB,CAAC,OAA4B;IAC7D,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC;IACvD,WAAW,CAAC,WAAW,CAAC,CAAC;IACzB,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,MAAM,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,IAAI,SAAS,GAAG,aAAa;QAC/E,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,cAAc,IAAI,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACxF,OAAO,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QAC/B,WAAW,CAAC,WAAW,CAAC,CAAC;QACzB,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;QACjH,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7C,IAAI,KAA+B,CAAC;YACpC,IAAI,CAAC;gBACH,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,EAAE;oBACrD,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG;iBACxD,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC;gBACxD,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,IAAI,WAAW,GAAG,CAAC,EAAE,WAAW,GAAG,CAAC,CAAC;YACrC,IAAI,OAA0B,CAAC;YAC/B,MAAM,IAAI,GAAG,CAAC,OAAe,EAAQ,EAAE;gBACrC,OAAO,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC/B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,KAAK,CAAC,KAAM,CAAC,OAAO,EAAE,CAAC;gBACvB,KAAK,CAAC,MAAO,CAAC,OAAO,EAAE,CAAC;gBACxB,KAAK,CAAC,MAAO,CAAC,OAAO,EAAE,CAAC;YAC1B,CAAC,CAAC;YACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,8BAA8B,CAAC,EAAE,SAAS,CAAC,CAAC;YAChF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC,CAAC;YACtE,KAAK,CAAC,KAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC;YAClE,KAAK,CAAC,MAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;YACpE,KAAK,CAAC,MAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;YACpE,KAAK,CAAC,MAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACzC,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC;gBAC5B,IAAI,WAAW,GAAG,cAAc;oBAAE,IAAI,CAAC,2CAA2C,CAAC,CAAC;;oBAC/E,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,MAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACzC,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC;gBAC5B,IAAI,WAAW,GAAG,cAAc;oBAAE,IAAI,CAAC,2CAA2C,CAAC,CAAC;YACtF,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE;gBACzB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,OAAO;oBAAE,MAAM,CAAC,OAAO,CAAC,CAAC;qBACxB,IAAI,IAAI,KAAK,CAAC;oBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC,CAAC;;oBAC9E,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YACvD,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,KAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/src/resources.d.ts

@@ -0,0 +1,4 @@
+import type { CliResource } from "./types.js";
+/** Runtime composition helper; resources are concrete instances, never a dependency container. */
+export declare function visitResources(resources: readonly CliResource[], visit: (resource: CliResource) => void | Promise<void>): Promise<void>;
+//# sourceMappingURL=resources.d.ts.map

package/dist/src/resources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.d.ts","sourceRoot":"","sources":["../../src/resources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,kGAAkG;AAClG,wBAAsB,cAAc,CAClC,SAAS,EAAE,SAAS,WAAW,EAAE,EACjC,KAAK,EAAE,CAAC,QAAQ,EAAE,WAAW,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GACrD,OAAO,CAAC,IAAI,CAAC,CAYf"}

package/dist/src/resources.js

@@ -0,0 +1,17 @@
+/** Runtime composition helper; resources are concrete instances, never a dependency container. */
+export async function visitResources(resources, visit) {
+    const errors = [];
+    for (const resource of [...new Set(resources)].reverse()) {
+        try {
+            await visit(resource);
+        }
+        catch (error) {
+            errors.push(error);
+        }
+    }
+    if (errors.length === 1)
+        throw errors[0];
+    if (errors.length)
+        throw new AggregateError(errors, "Application resource cleanup failed.");
+}
+//# sourceMappingURL=resources.js.map

package/dist/src/resources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.js","sourceRoot":"","sources":["../../src/resources.ts"],"names":[],"mappings":"AAEA,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAiC,EACjC,KAAsD;IAEtD,MAAM,MAAM,GAAc,EAAE,CAAC;IAC7B,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,MAAM;QACf,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,sCAAsC,CAAC,CAAC;AAC7E,CAAC"}

package/dist/src/response-body.d.ts

@@ -0,0 +1,12 @@
+interface ConsumeOptions {
+    maxBytes: number;
+    signal?: AbortSignal | undefined;
+}
+declare function consumeResponseBody(response: Response, options: ConsumeOptions, consume: (chunk: Uint8Array) => void | Promise<void>): Promise<number>;
+/**
+ * Consume one response as bounded bytes. HTTP status, decoding and JSON/media policy stay local.
+ * Cancellation is observed but never awaited: a tee's other branch may still be unread.
+ */
+export declare function readBoundedResponseBody(response: Response, options: ConsumeOptions): Promise<Uint8Array>;
+export { consumeResponseBody };
+//# sourceMappingURL=response-body.d.ts.map

package/dist/src/response-body.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-body.d.ts","sourceRoot":"","sources":["../../src/response-body.ts"],"names":[],"mappings":"AAAA,UAAU,cAAc;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CAClC;AAED,iBAAe,mBAAmB,CAChC,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GACnD,OAAO,CAAC,MAAM,CAAC,CAqCjB;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC,UAAU,CAAC,CAkBrB;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC"}

package/dist/src/response-body.js

@@ -0,0 +1,70 @@
+async function consumeResponseBody(response, options, consume) {
+    const { maxBytes, signal } = options;
+    let reader;
+    const cancel = () => { void reader?.cancel().catch(() => undefined); };
+    try {
+        reader = response.body?.getReader();
+        signal?.addEventListener("abort", cancel, { once: true });
+        if (signal?.aborted || !Number.isSafeInteger(maxBytes) || maxBytes < 1)
+            throw new Error();
+        const header = response.headers.get("content-length");
+        const declared = header === null ? undefined : Number(header);
+        const encoding = response.headers.get("content-encoding")?.trim().toLowerCase();
+        const identity = !encoding || encoding === "identity";
+        if (header !== null && (!/^\d+$/.test(header) || !Number.isSafeInteger(declared) ||
+            (identity && declared > maxBytes))) {
+            throw new Error();
+        }
+        let bytes = 0;
+        while (reader) {
+            if (signal?.aborted)
+                throw new Error();
+            const chunk = await reader.read();
+            if (signal?.aborted)
+                throw new Error();
+            if (chunk.done)
+                break;
+            if (!chunk.value.byteLength)
+                continue;
+            const next = bytes + chunk.value.byteLength;
+            if (next > maxBytes)
+                throw new Error();
+            await consume(chunk.value);
+            bytes = next;
+        }
+        if (declared !== undefined && identity && bytes !== declared)
+            throw new Error();
+        return bytes;
+    }
+    catch {
+        throw new Error("Response body failed, exceeded its byte bound, or was cancelled.");
+    }
+    finally {
+        signal?.removeEventListener("abort", cancel);
+        cancel();
+        reader?.releaseLock();
+    }
+}
+/**
+ * Consume one response as bounded bytes. HTTP status, decoding and JSON/media policy stay local.
+ * Cancellation is observed but never awaited: a tee's other branch may still be unread.
+ */
+export async function readBoundedResponseBody(response, options) {
+    const { maxBytes } = options;
+    let buffer = new Uint8Array(0);
+    let written = 0;
+    const bytes = await consumeResponseBody(response, options, (chunk) => {
+        const next = written + chunk.byteLength;
+        if (next > buffer.length) {
+            const grown = new Uint8Array(Math.min(maxBytes, Math.max(next, buffer.length * 2, 16384)));
+            grown.set(buffer.subarray(0, written));
+            buffer = grown;
+        }
+        // Own every chunk immediately: a producer may reuse its buffer on the next read.
+        buffer.set(chunk, written);
+        written = next;
+    });
+    return buffer.subarray(0, bytes);
+}
+export { consumeResponseBody };
+//# sourceMappingURL=response-body.js.map

package/dist/src/response-body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-body.js","sourceRoot":"","sources":["../../src/response-body.ts"],"names":[],"mappings":"AAKA,KAAK,UAAU,mBAAmB,CAChC,QAAkB,EAClB,OAAuB,EACvB,OAAoD;IAEpD,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACrC,IAAI,MAA2D,CAAC;IAChE,MAAM,MAAM,GAAG,GAAG,EAAE,GAAG,KAAK,MAAM,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,IAAI,CAAC;QACH,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;QACpC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,MAAM,EAAE,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAC1F,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAChF,MAAM,QAAQ,GAAG,CAAC,QAAQ,IAAI,QAAQ,KAAK,UAAU,CAAC;QACtD,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC;YAC5E,CAAC,QAAQ,IAAI,QAAS,GAAG,QAAQ,CAAC,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,EAAE,CAAC;QACpB,CAAC;QACD,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,MAAM,EAAE,CAAC;YACd,IAAI,MAAM,EAAE,OAAO;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,MAAM,EAAE,OAAO;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;YACvC,IAAI,KAAK,CAAC,IAAI;gBAAE,MAAM;YACtB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU;gBAAE,SAAS;YACtC,MAAM,IAAI,GAAG,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;YAC5C,IAAI,IAAI,GAAG,QAAQ;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;YACvC,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3B,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,IAAI,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAChF,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,EAAE,CAAC;QACT,MAAM,EAAE,WAAW,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,QAAkB,EAClB,OAAuB;IAEvB,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAC7B,IAAI,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACnE,MAAM,IAAI,GAAG,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC;QACxC,IAAI,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,IAAI,UAAU,CAC1B,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,CAC7D,CAAC;YACF,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YACvC,MAAM,GAAG,KAAK,CAAC;QACjB,CAAC;QACD,iFAAiF;QACjF,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC3B,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,OAAO,EAAE,mBAAmB,EAAE,CAAC"}

package/dist/src/secret-store.d.ts

@@ -0,0 +1,21 @@
+import type { ScopedSecrets, SecretStore } from "./types.js";
+export declare class KeyringSecretStore implements SecretStore {
+    get(service: string, account: string): Promise<string | undefined>;
+    set(service: string, account: string, value: string): Promise<void>;
+    delete(service: string, account: string): Promise<void>;
+}
+export declare class MemorySecretStore implements SecretStore {
+    #private;
+    get(service: string, account: string): Promise<string | undefined>;
+    set(service: string, account: string, value: string): Promise<void>;
+    delete(service: string, account: string): Promise<void>;
+}
+export declare class ProfileSecrets implements ScopedSecrets {
+    #private;
+    constructor(store: SecretStore, applicationId: string, profileName: string);
+    get(name: string): Promise<string | undefined>;
+    require(name: string): Promise<string>;
+    set(name: string, value: string): Promise<void>;
+    delete(name: string): Promise<void>;
+}
+//# sourceMappingURL=secret-store.d.ts.map

package/dist/src/secret-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-store.d.ts","sourceRoot":"","sources":["../../src/secret-store.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE7D,qBAAa,kBAAmB,YAAW,WAAW;IACvC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAM9E;IAEY,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAM/E;IAEY,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CASnE;CACF;AAUD,qBAAa,iBAAkB,YAAW,WAAW;;IAGtC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAE9E;IAEY,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/E;IAEY,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEnE;CACF;AAED,qBAAa,cAAe,YAAW,aAAa;;IAKlD,YAAmB,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAIhF;IAEM,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAEpD;IAEY,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAQlD;IAEM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAErD;IAEM,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEzC;CACF"}

package/dist/src/secret-store.js

@@ -0,0 +1,73 @@
+import { Entry } from "@napi-rs/keyring";
+export class KeyringSecretStore {
+    async get(service, account) {
+        try {
+            return new Entry(service, account).getPassword() ?? undefined;
+        }
+        catch (error) {
+            throw keyringError("read", error);
+        }
+    }
+    async set(service, account, value) {
+        try {
+            new Entry(service, account).setPassword(value);
+        }
+        catch (error) {
+            throw keyringError("write", error);
+        }
+    }
+    async delete(service, account) {
+        const entry = new Entry(service, account);
+        try {
+            if (entry.getPassword() !== null) {
+                entry.deletePassword();
+            }
+        }
+        catch (error) {
+            throw keyringError("delete", error);
+        }
+    }
+}
+function keyringError(operation, error) {
+    const message = error instanceof Error ? error.message : String(error);
+    return new Error(`Could not ${operation} the OS credential store: ${message}. No plaintext fallback is used.`, { cause: error });
+}
+export class MemorySecretStore {
+    #values = new Map();
+    async get(service, account) {
+        return this.#values.get(`${service}\0${account}`);
+    }
+    async set(service, account, value) {
+        this.#values.set(`${service}\0${account}`, value);
+    }
+    async delete(service, account) {
+        this.#values.delete(`${service}\0${account}`);
+    }
+}
+export class ProfileSecrets {
+    #store;
+    #service;
+    #profileName;
+    constructor(store, applicationId, profileName) {
+        this.#store = store;
+        this.#service = `ai-cli-factory:${applicationId}`;
+        this.#profileName = profileName;
+    }
+    get(name) {
+        return this.#store.get(this.#service, `${this.#profileName}:${name}`);
+    }
+    async require(name) {
+        const value = await this.get(name);
+        if (!value) {
+            throw new Error(`No credential is stored for profile '${this.#profileName}'. Run 'auth login' first.`);
+        }
+        return value;
+    }
+    set(name, value) {
+        return this.#store.set(this.#service, `${this.#profileName}:${name}`, value);
+    }
+    delete(name) {
+        return this.#store.delete(this.#service, `${this.#profileName}:${name}`);
+    }
+}
+//# sourceMappingURL=secret-store.js.map

package/dist/src/secret-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-store.js","sourceRoot":"","sources":["../../src/secret-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAGzC,MAAM,OAAO,kBAAkB;IACtB,KAAK,CAAC,GAAG,CAAC,OAAe,EAAE,OAAe;QAC/C,IAAI,CAAC;YACH,OAAO,IAAI,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,GAAG,CAAC,OAAe,EAAE,OAAe,EAAE,KAAa;QAC9D,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,OAAe;QAClD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC;gBACjC,KAAK,CAAC,cAAc,EAAE,CAAC;YACzB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;CACF;AAED,SAAS,YAAY,CAAC,SAAiB,EAAE,KAAc;IACrD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,IAAI,KAAK,CACd,aAAa,SAAS,6BAA6B,OAAO,kCAAkC,EAC5F,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,iBAAiB;IACnB,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEtC,KAAK,CAAC,GAAG,CAAC,OAAe,EAAE,OAAe;QAC/C,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,KAAK,OAAO,EAAE,CAAC,CAAC;IACpD,CAAC;IAEM,KAAK,CAAC,GAAG,CAAC,OAAe,EAAE,OAAe,EAAE,KAAa;QAC9D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,KAAK,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,OAAe;QAClD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,KAAK,OAAO,EAAE,CAAC,CAAC;IAChD,CAAC;CACF;AAED,MAAM,OAAO,cAAc;IAChB,MAAM,CAAc;IACpB,QAAQ,CAAS;IACjB,YAAY,CAAS;IAE9B,YAAmB,KAAkB,EAAE,aAAqB,EAAE,WAAmB;QAC/E,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,QAAQ,GAAG,kBAAkB,aAAa,EAAE,CAAC;QAClD,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;IAClC,CAAC;IAEM,GAAG,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,IAAY;QAC/B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,wCAAwC,IAAI,CAAC,YAAY,4BAA4B,CACtF,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEM,GAAG,CAAC,IAAY,EAAE,KAAa;QACpC,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IAC/E,CAAC;IAEM,MAAM,CAAC,IAAY;QACxB,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC;CACF"}