@hawkeyexl/manni 4.3.1 → 4.4.0

package/dist/cli-2QPR2OZG.js

@@ -0,0 +1,232 @@
+#!/usr/bin/env node
+import {
+  KeyError,
+  runKeyRotate,
+  runKeySet
+} from "./chunk-OBFENF3U.js";
+import "./chunk-5YXBLLAC.js";
+import "./chunk-LAKAWRV5.js";
+import "./chunk-XSLV76YK.js";
+import "./chunk-BUXDLRDT.js";
+import "./chunk-252LNOEG.js";
+import "./chunk-PCE7QHXJ.js";
+import "./chunk-77AINBYM.js";
+import "./chunk-G7NJSREW.js";
+import "./chunk-IKEWBMCN.js";
+import "./chunk-TU2WUBVZ.js";
+import "./chunk-H2DLH2JI.js";
+import "./chunk-CYWHFSRT.js";
+import "./chunk-K3D6FPV6.js";
+import {
+  collect,
+  explicitFalse,
+  splitList
+} from "./chunk-V46OILVC.js";
+import "./chunk-RLR4TKUZ.js";
+import {
+  COMMON_FORMAT_LIST
+} from "./chunk-C6OH6CNF.js";
+import "./chunk-JVTNMVYU.js";
+import {
+  fail
+} from "./chunk-YEUYKR62.js";
+import {
+  palette,
+  shouldColor
+} from "./chunk-RNVYGWIC.js";
+import "./chunk-MNH7QO4Z.js";
+import {
+  notice
+} from "./chunk-Q35YIDBV.js";
+import {
+  package_default
+} from "./chunk-UZC7LDAQ.js";
+import "./chunk-OWBRDNRZ.js";
+import "./chunk-G3T47CFV.js";
+import "./chunk-2H7UOFLK.js";
+
+// src/key/cli.ts
+import { Command } from "commander";
+
+// src/key/reporters/json.ts
+function renderRotateJson(result) {
+  return JSON.stringify(
+    {
+      pages: result.pages,
+      manifests: result.manifests,
+      reencrypted: result.reencrypted,
+      skipped: result.skipped,
+      keyWritten: result.keyWritten
+    },
+    null,
+    2
+  );
+}
+
+// src/key/reporters/pretty.ts
+var BASELINE_NOTICE = "The citation baseline fingerprints id-less encrypted citations by their pin; re-record it with `manni cite check --write-baseline`.";
+var NARROWED = "Key not written: this run covered part of the family. Finish with a whole run under the same key: `manni key rotate --to <the same value>`.";
+var FROM_ENV = "Key not written: it comes from MANNI_ENCRYPTION_KEY. Update the secret to the value you passed.";
+var plural = (n, one, many = `${one}s`) => `${String(n)} ${n === 1 ? one : many}`;
+function setMessage(result) {
+  return result.dryRun ? `Would write encryptionKey to ${result.source}.` : `Encryption key written to ${result.source}.`;
+}
+function shortCiphertext(value) {
+  const colon = value.indexOf(":");
+  const token = colon === -1 ? value : value.slice(0, colon);
+  const suffix = colon === -1 ? "" : value.slice(colon);
+  return `${token.slice(0, 5)}\u2026${suffix}`;
+}
+function nameOf(row) {
+  if (row.kind === "metadata") return row.pointer;
+  if (row.id !== void 0) return row.id;
+  if (row.index !== void 0) return `/citations/${String(row.index)}`;
+  return `line ${String(row.line ?? 0)}`;
+}
+function closing(result) {
+  switch (result.outcome) {
+    case "written":
+      return result.configSource === void 0 ? void 0 : `Encryption key written to ${result.configSource}.`;
+    case "finished":
+      return void 0;
+    case "narrowed":
+      return NARROWED;
+    case "env":
+      return FROM_ENV;
+    case "skipped":
+      return result.skipped === 1 ? "Key not written: 1 value could not be re-encrypted. Fix it and rotate again." : `Key not written: ${String(result.skipped)} values could not be re-encrypted. Fix them and rotate again.`;
+    case "dry-run":
+      return "Dry run: nothing written.";
+  }
+}
+function renderRotatePretty(result, opts) {
+  const c = palette(opts.color);
+  const lines = [];
+  for (const page of result.pages) {
+    for (const row of page.rewritten) {
+      const gap = row.kind === "metadata" ? "  " : " ";
+      lines.push(
+        `${page.file}: ${nameOf(row)}  ${c.dim(shortCiphertext(row.from))}${gap}-> ${shortCiphertext(row.to)}`
+      );
+    }
+    for (const row of page.skipped) {
+      lines.push(`${page.file}: ${nameOf(row)}  ${c.red("skipped:")} ${row.message}`);
+    }
+  }
+  for (const manifest of result.manifests) {
+    for (const row of manifest.rewritten) {
+      lines.push(
+        `${manifest.file}: ${row.entry}${row.pointer}  ${c.dim(shortCiphertext(row.from))}  -> ${shortCiphertext(row.to)}`
+      );
+    }
+    for (const row of manifest.skipped) {
+      lines.push(
+        `${manifest.file}: ${row.entry}${row.pointer}  ${c.red("skipped:")} ${row.message}`
+      );
+    }
+  }
+  if (result.outcome === "finished" && result.configSource !== void 0) {
+    lines.push(`Finished the interrupted rotation in ${result.configSource}.`);
+  }
+  const files = result.pages.filter((page) => page.rewritten.length > 0).length + result.manifests.filter((manifest) => manifest.rewritten.length > 0).length;
+  lines.push(
+    `${plural(result.reencrypted, "value")} re-encrypted in ${plural(files, "file")}, ${String(result.skipped)} skipped`
+  );
+  const last = closing(result);
+  if (last !== void 0) lines.push(result.outcome === "skipped" ? c.red(last) : last);
+  if (result.baselineStale) lines.push(BASELINE_NOTICE);
+  return lines.join("\n");
+}
+
+// src/key/cli.ts
+var ROTATE_FORMATS = ["pretty", "json"];
+function isRotateFormat(value) {
+  return ROTATE_FORMATS.includes(value);
+}
+function buildProgram() {
+  const program = new Command();
+  program.name("key").description("Set and rotate the family key that encrypted values are encrypted with.").version(package_default.version, "-V, --version").option("--no-color", "disable colored output").showHelpAfterError("(add --help for usage)").exitOverride();
+  const color = () => shouldColor({ noColor: program.opts().color === false, isTTY: process.stdout.isTTY });
+  program.command("set").description("Write the family encryption key to manni.config.yaml; generate one when no value is given").argument("[value]", "the key, at least 32 hex or base64url characters (default: 64 random hex)").option(
+    "-c, --config <path>",
+    "the config file to write (default: the nearest manni.config.yaml, else a new one at the git root)"
+  ).option("--dry-run", "say what would be written; write nothing").addHelpText(
+    "after",
+    [
+      "",
+      "Examples:",
+      "  manni key set                          # generate 256 bits into manni.config.yaml",
+      "  manni key set --dry-run                # name the file, write nothing",
+      "  manni key set -c ops/manni.config.yaml 0123456789abcdef0123456789abcdef"
+    ].join("\n")
+  ).action(async (value, options) => {
+    try {
+      const result = await runKeySet({
+        value,
+        configPath: options.config,
+        dryRun: Boolean(options.dryRun),
+        onNotice: notice
+      });
+      process.stdout.write(`${setMessage(result)}
+`);
+      process.exitCode = 0;
+    } catch (err) {
+      fail(err);
+    }
+  });
+  program.command("rotate").description("Re-encrypt every encrypted value under a new key, then write the key").argument("[paths...]", "files, directories, or globs (default: every collection)").option(
+    "--to <value>",
+    "the new key (default: 64 random hex); required for a narrowed run and a key from MANNI_ENCRYPTION_KEY"
+  ).option("--collection <name>", "configured collection to run over; repeatable", collect, []).option("--ext <list>", "comma-separated extensions for directory walks").option("--exclude <glob>", "glob to exclude; repeatable", collect, []).option("--as <format>", "force an input format for every input").option("-c, --config <path>", "path to a manni config file").option("--allow-empty", "treat zero matched files as success").option("--no-gitignore", "include files .gitignore covers").option(
+    "--root <dir>",
+    "directory cited sources resolve from (default: cite.root from config, else the git root)"
+  ).option("--dry-run", "print what would change; write nothing").option("-f, --format <format>", `output: ${ROTATE_FORMATS.join(" | ")}`, "pretty").addHelpText(
+    "after",
+    [
+      "",
+      "Examples:",
+      "  manni key rotate                                   # every collection, then the key",
+      "  manni key rotate --dry-run                         # see every change first",
+      '  manni key rotate --collection site --to "$NEW_KEY" # part of the family',
+      '  MANNI_ENCRYPTION_KEY=\u2026 manni key rotate --to "$NEW_KEY"'
+    ].join("\n")
+  ).action(async (paths, options) => {
+    try {
+      const format = options.format;
+      if (!isRotateFormat(format)) {
+        throw new KeyError(`Unknown --format "${format}". Use ${COMMON_FORMAT_LIST}.`);
+      }
+      const result = await runKeyRotate({
+        inputs: paths,
+        collection: options.collection,
+        to: options.to,
+        exts: options.ext ? splitList(options.ext) : void 0,
+        exclude: options.exclude,
+        as: options.as,
+        configPath: options.config,
+        // `undefined` rather than `false` when absent.
+        allowEmpty: options.allowEmpty ? true : void 0,
+        respectGitignore: explicitFalse(options.gitignore),
+        root: options.root,
+        dryRun: Boolean(options.dryRun),
+        onNotice: notice
+      });
+      if (format === "json") {
+        process.stdout.write(`${renderRotateJson(result)}
+`);
+        if (result.baselineStale) notice(BASELINE_NOTICE);
+      } else {
+        process.stdout.write(`${renderRotatePretty(result, { color: color() })}
+`);
+      }
+      process.exitCode = result.exitCode;
+    } catch (err) {
+      fail(err);
+    }
+  });
+  return program;
+}
+export {
+  buildProgram
+};
+//# sourceMappingURL=cli-2QPR2OZG.js.map

package/dist/cli-2QPR2OZG.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/key/cli.ts","../src/key/reporters/json.ts","../src/key/reporters/pretty.ts"],"sourcesContent":["/**\n * The `key` domain's commander program. Mounted by `src/cli.ts` under\n * `manni key`; no entry point of its own. Proposal 0045 extends 0034's\n * grammar: a domain is a tool, or a family resource with verbs. `key` is the\n * second kind, with two verbs, `set` and `rotate`, and no default subcommand.\n *\n * clig.dev as every tool has it: the report to stdout, diagnostics to stderr,\n * colour only on a TTY and never under `NO_COLOR`/`--no-color`, exit `0` done,\n * `1` a value that could not be re-encrypted, `2` operational/usage. Nothing\n * this program prints is ever a key.\n */\nimport { Command } from \"commander\";\nimport pkg from \"../../package.json\" with { type: \"json\" };\nimport { collect, explicitFalse, splitList } from \"../shared/cli-options.js\";\nimport { shouldColor } from \"../shared/color.js\";\nimport { fail } from \"../shared/run.js\";\nimport { notice } from \"../shared/warn.js\";\nimport { COMMON_FORMAT_LIST } from \"../meta/internal.js\";\nimport { runKeyRotate } from \"./commands/rotate.js\";\nimport { runKeySet } from \"./commands/set.js\";\nimport { KeyError } from \"./errors.js\";\nimport { renderRotateJson } from \"./reporters/json.js\";\nimport { BASELINE_NOTICE, renderRotatePretty, setMessage } from \"./reporters/pretty.js\";\n\nconst ROTATE_FORMATS = [\"pretty\", \"json\"] as const;\ntype RotateFormat = (typeof ROTATE_FORMATS)[number];\n\nfunction isRotateFormat(value: string): value is RotateFormat {\n  return (ROTATE_FORMATS as readonly string[]).includes(value);\n}\n\n/** What commander hands `set`'s action. */\ninterface SetCliOptions {\n  /** `-c, --config <path>`. */\n  config?: string;\n  dryRun?: boolean;\n}\n\n/**\n * What commander hands `rotate`'s action. The `--no-<thing>` flags are\n * `boolean` and never `undefined`: commander supplies `true` when the flag is\n * absent, so only the explicit `false` travels to the core (`explicitFalse`).\n */\ninterface RotateCliOptions {\n  to?: string;\n  /** `--collection <name>`, repeatable; commander's default value is `[]`. */\n  collection: string[];\n  /** `--ext <list>`; the command splits it. */\n  ext?: string;\n  /** `--exclude <glob>`, repeatable; commander's default value is `[]`. */\n  exclude: string[];\n  as?: string;\n  config?: string;\n  allowEmpty?: boolean;\n  /** `--no-gitignore`. */\n  gitignore: boolean;\n  root?: string;\n  dryRun?: boolean;\n  /** `-f, --format <format>`. Always a string: the declaration has a default. */\n  format: string;\n}\n\nexport function buildProgram(): Command {\n  const program = new Command();\n  program\n    .name(\"key\")\n    .description(\"Set and rotate the family key that encrypted values are encrypted with.\")\n    .version(pkg.version, \"-V, --version\")\n    .option(\"--no-color\", \"disable colored output\")\n    // A pointer, not the whole help screen: the message that precedes it\n    // already names the offending flag.\n    .showHelpAfterError(\"(add --help for usage)\")\n    // MUST come before the `.command()` calls below. `copyInheritedSettings`\n    // copies `_exitCallback` by value at subcommand-creation time, so an\n    // `exitOverride()` installed afterwards leaves every subcommand still\n    // calling `process.exit(1)`.\n    .exitOverride();\n\n  /** This domain's `--no-color`, wherever the domain is mounted. */\n  const color = (): boolean =>\n    shouldColor({ noColor: program.opts().color === false, isTTY: process.stdout.isTTY });\n\n  program\n    .command(\"set\")\n    .description(\"Write the family encryption key to manni.config.yaml; generate one when no value is given\")\n    .argument(\"[value]\", \"the key, at least 32 hex or base64url characters (default: 64 random hex)\")\n    .option(\n      \"-c, --config <path>\",\n      \"the config file to write (default: the nearest manni.config.yaml, else a new one at the git root)\",\n    )\n    .option(\"--dry-run\", \"say what would be written; write nothing\")\n    .addHelpText(\n      \"after\",\n      [\n        \"\",\n        \"Examples:\",\n        \"  manni key set                          # generate 256 bits into manni.config.yaml\",\n        \"  manni key set --dry-run                # name the file, write nothing\",\n        \"  manni key set -c ops/manni.config.yaml 0123456789abcdef0123456789abcdef\",\n      ].join(\"\\n\"),\n    )\n    .action(async (value: string | undefined, options: SetCliOptions) => {\n      try {\n        const result = await runKeySet({\n          value,\n          configPath: options.config,\n          dryRun: Boolean(options.dryRun),\n          onNotice: notice,\n        });\n        process.stdout.write(`${setMessage(result)}\\n`);\n        process.exitCode = 0;\n      } catch (err) {\n        fail(err);\n      }\n    });\n\n  program\n    .command(\"rotate\")\n    .description(\"Re-encrypt every encrypted value under a new key, then write the key\")\n    .argument(\"[paths...]\", \"files, directories, or globs (default: every collection)\")\n    .option(\n      \"--to <value>\",\n      \"the new key (default: 64 random hex); required for a narrowed run and a key from MANNI_ENCRYPTION_KEY\",\n    )\n    .option(\"--collection <name>\", \"configured collection to run over; repeatable\", collect, [])\n    .option(\"--ext <list>\", \"comma-separated extensions for directory walks\")\n    .option(\"--exclude <glob>\", \"glob to exclude; repeatable\", collect, [])\n    .option(\"--as <format>\", \"force an input format for every input\")\n    .option(\"-c, --config <path>\", \"path to a manni config file\")\n    .option(\"--allow-empty\", \"treat zero matched files as success\")\n    .option(\"--no-gitignore\", \"include files .gitignore covers\")\n    .option(\n      \"--root <dir>\",\n      \"directory cited sources resolve from (default: cite.root from config, else the git root)\",\n    )\n    .option(\"--dry-run\", \"print what would change; write nothing\")\n    .option(\"-f, --format <format>\", `output: ${ROTATE_FORMATS.join(\" | \")}`, \"pretty\")\n    .addHelpText(\n      \"after\",\n      [\n        \"\",\n        \"Examples:\",\n        \"  manni key rotate                                   # every collection, then the key\",\n        \"  manni key rotate --dry-run                         # see every change first\",\n        '  manni key rotate --collection site --to \"$NEW_KEY\" # part of the family',\n        '  MANNI_ENCRYPTION_KEY=… manni key rotate --to \"$NEW_KEY\"',\n      ].join(\"\\n\"),\n    )\n    .action(async (paths: string[], options: RotateCliOptions) => {\n      try {\n        const format = options.format;\n        if (!isRotateFormat(format)) {\n          throw new KeyError(`Unknown --format \"${format}\". Use ${COMMON_FORMAT_LIST}.`);\n        }\n        const result = await runKeyRotate({\n          inputs: paths,\n          collection: options.collection,\n          to: options.to,\n          exts: options.ext ? splitList(options.ext) : undefined,\n          exclude: options.exclude,\n          as: options.as,\n          configPath: options.config,\n          // `undefined` rather than `false` when absent.\n          allowEmpty: options.allowEmpty ? true : undefined,\n          respectGitignore: explicitFalse(options.gitignore),\n          root: options.root,\n          dryRun: Boolean(options.dryRun),\n          onNotice: notice,\n        });\n        if (format === \"json\") {\n          process.stdout.write(`${renderRotateJson(result)}\\n`);\n          // stdout is the JSON's; the notice is a diagnostic.\n          if (result.baselineStale) notice(BASELINE_NOTICE);\n        } else {\n          process.stdout.write(`${renderRotatePretty(result, { color: color() })}\\n`);\n        }\n        process.exitCode = result.exitCode;\n      } catch (err) {\n        fail(err);\n      }\n    });\n\n  return program;\n}\n","/**\n * JSON output for `key rotate`: every page and every local external-metadata\n * manifest with something encrypted in it, each value's full ciphertext\n * before and after, and the counts. The key is never in it.\n */\nimport type { KeyRotateResult } from \"../types.js\";\n\nexport function renderRotateJson(result: KeyRotateResult): string {\n  return JSON.stringify(\n    {\n      pages: result.pages,\n      manifests: result.manifests,\n      reencrypted: result.reencrypted,\n      skipped: result.skipped,\n      keyWritten: result.keyWritten,\n    },\n    null,\n    2,\n  );\n}\n","/**\n * Pretty output for `key set` and `key rotate`. A ciphertext is shown as `~`\n * and its first four characters, then `…`, with a citation's line suffix\n * after it: `~AQx7…`, `~AQm4…:2`. The full values are in `-f json`; the key\n * is in neither. Colour via `shouldColor`; never under `--no-color`/`NO_COLOR`.\n */\nimport { palette } from \"../../shared/color.js\";\nimport type { KeyRotateResult, KeySetResult, RotatedValue, SkippedValue } from \"../types.js\";\n\nexport interface PrettyOptions {\n  color: boolean;\n}\n\n/** Said at the end of a writing rotation when a citation baseline exists. */\nexport const BASELINE_NOTICE =\n  \"The citation baseline fingerprints id-less encrypted citations by their pin; re-record it with `manni cite check --write-baseline`.\";\n\nconst NARROWED =\n  \"Key not written: this run covered part of the family. Finish with a whole run under the same key: `manni key rotate --to <the same value>`.\";\nconst FROM_ENV =\n  \"Key not written: it comes from MANNI_ENCRYPTION_KEY. Update the secret to the value you passed.\";\n\nconst plural = (n: number, one: string, many = `${one}s`): string =>\n  `${String(n)} ${n === 1 ? one : many}`;\n\n/** What `set` says: the file, never the key. */\nexport function setMessage(result: KeySetResult): string {\n  return result.dryRun\n    ? `Would write encryptionKey to ${result.source}.`\n    : `Encryption key written to ${result.source}.`;\n}\n\n/** `~AQx7…`, and a citation's line suffix after it: `~AQm4…:2`. */\nexport function shortCiphertext(value: string): string {\n  // base64url has no `:`, so the first one starts the line suffix.\n  const colon = value.indexOf(\":\");\n  const token = colon === -1 ? value : value.slice(0, colon);\n  const suffix = colon === -1 ? \"\" : value.slice(colon);\n  return `${token.slice(0, 5)}…${suffix}`;\n}\n\n/** A metadata value by its pointer; a citation by its id, else where it sits. */\nfunction nameOf(row: RotatedValue | SkippedValue): string {\n  if (row.kind === \"metadata\") return row.pointer;\n  if (row.id !== undefined) return row.id;\n  if (row.index !== undefined) return `/citations/${String(row.index)}`;\n  return `line ${String(row.line ?? 0)}`;\n}\n\nfunction closing(result: KeyRotateResult): string | undefined {\n  switch (result.outcome) {\n    case \"written\":\n      return result.configSource === undefined\n        ? undefined\n        : `Encryption key written to ${result.configSource}.`;\n    case \"finished\":\n      // Said before the counts: the key was written by the run that stopped.\n      return undefined;\n    case \"narrowed\":\n      return NARROWED;\n    case \"env\":\n      return FROM_ENV;\n    case \"skipped\":\n      return result.skipped === 1\n        ? \"Key not written: 1 value could not be re-encrypted. Fix it and rotate again.\"\n        : `Key not written: ${String(result.skipped)} values could not be re-encrypted. Fix them and rotate again.`;\n    case \"dry-run\":\n      return \"Dry run: nothing written.\";\n  }\n}\n\nexport function renderRotatePretty(result: KeyRotateResult, opts: PrettyOptions): string {\n  const c = palette(opts.color);\n  const lines: string[] = [];\n  for (const page of result.pages) {\n    for (const row of page.rewritten) {\n      // A metadata value has no line suffix; two spaces keep its arrow in the\n      // column a `:L` suffix would take.\n      const gap = row.kind === \"metadata\" ? \"  \" : \" \";\n      lines.push(\n        `${page.file}: ${nameOf(row)}  ${c.dim(shortCiphertext(row.from))}${gap}-> ${shortCiphertext(row.to)}`,\n      );\n    }\n    for (const row of page.skipped) {\n      lines.push(`${page.file}: ${nameOf(row)}  ${c.red(\"skipped:\")} ${row.message}`);\n    }\n  }\n  // A manifest value is named by the entry it belongs to and the pointer\n  // inside it, so one line says which document's private half moved.\n  for (const manifest of result.manifests) {\n    for (const row of manifest.rewritten) {\n      lines.push(\n        `${manifest.file}: ${row.entry}${row.pointer}  ${c.dim(shortCiphertext(row.from))}  -> ${shortCiphertext(row.to)}`,\n      );\n    }\n    for (const row of manifest.skipped) {\n      lines.push(\n        `${manifest.file}: ${row.entry}${row.pointer}  ${c.red(\"skipped:\")} ${row.message}`,\n      );\n    }\n  }\n  if (result.outcome === \"finished\" && result.configSource !== undefined) {\n    lines.push(`Finished the interrupted rotation in ${result.configSource}.`);\n  }\n  const files =\n    result.pages.filter((page) => page.rewritten.length > 0).length +\n    result.manifests.filter((manifest) => manifest.rewritten.length > 0).length;\n  lines.push(\n    `${plural(result.reencrypted, \"value\")} re-encrypted in ${plural(files, \"file\")}, ${String(result.skipped)} skipped`,\n  );\n  const last = closing(result);\n  if (last !== undefined) lines.push(result.outcome === \"skipped\" ? c.red(last) : last);\n  if (result.baselineStale) lines.push(BASELINE_NOTICE);\n  return lines.join(\"\\n\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAWA,SAAS,eAAe;;;ACJjB,SAAS,iBAAiB,QAAiC;AAChE,SAAO,KAAK;AAAA,IACV;AAAA,MACE,OAAO,OAAO;AAAA,MACd,WAAW,OAAO;AAAA,MAClB,aAAa,OAAO;AAAA,MACpB,SAAS,OAAO;AAAA,MAChB,YAAY,OAAO;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;;;ACLO,IAAM,kBACX;AAEF,IAAM,WACJ;AACF,IAAM,WACJ;AAEF,IAAM,SAAS,CAAC,GAAW,KAAa,OAAO,GAAG,GAAG,QACnD,GAAG,OAAO,CAAC,CAAC,IAAI,MAAM,IAAI,MAAM,IAAI;AAG/B,SAAS,WAAW,QAA8B;AACvD,SAAO,OAAO,SACV,gCAAgC,OAAO,MAAM,MAC7C,6BAA6B,OAAO,MAAM;AAChD;AAGO,SAAS,gBAAgB,OAAuB;AAErD,QAAM,QAAQ,MAAM,QAAQ,GAAG;AAC/B,QAAM,QAAQ,UAAU,KAAK,QAAQ,MAAM,MAAM,GAAG,KAAK;AACzD,QAAM,SAAS,UAAU,KAAK,KAAK,MAAM,MAAM,KAAK;AACpD,SAAO,GAAG,MAAM,MAAM,GAAG,CAAC,CAAC,SAAI,MAAM;AACvC;AAGA,SAAS,OAAO,KAA0C;AACxD,MAAI,IAAI,SAAS,WAAY,QAAO,IAAI;AACxC,MAAI,IAAI,OAAO,OAAW,QAAO,IAAI;AACrC,MAAI,IAAI,UAAU,OAAW,QAAO,cAAc,OAAO,IAAI,KAAK,CAAC;AACnE,SAAO,QAAQ,OAAO,IAAI,QAAQ,CAAC,CAAC;AACtC;AAEA,SAAS,QAAQ,QAA6C;AAC5D,UAAQ,OAAO,SAAS;AAAA,IACtB,KAAK;AACH,aAAO,OAAO,iBAAiB,SAC3B,SACA,6BAA6B,OAAO,YAAY;AAAA,IACtD,KAAK;AAEH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,OAAO,YAAY,IACtB,iFACA,oBAAoB,OAAO,OAAO,OAAO,CAAC;AAAA,IAChD,KAAK;AACH,aAAO;AAAA,EACX;AACF;AAEO,SAAS,mBAAmB,QAAyB,MAA6B;AACvF,QAAM,IAAI,QAAQ,KAAK,KAAK;AAC5B,QAAM,QAAkB,CAAC;AACzB,aAAW,QAAQ,OAAO,OAAO;AAC/B,eAAW,OAAO,KAAK,WAAW;AAGhC,YAAM,MAAM,IAAI,SAAS,aAAa,OAAO;AAC7C,YAAM;AAAA,QACJ,GAAG,KAAK,IAAI,KAAK,OAAO,GAAG,CAAC,KAAK,EAAE,IAAI,gBAAgB,IAAI,IAAI,CAAC,CAAC,GAAG,GAAG,MAAM,gBAAgB,IAAI,EAAE,CAAC;AAAA,MACtG;AAAA,IACF;AACA,eAAW,OAAO,KAAK,SAAS;AAC9B,YAAM,KAAK,GAAG,KAAK,IAAI,KAAK,OAAO,GAAG,CAAC,KAAK,EAAE,IAAI,UAAU,CAAC,IAAI,IAAI,OAAO,EAAE;AAAA,IAChF;AAAA,EACF;AAGA,aAAW,YAAY,OAAO,WAAW;AACvC,eAAW,OAAO,SAAS,WAAW;AACpC,YAAM;AAAA,QACJ,GAAG,SAAS,IAAI,KAAK,IAAI,KAAK,GAAG,IAAI,OAAO,KAAK,EAAE,IAAI,gBAAgB,IAAI,IAAI,CAAC,CAAC,QAAQ,gBAAgB,IAAI,EAAE,CAAC;AAAA,MAClH;AAAA,IACF;AACA,eAAW,OAAO,SAAS,SAAS;AAClC,YAAM;AAAA,QACJ,GAAG,SAAS,IAAI,KAAK,IAAI,KAAK,GAAG,IAAI,OAAO,KAAK,EAAE,IAAI,UAAU,CAAC,IAAI,IAAI,OAAO;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACA,MAAI,OAAO,YAAY,cAAc,OAAO,iBAAiB,QAAW;AACtE,UAAM,KAAK,wCAAwC,OAAO,YAAY,GAAG;AAAA,EAC3E;AACA,QAAM,QACJ,OAAO,MAAM,OAAO,CAAC,SAAS,KAAK,UAAU,SAAS,CAAC,EAAE,SACzD,OAAO,UAAU,OAAO,CAAC,aAAa,SAAS,UAAU,SAAS,CAAC,EAAE;AACvE,QAAM;AAAA,IACJ,GAAG,OAAO,OAAO,aAAa,OAAO,CAAC,oBAAoB,OAAO,OAAO,MAAM,CAAC,KAAK,OAAO,OAAO,OAAO,CAAC;AAAA,EAC5G;AACA,QAAM,OAAO,QAAQ,MAAM;AAC3B,MAAI,SAAS,OAAW,OAAM,KAAK,OAAO,YAAY,YAAY,EAAE,IAAI,IAAI,IAAI,IAAI;AACpF,MAAI,OAAO,cAAe,OAAM,KAAK,eAAe;AACpD,SAAO,MAAM,KAAK,IAAI;AACxB;;;AF1FA,IAAM,iBAAiB,CAAC,UAAU,MAAM;AAGxC,SAAS,eAAe,OAAsC;AAC5D,SAAQ,eAAqC,SAAS,KAAK;AAC7D;AAiCO,SAAS,eAAwB;AACtC,QAAM,UAAU,IAAI,QAAQ;AAC5B,UACG,KAAK,KAAK,EACV,YAAY,yEAAyE,EACrF,QAAQ,gBAAI,SAAS,eAAe,EACpC,OAAO,cAAc,wBAAwB,EAG7C,mBAAmB,wBAAwB,EAK3C,aAAa;AAGhB,QAAM,QAAQ,MACZ,YAAY,EAAE,SAAS,QAAQ,KAAK,EAAE,UAAU,OAAO,OAAO,QAAQ,OAAO,MAAM,CAAC;AAEtF,UACG,QAAQ,KAAK,EACb,YAAY,2FAA2F,EACvG,SAAS,WAAW,2EAA2E,EAC/F;AAAA,IACC;AAAA,IACA;AAAA,EACF,EACC,OAAO,aAAa,0CAA0C,EAC9D;AAAA,IACC;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb,EACC,OAAO,OAAO,OAA2B,YAA2B;AACnE,QAAI;AACF,YAAM,SAAS,MAAM,UAAU;AAAA,QAC7B;AAAA,QACA,YAAY,QAAQ;AAAA,QACpB,QAAQ,QAAQ,QAAQ,MAAM;AAAA,QAC9B,UAAU;AAAA,MACZ,CAAC;AACD,cAAQ,OAAO,MAAM,GAAG,WAAW,MAAM,CAAC;AAAA,CAAI;AAC9C,cAAQ,WAAW;AAAA,IACrB,SAAS,KAAK;AACZ,WAAK,GAAG;AAAA,IACV;AAAA,EACF,CAAC;AAEH,UACG,QAAQ,QAAQ,EAChB,YAAY,sEAAsE,EAClF,SAAS,cAAc,0DAA0D,EACjF;AAAA,IACC;AAAA,IACA;AAAA,EACF,EACC,OAAO,uBAAuB,iDAAiD,SAAS,CAAC,CAAC,EAC1F,OAAO,gBAAgB,gDAAgD,EACvE,OAAO,oBAAoB,+BAA+B,SAAS,CAAC,CAAC,EACrE,OAAO,iBAAiB,uCAAuC,EAC/D,OAAO,uBAAuB,6BAA6B,EAC3D,OAAO,iBAAiB,qCAAqC,EAC7D,OAAO,kBAAkB,iCAAiC,EAC1D;AAAA,IACC;AAAA,IACA;AAAA,EACF,EACC,OAAO,aAAa,wCAAwC,EAC5D,OAAO,yBAAyB,WAAW,eAAe,KAAK,KAAK,CAAC,IAAI,QAAQ,EACjF;AAAA,IACC;AAAA,IACA;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb,EACC,OAAO,OAAO,OAAiB,YAA8B;AAC5D,QAAI;AACF,YAAM,SAAS,QAAQ;AACvB,UAAI,CAAC,eAAe,MAAM,GAAG;AAC3B,cAAM,IAAI,SAAS,qBAAqB,MAAM,UAAU,kBAAkB,GAAG;AAAA,MAC/E;AACA,YAAM,SAAS,MAAM,aAAa;AAAA,QAChC,QAAQ;AAAA,QACR,YAAY,QAAQ;AAAA,QACpB,IAAI,QAAQ;AAAA,QACZ,MAAM,QAAQ,MAAM,UAAU,QAAQ,GAAG,IAAI;AAAA,QAC7C,SAAS,QAAQ;AAAA,QACjB,IAAI,QAAQ;AAAA,QACZ,YAAY,QAAQ;AAAA;AAAA,QAEpB,YAAY,QAAQ,aAAa,OAAO;AAAA,QACxC,kBAAkB,cAAc,QAAQ,SAAS;AAAA,QACjD,MAAM,QAAQ;AAAA,QACd,QAAQ,QAAQ,QAAQ,MAAM;AAAA,QAC9B,UAAU;AAAA,MACZ,CAAC;AACD,UAAI,WAAW,QAAQ;AACrB,gBAAQ,OAAO,MAAM,GAAG,iBAAiB,MAAM,CAAC;AAAA,CAAI;AAEpD,YAAI,OAAO,cAAe,QAAO,eAAe;AAAA,MAClD,OAAO;AACL,gBAAQ,OAAO,MAAM,GAAG,mBAAmB,QAAQ,EAAE,OAAO,MAAM,EAAE,CAAC,CAAC;AAAA,CAAI;AAAA,MAC5E;AACA,cAAQ,WAAW,OAAO;AAAA,IAC5B,SAAS,KAAK;AACZ,WAAK,GAAG;AAAA,IACV;AAAA,EACF,CAAC;AAEH,SAAO;AACT;","names":[]}